last executing test programs: 2.34422826s ago: executing program 3 (id=266): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x3f, 0x69, 0xfd, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0xff, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0x8, 0x8, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x41000, 0xfffc}, 0xddf8ffdb, 0x0, 0x100000, 0x110, 0x0, 0xf801, 0xeeee0000, [0x80000000, 0x0, 0x1, 0x1]}) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x1d9) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000240)={0x10001, 0x402000, 0x1000000, 0xfffffffc, 0xc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.194549073s ago: executing program 3 (id=267): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000300)='./bus\x00', 0x169941, 0x16b) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000bc0)={0x0, 0x0, 0xfffffffffffffffa}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={r3, 0x4, 0x0, [0x806f, 0x0, 0x3, 0x2, 0x6], [0x6, 0x7, 0x1, 0x5, 0x80000000008002, 0x0, 0x5, 0x2, 0x5, 0x802, 0x9, 0x200000100, 0xffffffffffffffff, 0xfffffffffffffff4, 0x4a, 0x5, 0xfffffffffffffffd, 0xc, 0xdd, 0x5, 0x1, 0x2a6, 0x2000000003, 0xc3d, 0x8000003, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x2, 0x800000000000001, 0x7, 0xfffffffffffffffb, 0x81, 0x100, 0x5, 0x6, 0x101, 0x3, 0xf, 0x8000000000000000, 0x7, 0x1, 0x8, 0x7, 0x6a8, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x3, 0x8000000000000000, 0x5, 0x9, 0x80008000, 0x8000000000000000, 0x40000000000004, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x0, 0x4, 0x8000, 0xc9, 0x7, 0x10000000000006, 0x9, 0x82c, 0x8000, 0xe000000000000, 0x8f, 0x11, 0x0, 0x8, 0x26, 0xffffffffffffffff, 0x7, 0xbfa, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x4, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x2, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000003, 0xe, 0x0, 0x1, 0x300000003, 0x5, 0x7, 0x406, 0x3, 0x6, 0x5, 0xbf4, 0x3, 0x10000, 0x7fffffff, 0x7, 0x3, 0x1]}) r4 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r4, 0x40246f4c, &(0x7f0000000000)={0x30a32c1, 0x1, @qam={0x1, 0x0, 0xe}}) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$char_usb(r5, &(0x7f0000000500)="68629dd69158", 0x6) getdents(r5, &(0x7f0000000100)=""/138, 0x8a) io_uring_setup(0xa77, &(0x7f00000004c0)={0x0, 0x1ae0, 0x800, 0x21, 0x33a}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x2000000a, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x10a) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r7, &(0x7f0000000c40)=ANY=[], 0x13) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1, r10}}, 0x40) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.985767044s ago: executing program 2 (id=271): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="340100001700010029bd700000000000ac1414bb00000000000000000000000000000000000000002001000000000000000000000000000120010000000000000000000000000001e000000200000000000000000000000000000000000000000200008084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000200000000400000000000060000000000000000000000000000000000000000000000000000000000000000000000000009000000ba6b6e000201000000000000000400000000000000000000000000000c000800080008000101"], 0x134}}, 0x0) pwritev(r0, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf93", 0xa1}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x8, 0x20000006) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.814796031s ago: executing program 2 (id=272): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000014c0)=ANY=[@ANYRESOCT=r0], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000300)={0xc000003, 0x0, 0x0, 0x300, 0x4000007}) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x200, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0xfe, "8200"}, 0x4, 0x2, {}, 0x20800, 0x0, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001900)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a0012000a002800000019002d4400009b84136ef75afb83de066a5b00e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[r8, r8, r8], 0x3}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'veth0_vlan\x00'}) getdents64(r1, &(0x7f0000000400)=""/110, 0x6e) syz_usb_connect_ath9k(0x3, 0x5a, 0xfffffffffffffffe, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00e1000000000004000b00"], 0x1c}}, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r9, 0x0, 0x21, 0x0, &(0x7f0000000100)) close(r4) accept(r6, &(0x7f0000000000)=@tipc, &(0x7f0000000140)=0x80) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) r10 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r10, 0xc0045540, &(0x7f0000000280)) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r11, &(0x7f0000000480)="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", 0x1000, 0x44, &(0x7f0000001480)={0xa, 0x4e24, 0x6, @remote, 0x4}, 0x1c) 1.535373931s ago: executing program 0 (id=274): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0xf5, 0x7, 0x2, @private2, @remote, 0x20, 0x10, 0x7, 0x80000000}}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x0, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x4, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0xf, 0x0, 0x7c], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xb, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x3, 0xd, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x4040801) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 1.5351263s ago: executing program 1 (id=275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r2, 0x7, 0x2}) r3 = eventfd2(0xe5c, 0x80000) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}, 0x1, 0x4801000000000000}, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@deltaction={0x24, 0x31, 0x200, 0x70bd2d, 0x25dfdc02, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x24}}, 0x4800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x400, 0x70bd2b, 0xffffbfff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0x2, 0x3, 0x4, 0x2, 0xfffffff6, 0x4, 0x5}}}}]}, 0x58}}, 0x20040084) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) r6 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x5c1302) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r7, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r7, 0x1) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000001c0)={0x30000009}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0x8001, 0x1}) 1.404009266s ago: executing program 0 (id=276): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000009a40), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000009b00)={0x0, 0x0, &(0x7f0000009ac0)={&(0x7f0000009a80)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {0x0, 0x4000}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008004) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$kcm(r2, &(0x7f00000041c0)={&(0x7f0000000040)=@isdn={0x22, 0x6, 0x7, 0x7, 0x15}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)="217b4c4ceb975227ea3dc51d2b198814e6aa4c2b7ee60caead4995a44660193b", 0x20}, {&(0x7f0000000100)="06ca59ca64f37375c4cb1cfd", 0xc}], 0x2, &(0x7f0000001dc0)=[{0xb0, 0x101, 0x59, "594625df81a60497f383bd53d1071ac32c45815cff18533aa510790c6199fb794fb6c86a754173122781ebbb651e836d01cc1d66edee7f99a0c4fd1d6b3c146643a0843912f2dcad5081c4e26cfbd584d4df82d2f53a3b6538284624df7ddbd090cb7b815e713b5cb9a756d1d293d1b3c947d34951dad16e6f8153bf7c6b714c31accd80f79df806ca877058c2033fffd9a27a59a46bb014d911134a32"}, {0x10, 0x10a, 0x1}, {0x38, 0x112, 0x5c0, "267ea348486044f19add37442b96d3fdbffeeaafa5ab5367faf440b0a92502fba492"}, {0x100, 0x10e, 0x1, "b2ce18f75871563c6d2a457d6b4a95cd24274eeb6ce9978fe210bdf10a6b4cc877549819dca5173d2353cbca0b06463acb96b6e2c92c13e546707db689ba85f6b242ddc967f4d5c63517b36f12ae8ec278c024b8102cac386401d82c6fb8d8902bb98b67ae28d4289ebb1a70a90bbdc5ef6d1466cfa34c0c2279f3b902a9960f493d90c84feaf9bc4ca52a0a01b90bbffc575fbd03402d2a808d27aaf90c60912b6fab7a084f133b707412fae848bcd29ea96bfbac3de05b3ef3e310952484baf2cd33c8d099fea88f482c5d25cac47ff54c8fd884af0f56944136bc257400f120b066a84c42484135"}, {0x1010, 0x118, 0x79a6aee0, "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"}, {0x70, 0x101, 0x1, "2f24a11c2ca324451d718ce2085e96406adfb87c3199ae29ca2dc2d1d57fcfeecb71bcb2b22a0ba1e7562256f5e28b34c5c2c4dace68b9550b9f30f13fa7bf649c662d8071c14ecc61d7aedf5d6cc14e0db800fa05010cb7607e10ed2f"}, {0x38, 0x3a, 0xaed6, "8c089eb446acf177d8906446e4b4550c8dfae8de949517dc3016968be845eaf2531e9d652b67"}, {0x1010, 0x10c, 0x7f, "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"}, {0x38, 0x10a, 0x4, "ade3ccf37abecec9d48322122c905954706c07f1a4bbd6a378e478ef6492766d046ac3d860"}, {0xe0, 0x111, 0x1, "8088997b427e698975edd8c512975e5b14affff49def9c23d4e555233e606e89a6bbeadcb3718740b31882c565a064203545b15d1a4954dc2e223a0d257a6ea230e501520e784cc849a3464be5eeb45d57d932e147e78e48e66c8ea7bbce04d398781fe51f987e52d4d7f7ea460e51c6e8b405e1dcb673a6cf3d0a961fb59abe00de55003426b858f8eb2b7712ea56bc9ef6892a48e149fecd6f6db5e12acaa7aa7c78fd076cd5eb310b0135d278c2e76588c117cb55a33c086f72f78d0b5e762b9e7aa4f15c3f12418ee1f3"}], 0x23d8}, 0x0) madvise(&(0x7f0000185000/0x4000)=nil, 0x4000, 0xa) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000009a40), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000009b00)={0x0, 0x0, &(0x7f0000009ac0)={&(0x7f0000009a80)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {0x0, 0x4000}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008004) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) sendmsg$kcm(r2, &(0x7f00000041c0)={&(0x7f0000000040)=@isdn={0x22, 0x6, 0x7, 0x7, 0x15}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)="217b4c4ceb975227ea3dc51d2b198814e6aa4c2b7ee60caead4995a44660193b", 0x20}, {&(0x7f0000000100)="06ca59ca64f37375c4cb1cfd", 0xc}], 0x2, &(0x7f0000001dc0)=[{0xb0, 0x101, 0x59, "594625df81a60497f383bd53d1071ac32c45815cff18533aa510790c6199fb794fb6c86a754173122781ebbb651e836d01cc1d66edee7f99a0c4fd1d6b3c146643a0843912f2dcad5081c4e26cfbd584d4df82d2f53a3b6538284624df7ddbd090cb7b815e713b5cb9a756d1d293d1b3c947d34951dad16e6f8153bf7c6b714c31accd80f79df806ca877058c2033fffd9a27a59a46bb014d911134a32"}, {0x10, 0x10a, 0x1}, {0x38, 0x112, 0x5c0, "267ea348486044f19add37442b96d3fdbffeeaafa5ab5367faf440b0a92502fba492"}, {0x100, 0x10e, 0x1, "b2ce18f75871563c6d2a457d6b4a95cd24274eeb6ce9978fe210bdf10a6b4cc877549819dca5173d2353cbca0b06463acb96b6e2c92c13e546707db689ba85f6b242ddc967f4d5c63517b36f12ae8ec278c024b8102cac386401d82c6fb8d8902bb98b67ae28d4289ebb1a70a90bbdc5ef6d1466cfa34c0c2279f3b902a9960f493d90c84feaf9bc4ca52a0a01b90bbffc575fbd03402d2a808d27aaf90c60912b6fab7a084f133b707412fae848bcd29ea96bfbac3de05b3ef3e310952484baf2cd33c8d099fea88f482c5d25cac47ff54c8fd884af0f56944136bc257400f120b066a84c42484135"}, {0x1010, 0x118, 0x79a6aee0, "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"}, {0x70, 0x101, 0x1, "2f24a11c2ca324451d718ce2085e96406adfb87c3199ae29ca2dc2d1d57fcfeecb71bcb2b22a0ba1e7562256f5e28b34c5c2c4dace68b9550b9f30f13fa7bf649c662d8071c14ecc61d7aedf5d6cc14e0db800fa05010cb7607e10ed2f"}, {0x38, 0x3a, 0xaed6, "8c089eb446acf177d8906446e4b4550c8dfae8de949517dc3016968be845eaf2531e9d652b67"}, {0x1010, 0x10c, 0x7f, "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"}, {0x38, 0x10a, 0x4, "ade3ccf37abecec9d48322122c905954706c07f1a4bbd6a378e478ef6492766d046ac3d860"}, {0xe0, 0x111, 0x1, "8088997b427e698975edd8c512975e5b14affff49def9c23d4e555233e606e89a6bbeadcb3718740b31882c565a064203545b15d1a4954dc2e223a0d257a6ea230e501520e784cc849a3464be5eeb45d57d932e147e78e48e66c8ea7bbce04d398781fe51f987e52d4d7f7ea460e51c6e8b405e1dcb673a6cf3d0a961fb59abe00de55003426b858f8eb2b7712ea56bc9ef6892a48e149fecd6f6db5e12acaa7aa7c78fd076cd5eb310b0135d278c2e76588c117cb55a33c086f72f78d0b5e762b9e7aa4f15c3f12418ee1f3"}], 0x23d8}, 0x0) (async) madvise(&(0x7f0000185000/0x4000)=nil, 0x4000, 0xa) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) (async) 1.402398788s ago: executing program 0 (id=277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x100, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x400880d}, 0x80) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r3) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r1, @ANYRES64=r1, @ANYRESHEX=r3], 0x1c}}, 0x8050) read(r1, &(0x7f0000000140)=""/87, 0x57) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x28, r4, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xcb}]}]}, 0x28}}, 0x0) 1.334677s ago: executing program 1 (id=278): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6}]}) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x3, 0x2, 0x6], [0x6, 0x7, 0x1, 0x5, 0x80000000008002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0xffffffffffffffff, 0xfffffffffffffff4, 0x4a, 0x5, 0x2a3b, 0xc, 0xdd, 0x5, 0x1, 0x2a6, 0x2000000003, 0xc3d, 0x8000003, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x2, 0x800000000000001, 0x7, 0xfffffffffffffffb, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0xf, 0x8000000000000000, 0x7, 0x1, 0x8, 0x7, 0x6a8, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x3, 0x8000000000000000, 0x5, 0x9, 0x80008000, 0x8000000000000000, 0x40000000000004, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x0, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0x8f, 0x11, 0x0, 0x8, 0x26, 0xffffffffffffffff, 0x7, 0xbfa, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x1, 0x300000003, 0x5, 0x7, 0x406, 0x3, 0x6, 0x5, 0xbf4, 0x3, 0x10000, 0x7fffffff, 0x7, 0x3, 0x1]}) io_uring_setup(0xa77, &(0x7f00000004c0)={0x0, 0x1ae0, 0x800, 0x21, 0x33a}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 12) 1.204774776s ago: executing program 2 (id=279): syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x810) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000062006e4a6bf043000001010040008c6d051d64c1390000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000036000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x200) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x0, 0x60000, 0x0, 0xfffffffb, 0x6, 0xfffffffc, 0x10000000, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x7f}, 'port1\x00', 0x80, 0x14, 0x4, 0xfffffeff, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 1.053888281s ago: executing program 2 (id=280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "c4d0"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.053202741s ago: executing program 2 (id=281): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000140), 0x1, 0x80000) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x607ec9e6d9dab38b, 0x42) fcntl$setstatus(r4, 0x4, 0x2000) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001f40)={0x0, 0x8000002, 0x40}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) fchdir(r6) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) syz_clone(0x400a200, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000015c000/0x3000)=nil, 0x3000) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000640)={@local, @multicast2, 0x0}, &(0x7f0000000880)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000008c0)={@empty, 0x75, r7}) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000540)={&(0x7f00000001c0)={0x30, r8, 0x10, 0x70bd2d, 0x25dfdc03, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6c}]}, 0x30}, 0x1, 0x0, 0x0, 0x4840}, 0x4810) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000f40)={{r1}, r2, 0x4, @inherit={0x88, &(0x7f0000000740)=ANY=[@ANYBLOB="00080000000000000008000000000000000400000000000000020000100000000057b4000000000000020000000000000009000000760000000104000000000000ef030000000000004f0d0000000000000900000000000000ff06673059000000ff01000000000000f500000000000000000000000000fc1f7f0000527dcdd3f7bd0000000000e1054c5b62cb512abb7263823a4ba1e1847c11dfc85914de3abe698af9"]}, @devid=r5}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$vsock(0xffffffffffffff9c, &(0x7f00000006c0), 0x600282, 0x0) 913.786109ms ago: executing program 3 (id=282): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) accept4(r0, &(0x7f00000002c0)=@x25={0x9, @remote}, &(0x7f0000000340)=0x80, 0x80000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0}, &(0x7f00000003c0)=0x8) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x80a0000, 0x1000, &(0x7f000062a000/0x1000)=nil}) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = dup2(r1, r5) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r7, &(0x7f00000020c0)={0x2020}, 0x2020) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000200)={r3, 0xf585}, 0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010029bd8c00fddbdf2500000000", @ANYRES32=r10, @ANYBLOB="331900000300000014001680100001800c0009000180000000000000050021"], 0x3c}}, 0x4000000) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0x3c, 0x25, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xffff, 0xb}, {0x5, 0x7}, {0xffe0, 0x3}}, [@TCA_RATE={0x6, 0x5, {0xcc, 0x45}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7fff}, @TCA_RATE={0x6, 0x5, {0x80, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) 863.892973ms ago: executing program 3 (id=283): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a841008100090086dd6654050000082c00fe00000000aafe8000000000000000000000000000aa3b00000700000000"], 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {0xffe0, 0x1}, {0x5, 0x8}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 714.470817ms ago: executing program 3 (id=284): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) r2 = syz_pidfd_open(0x0, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) lstat(&(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_io_uring_setup(0x13f, &(0x7f0000001c80)={0x0, 0x5498, 0x8000, 0x1, 0x193}, &(0x7f0000001d00), &(0x7f0000001d40), &(0x7f0000001d80)) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001dc0)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002440)={0x3, 0x9, {}, {0xffffffffffffffff}, 0x6, 0x5}) getgroups(0x3, &(0x7f0000002480)=[0x0, 0xffffffffffffffff, 0xee01]) r11 = socket$xdp(0x2c, 0x3, 0x0) syz_clone3(&(0x7f0000002740)={0x4000, &(0x7f00000024c0)=0xffffffffffffffff, &(0x7f0000002500), &(0x7f0000002540), {0x26}, &(0x7f0000002580)=""/218, 0xda, &(0x7f0000002680)=""/78, &(0x7f0000002700)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) r13 = syz_open_dev$sndpcmc(&(0x7f00000027c0), 0x7, 0x101a80) r14 = epoll_create(0x2d71887e) sendmsg$netlink(r0, &(0x7f0000002880)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000023c0)=[{&(0x7f0000000040)={0x460, 0x28, 0x2, 0x70bd27, 0x25dfdbff, "", [@nested={0x75, 0xd9, 0x0, 0x1, [@nested={0x4, 0x6d}, @generic="53fb3e6247441f36a41743dd07c4294dbb2ff3bbcf7f55244cbd3a411056c6a1a151688f36c83430de0970a7238c91eee4783507e1363a6bdd841f033dd9839d05dd53ba650c2146accb9ab9b63f", @typed={0x8, 0x3c, 0x0, 0x0, @ipv4=@broadcast}, @generic="21171af884010c", @typed={0x8, 0xf0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x110, 0x0, 0x0, @fd=r1}]}, @generic="bb98c077132be022298725c0e4b7f56d69712bea890bf475cad903d1cbc4b8ec40af4b542797b4c259f31fed1a3d458b6f06d2f78f70d0f001f4f9b35b55f01673962bd6b526a540785d348fb04f3c68e4bfd9af532a150d648a2199e097", @nested={0x93, 0xf5, 0x0, 0x1, [@nested={0x4, 0x21}, @nested={0x4, 