last executing test programs: 3.730220518s ago: executing program 0 (id=319): mount$tmpfs(0x0, &(0x7f0000004f80)='.\x00', &(0x7f0000004fc0), 0x4481, &(0x7f0000000200)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="d6bc"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x80580, 0x52) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fc2b0000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd1f, 0x60bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x8, 0xa}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}]}}]}, 0x38}}, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x86) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffff9c, &(0x7f00000001c0)='./file1\x00', 0x200000, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x84, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1}, {0xfff1, 0xf}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x1, 0xe338, 0x3, 0x0, 0x1}}, @TCA_CT_ACTION={0x6, 0x3, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) write$tun(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="4500001c123440004011149b0a0000010a00000204d2162e000800"], 0x1c) 3.609852456s ago: executing program 0 (id=321): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_KEY(r1, 0x6a, 0x1, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1, 0x3, 0x101, 0x0, 0x0, {0x57fb02a5015c9239, 0x0, 0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x81) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f00000001c0)={0x9, 0x3}) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x7fffffffffffffff}}, './file0\x00'}) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000240)=@s={0x5, @SEQ_MIDIPUTC=0xb7, 0x5, 0x8}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0x2d, 0x107, 0xfffffffe, 0x2000001, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c855}, 0xc800) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1d, 0x2, 0x6) (async) setsockopt$ALG_SET_KEY(r1, 0x6a, 0x1, 0x0, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1, 0x3, 0x101, 0x0, 0x0, {0x57fb02a5015c9239, 0x0, 0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x81) (async) socket$kcm(0x11, 0x3, 0x0) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f00000001c0)={0x9, 0x3}) (async) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x7fffffffffffffff}}, './file0\x00'}) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000240)=@s={0x5, @SEQ_MIDIPUTC=0xb7, 0x5, 0x8}) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0x2d, 0x107, 0xfffffffe, 0x2000001, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c855}, 0xc800) (async) 3.510702009s ago: executing program 0 (id=322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x2}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) syz_fuse_handle_req(r2, &(0x7f0000006380)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x28, 0x0, 0x2000000000000009, {{0xf7fffffffffffffd, 0xfffffffffffffffd, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r4, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x200000000000000}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4000800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x80000001}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4, 0x20}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x8000) 2.809206065s ago: executing program 3 (id=327): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000800)='net/rpc\x00') r2 = openat(r1, &(0x7f0000000900)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000a00)='nfsd 127.0.0.1 2000000000 localhost\n', 0x24) close(r2) r3 = openat(r1, &(0x7f0000000d00)='nfsd.fh/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000e00)='localhost 1 \\x00000001 2000000000 /\n', 0x24) r4 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000270005006e0400000700000000000000000000000600ff0901a1018510150026ff007508950681009100a6119513810091008512953f81009100c0"], 0x13f) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00050009"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) r7 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) unshare(0x6a040000) r9 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$RNDADDENTROPY(r9, 0x40085203, 0x0) read(r4, &(0x7f00000002c0)=""/10, 0xa) write$UHID_INPUT2(r6, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x8) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="c00000001900674c000000002100000000000000000000000000000000000000fc000000000000000000000000000000000000000000003736cc5db7e999be000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff7f000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000040000000000000000000000fdff000000000000000002000a0010000100000000000000"], 0xc0}}, 0x4c050) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6000000000103a01fe800000000000000000060000000000ff02000000000000000000000061000000000000000f0009000000000000401b"], 0x0) mount$fuse(0x0, &(0x7f0000000200)='nfsd.fh/channel\x00', &(0x7f0000000100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="66643dd0efbeb884d677b1357f3a613451a0e9ed6c71cd7766c791ce968a4488ecb2a1704fd616f57cdea80ced50e8c2c2fe41213989a010606b28392b70b66d1e0fd455caab", @ANYRES32, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRES64=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000300)={0x50, 0x0, r11, {0x7, 0x1f, 0x0, 0xffffffffe4420c50, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x84, 0x40000}}, 0x50) 2.591059947s ago: executing program 3 (id=330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000140)={0xfffffffe, 0x3, 0x8}) (async) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)="616c676f3d9473766420220104330f0b", 0x10) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) read(r3, &(0x7f0000000080)=""/76, 0x4c) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2) 2.480498588s ago: executing program 3 (id=334): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r2, 0x4b72, &(0x7f0000000700)={0x1, 0x9, 0x9, 0x0, 0x12, "0060930000efa48902000000000000ffff00"}) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="6502000002fd0a4f0524012800001f00000000000000000000000000000000000000000000000c00000001040000000000007dff0a6e6f6465767b65766f03d38b9200000000000000000000000000280070673effeb09b5351f5bde054000000000187899a916638814e5708103b494e1000000000000000002000800ac00f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a440b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8e289da649a3700398641631d44f4a39b1191937a280e8d889fc220d115ac8e2f184b9a61758d26772ab0f2044d8ef0263ddd97d3c427b3a532efab1d1ce32ca7c1fc231af48408e02b255028b7c9bb85396f4d8af0eb95fc0ecc99f780e22c016f6465762f6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7d4a6be4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff00"/586, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xfd85) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010024bd7000fcdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="08009e000738"], 0x5c}, 0x1, 0x0, 0x0, 0x24014804}, 0x9590f6cc3aa711f2) r7 = socket(0x8, 0x5, 0x7fff) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) r8 = openat$fuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r8, &(0x7f0000001340)={0x2020}, 0x2020) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000000140)=""/165, &(0x7f0000000200)=0xa5) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a000000021000100000000000000e0ff00000000000000000000000000000000ffffffff000000000000000000000000fffc0000000100000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100ac141440000000000000000000000011fe8000000000000000000000000000aae0000001000000000000000000000000fe8000000000000000000000000000bb3c05"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r6, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x24}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x805}, 0x1) ioctl$sock_SIOCOUTQNSD(r7, 0x4010618a, &(0x7f0000000000)) 1.30849891s ago: executing program 1 (id=348): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000800)='net/rpc\x00') r2 = openat(r1, &(0x7f0000000900)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000a00)='nfsd 127.0.0.1 2000000000 localhost\n', 0x24) close(r2) r3 = openat(r1, &(0x7f0000000d00)='nfsd.fh/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000e00)='localhost 1 \\x00000001 2000000000 /\n', 0x24) r4 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000270005006e0400000700000000000000000000000600ff0901a1018510150026ff007508950681009100a6119513810091008512953f81009100c0"], 0x13f) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00050009"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) r7 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) unshare(0x6a040000) r9 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$RNDADDENTROPY(r9, 0x40085203, 0x0) read(r4, &(0x7f00000002c0)=""/10, 0xa) write$UHID_INPUT2(r6, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x8) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="c00000001900674c000000002100000000000000000000000000000000000000fc000000000000000000000000000000000000000000003736cc5db7e999be000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff7f000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000040000000000000000000000fdff000000000000000002000a0010000100000000000000"], 0xc0}}, 0x4c050) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6000000000103a01fe800000000000000000060000000000ff02000000000000000000000061000000000000000f0009000000000000401b"], 0x0) mount$fuse(0x0, &(0x7f0000000200)='nfsd.fh/channel\x00', &(0x7f0000000100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="66643dd0efbeb884d677b1357f3a613451a0e9ed6c71cd7766c791ce968a4488ecb2a1704fd616f57cdea80ced50e8c2c2fe41213989a010606b28392b70b66d1e0fd455caab", @ANYRES32, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRES64=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000300)={0x50, 0x0, r11, {0x7, 0x1f, 0x0, 0xffffffffe4420c50, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x84, 0x40000}}, 0x50) 1.16422451s ago: executing program 1 (id=350): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (fail_nth: 2) 1.066062485s ago: executing program 1 (id=351): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x80000001}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8000) 1.058331587s ago: executing program 2 (id=352): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x5, r2}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x4e2140, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r4, 0x1, &(0x7f0000000780)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x5, r3, &(0x7f0000000a00)="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", 0x200, 0x200}]) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(r5) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xe, &(0x7f0000000000)=0x4800, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa0042, 0x0) copy_file_range(r8, 0x0, r8, &(0x7f0000000040)=0x8, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002800)=@nat={'nat\x00', 0x670, 0x5, 0x430, 0x230, 0x0, 0xffffffff, 0x2d4, 0x0, 0x39c, 0x39c, 0xffffffff, 0x39c, 0x39c, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x18c, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1d, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x1b, @multicast1, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'team_slave_0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xffffff00, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x0, 0x20}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0xc, "1542", 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x48c) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c", 0xc) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000ffff3201"], 0x138) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="040000000104000014002b8008000100", @ANYRES32, @ANYBLOB="0800031519002c030000000000000000bd83fde1942f0008b252224bb77e663d0262cd7d1736fe8e1789f6a2851442b58aa47def16fd49861fded46baf169d933b738cdb0629050967b8891db771302f1a441817059b9a41ddd41c60f7a19ff85d94085792bd9bb35f797222a650761b410669fbecf48705e1ed3145540cd22766130073b35698b6802e4aa3051353f14ce2bd7b331d28c8190eecdb0149e6e3ef569c6316d30bd13bc2e69ce9126beb"], 0x3c}, 0x1, 0x2000000, 0x0, 0x5}, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400440}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x180, r10, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x33e7bbf9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x532580ab}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0xfd6b, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @mcast2, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1f0, @empty, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'nicvf0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x18}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x0, 0x2, 0x6}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_ID={0x10, 0x3, "c9d369717f3be6011d574945"}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4048090}, 0x400c005) 1.051278395s ago: executing program 1 (id=353): syz_open_dev$video4linux(&(0x7f0000000080), 0xfffffffffffffe01, 0x340) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000240)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(r0, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/214, 0xd6}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa0}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0x0, 0x4, 0x1, 0x241c, 0x6, "2d5157854e0a1e37a2c83e0fab035d8445e39c"}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf250c000000050008000300000011000700e1ed01c7a816c481852468e129000000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x800) 931.153263ms ago: executing program 1 (id=354): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, r2, 0x25, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) mlockall(0x2) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='reiserfs\x00', 0x38130d1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) sched_getaffinity(r4, 0x8, &(0x7f0000000280)) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@remote, 0x4e27, 0x2000, 0x84000000, 0x12d5c, 0x12d5c}}, 0x44) shmctl$SHM_LOCK(r3, 0xb) openat$hwrng(0xffffff9c, &(0x7f0000000180), 0x10000, 0x0) shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) 930.916684ms ago: executing program 2 (id=355): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) (fail_nth: 2) 929.531461ms ago: executing program 3 (id=356): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newqdisc={0x34, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=@newchain={0x1f24, 0x64, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff2}, {0xfff3, 0xc}, {0x5, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x8f}}, @filter_kind_options=@f_basic={{0xa}, {0xc50, 0x2, [@TCA_BASIC_POLICE={0x41c, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400, 0x6, 0x0, 0x2, 0x5, 0x3, 0xfff, 0x6, 0x200000, 0xd, 0x606a, 0x5, 0x9, 0x3, 0x4, 0x3, 0x9484, 0xf, 0x40003f2, 0x38222c0a, 0x5, 0x3422d0d7, 0x1, 0x7, 0x7, 0xd03, 0x2, 0x3, 0x2, 0xe, 0x10000, 0x6, 0xc73, 0x2, 0xc4, 0x8, 0x7b, 0x5f, 0x2ba3, 0x8000, 0x1000, 0x2, 0x1000, 0x400, 0x80000001, 0xffffffff, 0x80, 0x52609b0e, 0x2, 0x10, 0x100, 0x6, 0xb, 0x9, 0x401, 0x5, 0x6867, 0x2, 0x1, 0x3, 0x5, 0x10, 0x5, 0x75, 0x7fffffff, 0x9bd4, 0x5, 0x8, 0x4, 0x2, 0x2, 0x9, 0x3, 0x2, 0x0, 0x1, 0x281, 0x6, 0x0, 0x5, 0x1, 0x40, 0x4, 0x5, 0x7, 0x4, 0x40, 0x400, 0x7, 0xb, 0x7, 0xfffff000, 0x7fffffff, 0xfb069892, 0x1, 0x7, 0x6, 0x5, 0x9, 0x800, 0x80000000, 0x3, 0x40, 0x4, 0x9, 0x5, 0x9, 0x405808, 0x40a4, 0xf, 0x1ff, 0x6, 0xcb, 0x8, 0x3, 0xd, 0xa9, 0x4, 0x1, 0x2, 0x5, 0x8, 0x7fff, 0x8, 0x4, 0x3, 0x5, 0xfffffff8, 0x4, 0x8, 0x2, 0x6, 0x8, 0x80000001, 0x8, 0xaea4, 0x79ac, 0x4, 0x3ff, 0x101, 0x2, 0x0, 0x477, 0xfffffffc, 0x93, 0x8, 0x7f, 0x2, 0x7, 0x401, 0xa8, 0x3, 0x1, 0x6, 0x4, 0x1, 0x3dc, 0x1, 0x3, 0x2, 0x0, 0xfffffff9, 0x1d4, 0x9, 0x6, 0x9, 0x8, 0x5, 0x1, 0xfffffff9, 0x7, 0x9, 0x10000, 0x4, 0x9, 0x40, 0x7f, 0x2000000, 0x5, 0x3, 0x3, 0x7fffffff, 0x8, 0x88c, 0x7e61, 0x9, 0x100, 0x57, 0x1c1280, 0x5, 0x7, 0x2, 0x4, 0x1, 0xff, 0x705f, 0x36, 0x1, 0x6, 0x4, 0xfffffff8, 0x7261, 0x1ddae94f, 0xffffff0c, 0xd, 0x7, 0xb10, 0x7, 0x9, 0x6, 0x69, 0x80000001, 0x2, 0x5, 0x1, 0x4, 0xff, 0x0, 0x727, 0xffff, 0xf6, 0x0, 0x7fffffff, 0xef, 0x60, 0x7, 0x0, 0x8b4, 0x10, 0x4, 0x5542d466, 0x3, 0x7, 0xc43, 0x7, 0xc, 0x2, 0x1, 0x9, 0x9, 0x1, 0x2, 0x7fff, 0x6, 0x7, 0x5897, 0x140000, 0x80, 0xc9607e7, 0x1, 0x4, 0x1, 0x3, 0x8, 0x4a, 0x7fffffff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100}]}, @TCA_BASIC_EMATCHES={0x830, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x501c}}, @TCA_EMATCH_TREE_LIST={0x2e8, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x88, 0x3, 0x0, 0x0, {{0x6, 0x9, 0x800}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0x6a, 0x5, "cc0f565adada086709c493ac850d60977fd58facfd384ae8ed2b9e949f042976b7284831ef3d5f5e4a3822d50a905d90c9052b2b1701036dc893d79f35049ea41eda857a46d8c005ba6e7eafd7ecc43728b052e6f5a2556dc9ad159af66e770e8e67305d9ff3"}]}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x8, 0x2, 0x7}, {0x46}}}, @TCF_EM_META={0x90, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x78, 0x5, 0x2}, {0x8000, 0x0, 0x3}}}, @TCA_EM_META_RVALUE={0x1b, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="4baa89831025f64f3fc9", @TCF_META_TYPE_VAR="334944a41177dfc1e1"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x81, 0x2}, {0x9, 0xe0}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR="4702", @TCF_META_TYPE_VAR='\x00', @TCF_META_TYPE_VAR='$', @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="445f5b7d3a03"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x4}, {0x9, 0x6, 0x3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x2, 0x1}, {0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0xcc, 0x2}, {0xff81, 0x0, 0x1}}}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1, 0x3, 0x9}, {0xffff, 0xff, 0x5, 0x9}}}, @TCF_EM_CONTAINER={0x74, 0x3, 0x0, 0x0, {{0x1000, 0x0, 0xf1b}, "743f96d150161fd14dab9c078dd757d6b665dcd14a48ecc737dc3796ef9b8795e99a9c57db5c9dc726a802ab406d23d6aa6ae213e4c4f67b581c97dc86d3a5b1217d786e15fc733349148c98d0b8dee8619980978e6b434bcd000a29f7964889d234624cd7757c8a"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0x7}, {{0x3, 0x1, 0x1}, {0x2, 0x1}}}}, @TCF_EM_CONTAINER={0xa0, 0x2, 0x0, 0x0, {{0xaef, 0x0, 0x6}, "9d70613cbed4f837bd824c7818ad0660fa807d07d663ec6fe14c184f191476c31b0c3c3204f386c1332efac44181ec35278f78c9b510e185f828783e7a6259af11553a74ed4c1c359aacab00255f137275394d6b308f63af80fd8b288d1e641b07522b773dec670210f12ad5911fb5b8063b461119fabf92a71a26cc6dccd036f58412354e892cc4f8b3a878dab8091b7de67eb7"}}, @TCF_EM_IPT={0x78, 0x2, 0x0, 0x0, {{0x7, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0x4a, 0x5, "05d6b8ada42a37f1cf96b4455919f998026e2742b979c1408b8130617fca4aed949653e3e8ee00a24390b099d00aadb7fe93a78e1b5eb7601829e69eb04e920323e4c93ae528"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_LIST={0x534, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x9, 0x1, 0x1}, {0xb, 0x7, 0x2, 0x2, 0xe, 0x0, 0x2}}}, @TCF_EM_IPT={0x74, 0x2, 0x0, 0x0, {{0x0, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_MATCH_DATA={0x54, 0x5, "93cf640ee1623ddf72c51a48df11885fcedfcbce43468e0cbdb66b6c193820f2da60b8b927263743b17673738718f43b0a701393a2e5801596e0d7ba5b2c2d9e18ad4ff3f61402832d2bbbb9451b2645"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x6, 0x1, 0xffff}, {0xc, 0x9, 0x10, 0x1, 0xb, 0x1, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{}, {0x7, 0xf, 0x9, 0x5, 0x9, 0x1, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7, 0x7, 0xff9c}, {{0x0, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xec, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x958a}, "c7059144e401e0be1a1bc142e0fc1a6e9fa3d766187f835ac38380b85448d8aa362e97496aaf861b8771c1eef3f8b09463c644bd73f5e82fe7ac9baea226c30fede61e9951bc3605ce4d51e630969ca7e3bbec1da61de647e35ee8570d54ac5c83cd3ca6da48efb1a3564a23fd1f0f43cca2eeeab145a3be56beae6d3c2a1f5eb557d8446e8d1caf74f1aee1b7b46c4f7bad30ecf3264885e908ebb8f98040bac1ff1497fad3e3e295949d752081a4999f31c431098ba41239d201bf67c2829218a63fb3b573a27c9c2dfb941e8b6fa2e25c6997c5e21a3d550e39de1491f1c5"}}, @TCF_EM_CONTAINER={0x104, 0x1, 0x0, 0x0, {{0x8, 0x0, 