0xfb}, @generic="7ca2158a443d0ae51b50b5a7f0792e4b4e8590149d77824e8637df530b6ee4a70e3982eb46489a5ebd6da01b7cc8451d352614364cc8265f218a4da3d4c18a1b2b99b2df6376f4ac5eb0c0beef9a4bb19ba8e8d284991da26b71f82d9acc3e3b4020115cc84747f0ced200d33ed366a9fbda4cd8835ce12bfdcb2b56112ac7d3c29e2c300228ea"]}, @generic="0404cbc66fff51e9b33759230bfa14003637f1da71ad01aa97abe90b9af325006ec0dc479eaf544e5ea546159a314b7edbca4771502edf4a2d600f2bacd5ea82f2401ef3bc94201ba709aaf2b20b5e2c62f0587f37eee5ef3fca70eb1f8f7796e67f304dd381c83b06f9d7d1fcde1b8e6cbbccc750dd77b8f876cac65fd66db7ccaf63f7ca356eca77c2ae3cd723b17280c852e50bdb4ca77f2be35a08e100228d1bdb6ea6627fddc6d2ca8c0959ad052cefb8624cce4389a96ae9306fdd49e23608ce3b623ec922417db9d5ac6cefb2aa69cb07bff5a60cc5aa73680c124a952902066f71fe1bcd706bd381bdb7780845b59de3", @generic="f78699bbae9bd009a9cc8fd3f4094af7cbbcde2a39aed6cc90bbaac7a5db53922072bb59713d037f150d018b0a0d063f84131248a6d8fb96686343c7c1a2844ca2dafe875da5781562e3825d65a9f244c194951ee7debc088ee0aed8df6bcfbf013ed191d0b296c25399cb62846ac1f9da640aa374bceb543083262f7ca1fa187dfd60ecf6be171b6019dbc19fbee04e48a8f96bc47abb2c5ece3f468fcd7f5b140bef20e2cc8772eeda65882b945f0662b4e4b504f3e979e62980b254565d515014d43c746194b2b6e73b006fb929162d", @generic="c2fba416c153be857151ed82072c27990a8b545d68e0f5b75097d4921d8f1430ab475f1eb97ad1103ff15d446367ce294122d934414d63ebc3f79d03991ee5ba45fb3ea5ca34e8bb6da7e8ae6dc0683ddbfa6dc566db6d456f8dadd72c3d1426ca696b9e4b544841ab1b6acf87cb04e11ba7ab3a6ace0c3ea10d7a07a98406fc5388fb8a402ab645fb92daf56cac40915e95aeb10d92ac7548dfbcb9733998f49dcbc797f88a8aa6d3316c6b90854e153e67e1ecc2f05f6dce2cf6497623447687280a96f7", @generic="12cd9d2a7ba8b8251799653e1e9eed320223ee9b031eb6e2d2ed2ab3d5df33e5bf19794e462c25cfd5936b805f665acd86d51e985749eba539527d221f72b402504c30e10ea3c48b2598695ce2", @nested={0xc, 0x119, 0x0, 0x1, [@typed={0x8, 0x1b, 0x0, 0x0, @fd=r2}]}]}, 0x460}, {&(0x7f0000000580)={0x142c, 0x3a, 0x2, 0x70bd27, 0x25dfdbfb, "", [@nested={0x175, 0x165, 0x0, 0x1, [@generic="ea47ea1f6fd0a674056533b99cd6b17d32ddb400c74e5bb8b3aa36373ff29f859fd220b380206befa558df728d433fb4972491a556cffeab4e4689a5b14b", @generic="35623e6db75a52509b71dc2c2f920932a14adda5fa1595b3da71f07fa3cef5ed39fe4a4f05b721105379982375aaa11bff3e6c797988c7f705115fbf11c69f03", @generic="1ecd77cc9ed2e3efd9d5b0879469af7d4da141b74f811353b350cf9a8cc0e79c038596d76f81ed9c96b836e264506edd3cfa3353c1319b788a080f8805e0c4c72a21b74683d002d4c3e9e9bd30f7a02ba142b95e6f22324630f7fe776121062fab2c87aa9614f3c24edf72a6bcc74d86c69b31757e60a8692071c9ca11cf3906749a5974740a2e7837178484c93ea453ff6588f70bd9f75149b0065dc592fc6d7b985e9ba910ef9a9e0e1ce0a878066101e30b2fe7435c789073fe85b0d6c95cda3e8b6b5236f4f7661989b274adfac91adafdc9e0fd729d1a40565d739d3f9632ed3bc1b11da9f9bc8384e99c987469195b44"]}, @nested={0x10, 0x30, 0x0, 0x1, [@nested={0x4, 0x66}, @typed={0x8, 0x47, 0x0, 0x0, @uid=r3}]}, @nested={0x30, 0xa1, 0x0, 0x1, [@nested={0x4, 0x125}, @nested={0x4, 0xab}, @typed={0x8, 0x8e, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x8e, 0x0, 0x0, @uid=0xee01}, @typed={0x14, 0x60, 0x0, 0x0, @ipv6=@remote}]}, @generic="4b0c3985acf83aea6cf87a9e82c2af42b70de4fcee637b2b1c772b50a91b34c22742127bf4b20705818433404b23f055099abb1e3fea0e14a842d1d9163d1b4bfad0d0694f7b7758669107a943c1236a097c988828a7f5f7a530dd62a817c341e4e2e05873f95ecc6a99c14e022e14b70f74cbbe893a279d06e48da6ef6ce854e9eb5c0924bcbc4cf489844aeab10efde8665cde0921bcbde04e95dc0ccae277accae37ae25997f1f266e01e92", @nested={0x11b3, 0x135, 0x0, 0x1, [@nested={0x4, 0x53}, @nested={0x4, 0x20}, @generic="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", @typed={0x1004, 0x1d, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x13f, 0x0, 0x0, @fd=r4}, @generic="a41a8611467b3a803fcad651aae64814b7ef20bf5f5b20978f364a7f37c4be95b2060098fa16d5a7cb9f8f01988eb6850106bd543e3c2ea66823b11bfb65d5d79ffbd6db45885fbec1c91d531e2b638c14b7e53c21b1b502c68272e9e247fc43d5101c41fb27dcaebfcbb3a159326666fab47e04882bd360406e31f30394888c9c59a13b7bf5b0d2b651393344218549c08e4b9c04869f20819b3d98"]}]}, 0x142c}, {&(0x7f0000001a80)={0x1a0, 0x1f, 0x200, 0x70bd2b, 0x25dfdbfd, "", [@generic="e97891f5e802396b150fe901d93da6789ac51a824f3fb13e7778628b4a643a09fc4780a153221c8e8ac39a97d4101c06bc81c009b9ef787f1c88ad76ec334f2c514cb287bac15e502c94cf3f06468011172f8062335c31adf920fa8d6c272aa58d080e0a0c0ec61b9a95d41159815008c713a7357449", @nested={0xf0, 0x61, 0x0, 0x1, [@typed={0x8, 0x56, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x103}, @nested={0x4, 0x13c}, @nested={0x4, 0x68}, @generic="91d750d69fc1e308664faea0ada4b7ec0782517b00a581d4b0b06f8312157758d126de4ef1be2a61a5cf4961473ab256f13220e3f502aa1ce4236764748bda410a76c8e2502c360ffc50016fe0b5dfb7d33ec33acc3fad3c1f7ee9d15ef0e7ce374bdd1cd89835cbe5c4736246f78da970a3972d12c96ca34ec3873c7b9eb7cea70fc2e5a5da06e485da36a898e432eae5444edc00717b81042d102dca95555d023265e229fb15a64809d1b590a6f1c347fd404eb391388f9259094be01686b36f917dde81f9cf777d37b8e0d52540d9", @nested={0x4, 0x159}, @nested={0x4, 0x91}]}, @generic="a7154efd051851f870b5564bd29538a408d2a5cb9d5664d05afff11ccd318915c1616cbd5d0f9c"]}, 0x1a0}, {&(0x7f0000001c40)={0x2c, 0x15, 0x10, 0x70bd25, 0x25dfdbfb, "", [@typed={0x14, 0x58, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3f}}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x5}]}, 0x2c}, {&(0x7f0000001e00)={0x1c8, 0x3e, 0x100, 0x70bd26, 0x25dfdbfd, "", [@typed={0x14, 0xa9, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x8, 0x101, 0x0, 0x0, @fd=r6}, @nested={0x101, 0xed, 0x0, 0x1, [@generic="a51177092952ee9dff8bf83d4171d04da55c6156c70c91de2f4b595374c9884bc6cf9bc05589ee78e81252ff8ada7280abff384b86dddd81f0609d47ae14e06ce637ec39e1b38042249545304b36aad74a0762eacc7ad011d2cada89f7d266fd7b3059423c2015fd40887a78b3091660aca3d07f46a8bced9ed69f89a2240242ce8ac49c2dfc1862140daebb66e730c86cf86050adc92b1f8bf9ecb7527caab0f790c149bd715cc03578eb47fc333ac4ad73e163d877d08c5bc34dd5d5574a182388e04befd632e4f1c4954635e391efbc3a69b0a0152d65883b31fe9434c1fca5ed447dc51f84034006e3e36782e916d338b64a090bd6559b5974dfc5"]}, @nested={0x97, 0x6, 0x0, 0x1, [@nested={0x4, 0x88}, @generic="f58184662fe6d95602388aa1b033c87d0c5f347969803f5fdea8c90100a37e84041e311c24b51a806443f3fc", @generic="6e151182b9a7938f2a671f56c9691762ac50b9a2cdfd11205ceab0f35882475b7dca1e72b7e950e44808036c46dceb33f71021c0af218e0107", @nested={0x4, 0x113}, @typed={0x8, 0x1d, 0x0, 0x0, @fd=r7}, @nested={0x4, 0x1}, @typed={0x8, 0xc9, 0x0, 0x0, @pid=r8}, @generic="25954594f243d120025c59513bcc", @nested={0x4, 0xce}]}]}, 0x1c8}, {&(0x7f0000002000)={0x290, 0x27, 0x8, 0x70bd2d, 0x25dfdbfc, "", [@generic="d78bd158c23c5c6a05f4d427ce84ef2ca0b0301761ee040f70359170ba666564f02b19b409e53a1e476bd57fa9bb3b03c77008f215f4f588cc657159ca9c62b043604915b6353fc44ff9b58995a846aa5d65cd809c85044c280a49e896b305028ccf789660f2bb0500acdcb2e00e6fe16e0147124a208fd93aac1678c62bb3d92f0fd79f2d9c65daabe02374bf39fb0082b31ab04a211d121fe3f0211f29bb3cb4d6d7856d3cd31c603d7bdacf6ea7c7aaf0963a", @generic="722dca6d621e5ecb202de2ad688ff915cb31185f9320d77ca8257a52c94654cd513332c8e35bc3275e9b20c591de28806e17273e80a020bd205eecf1d80dbd5d45", @nested={0xf0, 0x85, 0x0, 0x1, [@generic="2690c3b5c528607b36427884feb2bb9ab32df760b821fda4db3945c438116350c436f362f926b7ef49f754ac658364a9fa6883d0a7067e3df0fd006d5d4c70da13798c0d6b543c311e4bc717990060bf411519eb5329695b7a602c49bbdb547220586cbaf44147e5290128581c99d04fc0e8fa823143e1c7e7c5e4a68ce8c27de90de699e18fe1476b12b8d7d8d99fd11beadeca113f9975547c64c5a61729e45b8c283066a9c9b2b9e6a4d32ca0ee849f806d1adf49d8e08e03b25ae4efbc3b51be3d4c3d244b6f421429314ff4457a2c0cdc52d80eb4aed983c49d78ed0a7cf2c1e1b60a438ab70b16fe33"]}, @generic="54acc561f1bdf362af35f51b9fafda56e883ba22e6036fe32d4b8497f29d20fd68dc5de99bf24004f1714c0cd751df471f3b32d92459fd2c7412053496b805d766c546b3fda685c8f0cc6976177e85932a8561940783ca30483c0b8d00a4de93c6ca25ea5844e5f5d6986f5b3cbc2a460aed1221ad58871b105d611dc95882918dfd2aaea7ac4a192c420c257e0a6e0854d001dafe1ccbaf35"]}, 0x290}, {&(0x7f00000022c0)={0xe8, 0x13, 0x400, 0x70bd25, 0x25dfdbff, "", [@nested={0x95, 0x84, 0x0, 0x1, [@nested={0x4, 0xcd}, @generic="92aa8a9f2c49ccc05747c2fc05fa6d2e104b158c6b53c40350ff49722300d07d90ab54d8ecffc69848b0af5b37df4ec20f288e11a5d1d8296d45f4bfecd5b8c05b8496a7d6d08695cf98859d524570e811e122072055e5d880b2239dc6dab4149107695115c7707ec1179b657f433b9361a5a31279e81e8e9c4bb8984c39a3e35c17261dffa446e7d3bac7e3b5"]}, @typed={0x6, 0x169, 0x0, 0x0, @str=',\x00'}, @generic="a2498bf286668f875d7ad54a2bf6f0ea21a7c30f10c58891cddf496ec46d8e8e76f38724e29df0a49ec691c571cf7873f1d8fcd77f"]}, 0xe8}], 0x7, &(0x7f0000002800)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, r10}}}, @rights={{0x20, 0x1, 0x1, [r11, 0xffffffffffffffff, r12, r13]}}, @rights={{0x14, 0x1, 0x1, [r14]}}], 0x58, 0x24004881}, 0x20000011) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f00000028c0)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000002940)={&(0x7f0000002900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) stat(&(0x7f0000002980)='./file0\x00', &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r5, r15) r16 = openat$sr(0xffffffffffffff9c, &(0x7f0000002a40), 0x1a1800, 0x0) ioctl$TUNSETNOCSUM(r16, 0x400454c8, 0x9) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, &(0x7f0000002a80)={0x0, 0x94a, 0x7, 0xa4a9, 0x2}) openat(r1, &(0x7f0000002ac0)='./file0\x00', 0x30400, 0x140) r17 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002b00), 0x2, 0x0) read$FUSE(r17, &(0x7f0000002b40)={0x2020}, 0x2020) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f0000004b80)) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0xffffffffffffe2a2) syz_ublk_setup_io_uring(0x2e2, &(0x7f0000004c00)={0x0, 0x9ae8, 0x1000, 0x0, 0x90, 0x0, r6}, &(0x7f0000004c80), &(0x7f0000004cc0), &(0x7f0000004d00)) syz_open_dev$tty1(0xc, 0x4, 0x1) 714.253065ms ago: executing program 3 (id=285): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000000)={0xc1, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x6}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3f) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="0f1d756a260f08c4c27d3388b20000003664660f3881ba7a740000c4c3d1cf580056f4b9320300000f320f01c8b8010000000f01c166ba4100ec", 0x3a}], 0x1, 0x40, &(0x7f0000000180)=[@cr0={0x0, 0x1}, @cstype0={0x4, 0x5}], 0x2) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640), 0x0, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 493.336016ms ago: executing program 0 (id=286): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x0, 0x111, 0x4b4, 0x1f0, 0xd4feffff, 0x2b8, 0x20a, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {0xff}, 0x6, 0xfe}, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@hl={{0x28}, {0x8dde9cf0fcc298ce, 0x6}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x59, 0x0, {0xfff}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x0, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) open$dir(&(0x7f0000000000)='\x00', 0x301c0, 0x44) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048800}, 0xc850) 493.18039ms ago: executing program 1 (id=287): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x2000}, 0x28) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) (fail_nth: 4) 473.641758ms ago: executing program 0 (id=288): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x40000) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000080)={{0x2, 0x4e20, @multicast1}, {0x6, @random="749351a5599b"}, 0x10, {0x2, 0x4e20, @private=0xa010101}, 'ip6gre0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x7}, {0xffff, 0xffff}, {0x7, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4404c}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="3000000018000e0000010000000000000a000000000000060000000008001e0002"], 0x30}, 0x1, 0x0, 0x0, 0x2c004}, 0x4090) 279.106613ms ago: executing program 1 (id=289): r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x4, 0x0, 0xfffffffffffffd14, 0x0, 'syz0\x00', 0x0, 0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x14, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x48054}, 0x20000810) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x4, 0x0, 0xfffffffffffffd14, 0x0, 'syz0\x00', 0x0, 0x3}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x14, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x48054}, 0x20000810) (async) 278.986974ms ago: executing program 1 (id=290): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000740)=0x4, 0x4) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}, 0x0, 0x2}, 0xe) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r2 = add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)={0x2, 0x0, @d}, 0x18, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0x0, 0x0) preadv2(r1, &(0x7f0000000000)=[{&(0x7f0000000080), 0xffffff61}], 0x1, 0x2, 0x2, 0xc) 224.474269ms ago: executing program 0 (id=291): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x20004, r1, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r4, 0xff, 0x100007, 0xa, 0x1ff, 0x1}) (fail_nth: 15) 124.599634ms ago: executing program 2 (id=292): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file2\x00', 0x32c) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000001540), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) fspick(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_usb_disconnect(r1) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000003b80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xa8, 0x2e, 0x3}}}}}]}}]}}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) socket$nl_route(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000240)='\x00W', 0x5ea}], 0x1) 0s ago: executing program 1 (id=293): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7201}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r2}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): 1][ T5964] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 58.981200][ T5964] RBP: 00007fedbcb80090 R08: 0000000000000000 R09: 0000000000000000 [ 58.981209][ T5964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.981217][ T5964] R13: 00007fedbc016038 R14: 00007fedbc015fa0 R15: 00007ffeb8f22aa8 [ 58.981241][ T5964] [ 59.242951][ T5975] tipc: Enabling of bearer rejected, failed to enable media [ 59.247297][ T5975] syzkaller0: entered promiscuous mode [ 59.249725][ T5975] syzkaller0: entered allmulticast mode [ 59.255587][ T5975] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 59.391673][ T5977] syzkaller0: entered promiscuous mode [ 59.393437][ T5977] syzkaller0: entered allmulticast mode [ 59.561016][ T5979] syzkaller0: entered promiscuous mode [ 59.562713][ T5979] syzkaller0: entered allmulticast mode [ 59.566504][ T5979] tipc: Enabling of bearer rejected, failed to enable media [ 59.640435][ T5736] Bluetooth: hci2: command tx timeout [ 59.640536][ T61] Bluetooth: hci0: command tx timeout [ 59.641044][ T5748] Bluetooth: hci3: command tx timeout [ 59.641063][ T5748] Bluetooth: hci1: command tx timeout [ 59.691332][ T5981] tipc: Enabling of bearer rejected, media not registered [ 59.910004][ T5995] syzkaller0: entered promiscuous mode [ 59.912636][ T5995] syzkaller0: entered allmulticast mode [ 59.918420][ T5995] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 59.933871][ T5997] usb usb7: usbfs: process 5997 (syz.3.43) did not claim interface 0 before use [ 60.028509][ T6001] FAULT_INJECTION: forcing a failure. [ 60.028509][ T6001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.033095][ T6001] CPU: 2 UID: 0 PID: 6001 Comm: syz.3.45 Not tainted syzkaller #0 PREEMPT(full) [ 60.033116][ T6001] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.033122][ T6001] Call Trace: [ 60.033126][ T6001] [ 60.033130][ T6001] dump_stack_lvl+0x100/0x190 [ 60.033146][ T6001] should_fail_ex.cold+0x5/0xa [ 60.033161][ T6001] _copy_from_iter+0x1f4/0x1690 [ 60.033175][ T6001] ? __asan_memset+0x23/0x50 [ 60.033191][ T6001] ? __pfx__copy_from_iter+0x10/0x10 [ 60.033204][ T6001] ? __pfx___alloc_skb+0x10/0x10 [ 60.033218][ T6001] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 60.033238][ T6001] netlink_sendmsg+0x808/0xda0 [ 60.033254][ T6001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.033266][ T6001] ? __might_fault+0xa0/0x140 [ 60.033285][ T6001] ____sys_sendmsg+0x9e1/0xb70 [ 60.033296][ T6001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.033310][ T6001] ? __pfx_____sys_sendmsg+0x10/0x10 [ 60.033328][ T6001] ___sys_sendmsg+0x190/0x1e0 [ 60.033341][ T6001] ? __pfx____sys_sendmsg+0x10/0x10 [ 60.033369][ T6001] __sys_sendmsg+0x170/0x220 [ 60.033385][ T6001] ? __pfx___sys_sendmsg+0x10/0x10 [ 60.033406][ T6001] ? rcu_is_watching+0x12/0xc0 [ 60.033423][ T6001] do_syscall_64+0x115/0x870 [ 60.033436][ T6001] ? clear_bhb_loop+0x40/0x90 [ 60.033448][ T6001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.033459][ T6001] RIP: 0033:0x7fd0bb59ce59 [ 60.033468][ T6001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.033478][ T6001] RSP: 002b:00007fd0bc3d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.033488][ T6001] RAX: ffffffffffffffda RBX: 00007fd0bb815fa0 RCX: 00007fd0bb59ce59 [ 60.033495][ T6001] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 60.033500][ T6001] RBP: 00007fd0bc3d4090 R08: 0000000000000000 R09: 0000000000000000 [ 60.033507][ T6001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.033512][ T6001] R13: 00007fd0bb816038 R14: 00007fd0bb815fa0 R15: 00007ffef4039448 [ 60.033525][ T6001] [ 60.105627][ T1478] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 60.182539][ T6010] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 60.184734][ T6010] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 60.188866][ T6010] vhci_hcd vhci_hcd.0: Device attached [ 60.192038][ T6010] ªªªªªª: renamed from hsr0 (while UP) [ 60.202574][ T6011] vhci_hcd: connection closed [ 60.203932][ T12] vhci_hcd vhci_hcd.3: stop threads [ 60.207502][ T12] vhci_hcd vhci_hcd.3: release socket [ 60.209181][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 60.262763][ T1478] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 60.266382][ T1478] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 60.270799][ T1478] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 60.274476][ T1478] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 60.278896][ T1478] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 60.285239][ T1478] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 60.288941][ T1478] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 60.291919][ T1478] usb 6-1: Product: syz [ 60.293622][ T1478] usb 6-1: Manufacturer: syz [ 60.300784][ T1478] cdc_wdm 6-1:1.0: skipping garbage [ 60.303002][ T1478] cdc_wdm 6-1:1.0: skipping garbage [ 60.307748][ T1478] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 60.310486][ T1478] cdc_wdm 6-1:1.0: Unknown control protocol [ 60.335431][ T6014] kvm: pic: non byte write [ 60.507095][ T844] usb 6-1: USB disconnect, device number 3 [ 60.849703][ T6021] netlink: 'syz.3.52': attribute type 61 has an invalid length. [ 61.019908][ T6023] syzkaller0: entered promiscuous mode [ 61.021703][ T6023] syzkaller0: entered allmulticast mode [ 61.028222][ T6023] tc action pedit offset must be on 32 bit boundaries [ 61.030919][ T6023] tc action pedit offset must be on 32 bit boundaries [ 61.033052][ T6023] tc action pedit offset must be on 32 bit boundaries [ 61.035150][ T6023] tc action pedit offset must be on 32 bit boundaries [ 61.037220][ T6023] tc action pedit offset must be on 32 bit boundaries [ 61.039464][ T6023] tc action pedit offset must be on 32 bit boundaries [ 61.042462][ T6023] tc action pedit offset must be on 32 bit boundaries [ 61.045180][ T6023] tc action pedit offset must be on 32 bit boundaries [ 61.046495][ T6025] syzkaller0: entered promiscuous mode [ 61.047907][ T6023] tc action pedit offset must be on 32 bit boundaries [ 61.047938][ T6023] tc action pedit offset must be on 32 bit boundaries [ 61.047969][ T6023] TC_ACT_REPEAT abuse ? [ 61.057130][ T6025] syzkaller0: entered allmulticast mode [ 61.283033][ T6046] FAULT_INJECTION: forcing a failure. [ 61.283033][ T6046] name failslab, interval 1, probability 0, space 0, times 0 [ 61.288430][ T6046] CPU: 0 UID: 0 PID: 6046 Comm: syz.0.61 Not tainted syzkaller #0 PREEMPT(full) [ 61.288453][ T6046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.288462][ T6046] Call Trace: [ 61.288469][ T6046] [ 61.288475][ T6046] dump_stack_lvl+0x100/0x190 [ 61.288499][ T6046] should_fail_ex.cold+0x5/0xa [ 61.288522][ T6046] should_failslab+0xc2/0x120 [ 61.288542][ T6046] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 61.288567][ T6046] ? skb_clone+0x190/0x400 [ 61.288597][ T6046] skb_clone+0x190/0x400 [ 61.288623][ T6046] nfnetlink_rcv_batch+0x1c8/0x2880 [ 61.288665][ T6046] ? __lock_acquire+0x4a5/0x2630 [ 61.288686][ T6046] ? stack_trace_save+0x8e/0xc0 [ 61.288703][ T6046] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 61.288745][ T6046] ? avc_has_perm_noaudit+0x145/0x3b0 [ 61.288768][ T6046] ? __asan_memset+0x23/0x50 [ 61.288793][ T6046] ? __nla_validate_parse+0x1e7/0x28b0 [ 61.288815][ T6046] ? __lock_acquire+0x4a5/0x2630 [ 61.288835][ T6046] ? __pfx___nla_validate_parse+0x10/0x10 [ 61.288853][ T6046] ? rcu_is_watching+0x12/0xc0 [ 61.288878][ T6046] ? cap_capable+0x10b/0x440 [ 61.288904][ T6046] ? __nla_parse+0x40/0x60 [ 61.288923][ T6046] nfnetlink_rcv+0x3bd/0x440 [ 61.288950][ T6046] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 61.288980][ T6046] netlink_unicast+0x585/0x850 [ 61.289005][ T6046] ? __pfx_netlink_unicast+0x10/0x10 [ 61.289033][ T6046] netlink_sendmsg+0x8b0/0xda0 [ 61.289057][ T6046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.289075][ T6046] ? __might_fault+0xa0/0x140 [ 61.289109][ T6046] ____sys_sendmsg+0x9e1/0xb70 [ 61.289127][ T6046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.289148][ T6046] ? __pfx_____sys_sendmsg+0x10/0x10 [ 61.289178][ T6046] ___sys_sendmsg+0x190/0x1e0 [ 61.289202][ T6046] ? __pfx____sys_sendmsg+0x10/0x10 [ 61.289252][ T6046] __sys_sendmsg+0x170/0x220 [ 61.289281][ T6046] ? __pfx___sys_sendmsg+0x10/0x10 [ 61.289318][ T6046] ? rcu_is_watching+0x12/0xc0 [ 61.289346][ T6046] do_syscall_64+0x115/0x870 [ 61.289367][ T6046] ? clear_bhb_loop+0x40/0x90 [ 61.289388][ T6046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.289407][ T6046] RIP: 0033:0x7fa0b0f9ce59 [ 61.289422][ T6046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.289438][ T6046] RSP: 002b:00007fa0af1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.289455][ T6046] RAX: ffffffffffffffda RBX: 00007fa0b1215fa0 RCX: 00007fa0b0f9ce59 [ 61.289465][ T6046] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 61.289476][ T6046] RBP: 00007fa0af1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 61.289485][ T6046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.289495][ T6046] R13: 00007fa0b1216038 R14: 00007fa0b1215fa0 R15: 00007fffff87eaf8 [ 61.289517][ T6046] [ 61.437993][ T6050] xt_hashlimit: size too large, truncated to 1048576 [ 61.563984][ T6058] syzkaller0: entered promiscuous mode [ 61.566287][ T6058] syzkaller0: entered allmulticast mode [ 61.722851][ T61] Bluetooth: hci2: command tx timeout [ 61.724553][ T5736] Bluetooth: hci0: command tx timeout [ 61.730377][ T5736] Bluetooth: hci1: command tx timeout [ 61.730418][ T61] Bluetooth: hci3: command tx timeout [ 61.785535][ T6072] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 61.836157][ T6074] syzkaller0: entered promiscuous mode [ 61.838498][ T6074] syzkaller0: entered allmulticast mode [ 61.841005][ T6072] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.70'. [ 61.844740][ T6074] tipc: Enabling of bearer rejected, failed to enable media [ 61.893655][ T6078] FAULT_INJECTION: forcing a failure. [ 61.893655][ T6078] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 61.898526][ T6078] CPU: 1 UID: 0 PID: 6078 Comm: syz.2.74 Not tainted syzkaller #0 PREEMPT(full) [ 61.898543][ T6078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.898549][ T6078] Call Trace: [ 61.898554][ T6078] [ 61.898558][ T6078] dump_stack_lvl+0x100/0x190 [ 61.898575][ T6078] should_fail_ex.cold+0x5/0xa [ 61.898611][ T6078] ? prepare_alloc_pages+0x16d/0x5f0 [ 61.898647][ T6078] should_fail_alloc_page+0xeb/0x140 [ 61.898671][ T6078] prepare_alloc_pages+0x1f0/0x5f0 [ 61.898690][ T6078] ? xa_find_after+0x2f5/0x4c0 [ 61.898717][ T6078] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 61.898748][ T6078] ? mark_held_locks+0x40/0x70 [ 61.898770][ T6078] ? smp_call_function_many_cond+0x13e3/0x1700 [ 61.898790][ T6078] ? lockdep_hardirqs_on+0x78/0x100 [ 61.898807][ T6078] ? __pfx_flush_tlb_func+0x10/0x10 [ 61.898820][ T6078] ? smp_call_function_many_cond+0x5de/0x1700 [ 61.898834][ T6078] ? __pfx_should_flush_tlb+0x10/0x10 [ 61.898844][ T6078] ? __pfx_flush_tlb_func+0x10/0x10 [ 61.898856][ T6078] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 61.898872][ T6078] ? __css_rstat_updated+0x1ce/0x5a0 [ 61.898889][ T6078] ? __pfx___css_rstat_updated+0x10/0x10 [ 61.898915][ T6078] ? vmx_vcpu_pi_load+0x102/0x8d0 [ 61.898939][ T6078] ? update_cfs_rq_load_avg+0x51/0x550 [ 61.898960][ T6078] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 61.898984][ T6078] ? policy_nodemask+0xed/0x4f0 [ 61.899004][ T6078] alloc_pages_mpol+0x1fb/0x540 [ 61.899026][ T6078] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 61.899052][ T6078] folio_alloc_mpol_noprof+0x36/0x260 [ 61.899076][ T6078] vma_alloc_folio_noprof+0xed/0x1d0 [ 61.899099][ T6078] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 61.899118][ T6078] ? rcu_read_unlock+0x2d/0xb0 [ 61.899140][ T6078] ? rcu_read_unlock+0x2d/0xb0 [ 61.899161][ T6078] do_wp_page+0xd75/0x4350 [ 61.899178][ T6078] ? __pfx_do_wp_page+0x10/0x10 [ 61.899198][ T6078] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 61.899229][ T6078] __handle_mm_fault+0x1ab6/0x2a00 [ 61.899257][ T6078] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 61.899285][ T6078] ? __pfx___handle_mm_fault+0x10/0x10 [ 61.899311][ T6078] ? pte_offset_map_lock+0x174/0x320 [ 61.899329][ T6078] ? find_held_lock+0x2b/0x80 [ 61.899351][ T6078] ? follow_page_pte+0x4d0/0x13f0 [ 61.899368][ T6078] handle_mm_fault+0x37b/0xa30 [ 61.899386][ T6078] __get_user_pages+0x1178/0x32a0 [ 61.899402][ T6078] ? down_read_killable+0x307/0x4b0 [ 61.899418][ T6078] ? __pfx___get_user_pages+0x10/0x10 [ 61.899431][ T6078] ? __pfx_gup_fast_fallback+0x10/0x10 [ 61.899446][ T6078] get_user_pages_unlocked+0x1cb/0x7d0 [ 61.899461][ T6078] ? __pfx_get_user_pages_unlocked+0x10/0x10 [ 61.899474][ T6078] ? get_user_pages_fast_only+0xae/0xf0 [ 61.899486][ T6078] ? __pfx_get_user_pages_fast_only+0x10/0x10 [ 61.899505][ T6078] ? __pfx___might_resched+0x10/0x10 [ 61.899522][ T6078] hva_to_pfn+0x871/0xd60 [ 61.899537][ T6078] ? tdp_iter_refresh_sptep+0x168/0x2c0 [ 61.899554][ T6078] ? __pfx_hva_to_pfn+0x10/0x10 [ 61.899567][ T6078] ? __lock_acquire+0x4a5/0x2630 [ 61.899580][ T6078] ? tdp_iter_next+0x3d5/0x860 [ 61.899602][ T6078] kvm_follow_pfn+0x291/0x430 [ 61.899616][ T6078] __kvm_faultin_pfn+0x11c/0x1a0 [ 61.899629][ T6078] ? __pfx___kvm_faultin_pfn+0x10/0x10 [ 61.899641][ T6078] ? __pfx_xa_load+0x10/0x10 [ 61.899658][ T6078] ? fast_page_fault+0xeca/0x1460 [ 61.899674][ T6078] ? fast_page_fault+0xeca/0x1460 [ 61.899691][ T6078] kvm_mmu_faultin_pfn+0xb73/0x2270 [ 61.899710][ T6078] ? __pfx_fast_page_fault+0x10/0x10 [ 61.899725][ T6078] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 61.899742][ T6078] ? __kvm_mmu_topup_memory_cache+0x332/0x5f0 [ 61.899753][ T6078] ? find_held_lock+0x2b/0x80 [ 61.899762][ T6078] ? kvm_tdp_page_fault+0x295/0x3d0 [ 61.899777][ T6078] kvm_tdp_page_fault+0x182/0x3d0 [ 61.899790][ T6078] kvm_mmu_do_page_fault+0x5a4/0x6c0 [ 61.899803][ T6078] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 61.899823][ T6078] kvm_mmu_page_fault+0x1dd/0x1a70 [ 61.899837][ T6078] ? __pfx_clockevents_program_event+0x10/0x10 [ 61.899855][ T6078] ? rcu_qs+0x2a/0xe0 [ 61.899869][ T6078] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 61.899885][ T6078] ? __vmx_complete_interrupts+0x129/0x570 [ 61.899900][ T6078] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 61.899916][ T6078] handle_ept_violation+0x324/0x7b0 [ 61.899930][ T6078] ? __pfx_handle_ept_violation+0x10/0x10 [ 61.899945][ T6078] vmx_handle_exit+0x84c/0x1f30 [ 61.899961][ T6078] vcpu_run+0x34cf/0x5ca0 [ 61.899981][ T6078] ? __pfx_vcpu_run+0x10/0x10 [ 61.900002][ T6078] ? rcu_is_watching+0x12/0xc0 [ 61.900020][ T6078] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 61.900034][ T6078] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 61.900053][ T6078] kvm_vcpu_ioctl+0x730/0x1720 [ 61.900073][ T6078] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 61.900091][ T6078] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 61.900113][ T6078] ? do_vfs_ioctl+0x226/0x13e0 [ 61.900134][ T6078] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 61.900154][ T6078] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 61.900188][ T6078] ? __fget_files+0x215/0x3d0 [ 61.900207][ T6078] ? hook_file_ioctl_common+0x149/0x410 [ 61.900226][ T6078] ? selinux_file_ioctl+0x13b/0x290 [ 61.900241][ T6078] ? selinux_file_ioctl+0xb6/0x290 [ 61.900257][ T6078] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 61.900268][ T6078] __x64_sys_ioctl+0x18e/0x210 [ 61.900280][ T6078] do_syscall_64+0x115/0x870 [ 61.900294][ T6078] ? clear_bhb_loop+0x40/0x90 [ 61.900307][ T6078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.900320][ T6078] RIP: 0033:0x7f8cf8d9ce59 [ 61.900335][ T6078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.900351][ T6078] RSP: 002b:00007f8cf9ceb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.900369][ T6078] RAX: ffffffffffffffda RBX: 00007f8cf9015fa0 RCX: 00007f8cf8d9ce59 [ 61.900379][ T6078] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 61.900390][ T6078] RBP: 00007f8cf9ceb090 R08: 0000000000000000 R09: 0000000000000000 [ 61.900400][ T6078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 61.900410][ T6078] R13: 00007f8cf9016038 R14: 00007f8cf9015fa0 R15: 00007ffe9fc4f588 [ 61.900434][ T6078] [ 62.396167][ T6094] FAULT_INJECTION: forcing a failure. [ 62.396167][ T6094] name failslab, interval 1, probability 0, space 0, times 0 [ 62.401135][ T6094] CPU: 2 UID: 0 PID: 6094 Comm: syz.2.80 Not tainted syzkaller #0 PREEMPT(full) [ 62.401157][ T6094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.401166][ T6094] Call Trace: [ 62.401173][ T6094] [ 62.401180][ T6094] dump_stack_lvl+0x100/0x190 [ 62.401202][ T6094] should_fail_ex.cold+0x5/0xa [ 62.401225][ T6094] should_failslab+0xc2/0x120 [ 62.401243][ T6094] __kmalloc_cache_noprof+0x7a/0x6f0 [ 62.401264][ T6094] ? vhost_task_create+0xee/0x370 [ 62.401284][ T6094] ? trace_contention_end+0x122/0x170 [ 62.401306][ T6094] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 62.401331][ T6094] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 62.401349][ T6094] vhost_task_create+0xee/0x370 [ 62.401370][ T6094] ? __pfx_vhost_task_create+0x10/0x10 [ 62.401389][ T6094] ? register_lock_class+0x40/0x560 [ 62.401415][ T6094] ? __pfx_vhost_task_fn+0x10/0x10 [ 62.401437][ T6094] ? __pfx___mutex_lock+0x10/0x10 [ 62.401458][ T6094] ? kasan_quarantine_put+0x104/0x240 [ 62.401487][ T6094] kvm_mmu_post_init_vm+0x1b3/0x370 [ 62.401510][ T6094] kvm_arch_vcpu_ioctl_run+0x66/0x1890 [ 62.401531][ T6094] ? kvm_vcpu_ioctl+0x1546/0x1720 [ 62.401553][ T6094] kvm_vcpu_ioctl+0x730/0x1720 [ 62.401571][ T6094] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 62.401588][ T6094] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 62.401607][ T6094] ? do_vfs_ioctl+0x226/0x13e0 [ 62.401624][ T6094] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 62.401641][ T6094] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 62.401678][ T6094] ? __fget_files+0x215/0x3d0 [ 62.401696][ T6094] ? hook_file_ioctl_common+0x149/0x410 [ 62.401719][ T6094] ? selinux_file_ioctl+0x13b/0x290 [ 62.401742][ T6094] ? selinux_file_ioctl+0xb6/0x290 [ 62.401765][ T6094] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 62.401783][ T6094] __x64_sys_ioctl+0x18e/0x210 [ 62.401801][ T6094] do_syscall_64+0x115/0x870 [ 62.401821][ T6094] ? clear_bhb_loop+0x40/0x90 [ 62.401840][ T6094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.401857][ T6094] RIP: 0033:0x7f8cf8d9ce59 [ 62.401870][ T6094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.401885][ T6094] RSP: 002b:00007f8cf9ceb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.401901][ T6094] RAX: ffffffffffffffda RBX: 00007f8cf9015fa0 RCX: 00007f8cf8d9ce59 [ 62.401911][ T6094] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 62.401920][ T6094] RBP: 00007f8cf9ceb090 R08: 0000000000000000 R09: 0000000000000000 [ 62.401929][ T6094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.401938][ T6094] R13: 00007f8cf9016038 R14: 00007f8cf9015fa0 R15: 00007ffe9fc4f588 [ 62.401961][ T6094] [ 62.608608][ T6103] xt_limit: Overflow, try lower: 271964/0 [ 62.756073][ T6109] kvm: pic: non byte write [ 62.897963][ T6117] syzkaller0: entered promiscuous mode [ 62.900045][ T6117] syzkaller0: entered allmulticast mode [ 62.905705][ T6117] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 62.965472][ T6124] FAULT_INJECTION: forcing a failure. [ 62.965472][ T6124] name failslab, interval 1, probability 0, space 0, times 0 [ 62.970068][ T6124] CPU: 0 UID: 0 PID: 6124 Comm: syz.2.91 Not tainted syzkaller #0 PREEMPT(full) [ 62.970092][ T6124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.970103][ T6124] Call Trace: [ 62.970109][ T6124] [ 62.970115][ T6124] dump_stack_lvl+0x100/0x190 [ 62.970134][ T6124] should_fail_ex.cold+0x5/0xa [ 62.970150][ T6124] ? taprio_init+0x2ee/0x920 [ 62.970164][ T6124] should_failslab+0xc2/0x120 [ 62.970177][ T6124] __kmalloc_noprof+0xe0/0x850 [ 62.970193][ T6124] ? __pfx_advance_sched+0x10/0x10 [ 62.970209][ T6124] taprio_init+0x2ee/0x920 [ 62.970223][ T6124] ? do_syscall_64+0x115/0x870 [ 62.970236][ T6124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.970262][ T6124] ? lockdep_init_map_type+0x5c/0x250 [ 62.970278][ T6124] ? __pfx_taprio_init+0x10/0x10 [ 62.970293][ T6124] ? qdisc_alloc+0x81b/0xb30 [ 62.970304][ T6124] ? __pfx_taprio_init+0x10/0x10 [ 62.970318][ T6124] qdisc_create+0x47b/0x1070 [ 62.970335][ T6124] tc_modify_qdisc+0xdcf/0x2120 [ 62.970353][ T6124] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 62.970367][ T6124] ? __lock_acquire+0x4a5/0x2630 [ 62.970390][ T6124] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 62.970405][ T6124] rtnetlink_rcv_msg+0x3c9/0xe90 [ 62.970417][ T6124] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 62.970431][ T6124] ? ref_tracker_free+0x37e/0x6c0 [ 62.970448][ T6124] netlink_rcv_skb+0x159/0x420 [ 62.970461][ T6124] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 62.970472][ T6124] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 62.970490][ T6124] ? netlink_deliver_tap+0x1ae/0xcc0 [ 62.970505][ T6124] netlink_unicast+0x585/0x850 [ 62.970520][ T6124] ? __pfx_netlink_unicast+0x10/0x10 [ 62.970536][ T6124] netlink_sendmsg+0x8b0/0xda0 [ 62.970551][ T6124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.970563][ T6124] ? __might_fault+0xa0/0x140 [ 62.970609][ T6124] ____sys_sendmsg+0x9e1/0xb70 [ 62.970621][ T6124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.970635][ T6124] ? __pfx_____sys_sendmsg+0x10/0x10 [ 62.970659][ T6124] ___sys_sendmsg+0x190/0x1e0 [ 62.970673][ T6124] ? __pfx____sys_sendmsg+0x10/0x10 [ 62.970703][ T6124] __sys_sendmsg+0x170/0x220 [ 62.970719][ T6124] ? __pfx___sys_sendmsg+0x10/0x10 [ 62.970740][ T6124] ? rcu_is_watching+0x12/0xc0 [ 62.970758][ T6124] do_syscall_64+0x115/0x870 [ 62.970771][ T6124] ? clear_bhb_loop+0x40/0x90 [ 62.970783][ T6124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.970794][ T6124] RIP: 0033:0x7f8cf8d9ce59 [ 62.970804][ T6124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.970813][ T6124] RSP: 002b:00007f8cf9ceb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.970824][ T6124] RAX: ffffffffffffffda RBX: 00007f8cf9015fa0 RCX: 00007f8cf8d9ce59 [ 62.970830][ T6124] RDX: 0000000004040010 RSI: 00002000000012c0 RDI: 0000000000000004 [ 62.970836][ T6124] RBP: 00007f8cf9ceb090 R08: 0000000000000000 R09: 0000000000000000 [ 62.970842][ T6124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.970848][ T6124] R13: 00007f8cf9016038 R14: 00007f8cf9015fa0 R15: 00007ffe9fc4f588 [ 62.970861][ T6124] [ 63.163812][ T6131] autofs: Bad value for 'fd' [ 63.167566][ T6131] netlink: 92 bytes leftover after parsing attributes in process `syz.2.94'. [ 63.197324][ T6128] overlayfs: failed to resolve './file0/file0': -103 [ 63.202049][ T6135] syz.2.96 uses obsolete (PF_INET,SOCK_PACKET) [ 63.207875][ T6135] FAULT_INJECTION: forcing a failure. [ 63.207875][ T6135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.212797][ T6135] CPU: 2 UID: 0 PID: 6135 Comm: syz.2.96 Not tainted syzkaller #0 PREEMPT(full) [ 63.212813][ T6135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.212819][ T6135] Call Trace: [ 63.212823][ T6135] [ 63.212827][ T6135] dump_stack_lvl+0x100/0x190 [ 63.212844][ T6135] should_fail_ex.cold+0x5/0xa [ 63.212859][ T6135] _copy_from_iter+0x1f4/0x1690 [ 63.212876][ T6135] ? __pfx__copy_from_iter+0x10/0x10 [ 63.212888][ T6135] ? _parse_integer_limit+0x17f/0x1d0 [ 63.212905][ T6135] ? _kstrtoull+0x13c/0x1f0 [ 63.212920][ T6135] ? __pfx__kstrtoull+0x10/0x10 [ 63.212936][ T6135] tun_get_user+0x265/0x3c20 [ 63.212959][ T6135] ? __pfx_tun_get_user+0x10/0x10 [ 63.212975][ T6135] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 63.212995][ T6135] ? find_held_lock+0x2b/0x80 [ 63.213004][ T6135] ? tun_get+0x191/0x370 [ 63.213018][ T6135] ? tun_get+0x191/0x370 [ 63.213035][ T6135] tun_chr_write_iter+0xdc/0x200 [ 63.213052][ T6135] vfs_write+0x6ac/0x1070 [ 63.213065][ T6135] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 63.213082][ T6135] ? __pfx_vfs_write+0x10/0x10 [ 63.213092][ T6135] ? find_held_lock+0x2b/0x80 [ 63.213109][ T6135] ksys_write+0x12a/0x250 [ 63.213120][ T6135] ? __pfx_ksys_write+0x10/0x10 [ 63.213133][ T6135] ? rcu_is_watching+0x12/0xc0 [ 63.213150][ T6135] do_syscall_64+0x115/0x870 [ 63.213163][ T6135] ? clear_bhb_loop+0x40/0x90 [ 63.213176][ T6135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.213187][ T6135] RIP: 0033:0x7f8cf8d9ce59 [ 63.213196][ T6135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.213206][ T6135] RSP: 002b:00007f8cf9ceb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 63.213216][ T6135] RAX: ffffffffffffffda RBX: 00007f8cf9015fa0 RCX: 00007f8cf8d9ce59 [ 63.213223][ T6135] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000005 [ 63.213229][ T6135] RBP: 00007f8cf9ceb090 R08: 0000000000000000 R09: 0000000000000000 [ 63.213245][ T6135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.213252][ T6135] R13: 00007f8cf9016038 R14: 00007f8cf9015fa0 R15: 00007ffe9fc4f588 [ 63.213266][ T6135] [ 63.326222][ T6142] syzkaller0: entered promiscuous mode [ 63.327988][ T6142] syzkaller0: entered allmulticast mode [ 63.393397][ T40] kauditd_printk_skb: 59 callbacks suppressed [ 63.393408][ T40] audit: type=1400 audit(1780064239.902:295): avc: denied { map } for pid=6148 comm="syz.2.102" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.402965][ T40] audit: type=1400 audit(1780064239.902:296): avc: denied { read write } for pid=6148 comm="syz.2.102" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.414956][ T6149] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 63.452150][ T6151] FAULT_INJECTION: forcing a failure. [ 63.452150][ T6151] name failslab, interval 1, probability 0, space 0, times 0 [ 63.456802][ T6151] CPU: 2 UID: 0 PID: 6151 Comm: syz.2.103 Not tainted syzkaller #0 PREEMPT(full) [ 63.456818][ T6151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.456824][ T6151] Call Trace: [ 63.456829][ T6151] [ 63.456833][ T6151] dump_stack_lvl+0x100/0x190 [ 