0x1}, "7f8d172221f4f91f3607a6309547dcc98c4ca8cf26aa632b4040b96fbc7d4ddb2df57608a454242c49627cbe32723b75fae2c03936489b01335a6109040d6217adf5152844272c5b0c30d0863d26fc769b1c207399230e22293fb74af756322cf4a2b71a652d29a18cc3ca46fc693c119d31e8ca1089a3115370d2a2a1c0ae408ecd50816774b0b4dccace4d4304cad9219aa83ede9367637ae111f73c7447f14798724eb2aa6ac4557ca955199dcfa208f29a83d57cc1469fbd725b838ab4f726fb0a8d5f8f4a5c4a736c42850c502722b72acfd67877996b5fe1d259a6a58eab6ed2eaf2637f9fee3cd2e53ab93cfc63dd2386ca7808"}}, @TCF_EM_META={0x18, 0x3, 0x0, 0x0, {{0x7363, 0x4, 0x7ff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x1, 0x1}, {0x6}}}]}}, @TCF_EM_IPT={0x220, 0x2, 0x0, 0x0, {{0x2, 0x9, 0x94}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_DATA={0xdb, 0x5, "63fca2da49139d180790506a41a4c851dec3d9fdf80a06bddb3c3b330db2bdd2dca70e25bbfb626d1d6381bc94f7f56b4bc9ddece9fda60039ea2b5dc7a955c1425667a964702d94910078c0c2518155d98c368e268acef716d5c504284d67bf9f99da0061fd6065423743ec894fd6f86b2c8a16f2fc4140972964fde7d89f61d7828d696c8e400e3070bd96cae00ee87d44b4a1b9c91438aa9e1533aa5be2c498d31b330b3eb7801527ad6345e8c72b71837288c5b909433603168ed947eadb29cacdcec8aafe56fedcbf24ad36c9082eaaecd3fe68e0"}, @TCA_EM_IPT_MATCH_DATA={0xb7, 0x5, "559d7c6a297fb340598783a306d714e284c52e02b48f9792888cdc6830e067e035c06a9082e86b54d724c2dc14069dc0f09a1ecb5c1cd9e1ef433260e45adcb7e973effc41ee193db27ac33b2818692883bb622700d3588838ba95e059d87c9f54312bb4e6ca11474a07ab0e9c01d952ddd29ae96fb274d934f66abb8d7713dde2c41a79e8af60cdded4c64e4802baa6df67ccedc83b67c42b435dce7e48e11e7219e7820f3ddd86c59ee201466af2ca375907"}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x55, 0x5, "acf18f5ccb1ca9956e029770b0b593d11de4cab556df6c9ca833c9114538148dceeafb3d8ae4d5496b7327184234ec83634f04e2dcd8059f80a5435832df3a3a66f034c37a863f8fe0e9c86eef133ec13d"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_CONTAINER={0x38, 0x3, 0x0, 0x0, {{0x6, 0x0, 0xfff}, "2df61d85a3dcd8f2a1fafb3694f8f533dd055908512312a5be63ece9d56df05fd8484d90dd2da19611b012"}}]}]}]}}, @filter_kind_options=@f_basic={{0xa}, {0x1278, 0x2, [@TCA_BASIC_POLICE={0x524, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4dc2f03a}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10000, 0x7, 0x1ff, 0x0, 0x3, 0x6, 0x5, 0x8000, 0xfffffff8, 0x187, 0x81, 0x8, 0x9, 0xffff, 0x0, 0x10001, 0x3, 0x4, 0x2bed, 0xc000, 0x856f, 0x7bcd, 0x3, 0x1, 0x200, 0x1, 0x1, 0xfd7a, 0x3aa, 0x2fa, 0x5, 0x3ff, 0xffffcf64, 0x9, 0x38, 0x74a1, 0x80, 0x5, 0x100, 0x0, 0xe, 0x8, 0x2, 0x9, 0x7, 0x4fd, 0x6, 0xffffffc9, 0x8000, 0x0, 0xf, 0x7, 0x8, 0x4, 0xfff, 0x40, 0x6, 0x1ff, 0xfffffff8, 0xffffffff, 0x27a9, 0x4, 0x3, 0x4, 0xcc9, 0x1, 0x7, 0x3, 0x0, 0x0, 0x7, 0x2e, 0x400, 0x4, 0x10000, 0x9000000, 0x8, 0x5, 0x4, 0x0, 0x6990f498, 0x5, 0x1e2000, 0xf0, 0x3ff, 0x1, 0x8, 0x7, 0x7fffffff, 0x3b63, 0x5, 0x2, 0x4, 0x6, 0x4, 0xd, 0x4, 0x68, 0x101, 0x1, 0xa8, 0x400, 0x5, 0x1, 0xfffeffff, 0x2, 0x6, 0xe4, 0x2, 0x2b, 0xff, 0x4, 0x3, 0x2, 0x6, 0x4, 0x1000, 0x81, 0x101, 0x93, 0xd, 0x7, 0xb27, 0x228, 0x8, 0x6, 0xc, 0x3, 0x80000000, 0x6, 0x1, 0x5, 0x1, 0x7, 0x7, 0x7ff, 0x7, 0x3, 0xd84, 0x4, 0x1, 0x3, 0x80, 0x101, 0x1ff, 0x1, 0x1, 0x2, 0x2, 0x2, 0x6, 0x7, 0x4, 0x200, 0x8, 0x6, 0x80, 0x8, 0xffff0000, 0x7, 0xffffffff, 0x1, 0x2, 0x94, 0x5, 0x9, 0x40, 0xfffff800, 0x9, 0x400, 0xde8, 0xb65d, 0x9, 0x3, 0x3, 0xdb21, 0xfffffaab, 0x4, 0x7, 0x0, 0x5, 0x3ff, 0x0, 0xd, 0x4000, 0x2, 0xfffffff7, 0x0, 0x6, 0xc, 0x0, 0x7, 0x657d, 0xffffff6b, 0x1, 0x9, 0x400, 0x8, 0x1, 0x6c1154f8, 0x9, 0x1, 0x7, 0x4, 0x6, 0x8, 0x401, 0x1, 0x6, 0x3ff, 0x4, 0x8000, 0x9a2, 0x3, 0x8, 0x8, 0x0, 0x3, 0xe, 0x4, 0x4, 0x6, 0xff, 0x36ac84cd, 0xffffffff, 0xabfe, 0x7, 0x2, 0xfffffffe, 0x3, 0x5, 0x44, 0x8001, 0x19e, 0xef, 0x7, 0x3, 0x9, 0x2, 0x9, 0x8001, 0x6, 0x100, 0x5, 0x0, 0xb3b, 0x2d5, 0x32, 0xac, 0x101, 0xb, 0x6, 0x401, 0x6, 0x6e096f3c, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0xffffffffeffffffd, 0xffffffff, 0x80, 0x5, {0x8, 0x0, 0x5, 0x9, 0x0, 0x2}, {0x2, 0x0, 0x86e, 0xf4f, 0x1, 0x6}, 0x4, 0x9, 0x2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1c}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5fa}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x20000000, 0x9, 0x0, 0xf3, {0x3, 0x1, 0xffff, 0x6, 0x3, 0x2}, {0x2, 0x1, 0x8, 0x5, 0x0, 0x2}, 0x69d, 0x2, 0x3}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xdb4d, 0x2, 0x3, 0x9, 0x3, {0x4, 0x1, 0x8000, 0x2, 0x4e, 0xa}, {0x75, 0x1, 0x63e9, 0x9, 0xfff, 0x1}, 0x6, 0x853, 0x100}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x80000001, 0x9, 0x7, {0x5, 0x0, 0x400, 0x4, 0x8, 0x400}, {0x6, 0x1, 0x2, 0x2, 0x8, 0xa92f}, 0x7, 0x34, 0x4}}]}, @TCA_BASIC_EMATCHES={0x12c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x120, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0xc3}, {0x80000001, 0x4, 0x100}}}, @TCF_EM_CONTAINER={0x90, 0x1, 0x0, 0x0, {{0xa, 0x0, 0x3}, "148d8d48cd6f1038d9e1f2dc6d03ce4a5f8d19aa0e8c1699c8d29a8ed34e11ec11bcd5935d471750b5bc993e72118e2ae4df227a1165fb2eb4256b03b2c0310934035d3de38874ab1e4e9d7d8390d7030af657d3197d16de207bca427810af24be89b1d7ce799c1c8d9e43172830ac7e1a376155d13b059abde44ec105672ecd235bc3"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x0, 0x7, 0x3}, {{0x2, 0x1, 0x1}, {0x4, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0xee, 0x2, 0xa}, {0x5a, 0x2, 0x0, "b049"}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x8, 0x0, 0x6}, "9bf6b94e"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x4}, {0x10, 0x565db664, 0x0, 0x2, 0x9, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1, 0x8, 0xffff}, {0xffffffffffffffff, 0x6, 0x7}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1c3, 0x8, 0x9}, {0x9, 0x0, 0x1}}}]}]}, @TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x1, 0xa4a, 0x4, 0x200, 0x9, 0xf, 0x1, 0x5, 0xb, 0xe, 0xe7, 0x10, 0x33, 0x7, 0x4, 0x10000, 0x9, 0x4, 0x400, 0x7, 0x0, 0x7fffffff, 0x6, 0x7, 0x80, 0x7, 0x7f, 0x8, 0x3ff, 0xe0000000, 0x5, 0x0, 0x7, 0x7fff, 0x1, 0x7, 0x7fffffff, 0x3, 0x7, 0x4, 0x7, 0x1ac, 0xce4, 0x79, 0x7, 0x3, 0xc, 0x7, 0x3, 0xdfbe, 0x2, 0x10001, 0x8d01, 0x6, 0x80000000, 0x0, 0x1, 0x6a5, 0x6, 0xffffffff, 0x7f, 0x449, 0x7, 0x7eed, 0x7, 0xc0, 0x2, 0x1, 0x7, 0x40, 0x5, 0x1000, 0xc, 0xf8, 0x3, 0x80000001, 0x7, 0x380000, 0x2, 0x3, 0x8, 0x9, 0x7, 0xfff, 0xff, 0x9, 0xfffffff9, 0x7f, 0xe33, 0x3, 0x0, 0x0, 0x3, 0x5, 0xd1, 0x6, 0x8, 0x1, 0x8, 0xbad, 0x5, 0x19fe, 0x4, 0xe6, 0xee3, 0xfff, 0x80, 0x7, 0x1, 0x1, 0x5, 0x9, 0x1, 0x5, 0x1, 0x13, 0x7, 0x9, 0x80000001, 0x4, 0x3ff, 0x200, 0x0, 0x9, 0x3, 0x5, 0x0, 0x8, 0x1, 0x28c106d3, 0x8, 0x10, 0x7fff, 0x101, 0x0, 0x0, 0x2, 0x7, 0x8, 0x1, 0xe2, 0xfffffff8, 0x0, 0xb, 0x7f, 0x400, 0x5, 0xc80, 0xdf7, 0xf88, 0x6, 0x3, 0x1, 0x101, 0x9, 0x200, 0x3, 0x1, 0x6, 0x6, 0x0, 0x3ff, 0xff, 0x8, 0x0, 0x5, 0xbab, 0x1, 0xac, 0x81, 0x5, 0x4, 0x3, 0x9, 0x9, 0x6, 0x3, 0x2, 0xfffffffb, 0xff5, 0x6, 0x0, 0x9, 0x5, 0x0, 0x3d, 0x7, 0xfc72, 0x7, 0x0, 0x3, 0x27ed, 0x3, 0x8, 0x8, 0x9, 0x20000, 0x7f, 0xb, 0x9, 0x7, 0x400, 0xf2, 0x2f71, 0x1, 0x6, 0x200, 0x9, 0x1, 0x8, 0x4, 0x80, 0x8, 0x6, 0x10, 0x3c1, 0x6f, 0x3, 0x9, 0x100, 0x2, 0x6, 0x6, 0xfffffffb, 0x5, 0x6, 0x1, 0x8, 0x101, 0x3b, 0x10001, 0x7, 0xff, 0x3, 0x8, 0x9, 0x7, 0x0, 0x9, 0x5, 0x1, 0x5, 0x0, 0xce, 0x6, 0x10001, 0x2, 0xfffffff8, 0x8ed9, 0x2, 0x0, 0x80, 0x6cab, 0x3ff, 0x7]}]}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_POLICE={0x818, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x81}, @TCA_POLICE_RATE={0x404, 0x2, [0x2000, 0xfffffbbd, 0xc, 0x6, 0x9, 0x6, 0x8, 0x32, 0x1, 0xc, 0x8, 0x5, 0x3ff, 0xdb1, 0x7, 0x3, 0xdd, 0x4, 0x1000, 0x6, 0x7, 0x9, 0xffff, 0x8, 0xc734, 0x6256044f, 0x3ff, 0x1, 0xfffffffe, 0x0, 0x4, 0x0, 0x8000, 0x100, 0x9, 0x80, 0x8, 0x0, 0xfffffff5, 0xf, 0xd, 0x3, 0x7b, 0xb34, 0x9, 0x5, 0xa, 0x8, 0x20000001, 0x5, 0x0, 0x5, 0x9, 0x8, 0x1, 0x4, 0xfffffffd, 0x4, 0xfffffff9, 0xff, 0x4, 0x3, 0xffffffff, 0x9, 0x3, 0x7fffffff, 0x0, 0x2, 0x7fffffff, 0xfffff216, 0x400, 0x2, 0x6, 0xa, 0x7, 0x9, 0x3, 0x4, 0x4, 0x2, 0x4, 0x81, 0x3, 0x7, 0x356, 0x1, 0x80000001, 0x741, 0x9, 0xffff, 0x9, 0x7, 0x80000000, 0xffff, 0x7ff, 0x40, 0x7fffffff, 0x2, 0x5, 0x5, 0xffffffff, 0x1, 0x4, 0x7, 0xed, 0x8, 0x7, 0x8, 0x7, 0x95a0, 0xffffffae, 0x2, 0x3, 0x1, 0x4, 0x6, 0x4, 0x40, 0x401, 0x4, 0x0, 0x1, 0x2, 0x34, 0xff, 0xffffffff, 0x9, 0x3, 0x36, 0x9, 0x0, 0xd0, 0xfffffffc, 0x9, 0x5, 0x10001, 0x80000001, 0x7f, 0x4, 0x40, 0x6346, 0x1, 0x9, 0x100, 0x2e, 0x81, 0x8, 0x2, 0x8, 0x5fc, 0xe, 0x7fff, 0x4ee, 0xfffffff7, 0x17, 0x7, 0x1, 0xfffffffe, 0x2, 0x4, 0x6, 0x1, 0x80000000, 0x0, 0x9, 0x6, 0x4, 0x5, 0x7fff, 0x9, 0xff, 0x8, 0x4, 0x1000, 0x6, 0x40, 0x7fffffff, 0x100, 0x9, 0xe, 0xb3, 0x9, 0xa6, 0x58, 0xf, 0x7, 0xc14, 0x5, 0x8, 0xfffffff6, 0xf, 0xffffffff, 0x40, 0xffffffff, 0xf, 0xffffff2c, 0x4, 0x5, 0x8f, 0x2, 0x3, 0xc2f9, 0x9, 0x7, 0x6, 0x1, 0x7, 0x5, 0x8, 0x4, 0x0, 0x3, 0x7, 0x7, 0x7, 0x2, 0x3, 0xe1, 0x0, 0x6db, 0x0, 0x0, 0xf, 0x2, 0x40, 0xffff, 0x4, 0x0, 0x7f, 0x1ff, 0x8001, 0x6, 0x7fffffff, 0x8, 0xffffb591, 0x6, 0x1, 0xa85e, 0x7fff, 0xfff, 0x1000000, 0x4, 0x6, 0x2, 0x1, 0xffffff00, 0x81, 0x4, 0x80000001, 0xbe, 0x2, 0x30, 0x5, 0x6829, 0x3423ac71, 0xf]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x8000, 0x7ff, 0x8, 0xc67, 0x1, 0x8001, 0x9, 0x3, 0x1, 0x6, 0x8, 0x24, 0x3, 0x7fffffff, 0x401, 0x5, 0x66f, 0xfffffffa, 0xe9, 0x9314, 0x1, 0x7, 0x9, 0x2c, 0x7, 0x6, 0x1, 0x1, 0x401, 0x5, 0xe3, 0xa7, 0x40, 0x10, 0x5, 0x4, 0x3, 0x4, 0x1, 0x80, 0x2, 0x2a2be0b5, 0x8, 0x223, 0x2, 0xc4d8, 0x50, 0x800, 0xd, 0x5, 0x6, 0x8, 0x0, 0x6, 0x0, 0x1, 0xa1d, 0x201c, 0x8, 0x8, 0x6, 0x5, 0x10001, 0x2, 0x6, 0xfffffffb, 0xffff59c6, 0x0, 0xffffff27, 0x7, 0x7fff, 0xfffffff6, 0x2, 0x9, 0xf7, 0xe, 0x9, 0xd, 0x33, 0x10, 0x8, 0xc, 0x7, 0x5, 0x80000001, 0x3, 0x5, 0x72e, 0x0, 0x8, 0x6d, 0x4f6, 0x10, 0x5, 0x2, 0x8000, 0x0, 0x2, 0x9, 0xb, 0x40, 0x30b, 0x0, 0x8000, 0x110, 0x6, 0x80000000, 0x1, 0x10000, 0xffffff7f, 0x0, 0xe, 0x5, 0xfffffff8, 0x7, 0xffffaf9f, 0x2, 0x400, 0x8000, 0x8, 0x83c, 0x7, 0x3, 0xff, 0x6, 0x53f, 0x8, 0x100, 0xa, 0x6, 0xffffffff, 0xffff, 0x9, 0x2, 0x10, 0x9, 0x2335, 0x2, 0x1e0, 0x0, 0x8, 0x7, 0x8, 0x2, 0x3ff, 0x80000001, 0xaa, 0x2234, 0x0, 0x80, 0x5, 0x7, 0x10001, 0xf03, 0x2, 0x6, 0x7, 0x3, 0xa1f, 0x7012, 0x4, 0x7, 0x0, 0x1, 0x95, 0x4, 0x8001, 0x8, 0x4, 0x1, 0x9, 0x80000001, 0x5, 0xb, 0x4, 0x54e, 0x3, 0xe3c, 0x5d82, 0x5, 0x8, 0x5, 0x4, 0xd, 0xa3ef, 0x5, 0x9c, 0x10000, 0x3, 0x2, 0x8, 0x5, 0x8, 0x51, 0x8, 0x0, 0xe1, 0x245cb699, 0x8, 0xf7, 0xb, 0x2, 0x6, 0x9, 0x7, 0x4, 0x4, 0x3, 0x9, 0x314, 0x9, 0x8, 0x7, 0x1000, 0x10, 0x6, 0x100, 0x92721d1, 0xff, 0x5, 0x3ff, 0x1, 0x8, 0xfffffffd, 0x3db8, 0x1, 0x6, 0x5, 0x0, 0x8, 0x5, 0x6, 0x7, 0x8000, 0xfff, 0x401, 0x3, 0x2ab7, 0xd, 0x2, 0x4, 0x1, 0x590d, 0x8, 0x7, 0xa989, 0xc8, 0x9, 0x3, 0x400, 0x1, 0x5, 0x13, 0x1, 0x4]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7f}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x7ff}]}, 0x1f24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) syz_usbip_server_init(0x6) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x50) r8 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r8, 0x0) r9 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x8c482, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x3) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x2, 0x7, 0xe, 0xe, 0x8, 0x2, 0x5, 0x7, 0x4, [0x2800000, 0x5, 0x8, 0x52, 0x8000, 0xe7, 0x1, 0x8]}}) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x28000, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x5) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r12, 0x4004ae8b, &(0x7f0000000100)={0x8, '\x00\x00\x00\x00\x00\x00\x00\x00'}) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r13, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) ioctl$KVM_RUN(r12, 0xae80, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 770.804331ms ago: executing program 2 (id=357): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x540, 0x2c8, 0x0, 0x3b0, 0x200, 0x2c8, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0x0, 0x0, 0x0, 0xffffff00], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0xf4, 0x118, 0x0, {0x7a00000010000000}, [@common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4e24], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x24}}, {{@uncond, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa4, 0xc8, 0x48000000}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @private1, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffff00], [0xffff00, 0x0, 0xffffffff, 0xffffffff], 'pim6reg\x00', 'veth0_to_team\x00', {0xff}, {}, 0x3a, 0xe, 0x0, 0x40}, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x22, 0x2e, 0x9}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x59c) r2 = openat2$dir(0xffffff9c, &(0x7f00000005c0)='./file1/file0\x00', &(0x7f0000000600)={0x521140, 0x0, 0x20}, 0x18) mkdirat(r2, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000640)={[], [{@subj_type={'subj_type', 0x3d, 'GPL\x00'}}, {@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@context={'context', 0x3d, 'staff_u'}}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}}, &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x3f}, 0x94) 710.55616ms ago: executing program 2 (id=358): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000800)='net/rpc\x00') r2 = openat(r1, &(0x7f0000000900)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000a00)='nfsd 127.0.0.1 2000000000 localhost\n', 0x24) close(r2) r3 = openat(r1, &(0x7f0000000d00)='nfsd.fh/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000e00)='localhost 1 \\x00000001 2000000000 /\n', 0x24) r4 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000270005006e0400000700000000000000000000000600ff0901a1018510150026ff007508950681009100a6119513810091008512953f81009100c0"], 0x13f) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00050009"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) r7 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) unshare(0x6a040000) r9 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$RNDADDENTROPY(r9, 0x40085203, 0x0) read(r4, &(0x7f00000002c0)=""/10, 0xa) write$UHID_INPUT2(r6, &(0x7f0000000340)=ANY=[@ANYBLOB='\f\x00\x00'], 0x8) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="c00000001900674c000000002100000000000000000000000000000000000000fc000000000000000000000000000000000000000000003736cc5db7e999be000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff7f000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000040000000000000000000000fdff000000000000000002000a0010000100000000000000"], 0xc0}}, 0x4c050) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6000000000103a01fe800000000000000000060000000000ff02000000000000000000000061000000000000000f0009000000000000401b"], 0x0) mount$fuse(0x0, &(0x7f0000000200)='nfsd.fh/channel\x00', &(0x7f0000000100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="66643dd0efbeb884d677b1357f3a613451a0e9ed6c71cd7766c791ce968a4488ecb2a1704fd616f57cdea80ced50e8c2c2fe41213989a010606b28392b70b66d1e0fd455caab", @ANYRES32, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRES64=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000300)={0x50, 0x0, r11, {0x7, 0x1f, 0x0, 0xffffffffe4420c50, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x84, 0x40000}}, 0x50) 561.07291ms ago: executing program 2 (id=359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0xfff8, 0x0, 0x0, 0x7fff0001}]}) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x300127) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x0, "94c492eb2665203d36bec70800890100000000e1100a0000005900", 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000180), 0x4000, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRESOCT=r4, @ANYRES8=r4, @ANYRES32=r3]) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async, rerun: 64) open$dir(&(0x7f0000000380)='./proc\x00', 0x40c840, 0x43) (rerun: 64) r5 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x444002, 0x145) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r5, &(0x7f0000000640)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) (async) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) (async, rerun: 32) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4) (rerun: 32) sendmsg$inet(r6, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) (async) write(r5, &(0x7f0000000000)='7', 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000280)={0x1, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r10, 0x4008ae93, &(0x7f0000000040)=0x4) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_RUN(r10, 0xae80, 0x0) 330.899617ms ago: executing program 0 (id=360): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000800)='net/rpc\x00') r2 = openat(r1, &(0x7f0000000900)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000a00)='nfsd 127.0.0.1 2000000000 localhost\n', 0x24) close(r2) r3 = openat(r1, &(0x7f0000000d00)='nfsd.fh/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000e00)='localhost 1 \\x00000001 2000000000 /\n', 0x24) r4 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000270005006e0400000700000000000000000000000600ff0901a1018510150026ff007508950681009100a6119513810091008512953f81009100c0"], 0x13f) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00050009"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) r7 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) unshare(0x6a040000) r9 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$RNDADDENTROPY(r9, 0x40085203, 0x0) read(r4, &(0x7f00000002c0)=""/10, 0xa) write$UHID_INPUT2(r6, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x8) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="c00000001900674c000000002100000000000000000000000000000000000000fc000000000000000000000000000000000000000000003736cc5db7e999be000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff7f000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000040000000000000000000000fdff000000000000000002000a0010000100000000000000"], 0xc0}}, 0x4c050) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6000000000103a01fe800000000000000000060000000000ff02000000000000000000000061000000000000000f0009000000000000401b"], 0x0) mount$fuse(0x0, &(0x7f0000000200)='nfsd.fh/channel\x00', &(0x7f0000000100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="66643dd0efbeb884d677b1357f3a613451a0e9ed6c71cd7766c791ce968a4488ecb2a1704fd616f57cdea80ced50e8c2c2fe41213989a010606b28392b70b66d1e0fd455caab", @ANYRES32, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRES64=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000300)={0x50, 0x0, r11, {0x7, 0x1f, 0x0, 0xffffffffe4420c50, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x84, 0x40000}}, 0x50) 240.62795ms ago: executing program 3 (id=361): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002140)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYBLOB="000000000001000008000400fc23000008001b0000384b6c49e1d7"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000000ffdbdf25"], 0x20}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) gettid() r6 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=r6, @ANYRES8=0x0, @ANYRES8=r0, @ANYRESHEX=r4, @ANYRESOCT=r5, @ANYBLOB="432fbaf38ea2a1f774ed35f4138706343dd2736a63686d57242b75e35b77ee723354cec83e9ad7fb523dc689b906fee458e82e31483d8ec151cde14bc77f4b0333fe9ea9e641e4e3746f21c628df992ce01e3448bf7c3849228fd0b97e98ac61c3", @ANYRES8=r1], 0x48}, 0x1, 0x0, 0x0, 0x44014}, 0x1) read$FUSE(r6, &(0x7f0000000100)={0x2020}, 0x2020) ioctl$PIO_FONTRESET(r6, 0x4b6d, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000080)={0x9, @sdr}) r8 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) mkdir(&(0x7f0000000100)='./file1\x00', 0x144) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="0300"/11, @ANYRES32=r6, @ANYBLOB="3cbd00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000400"/28], 0x50) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101100, 0x108) getdents64(r10, &(0x7f00000000c0)=""/55, 0x37) lseek(r10, 0x7, 0x1) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000300), 0xc4fffffe) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002240)=ANY=[@ANYBLOB="3c0000002f0009002abd7000000000000400000028001180e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9f47392b7107168413d40d2f1e93a80104db8893faa0e298b74122c3529f0e8cb6e6242529fcada1bed7468c53de0f26f4cc9af8ae7880568a439e1f58b895bf9a646a40283533875f5c5df47540f57dd9e3f834772f1364ca3f08c349491a4b3de0a3ab55c9fb4c0554b3fc4ab184739c3371e806970c70ef59b1c16b3a2305e031c463ea4f3cdeccef7576e31251f8f58ae9aa95f531b"], 0x3c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 168.42649ms ago: executing program 0 (id=362): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (fail_nth: 2) 149.998427ms ago: executing program 2 (id=363): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) (async) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r7, 0x4b45, 0x8000000000001) (async) ioctl$KDSETMODE(r7, 0x4b45, 0x8000000000001) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r9 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r9, 0xffff) fcntl$addseals(r9, 0x409, 0x3) close(0x3) (async) close(0x3) ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000000)={r9, 0x1, 0x0, 0x2000}) (async) ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000000)={r9, 0x1, 0x0, 0x2000}) r10 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) (async) syz_io_uring_submit(r11, r12, r13, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r10, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x24000880) (async) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x24000880) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 149.664718ms ago: executing program 0 (id=364): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r2, 0x4b72, &(0x7f0000000700)={0x1, 0x9, 0x9, 0x0, 0x12, "0060930000efa48902000000000000ffff00"}) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/586, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xfd85) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010024bd7000fcdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="08009e000738"], 0x5c}, 0x1, 0x0, 0x0, 0x24014804}, 0x9590f6cc3aa711f2) r7 = socket(0x8, 0x5, 0x7fff) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) r8 = openat$fuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r8, &(0x7f0000001340)={0x2020}, 0x2020) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000000140)=""/165, &(0x7f0000000200)=0xa5) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a000000021000100000000000000e0ff00000000000000000000000000000000ffffffff000000000000000000000000fffc0000000100000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100ac141440000000000000000000000011fe8000000000000000000000000000aae0000001000000000000000000000000fe8000000000000000000000000000bb3c05"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r6, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x24}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x805}, 0x1) ioctl$sock_SIOCOUTQNSD(r7, 0x4010618a, &(0x7f0000000000)) 21.519625ms ago: executing program 3 (id=365): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r1, 0x0, 0x2d, 0x0, @void}, 0x10) write(r0, 0x0, 0x0) close(r0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000900)='0x1d6b', 0x6) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000b00), 0x0) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) symlinkat(0x0, 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x189800) 0s ago: executing program 1 (id=366): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) landlock_create_ruleset(0xfffffffffffffffe, 0x5c, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$kcm(0x23, 0x5, 0x0) listen(r2, 0x800) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r4, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = accept4(r2, 0x0, 0x0, 0x80000) r6 = timerfd_create(0x1, 0x0) read(r6, &(0x7f0000002180)=""/262, 0x106) bind$alg(r5, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$poke(0x13, r7, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000002240)='.\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): syzkaller #0 PREEMPT(full) [ 52.867175][ T6398] Tainted: [L]=SOFTLOCKUP [ 52.867179][ T6398] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.867190][ T6398] Call Trace: [ 52.867194][ T6398] [ 52.867208][ T6398] dump_stack_lvl+0x100/0x190 [ 52.867228][ T6398] should_fail_ex.cold+0x5/0xa [ 52.867243][ T6398] should_failslab+0xc2/0x120 [ 52.867257][ T6398] __kvmalloc_node_noprof+0x113/0x9b0 [ 52.867271][ T6398] ? __pfx_down_write+0x10/0x10 [ 52.867281][ T6398] ? cache_write_procfs+0xdd/0x170 [ 52.867295][ T6398] ? __pfx_cache_write_procfs+0x10/0x10 [ 52.867306][ T6398] cache_write_procfs+0xdd/0x170 [ 52.867318][ T6398] ? __pfx_cache_write_procfs+0x10/0x10 [ 52.867329][ T6398] proc_reg_write+0x240/0x330 [ 52.867345][ T6398] vfs_write+0x2aa/0x1050 [ 52.867357][ T6398] ? __pfx_proc_reg_write+0x10/0x10 [ 52.867370][ T6398] ? lock_acquire+0x1d1/0x380 [ 52.867385][ T6398] ? __fget_files+0x34/0x3d0 [ 52.867397][ T6398] ? __pfx_vfs_write+0x10/0x10 [ 52.867407][ T6398] ? find_held_lock+0x2b/0x80 [ 52.867418][ T6398] ? __fget_files+0x215/0x3d0 [ 52.867432][ T6398] ? __fget_files+0x21f/0x3d0 [ 52.867448][ T6398] ksys_write+0x12a/0x250 [ 52.867459][ T6398] ? __pfx_ksys_write+0x10/0x10 [ 52.867469][ T6398] ? ksys_write+0x1ac/0x250 [ 52.867479][ T6398] ? __pfx_ksys_write+0x10/0x10 [ 52.867493][ T6398] __do_fast_syscall_32+0x13a/0x8b0 [ 52.867509][ T6398] ? lockdep_hardirqs_on+0x7d/0x110 [ 52.867526][ T6398] do_fast_syscall_32+0x32/0x70 [ 52.867543][ T6398] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.867556][ T6398] RIP: 0023:0xf7f44fec [ 52.867568][ T6398] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 52.867573][ T6398] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 52.867583][ T6398] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000e00 [ 52.867590][ T6398] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.867596][ T6398] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.867602][ T6398] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 52.867608][ T6398] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.867621][ T6398] [ 52.913919][ T6400] FAULT_INJECTION: forcing a failure. [ 52.913919][ T6400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.913940][ T6400] CPU: 0 UID: 0 PID: 6400 Comm: syz.3.138 Tainted: G L syzkaller #0 PREEMPT(full) [ 52.913955][ T6400] Tainted: [L]=SOFTLOCKUP [ 52.913962][ T6400] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.913971][ T6400] Call Trace: [ 52.913975][ T6400] [ 52.913979][ T6400] dump_stack_lvl+0x100/0x190 [ 52.913996][ T6400] should_fail_ex.cold+0x5/0xa [ 52.914010][ T6400] _copy_from_user+0x2e/0xd0 [ 52.914025][ T6400] compat_do_replace+0x411/0x500 [ 52.914043][ T6400] ? __pfx_compat_do_replace+0x10/0x10 [ 52.914071][ T6400] ? bpf_lsm_capable+0x9/0x10 [ 52.914098][ T6400] ? security_capable+0x80/0x260 [ 52.914119][ T6400] do_ipt_set_ctl+0x2cb/0xbc0 [ 52.914133][ T6400] ? nf_sockopt_find.isra.0+0x222/0x290 [ 52.914161][ T6400] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 52.914178][ T6400] ? __mutex_unlock_slowpath+0x35d/0x930 [ 52.914206][ T6400] ? sockopt_release_sock+0x5c/0x70 [ 52.914229][ T6400] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 52.914247][ T6400] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 52.914261][ T6400] ? nf_sockopt_find.isra.0+0x222/0x290 [ 52.914276][ T6400] nf_setsockopt+0x8d/0xf0 [ 52.914293][ T6400] ip_setsockopt+0xcb/0xf0 [ 52.914304][ T6400] udp_setsockopt+0x64/0xb0 [ 52.914319][ T6400] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 52.914341][ T6400] do_sock_setsockopt+0xf3/0x1d0 [ 52.914368][ T6400] __sys_setsockopt+0x119/0x190 [ 52.914395][ T6400] __ia32_sys_setsockopt+0xbc/0x160 [ 52.914416][ T6400] ? __do_fast_syscall_32+0xb3/0x8b0 [ 52.914443][ T6400] ? lockdep_hardirqs_on+0x7d/0x110 [ 52.914466][ T6400] __do_fast_syscall_32+0x13a/0x8b0 [ 52.914491][ T6400] ? lockdep_hardirqs_on+0x7d/0x110 [ 52.914516][ T6400] do_fast_syscall_32+0x32/0x70 [ 52.914534][ T6400] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.914548][ T6400] RIP: 0023:0xf7f44fec [ 52.914561][ T6400] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 52.914565][ T6400] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 52.914576][ T6400] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 52.914582][ T6400] RDX: 0000000000000040 RSI: 0000000080000680 RDI: 0000000000000388 [ 52.914588][ T6400] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.914594][ T6400] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 52.914600][ T6400] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.914613][ T6400] [ 52.953132][ T6313] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 52.953976][ T5815] usb 7-1: USB disconnect, device number 4 [ 52.965622][ T5815] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 52.965921][ T5815] spcp8x5 7-1:1.0: device disconnected [ 52.967778][ T6402] Cannot find add_set index 0 as target [ 53.122515][ T5528] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 53.272534][ T5528] usb 5-1: Using ep0 maxpacket: 8 [ 53.273365][ T5528] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 53.274481][ T5528] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 53.274503][ T5528] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 53.274523][ T5528] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 53.274543][ T5528] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 53.274575][ T5528] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.362726][ T6406] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 53.362742][ T6406] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 53.363636][ T6406] vhci_hcd vhci_hcd.0: Device attached [ 53.490323][ T5528] usb 5-1: usb_control_msg returned -71 [ 53.490348][ T5528] usbtmc 5-1:16.0: can't read capabilities [ 53.522048][ T5528] usb 5-1: USB disconnect, device number 2 [ 53.701660][ T6415] FAULT_INJECTION: forcing a failure. [ 53.701660][ T6415] name failslab, interval 1, probability 0, space 0, times 0 [ 53.701682][ T6415] CPU: 3 UID: 0 PID: 6415 Comm: syz.1.142 Tainted: G L syzkaller #0 PREEMPT(full) [ 53.701701][ T6415] Tainted: [L]=SOFTLOCKUP [ 53.701705][ T6415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.701711][ T6415] Call Trace: [ 53.701715][ T6415] [ 53.701719][ T6415] dump_stack_lvl+0x100/0x190 [ 53.701738][ T6415] should_fail_ex.cold+0x5/0xa [ 53.701752][ T6415] should_failslab+0xc2/0x120 [ 53.701767][ T6415] __kvmalloc_node_noprof+0x113/0x9b0 [ 53.701781][ T6415] ? __pfx_down_write+0x10/0x10 [ 53.701792][ T6415] ? cache_write_procfs+0xdd/0x170 [ 53.701805][ T6415] ? __pfx_cache_write_procfs+0x10/0x10 [ 53.701817][ T6415] cache_write_procfs+0xdd/0x170 [ 53.701829][ T6415] ? __pfx_cache_write_procfs+0x10/0x10 [ 53.701840][ T6415] proc_reg_write+0x240/0x330 [ 53.701856][ T6415] vfs_write+0x2aa/0x1050 [ 53.701868][ T6415] ? __pfx_proc_reg_write+0x10/0x10 [ 53.701881][ T6415] ? lock_acquire+0x1d1/0x380 [ 53.701896][ T6415] ? __fget_files+0x34/0x3d0 [ 53.701908][ T6415] ? __pfx_vfs_write+0x10/0x10 [ 53.701918][ T6415] ? find_held_lock+0x2b/0x80 [ 53.701929][ T6415] ? __fget_files+0x215/0x3d0 [ 53.701943][ T6415] ? __fget_files+0x21f/0x3d0 [ 53.701959][ T6415] ksys_write+0x12a/0x250 [ 53.701970][ T6415] ? __pfx_ksys_write+0x10/0x10 [ 53.701980][ T6415] ? ksys_write+0x1ac/0x250 [ 53.701991][ T6415] ? __pfx_ksys_write+0x10/0x10 [ 53.702004][ T6415] __do_fast_syscall_32+0x13a/0x8b0 [ 53.702021][ T6415] ? lockdep_hardirqs_on+0x7d/0x110 [ 53.702037][ T6415] do_fast_syscall_32+0x32/0x70 [ 53.702054][ T6415] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.702068][ T6415] RIP: 0023:0xf7f44fec [ 53.702080][ T6415] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 53.702085][ T6415] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 53.702095][ T6415] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000a00 [ 53.702102][ T6415] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.702108][ T6415] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 53.702114][ T6415] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 53.702120][ T6415] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.702133][ T6415] [ 53.782059][ T6406] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 53.804460][ T9] hid-generic 0005:046E:0007.000F: unknown main item tag 0x1 [ 53.806562][ T9] hid-generic 0005:046E:0007.000F: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 53.816792][ T6422] /dev/nullb0: Can't lookup blockdev [ 53.887882][ T6409] vhci_hcd: connection closed [ 53.890206][ T13] vhci_hcd vhci_hcd.3: stop threads [ 53.890380][ T13] vhci_hcd vhci_hcd.3: release socket [ 53.890395][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 53.910945][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.143'. [ 53.917079][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'. [ 53.960922][ T6431] FAULT_INJECTION: forcing a failure. [ 53.960922][ T6431] name failslab, interval 1, probability 0, space 0, times 0 [ 53.960944][ T6431] CPU: 3 UID: 0 PID: 6431 Comm: syz.2.147 Tainted: G L syzkaller #0 PREEMPT(full) [ 53.960959][ T6431] Tainted: [L]=SOFTLOCKUP [ 53.960963][ T6431] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.960969][ T6431] Call Trace: [ 53.960973][ T6431] [ 53.960977][ T6431] dump_stack_lvl+0x100/0x190 [ 53.960996][ T6431] should_fail_ex.cold+0x5/0xa [ 53.961010][ T6431] should_failslab+0xc2/0x120 [ 53.961025][ T6431] __kvmalloc_node_noprof+0x113/0x9b0 [ 53.961039][ T6431] ? __pfx_down_write+0x10/0x10 [ 53.961049][ T6431] ? cache_write_procfs+0xdd/0x170 [ 53.961062][ T6431] ? __pfx_cache_write_procfs+0x10/0x10 [ 53.961074][ T6431] cache_write_procfs+0xdd/0x170 [ 53.961086][ T6431] ? __pfx_cache_write_procfs+0x10/0x10 [ 53.961097][ T6431] proc_reg_write+0x240/0x330 [ 53.961113][ T6431] vfs_write+0x2aa/0x1050 [ 53.961125][ T6431] ? __pfx_proc_reg_write+0x10/0x10 [ 53.961139][ T6431] ? lock_acquire+0x1d1/0x380 [ 53.961153][ T6431] ? __fget_files+0x34/0x3d0 [ 53.961165][ T6431] ? __pfx_vfs_write+0x10/0x10 [ 53.961175][ T6431] ? find_held_lock+0x2b/0x80 [ 53.961186][ T6431] ? __fget_files+0x215/0x3d0 [ 53.961200][ T6431] ? __fget_files+0x21f/0x3d0 [ 53.961215][ T6431] ksys_write+0x12a/0x250 [ 53.961226][ T6431] ? __pfx_ksys_write+0x10/0x10 [ 53.961237][ T6431] ? ksys_write+0x1ac/0x250 [ 53.961247][ T6431] ? __pfx_ksys_write+0x10/0x10 [ 53.961266][ T6431] __do_fast_syscall_32+0x13a/0x8b0 [ 53.961282][ T6431] ? lockdep_hardirqs_on+0x7d/0x110 [ 53.961299][ T6431] do_fast_syscall_32+0x32/0x70 [ 53.961316][ T6431] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.961329][ T6431] RIP: 0023:0xf7f28fec [ 53.961342][ T6431] Code: Unable to access opcode bytes at 0xf7f28fc2. [ 53.961347][ T6431] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 53.961357][ T6431] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000a00 [ 53.961364][ T6431] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.961370][ T6431] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 53.961376][ T6431] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 53.961382][ T6431] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.961395][ T6431] [ 54.160892][ T6435] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 54.161621][ T6435] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 54.170711][ T6435] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 54.208971][ T6435] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 54.209033][ T6435] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 54.239835][ T6435] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 54.242158][ T6443] FAULT_INJECTION: forcing a failure. [ 54.242158][ T6443] name failslab, interval 1, probability 0, space 0, times 0 [ 54.242180][ T6443] CPU: 1 UID: 0 PID: 6443 Comm: syz.1.150 Tainted: G L syzkaller #0 PREEMPT(full) [ 54.242195][ T6443] Tainted: [L]=SOFTLOCKUP [ 54.242199][ T6443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.242205][ T6443] Call Trace: [ 54.242209][ T6443] [ 54.242213][ T6443] dump_stack_lvl+0x100/0x190 [ 54.242232][ T6443] should_fail_ex.cold+0x5/0xa [ 54.242246][ T6443] should_failslab+0xc2/0x120 [ 54.242260][ T6443] __kmalloc_noprof+0xfc/0x840 [ 54.242273][ T6443] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 54.242293][ T6443] kernfs_fop_write_iter+0x26a/0x5f0 [ 54.242311][ T6443] vfs_write+0x6af/0x1050 [ 54.242322][ T6443] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 54.242340][ T6443] ? __pfx_vfs_write+0x10/0x10 [ 54.242357][ T6443] ? find_held_lock+0x2b/0x80 [ 54.242377][ T6443] ksys_write+0x12a/0x250 [ 54.242388][ T6443] ? __pfx_ksys_write+0x10/0x10 [ 54.242398][ T6443] ? ksys_write+0x1ac/0x250 [ 54.242409][ T6443] ? __pfx_ksys_write+0x10/0x10 [ 54.242436][ T6443] __do_fast_syscall_32+0x13a/0x8b0 [ 54.242454][ T6443] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.242471][ T6443] do_fast_syscall_32+0x32/0x70 [ 54.242488][ T6443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 54.242502][ T6443] RIP: 0023:0xf7f44fec [ 54.242515][ T6443] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 54.242520][ T6443] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 54.242530][ T6443] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 54.242537][ T6443] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 54.242543][ T6443] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 54.242549][ T6443] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 54.242555][ T6443] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.242568][ T6443] [ 54.260781][ T6435] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 54.260862][ T6435] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 54.274401][ T6435] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 54.279442][ T6438] FAULT_INJECTION: forcing a failure. [ 54.279442][ T6438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.279515][ T6438] CPU: 3 UID: 0 PID: 6438 Comm: syz.2.149 Tainted: G L syzkaller #0 PREEMPT(full) [ 54.279540][ T6438] Tainted: [L]=SOFTLOCKUP [ 54.279547][ T6438] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.279557][ T6438] Call Trace: [ 54.279563][ T6438] [ 54.279569][ T6438] dump_stack_lvl+0x100/0x190 [ 54.279596][ T6438] should_fail_ex.cold+0x5/0xa [ 54.279618][ T6438] _copy_from_user+0x2e/0xd0 [ 54.279640][ T6438] do_compat_sigaltstack+0xf6/0x310 [ 54.279660][ T6438] ? __pfx_do_compat_sigaltstack+0x10/0x10 [ 54.279679][ T6438] ? ia32_restore_sigcontext+0x45d/0x620 [ 54.279703][ T6438] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 54.279733][ T6438] ? rcu_is_watching+0x13/0xc0 [ 54.279749][ T6438] ? _raw_spin_unlock_irq+0x23/0x50 [ 54.279770][ T6438] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.279796][ T6438] compat_restore_altstack+0x17/0x40 [ 54.279822][ T6438] __do_compat_sys_rt_sigreturn+0x204/0x270 [ 54.279850][ T6438] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 54.279883][ T6438] do_int80_emulation+0x166/0x650 [ 54.279909][ T6438] asm_int80_emulation+0x1a/0x20 [ 54.279926][ T6438] RIP: 0023:0xf7f28fec [ 54.279939][ T6438] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 54.279953][ T6438] RSP: 002b:00000000f53c550c EFLAGS: 00000292 [ 54.279967][ T6438] RAX: 0000000000000007 RBX: 00000000ffffff9c RCX: 0000000080000000 [ 54.279978][ T6438] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.279988][ T6438] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 54.279998][ T6438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.280007][ T6438] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.280026][ T6438] [ 54.368790][ T6451] FAULT_INJECTION: forcing a failure. [ 54.368790][ T6451] name failslab, interval 1, probability 0, space 0, times 0 [ 54.368811][ T6451] CPU: 0 UID: 0 PID: 6451 Comm: syz.1.155 Tainted: G L syzkaller #0 PREEMPT(full) [ 54.368826][ T6451] Tainted: [L]=SOFTLOCKUP [ 54.368830][ T6451] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.368837][ T6451] Call Trace: [ 54.368840][ T6451] [ 54.368845][ T6451] dump_stack_lvl+0x100/0x190 [ 54.368863][ T6451] should_fail_ex.cold+0x5/0xa [ 54.368878][ T6451] should_failslab+0xc2/0x120 [ 54.368892][ T6451] __kvmalloc_node_noprof+0x113/0x9b0 [ 54.368906][ T6451] ? __pfx_down_write+0x10/0x10 [ 54.368916][ T6451] ? cache_write_procfs+0xdd/0x170 [ 54.368929][ T6451] ? __pfx_cache_write_procfs+0x10/0x10 [ 54.368941][ T6451] cache_write_procfs+0xdd/0x170 [ 54.368952][ T6451] ? __pfx_cache_write_procfs+0x10/0x10 [ 54.368964][ T6451] proc_reg_write+0x240/0x330 [ 54.368980][ T6451] vfs_write+0x2aa/0x1050 [ 54.369005][ T6451] ? __pfx_proc_reg_write+0x10/0x10 [ 54.369018][ T6451] ? lock_acquire+0x1d1/0x380 [ 54.369033][ T6451] ? __fget_files+0x34/0x3d0 [ 54.369045][ T6451] ? __pfx_vfs_write+0x10/0x10 [ 54.369055][ T6451] ? find_held_lock+0x2b/0x80 [ 54.369066][ T6451] ? __fget_files+0x215/0x3d0 [ 54.369080][ T6451] ? __fget_files+0x21f/0x3d0 [ 54.369096][ T6451] ksys_write+0x12a/0x250 [ 54.369107][ T6451] ? __pfx_ksys_write+0x10/0x10 [ 54.369117][ T6451] ? ksys_write+0x1ac/0x250 [ 54.369127][ T6451] ? __pfx_ksys_write+0x10/0x10 [ 54.369141][ T6451] __do_fast_syscall_32+0x13a/0x8b0 [ 54.369161][ T6451] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.369178][ T6451] do_fast_syscall_32+0x32/0x70 [ 54.369195][ T6451] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 54.369209][ T6451] RIP: 0023:0xf7f44fec [ 54.369221][ T6451] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 54.369226][ T6451] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 54.369236][ T6451] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000e00 [ 54.369243][ T6451] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.369249][ T6451] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 54.369254][ T6451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.369260][ T6451] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.369273][ T6451] [ 54.556682][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.156'. [ 54.609471][ T6466] FAULT_INJECTION: forcing a failure. [ 54.609471][ T6466] name failslab, interval 1, probability 0, space 0, times 0 [ 54.609492][ T6466] CPU: 3 UID: 0 PID: 6466 Comm: syz.1.160 Tainted: G L syzkaller #0 PREEMPT(full) [ 54.609507][ T6466] Tainted: [L]=SOFTLOCKUP [ 54.609511][ T6466] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.609517][ T6466] Call Trace: [ 54.609521][ T6466] [ 54.609525][ T6466] dump_stack_lvl+0x100/0x190 [ 54.609543][ T6466] should_fail_ex.cold+0x5/0xa [ 54.609558][ T6466] should_failslab+0xc2/0x120 [ 54.609572][ T6466] __kmalloc_noprof+0xfc/0x840 [ 54.609584][ T6466] ? __pfx_dynamic_dname+0x10/0x10 [ 54.609601][ T6466] ? tomoyo_encode2+0xfb/0x3c0 [ 54.609615][ T6466] tomoyo_encode2+0xfb/0x3c0 [ 54.609627][ T6466] tomoyo_encode+0x29/0x50 [ 54.609637][ T6466] tomoyo_realpath_from_path+0x18c/0x690 [ 54.609651][ T6466] tomoyo_path_number_perm+0x23c/0x580 [ 54.609666][ T6466] ? tomoyo_path_number_perm+0x22e/0x580 [ 54.609682][ T6466] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 54.609698][ T6466] ? get_pid_task+0x106/0x250 [ 54.609713][ T6466] ? __lock_acquire+0x5c0/0x1f40 [ 54.609734][ T6466] ? __fget_files+0x34/0x3d0 [ 54.609745][ T6466] ? find_held_lock+0x2b/0x80 [ 54.609756][ T6466] ? __fget_files+0x215/0x3d0 [ 54.609767][ T6466] ? hook_file_ioctl_common+0x140/0x440 [ 54.609782][ T6466] ? __fget_files+0x215/0x3d0 [ 54.609796][ T6466] ? __fget_files+0x21f/0x3d0 [ 54.609810][ T6466] security_file_ioctl_compat+0xd3/0x230 [ 54.609826][ T6466] __ia32_compat_sys_ioctl+0xc2/0x360 [ 54.609845][ T6466] __do_fast_syscall_32+0x13a/0x8b0 [ 54.609862][ T6466] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.609878][ T6466] do_fast_syscall_32+0x32/0x70 [ 54.609895][ T6466] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 54.609909][ T6466] RIP: 0023:0xf7f44fec [ 54.609922][ T6466] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 54.609927][ T6466] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 54.609937][ T6466] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004010618a [ 54.609944][ T6466] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.609950][ T6466] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 54.609956][ T6466] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 54.609962][ T6466] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.609974][ T6466] [ 54.609984][ T6466] ERROR: Out of memory at tomoyo_realpath_from_path. [ 54.878066][ T6462] cgroup: fork rejected by pids controller in /syz2 [ 55.069777][ T6516] FAULT_INJECTION: forcing a failure. [ 55.069777][ T6516] name failslab, interval 1, probability 0, space 0, times 0 [ 55.069798][ T6516] CPU: 3 UID: 0 PID: 6516 Comm: syz.3.164 Tainted: G L syzkaller #0 PREEMPT(full) [ 55.069813][ T6516] Tainted: [L]=SOFTLOCKUP [ 55.069817][ T6516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.069822][ T6516] Call Trace: [ 55.069826][ T6516] [ 55.069831][ T6516] dump_stack_lvl+0x100/0x190 [ 55.069849][ T6516] should_fail_ex.cold+0x5/0xa [ 55.069864][ T6516] should_failslab+0xc2/0x120 [ 55.069878][ T6516] kmem_cache_alloc_noprof+0x92/0x6a0 [ 55.069891][ T6516] ? do_getname+0x35/0x390 [ 55.069908][ T6516] do_getname+0x35/0x390 [ 55.069925][ T6516] acct_on+0x93/0xa00 [ 55.069938][ T6516] ? __pfx_acct_on+0x10/0x10 [ 55.069950][ T6516] ? bpf_lsm_capable+0x9/0x10 [ 55.069983][ T6516] __ia32_sys_acct+0x80/0x1e0 [ 55.069995][ T6516] ? lockdep_hardirqs_on+0x7d/0x110 [ 55.070012][ T6516] __do_fast_syscall_32+0x13a/0x8b0 [ 55.070028][ T6516] ? lockdep_hardirqs_on+0x7d/0x110 [ 55.070044][ T6516] do_fast_syscall_32+0x32/0x70 [ 55.070061][ T6516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 55.070075][ T6516] RIP: 0023:0xf7f44fec [ 55.070087][ T6516] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 55.070091][ T6516] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000033 [ 55.070102][ T6516] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 55.070109][ T6516] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.070115][ T6516] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 55.070121][ T6516] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 55.070128][ T6516] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.070141][ T6516] [ 55.124454][ T6517] netlink: 'syz.3.164': attribute type 10 has an invalid length. [ 55.130406][ T6517] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 55.141429][ T5826] Process accounting resumed [ 55.155013][ T6512] netlink: 'syz.2.162': attribute type 10 has an invalid length. [ 55.157974][ T6512] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 55.269712][ T6523] FAULT_INJECTION: forcing a failure. [ 55.269712][ T6523] name failslab, interval 1, probability 0, space 0, times 0 [ 55.269734][ T6523] CPU: 3 UID: 0 PID: 6523 Comm: syz.3.166 Tainted: G L syzkaller #0 PREEMPT(full) [ 55.269751][ T6523] Tainted: [L]=SOFTLOCKUP [ 55.269755][ T6523] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.269762][ T6523] Call Trace: [ 55.269765][ T6523] [ 55.269770][ T6523] dump_stack_lvl+0x100/0x190 [ 55.269787][ T6523] should_fail_ex.cold+0x5/0xa [ 55.269801][ T6523] should_failslab+0xc2/0x120 [ 55.269816][ T6523] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 55.269829][ T6523] ? __alloc_skb+0x5b7/0x710 [ 55.269842][ T6523] ? __alloc_skb+0x140/0x710 [ 55.269857][ T6523] __alloc_skb+0x140/0x710 [ 55.269870][ T6523] ? __alloc_skb+0x5b7/0x710 [ 55.269883][ T6523] ? __pfx___alloc_skb+0x10/0x10 [ 55.269900][ T6523] netlink_alloc_large_skb+0x69/0x150 [ 55.269914][ T6523] netlink_sendmsg+0x680/0xda0 [ 55.269929][ T6523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.269943][ T6523] ? apparmor_socket_sendmsg+0x165/0x280 [ 55.269960][ T6523] ____sys_sendmsg+0xa4d/0xbe0 [ 55.269970][ T6523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.269984][ T6523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 55.270000][ T6523] ___sys_sendmsg+0x190/0x1e0 [ 55.270012][ T6523] ? __pfx____sys_sendmsg+0x10/0x10 [ 55.270029][ T6523] ? find_held_lock+0x2b/0x80 [ 55.270048][ T6523] __sys_sendmsg+0x160/0x210 [ 55.270063][ T6523] ? __pfx___sys_sendmsg+0x10/0x10 [ 55.270081][ T6523] ? __pfx_ksys_write+0x10/0x10 [ 55.270094][ T6523] __do_fast_syscall_32+0x13a/0x8b0 [ 55.270111][ T6523] ? lockdep_hardirqs_on+0x7d/0x110 [ 55.270128][ T6523] do_fast_syscall_32+0x32/0x70 [ 55.270145][ T6523] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 55.270163][ T6523] RIP: 0023:0xf7f44fec [ 55.270181][ T6523] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 55.270189][ T6523] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 55.270211][ T6523] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 55.270222][ T6523] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.270235][ T6523] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 55.270252][ T6523] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 55.270264][ T6523] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.270287][ T6523] [ 55.279152][ T6514] tmpfs: Bad value for 'mpol' [ 55.435313][ T6531] binder: 6530:6531 unknown command 0 [ 55.435327][ T6531] binder: 6530:6531 ioctl c0306201 800004c0 returned -22 [ 55.477895][ T6534] input: syz0 as /devices/virtual/input/input8 [ 55.490541][ T6540] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 55.583360][ T50] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 55.606456][ T6545] FAULT_INJECTION: forcing a failure. [ 55.606456][ T6545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.606487][ T6545] CPU: 0 UID: 0 PID: 6545 Comm: syz.0.173 Tainted: G L syzkaller #0 PREEMPT(full) [ 55.606512][ T6545] Tainted: [L]=SOFTLOCKUP [ 55.606518][ T6545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.606528][ T6545] Call Trace: [ 55.606535][ T6545] [ 55.606542][ T6545] dump_stack_lvl+0x100/0x190 [ 55.606569][ T6545] should_fail_ex.cold+0x5/0xa [ 55.606592][ T6545] _copy_from_user+0x2e/0xd0 [ 55.606613][ T6545] get_old_timex32+0xa2/0x520 [ 55.606640][ T6545] ? __pfx_get_old_timex32+0x10/0x10 [ 55.606671][ T6545] ? get_pid_task+0x106/0x250 [ 55.606698][ T6545] ? rcu_read_lock_any_held+0x6a/0x90 [ 55.606718][ T6545] ? find_held_lock+0x2b/0x80 [ 55.606740][ T6545] __do_sys_clock_adjtime32+0x93/0x280 [ 55.606760][ T6545] ? __pfx___do_sys_clock_adjtime32+0x10/0x10 [ 55.606779][ T6545] ? __mutex_unlock_slowpath+0x35d/0x930 [ 55.606819][ T6545] ? ksys_write+0x1ac/0x250 [ 55.606839][ T6545] ? __pfx_ksys_write+0x10/0x10 [ 55.606861][ T6545] __do_fast_syscall_32+0x13a/0x8b0 [ 55.606887][ T6545] ? lockdep_hardirqs_on+0x7d/0x110 [ 55.606914][ T6545] do_fast_syscall_32+0x32/0x70 [ 55.606940][ T6545] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 55.606961][ T6545] RIP: 0023:0xf6feefec [ 55.606980][ T6545] Code: Unable to access opcode bytes at 0xf6feefc2. [ 55.606988][ T6545] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000157 [ 55.607005][ T6545] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800003c0 [ 55.607017][ T6545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.607027][ T6545] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 55.607038][ T6545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.607048][ T6545] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.607070][ T6545] [ 55.689066][ T6552] xt_HMARK: proto mask must be zero with L3 mode [ 55.728664][ T6550] nvme_tcp: malformed address passed: 127.0.0.1:44.0 [ 55.758063][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 55.771903][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 55.795291][ T6553] vlan2: entered allmulticast mode [ 55.795332][ T6553] dummy0: entered allmulticast mode [ 55.797889][ T6553] bridge0: port 3(vlan2) entered blocking state [ 55.798225][ T6553] bridge0: port 3(vlan2) entered disabled state [ 55.812703][ T50] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 55.817937][ T6553] vlan2: entered promiscuous mode [ 55.818001][ T6553] dummy0: entered promiscuous mode [ 55.846371][ T50] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.846403][ T50] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 55.846417][ T50] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 55.846437][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.862274][ T6560] ptrace attach of "/syz-executor exec"[5745] was attempted by "/syz-executor exec"[6560] [ 55.862973][ T5752] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 56.090357][ T6565] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3765145859 (60242333744 ns) > initial count (29576955120 ns). Using initial count to start timer. [ 56.112802][ T6566] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3765145859 (60242333744 ns) > initial count (29576955120 ns). Using initial count to start timer. [ 56.173036][ T5752] Bluetooth: hci1: command 0x0c1a tx timeout [ 56.253222][ T5752] Bluetooth: hci2: command 0x0c1a tx timeout [ 56.332491][ T5752] Bluetooth: hci3: command 0x0c1a tx timeout [ 56.348901][ T6575] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.401911][ T6576] IPVS: Error connecting to the multicast addr [ 56.451243][ T6575] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.523659][ T6575] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.604561][ T6582] FAULT_INJECTION: forcing a failure. [ 56.604561][ T6582] name failslab, interval 1, probability 0, space 0, times 0 [ 56.604586][ T6582] CPU: 0 UID: 0 PID: 6582 Comm: syz.0.183 Tainted: G L syzkaller #0 PREEMPT(full) [ 56.604622][ T6582] Tainted: [L]=SOFTLOCKUP [ 56.604627][ T6582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.604635][ T6582] Call Trace: [ 56.604640][ T6582] [ 56.604644][ T6582] dump_stack_lvl+0x100/0x190 [ 56.604662][ T6582] should_fail_ex.cold+0x5/0xa [ 56.604677][ T6582] should_failslab+0xc2/0x120 [ 56.604692][ T6582] __kmalloc_noprof+0xfc/0x840 [ 56.604703][ T6582] ? rcu_is_watching+0x13/0xc0 [ 56.604714][ T6582] ? tomoyo_realpath_from_path+0xb6/0x690 [ 56.604729][ T6582] tomoyo_realpath_from_path+0xb6/0x690 [ 56.604743][ T6582] tomoyo_path_number_perm+0x23c/0x580 [ 56.604758][ T6582] ? tomoyo_path_number_perm+0x22e/0x580 [ 56.604775][ T6582] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 56.604791][ T6582] ? get_pid_task+0x106/0x250 [ 56.604807][ T6582] ? __lock_acquire+0x5c0/0x1f40 [ 56.604827][ T6582] ? __fget_files+0x34/0x3d0 [ 56.604839][ T6582] ? find_held_lock+0x2b/0x80 [ 56.604851][ T6582] ? __fget_files+0x215/0x3d0 [ 56.604861][ T6582] ? hook_file_ioctl_common+0x140/0x440 [ 56.604877][ T6582] ? __fget_files+0x215/0x3d0 [ 56.604891][ T6582] ? __fget_files+0x21f/0x3d0 [ 56.604904][ T6582] security_file_ioctl_compat+0xd3/0x230 [ 56.604922][ T6582] __ia32_compat_sys_ioctl+0xc2/0x360 [ 56.604941][ T6582] __do_fast_syscall_32+0x13a/0x8b0 [ 56.604959][ T6582] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.604976][ T6582] do_fast_syscall_32+0x32/0x70 [ 56.604993][ T6582] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 56.605007][ T6582] RIP: 0023:0xf6feefec [ 56.605019][ T6582] Code: Unable to access opcode bytes at 0xf6feefc2. [ 56.605024][ T6582] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 56.605034][ T6582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005452 [ 56.605041][ T6582] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.605047][ T6582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 56.605053][ T6582] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 56.605063][ T6582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.605078][ T6582] [ 56.605083][ T6582] ERROR: Out of memory at tomoyo_realpath_from_path. [ 56.614470][ T6575] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.638367][ T6584] FAULT_INJECTION: forcing a failure. [ 56.638367][ T6584] name failslab, interval 1, probability 0, space 0, times 0 [ 56.638393][ T6584] CPU: 0 UID: 0 PID: 6584 Comm: syz.0.184 Tainted: G L syzkaller #0 PREEMPT(full) [ 56.638408][ T6584] Tainted: [L]=SOFTLOCKUP [ 56.638412][ T6584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.638419][ T6584] Call Trace: [ 56.638423][ T6584] [ 56.638427][ T6584] dump_stack_lvl+0x100/0x190 [ 56.638446][ T6584] should_fail_ex.cold+0x5/0xa [ 56.638463][ T6584] should_failslab+0xc2/0x120 [ 56.638478][ T6584] kmem_cache_alloc_noprof+0x92/0x6a0 [ 56.638491][ T6584] ? do_getname+0x35/0x390 [ 56.638509][ T6584] do_getname+0x35/0x390 [ 56.638525][ T6584] do_sys_openat2+0xc7/0x1e0 [ 56.638541][ T6584] ? __pfx_do_sys_openat2+0x10/0x10 [ 56.638557][ T6584] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 56.638574][ T6584] ? __fget_files+0x21f/0x3d0 [ 56.638589][ T6584] __ia32_compat_sys_openat+0x12d/0x210 [ 56.638605][ T6584] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 56.638621][ T6584] ? ksys_write+0x1ac/0x250 [ 56.638636][ T6584] do_int80_emulation+0x166/0x650 [ 56.638657][ T6584] asm_int80_emulation+0x1a/0x20 [ 56.638669][ T6584] RIP: 0023:0xf71275ab [ 56.638678][ T6584] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 56.638689][ T6584] RSP: 002b:00000000f53dd03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 56.638700][ T6584] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53dd100 [ 56.638707][ T6584] RDX: 0000000000141101 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.638713][ T6584] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 56.638719][ T6584] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 56.638725][ T6584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.638738][ T6584] [ 56.791612][ T6588] netlink: 72 bytes leftover after parsing attributes in process `syz.1.182'. [ 56.803617][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.822498][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.822527][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.894624][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.942705][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 56.949754][ T6594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.186'. [ 57.104672][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 57.118327][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 57.118583][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 57.118900][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.199420][ T10] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 57.239217][ T10] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 57.291073][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 57.291154][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 57.342520][ T6604] FAULT_INJECTION: forcing a failure. [ 57.342520][ T6604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.342542][ T6604] CPU: 3 UID: 0 PID: 6604 Comm: syz.2.190 Tainted: G L syzkaller #0 PREEMPT(full) [ 57.342557][ T6604] Tainted: [L]=SOFTLOCKUP [ 57.342561][ T6604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.342567][ T6604] Call Trace: [ 57.342571][ T6604] [ 57.342575][ T6604] dump_stack_lvl+0x100/0x190 [ 57.342593][ T6604] should_fail_ex.cold+0x5/0xa [ 57.342620][ T6604] _copy_from_user+0x2e/0xd0 [ 57.342635][ T6604] get_compat_msghdr+0xb3/0x480 [ 57.342653][ T6604] ? __pfx_get_compat_msghdr+0x10/0x10 [ 57.342675][ T6604] ___sys_sendmsg+0x1b6/0x1e0 [ 57.342688][ T6604] ? __pfx____sys_sendmsg+0x10/0x10 [ 57.342705][ T6604] ? find_held_lock+0x2b/0x80 [ 57.342725][ T6604] __sys_sendmsg+0x160/0x210 [ 57.342740][ T6604] ? __pfx___sys_sendmsg+0x10/0x10 [ 57.342758][ T6604] ? __pfx_ksys_write+0x10/0x10 [ 57.342772][ T6604] __do_fast_syscall_32+0x13a/0x8b0 [ 57.342789][ T6604] ? lockdep_hardirqs_on+0x7d/0x110 [ 57.342805][ T6604] do_fast_syscall_32+0x32/0x70 [ 57.342822][ T6604] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.342836][ T6604] RIP: 0023:0xf7f28fec [ 57.342849][ T6604] Code: Unable to access opcode bytes at 0xf7f28fc2. [ 57.342853][ T6604] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 57.342865][ T6604] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 57.342872][ T6604] RDX: 0000000000008010 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.342878][ T6604] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 57.342884][ T6604] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 57.342890][ T6604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.342903][ T6604] [ 57.532998][ T6586] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 57.533261][ T6586] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 57.533518][ T6586] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 57.634445][ T6586] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 57.726618][ T6610] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 57.762608][ T6585] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 57.770196][ T5921] usb 5-1: USB disconnect, device number 3 [ 57.782722][ T5921] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 57.783144][ T5921] spcp8x5 5-1:1.0: device disconnected [ 57.952114][ T6617] capability: warning: `syz.1.195' uses deprecated v2 capabilities in a way that may be insecure [ 58.091086][ T50] cxacru_cm: 20 callbacks suppressed [ 58.091103][ T50] cxacru 8-1:1.0: send of cm 0x91 failed (-71) [ 58.091114][ T50] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 58.091120][ T50] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 58.092056][ T50] cxacru 8-1:1.0: probe with driver cxacru failed with error -71 [ 58.104762][ T50] usb 8-1: USB disconnect, device number 4 [ 58.154028][ T6619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.196'. [ 