63.456850][ T6151] should_fail_ex.cold+0x5/0xa [ 63.456864][ T6151] ? __vb2_queue_alloc+0x23e/0x1160 [ 63.456880][ T6151] should_failslab+0xc2/0x120 [ 63.456892][ T6151] __kmalloc_noprof+0xe0/0x850 [ 63.456911][ T6151] __vb2_queue_alloc+0x23e/0x1160 [ 63.456934][ T6151] vb2_core_reqbufs+0x899/0xf30 [ 63.456953][ T6151] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 63.456975][ T6151] ? rcu_is_watching+0x12/0xc0 [ 63.457000][ T6151] ? __mutex_lock+0x26d/0x1b10 [ 63.457025][ T6151] ? __video_do_ioctl+0x50f/0xdf0 [ 63.457048][ T6151] vb2_ioctl_reqbufs+0x291/0x450 [ 63.457074][ T6151] ? __pfx_vb2_ioctl_reqbufs+0x10/0x10 [ 63.457096][ T6151] vidioc_reqbufs+0x86/0x100 [ 63.457108][ T6151] v4l_reqbufs+0x175/0x1d0 [ 63.457121][ T6151] __video_do_ioctl+0xb2a/0xdf0 [ 63.457136][ T6151] ? __might_fault+0xc5/0x140 [ 63.457151][ T6151] ? __pfx___video_do_ioctl+0x10/0x10 [ 63.457169][ T6151] video_usercopy+0x47d/0x1700 [ 63.457185][ T6151] ? __pfx___video_do_ioctl+0x10/0x10 [ 63.457200][ T6151] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 63.457218][ T6151] ? __pfx_video_usercopy+0x10/0x10 [ 63.457241][ T6151] v4l2_ioctl+0x1bd/0x250 [ 63.457255][ T6151] ? __pfx_v4l2_ioctl+0x10/0x10 [ 63.457269][ T6151] __x64_sys_ioctl+0x18e/0x210 [ 63.457282][ T6151] do_syscall_64+0x115/0x870 [ 63.457295][ T6151] ? clear_bhb_loop+0x40/0x90 [ 63.457308][ T6151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.457319][ T6151] RIP: 0033:0x7f8cf8d9ce59 [ 63.457329][ T6151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.457338][ T6151] RSP: 002b:00007f8cf9ceb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.457350][ T6151] RAX: ffffffffffffffda RBX: 00007f8cf9015fa0 RCX: 00007f8cf8d9ce59 [ 63.457356][ T6151] RDX: 00002000000001c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 63.457362][ T6151] RBP: 00007f8cf9ceb090 R08: 0000000000000000 R09: 0000000000000000 [ 63.457368][ T6151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.457374][ T6151] R13: 00007f8cf9016038 R14: 00007f8cf9015fa0 R15: 00007ffe9fc4f588 [ 63.457388][ T6151] [ 63.472920][ T6153] netlink: 16 bytes leftover after parsing attributes in process `syz.0.104'. [ 63.494595][ T40] audit: type=1400 audit(1780064240.002:297): avc: denied { create } for pid=6154 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.497595][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'. [ 63.497968][ T40] audit: type=1400 audit(1780064240.002:298): avc: denied { connect } for pid=6154 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.552764][ T6157] binder: 6152:6157 ioctl c0306201 2000000004c0 returned -14 [ 63.554124][ T40] audit: type=1400 audit(1780064240.012:299): avc: denied { bind } for pid=6154 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.559426][ T6157] binder: 6152:6157 ioctl c0306201 2000000003c0 returned -14 [ 63.565491][ T40] audit: type=1400 audit(1780064240.012:300): avc: denied { setopt } for pid=6154 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.565519][ T40] audit: type=1400 audit(1780064240.012:301): avc: denied { write } for pid=6154 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.590508][ T40] audit: type=1400 audit(1780064240.102:302): avc: denied { ioctl } for pid=6154 comm="syz.2.105" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12614 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.630595][ T1352] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 63.679455][ T40] audit: type=1400 audit(1780064240.182:303): avc: denied { getopt } for pid=6160 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.715146][ T40] audit: type=1400 audit(1780064240.222:304): avc: denied { write } for pid=6171 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 63.788696][ T6174] FAULT_INJECTION: forcing a failure. [ 63.788696][ T6174] name failslab, interval 1, probability 0, space 0, times 0 [ 63.792984][ T6174] CPU: 2 UID: 0 PID: 6174 Comm: syz.0.110 Not tainted syzkaller #0 PREEMPT(full) [ 63.793005][ T6174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.793014][ T6174] Call Trace: [ 63.793020][ T6174] [ 63.793028][ T6174] dump_stack_lvl+0x100/0x190 [ 63.793054][ T6174] should_fail_ex.cold+0x5/0xa [ 63.793071][ T6174] should_failslab+0xc2/0x120 [ 63.793083][ T6174] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 63.793099][ T6174] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 63.793116][ T6174] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 63.793131][ T6174] mmu_topup_memory_caches+0x25/0x170 [ 63.793147][ T6174] kvm_mmu_load+0xd6/0x23e0 [ 63.793160][ T6174] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 63.793177][ T6174] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 63.793194][ T6174] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 63.793211][ T6174] ? __pfx_kvm_mmu_load+0x10/0x10 [ 63.793224][ T6174] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 63.793236][ T6174] ? kvm_check_and_inject_events+0x961/0x1070 [ 63.793253][ T6174] vcpu_run+0x39f4/0x5ca0 [ 63.793273][ T6174] ? __pfx_vcpu_run+0x10/0x10 [ 63.793292][ T6174] ? rcu_is_watching+0x12/0xc0 [ 63.793310][ T6174] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 63.793324][ T6174] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 63.793343][ T6174] kvm_vcpu_ioctl+0x730/0x1720 [ 63.793355][ T6174] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 63.793366][ T6174] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 63.793379][ T6174] ? do_vfs_ioctl+0x226/0x13e0 [ 63.793391][ T6174] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 63.793402][ T6174] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 63.793423][ T6174] ? __fget_files+0x215/0x3d0 [ 63.793436][ T6174] ? hook_file_ioctl_common+0x149/0x410 [ 63.793451][ T6174] ? selinux_file_ioctl+0x13b/0x290 [ 63.793466][ T6174] ? selinux_file_ioctl+0xb6/0x290 [ 63.793483][ T6174] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 63.793494][ T6174] __x64_sys_ioctl+0x18e/0x210 [ 63.793506][ T6174] do_syscall_64+0x115/0x870 [ 63.793520][ T6174] ? clear_bhb_loop+0x40/0x90 [ 63.793532][ T6174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.793543][ T6174] RIP: 0033:0x7fa0b0f9ce59 [ 63.793552][ T6174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.793562][ T6174] RSP: 002b:00007fa0af1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.793573][ T6174] RAX: ffffffffffffffda RBX: 00007fa0b1215fa0 RCX: 00007fa0b0f9ce59 [ 63.793580][ T6174] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 63.793585][ T6174] RBP: 00007fa0af1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 63.793591][ T6174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.793597][ T6174] R13: 00007fa0b1216038 R14: 00007fa0b1215fa0 R15: 00007fffff87eaf8 [ 63.793615][ T6174] [ 63.800339][ T1352] usb 8-1: Using ep0 maxpacket: 8 [ 63.811313][ T61] Bluetooth: hci3: command tx timeout [ 63.814654][ T1352] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 63.907713][ T1352] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 63.911744][ T1352] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 63.915699][ T1352] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 63.919698][ T1352] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.924872][ T1352] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 63.928272][ T1352] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.139936][ T1352] usb 8-1: GET_CAPABILITIES returned 0 [ 64.141843][ T1352] usbtmc 8-1:16.0: can't read capabilities [ 64.342161][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.345405][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.348175][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.350956][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.353695][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.356672][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.359561][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.362604][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.366064][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.368898][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.371894][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.376779][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.380525][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.384223][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.387755][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.392910][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 64.398489][ T844] usb 8-1: USB disconnect, device number 2 [ 64.494589][ T6182] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.503249][ T6182] bridge_slave_0 (unregistering): left allmulticast mode [ 64.505488][ T6182] bridge_slave_0 (unregistering): left promiscuous mode [ 64.508290][ T6182] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.575356][ T6185] syzkaller0: entered promiscuous mode [ 64.577195][ T6185] syzkaller0: entered allmulticast mode [ 64.651087][ T6189] netlink: 7 bytes leftover after parsing attributes in process `syz.2.115'. [ 64.688039][ T6193] capability: warning: `syz.1.117' uses deprecated v2 capabilities in a way that may be insecure [ 64.842993][ T6200] xt_hashlimit: size too large, truncated to 1048576 [ 64.971506][ T6206] syz_tun: entered allmulticast mode [ 65.000683][ T3263] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 65.140457][ T3263] usb 6-1: device descriptor read/64, error -71 [ 65.210581][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 65.264472][ T6212] sctp: [Deprecated]: syz.3.125 (pid 6212) Use of struct sctp_assoc_value in delayed_ack socket option. [ 65.264472][ T6212] Use struct sctp_sack_info instead [ 65.372036][ T29] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 65.377397][ T29] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 65.380774][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 65.382058][ T6214] syzkaller0: entered promiscuous mode [ 65.383574][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 65.385222][ T6214] syzkaller0: entered allmulticast mode [ 65.390421][ T3263] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 65.393991][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 65.399211][ T29] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 65.402199][ T29] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 65.404693][ T29] usb 5-1: Product: syz [ 65.405984][ T29] usb 5-1: Manufacturer: syz [ 65.417468][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 65.423010][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 65.427466][ T29] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 65.429589][ T29] cdc_wdm 5-1:1.0: Unknown control protocol [ 65.541632][ T3263] usb 6-1: device descriptor read/64, error -71 [ 65.557933][ T6220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.128'. [ 65.561021][ T6220] openvswitch: netlink: Flow key attr not present in new flow. [ 65.571858][ T6222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.129'. [ 65.642506][ T6231] 8021q: VLANs not supported on ip6tnl0 [ 65.651997][ T3263] usb usb6-port1: attempt power cycle [ 65.716793][ T6233] FAULT_INJECTION: forcing a failure. [ 65.716793][ T6233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.722959][ T6233] CPU: 2 UID: 0 PID: 6233 Comm: syz.2.133 Not tainted syzkaller #0 PREEMPT(full) [ 65.722984][ T6233] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.722994][ T6233] Call Trace: [ 65.722999][ T6233] [ 65.723019][ T6233] dump_stack_lvl+0x100/0x190 [ 65.723041][ T6233] should_fail_ex.cold+0x5/0xa [ 65.723064][ T6233] _copy_to_user+0x32/0xd0 [ 65.723087][ T6233] simple_read_from_buffer+0xcb/0x170 [ 65.723109][ T6233] proc_fail_nth_read+0x1af/0x230 [ 65.723142][ T6233] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.723163][ T6233] ? rw_verify_area+0xce/0x6d0 [ 65.723179][ T6233] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.723195][ T6233] vfs_read+0x1e4/0xb30 [ 65.723216][ T6233] ? __pfx_vfs_read+0x10/0x10 [ 65.723234][ T6233] ? __fget_files+0x215/0x3d0 [ 65.723261][ T6233] ? __fget_files+0x21f/0x3d0 [ 65.723289][ T6233] ksys_read+0x12a/0x250 [ 65.723306][ T6233] ? __pfx_ksys_read+0x10/0x10 [ 65.723326][ T6233] ? rcu_is_watching+0x12/0xc0 [ 65.723355][ T6233] do_syscall_64+0x115/0x870 [ 65.723375][ T6233] ? clear_bhb_loop+0x40/0x90 [ 65.723396][ T6233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.723413][ T6233] RIP: 0033:0x7f8cf8d5d68e [ 65.723427][ T6233] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 65.723443][ T6233] RSP: 002b:00007f8cf9ceafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 65.723460][ T6233] RAX: ffffffffffffffda RBX: 00007f8cf9ceb6c0 RCX: 00007f8cf8d5d68e [ 65.723471][ T6233] RDX: 000000000000000f RSI: 00007f8cf9ceb0a0 RDI: 0000000000000006 [ 65.723480][ T6233] RBP: 00007f8cf9ceb090 R08: 0000000000000000 R09: 0000000000000000 [ 65.723489][ T6233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.723499][ T6233] R13: 00007f8cf9016038 R14: 00007f8cf9015fa0 R15: 00007ffe9fc4f588 [ 65.723521][ T6233] [ 65.878411][ C0] cdc_wdm 5-1:1.0: Unexpected error -71 [ 65.879626][ T5832] usb 5-1: USB disconnect, device number 2 [ 65.881457][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 65.884930][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 65.886719][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 66.000414][ T3263] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 66.021607][ T3263] usb 6-1: device descriptor read/8, error -71 [ 66.048841][ T6239] SELinux: unknown common [ 66.051821][ T6239] SELinux: failed to load policy [ 66.260478][ T3263] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 66.292025][ T3263] usb 6-1: device descriptor read/8, error -71 [ 66.294488][ T6251] FAULT_INJECTION: forcing a failure. [ 66.294488][ T6251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.300169][ T6251] CPU: 3 UID: 0 PID: 6251 Comm: syz.2.138 Not tainted syzkaller #0 PREEMPT(full) [ 66.300191][ T6251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.300201][ T6251] Call Trace: [ 66.300208][ T6251] [ 66.300215][ T6251] dump_stack_lvl+0x100/0x190 [ 66.300240][ T6251] should_fail_ex.cold+0x5/0xa [ 66.300281][ T6251] _copy_from_user+0x2e/0xd0 [ 66.300304][ T6251] __sys_bpf+0x243/0x4b90 [ 66.300335][ T6251] ? __pfx___sys_bpf+0x10/0x10 [ 66.300357][ T6251] ? proc_fail_nth_write+0x9f/0x220 [ 66.300377][ T6251] ? find_held_lock+0x2b/0x80 [ 66.300397][ T6251] ? find_held_lock+0x2b/0x80 [ 66.300412][ T6251] ? ksys_write+0x190/0x250 [ 66.300431][ T6251] ? ksys_write+0x190/0x250 [ 66.300452][ T6251] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 66.300475][ T6251] ? kernel_write+0x6b3/0x6c0 [ 66.300494][ T6251] ? __fget_files+0x215/0x3d0 [ 66.300527][ T6251] ? fput+0x79/0x100 [ 66.300550][ T6251] ? ksys_write+0x1ac/0x250 [ 66.300569][ T6251] ? __pfx_ksys_write+0x10/0x10 [ 66.300592][ T6251] __x64_sys_bpf+0x7b/0xc0 [ 66.300617][ T6251] ? lockdep_hardirqs_on+0x78/0x100 [ 66.300639][ T6251] do_syscall_64+0x115/0x870 [ 66.300660][ T6251] ? clear_bhb_loop+0x40/0x90 [ 66.300681][ T6251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.300698][ T6251] RIP: 0033:0x7f8cf8d9ce59 [ 66.300713][ T6251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.300727][ T6251] RSP: 002b:00007f8cf9ceb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 66.300744][ T6251] RAX: ffffffffffffffda RBX: 00007f8cf9015fa0 RCX: 00007f8cf8d9ce59 [ 66.300754][ T6251] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 66.300764][ T6251] RBP: 00007f8cf9ceb090 R08: 0000000000000000 R09: 0000000000000000 [ 66.300774][ T6251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.300784][ T6251] R13: 00007f8cf9016038 R14: 00007f8cf9015fa0 R15: 00007ffe9fc4f588 [ 66.300807][ T6251] [ 66.411704][ T3263] usb usb6-port1: unable to enumerate USB device [ 66.768056][ T6269] syzkaller0: entered promiscuous mode [ 66.770396][ T6269] syzkaller0: entered allmulticast mode [ 66.774422][ T6269] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 66.850365][ T844] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 66.938187][ T6271] dlm: plock device version mismatch: kernel (1.2.0), user (4278578689.87487902.491320259) [ 67.001717][ T844] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 67.004529][ T844] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 67.007977][ T844] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 67.010939][ T844] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 67.017433][ T844] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 67.020848][ T844] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 67.023345][ T844] usb 5-1: Product: syz [ 67.024948][ T844] usb 5-1: Manufacturer: syz [ 67.033195][ T844] cdc_wdm 5-1:1.0: skipping garbage [ 67.034943][ T844] cdc_wdm 5-1:1.0: skipping garbage [ 67.036749][ T844] cdc_wdm 5-1:1.0: skipping garbage [ 67.038456][ T844] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 67.203554][ T6274] netlink: 'syz.3.147': attribute type 4 has an invalid length. [ 67.434363][ T6287] FAULT_INJECTION: forcing a failure. [ 67.434363][ T6287] name failslab, interval 1, probability 0, space 0, times 0 [ 67.439578][ T6287] CPU: 1 UID: 0 PID: 6287 Comm: syz.3.151 Not tainted syzkaller #0 PREEMPT(full) [ 67.439601][ T6287] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.439611][ T6287] Call Trace: [ 67.439617][ T6287] [ 67.439624][ T6287] dump_stack_lvl+0x100/0x190 [ 67.439649][ T6287] should_fail_ex.cold+0x5/0xa [ 67.439673][ T6287] should_failslab+0xc2/0x120 [ 67.439694][ T6287] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 67.439721][ T6287] ? copy_process+0x69a/0x7ed0 [ 67.439746][ T6287] ? mark_held_locks+0x40/0x70 [ 67.439771][ T6287] copy_process+0x69a/0x7ed0 [ 67.439811][ T6287] ? __pfx_copy_process+0x10/0x10 [ 67.439841][ T6287] ? lockdep_init_map_type+0x5c/0x250 [ 67.439863][ T6287] ? lockdep_init_map_type+0x5c/0x250 [ 67.439886][ T6287] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 67.439906][ T6287] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 67.439933][ T6287] vhost_task_create+0x1db/0x370 [ 67.439976][ T6287] ? __pfx_vhost_task_create+0x10/0x10 [ 67.439998][ T6287] ? register_lock_class+0x40/0x560 [ 67.440026][ T6287] ? __pfx_vhost_task_fn+0x10/0x10 [ 67.440051][ T6287] ? __pfx___mutex_lock+0x10/0x10 [ 67.440075][ T6287] ? kasan_quarantine_put+0x104/0x240 [ 67.440109][ T6287] kvm_mmu_post_init_vm+0x1b3/0x370 [ 67.440134][ T6287] kvm_arch_vcpu_ioctl_run+0x66/0x1890 [ 67.440158][ T6287] ? kvm_vcpu_ioctl+0x1546/0x1720 [ 67.440183][ T6287] kvm_vcpu_ioctl+0x730/0x1720 [ 67.440203][ T6287] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 67.440221][ T6287] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 67.440243][ T6287] ? do_vfs_ioctl+0x226/0x13e0 [ 67.440279][ T6287] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 67.440302][ T6287] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 67.440337][ T6287] ? __fget_files+0x215/0x3d0 [ 67.440358][ T6287] ? hook_file_ioctl_common+0x149/0x410 [ 67.440384][ T6287] ? selinux_file_ioctl+0x13b/0x290 [ 67.440408][ T6287] ? selinux_file_ioctl+0xb6/0x290 [ 67.440435][ T6287] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 67.440453][ T6287] __x64_sys_ioctl+0x18e/0x210 [ 67.440474][ T6287] do_syscall_64+0x115/0x870 [ 67.440495][ T6287] ? clear_bhb_loop+0x40/0x90 [ 67.440517][ T6287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.440534][ T6287] RIP: 0033:0x7fd0bb59ce59 [ 67.440549][ T6287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.440564][ T6287] RSP: 002b:00007fd0bc3d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.440581][ T6287] RAX: ffffffffffffffda RBX: 00007fd0bb815fa0 RCX: 00007fd0bb59ce59 [ 67.440596][ T6287] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 67.440606][ T6287] RBP: 00007fd0bc3d4090 R08: 0000000000000000 R09: 0000000000000000 [ 67.440615][ T6287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.440625][ T6287] R13: 00007fd0bb816038 R14: 00007fd0bb815fa0 R15: 00007ffef4039448 [ 67.440649][ T6287] [ 67.785579][ T6294] syzkaller0: entered promiscuous mode [ 67.787401][ T6294] syzkaller0: entered allmulticast mode [ 67.791412][ T6294] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 67.868695][ T6296] FAULT_INJECTION: forcing a failure. [ 67.868695][ T6296] name failslab, interval 1, probability 0, space 0, times 0 [ 67.873618][ T6296] CPU: 1 UID: 0 PID: 6296 Comm: syz.3.155 Not tainted syzkaller #0 PREEMPT(full) [ 67.873641][ T6296] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.873651][ T6296] Call Trace: [ 67.873657][ T6296] [ 67.873663][ T6296] dump_stack_lvl+0x100/0x190 [ 67.873687][ T6296] should_fail_ex.cold+0x5/0xa [ 67.873711][ T6296] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 67.873734][ T6296] should_failslab+0xc2/0x120 [ 67.873752][ T6296] __kmalloc_noprof+0xe0/0x850 [ 67.873781][ T6296] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 67.873811][ T6296] genl_family_rcv_msg_doit+0xc7/0x300 [ 67.873837][ T6296] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 67.873867][ T6296] ? bpf_lsm_capable+0x9/0x10 [ 67.873883][ T6296] ? security_capable+0x80/0x260 [ 67.873904][ T6296] ? ns_capable+0xd2/0xf0 [ 67.873919][ T6296] genl_rcv_msg+0x560/0x800 [ 67.873935][ T6296] ? __pfx_genl_rcv_msg+0x10/0x10 [ 67.873950][ T6296] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 67.873965][ T6296] ? __pfx_nl80211_wiphy_netns+0x10/0x10 [ 67.873979][ T6296] ? __pfx_nl80211_post_doit+0x10/0x10 [ 67.873998][ T6296] netlink_rcv_skb+0x159/0x420 [ 67.874011][ T6296] ? __pfx_genl_rcv_msg+0x10/0x10 [ 67.874031][ T6296] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 67.874049][ T6296] ? netlink_deliver_tap+0x1ae/0xcc0 [ 67.874063][ T6296] genl_rcv+0x28/0x40 [ 67.874076][ T6296] netlink_unicast+0x585/0x850 [ 67.874091][ T6296] ? __pfx_netlink_unicast+0x10/0x10 [ 67.874107][ T6296] netlink_sendmsg+0x8b0/0xda0 [ 67.874122][ T6296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.874134][ T6296] ? __might_fault+0xa0/0x140 [ 67.874154][ T6296] ____sys_sendmsg+0x9e1/0xb70 [ 67.874165][ T6296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.874179][ T6296] ? __pfx_____sys_sendmsg+0x10/0x10 [ 67.874197][ T6296] ___sys_sendmsg+0x190/0x1e0 [ 67.874211][ T6296] ? __pfx____sys_sendmsg+0x10/0x10 [ 67.874240][ T6296] __sys_sendmsg+0x170/0x220 [ 67.874256][ T6296] ? __pfx___sys_sendmsg+0x10/0x10 [ 67.874277][ T6296] ? rcu_is_watching+0x12/0xc0 [ 67.874294][ T6296] do_syscall_64+0x115/0x870 [ 67.874307][ T6296] ? clear_bhb_loop+0x40/0x90 [ 67.874320][ T6296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.874331][ T6296] RIP: 0033:0x7fd0bb59ce59 [ 67.874340][ T6296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.874350][ T6296] RSP: 002b:00007fd0bc3d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.874361][ T6296] RAX: ffffffffffffffda RBX: 00007fd0bb815fa0 RCX: 00007fd0bb59ce59 [ 67.874367][ T6296] RDX: 0000000020000084 RSI: 0000200000000380 RDI: 0000000000000003 [ 67.874373][ T6296] RBP: 00007fd0bc3d4090 R08: 0000000000000000 R09: 0000000000000000 [ 67.874379][ T6296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.874385][ T6296] R13: 00007fd0bb816038 R14: 00007fd0bb815fa0 R15: 00007ffef4039448 [ 67.874398][ T6296] [ 67.924014][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.156'. [ 68.086736][ T6304] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 68.091823][ T6304] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:0 [ 68.476594][ T46] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.488556][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.493140][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.499624][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.526043][ T6319] netlink: 36 bytes leftover after parsing attributes in process `syz.1.163'. [ 68.530333][ T6315] FAULT_INJECTION: forcing a failure. [ 68.530333][ T6315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.532691][ T6317] syzkaller0: entered promiscuous mode [ 68.534550][ T6315] CPU: 1 UID: 0 PID: 6315 Comm: syz.2.161 Not tainted syzkaller #0 PREEMPT(full) [ 68.534570][ T6315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.534578][ T6315] Call Trace: [ 68.534584][ T6315] [ 68.534591][ T6315] dump_stack_lvl+0x100/0x190 [ 68.534616][ T6315] should_fail_ex.cold+0x5/0xa [ 68.534648][ T6315] _copy_from_iter+0x1f4/0x1690 [ 68.534676][ T6315] ? __pfx__copy_from_iter+0x10/0x10 [ 68.534694][ T6315] ? _parse_integer_limit+0x17f/0x1d0 [ 68.534712][ T6315] ? _kstrtoull+0x13c/0x1f0 [ 68.534726][ T6315] ? __pfx__kstrtoull+0x10/0x10 [ 68.534742][ T6315] tun_get_user+0x3ba/0x3c20 [ 68.534765][ T6315] ? __pfx_tun_get_user+0x10/0x10 [ 68.534782][ T6315] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 68.534801][ T6315] ? find_held_lock+0x2b/0x80 [ 68.534811][ T6315] ? tun_get+0x191/0x370 [ 68.534824][ T6315] ? tun_get+0x191/0x370 [ 68.534842][ T6315] tun_chr_write_iter+0xdc/0x200 [ 68.534859][ T6315] vfs_write+0x6ac/0x1070 [ 68.534872][ T6315] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 68.534889][ T6315] ? __pfx_vfs_write+0x10/0x10 [ 68.534899][ T6315] ? find_held_lock+0x2b/0x80 [ 68.534917][ T6315] ksys_write+0x12a/0x250 [ 68.534928][ T6315] ? __pfx_ksys_write+0x10/0x10 [ 68.534940][ T6315] ? rcu_is_watching+0x12/0xc0 [ 68.534957][ T6315] do_syscall_64+0x115/0x870 [ 68.534970][ T6315] ? clear_bhb_loop+0x40/0x90 [ 68.534982][ T6315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.534993][ T6315] RIP: 0033:0x7f8cf8d9ce59 [ 68.535003][ T6315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.535012][ T6315] RSP: 002b:00007f8cf9ceb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 68.535023][ T6315] RAX: ffffffffffffffda RBX: 00007f8cf9015fa0 RCX: 00007f8cf8d9ce59 [ 68.535029][ T6315] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000005 [ 68.535035][ T6315] RBP: 00007f8cf9ceb090 R08: 0000000000000000 R09: 0000000000000000 [ 68.535041][ T6315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.535046][ T6315] R13: 00007f8cf9016038 R14: 00007f8cf9015fa0 R15: 00007ffe9fc4f588 [ 68.535059][ T6315] [ 68.618711][ T6317] syzkaller0: entered allmulticast mode [ 68.661520][ T40] kauditd_printk_skb: 542 callbacks suppressed [ 68.661531][ T40] audit: type=1400 audit(1780064245.172:847): avc: denied { read } for pid=6322 comm="syz.1.164" name="ptp0" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.670131][ T40] audit: type=1400 audit(1780064245.172:848): avc: denied { open } for pid=6322 comm="syz.1.164" path="/dev/ptp0" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.678653][ T40] audit: type=1400 audit(1780064245.172:849): avc: denied { ioctl } for pid=6322 comm="syz.1.164" path="/dev/ptp0" dev="devtmpfs" ino=730 ioctlcmd=0x3d0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.819280][ T6330] syzkaller0: entered promiscuous mode [ 68.821509][ T6330] syzkaller0: entered allmulticast mode [ 68.825484][ T6330] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 68.870806][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'. [ 69.120328][ T1352] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 69.220393][ T29] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 69.283295][ T1352] usb 6-1: config 0 interface 0 altsetting 12 bulk endpoint 0x6 has invalid maxpacket 1023 [ 69.286468][ T1352] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x82 has invalid wMaxPacketSize 0 [ 69.289459][ T1352] usb 6-1: config 0 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 0 [ 69.292945][ T1352] usb 6-1: config 0 interface 0 has no altsetting 0 [ 69.296671][ T1352] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 69.299575][ T1352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.302542][ T1352] usb 6-1: Product: syz [ 69.303873][ T1352] usb 6-1: Manufacturer: syz [ 69.305364][ T1352] usb 6-1: SerialNumber: syz [ 69.308124][ T1352] usb 6-1: config 0 descriptor?? [ 69.311047][ T6333] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 69.371505][ T29] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 69.374867][ T29] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.378739][ T29] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 69.382167][ T29] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.385838][ T29] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.389962][ T29] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 69.392874][ T29] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 69.395358][ T29] usb 8-1: Product: syz [ 69.396725][ T29] usb 8-1: Manufacturer: syz [ 69.405630][ T29] cdc_wdm 8-1:1.0: skipping garbage [ 69.407353][ T29] cdc_wdm 8-1:1.0: skipping garbage [ 69.409855][ T29] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 69.411831][ T29] cdc_wdm 8-1:1.0: Unknown control protocol [ 69.515918][ T844] usb 6-1: USB disconnect, device number 8 [ 69.604990][ T6335] FAULT_INJECTION: forcing a failure. [ 69.604990][ T6335] name failslab, interval 1, probability 0, space 0, times 0 [ 69.608839][ T6335] CPU: 1 UID: 0 PID: 6335 Comm: syz.3.169 Not tainted syzkaller #0 PREEMPT(full) [ 69.608855][ T6335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.608861][ T6335] Call Trace: [ 69.608866][ T6335] [ 69.608870][ T6335] dump_stack_lvl+0x100/0x190 [ 69.608886][ T6335] should_fail_ex.cold+0x5/0xa [ 69.608900][ T6335] should_failslab+0xc2/0x120 [ 69.608913][ T6335] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 69.608928][ T6335] ? security_file_alloc+0x34/0x2c0 [ 69.608949][ T6335] ? trace_kmem_cache_alloc+0xd5/0x100 [ 69.608963][ T6335] security_file_alloc+0x34/0x2c0 [ 69.608979][ T6335] init_file+0x95/0x480 [ 69.608994][ T6335] alloc_empty_file+0x79/0x1c0 [ 69.609010][ T6335] path_openat+0xe8/0x31a0 [ 69.609023][ T6335] ? kasan_save_stack+0x3f/0x50 [ 69.609032][ T6335] ? kasan_save_stack+0x30/0x50 [ 69.609041][ T6335] ? kasan_save_track+0x14/0x30 [ 69.609050][ T6335] ? __kasan_slab_alloc+0x89/0x90 [ 69.609060][ T6335] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 69.609075][ T6335] ? do_getname+0x35/0x390 [ 69.609090][ T6335] ? do_sys_openat2+0xc5/0x1e0 [ 69.609105][ T6335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.609117][ T6335] ? __pfx_path_openat+0x10/0x10 [ 69.609135][ T6335] do_file_open+0x20e/0x430 [ 69.609150][ T6335] ? __pfx_do_file_open+0x10/0x10 [ 69.609172][ T6335] ? alloc_fd+0x476/0x790 [ 69.609187][ T6335] ? do_getname+0x191/0x390 [ 69.609203][ T6335] do_sys_openat2+0x10d/0x1e0 [ 69.609219][ T6335] ? __pfx_do_sys_openat2+0x10/0x10 [ 69.609233][ T6335] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 69.609249][ T6335] ? __fget_files+0x21f/0x3d0 [ 69.609264][ T6335] __x64_sys_openat+0x12d/0x210 [ 69.609280][ T6335] ? __pfx___x64_sys_openat+0x10/0x10 [ 69.609295][ T6335] ? ksys_write+0x1ac/0x250 [ 69.609308][ T6335] ? rcu_is_watching+0x12/0xc0 [ 69.609324][ T6335] do_syscall_64+0x115/0x870 [ 69.609338][ T6335] ? clear_bhb_loop+0x40/0x90 [ 69.609350][ T6335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.609361][ T6335] RIP: 0033:0x7fd0bb55d68e [ 69.609370][ T6335] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 69.609381][ T6335] RSP: 002b:00007fd0bc3d3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 69.609392][ T6335] RAX: ffffffffffffffda RBX: 00007fd0bc3d46c0 RCX: 00007fd0bb55d68e [ 69.609398][ T6335] RDX: 0000000000000002 RSI: 00007fd0bc3d3c00 RDI: ffffffffffffff9c [ 69.609404][ T6335] RBP: 00007fd0bc3d4090 R08: 0000000000000000 R09: 0000000000000000 [ 69.609410][ T6335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.609416][ T6335] R13: 00007fd0bb816038 R14: 00007fd0bb815fa0 R15: 00007ffef4039448 [ 69.609430][ T6335] [ 69.609937][ T29] usb 8-1: USB disconnect, device number 3 [ 69.624120][ T5108] usb 5-1: USB disconnect, device number 3 [ 69.706688][ T6337] tmpfs: Bad value for 'mpol' [ 69.707060][ T40] audit: type=1400 audit(1780064246.212:850): avc: denied { mounton } for pid=6336 comm="syz.0.170" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 69.719072][ T40] audit: type=1326 audit(1780064246.222:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6340 comm="syz.2.172" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8cf8d9ce59 code=0x0 [ 69.746039][ T40] audit: type=1400 audit(1780064246.252:852): avc: denied { create } for pid=6336 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.753410][ T6337] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 69.753891][ T40] audit: type=1400 audit(1780064246.252:853): avc: denied { bind } for pid=6336 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.764144][ T40] audit: type=1400 audit(1780064246.252:854): avc: denied { listen } for pid=6336 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.772184][ T40] audit: type=1400 audit(1780064246.252:855): avc: denied { connect } for pid=6336 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.825278][ T40] audit: type=1326 audit(1780064246.332:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6340 comm="syz.2.172" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf8d9ce59 code=0x7ffc0000 [ 69.825935][ T6343] FAULT_INJECTION: forcing a failure. [ 69.825935][ T6343] name failslab, interval 1, probability 0, space 0, times 0 [ 69.839514][ T6343] CPU: 2 UID: 0 PID: 6343 Comm: syz.2.172 Not tainted syzkaller #0 PREEMPT(full) [ 69.839529][ T6343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.839536][ T6343] Call Trace: [ 69.839539][ T6343] [ 69.839544][ T6343] dump_stack_lvl+0x100/0x190 [ 69.839560][ T6343] should_fail_ex.cold+0x5/0xa [ 69.839575][ T6343] ? lsm_blob_alloc+0x68/0x90 [ 69.839586][ T6343] should_failslab+0xc2/0x120 [ 69.839599][ T6343] __kmalloc_noprof+0xe0/0x850 [ 69.839615][ T6343] ? audit_alloc+0xa2/0x7b0 [ 69.839630][ T6343] lsm_blob_alloc+0x68/0x90 [ 69.839641][ T6343] security_task_alloc+0x2a/0x260 [ 69.839652][ T6343] copy_process+0x2865/0x7ed0 [ 69.839668][ T6343] ? stack_trace_save+0x8e/0xc0 [ 69.839686][ T6343] ? __pfx_copy_process+0x10/0x10 [ 69.839700][ T6343] ? __do_sys_io_uring_enter+0xa88/0x1b50 [ 69.839715][ T6343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.839731][ T6343] ? __pfx_io_wq_worker+0x10/0x10 [ 69.839746][ T6343] create_io_thread+0xc2/0x110 [ 69.839762][ T6343] ? __pfx_create_io_thread+0x10/0x10 [ 69.839781][ T6343] ? __pfx_io_wq_worker+0x10/0x10 [ 69.839796][ T6343] ? lockdep_init_map_type+0x5c/0x250 [ 69.839810][ T6343] ? lockdep_init_map_type+0x5c/0x250 [ 69.839823][ T6343] ? __init_swait_queue_head+0xca/0x150 [ 69.839840][ T6343] create_io_worker+0x1cd/0x5b0 [ 69.839855][ T6343] io_wq_enqueue+0x4d8/0x970 [ 69.839869][ T6343] ? __pfx_io_wq_enqueue+0x10/0x10 [ 69.839882][ T6343] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 69.839896][ T6343] ? io_prep_async_work+0x3ab/0x720 [ 69.839910][ T6343] io_queue_iowq+0x232/0x5c0 [ 69.839923][ T6343] io_queue_sqe_fallback+0x16b/0x210 [ 69.839937][ T6343] ? __asan_memset+0x23/0x50 [ 69.839952][ T6343] io_submit_sqes+0x15a8/0x24b0 [ 69.839973][ T6343] __do_sys_io_uring_enter+0xa88/0x1b50 [ 69.839992][ T6343] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 69.840005][ T6343] ? __pfx___seccomp_filter+0x10/0x10 [ 69.840023][ T6343] ? ksys_write+0x1ac/0x250 [ 69.840035][ T6343] ? __pfx_ksys_write+0x10/0x10 [ 69.840056][ T6343] do_syscall_64+0x115/0x870 [ 69.840070][ T6343] ? clear_bhb_loop+0x40/0x90 [ 69.840083][ T6343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.840094][ T6343] RIP: 0033:0x7f8cf8d9ce59 [ 69.840103][ T6343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.840113][ T6343] RSP: 002b:00007f8cf9cca028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 69.840125][ T6343] RAX: ffffffffffffffda RBX: 00007f8cf9016090 RCX: 00007f8cf8d9ce59 [ 69.840131][ T6343] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 69.840137][ T6343] RBP: 00007f8cf9cca090 R08: 0000000000000000 R09: 0000000000000000 [ 69.840143][ T6343] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000002 [ 69.840149][ T6343] R13: 00007f8cf9016128 R14: 00007f8cf9016090 R15: 00007ffe9fc4f588 [ 69.840162][ T6343] [ 70.067947][ T6350] syzkaller0: entered promiscuous mode [ 70.069735][ T6350] syzkaller0: entered allmulticast mode [ 70.480443][ T5832] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 70.530350][ T5879] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 70.650375][ T5832] usb 8-1: Using ep0 maxpacket: 8 [ 70.653704][ T5832] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 70.659877][ T5832] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 70.662986][ T5832] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 70.666013][ T5832] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 70.669579][ T5832] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.674550][ T5832] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 70.677871][ T5832] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.682549][ T5879] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 70.687872][ T5879] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 70.702836][ T5879] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 70.706278][ T5879] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 70.712348][ T6371] ======================================================= [ 70.712348][ T6371] WARNING: The mand mount option has been deprecated and [ 70.712348][ T6371] and is ignored by this kernel. Remove the mand [ 70.712348][ T6371] option from the mount to silence this warning. [ 70.712348][ T6371] ======================================================= [ 70.712762][ T5879] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 70.727894][ T5879] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 70.730214][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 70.733514][ T5879] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 70.739430][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 70.739449][ T5879] usb 6-1: Product: syz [ 70.739461][ T5879] usb 6-1: Manufacturer: syz [ 70.749242][ T5879] cdc_wdm 6-1:1.0: skipping garbage [ 70.751840][ T5879] cdc_wdm 6-1:1.0: skipping garbage [ 70.751892][ T5879] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 70.887490][ T5832] usb 8-1: GET_CAPABILITIES returned 0 [ 70.889271][ T5832] usbtmc 8-1:16.0: can't read capabilities [ 71.000521][ T1352] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 71.090288][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.093714][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.096592][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.099754][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.102607][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.105669][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.108211][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.110893][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.113678][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.116388][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.119133][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.121819][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.124549][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.127269][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.130347][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.133078][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 