58.182042][ T6622] FAULT_INJECTION: forcing a failure. [ 58.182042][ T6622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.182073][ T6622] CPU: 3 UID: 0 PID: 6622 Comm: syz.1.197 Tainted: G L syzkaller #0 PREEMPT(full) [ 58.182097][ T6622] Tainted: [L]=SOFTLOCKUP [ 58.182104][ T6622] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.182115][ T6622] Call Trace: [ 58.182121][ T6622] [ 58.182128][ T6622] dump_stack_lvl+0x100/0x190 [ 58.182156][ T6622] should_fail_ex.cold+0x5/0xa [ 58.182181][ T6622] _copy_from_user+0x2e/0xd0 [ 58.182204][ T6622] __sys_bpf+0x2f5/0x4a30 [ 58.182229][ T6622] ? __pfx___sys_bpf+0x10/0x10 [ 58.182246][ T6622] ? lock_acquire+0x1d1/0x380 [ 58.182269][ T6622] ? get_pid_task+0x2a/0x250 [ 58.182305][ T6622] ? find_held_lock+0x2b/0x80 [ 58.182323][ T6622] ? get_pid_task+0xfc/0x250 [ 58.182339][ T6622] ? get_pid_task+0xfc/0x250 [ 58.182369][ T6622] ? proc_fail_nth_write+0x9f/0x220 [ 58.182388][ T6622] ? find_held_lock+0x2b/0x80 [ 58.182412][ T6622] ? rcu_read_lock_any_held+0x6a/0x90 [ 58.182432][ T6622] ? find_held_lock+0x2b/0x80 [ 58.182450][ T6622] ? ksys_write+0x190/0x250 [ 58.182468][ T6622] ? ksys_write+0x190/0x250 [ 58.182485][ T6622] ? lock_acquire+0x1d1/0x380 [ 58.182525][ T6622] ? fput+0x7c/0x100 [ 58.182548][ T6622] ? __ia32_sys_bpf+0xcc/0x170 [ 58.182565][ T6622] __ia32_sys_bpf+0xcc/0x170 [ 58.182584][ T6622] ? __do_fast_syscall_32+0xb3/0x8b0 [ 58.182612][ T6622] __do_fast_syscall_32+0x13a/0x8b0 [ 58.182636][ T6622] ? lockdep_hardirqs_on+0x7d/0x110 [ 58.182663][ T6622] do_fast_syscall_32+0x32/0x70 [ 58.182691][ T6622] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 58.182712][ T6622] RIP: 0023:0xf7f44fec [ 58.182730][ T6622] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 58.182738][ T6622] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 58.182756][ T6622] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 00000000800001c0 [ 58.182767][ T6622] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.182777][ T6622] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 58.182787][ T6622] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 58.182797][ T6622] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 58.182819][ T6622] [ 58.230071][ T6624] netlink: 52 bytes leftover after parsing attributes in process `syz.1.198'. [ 58.258444][ T5752] Bluetooth: hci1: command 0x0c1a tx timeout [ 58.335112][ T6628] 9p: Bad value for 'rfdno' [ 58.342749][ T5752] Bluetooth: hci2: command 0x0c1a tx timeout [ 58.384074][ T5921] hid-generic 0005:046E:0007.0010: unknown main item tag 0x1 [ 58.385432][ T5921] hid-generic 0005:046E:0007.0010: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 58.395618][ T6630] No control pipe specified [ 58.422899][ T5752] Bluetooth: hci3: command 0x0c1a tx timeout [ 58.431113][ T43] audit: type=1326 audit(1789270236.731:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6637 comm="syz.1.204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44fec code=0x7ffc0000 [ 58.431250][ T43] audit: type=1326 audit(1789270236.731:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6637 comm="syz.1.204" exe="/syz-executor" sig=0 arch=40000003 syscall=441 compat=1 ip=0xf7f44fec code=0x7ffc0000 [ 58.431362][ T43] audit: type=1326 audit(1789270236.731:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6637 comm="syz.1.204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44fec code=0x7ffc0000 [ 58.431493][ T43] audit: type=1326 audit(1789270236.731:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6637 comm="syz.1.204" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f44fec code=0x7ffc0000 [ 58.431949][ T43] audit: type=1326 audit(1789270236.731:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6637 comm="syz.1.204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44fec code=0x7ffc0000 [ 58.432056][ T43] audit: type=1326 audit(1789270236.731:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6637 comm="syz.1.204" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f44fec code=0x7ffc0000 [ 58.432147][ T43] audit: type=1326 audit(1789270236.731:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6637 comm="syz.1.204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44fec code=0x7ffc0000 [ 58.441494][ T43] audit: type=1326 audit(1789270236.731:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6637 comm="syz.1.204" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f44fec code=0x7ffc0000 [ 58.448326][ T43] audit: type=1326 audit(1789270236.761:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6637 comm="syz.1.204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44fec code=0x7ffc0000 [ 58.463394][ T9] hid-generic 0005:046E:0007.0011: unknown main item tag 0x1 [ 58.466942][ T9] hid-generic 0005:046E:0007.0011: hidraw2: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 58.499829][ T6643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'. [ 58.507311][ T6638] FAULT_INJECTION: forcing a failure. [ 58.507311][ T6638] name failslab, interval 1, probability 0, space 0, times 0 [ 58.507341][ T6638] CPU: 1 UID: 0 PID: 6638 Comm: syz.1.204 Tainted: G L syzkaller #0 PREEMPT(full) [ 58.507363][ T6638] Tainted: [L]=SOFTLOCKUP [ 58.507369][ T6638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.507379][ T6638] Call Trace: [ 58.507384][ T6638] [ 58.507391][ T6638] dump_stack_lvl+0x100/0x190 [ 58.507437][ T6638] should_fail_ex.cold+0x5/0xa [ 58.507458][ T6638] should_failslab+0xc2/0x120 [ 58.507481][ T6638] kmem_cache_alloc_noprof+0x92/0x6a0 [ 58.507501][ T6638] ? audit_log_start+0x29d/0x930 [ 58.507526][ T6638] audit_log_start+0x29d/0x930 [ 58.507547][ T6638] ? __pfx_audit_log_start+0x10/0x10 [ 58.507573][ T6638] ? rcu_read_lock_any_held+0x6a/0x90 [ 58.507593][ T6638] ? find_held_lock+0x2b/0x80 [ 58.507615][ T6638] audit_seccomp+0x60/0x190 [ 58.507636][ T6638] __seccomp_filter+0x88c/0x1130 [ 58.507799][ T6638] ? __pfx___seccomp_filter+0x10/0x10 [ 58.507904][ T6638] ? fput+0x7c/0x100 [ 58.507928][ T6638] ? ksys_write+0x1ac/0x250 [ 58.507948][ T6638] __seccomp_permit_syscall+0x207/0x2d0 [ 58.507969][ T6638] __do_fast_syscall_32+0x420/0x8b0 [ 58.507995][ T6638] ? lockdep_hardirqs_on+0x7d/0x110 [ 58.508020][ T6638] do_fast_syscall_32+0x32/0x70 [ 58.508045][ T6638] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 58.508065][ T6638] RIP: 0023:0xf7f44fec [ 58.508084][ T6638] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 58.508094][ T6638] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 58.508111][ T6638] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 58.508141][ T6638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.508152][ T6638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 58.508162][ T6638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.508173][ T6638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 58.508193][ T6638] [ 58.513471][ T6644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.205'. [ 58.671007][ T6655] FAULT_INJECTION: forcing a failure. [ 58.671007][ T6655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.671029][ T6655] CPU: 1 UID: 0 PID: 6655 Comm: syz.1.208 Tainted: G L syzkaller #0 PREEMPT(full) [ 58.671044][ T6655] Tainted: [L]=SOFTLOCKUP [ 58.671048][ T6655] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.671054][ T6655] Call Trace: [ 58.671058][ T6655] [ 58.671062][ T6655] dump_stack_lvl+0x100/0x190 [ 58.671080][ T6655] should_fail_ex.cold+0x5/0xa [ 58.671095][ T6655] _copy_from_user+0x2e/0xd0 [ 58.671109][ T6655] get_old_timespec32+0x82/0x130 [ 58.671125][ T6655] ? __pfx_get_old_timespec32+0x10/0x10 [ 58.671141][ T6655] ? __fget_files+0x21f/0x3d0 [ 58.671155][ T6655] __ia32_sys_clock_nanosleep_time32+0x1ce/0x480 [ 58.671171][ T6655] ? __pfx___ia32_sys_clock_nanosleep_time32+0x10/0x10 [ 58.671186][ T6655] ? ksys_write+0x1ac/0x250 [ 58.671198][ T6655] ? __pfx_ksys_write+0x10/0x10 [ 58.671211][ T6655] __do_fast_syscall_32+0x13a/0x8b0 [ 58.671228][ T6655] ? lockdep_hardirqs_on+0x7d/0x110 [ 58.671245][ T6655] do_fast_syscall_32+0x32/0x70 [ 58.671262][ T6655] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 58.671276][ T6655] RIP: 0023:0xf7f44fec [ 58.671287][ T6655] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 58.671292][ T6655] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 000000000000010b [ 58.671303][ T6655] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000000 [ 58.671310][ T6655] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.671316][ T6655] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 58.671322][ T6655] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 58.671328][ T6655] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 58.671345][ T6655] [ 58.738877][ T6649] random: crng reseeded on system resumption [ 58.952365][ T5921] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 59.123430][ T5921] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 59.124573][ T5921] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 59.124621][ T5921] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 59.124654][ T5921] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.135658][ T5921] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 59.142565][ T5921] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 59.492393][ T6658] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 59.493202][ T6658] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 59.493438][ T6658] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 59.591143][ T6658] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 59.704408][ T6657] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 59.708631][ T5921] usb 7-1: USB disconnect, device number 5 [ 59.750080][ T5921] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 59.750543][ T5921] spcp8x5 7-1:1.0: device disconnected [ 59.761173][ T6694] FAULT_INJECTION: forcing a failure. [ 59.761173][ T6694] name failslab, interval 1, probability 0, space 0, times 0 [ 59.761203][ T6694] CPU: 1 UID: 0 PID: 6694 Comm: syz.0.220 Tainted: G L syzkaller #0 PREEMPT(full) [ 59.761226][ T6694] Tainted: [L]=SOFTLOCKUP [ 59.761233][ T6694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.761244][ T6694] Call Trace: [ 59.761250][ T6694] [ 59.761257][ T6694] dump_stack_lvl+0x100/0x190 [ 59.761291][ T6694] should_fail_ex.cold+0x5/0xa [ 59.761315][ T6694] should_failslab+0xc2/0x120 [ 59.761340][ T6694] __kmalloc_noprof+0xfc/0x840 [ 59.761358][ T6694] ? rcu_is_watching+0x13/0xc0 [ 59.761377][ T6694] ? tomoyo_realpath_from_path+0xb6/0x690 [ 59.761401][ T6694] tomoyo_realpath_from_path+0xb6/0x690 [ 59.761425][ T6694] tomoyo_path_number_perm+0x23c/0x580 [ 59.761450][ T6694] ? tomoyo_path_number_perm+0x22e/0x580 [ 59.761477][ T6694] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 59.761504][ T6694] ? get_pid_task+0x106/0x250 [ 59.761529][ T6694] ? __lock_acquire+0x5c0/0x1f40 [ 59.761565][ T6694] ? __fget_files+0x34/0x3d0 [ 59.761585][ T6694] ? find_held_lock+0x2b/0x80 [ 59.761603][ T6694] ? __fget_files+0x215/0x3d0 [ 59.761621][ T6694] ? hook_file_ioctl_common+0x140/0x440 [ 59.761648][ T6694] ? __fget_files+0x215/0x3d0 [ 59.761672][ T6694] ? __fget_files+0x21f/0x3d0 [ 59.761696][ T6694] security_file_ioctl_compat+0xd3/0x230 [ 59.761725][ T6694] __ia32_compat_sys_ioctl+0xc2/0x360 [ 59.761757][ T6694] __do_fast_syscall_32+0x13a/0x8b0 [ 59.761784][ T6694] ? lockdep_hardirqs_on+0x7d/0x110 [ 59.761813][ T6694] do_fast_syscall_32+0x32/0x70 [ 59.761840][ T6694] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 59.761863][ T6694] RIP: 0023:0xf6feefec [ 59.761881][ T6694] Code: Unable to access opcode bytes at 0xf6feefc2. [ 59.761889][ T6694] RSP: 002b:00000000f53bc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 59.761906][ T6694] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000040086203 [ 59.761918][ T6694] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 59.761929][ T6694] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 59.761939][ T6694] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 59.761949][ T6694] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 59.761973][ T6694] [ 59.761981][ T6694] ERROR: Out of memory at tomoyo_realpath_from_path. [ 59.819358][ T6697] netlink: 'syz.0.222': attribute type 1 has an invalid length. [ 59.851339][ T6697] bond1: entered promiscuous mode [ 59.851556][ T6697] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.870272][ T6700] bond1: (slave bridge1): making interface the new active one [ 59.870337][ T6700] bridge1: entered promiscuous mode [ 59.871291][ T6700] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 59.892345][ T6698] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 59.902776][ T6698] bond1: (slave bridge3): Enslaving as a backup interface with an up link [ 59.911232][ T6698] bond1: (slave bridge4): Enslaving as a backup interface with an up link [ 59.933342][ T6698] bond1: (slave bridge5): Enslaving as a backup interface with an up link [ 59.942138][ T6698] bond1: (slave bridge6): Enslaving as a backup interface with an up link [ 59.954957][ T6698] bond1: (slave bridge7): Enslaving as a backup interface with an up link [ 59.963603][ T6698] bond1: (slave bridge8): Enslaving as a backup interface with an up link [ 59.974202][ T6698] bond1: (slave bridge9): Enslaving as a backup interface with an up link [ 59.982305][ T5826] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 59.985787][ T6698] bond1: (slave bridge10): Enslaving as a backup interface with an up link [ 59.993668][ T6698] bond1: (slave bridge11): Enslaving as a backup interface with an up link [ 60.001804][ T6698] bond1: (slave bridge12): Enslaving as a backup interface with an up link [ 60.009223][ T6698] bond1: (slave bridge13): Enslaving as a backup interface with an up link [ 60.015445][ T6698] bond1: (slave bridge14): Enslaving as a backup interface with an up link [ 60.021991][ T6698] bond1: (slave bridge15): Enslaving as a backup interface with an up link [ 60.032689][ T6698] bond1: (slave bridge16): Enslaving as a backup interface with an up link [ 60.041826][ T6698] bond1: (slave bridge17): Enslaving as a backup interface with an up link [ 60.048401][ T6698] bond1: (slave bridge18): Enslaving as a backup interface with an up link [ 60.061579][ T6698] bond1: (slave bridge19): Enslaving as a backup interface with an up link [ 60.076163][ T6698] bond1: (slave bridge20): Enslaving as a backup interface with an up link [ 60.088285][ T6698] bond1: (slave bridge21): Enslaving as a backup interface with an up link [ 60.103092][ T6698] bond1: (slave bridge22): Enslaving as a backup interface with an up link [ 60.115080][ T5826] usb 8-1: device descriptor read/64, error -71 [ 60.115130][ T6698] bond1: (slave bridge23): Enslaving as a backup interface with an up link [ 60.126981][ T6698] bond1: (slave bridge24): Enslaving as a backup interface with an up link [ 60.133571][ T6698] bond1: (slave bridge25): Enslaving as a backup interface with an up link [ 60.141758][ T6698] bond1: (slave bridge26): Enslaving as a backup interface with an up link [ 60.148333][ T6698] bond1: (slave bridge27): Enslaving as a backup interface with an up link [ 60.194116][ T6698] bond1: (slave bridge28): Enslaving as a backup interface with an up link [ 60.203468][ T6698] bond1: (slave bridge29): Enslaving as a backup interface with an up link [ 60.212818][ T6698] bond1: (slave bridge30): Enslaving as a backup interface with an up link [ 60.221503][ T6698] bond1: (slave bridge31): Enslaving as a backup interface with an up link [ 60.269134][ T6698] bond1: (slave bridge32): Enslaving as a backup interface with an up link [ 60.269259][ T6716] veth1_to_hsr: entered promiscuous mode [ 60.286918][ T6698] bond1: (slave bridge33): Enslaving as a backup interface with an up link [ 60.320935][ T6716] macsec1: entered promiscuous mode [ 60.320956][ T6716] macsec1: entered allmulticast mode [ 60.334452][ T5752] Bluetooth: hci1: command 0x0c1a tx timeout [ 60.352309][ T5826] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 60.353159][ T6721] FAULT_INJECTION: forcing a failure. [ 60.353159][ T6721] name failslab, interval 1, probability 0, space 0, times 0 [ 60.353340][ T6721] CPU: 0 UID: 0 PID: 6721 Comm: syz.0.228 Tainted: G L syzkaller #0 PREEMPT(full) [ 60.353365][ T6721] Tainted: [L]=SOFTLOCKUP [ 60.353372][ T6721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.353381][ T6721] Call Trace: [ 60.353388][ T6721] [ 60.353395][ T6721] dump_stack_lvl+0x100/0x190 [ 60.353422][ T6721] should_fail_ex.cold+0x5/0xa [ 60.353445][ T6721] should_failslab+0xc2/0x120 [ 60.353471][ T6721] __kmalloc_noprof+0xfc/0x840 [ 60.353492][ T6721] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 60.353523][ T6721] kernfs_fop_write_iter+0x26a/0x5f0 [ 60.353551][ T6721] vfs_write+0x6af/0x1050 [ 60.353570][ T6721] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 60.353597][ T6721] ? __pfx_vfs_write+0x10/0x10 [ 60.353613][ T6721] ? find_held_lock+0x2b/0x80 [ 60.353646][ T6721] ksys_write+0x12a/0x250 [ 60.353663][ T6721] ? __pfx_ksys_write+0x10/0x10 [ 60.353679][ T6721] ? ksys_write+0x1ac/0x250 [ 60.353696][ T6721] ? __pfx_ksys_write+0x10/0x10 [ 60.353717][ T6721] __do_fast_syscall_32+0x13a/0x8b0 [ 60.353744][ T6721] ? lockdep_hardirqs_on+0x7d/0x110 [ 60.353771][ T6721] do_fast_syscall_32+0x32/0x70 [ 60.353797][ T6721] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.353818][ T6721] RIP: 0023:0xf6feefec [ 60.353839][ T6721] Code: Unable to access opcode bytes at 0xf6feefc2. [ 60.353847][ T6721] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 60.353865][ T6721] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 60.353876][ T6721] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 60.353888][ T6721] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 60.353897][ T6721] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 60.353911][ T6721] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.353935][ T6721] [ 60.422299][ T5752] Bluetooth: hci2: command 0x0c1a tx timeout [ 60.482264][ T5826] usb 8-1: device descriptor read/64, error -71 [ 60.485723][ T6738] FAULT_INJECTION: forcing a failure. [ 60.485723][ T6738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.485757][ T6738] CPU: 0 UID: 0 PID: 6738 Comm: syz.2.234 Tainted: G L syzkaller #0 PREEMPT(full) [ 60.485782][ T6738] Tainted: [L]=SOFTLOCKUP [ 60.485788][ T6738] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.485798][ T6738] Call Trace: [ 60.485805][ T6738] [ 60.485813][ T6738] dump_stack_lvl+0x100/0x190 [ 60.485845][ T6738] should_fail_ex.cold+0x5/0xa [ 60.485870][ T6738] _copy_from_user+0x2e/0xd0 [ 60.485894][ T6738] do_seccomp+0x622/0x2730 [ 60.485916][ T6738] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 60.485948][ T6738] ? __pfx_do_seccomp+0x10/0x10 [ 60.485968][ T6738] ? xfd_validate_state+0x129/0x190 [ 60.486006][ T6738] __do_fast_syscall_32+0x13a/0x8b0 [ 60.486038][ T6738] do_fast_syscall_32+0x32/0x70 [ 60.486069][ T6738] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.486095][ T6738] RIP: 0023:0xf7f28fec [ 60.486113][ T6738] Code: Unable to access opcode bytes at 0xf7f28fc2. [ 60.486121][ T6738] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000162 [ 60.486140][ T6738] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000000000a [ 60.486152][ T6738] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.486163][ T6738] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 60.486174][ T6738] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 60.486186][ T6738] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.486212][ T6738] [ 60.502299][ T5752] Bluetooth: hci3: command 0x0c1a tx timeout [ 60.529874][ T6740] netlink: 'syz.0.235': attribute type 62 has an invalid length. [ 60.549551][ T6736] ovs-system: entered promiscuous mode [ 60.592440][ T5826] usb usb8-port1: attempt power cycle [ 60.608019][ T6747] netlink: 'syz.1.237': attribute type 11 has an invalid length. [ 60.671720][ T6747] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 60.671736][ T6747] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 60.679141][ T6747] net_ratelimit: 4 callbacks suppressed [ 60.679154][ T6747] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 60.762254][ T5528] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 60.781804][ T6763] __nla_validate_parse: 8 callbacks suppressed [ 