71.136368][ T10] usb 8-1: USB disconnect, device number 4 [ 71.162660][ T1352] usb 5-1: config 0 interface 0 altsetting 12 bulk endpoint 0x6 has invalid maxpacket 1023 [ 71.166014][ T1352] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x82 has invalid wMaxPacketSize 0 [ 71.168953][ T1352] usb 5-1: config 0 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 0 [ 71.172068][ T1352] usb 5-1: config 0 interface 0 has no altsetting 0 [ 71.176981][ T1352] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 71.179843][ T1352] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.182899][ T1352] usb 5-1: Product: syz [ 71.184227][ T1352] usb 5-1: Manufacturer: syz [ 71.185665][ T1352] usb 5-1: SerialNumber: syz [ 71.189662][ T1352] usb 5-1: config 0 descriptor?? [ 71.191738][ T6373] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 71.232048][ T6376] kvm: pic: non byte write [ 71.365007][ T6380] syzkaller0: entered promiscuous mode [ 71.366750][ T6380] syzkaller0: entered allmulticast mode [ 71.399726][ T39] usb 5-1: USB disconnect, device number 4 [ 71.492568][ T6382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.185'. [ 71.496390][ T6382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.185'. [ 71.945998][ T6396] binder: 6395:6396 ioctl c0306201 0 returned -14 [ 71.971543][ T6398] syzkaller0: entered promiscuous mode [ 71.974247][ T6398] syzkaller0: entered allmulticast mode [ 71.979514][ T6398] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 72.058824][ T6407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.195'. [ 72.135950][ T6411] openvswitch: netlink: Actions may not be safe on all matching packets [ 72.172003][ T6417] netlink: 48 bytes leftover after parsing attributes in process `syz.3.200'. [ 72.176929][ T6419] netlink: 48 bytes leftover after parsing attributes in process `syz.3.200'. [ 72.353397][ T6428] ip6t_rpfilter: unknown options [ 72.410354][ T39] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 72.460696][ T1352] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 72.475952][ T6428] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 72.480516][ T6428] block device autoloading is deprecated and will be removed. [ 72.581734][ T39] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 72.584517][ T39] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 72.587656][ T39] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 72.590654][ T39] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 72.593948][ T39] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 72.598883][ T39] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 72.602043][ T39] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 72.604755][ T39] usb 7-1: Product: syz [ 72.606152][ T39] usb 7-1: Manufacturer: syz [ 72.612856][ T1352] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 72.615628][ T1352] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 72.616315][ T39] cdc_wdm 7-1:1.0: skipping garbage [ 72.618786][ T1352] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 72.618813][ T1352] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 72.618827][ T1352] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 72.619958][ T1352] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 72.621701][ T39] cdc_wdm 7-1:1.0: skipping garbage [ 72.624445][ T1352] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 72.630590][ T39] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 72.632237][ T1352] usb 8-1: Product: syz [ 72.635776][ T39] cdc_wdm 7-1:1.0: Unknown control protocol [ 72.637363][ T1352] usb 8-1: Manufacturer: syz [ 72.657809][ T1352] cdc_wdm 8-1:1.0: skipping garbage [ 72.659784][ T1352] cdc_wdm 8-1:1.0: skipping garbage [ 72.663065][ T1352] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 72.665055][ T1352] cdc_wdm 8-1:1.0: Unknown control protocol [ 72.910903][ T6432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.914028][ T6432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.119939][ T39] usb 8-1: USB disconnect, device number 5 [ 73.313666][ T10] usb 6-1: USB disconnect, device number 9 [ 73.330952][ T6437] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 73.332976][ T6437] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 73.336961][ T6437] vhci_hcd vhci_hcd.0: Device attached [ 73.340739][ T6438] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 73.346662][ T190] vhci_hcd vhci_hcd.1: stop threads [ 73.348463][ T190] vhci_hcd vhci_hcd.1: release socket [ 73.350188][ T190] vhci_hcd vhci_hcd.1: disconnect device [ 73.403191][ T6437] kvm: pic: non byte write [ 73.410339][ T1478] IPVS: starting estimator thread 0... [ 73.424014][ T6443] syzkaller0: entered promiscuous mode [ 73.425784][ T6443] syzkaller0: entered allmulticast mode [ 73.500375][ T6441] IPVS: using max 45 ests per chain, 108000 per kthread [ 73.574032][ T6445] syzkaller0: entered promiscuous mode [ 73.575920][ T6445] syzkaller0: entered allmulticast mode [ 73.581634][ T6445] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 73.787606][ T6449] XFS (nullb0): Invalid superblock magic number [ 73.817909][ T40] kauditd_printk_skb: 584 callbacks suppressed [ 73.817922][ T40] audit: type=1400 audit(1780064250.322:1441): avc: denied { create } for pid=6448 comm="syz.0.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.818956][ T6449] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 74.531424][ T40] audit: type=1400 audit(1780064251.042:1442): avc: denied { create } for pid=6460 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.539594][ T40] audit: type=1400 audit(1780064251.042:1443): avc: denied { read } for pid=6460 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.978130][ T40] audit: type=1400 audit(1780064251.482:1444): avc: denied { write } for pid=6464 comm="syz.1.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.167614][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 75.167753][ T5879] usb 7-1: USB disconnect, device number 2 [ 75.169683][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 75.169695][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 75.197887][ T6469] syzkaller0: entered promiscuous mode [ 75.199774][ T6469] syzkaller0: entered allmulticast mode [ 75.311902][ T6471] syzkaller0: entered promiscuous mode [ 75.313688][ T6471] syzkaller0: entered allmulticast mode [ 75.316889][ T6471] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 75.351080][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 75.531697][ T10] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 75.534661][ T10] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 75.538001][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 75.541078][ T10] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 75.546281][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 75.550134][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 75.554811][ T10] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 75.557871][ T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 75.560720][ T10] usb 6-1: Product: syz [ 75.562133][ T10] usb 6-1: Manufacturer: syz [ 75.567654][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 75.569369][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 75.571203][ T10] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 75.581519][ T6483] FAULT_INJECTION: forcing a failure. [ 75.581519][ T6483] name failslab, interval 1, probability 0, space 0, times 0 [ 75.586533][ T6483] CPU: 2 UID: 0 PID: 6483 Comm: syz.0.220 Not tainted syzkaller #0 PREEMPT(full) [ 75.586556][ T6483] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.586566][ T6483] Call Trace: [ 75.586573][ T6483] [ 75.586579][ T6483] dump_stack_lvl+0x100/0x190 [ 75.586613][ T6483] should_fail_ex.cold+0x5/0xa [ 75.586636][ T6483] should_failslab+0xc2/0x120 [ 75.586656][ T6483] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 75.586681][ T6483] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 75.586706][ T6483] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 75.586732][ T6483] mmu_topup_memory_caches+0x25/0x170 [ 75.586755][ T6483] kvm_mmu_load+0xd6/0x23e0 [ 75.586777][ T6483] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 75.586802][ T6483] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 75.586830][ T6483] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 75.586855][ T6483] ? __pfx_kvm_mmu_load+0x10/0x10 [ 75.586874][ T6483] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 75.586893][ T6483] ? kvm_check_and_inject_events+0x961/0x1070 [ 75.586920][ T6483] vcpu_run+0x39f4/0x5ca0 [ 75.586957][ T6483] ? __pfx_vcpu_run+0x10/0x10 [ 75.586987][ T6483] ? rcu_is_watching+0x12/0xc0 [ 75.587014][ T6483] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 75.587036][ T6483] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 75.587066][ T6483] kvm_vcpu_ioctl+0x730/0x1720 [ 75.587085][ T6483] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 75.587102][ T6483] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.587122][ T6483] ? do_vfs_ioctl+0x226/0x13e0 [ 75.587140][ T6483] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 75.587158][ T6483] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 75.587196][ T6483] ? __fget_files+0x215/0x3d0 [ 75.587215][ T6483] ? hook_file_ioctl_common+0x149/0x410 [ 75.587238][ T6483] ? selinux_file_ioctl+0x13b/0x290 [ 75.587262][ T6483] ? selinux_file_ioctl+0xb6/0x290 [ 75.587286][ T6483] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 75.587305][ T6483] __x64_sys_ioctl+0x18e/0x210 [ 75.587325][ T6483] do_syscall_64+0x115/0x870 [ 75.587354][ T6483] ? clear_bhb_loop+0x40/0x90 [ 75.587375][ T6483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.587390][ T6483] RIP: 0033:0x7fa0b0f9ce59 [ 75.587404][ T6483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.587419][ T6483] RSP: 002b:00007fa0af1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.587435][ T6483] RAX: ffffffffffffffda RBX: 00007fa0b1215fa0 RCX: 00007fa0b0f9ce59 [ 75.587445][ T6483] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 75.587455][ T6483] RBP: 00007fa0af1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 75.587464][ T6483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 75.587473][ T6483] R13: 00007fa0b1216038 R14: 00007fa0b1215fa0 R15: 00007fffff87eaf8 [ 75.587496][ T6483] [ 75.716798][ T6486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.221'. [ 75.744634][ T6486] bridge1: port 1(dummy0) entered blocking state [ 75.747536][ T6486] bridge1: port 1(dummy0) entered disabled state [ 75.750409][ T5108] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 75.750537][ T6486] dummy0: entered allmulticast mode [ 75.756734][ T6486] dummy0: entered promiscuous mode [ 75.765003][ T6486] netlink: 'syz.3.221': attribute type 10 has an invalid length. [ 75.768360][ T6486] netlink: 40 bytes leftover after parsing attributes in process `syz.3.221'. [ 75.777195][ T6486] bridge1: port 1(dummy0) entered blocking state [ 75.780065][ T6486] bridge1: port 1(dummy0) entered forwarding state [ 75.785718][ T6486] dummy0: left allmulticast mode [ 75.788034][ T6486] bridge1: port 1(dummy0) entered disabled state [ 75.796170][ T6486] netlink: 'syz.3.221': attribute type 10 has an invalid length. [ 75.808942][ T6486] team0 (unregistering): Port device team_slave_0 removed [ 75.815892][ T6486] team0 (unregistering): Port device team_slave_1 removed [ 75.880538][ T5108] usb 7-1: device descriptor read/64, error -71 [ 76.003038][ T6493] syzkaller0: entered promiscuous mode [ 76.004992][ T6493] syzkaller0: entered allmulticast mode [ 76.013457][ T6493] netlink: 44 bytes leftover after parsing attributes in process `syz.0.224'. [ 76.120565][ T5108] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 76.138959][ T40] audit: type=1326 audit(1780064252.642:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.0.225" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0b0f9ce59 code=0x0 [ 76.190423][ T844] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 76.213663][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.218039][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.243947][ T40] audit: type=1326 audit(1780064252.752:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.0.225" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b0f9ce59 code=0x7ffc0000 [ 76.251011][ T5108] usb 7-1: device descriptor read/64, error -71 [ 76.251693][ T40] audit: type=1326 audit(1780064252.752:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.0.225" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b0f9ce59 code=0x7ffc0000 [ 76.260794][ T40] audit: type=1326 audit(1780064252.752:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.0.225" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b0f9ce59 code=0x7ffc0000 [ 76.267738][ T40] audit: type=1326 audit(1780064252.752:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.0.225" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa0b0f5d68e code=0x7ffc0000 [ 76.274695][ T40] audit: type=1326 audit(1780064252.752:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.0.225" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b0f9ce59 code=0x7ffc0000 [ 76.341663][ T844] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 76.344682][ T844] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 76.348500][ T844] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 76.352166][ T844] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 76.356559][ T844] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 76.360636][ T5108] usb usb7-port1: attempt power cycle [ 76.362693][ T844] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 76.366580][ T844] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 76.369864][ T844] usb 8-1: Product: syz [ 76.371710][ T844] usb 8-1: Manufacturer: syz [ 76.380554][ T844] cdc_wdm 8-1:1.0: skipping garbage [ 76.382779][ T844] cdc_wdm 8-1:1.0: skipping garbage [ 76.386447][ T844] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 76.388808][ T844] cdc_wdm 8-1:1.0: Unknown control protocol [ 76.700408][ T5108] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 76.721049][ T5108] usb 7-1: device descriptor read/8, error -71 [ 76.980471][ T5108] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 77.005575][ T5108] usb 7-1: device descriptor read/8, error -71 [ 77.031063][ T6500] syzkaller0: entered promiscuous mode [ 77.032925][ T6500] syzkaller0: entered allmulticast mode [ 77.036608][ T6500] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 77.112343][ T5108] usb usb7-port1: unable to enumerate USB device [ 77.412487][ T6506] netlink: 'syz.0.227': attribute type 10 has an invalid length. [ 77.419827][ T6506] team0: Port device dummy0 added [ 78.082855][ T6512] batadv_slave_1: entered promiscuous mode [ 78.094197][ T29] usb 6-1: USB disconnect, device number 10 [ 78.243865][ T6510] batadv_slave_1: left promiscuous mode [ 78.315993][ T6517] FAULT_INJECTION: forcing a failure. [ 78.315993][ T6517] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 78.320167][ T6517] CPU: 1 UID: 0 PID: 6517 Comm: syz.0.230 Not tainted syzkaller #0 PREEMPT(full) [ 78.320182][ T6517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.320188][ T6517] Call Trace: [ 78.320193][ T6517] [ 78.320198][ T6517] dump_stack_lvl+0x100/0x190 [ 78.320215][ T6517] should_fail_ex.cold+0x5/0xa [ 78.320227][ T6517] ? prepare_alloc_pages+0x16d/0x5f0 [ 78.320241][ T6517] should_fail_alloc_page+0xeb/0x140 [ 78.320269][ T6517] prepare_alloc_pages+0x1f0/0x5f0 [ 78.320282][ T6517] ? xa_find_after+0x2f5/0x4c0 [ 78.320298][ T6517] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 78.320319][ T6517] ? mark_held_locks+0x40/0x70 [ 78.320333][ T6517] ? smp_call_function_many_cond+0x13e3/0x1700 [ 78.320346][ T6517] ? lockdep_hardirqs_on+0x78/0x100 [ 78.320359][ T6517] ? __pfx_flush_tlb_func+0x10/0x10 [ 78.320372][ T6517] ? smp_call_function_many_cond+0x5de/0x1700 [ 78.320386][ T6517] ? __pfx_should_flush_tlb+0x10/0x10 [ 78.320396][ T6517] ? __pfx_flush_tlb_func+0x10/0x10 [ 78.320409][ T6517] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 78.320432][ T6517] ? __lock_acquire+0x4a5/0x2630 [ 78.320447][ T6517] ? __lock_acquire+0x4a5/0x2630 [ 78.320459][ T6517] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.320472][ T6517] ? policy_nodemask+0xed/0x4f0 [ 78.320485][ T6517] alloc_pages_mpol+0x1fb/0x540 [ 78.320500][ T6517] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 78.320512][ T6517] ? find_held_lock+0x2b/0x80 [ 78.320521][ T6517] ? rcuwait_wake_up+0xdf/0x290 [ 78.320531][ T6517] ? rcuwait_wake_up+0xdf/0x290 [ 78.320543][ T6517] folio_alloc_mpol_noprof+0x36/0x260 [ 78.320558][ T6517] vma_alloc_folio_noprof+0xed/0x1d0 [ 78.320572][ T6517] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 78.320585][ T6517] ? rcu_read_unlock+0x2d/0xb0 [ 78.320600][ T6517] ? rcu_read_unlock+0x2d/0xb0 [ 78.320618][ T6517] do_wp_page+0xd75/0x4350 [ 78.320636][ T6517] ? __pfx_do_wp_page+0x10/0x10 [ 78.320649][ T6517] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 78.320669][ T6517] __handle_mm_fault+0x1ab6/0x2a00 [ 78.320686][ T6517] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 78.320702][ T6517] ? __pfx___handle_mm_fault+0x10/0x10 [ 78.320718][ T6517] ? pte_offset_map_lock+0x174/0x320 [ 78.320730][ T6517] ? find_held_lock+0x2b/0x80 [ 78.320744][ T6517] ? follow_page_pte+0x4d0/0x13f0 [ 78.320760][ T6517] handle_mm_fault+0x37b/0xa30 [ 78.320778][ T6517] __get_user_pages+0x1178/0x32a0 [ 78.320794][ T6517] ? down_read_killable+0x307/0x4b0 [ 78.320810][ T6517] ? __pfx___get_user_pages+0x10/0x10 [ 78.320827][ T6517] ? __pfx_gup_fast_fallback+0x10/0x10 [ 78.320843][ T6517] get_user_pages_unlocked+0x1cb/0x7d0 [ 78.320858][ T6517] ? __pfx_get_user_pages_unlocked+0x10/0x10 [ 78.320870][ T6517] ? get_user_pages_fast_only+0xae/0xf0 [ 78.320883][ T6517] ? __pfx_get_user_pages_fast_only+0x10/0x10 [ 78.320896][ T6517] ? __pfx___might_resched+0x10/0x10 [ 78.320911][ T6517] ? bpf_ksym_find+0x128/0x1c0 [ 78.320928][ T6517] hva_to_pfn+0x871/0xd60 [ 78.320944][ T6517] ? tdp_iter_refresh_sptep+0x168/0x2c0 [ 78.320960][ T6517] ? __pfx_hva_to_pfn+0x10/0x10 [ 78.320974][ T6517] ? __lock_acquire+0x4a5/0x2630 [ 78.320987][ T6517] ? tdp_iter_next+0x3d5/0x860 [ 78.321009][ T6517] kvm_follow_pfn+0x291/0x430 [ 78.321024][ T6517] __kvm_faultin_pfn+0x11c/0x1a0 [ 78.321037][ T6517] ? __pfx___kvm_faultin_pfn+0x10/0x10 [ 78.321050][ T6517] ? __pfx_xa_load+0x10/0x10 [ 78.321067][ T6517] ? fast_page_fault+0xeca/0x1460 [ 78.321083][ T6517] ? fast_page_fault+0xeca/0x1460 [ 78.321100][ T6517] kvm_mmu_faultin_pfn+0xb73/0x2270 [ 78.321119][ T6517] ? __pfx_fast_page_fault+0x10/0x10 [ 78.321142][ T6517] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 78.321169][ T6517] ? __kvm_mmu_topup_memory_cache+0x332/0x5f0 [ 78.321189][ T6517] ? find_held_lock+0x2b/0x80 [ 78.321205][ T6517] ? kvm_tdp_page_fault+0x295/0x3d0 [ 78.321231][ T6517] kvm_tdp_page_fault+0x182/0x3d0 [ 78.321245][ T6517] kvm_mmu_do_page_fault+0x5a4/0x6c0 [ 78.321259][ T6517] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 78.321270][ T6517] ? init_emulate_ctxt+0x415/0x6d0 [ 78.321284][ T6517] ? kvm_multiple_exception+0x5b0/0x710 [ 78.321303][ T6517] kvm_mmu_page_fault+0x1dd/0x1a70 [ 78.321323][ T6517] ? rcu_qs+0x2a/0xe0 [ 78.321338][ T6517] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 78.321354][ T6517] ? __vmx_complete_interrupts+0x129/0x570 [ 78.321369][ T6517] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.321385][ T6517] handle_ept_violation+0x324/0x7b0 [ 78.321400][ T6517] ? __pfx_handle_ept_violation+0x10/0x10 [ 78.321414][ T6517] vmx_handle_exit+0x84c/0x1f30 [ 78.321430][ T6517] vcpu_run+0x34cf/0x5ca0 [ 78.321451][ T6517] ? __pfx_vcpu_run+0x10/0x10 [ 78.321471][ T6517] ? rcu_is_watching+0x12/0xc0 [ 78.321488][ T6517] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 78.321502][ T6517] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 78.321521][ T6517] kvm_vcpu_ioctl+0x730/0x1720 [ 78.321533][ T6517] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 78.321544][ T6517] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.321557][ T6517] ? do_vfs_ioctl+0x226/0x13e0 [ 78.321568][ T6517] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 78.321580][ T6517] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 78.321601][ T6517] ? __fget_files+0x215/0x3d0 [ 78.321613][ T6517] ? hook_file_ioctl_common+0x149/0x410 [ 78.321628][ T6517] ? selinux_file_ioctl+0x13b/0x290 [ 78.321643][ T6517] ? selinux_file_ioctl+0xb6/0x290 [ 78.321659][ T6517] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 78.321671][ T6517] __x64_sys_ioctl+0x18e/0x210 [ 78.321683][ T6517] do_syscall_64+0x115/0x870 [ 78.321696][ T6517] ? clear_bhb_loop+0x40/0x90 [ 78.321709][ T6517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.321720][ T6517] RIP: 0033:0x7fa0b0f9ce59 [ 78.321730][ T6517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.321741][ T6517] RSP: 002b:00007fa0af1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.321751][ T6517] RAX: ffffffffffffffda RBX: 00007fa0b1215fa0 RCX: 00007fa0b0f9ce59 [ 78.321758][ T6517] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 78.321764][ T6517] RBP: 00007fa0af1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 78.321770][ T6517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 78.321776][ T6517] R13: 00007fa0b1216038 R14: 00007fa0b1215fa0 R15: 00007fffff87eaf8 [ 78.321790][ T6517] [ 78.635349][ T6524] capability: warning: `syz.1.231' uses 32-bit capabilities (legacy support in use) [ 78.643672][ T6522] syzkaller0: entered promiscuous mode [ 78.645965][ T6522] syzkaller0: entered allmulticast mode [ 78.664471][ T6522] netlink: 44 bytes leftover after parsing attributes in process `syz.2.233'. [ 78.675032][ T6531] openvswitch: netlink: IP tunnel dst address not specified [ 78.695951][ T6530] Cannot find set identified by id 0 to match [ 78.700771][ T6530] ntfs3(nbd0): try to read out of volume at offset 0x0 [ 78.800924][ T6537] tipc: Started in network mode [ 78.803068][ T6537] tipc: Node identity fe593df1c8ef, cluster identity 4711 [ 78.806159][ T6537] tipc: Enabled bearer , priority 0 [ 78.809691][ T6537] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 78.815110][ T6537] tipc: Resetting bearer [ 78.828310][ T6536] tipc: Disabling bearer [ 78.925249][ T40] kauditd_printk_skb: 561 callbacks suppressed [ 78.925250][ T6543] FAULT_INJECTION: forcing a failure. [ 78.925250][ T6543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.925260][ T40] audit: type=1400 audit(1780064255.432:2012): avc: denied { connect } for pid=6541 comm="syz.1.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.928104][ T6542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.240'. [ 78.934176][ T6543] CPU: 3 UID: 0 PID: 6543 Comm: syz.2.239 Not tainted syzkaller #0 PREEMPT(full) [ 78.934199][ T6543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.934207][ T6543] Call Trace: [ 78.934213][ T6543] [ 78.934219][ T6543] dump_stack_lvl+0x100/0x190 [ 78.934244][ T6543] should_fail_ex.cold+0x5/0xa [ 78.934268][ T6543] _copy_from_iter+0x1f4/0x1690 [ 78.934294][ T6543] ? _copy_from_iter+0x270/0x1690 [ 78.934315][ T6543] ? __pfx__copy_from_iter+0x10/0x10 [ 78.934335][ T6543] ? __pfx__copy_from_iter+0x10/0x10 [ 78.934382][ T6543] ? _copy_from_iter+0x270/0x1690 [ 78.934407][ T6543] copy_page_from_iter+0x238/0x300 [ 78.934431][ T6543] skb_copy_datagram_from_iter+0x399/0x720 [ 78.934461][ T6543] packet_sendmsg+0x227e/0x5100 [ 78.934499][ T6543] ? sock_has_perm+0x25a/0x2f0 [ 78.934521][ T6543] ? __pfx_sock_has_perm+0x10/0x10 [ 78.934545][ T6543] ? __pfx_packet_sendmsg+0x10/0x10 [ 78.934579][ T6543] __sys_sendto+0x468/0x4b0 [ 78.934601][ T6543] ? __pfx_packet_sendmsg+0x10/0x10 [ 78.934624][ T6543] ? __pfx___sys_sendto+0x10/0x10 [ 78.934667][ T6543] ? ksys_write+0x1ac/0x250 [ 78.934686][ T6543] ? __pfx_ksys_write+0x10/0x10 [ 78.934704][ T6543] __x64_sys_sendto+0xe0/0x1c0 [ 78.934727][ T6543] ? do_syscall_64+0x90/0x870 [ 78.934748][ T6543] ? lockdep_hardirqs_on+0x78/0x100 [ 78.934769][ T6543] do_syscall_64+0x115/0x870 [ 78.934790][ T6543] ? clear_bhb_loop+0x40/0x90 [ 78.934810][ T6543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.934824][ T6543] RIP: 0033:0x7f8cf8d9ce59 [ 78.934839][ T6543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.934855][ T6543] RSP: 002b:00007f8cf9ceb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 78.934872][ T6543] RAX: ffffffffffffffda RBX: 00007f8cf9015fa0 RCX: 00007f8cf8d9ce59 [ 78.934888][ T6543] RDX: 000000000000e90c RSI: 00002000000000c0 RDI: 0000000000000003 [ 78.934899][ T6543] RBP: 00007f8cf9ceb090 R08: 0000200000000540 R09: 0000000000000014 [ 78.934909][ T6543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 78.934919][ T6543] R13: 00007f8cf9016038 R14: 00007f8cf9015fa0 R15: 00007ffe9fc4f588 [ 78.934941][ T6543] [ 78.946105][ T29] usb 8-1: USB disconnect, device number 6 [ 79.005597][ T40] audit: type=1400 audit(1780064255.512:2013): avc: denied { append } for pid=6545 comm="syz.2.242" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 79.024904][ T6546] loop5: detected capacity change from 0 to 7 [ 79.039004][ T6546] loop5: p1 < > p3 p4 [ 79.041984][ T6546] loop5: partition table partially beyond EOD, truncated [ 79.095599][ T6551] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 79.100896][ T5741] udevd[5741]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 79.102114][ T5743] udevd[5743]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 79.102629][ T5747] udevd[5747]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 79.106867][ T6551] romfs: unable to set blocksize [ 79.106867][ T6551] [ 79.111047][ T6554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=6554 comm=syz.2.244 [ 79.144890][ T40] audit: type=1400 audit(1780064255.652:2014): avc: denied { relabelfrom } for pid=6559 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 79.158437][ T40] audit: type=1400 audit(1780064255.652:2015): avc: denied { relabelto } for pid=6559 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 79.194080][ T6564] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.248'. [ 79.202405][ T6566] FAULT_INJECTION: forcing a failure. [ 79.202405][ T6566] name failslab, interval 1, probability 0, space 0, times 0 [ 79.205380][ T6564] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 79.206583][ T6566] CPU: 0 UID: 0 PID: 6566 Comm: syz.3.249 Not tainted syzkaller #0 PREEMPT(full) [ 79.206598][ T6566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.206605][ T6566] Call Trace: [ 79.206609][ T6566] [ 79.206613][ T6566] dump_stack_lvl+0x100/0x190 [ 79.206630][ T6566] should_fail_ex.cold+0x5/0xa [ 79.206645][ T6566] ? __vb2_queue_alloc+0x23e/0x1160 [ 79.206661][ T6566] should_failslab+0xc2/0x120 [ 79.206674][ T6566] __kmalloc_noprof+0xe0/0x850 [ 79.206694][ T6566] __vb2_queue_alloc+0x23e/0x1160 [ 79.206717][ T6566] vb2_core_reqbufs+0x899/0xf30 [ 79.206736][ T6566] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 79.206753][ T6566] ? rcu_is_watching+0x12/0xc0 [ 79.206771][ T6566] ? __mutex_lock+0x26d/0x1b10 [ 79.206786][ T6566] ? __video_do_ioctl+0x50f/0xdf0 [ 79.206802][ T6566] vb2_ioctl_reqbufs+0x291/0x450 [ 79.206817][ T6566] ? __pfx_vb2_ioctl_reqbufs+0x10/0x10 [ 79.206838][ T6566] vidioc_reqbufs+0x86/0x100 [ 79.206851][ T6566] v4l_reqbufs+0x175/0x1d0 [ 79.206864][ T6566] __video_do_ioctl+0xb2a/0xdf0 [ 79.206879][ T6566] ? __might_fault+0xc5/0x140 [ 79.206895][ T6566] ? __pfx___video_do_ioctl+0x10/0x10 [ 79.206914][ T6566] video_usercopy+0x47d/0x1700 [ 79.206928][ T6566] ? __pfx___video_do_ioctl+0x10/0x10 [ 79.206942][ T6566] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 79.206960][ T6566] ? __pfx_video_usercopy+0x10/0x10 [ 79.206983][ T6566] v4l2_ioctl+0x1bd/0x250 [ 79.206997][ T6566] ? __pfx_v4l2_ioctl+0x10/0x10 [ 79.207012][ T6566] __x64_sys_ioctl+0x18e/0x210 [ 79.207025][ T6566] do_syscall_64+0x115/0x870 [ 79.207038][ T6566] ? clear_bhb_loop+0x40/0x90 [ 79.207051][ T6566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.207062][ T6566] RIP: 0033:0x7fd0bb59ce59 [ 79.207071][ T6566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.207081][ T6566] RSP: 002b:00007fd0bc3d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.207091][ T6566] RAX: ffffffffffffffda RBX: 00007fd0bb815fa0 RCX: 00007fd0bb59ce59 [ 79.207098][ T6566] RDX: 00002000000001c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 79.207104][ T6566] RBP: 00007fd0bc3d4090 R08: 0000000000000000 R09: 0000000000000000 [ 79.207110][ T6566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 79.207116][ T6566] R13: 00007fd0bb816038 R14: 00007fd0bb815fa0 R15: 00007ffef4039448 [ 79.207130][ T6566] [ 79.244390][ T6560] syzkaller0: create flow: hash 3392824438 index 1 [ 79.251914][ T6564] loop4: detected capacity change from 0 to 7 [ 79.270067][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.251'. [ 79.270508][ T5832] syzkaller0: tun_net_xmit 76 [ 79.286867][ T6564] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 79.290137][ T6571] netlink: 20 bytes leftover after parsing attributes in process `syz.3.251'. [ 79.291846][ T6564] loop4: partition table partially beyond EOD, truncated [ 79.292254][ T6564] loop4: p1 size 2989602745 extends beyond EOD, [ 79.308522][ T6559] syzkaller0: delete flow: hash 3392824438 index 1 [ 79.308558][ T6564] truncated [ 79.329082][ T5741] udevd[5741]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 79.402193][ T6575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=6575 comm=syz.3.251 [ 80.324808][ T6578] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 80.328980][ T40] audit: type=1400 audit(1780064256.832:2016): avc: denied { allowed } for pid=6577 comm="syz.2.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 80.358612][ T40] audit: type=1400 audit(1780064256.862:2017): avc: denied { mounton } for pid=6577 comm="syz.2.253" path="/proc/176/task" dev="proc" ino=14205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 80.368951][ T40] audit: type=1400 audit(1780064256.862:2018): avc: denied { create } for pid=6577 comm="syz.2.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.375597][ T40] audit: type=1400 audit(1780064256.872:2019): avc: denied { connect } for pid=6577 comm="syz.2.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.390410][ T40] audit: type=1400 audit(1780064256.892:2020): avc: denied { ioctl } for pid=6582 comm="syz.3.255" path="socket:[15448]" dev="sockfs" ino=15448 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.398547][ T40] audit: type=1400 audit(1780064256.892:2021): avc: denied { ioctl } for pid=6582 comm="syz.3.255" path="socket:[14210]" dev="sockfs" ino=14210 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.490033][ T6587] kvm: pic: non byte write [ 80.620034][ T6596] sctp: [Deprecated]: syz.3.259 (pid 6596) Use of int in max_burst socket option deprecated. [ 80.620034][ T6596] Use struct sctp_assoc_value instead [ 80.625849][ T6596] netlink: 'syz.3.259': attribute type 1 has an invalid length. [ 80.728621][ T6606] netlink: 'syz.3.263': attribute type 1 has an invalid length. [ 80.733703][ T6606] netlink: 'syz.3.263': attribute type 1 has an invalid length. [ 80.746153][ T6608] loop5: detected capacity change from 0 to 7 [ 80.750513][ T6608] loop5: p1 < > p3 p4 [ 80.751918][ T6608] loop5: partition table partially beyond EOD, truncated [ 80.785950][ T5743] udevd[5743]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 80.786270][ T5741] udevd[5741]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 80.791955][ T5747] udevd[5747]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 80.905627][ T6612] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.111359][ T6621] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 81.157835][ T6624] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 81.172553][ T6624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6624 comm=syz.2.270 [ 81.306569][ T6626] kvm: pic: non byte write [ 81.447769][ T6630] netlink: 45 bytes leftover after parsing attributes in process `syz.2.272'. [ 81.664460][ T6632] Invalid logical block size (16646144) [ 81.755219][ T6634] netlink: 'syz.1.275': attribute type 1 has an invalid length. [ 81.758632][ T6634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.307588][ T6667] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 82.348097][ T6671] xt_hashlimit: size too large, truncated to 1048576 [ 82.715889][ T6691] xt_hl: Unknown Hop Limit match mode: 206 [ 82.774363][ T6693] FAULT_INJECTION: forcing a failure. [ 82.774363][ T6693] name failslab, interval 1, probability 0, space 0, times 0 [ 82.779434][ T6693] CPU: 3 UID: 0 PID: 6693 Comm: syz.1.287 Not tainted syzkaller #0 PREEMPT(full) [ 82.779455][ T6693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.779466][ T6693] Call Trace: [ 82.779472][ T6693] [ 82.779477][ T6693] dump_stack_lvl+0x100/0x190 [ 82.779511][ T6693] should_fail_ex.cold+0x5/0xa [ 82.779535][ T6693] should_failslab+0xc2/0x120 [ 82.779555][ T6693] __kvmalloc_node_noprof+0xfa/0xa00 [ 82.779579][ T6693] ? bpf_test_run_xdp_live+0x13a/0x760 [ 82.779604][ T6693] ? synchronize_rcu_expedited+0x3c3/0x450 [ 82.779630][ T6693] bpf_test_run_xdp_live+0x13a/0x760 [ 82.779650][ T6693] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 82.779668][ T6693] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 82.779697][ T6693] ? __pfx___schedule+0x10/0x10 [ 82.779716][ T6693] ? find_held_lock+0x2b/0x80 [ 82.779735][ T6693] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 82.779791][ T6693] ? 0xffffffffa0206480 [ 82.779807][ T6693] ? 0xffffffffa0206480 [ 82.779819][ T6693] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 82.779844][ T6693] bpf_prog_test_run_xdp+0xd7d/0x1670 [ 82.779873][ T6693] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.779898][ T6693] ? fput+0x79/0x100 [ 82.779922][ T6693] ? __bpf_prog_get+0x97/0x2a0 [ 82.779943][ T6693] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.779961][ T6693] __sys_bpf+0x1725/0x4b90 [ 82.779989][ T6693] ? __pfx___sys_bpf+0x10/0x10 [ 82.780013][ T6693] ? proc_fail_nth_write+0x9f/0x220 [ 82.780032][ T6693] ? find_held_lock+0x2b/0x80 [ 82.780051][ T6693] ? find_held_lock+0x2b/0x80 [ 82.780066][ T6693] ? ksys_write+0x190/0x250 [ 82.780082][ T6693] ? ksys_write+0x190/0x250 [ 82.780105][ T6693] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 82.780126][ T6693] ? kernel_write+0x6b3/0x6c0 [ 82.780143][ T6693] ? __fget_files+0x215/0x3d0 [ 82.780175][ T6693] ? fput+0x79/0x100 [ 82.780197][ T6693] ? ksys_write+0x1ac/0x250 [ 82.780214][ T6693] ? __pfx_ksys_write+0x10/0x10 [ 82.780237][ T6693] __x64_sys_bpf+0x7b/0xc0 [ 82.780251][ T6693] ? lockdep_hardirqs_on+0x78/0x100 [ 82.780273][ T6693] do_syscall_64+0x115/0x870 [ 82.780294][ T6693] ? clear_bhb_loop+0x40/0x90 [ 82.780313][ T6693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.780331][ T6693] RIP: 0033:0x7fedbbd9ce59 [ 82.780348][ T6693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.780365][ T6693] RSP: 002b:00007fedbcb80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.780380][ T6693] RAX: ffffffffffffffda RBX: 00007fedbc015fa0 RCX: 00007fedbbd9ce59 [ 82.780389][ T6693] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 82.780398][ T6693] RBP: 00007fedbcb80090 R08: 0000000000000000 R09: 0000000000000000 [ 82.780410][ T6693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.780418][ T6693] R13: 00007fedbc016038 R14: 00007fedbc015fa0 R15: 00007ffeb8f22aa8 [ 82.780441][ T6693] [ 82.978795][ T6703] FAULT_INJECTION: forcing a failure. [ 82.978795][ T6703] name failslab, interval 1, probability 0, space 0, times 0 [ 82.986446][ T6703] CPU: 2 UID: 0 PID: 6703 Comm: syz.0.291 Not tainted syzkaller #0 PREEMPT(full) [ 82.986462][ T6703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.986469][ T6703] Call Trace: [ 82.986473][ T6703] [ 82.986478][ T6703] dump_stack_lvl+0x100/0x190 [ 82.986495][ T6703] should_fail_ex.cold+0x5/0xa [ 82.986511][ T6703] should_failslab+0xc2/0x120 [ 82.986523][ T6703] __kmalloc_cache_node_noprof+0x7d/0x770 [ 82.986535][ T6703] ? __get_vm_area_node+0x101/0x330 [ 82.986547][ T6703] ? __lock_acquire+0x4a5/0x2630 [ 82.986562][ T6703] __get_vm_area_node+0x101/0x330 [ 82.986577][ T6703] __vmalloc_node_range_noprof+0x228/0x1630 [ 82.986591][ T6703] ? system_heap_vmap+0x227/0x5d0 [ 82.986615][ T6703] ? rcu_is_watching+0x12/0xc0 [ 82.986630][ T6703] ? trace_contention_end+0x122/0x170 [ 82.986644][ T6703] ? system_heap_vmap+0x227/0x5d0 [ 82.986657][ T6703] ? system_heap_vmap+0xab/0x5d0 [ 82.986672][ T6703] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 82.986685][ T6703] ? __pfx___mutex_lock+0x10/0x10 [ 82.986706][ T6703] ? system_heap_vmap+0x227/0x5d0 [ 82.986718][ T6703] __vmalloc_node_noprof+0xad/0xf0 [ 82.986731][ T6703] ? system_heap_vmap+0x227/0x5d0 [ 82.986745][ T6703] system_heap_vmap+0x227/0x5d0 [ 82.986760][ T6703] ? __pfx_system_heap_vmap+0x10/0x10 [ 82.986772][ T6703] ? trace_contention_end+0x122/0x170 [ 82.986790][ T6703] dma_buf_vmap+0x275/0x430 [ 82.986803][ T6703] ? __pfx_system_heap_vmap+0x10/0x10 [ 82.986816][ T6703] ? __pfx_dma_buf_vmap+0x10/0x10 [ 82.986832][ T6703] drm_gem_shmem_vmap_locked+0x113/0x860 [ 82.986848][ T6703] ? __pfx_drm_gem_shmem_vmap_locked+0x10/0x10 [ 82.986866][ T6703] ? __pfx_drm_gem_shmem_object_vmap+0x10/0x10 [ 82.986881][ T6703] drm_gem_vmap_locked+0xc8/0x1c0 [ 82.986896][ T6703] drm_gem_vmap+0x4a/0xa0 [ 82.986911][ T6703] drm_gem_fb_vmap+0xc7/0x450 [ 82.986925][ T6703] vkms_prepare_fb+0x87/0xb0 [ 82.986945][ T6703] drm_atomic_helper_prepare_planes+0x1f2/0xbe0 [ 82.986963][ T6703] ? __pfx_vkms_prepare_fb+0x10/0x10 [ 82.986980][ T6703] drm_atomic_helper_commit+0x191/0x380 [ 82.986993][ T6703] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 82.987006][ T6703] drm_atomic_commit+0x230/0x300 [ 82.987017][ T6703] ? __pfx_drm_atomic_commit+0x10/0x10 [ 82.987028][ T6703] ? __pfx___drm_printfn_info+0x10/0x10 [ 82.987044][ T6703] ? drm_atomic_set_fb_for_plane+0x144/0x280 [ 82.987056][ T6703] ? drm_atomic_set_fb_for_plane+0x186/0x280 [ 82.987070][ T6703] drm_atomic_helper_update_plane+0x314/0x400 [ 82.987084][ T6703] __setplane_atomic+0x22d/0x350 [ 82.987101][ T6703] drm_mode_cursor_universal+0x5e9/0xe20 [ 82.987118][ T6703] ? __pfx_drm_mode_cursor_universal+0x10/0x10 [ 82.987135][ T6703] ? __pfx_drm_lease_held+0x10/0x10 [ 82.987147][ T6703] ? modeset_lock+0x114/0x6d0 [ 82.987176][ T6703] drm_mode_cursor_common+0x308/0x970 [ 82.987193][ T6703] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 82.987205][ T6703] ? avc_has_extended_perms+0x33a/0x1080 [ 82.987226][ T6703] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 82.987242][ T6703] drm_mode_cursor_ioctl+0xd4/0x110 [ 82.987255][ T6703] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 82.987267][ T6703] ? do_raw_spin_lock+0x128/0x260 [ 82.987281][ T6703] ? find_held_lock+0x2b/0x80 [ 82.987294][ T6703] ? do_raw_spin_unlock+0x145/0x1e0 [ 82.987311][ T6703] drm_ioctl_kernel+0x1f3/0x3e0 [ 82.987321][ T6703] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 82.987334][ T6703] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 82.987350][ T6703] drm_ioctl+0x5e6/0xc60 [ 82.987363][ T6703] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 82.987377][ T6703] ? __pfx_drm_ioctl+0x10/0x10 [ 82.987393][ T6703] ? selinux_file_ioctl+0x13b/0x290 [ 82.987409][ T6703] ? selinux_file_ioctl+0xb6/0x290 [ 82.987425][ T6703] ? __pfx_drm_ioctl+0x10/0x10 [ 82.987438][ T6703] __x64_sys_ioctl+0x18e/0x210 [ 82.987452][ T6703] do_syscall_64+0x115/0x870 [ 82.987465][ T6703] ? clear_bhb_loop+0x40/0x90 [ 82.987478][ T6703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.987489][ T6703] RIP: 0033:0x7fa0b0f9ce59 [ 82.987499][ T6703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.987509][ T6703] RSP: 002b:00007fa0af1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.987520][ T6703] RAX: ffffffffffffffda RBX: 00007fa0b1215fa0 RCX: 00007fa0b0f9ce59 [ 82.987526][ T6703] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 82.987533][ T6703] RBP: 00007fa0af1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 82.987538][ T6703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 82.987544][ T6703] R13: 00007fa0b1216038 R14: 00007fa0b1215fa0 R15: 00007fffff87eaf8 [ 82.987559][ T6703] [ 82.987697][ T6703] syz.0.291: vmalloc error: size 264, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 83.150631][ T6703] CPU: 3 UID: 0 PID: 6703 Comm: syz.0.291 Not tainted syzkaller #0 PREEMPT(full) [ 83.150645][ T6703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.150652][ T6703] Call Trace: [ 83.150656][ T6703] [ 83.150660][ T6703] dump_stack_lvl+0x100/0x190 [ 83.150677][ T6703] warn_alloc.cold+0x95/0x1c1 [ 83.150688][ T6703] ? __pfx_warn_alloc+0x10/0x10 [ 83.150704][ T6703] ? trace_kmalloc+0xe3/0x110 [ 83.150717][ T6703] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 83.150730][ T6703] ? __kasan_kmalloc+0x8a/0xb0 [ 83.150741][ T6703] ? __get_vm_area_node+0x208/0x330 [ 83.150757][ T6703] __vmalloc_node_range_noprof+0xccd/0x1630 [ 83.150773][ T6703] ? rcu_is_watching+0x12/0xc0 [ 83.150792][ T6703] ? trace_contention_end+0x122/0x170 [ 83.150806][ T6703] ? system_heap_vmap+0x227/0x5d0 [ 83.150820][ T6703] ? system_heap_vmap+0xab/0x5d0 [ 83.150834][ T6703] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 83.150848][ T6703] ? __pfx___mutex_lock+0x10/0x10 [ 83.150869][ T6703] ? system_heap_vmap+0x227/0x5d0 [ 83.150881][ T6703] __vmalloc_node_noprof+0xad/0xf0 [ 83.150894][ T6703] ? system_heap_vmap+0x227/0x5d0 [ 83.150908][ T6703] system_heap_vmap+0x227/0x5d0 [ 83.150924][ T6703] ? __pfx_system_heap_vmap+0x10/0x10 [ 83.150935][ T6703] ? trace_contention_end+0x122/0x170 [ 83.150954][ T6703] dma_buf_vmap+0x275/0x430 [ 83.150966][ T6703] ? __pfx_system_heap_vmap+0x10/0x10 [ 83.150979][ T6703] ? __pfx_dma_buf_vmap+0x10/0x10 [ 83.150995][ T6703] drm_gem_shmem_vmap_locked+0x113/0x860 [ 83.151014][ T6703] ? __pfx_drm_gem_shmem_vmap_locked+0x10/0x10 [ 83.151038][ T6703] ? __pfx_drm_gem_shmem_object_vmap+0x10/0x10 [ 83.151061][ T6703] drm_gem_vmap_locked+0xc8/0x1c0 [ 83.151089][ T6703] drm_gem_vmap+0x4a/0xa0 [ 83.151111][ T6703] drm_gem_fb_vmap+0xc7/0x450 [ 83.151126][ T6703] vkms_prepare_fb+0x87/0xb0 [ 83.151140][ T6703] drm_atomic_helper_prepare_planes+0x1f2/0xbe0 [ 83.151158][ T6703] ? __pfx_vkms_prepare_fb+0x10/0x10 [ 83.151175][ T6703] drm_atomic_helper_commit+0x191/0x380 [ 83.151188][ T6703] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 83.151201][ T6703] drm_atomic_commit+0x230/0x300 [ 83.151212][ T6703] ? __pfx_drm_atomic_commit+0x10/0x10 [ 83.151222][ T6703] ? __pfx___drm_printfn_info+0x10/0x10 [ 83.151240][ T6703] ? drm_atomic_set_fb_for_plane+0x144/0x280 [ 83.151252][ T6703] ? drm_atomic_set_fb_for_plane+0x186/0x280 [ 83.151265][ T6703] drm_atomic_helper_update_plane+0x314/0x400 [ 83.151285][ T6703] __setplane_atomic+0x22d/0x350 [ 83.151301][ T6703] drm_mode_cursor_universal+0x5e9/0xe20 [ 83.151319][ T6703] ? __pfx_drm_mode_cursor_universal+0x10/0x10 [ 83.151337][ T6703] ? __pfx_drm_lease_held+0x10/0x10 [ 83.151348][ T6703] ? modeset_lock+0x114/0x6d0 [ 83.151361][ T6703] drm_mode_cursor_common+0x308/0x970 [ 83.151376][ T6703] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 83.151389][ T6703] ? avc_has_extended_perms+0x33a/0x1080 [ 83.151410][ T6703] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 83.151426][ T6703] drm_mode_cursor_ioctl+0xd4/0x110 [ 83.151440][ T6703] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 83.151452][ T6703] ? do_raw_spin_lock+0x128/0x260 [ 83.151466][ T6703] ? find_held_lock+0x2b/0x80 [ 83.151478][ T6703] ? do_raw_spin_unlock+0x145/0x1e0 [ 83.151495][ T6703] drm_ioctl_kernel+0x1f3/0x3e0 [ 83.151505][ T6703] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 83.151519][ T6703] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 83.151534][ T6703] drm_ioctl+0x5e6/0xc60 [ 83.151547][ T6703] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 83.151561][ T6703] ? __pfx_drm_ioctl+0x10/0x10 [ 83.151577][ T6703] ? selinux_file_ioctl+0x13b/0x290 [ 83.151593][ T6703] ? selinux_file_ioctl+0xb6/0x290 [ 83.151609][ T6703] ? __pfx_drm_ioctl+0x10/0x10 [ 83.151620][ T6703] __x64_sys_ioctl+0x18e/0x210 [ 83.151633][ T6703] do_syscall_64+0x115/0x870 [ 83.151646][ T6703] ? clear_bhb_loop+0x40/0x90 [ 83.151659][ T6703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.151670][ T6703] RIP: 0033:0x7fa0b0f9ce59 [ 83.151680][ T6703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.151690][ T6703] RSP: 002b:00007fa0af1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.151700][ T6703] RAX: ffffffffffffffda RBX: 00007fa0b1215fa0 RCX: 00007fa0b0f9ce59 [ 83.151707][ T6703] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 83.151713][ T6703] RBP: 00007fa0af1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 83.151719][ T6703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 83.151725][ T6703] R13: 00007fa0b1216038 R14: 00007fa0b1215fa0 R15: 00007fffff87eaf8 [ 83.151739][ T6703] [ 83.151743][ T6703] Mem-Info: [ 83.210926][ T6707] gtp0: entered allmulticast mode [ 83.211294][ T6703] active_anon:8030 inactive_anon:0 isolated_anon:0 [ 83.211294][ T6703] active_file:16391 inactive_file:40712 isolated_file:0 [ 83.211294][ T6703] unevictable:1768 dirty:289 writeback:0 [ 83.211294][ T6703] slab_reclaimable:11594 slab_unreclaimable:73513 [ 83.211294][ T6703] mapped:24624 shmem:2325 pagetables:1171 [ 83.211294][ T6703] sec_pagetables:302 bounce:0 [ 83.211294][ T6703] kernel_misc_reclaimable:0 [ 83.211294][ T6703] free:448581 free_pcp:17922 free_cma:0 [ 83.320345][ T844] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 83.323759][ T6703] Node 0 active_anon:40056kB inactive_anon:0kB active_file:76104kB inactive_file:162640kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:104448kB dirty:1152kB writeback:0kB shmem:13824kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12768kB pagetables:4360kB sec_pagetables:1208kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 83.373435][ T6703] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 83.386134][ T6703] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 83.397386][ T6703] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 83.399755][ T6703] Node 0 DMA32 free:117588kB boost:0kB min:27484kB low:34352kB high:41220kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45264kB inactive_anon:0kB active_file:81932kB inactive_file:162640kB unevictable:3536kB writepending:1152kB zspages:0kB present:2080628kB managed:1261116kB mlocked:0kB bounce:0kB free_pcp:59572kB local_pcp:12352kB free_cma:0kB [ 83.412933][ T6703] lowmem_reserve[]: 0 0 0 0 0 [ 83.414999][ T6703] Node 1 Normal free:1643768kB boost:0kB min:39756kB low:49692kB high:59628kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:3536kB writepending:4kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:192kB local_pcp:0kB free_cma:0kB [ 83.428506][ T6703] lowmem_reserve[]: 0 0 0 0 0 [ 83.430533][ T6703] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 83.435721][ T6703] Node 0 DMA32: 793*4kB (UM) 184*8kB (UE) 108*16kB (UME) 185*32kB (UME) 33*64kB (UME) 12*128kB (UE) 5*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 3*2048kB (UE) 20*4096kB (UM) = 109380kB [ 83.442574][ T6703] Node 1 Normal: 4*4kB (UM) 3*8kB (U) 11*16kB (UM) 13*32kB (UM) 12*64kB (UM) 5*128kB (UM) 1*256kB (U) 6*512kB (UM) 2*1024kB (U) 1*2048kB (M) 399*4096kB (UM) = 1643768kB [ 83.449392][ T6703] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 83.453203][ T6703] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 83.456216][ T6703] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 83.459070][ T6703] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 83.461901][ T6703] 69127 total pagecache pages [ 83.463537][ T6703] 0 pages in swap cache [ 83.464854][ T6703] Free swap = 124996kB [ 83.466154][ T6703] Total swap = 124996kB [ 83.467487][ T6703] 1048443 pages RAM [ 83.468656][ T6703] 0 pages HighMem/MovableOnly [ 83.470139][ T6703] 283853 pages reserved [ 83.471569][ T6703] 0 pages cma reserved [ 83.473533][ T6703] ------------[ cut here ]------------ [ 83.476863][ T6703] ret [ 83.476871][ T6703] WARNING: drivers/dma-buf/dma-buf.c:1649 at dma_buf_vmap+0x3c5/0x430, CPU#2: syz.0.291/6703 [ 83.480875][ T6703] Modules linked in: [ 83.482304][ T6703] CPU: 2 UID: 0 PID: 6703 Comm: syz.0.291 Not tainted syzkaller #0 PREEMPT(full) [ 83.484224][ T844] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 83.485301][ T6703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.489861][ T844] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.491039][ T6703] RIP: 0010:dma_buf_vmap+0x3c5/0x430 [ 83.494747][ T844] usb 7-1: Product: syz [ 83.495118][ T6703] Code: fc e9 22 fd ff ff 48 8b 3c 24 e8 06 95 1e fc e9 30 ff ff ff e8 1c b1 b0 fb 90 0f 0b e8 14 b1 b0 fb 90 0f 0b e8 0c b1 b0 fb 90 <0f> 0b 90 e9 3f fe ff ff e8 9e 3b 31 05 4c 89 ff e8 16 94 1e fc e9 [ 83.496513][ T844] usb 7-1: Manufacturer: syz [ 83.502393][ T6703] RSP: 0018:ffffc900257773f8 EFLAGS: 00010293 [ 83.505813][ T6703] RAX: 0000000000000000 RBX: ffff8880561be000 RCX: ffffffff8657eed1 [ 83.508205][ T6703] RDX: ffff888025afca80 RSI: ffffffff8657f014 RDI: ffff888025afca80 [ 83.510770][ T6703] RBP: ffffc90025777498 R08: 0000000000000005 R09: 0000000000000000 [ 83.513245][ T6703] R10: 00000000fffffff4 R11: 0000000000000000 R12: ffff888027a1fcd0 [ 83.513269][ T844] usb 7-1: SerialNumber: syz [ 83.516249][ T6703] R13: 1ffff92004aeee82 R14: 00000000fffffff4 R15: ffff8880561be030 [ 83.516267][ T6703] FS: 00007fa0af1f66c0(0000) GS:ffff8880d6586000(0000) knlGS:0000000000000000 [ 83.524416][ T6703] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.525021][ T844] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 83.527006][ T6703] CR2: 00007fa0b0f86480 CR3: 000000005aef2000 CR4: 0000000000352ef0 [ 83.527025][ T6703] Call Trace: [ 83.534366][ T6703] [ 83.535218][ T6703] ? __pfx_system_heap_vmap+0x10/0x10 [ 83.537047][ T6703] ? __pfx_dma_buf_vmap+0x10/0x10 [ 83.539359][ T6703] drm_gem_shmem_vmap_locked+0x113/0x860 [ 83.541985][ T6703] ? __pfx_drm_gem_shmem_vmap_locked+0x10/0x10 [ 83.544286][ T6703] ? __pfx_drm_gem_shmem_object_vmap+0x10/0x10 [ 83.546190][ T6703] drm_gem_vmap_locked+0xc8/0x1c0 [ 83.547873][ T6703] drm_gem_vmap+0x4a/0xa0 [ 83.549218][ T6703] drm_gem_fb_vmap+0xc7/0x450 [ 83.550949][ T6703] vkms_prepare_fb+0x87/0xb0 [ 83.552777][ T6703] drm_atomic_helper_prepare_planes+0x1f2/0xbe0 [ 83.554742][ T6703] ? __pfx_vkms_prepare_fb+0x10/0x10 [ 83.556360][ T6703] drm_atomic_helper_commit+0x191/0x380 [ 83.558055][ T6703] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 83.559925][ T6703] drm_atomic_commit+0x230/0x300 [ 83.561574][ T6703] ? __pfx_drm_atomic_commit+0x10/0x10 [ 83.561649][ T5881] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 83.563623][ T6703] ? __pfx___drm_printfn_info+0x10/0x10 [ 83.568453][ T6703] ? drm_atomic_set_fb_for_plane+0x144/0x280 [ 83.570337][ T6703] ? drm_atomic_set_fb_for_plane+0x186/0x280 [ 83.572233][ T6703] drm_atomic_helper_update_plane+0x314/0x400 [ 83.574113][ T6703] __setplane_atomic+0x22d/0x350 [ 83.575876][ T6703] drm_mode_cursor_universal+0x5e9/0xe20 [ 83.577587][ T6703] ? __pfx_drm_mode_cursor_universal+0x10/0x10 [ 83.579429][ T6703] ? __pfx_drm_lease_held+0x10/0x10 [ 83.581287][ T6703] ? modeset_lock+0x114/0x6d0 [ 83.582983][ T6703] drm_mode_cursor_common+0x308/0x970 [ 83.584788][ T6703] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 83.586615][ T6703] ? avc_has_extended_perms+0x33a/0x1080 [ 83.588319][ T6703] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 83.590106][ T6703] drm_mode_cursor_ioctl+0xd4/0x110 [ 83.591767][ T6703] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 83.594042][ T6703] ? do_raw_spin_lock+0x128/0x260 [ 83.596158][ T6703] ? find_held_lock+0x2b/0x80 [ 83.598109][ T6703] ? do_raw_spin_unlock+0x145/0x1e0 [ 83.600217][ T6703] drm_ioctl_kernel+0x1f3/0x3e0 [ 83.602244][ T6703] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 83.604584][ T6703] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 83.606796][ T6703] drm_ioctl+0x5e6/0xc60 [ 83.608555][ T6703] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 83.611104][ T6703] ? __pfx_drm_ioctl+0x10/0x10 [ 83.613124][ T6703] ? selinux_file_ioctl+0x13b/0x290 [ 83.615355][ T6703] ? selinux_file_ioctl+0xb6/0x290 [ 83.617531][ T6703] ? __pfx_drm_ioctl+0x10/0x10 [ 83.619544][ T6703] __x64_sys_ioctl+0x18e/0x210 [ 83.621648][ T6703] do_syscall_64+0x115/0x870 [ 83.623590][ T6703] ? clear_bhb_loop+0x40/0x90 [ 83.625506][ T6703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.627859][ T6703] RIP: 0033:0x7fa0b0f9ce59 [ 83.629586][ T6703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.637329][ T6703] RSP: 002b:00007fa0af1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.640888][ T6703] RAX: ffffffffffffffda RBX: 00007fa0b1215fa0 RCX: 00007fa0b0f9ce59 [ 83.644248][ T6703] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 83.647513][ T6703] RBP: 00007fa0af1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 83.650871][ T6703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 83.654195][ T6703] R13: 00007fa0b1216038 R14: 00007fa0b1215fa0 R15: 00007fffff87eaf8 [ 83.657528][ T6703] [ 83.658862][ T6703] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 83.661905][ T6703] CPU: 2 UID: 0 PID: 6703 Comm: syz.0.291 Not tainted syzkaller #0 PREEMPT(full) [ 83.665511][ T6703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.669600][ T6703] Call Trace: [ 83.670944][ T6703] [ 83.672161][ T6703] dump_stack_lvl+0x100/0x190 [ 83.674157][ T6703] vpanic+0x552/0x970 [ 83.675943][ T6703] ? __pfx_vpanic+0x10/0x10 [ 83.677840][ T6703] panic+0xd1/0xe0 [ 83.679394][ T6703] ? __pfx_panic+0x10/0x10 [ 83.681103][ T6703] ? check_panic_on_warn+0x1f/0x90 [ 83.683062][ T6703] check_panic_on_warn.cold+0x19/0x34 [ 83.685153][ T6703] ? dma_buf_vmap+0x3c5/0x430 [ 83.687049][ T6703] __warn.cold+0x191/0x328 [ 83.688649][ T6703] __report_bug+0x296/0x3d0 [ 83.690269][ T6703] ? dma_buf_vmap+0x3c5/0x430 [ 83.692147][ T6703] ? __pfx___report_bug+0x10/0x10 [ 83.694105][ T6703] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 83.696591][ T6703] ? __vmalloc_node_noprof+0xad/0xf0 [ 83.698751][ T6703] ? dma_buf_vmap+0x3c5/0x430 [ 83.700629][ T6703] report_bug+0xb2/0x220 [ 83.702376][ T6703] ? dma_buf_vmap+0x3c5/0x430 [ 83.704289][ T6703] handle_bug+0x16a/0x2a0 [ 83.706043][ T6703] exc_invalid_op+0x17/0x50 [ 83.707946][ T6703] asm_exc_invalid_op+0x1a/0x20 [ 83.709885][ T6703] RIP: 0010:dma_buf_vmap+0x3c5/0x430 [ 83.712040][ T6703] Code: fc e9 22 fd ff ff 48 8b 3c 24 e8 06 95 1e fc e9 30 ff ff ff e8 1c b1 b0 fb 90 0f 0b e8 14 b1 b0 fb 90 0f 0b e8 0c b1 b0 fb 90 <0f> 0b 90 e9 3f fe ff ff e8 9e 3b 31 05 4c 89 ff e8 16 94 1e fc e9 [ 83.719635][ T6703] RSP: 0018:ffffc900257773f8 EFLAGS: 00010293 [ 83.722089][ T6703] RAX: 0000000000000000 RBX: ffff8880561be000 RCX: ffffffff8657eed1 [ 83.725259][ T6703] RDX: ffff888025afca80 RSI: ffffffff8657f014 RDI: ffff888025afca80 [ 83.728277][ T6703] RBP: ffffc90025777498 R08: 0000000000000005 R09: 0000000000000000 [ 83.731347][ T6703] R10: 00000000fffffff4 R11: 0000000000000000 R12: ffff888027a1fcd0 [ 83.734332][ T6703] R13: 1ffff92004aeee82 R14: 00000000fffffff4 R15: ffff8880561be030 [ 83.737319][ T6703] ? dma_buf_vmap+0x281/0x430 [ 83.739171][ T6703] ? dma_buf_vmap+0x3c4/0x430 [ 83.741034][ T6703] ? dma_buf_vmap+0x3c4/0x430 [ 83.742880][ T6703] ? __pfx_system_heap_vmap+0x10/0x10 [ 83.744936][ T6703] ? __pfx_dma_buf_vmap+0x10/0x10 [ 83.746875][ T6703] drm_gem_shmem_vmap_locked+0x113/0x860 [ 83.749006][ T6703] ? __pfx_drm_gem_shmem_vmap_locked+0x10/0x10 [ 83.751392][ T6703] ? __pfx_drm_gem_shmem_object_vmap+0x10/0x10 [ 83.753741][ T6703] drm_gem_vmap_locked+0xc8/0x1c0 [ 83.755705][ T6703] drm_gem_vmap+0x4a/0xa0 [ 83.757160][ T6703] drm_gem_fb_vmap+0xc7/0x450 [ 83.758832][ T6703] vkms_prepare_fb+0x87/0xb0 [ 83.760732][ T6703] drm_atomic_helper_prepare_planes+0x1f2/0xbe0 [ 83.763170][ T6703] ? __pfx_vkms_prepare_fb+0x10/0x10 [ 83.765229][ T6703] drm_atomic_helper_commit+0x191/0x380 [ 83.767369][ T6703] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 83.769858][ T6703] drm_atomic_commit+0x230/0x300 [ 83.771974][ T6703] ? __pfx_drm_atomic_commit+0x10/0x10 [ 83.774332][ T6703] ? __pfx___drm_printfn_info+0x10/0x10 [ 83.776660][ T6703] ? drm_atomic_set_fb_for_plane+0x144/0x280 [ 83.779122][ T6703] ? drm_atomic_set_fb_for_plane+0x186/0x280 [ 83.781577][ T6703] drm_atomic_helper_update_plane+0x314/0x400 [ 83.784122][ T6703] __setplane_atomic+0x22d/0x350 [ 83.786116][ T6703] drm_mode_cursor_universal+0x5e9/0xe20 [ 83.788326][ T6703] ? __pfx_drm_mode_cursor_universal+0x10/0x10 [ 83.790953][ T6703] ? __pfx_drm_lease_held+0x10/0x10 [ 83.793116][ T6703] ? modeset_lock+0x114/0x6d0 [ 83.795089][ T6703] drm_mode_cursor_common+0x308/0x970 [ 83.797388][ T6703] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 83.799900][ T6703] ? avc_has_extended_perms+0x33a/0x1080 [ 83.802397][ T6703] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 83.804935][ T6703] drm_mode_cursor_ioctl+0xd4/0x110 [ 83.807001][ T6703] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 83.809175][ T6703] ? do_raw_spin_lock+0x128/0x260 [ 83.811203][ T6703] ? find_held_lock+0x2b/0x80 [ 83.813164][ T6703] ? do_raw_spin_unlock+0x145/0x1e0 [ 83.815273][ T6703] drm_ioctl_kernel+0x1f3/0x3e0 [ 83.817272][ T6703] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 83.819639][ T6703] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 83.821859][ T6703] drm_ioctl+0x5e6/0xc60 [ 83.823610][ T6703] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 83.825958][ T6703] ? __pfx_drm_ioctl+0x10/0x10 [ 83.827868][ T6703] ? selinux_file_ioctl+0x13b/0x290 [ 83.829977][ T6703] ? selinux_file_ioctl+0xb6/0x290 [ 83.832047][ T6703] ? __pfx_drm_ioctl+0x10/0x10 [ 83.834010][ T6703] __x64_sys_ioctl+0x18e/0x210 [ 83.836010][ T6703] do_syscall_64+0x115/0x870 [ 83.837879][ T6703] ? clear_bhb_loop+0x40/0x90 [ 83.839789][ T6703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.842138][ T6703] RIP: 0033:0x7fa0b0f9ce59 [ 83.844008][ T6703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.851519][ T6703] RSP: 002b:00007fa0af1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.854788][ T6703] RAX: ffffffffffffffda RBX: 00007fa0b1215fa0 RCX: 00007fa0b0f9ce59 [ 83.857736][ T6703] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 83.860847][ T6703] RBP: 00007fa0af1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 83.863861][ T6703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 83.866916][ T6703] R13: 00007fa0b1216038 R14: 00007fa0b1215fa0 R15: 00007fffff87eaf8 [ 83.869889][ T6703] [ 83.871860][ T6703] Kernel Offset: disabled [ 83.873569][ T6703] Rebooting in 86400 seconds..