60.781818][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.240'. [ 60.932279][ T5528] usb 7-1: Using ep0 maxpacket: 8 [ 60.932309][ T5826] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 60.932984][ T5528] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 60.933844][ T5528] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.933863][ T5528] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.933877][ T5528] usb 7-1: config 0 interface 0 has no altsetting 0 [ 60.933897][ T5528] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.935496][ T5528] usb 7-1: config 0 descriptor?? [ 60.962399][ T5826] usb 8-1: device descriptor read/8, error -71 [ 61.042191][ T5888] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 61.192200][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 61.192911][ T5888] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 61.193890][ T5888] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 61.193912][ T5888] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 61.193924][ T5888] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 61.193936][ T5888] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 61.193947][ T5888] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.193966][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.212225][ T5826] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 61.232687][ T5826] usb 8-1: device descriptor read/8, error -71 [ 61.343657][ T5826] usb usb8-port1: unable to enumerate USB device [ 61.349150][ T5528] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 61.349173][ T5528] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 61.349185][ T5528] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 61.349197][ T5528] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 61.349256][ T5528] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 61.355154][ T5528] mcp2221 0003:04D8:00DD.0012: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 61.400507][ T5888] usb 5-1: usb_control_msg returned -32 [ 61.400530][ T5888] usbtmc 5-1:16.0: can't read capabilities [ 61.468508][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 61.531443][ T6777] fuse: Bad value for 'fd' [ 61.532063][ T6777] FAULT_INJECTION: forcing a failure. [ 61.532063][ T6777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.532105][ T6777] CPU: 3 UID: 0 PID: 6777 Comm: syz.1.241 Tainted: G L syzkaller #0 PREEMPT(full) [ 61.532131][ T6777] Tainted: [L]=SOFTLOCKUP [ 61.532137][ T6777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.532153][ T6777] Call Trace: [ 61.532159][ T6777] [ 61.532166][ T6777] dump_stack_lvl+0x100/0x190 [ 61.532194][ T6777] should_fail_ex.cold+0x5/0xa [ 61.532217][ T6777] strncpy_from_user+0x3b/0x2d0 [ 61.532245][ T6777] do_getname+0x78/0x390 [ 61.532273][ T6777] do_utimes_path+0xc9/0x1b0 [ 61.532299][ T6777] ? __pfx_do_utimes_path+0x10/0x10 [ 61.532331][ T6777] __ia32_sys_utime32+0x183/0x200 [ 61.532357][ T6777] ? __pfx___ia32_sys_utime32+0x10/0x10 [ 61.532385][ T6777] ? ksys_write+0x1ac/0x250 [ 61.532403][ T6777] ? __pfx_ksys_write+0x10/0x10 [ 61.532426][ T6777] __do_fast_syscall_32+0x13a/0x8b0 [ 61.532453][ T6777] ? lockdep_hardirqs_on+0x7d/0x110 [ 61.532480][ T6777] do_fast_syscall_32+0x32/0x70 [ 61.532507][ T6777] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 61.532528][ T6777] RIP: 0023:0xf7f44fec [ 61.532547][ T6777] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 61.532555][ T6777] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 000000000000001e [ 61.532573][ T6777] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000080000180 [ 61.532608][ T6777] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 61.532619][ T6777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 61.532629][ T6777] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 61.532640][ T6777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 61.532662][ T6777] [ 61.547592][ T6738] binder: 6737:6738 ioctl c0306201 800004c0 returned -14 [ 61.548401][ T6738] binder: 6737:6738 ioctl c0306201 800001c0 returned -14 [ 61.548823][ T6738] binder: 6737:6738 ioctl c0306201 800002c0 returned -14 [ 61.550731][ T5826] usb 7-1: USB disconnect, device number 6 [ 61.665436][ T6781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.242'. [ 62.342561][ T1820] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 62.482116][ T1820] usb 7-1: device descriptor read/64, error -71 [ 62.509292][ T5752] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 62.659174][ T6819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.255'. [ 62.715634][ T6823] overlayfs: failed to resolve './file1': -2 [ 62.742157][ T1820] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 62.882131][ T1820] usb 7-1: device descriptor read/64, error -71 [ 62.992551][ T1820] usb usb7-port1: attempt power cycle [ 63.341361][ T6837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.261'. [ 63.342134][ T1820] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 63.372744][ T1820] usb 7-1: device descriptor read/8, error -71 [ 63.462119][ T6763] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 63.463634][ T5888] usb 5-1: USB disconnect, device number 4 [ 63.612363][ T1820] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 63.632732][ T1820] usb 7-1: device descriptor read/8, error -71 [ 63.742353][ T1820] usb usb7-port1: unable to enumerate USB device [ 63.981508][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 64.192054][ T5888] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 64.267412][ T30] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 64.342813][ T5888] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 64.343652][ T5888] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.343676][ T5888] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 64.343691][ T5888] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 64.343720][ T5888] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.392149][ T30] usb 5-1: device descriptor read/64, error -71 [ 64.396733][ T6869] capability: warning: `syz.1.273' uses 32-bit capabilities (legacy support in use) [ 64.570887][ T6851] netlink: 56 bytes leftover after parsing attributes in process `syz.3.266'. [ 64.603276][ T6869] overlayfs: upper fs does not support tmpfile. [ 64.632068][ T30] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 64.762028][ T30] usb 5-1: device descriptor read/64, error -71 [ 64.794432][ T5888] cxacru_cm: 91 callbacks suppressed [ 64.794449][ T5888] cxacru 8-1:1.0: send of cm 0x91 failed (-71) [ 64.794461][ T5888] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 64.794468][ T5888] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 64.798383][ T5888] cxacru 8-1:1.0: probe with driver cxacru failed with error -71 [ 64.801233][ T5888] usb 8-1: USB disconnect, device number 9 [ 64.872293][ T30] usb usb5-port1: attempt power cycle [ 65.139492][ T6873] FAULT_INJECTION: forcing a failure. [ 65.139492][ T6873] name failslab, interval 1, probability 0, space 0, times 0 [ 65.139524][ T6873] CPU: 1 UID: 0 PID: 6873 Comm: syz.2.274 Tainted: G L syzkaller #0 PREEMPT(full) [ 65.139548][ T6873] Tainted: [L]=SOFTLOCKUP [ 65.139554][ T6873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.139564][ T6873] Call Trace: [ 65.139570][ T6873] [ 65.139576][ T6873] dump_stack_lvl+0x100/0x190 [ 65.139602][ T6873] should_fail_ex.cold+0x5/0xa [ 65.139624][ T6873] should_failslab+0xc2/0x120 [ 65.139663][ T6873] kmem_cache_alloc_noprof+0x92/0x6a0 [ 65.139682][ T6873] ? do_getname+0x35/0x390 [ 65.139708][ T6873] do_getname+0x35/0x390 [ 65.139733][ T6873] path_setxattrat+0x360/0x3b0 [ 65.139755][ T6873] ? __pfx_path_setxattrat+0x10/0x10 [ 65.139778][ T6873] ? rcu_read_lock_any_held+0x6a/0x90 [ 65.139797][ T6873] ? find_held_lock+0x2b/0x80 [ 65.139837][ T6873] ? fput+0x7c/0x100 [ 65.139858][ T6873] ? ksys_write+0x1ac/0x250 [ 65.139877][ T6873] __ia32_sys_lsetxattr+0xc7/0x140 [ 65.139897][ T6873] ? __do_fast_syscall_32+0xb3/0x8b0 [ 65.139922][ T6873] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.139945][ T6873] __do_fast_syscall_32+0x13a/0x8b0 [ 65.139969][ T6873] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.139993][ T6873] do_fast_syscall_32+0x32/0x70 [ 65.140018][ T6873] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.140038][ T6873] RIP: 0023:0xf7f28fec [ 65.140056][ T6873] Code: Unable to access opcode bytes at 0xf7f28fc2. [ 65.140064][ T6873] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 00000000000000e3 [ 65.140080][ T6873] RAX: ffffffffffffffda RBX: 0000000080001080 RCX: 00000000800010c0 [ 65.140091][ T6873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 65.140100][ T6873] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.140110][ T6873] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 65.140120][ T6873] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.140141][ T6873] [ 65.256994][ T30] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 65.300841][ T30] usb 5-1: device descriptor read/8, error -71 [ 65.380244][ T6878] FAULT_INJECTION: forcing a failure. [ 65.380244][ T6878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.380275][ T6878] CPU: 1 UID: 0 PID: 6878 Comm: syz.3.276 Tainted: G L syzkaller #0 PREEMPT(full) [ 65.380300][ T6878] Tainted: [L]=SOFTLOCKUP [ 65.380307][ T6878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.380317][ T6878] Call Trace: [ 65.380323][ T6878] [ 65.380331][ T6878] dump_stack_lvl+0x100/0x190 [ 65.380359][ T6878] should_fail_ex.cold+0x5/0xa [ 65.380382][ T6878] _copy_from_iter+0x1f4/0x1690 [ 65.380411][ T6878] ? __pfx__copy_from_iter+0x10/0x10 [ 65.380433][ T6878] ? aa_sk_perm+0x389/0xab0 [ 65.380461][ T6878] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 65.380487][ T6878] ? __pfx_aa_sk_perm+0x10/0x10 [ 65.380515][ T6878] hci_sock_sendmsg+0x4a1/0x2620 [ 65.380543][ T6878] ? aa_sock_msg_perm+0x11e/0x200 [ 65.380586][ T6878] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 65.380614][ T6878] ? apparmor_socket_sendmsg+0x165/0x280 [ 65.380641][ T6878] sock_write_iter+0x53a/0x5b0 [ 65.380658][ T6878] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 65.380682][ T6878] ? __pfx_sock_write_iter+0x10/0x10 [ 65.380705][ T6878] ? bpf_lsm_file_permission+0x9/0x10 [ 65.380728][ T6878] ? security_file_permission+0x76/0x210 [ 65.380757][ T6878] ? rw_verify_area+0xce/0x6d0 [ 65.380786][ T6878] vfs_write+0x6af/0x1050 [ 65.380807][ T6878] ? __pfx_sock_write_iter+0x10/0x10 [ 65.380826][ T6878] ? __pfx_vfs_write+0x10/0x10 [ 65.380849][ T6878] ? find_held_lock+0x2b/0x80 [ 65.380884][ T6878] ksys_write+0x1f8/0x250 [ 65.380902][ T6878] ? __pfx_ksys_write+0x10/0x10 [ 65.380919][ T6878] ? ksys_write+0x1ac/0x250 [ 65.380937][ T6878] ? __pfx_ksys_write+0x10/0x10 [ 65.380960][ T6878] __do_fast_syscall_32+0x13a/0x8b0 [ 65.380986][ T6878] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.381013][ T6878] do_fast_syscall_32+0x32/0x70 [ 65.381040][ T6878] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.381062][ T6878] RIP: 0023:0xf7f44fec [ 65.381082][ T6878] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 65.381090][ T6878] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 65.381108][ T6878] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 65.381121][ T6878] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 65.381145][ T6878] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.381158][ T6878] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 65.381168][ T6878] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.381191][ T6878] [ 65.438190][ T6880] FAULT_INJECTION: forcing a failure. [ 65.438190][ T6880] name failslab, interval 1, probability 0, space 0, times 0 [ 65.438211][ T6880] CPU: 1 UID: 0 PID: 6880 Comm: syz.3.277 Tainted: G L syzkaller #0 PREEMPT(full) [ 65.438226][ T6880] Tainted: [L]=SOFTLOCKUP [ 65.438230][ T6880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.438237][ T6880] Call Trace: [ 65.438241][ T6880] [ 65.438245][ T6880] dump_stack_lvl+0x100/0x190 [ 65.438263][ T6880] should_fail_ex.cold+0x5/0xa [ 65.438278][ T6880] should_failslab+0xc2/0x120 [ 65.438293][ T6880] __kvmalloc_node_noprof+0x113/0x9b0 [ 65.438308][ T6880] ? __do_sys_add_key+0x244/0x460 [ 65.438327][ T6880] __do_sys_add_key+0x244/0x460 [ 65.438340][ T6880] ? __pfx___do_sys_add_key+0x10/0x10 [ 65.438352][ T6880] ? fput+0x7c/0x100 [ 65.438366][ T6880] ? __pfx_ksys_write+0x10/0x10 [ 65.438380][ T6880] __do_fast_syscall_32+0x13a/0x8b0 [ 65.438397][ T6880] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.438414][ T6880] do_fast_syscall_32+0x32/0x70 [ 65.438432][ T6880] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.438451][ T6880] RIP: 0023:0xf7f44fec [ 65.438468][ T6880] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 65.438475][ T6880] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 65.438490][ T6880] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 65.438501][ T6880] RDX: 0000000080000400 RSI: 00000000000001d8 RDI: 00000000165408ea [ 65.438513][ T6880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.438523][ T6880] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 65.438532][ T6880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.438553][ T6880] [ 65.474568][ T5752] Bluetooth: hci2: unexpected event for opcode 0x200c [ 65.532028][ T30] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 65.562393][ T30] usb 5-1: device descriptor read/8, error -71 [ 65.672278][ T30] usb usb5-port1: unable to enumerate USB device [ 65.776624][ T6894] 9p: Could not find request transport: d [ 65.787829][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.826570][ T6897] netlink: 52 bytes leftover after parsing attributes in process `syz.1.282'. [ 66.004935][ T6901] FAULT_INJECTION: forcing a failure. [ 66.004935][ T6901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.004968][ T6901] CPU: 0 UID: 0 PID: 6901 Comm: syz.2.283 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.004994][ T6901] Tainted: [L]=SOFTLOCKUP [ 66.005001][ T6901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.005012][ T6901] Call Trace: [ 66.005019][ T6901] [ 66.005027][ T6901] dump_stack_lvl+0x100/0x190 [ 66.005055][ T6901] should_fail_ex.cold+0x5/0xa [ 66.005079][ T6901] _copy_from_user+0x2e/0xd0 [ 66.005101][ T6901] move_addr_to_kernel+0x65/0x170 [ 66.005124][ T6901] get_compat_msghdr+0x3c7/0x480 [ 66.005152][ T6901] ? __pfx_get_compat_msghdr+0x10/0x10 [ 66.005188][ T6901] ___sys_sendmsg+0x1b6/0x1e0 [ 66.005210][ T6901] ? __pfx____sys_sendmsg+0x10/0x10 [ 66.005240][ T6901] ? find_held_lock+0x2b/0x80 [ 66.005277][ T6901] __sys_sendmsg+0x160/0x210 [ 66.005301][ T6901] ? __pfx___sys_sendmsg+0x10/0x10 [ 66.005331][ T6901] ? __pfx_ksys_write+0x10/0x10 [ 66.005355][ T6901] __do_fast_syscall_32+0x13a/0x8b0 [ 66.005382][ T6901] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.005410][ T6901] do_fast_syscall_32+0x32/0x70 [ 66.005438][ T6901] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.005461][ T6901] RIP: 0023:0xf7f28fec [ 66.005481][ T6901] Code: Unable to access opcode bytes at 0xf7f28fc2. [ 66.005491][ T6901] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 66.005510][ T6901] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 66.005523][ T6901] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.005533][ T6901] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 66.005543][ T6901] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 66.005553][ T6901] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.005576][ T6901] [ 66.133279][ T6902] process 'syz.1.282' launched './file2' with NULL argv: empty string added [ 66.321920][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 66.357432][ T6906] netlink: 'syz.3.285': attribute type 1 has an invalid length. [ 66.472452][ T9] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 66.473262][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.473286][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 66.473300][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 66.473318][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.536454][ T6910] jffs2: notice: (6910) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 66.555074][ T6910] FAULT_INJECTION: forcing a failure. [ 66.555074][ T6910] name failslab, interval 1, probability 0, space 0, times 0 [ 66.555098][ T6910] CPU: 2 UID: 0 PID: 6910 Comm: syz.3.287 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.555114][ T6910] Tainted: [L]=SOFTLOCKUP [ 66.555118][ T6910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.555125][ T6910] Call Trace: [ 66.555129][ T6910] [ 66.555134][ T6910] dump_stack_lvl+0x100/0x190 [ 66.555151][ T6910] should_fail_ex.cold+0x5/0xa [ 66.555166][ T6910] should_failslab+0xc2/0x120 [ 66.555183][ T6910] __kmalloc_flags_noprof+0x122/0x8e0 [ 66.555201][ T6910] ? find_held_lock+0x2b/0x80 [ 66.555212][ T6910] ? __pcs_replace_empty_main+0x132/0x650 [ 66.555229][ T6910] ? __pcs_replace_empty_main+0x3fa/0x650 [ 66.555248][ T6910] __pcs_replace_empty_main+0x3fa/0x650 [ 66.555267][ T6910] kmem_cache_alloc_noprof+0x4c4/0x6a0 [ 66.555279][ T6910] ? jffs2_do_create+0x2f0/0xd00 [ 66.555297][ T6910] jffs2_do_create+0x2f0/0xd00 [ 66.555312][ T6910] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 66.555329][ T6910] ? __pfx_jffs2_do_create+0x10/0x10 [ 66.555343][ T6910] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 66.555356][ T6910] ? jffs2_create+0x27/0x390 [ 66.555368][ T6910] jffs2_create+0x1bd/0x390 [ 66.555380][ T6910] ? __pfx_jffs2_create+0x10/0x10 [ 66.555390][ T6910] lookup_open+0x1255/0x1990 [ 66.555412][ T6910] path_openat+0xa2c/0x2440 [ 66.555428][ T6910] ? __pfx_path_openat+0x10/0x10 [ 66.555447][ T6910] do_file_open+0x20e/0x430 [ 66.555461][ T6910] ? __pfx_do_file_open+0x10/0x10 [ 66.555485][ T6910] ? _raw_spin_unlock+0x28/0x50 [ 66.555499][ T6910] ? alloc_fd+0x471/0x7a0 [ 66.555515][ T6910] do_sys_openat2+0x10f/0x1e0 [ 66.555530][ T6910] ? __pfx_do_sys_openat2+0x10/0x10 [ 66.555546][ T6910] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 66.555566][ T6910] __ia32_compat_sys_openat+0x12d/0x210 [ 66.555587][ T6910] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 66.555619][ T6910] __do_fast_syscall_32+0x13a/0x8b0 [ 66.555650][ T6910] do_fast_syscall_32+0x32/0x70 [ 66.555684][ T6910] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.555709][ T6910] RIP: 0023:0xf7f44fec [ 66.555727][ T6910] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 66.555732][ T6910] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 66.555743][ T6910] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 66.555750][ T6910] RDX: 0000000000000042 RSI: 00000000000001ff RDI: 0000000000000000 [ 66.555756][ T6910] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 66.555763][ T6910] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 66.555769][ T6910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.555782][ T6910] [ 66.704495][ T6904] netlink: 56 bytes leftover after parsing attributes in process `syz.2.284'. [ 66.910185][ T6921] FAULT_INJECTION: forcing a failure. [ 66.910185][ T6921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.910214][ T6921] CPU: 2 UID: 0 PID: 6921 Comm: syz.3.292 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.910239][ T6921] Tainted: [L]=SOFTLOCKUP [ 66.910245][ T6921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.910256][ T6921] Call Trace: [ 66.910262][ T6921] [ 66.910269][ T6921] dump_stack_lvl+0x100/0x190 [ 66.910296][ T6921] should_fail_ex.cold+0x5/0xa [ 66.910317][ T6921] _copy_from_user+0x2e/0xd0 [ 66.910340][ T6921] snd_seq_oss_write+0x3d5/0x8b0 [ 66.910373][ T6921] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 66.910408][ T6921] ? bpf_lsm_file_permission+0x9/0x10 [ 66.910433][ T6921] odev_write+0x51/0xa0 [ 66.910457][ T6921] vfs_write+0x2aa/0x1050 [ 66.910494][ T6921] ? __pfx_odev_write+0x10/0x10 [ 66.910518][ T6921] ? lock_acquire+0x1d1/0x380 [ 66.910538][ T6921] ? __fget_files+0x34/0x3d0 [ 66.910557][ T6921] ? __pfx_vfs_write+0x10/0x10 [ 66.910574][ T6921] ? find_held_lock+0x2b/0x80 [ 66.910591][ T6921] ? __fget_files+0x215/0x3d0 [ 66.910610][ T6921] ? __fget_files+0x215/0x3d0 [ 66.910633][ T6921] ? __fget_files+0x21f/0x3d0 [ 66.910656][ T6921] ksys_write+0x12a/0x250 [ 66.910674][ T6921] ? __pfx_ksys_write+0x10/0x10 [ 66.910691][ T6921] ? ksys_write+0x1ac/0x250 [ 66.910709][ T6921] ? __pfx_ksys_write+0x10/0x10 [ 66.910732][ T6921] __do_fast_syscall_32+0x13a/0x8b0 [ 66.910757][ T6921] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.910783][ T6921] do_fast_syscall_32+0x32/0x70 [ 66.910809][ T6921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.910836][ T6921] RIP: 0023:0xf7f44fec [ 66.910855][ T6921] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 66.910862][ T6921] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 66.910879][ T6921] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800007c0 [ 66.910891][ T6921] RDX: 0000000000000295 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.910902][ T6921] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 66.910912][ T6921] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 66.910922][ T6921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.910946][ T6921] [ 66.942393][ T9] cxacru 7-1:1.0: send of cm 0x91 failed (-71) [ 66.942409][ T9] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 66.942417][ T9] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 66.946483][ T9] cxacru 7-1:1.0: probe with driver cxacru failed with error -71 [ 66.955870][ T9] usb 7-1: USB disconnect, device number 11 [ 66.973703][ T6927] FAULT_INJECTION: forcing a failure. [ 66.973703][ T6927] name failslab, interval 1, probability 0, space 0, times 0 [ 66.973723][ T6927] CPU: 0 UID: 0 PID: 6927 Comm: syz.3.294 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.973744][ T6927] Tainted: [L]=SOFTLOCKUP [ 66.973748][ T6927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.973755][ T6927] Call Trace: [ 66.973759][ T6927] [ 66.973764][ T6927] dump_stack_lvl+0x100/0x190 [ 66.973782][ T6927] should_fail_ex.cold+0x5/0xa [ 66.973797][ T6927] should_failslab+0xc2/0x120 [ 66.973811][ T6927] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 66.973824][ T6927] ? __alloc_skb+0x5b7/0x710 [ 66.973838][ T6927] ? __alloc_skb+0x140/0x710 [ 66.973853][ T6927] __alloc_skb+0x140/0x710 [ 66.973865][ T6927] ? __alloc_skb+0x5b7/0x710 [ 66.973878][ T6927] ? __pfx___alloc_skb+0x10/0x10 [ 66.973895][ T6927] netlink_alloc_large_skb+0x69/0x150 [ 66.973909][ T6927] netlink_sendmsg+0x680/0xda0 [ 66.973924][ T6927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.973938][ T6927] ? apparmor_socket_sendmsg+0x165/0x280 [ 66.973955][ T6927] ____sys_sendmsg+0xa4d/0xbe0 [ 66.973966][ T6927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.973979][ T6927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 66.973996][ T6927] ___sys_sendmsg+0x190/0x1e0 [ 66.974007][ T6927] ? __pfx____sys_sendmsg+0x10/0x10 [ 66.974025][ T6927] ? find_held_lock+0x2b/0x80 [ 66.974044][ T6927] __sys_sendmsg+0x160/0x210 [ 66.974059][ T6927] ? __pfx___sys_sendmsg+0x10/0x10 [ 66.974078][ T6927] ? __pfx_ksys_write+0x10/0x10 [ 66.974092][ T6927] __do_fast_syscall_32+0x13a/0x8b0 [ 66.974108][ T6927] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.974125][ T6927] do_fast_syscall_32+0x32/0x70 [ 66.974142][ T6927] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.974156][ T6927] RIP: 0023:0xf7f44fec [ 66.974168][ T6927] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 66.974173][ T6927] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 66.974183][ T6927] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003340 [ 66.974190][ T6927] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.974196][ T6927] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 66.974202][ T6927] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 66.974208][ T6927] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.974221][ T6927] [ 67.036775][ T6932] FAULT_INJECTION: forcing a failure. [ 67.036775][ T6932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.036797][ T6932] CPU: 0 UID: 0 PID: 6932 Comm: syz.3.296 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.036817][ T6932] Tainted: [L]=SOFTLOCKUP [ 67.036821][ T6932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.036828][ T6932] Call Trace: [ 67.036834][ T6932] [ 67.036841][ T6932] dump_stack_lvl+0x100/0x190 [ 67.036867][ T6932] should_fail_ex.cold+0x5/0xa [ 67.036890][ T6932] _copy_to_iter+0x5a4/0x1720 [ 67.036916][ T6932] ? __pfx__copy_to_iter+0x10/0x10 [ 67.036935][ T6932] ? get_pid_task+0xfc/0x250 [ 67.036961][ T6932] seq_read_iter+0xdab/0x1270 [ 67.036989][ T6932] seq_read+0x344/0x4d0 [ 67.037007][ T6932] ? __pfx_seq_read+0x10/0x10 [ 67.037023][ T6932] ? lock_acquire+0x1d1/0x380 [ 67.037049][ T6932] ? common_file_perm+0x266/0x500 [ 67.037079][ T6932] ? rw_verify_area+0xce/0x6d0 [ 67.037104][ T6932] ? __pfx_seq_read+0x10/0x10 [ 67.037121][ T6932] vfs_read+0x1e4/0xb40 [ 67.037137][ T6932] ? lock_acquire+0x1d1/0x380 [ 67.037158][ T6932] ? __fget_files+0x34/0x3d0 [ 67.037176][ T6932] ? __pfx_vfs_read+0x10/0x10 [ 67.037195][ T6932] ? find_held_lock+0x2b/0x80 [ 67.037211][ T6932] ? __fget_files+0x215/0x3d0 [ 67.037233][ T6932] ? __fget_files+0x21f/0x3d0 [ 67.037257][ T6932] ksys_read+0x12a/0x250 [ 67.037272][ T6932] ? __pfx_ksys_read+0x10/0x10 [ 67.037288][ T6932] ? ksys_write+0x1ac/0x250 [ 67.037303][ T6932] ? __pfx_ksys_write+0x10/0x10 [ 67.037324][ T6932] __do_fast_syscall_32+0x13a/0x8b0 [ 67.037350][ T6932] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.037376][ T6932] do_fast_syscall_32+0x32/0x70 [ 67.037400][ T6932] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 67.037420][ T6932] RIP: 0023:0xf7f44fec [ 67.037439][ T6932] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 67.037446][ T6932] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 67.037463][ T6932] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080006040 [ 67.037474][ T6932] RDX: 00000000000017a9 RSI: 0000000000000000 RDI: 0000000000000000 [ 67.037484][ T6932] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 67.037493][ T6932] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 67.037503][ T6932] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.037545][ T6932] [ 67.245920][ T5752] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 67.331525][ T6950] IPVS: ip_vs_add_dest(): server weight less than zero [ 67.335289][ T1159] IPVS: starting estimator thread 0... [ 67.422757][ T6951] IPVS: using max 28 ests per chain, 67200 per kthread [ 67.841832][ T5599] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 67.975996][ T6960] FAULT_INJECTION: forcing a failure. [ 67.975996][ T6960] name failslab, interval 1, probability 0, space 0, times 0 [ 67.976029][ T6960] CPU: 1 UID: 0 PID: 6960 Comm: syz.3.302 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.976050][ T6960] Tainted: [L]=SOFTLOCKUP [ 67.976054][ T6960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.976060][ T6960] Call Trace: [ 67.976064][ T6960] [ 67.976069][ T6960] dump_stack_lvl+0x100/0x190 [ 67.976088][ T6960] should_fail_ex.cold+0x5/0xa [ 67.976103][ T6960] should_failslab+0xc2/0x120 [ 67.976120][ T6960] __kmalloc_noprof+0xfc/0x840 [ 67.976133][ T6960] ? font_data_rotate+0x353/0x3b0 [ 67.976147][ T6960] font_data_rotate+0x353/0x3b0 [ 67.976156][ T6960] ? complement_pos+0x17f/0x4e0 [ 67.976173][ T6960] fbcon_rotate_font+0x2bf/0x510 [ 67.976186][ T6960] ? fbcon_set_bitops_ud+0xd/0x50 [ 67.976200][ T6960] fbcon_modechanged+0x218/0x7f0 [ 67.976216][ T6960] ? __pfx_fbcon_rotate_font+0x10/0x10 [ 67.976231][ T6960] fbcon_set_all_vcs+0x39b/0x470 [ 67.976249][ T6960] rotate_all_store+0x31e/0x410 [ 67.976266][ T6960] ? __pfx_rotate_all_store+0x10/0x10 [ 67.976282][ T6960] dev_attr_store+0x58/0x80 [ 67.976299][ T6960] ? __pfx_dev_attr_store+0x10/0x10 [ 67.976315][ T6960] sysfs_kf_write+0xf2/0x150 [ 67.976328][ T6960] kernfs_fop_write_iter+0x3e0/0x5f0 [ 67.976344][ T6960] ? __pfx_sysfs_kf_write+0x10/0x10 [ 67.976356][ T6960] vfs_write+0x6af/0x1050 [ 67.976368][ T6960] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 67.976386][ T6960] ? __pfx_vfs_write+0x10/0x10 [ 67.976396][ T6960] ? find_held_lock+0x2b/0x80 [ 67.976417][ T6960] ksys_write+0x12a/0x250 [ 67.976429][ T6960] ? __pfx_ksys_write+0x10/0x10 [ 67.976439][ T6960] ? ksys_write+0x1ac/0x250 [ 67.976450][ T6960] ? __pfx_ksys_write+0x10/0x10 [ 67.976464][ T6960] __do_fast_syscall_32+0x13a/0x8b0 [ 67.976480][ T6960] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.976497][ T6960] do_fast_syscall_32+0x32/0x70 [ 67.976515][ T6960] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 67.976528][ T6960] RIP: 0023:0xf7f44fec [ 67.976541][ T6960] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 67.976546][ T6960] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 67.976579][ T6960] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 67.976586][ T6960] RDX: 0000000000000057 RSI: 0000000000000000 RDI: 0000000000000000 [ 67.976592][ T6960] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 67.976599][ T6960] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 67.976605][ T6960] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.976623][ T6960] [ 68.002283][ T5599] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 68.002307][ T5599] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 68.005142][ T5599] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.005166][ T5599] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.005179][ T5599] usb 7-1: config 0 interface 0 has no altsetting 0 [ 68.007349][ T5599] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.007372][ T5599] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.007385][ T5599] usb 7-1: config 0 interface 0 has no altsetting 0 [ 68.008145][ T5599] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.008165][ T5599] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.008177][ T5599] usb 7-1: config 0 interface 0 has no altsetting 0 [ 68.009067][ T5599] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.009088][ T5599] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.009100][ T5599] usb 7-1: config 0 interface 0 has no altsetting 0 [ 68.009885][ T5599] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.009912][ T5599] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.009924][ T5599] usb 7-1: config 0 interface 0 has no altsetting 0 [ 68.010704][ T5599] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.010724][ T5599] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.010737][ T5599] usb 7-1: config 0 interface 0 has no altsetting 0 [ 68.011639][ T5599] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.011669][ T5599] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.011691][ T5599] usb 7-1: config 0 interface 0 has no altsetting 0 [ 68.012579][ T5599] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.012599][ T5599] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.012613][ T5599] usb 7-1: config 0 interface 0 has no altsetting 0 [ 68.014268][ T5599] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 68.014281][ T5599] usb 7-1: Product: syz [ 68.014288][ T5599] usb 7-1: Manufacturer: syz [ 68.014295][ T5599] usb 7-1: SerialNumber: syz [ 68.016605][ T5599] usb 7-1: config 0 descriptor?? [ 68.030718][ T5599] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 68.186304][ T6971] netlink: 56 bytes leftover after parsing attributes in process `syz.1.305'. [ 68.230933][ T6956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.231234][ T6956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.235455][ T6956] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20003 [ 68.238753][ T6956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.239065][ T6956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.241067][ T30] usb 7-1: USB disconnect, device number 12 [ 68.244685][ T30] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 68.425247][ T6983] netlink: 16 bytes leftover after parsing attributes in process `syz.3.306'. [ 68.429029][ T6983] input: syz1 as /devices/virtual/input/input9 [ 68.721636][ T6990] netlink: 56 bytes leftover after parsing attributes in process `syz.1.308'. [ 69.031779][ T5599] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 69.124411][ T6999] netlink: 'syz.0.312': attribute type 11 has an invalid length. [ 69.159696][ T7001] FAULT_INJECTION: forcing a failure. [ 69.159696][ T7001] name failslab, interval 1, probability 0, space 0, times 0 [ 69.159718][ T7001] CPU: 1 UID: 0 PID: 7001 Comm: syz.0.313 Tainted: G L syzkaller #0 PREEMPT(full) [ 69.159734][ T7001] Tainted: [L]=SOFTLOCKUP [ 69.159737][ T7001] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.159744][ T7001] Call Trace: [ 69.159748][ T7001] [ 69.159752][ T7001] dump_stack_lvl+0x100/0x190 [ 69.159770][ T7001] should_fail_ex.cold+0x5/0xa [ 69.159785][ T7001] should_failslab+0xc2/0x120 [ 69.159800][ T7001] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 69.159813][ T7001] ? __alloc_skb+0x5b7/0x710 [ 69.159826][ T7001] ? __alloc_skb+0x140/0x710 [ 69.159841][ T7001] __alloc_skb+0x140/0x710 [ 69.159854][ T7001] ? __alloc_skb+0x5b7/0x710 [ 69.159866][ T7001] ? __pfx___alloc_skb+0x10/0x10 [ 69.159881][ T7001] ? aa_sk_perm+0x389/0xab0 [ 69.159899][ T7001] netlink_alloc_large_skb+0x69/0x150 [ 69.159913][ T7001] netlink_sendmsg+0x680/0xda0 [ 69.159928][ T7001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.159942][ T7001] ? apparmor_socket_sendmsg+0x165/0x280 [ 69.159959][ T7001] ____sys_sendmsg+0xa4d/0xbe0 [ 69.159969][ T7001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.159983][ T7001] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.159999][ T7001] ___sys_sendmsg+0x190/0x1e0 [ 69.160011][ T7001] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.160029][ T7001] ? find_held_lock+0x2b/0x80 [ 69.160048][ T7001] __sys_sendmsg+0x160/0x210 [ 69.160064][ T7001] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.160081][ T7001] ? __pfx_ksys_write+0x10/0x10 [ 69.160096][ T7001] __do_fast_syscall_32+0x13a/0x8b0 [ 69.160112][ T7001] ? lockdep_hardirqs_on+0x7d/0x110 [ 69.160134][ T7001] do_fast_syscall_32+0x32/0x70 [ 69.160151][ T7001] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.160164][ T7001] RIP: 0023:0xf6feefec [ 69.160178][ T7001] Code: Unable to access opcode bytes at 0xf6feefc2. [ 69.160183][ T7001] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 69.160194][ T7001] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 69.160201][ T7001] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.160207][ T7001] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.160213][ T7001] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 69.160220][ T7001] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.160233][ T7001] [ 69.192888][ T1820] hid-generic 0005:046E:0007.0013: unknown main item tag 0x1 [ 69.197268][ T1820] hid-generic 0005:046E:0007.0013: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 69.224050][ T5599] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 69.225237][ T5599] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 69.225259][ T5599] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 69.225289][ T5599] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.232792][ T5599] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 69.242088][ T5599] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 69.300531][ T7006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.314'. [ 69.325015][ T7008] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 69.387310][ T7012] overlay: Unknown parameter 'fscontext' [ 69.396412][ T7014] FAULT_INJECTION: forcing a failure. [ 69.396412][ T7014] name failslab, interval 1, probability 0, space 0, times 0 [ 69.396441][ T7014] CPU: 3 UID: 0 PID: 7014 Comm: syz.0.318 Tainted: G L syzkaller #0 PREEMPT(full) [ 69.396464][ T7014] Tainted: [L]=SOFTLOCKUP [ 69.396471][ T7014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.396480][ T7014] Call Trace: [ 69.396487][ T7014] [ 69.396494][ T7014] dump_stack_lvl+0x100/0x190 [ 69.396521][ T7014] should_fail_ex.cold+0x5/0xa [ 69.396566][ T7014] should_failslab+0xc2/0x120 [ 69.396590][ T7014] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 69.396612][ T7014] ? __alloc_skb+0x5b7/0x710 [ 69.396634][ T7014] ? __alloc_skb+0x140/0x710 [ 69.396658][ T7014] __alloc_skb+0x140/0x710 [ 69.396684][ T7014] ? __alloc_skb+0x5b7/0x710 [ 69.396704][ T7014] ? __pfx___alloc_skb+0x10/0x10 [ 69.396732][ T7014] netlink_alloc_large_skb+0x69/0x150 [ 69.396755][ T7014] netlink_sendmsg+0x680/0xda0 [ 69.396779][ T7014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.396802][ T7014] ? apparmor_socket_sendmsg+0x165/0x280 [ 69.396828][ T7014] ____sys_sendmsg+0xa4d/0xbe0 [ 69.396845][ T7014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.396867][ T7014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.396894][ T7014] ___sys_sendmsg+0x190/0x1e0 [ 69.396913][ T7014] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.396942][ T7014] ? find_held_lock+0x2b/0x80 [ 69.396977][ T7014] __sys_sendmsg+0x160/0x210 [ 69.397000][ T7014] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.397029][ T7014] ? __pfx_ksys_write+0x10/0x10 [ 69.397052][ T7014] __do_fast_syscall_32+0x13a/0x8b0 [ 69.397079][ T7014] ? lockdep_hardirqs_on+0x7d/0x110 [ 69.397105][ T7014] do_fast_syscall_32+0x32/0x70 [ 69.397131][ T7014] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.397153][ T7014] RIP: 0023:0xf6feefec [ 69.397170][ T7014] Code: Unable to access opcode bytes at 0xf6feefc2. [ 69.397178][ T7014] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 69.397196][ T7014] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 69.397206][ T7014] RDX: 0000000020040040 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.397218][ T7014] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.397227][ T7014] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 69.397237][ T7014] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.397259][ T7014] [ 69.435144][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'. [ 69.442134][ T7018] tmpfs: Bad value for 'uid' [ 69.442150][ T7018] tmpfs: Bad value for 'uid' [ 69.444498][ T7018] afs: Unexpected value for 'dyn' [ 69.445456][ T7018] overlayfs: overlapping lowerdir path [ 69.567640][ T7025] netlink: 'syz.0.321': attribute type 1 has an invalid length. [ 69.571138][ T7025] netlink: 'syz.0.321': attribute type 1 has an invalid length. [ 69.602378][ T6993] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 69.602608][ T6993] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 69.602824][ T6993] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 69.631844][ T7029] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.694451][ T6993] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 69.783967][ T7037] netlink: 56 bytes leftover after parsing attributes in process `syz.1.323'. [ 69.812320][ T6992] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 69.817158][ T5599] usb 7-1: USB disconnect, device number 13 [ 69.832738][ T5599] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 69.833202][ T5599] spcp8x5 7-1:1.0: device disconnected [ 70.357017][ T7040] binder: 7039:7040 unknown command 0 [ 70.357037][ T7040] binder: 7039:7040 ioctl c0306201 800004c0 returned -22 [ 70.395727][ T855] hid-generic 0005:046E:0007.0014: unknown main item tag 0x1 [ 70.398331][ T855] hid-generic 0005:046E:0007.0014: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 70.440775][ T7047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.326'. [ 70.469560][ T7051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.328'. [ 70.690822][ T7065] /dev/loop1: Can't lookup blockdev [ 70.803870][ T7075] FAULT_INJECTION: forcing a failure. [ 70.803870][ T7075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.803900][ T7075] CPU: 2 UID: 0 PID: 7075 Comm: syz.2.333 Tainted: G L syzkaller #0 PREEMPT(full) [ 70.803938][ T7075] Tainted: [L]=SOFTLOCKUP [ 70.803944][ T7075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.803955][ T7075] Call Trace: [ 70.803961][ T7075] [ 70.803967][ T7075] dump_stack_lvl+0x100/0x190 [ 70.803995][ T7075] should_fail_ex.cold+0x5/0xa [ 70.804018][ T7075] _copy_from_user+0x2e/0xd0 [ 70.804041][ T7075] get_old_itimerspec32+0x86/0x1e0 [ 70.804066][ T7075] ? __pfx_get_old_itimerspec32+0x10/0x10 [ 70.804092][ T7075] ? __mutex_unlock_slowpath+0x35d/0x930 [ 70.804123][ T7075] __ia32_sys_timer_settime32+0x1a5/0x2c0 [ 70.804147][ T7075] ? __pfx___ia32_sys_timer_settime32+0x10/0x10 [ 70.804175][ T7075] ? ksys_write+0x1ac/0x250 [ 70.804194][ T7075] ? __pfx_ksys_write+0x10/0x10 [ 70.804216][ T7075] __do_fast_syscall_32+0x13a/0x8b0 [ 70.804241][ T7075] ? lockdep_hardirqs_on+0x7d/0x110 [ 70.804269][ T7075] do_fast_syscall_32+0x32/0x70 [ 70.804296][ T7075] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 70.804318][ T7075] RIP: 0023:0xf7f28fec [ 70.804336][ T7075] Code: Unable to access opcode bytes at 0xf7f28fc2. [ 70.804344][ T7075] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 0000000000000104 [ 70.804362][ T7075] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000001 [ 70.804373][ T7075] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.804383][ T7075] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 70.804394][ T7075] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 70.804404][ T7075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.804429][ T7075] [ 70.901492][ T25] cfg80211: failed to load regulatory.db [ 70.971748][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 70.996257][ T7079] FAULT_INJECTION: forcing a failure. [ 70.996257][ T7079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.996287][ T7079] CPU: 2 UID: 0 PID: 7079 Comm: syz.1.337 Tainted: G L syzkaller #0 PREEMPT(full) [ 70.996311][ T7079] Tainted: [L]=SOFTLOCKUP [ 70.996318][ T7079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.996329][ T7079] Call Trace: [ 70.996335][ T7079] [ 70.996342][ T7079] dump_stack_lvl+0x100/0x190 [ 70.996370][ T7079] should_fail_ex.cold+0x5/0xa [ 70.996393][ T7079] _copy_from_user+0x2e/0xd0 [ 70.996416][ T7079] kstrtouint_from_user+0xd6/0x1d0 [ 70.996443][ T7079] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 70.996475][ T7079] ? lock_acquire+0x1d1/0x380 [ 70.996505][ T7079] proc_fail_nth_write+0x83/0x220 [ 70.996559][ T7079] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 70.996586][ T7079] vfs_write+0x2aa/0x1050 [ 70.996605][ T7079] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 70.996624][ T7079] ? lock_acquire+0x1d1/0x380 [ 70.996646][ T7079] ? __fget_files+0x34/0x3d0 [ 70.996666][ T7079] ? __pfx_vfs_write+0x10/0x10 [ 70.996682][ T7079] ? find_held_lock+0x2b/0x80 [ 70.996700][ T7079] ? __fget_files+0x215/0x3d0 [ 70.996724][ T7079] ? __fget_files+0x21f/0x3d0 [ 70.996751][ T7079] ksys_write+0x12a/0x250 [ 70.996769][ T7079] ? __pfx_ksys_write+0x10/0x10 [ 70.996794][ T7079] do_int80_emulation+0x166/0x650 [ 70.996825][ T7079] asm_int80_emulation+0x1a/0x20 [ 70.996843][ T7079] RIP: 0023:0xf71475ab [ 70.996857][ T7079] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 70.996874][ T7079] RSP: 002b:00000000f54064bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 70.996892][ T7079] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54065d0 [ 70.996903][ T7079] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.996913][ T7079] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 70.996923][ T7079] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 70.996933][ T7079] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.996957][ T7079] [ 71.122390][ T9] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 71.123298][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.123334][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 71.123356][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 71.123386][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.144302][ T7081] __nla_validate_parse: 2 callbacks suppressed [ 71.144320][ T7081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.338'. [ 71.315284][ T7096] FAULT_INJECTION: forcing a failure. [ 71.315284][ T7096] name failslab, interval 1, probability 0, space 0, times 0 [ 71.315316][ T7096] CPU: 3 UID: 0 PID: 7096 Comm: syz.1.342 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.315340][ T7096] Tainted: [L]=SOFTLOCKUP [ 71.315347][ T7096] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.315357][ T7096] Call Trace: [ 71.315363][ T7096] [ 71.315370][ T7096] dump_stack_lvl+0x100/0x190 [ 71.315398][ T7096] should_fail_ex.cold+0x5/0xa [ 71.315420][ T7096] should_failslab+0xc2/0x120 [ 71.315443][ T7096] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 71.315464][ T7096] ? __alloc_skb+0x5b7/0x710 [ 71.315485][ T7096] ? __alloc_skb+0x140/0x710 [ 71.315511][ T7096] __alloc_skb+0x140/0x710 [ 71.315532][ T7096] ? __alloc_skb+0x5b7/0x710 [ 71.315553][ T7096] ? __pfx___alloc_skb+0x10/0x10 [ 71.315577][ T7096] ? aa_sk_perm+0x389/0xab0 [ 71.315606][ T7096] netlink_alloc_large_skb+0x69/0x150 [ 71.315630][ T7096] netlink_sendmsg+0x680/0xda0 [ 71.315659][ T7096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.315682][ T7096] ? apparmor_socket_sendmsg+0x165/0x280 [ 71.315708][ T7096] ____sys_sendmsg+0xa4d/0xbe0 [ 71.315723][ T7096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.315746][ T7096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.315774][ T7096] ___sys_sendmsg+0x190/0x1e0 [ 71.315802][ T7096] ? __pfx____sys_sendmsg+0x10/0x10 [ 71.315833][ T7096] ? find_held_lock+0x2b/0x80 [ 71.315867][ T7096] __sys_sendmsg+0x160/0x210 [ 71.315892][ T7096] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.315921][ T7096] ? __pfx_ksys_write+0x10/0x10 [ 71.315944][ T7096] __do_fast_syscall_32+0x13a/0x8b0 [ 71.315970][ T7096] ? lockdep_hardirqs_on+0x7d/0x110 [ 71.315999][ T7096] do_fast_syscall_32+0x32/0x70 [ 71.316026][ T7096] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.316048][ T7096] RIP: 0023:0xf7f44fec [ 71.316069][ T7096] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 71.316076][ T7096] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 71.316094][ T7096] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 71.316106][ T7096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.316117][ T7096] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 71.316127][ T7096] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 71.316138][ T7096] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.316161][ T7096] [ 71.371966][ T7098] FAULT_INJECTION: forcing a failure. [ 71.371966][ T7098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.371997][ T7098] CPU: 3 UID: 0 PID: 7098 Comm: syz.1.343 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.372022][ T7098] Tainted: [L]=SOFTLOCKUP [ 71.372029][ T7098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.372040][ T7098] Call Trace: [ 71.372046][ T7098] [ 71.372053][ T7098] dump_stack_lvl+0x100/0x190 [ 71.372082][ T7098] should_fail_ex.cold+0x5/0xa [ 71.372107][ T7098] _copy_from_iter+0x1f4/0x1690 [ 71.372133][ T7098] ? __asan_memset+0x23/0x50 [ 71.372152][ T7098] ? __pfx__copy_from_iter+0x10/0x10 [ 71.372176][ T7098] ? __pfx___alloc_skb+0x10/0x10 [ 71.372211][ T7098] netlink_sendmsg+0x808/0xda0 [ 71.372238][ T7098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.372262][ T7098] ? apparmor_socket_sendmsg+0x165/0x280 [ 71.372287][ T7098] ____sys_sendmsg+0xa4d/0xbe0 [ 71.372302][ T7098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.372325][ T7098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.372355][ T7098] ___sys_sendmsg+0x190/0x1e0 [ 71.372376][ T7098] ? __pfx____sys_sendmsg+0x10/0x10 [ 71.372396][ T7098] ? futex_wait+0x11e/0x370 [ 71.372427][ T7098] ? find_held_lock+0x2b/0x80 [ 71.372463][ T7098] __sys_sendmsg+0x160/0x210 [ 71.372489][ T7098] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.372569][ T7098] __do_fast_syscall_32+0x13a/0x8b0 [ 71.372604][ T7098] ? lockdep_hardirqs_on+0x7d/0x110 [ 71.372634][ T7098] do_fast_syscall_32+0x32/0x70 [ 71.372664][ T7098] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.372687][ T7098] RIP: 0023:0xf7f44fec [ 71.372705][ T7098] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 71.372713][ T7098] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 71.372732][ T7098] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 71.372746][ T7098] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.372759][ T7098] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 71.372771][ T7098] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 71.372791][ T7098] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.372816][ T7098] [ 71.479646][ T7072] netlink: 56 bytes leftover after parsing attributes in process `syz.3.334'. [ 71.708176][ T9] cxacru 8-1:1.0: send of cm 0x91 failed (-71) [ 71.708194][ T9] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 71.708210][ T9] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 71.709403][ T9] cxacru 8-1:1.0: probe with driver cxacru failed with error -71 [ 71.721232][ T9] usb 8-1: USB disconnect, device number 10 [ 71.902532][ T5610] hid-generic 0005:046E:0007.0015: unknown main item tag 0x1 [ 71.903375][ T5610] hid-generic 0005:046E:0007.0015: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 71.991186][ T7116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.348'. [ 72.012940][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.349'. [ 72.056204][ T7126] FAULT_INJECTION: forcing a failure. [ 72.056204][ T7126] name failslab, interval 1, probability 0, space 0, times 0 [ 72.056283][ T7126] CPU: 0 UID: 0 PID: 7126 Comm: syz.1.350 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.056308][ T7126] Tainted: [L]=SOFTLOCKUP [ 72.056314][ T7126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.056325][ T7126] Call Trace: [ 72.056331][ T7126] [ 72.056338][ T7126] dump_stack_lvl+0x100/0x190 [ 72.056367][ T7126] should_fail_ex.cold+0x5/0xa [ 72.056392][ T7126] should_failslab+0xc2/0x120 [ 72.056417][ T7126] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 72.056438][ T7126] ? __alloc_skb+0x5b7/0x710 [ 72.056459][ T7126] ? __alloc_skb+0x140/0x710 [ 72.056499][ T7126] __alloc_skb+0x140/0x710 [ 72.056520][ T7126] ? __alloc_skb+0x5b7/0x710 [ 72.056566][ T7126] ? __pfx___alloc_skb+0x10/0x10 [ 72.056600][ T7126] netlink_alloc_large_skb+0x69/0x150 [ 72.056624][ T7126] netlink_sendmsg+0x680/0xda0 [ 72.056649][ T7126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.056673][ T7126] ? apparmor_socket_sendmsg+0x165/0x280 [ 72.056701][ T7126] ____sys_sendmsg+0xa4d/0xbe0 [ 72.056717][ T7126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.056739][ T7126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 72.056768][ T7126] ___sys_sendmsg+0x190/0x1e0 [ 72.056788][ T7126] ? __pfx____sys_sendmsg+0x10/0x10 [ 72.056816][ T7126] ? find_held_lock+0x2b/0x80 [ 72.056852][ T7126] __sys_sendmsg+0x160/0x210 [ 72.056876][ T7126] ? __pfx___sys_sendmsg+0x10/0x10 [ 72.056906][ T7126] ? __pfx_ksys_write+0x10/0x10 [ 72.056929][ T7126] __do_fast_syscall_32+0x13a/0x8b0 [ 72.056956][ T7126] ? lockdep_hardirqs_on+0x7d/0x110 [ 72.056983][ T7126] do_fast_syscall_32+0x32/0x70 [ 72.057010][ T7126] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.057033][ T7126] RIP: 0023:0xf7f44fec [ 72.057052][ T7126] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 72.057060][ T7126] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 72.057078][ T7126] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 72.057089][ T7126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.057099][ T7126] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.057109][ T7126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.057119][ T7126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.057142][ T7126] [ 72.196513][ T7132] xt_MASQUERADE: bad rangesize 29 [ 72.207869][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'. [ 72.270842][ T7139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.356'. [ 72.295754][ T7135] FAULT_INJECTION: forcing a failure. [ 72.295754][ T7135] name failslab, interval 1, probability 0, space 0, times 0 [ 72.295784][ T7135] CPU: 2 UID: 0 PID: 7135 Comm: syz.2.355 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.295809][ T7135] Tainted: [L]=SOFTLOCKUP [ 72.295816][ T7135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.295842][ T7135] Call Trace: [ 72.295850][ T7135] [ 72.295858][ T7135] dump_stack_lvl+0x100/0x190 [ 72.295886][ T7135] should_fail_ex.cold+0x5/0xa [ 72.295910][ T7135] should_failslab+0xc2/0x120 [ 72.295934][ T7135] __kmalloc_noprof+0xfc/0x840 [ 72.295955][ T7135] ? tomoyo_encode2+0xfb/0x3c0 [ 72.295979][ T7135] tomoyo_encode2+0xfb/0x3c0 [ 72.296000][ T7135] tomoyo_encode+0x29/0x50 [ 72.296017][ T7135] tomoyo_realpath_from_path+0x18c/0x690 [ 72.296042][ T7135] tomoyo_path_number_perm+0x23c/0x580 [ 72.296066][ T7135] ? tomoyo_path_number_perm+0x22e/0x580 [ 72.296093][ T7135] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 72.296125][ T7135] ? get_pid_task+0x106/0x250 [ 72.296150][ T7135] ? __lock_acquire+0x5c0/0x1f40 [ 72.296187][ T7135] ? __fget_files+0x34/0x3d0 [ 72.296208][ T7135] ? find_held_lock+0x2b/0x80 [ 72.296226][ T7135] ? __fget_files+0x215/0x3d0 [ 72.296242][ T7135] ? hook_file_ioctl_common+0x140/0x440 [ 72.296268][ T7135] ? __fget_files+0x215/0x3d0 [ 72.296291][ T7135] ? __fget_files+0x21f/0x3d0 [ 72.296316][ T7135] security_file_ioctl_compat+0xd3/0x230 [ 72.296359][ T7135] __ia32_compat_sys_ioctl+0xc2/0x360 [ 72.296389][ T7135] __do_fast_syscall_32+0x13a/0x8b0 [ 72.296414][ T7135] ? lockdep_hardirqs_on+0x7d/0x110 [ 72.296440][ T7135] do_fast_syscall_32+0x32/0x70 [ 72.296465][ T7135] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.296488][ T7135] RIP: 0023:0xf7f28fec [ 72.296509][ T7135] Code: Unable to access opcode bytes at 0xf7f28fc2. [ 72.296517][ T7135] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 72.296555][ T7135] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040047459 [ 72.296566][ T7135] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.296577][ T7135] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.296588][ T7135] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.296599][ T7135] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.296621][ T7135] [ 72.299144][ T7135] ERROR: Out of memory at tomoyo_realpath_from_path. [ 72.362676][ T7139] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 72.362692][ T7139] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 72.362742][ T7139] vhci_hcd vhci_hcd.0: Device attached [ 72.389921][ T7140] vhci_hcd: connection closed [ 72.397677][ T12] vhci_hcd vhci_hcd.3: stop threads [ 72.397701][ T12] vhci_hcd vhci_hcd.3: release socket [ 72.397717][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 72.468143][ T25] hid-generic 0005:046E:0007.0016: unknown main item tag 0x1 [ 72.471136][ T25] hid-generic 0005:046E:0007.0016: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 72.560335][ T7146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.358'. [ 72.586984][ T7150] IPVS: ip_vs_add_dest(): server weight less than zero [ 72.597874][ T6972] IPVS: starting estimator thread 0... [ 72.691588][ T7153] IPVS: using max 43 ests per chain, 103200 per kthread [ 72.857618][ T25] hid-generic 0005:046E:0007.0017: unknown main item tag 0x1 [ 72.858940][ T25] hid-generic 0005:046E:0007.0017: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 72.952310][ T7165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.360'. [ 72.990893][ T7173] FAULT_INJECTION: forcing a failure. [ 72.990893][ T7173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.990915][ T7173] CPU: 0 UID: 0 PID: 7173 Comm: syz.0.362 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.990930][ T7173] Tainted: [L]=SOFTLOCKUP [ 72.990934][ T7173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.990940][ T7173] Call Trace: [ 72.990944][ T7173] [ 72.990948][ T7173] dump_stack_lvl+0x100/0x190 [ 72.990966][ T7173] should_fail_ex.cold+0x5/0xa [ 72.990980][ T7173] _copy_from_user+0x2e/0xd0 [ 72.990995][ T7173] snd_rawmidi_kernel_write1+0x390/0x7c0 [ 72.991012][ T7173] snd_rawmidi_write+0x2dc/0xc60 [ 72.991027][ T7173] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 72.991037][ T7173] ? common_file_perm+0x266/0x500 [ 72.991053][ T7173] ? __pfx_default_wake_function+0x10/0x10 [ 72.991071][ T7173] ? bpf_lsm_file_permission+0x9/0x10 [ 72.991086][ T7173] ? security_file_permission+0x76/0x210 [ 72.991103][ T7173] ? rw_verify_area+0xce/0x6d0 [ 72.991121][ T7173] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 72.991131][ T7173] vfs_writev+0x5ed/0xdd0 [ 72.991145][ T7173] ? __pfx_vfs_writev+0x10/0x10 [ 72.991157][ T7173] ? lock_acquire+0x1d1/0x380 [ 72.991172][ T7173] ? __fget_files+0x34/0x3d0 [ 72.991194][ T7173] ? __fget_files+0x21f/0x3d0 [ 72.991209][ T7173] ? do_writev+0x28a/0x340 [ 72.991218][ T7173] do_writev+0x28a/0x340 [ 72.991228][ T7173] ? __pfx_do_writev+0x10/0x10 [ 72.991238][ T7173] ? ksys_write+0x1ac/0x250 [ 72.991248][ T7173] ? __pfx_ksys_write+0x10/0x10 [ 72.991275][ T7173] __do_fast_syscall_32+0x13a/0x8b0 [ 72.991295][ T7173] ? lockdep_hardirqs_on+0x7d/0x110 [ 72.991312][ T7173] do_fast_syscall_32+0x32/0x70 [ 72.991328][ T7173] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.991356][ T7173] RIP: 0023:0xf6feefec [ 72.991369][ T7173] Code: Unable to access opcode bytes at 0xf6feefc2. [ 72.991373][ T7173] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 72.991384][ T7173] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000840 [ 72.991391][ T7173] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.991397][ T7173] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.991404][ T7173] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.991410][ T7173] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.991424][ T7173] [ 73.050053][ T7169] futex_wake_op: syz.3.361 tries to shift op by -1; fix this program [ 73.051219][ T7169] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 73.186489][ T7185] [ 73.187521][ T7185] ====================================================== [ 73.190173][ T7185] WARNING: possible circular locking dependency detected [ 73.193170][ T7185] syzkaller #0 Tainted: G L [ 73.195173][ T7185] ------------------------------------------------------ [ 73.197592][ T7185] syz.3.365/7185 is trying to acquire lock: [ 73.199808][ T7185] ffffffff903fe7e8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650 [ 73.203976][ T7185] [ 73.203976][ T7185] but task is already holding lock: [ 73.206621][ T7185] ffff888013781dc0 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 73.210146][ T7185] [ 73.210146][ T7185] which lock already depends on the new lock. [ 73.210146][ T7185] [ 73.213975][ T7185] [ 73.213975][ T7185] the existing dependency chain (in reverse order) is: [ 73.216887][ T7185] [ 73.216887][ T7185] -> #3 (&sb->s_type->i_mutex_key#27){++++}-{4:4}: [ 73.220063][ T7185] lock_acquire+0x1d1/0x380 [ 73.221996][ T7185] down_write+0x8b/0x1f0 [ 73.223831][ T7185] configfs_depend_item_unlocked+0xf3/0x6a0 [ 73.226182][ T7185] usbg_make_tpg+0x251/0x610 [ 73.227729][ T7185] target_fabric_make_tpg+0xab/0x8c0 [ 73.229870][ T7185] configfs_mkdir+0x525/0xd40 [ 73.231888][ T7185] vfs_mkdir+0x364/0x850 [ 73.233797][ T7185] filename_mkdirat+0x48b/0x5e0 [ 73.235887][ T7185] __ia32_sys_mkdir+0x6a/0x90 [ 73.237625][ T7185] __do_fast_syscall_32+0x13a/0x8b0 [ 73.239629][ T7185] do_fast_syscall_32+0x32/0x70 [ 73.241730][ T7185] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.244357][ T7185] [ 73.244357][ T7185] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 73.247352][ T7185] lock_acquire+0x1d1/0x380 [ 73.249310][ T7185] __mutex_lock+0x1a4/0x1bd0 [ 73.250855][ T7185] tcm_alloc_inst+0x5f/0x1e0 [ 73.252836][ T7185] try_get_usb_function_instance+0x136/0x1f0 [ 73.255458][ T7185] usb_get_function_instance+0x16/0x70 [ 73.257811][ T7185] function_make+0x18c/0x3f0 [ 73.259796][ T7185] configfs_mkdir+0x525/0xd40 [ 73.261622][ T7185] vfs_mkdir+0x364/0x850 [ 73.263235][ T7185] filename_mkdirat+0x48b/0x5e0 [ 73.265364][ T7185] __ia32_sys_mkdir+0x6a/0x90 [ 73.267394][ T7185] __do_fast_syscall_32+0x13a/0x8b0 [ 73.269372][ T7185] do_fast_syscall_32+0x32/0x70 [ 73.271217][ T7185] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.273852][ T7185] [ 73.273852][ T7185] -> #1 (func_lock){+.+.}-{4:4}: [ 73.276618][ T7185] lock_acquire+0x1d1/0x380 [ 73.278566][ T7185] __mutex_lock+0x1a4/0x1bd0 [ 73.280347][ T7185] try_get_usb_function_instance+0x26/0x1f0 [ 73.282607][ T7185] usb_get_function_instance+0x16/0x70 [ 73.284936][ T7185] function_make+0x18c/0x3f0 [ 73.286889][ T7185] configfs_mkdir+0x525/0xd40 [ 73.288940][ T7185] vfs_mkdir+0x364/0x850 [ 73.290786][ T7185] filename_mkdirat+0x48b/0x5e0 [ 73.292846][ T7185] __ia32_sys_mkdir+0x6a/0x90 [ 73.294422][ T7185] __do_fast_syscall_32+0x13a/0x8b0 [ 73.296570][ T7185] do_fast_syscall_32+0x32/0x70 [ 73.298587][ T7185] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.301149][ T7185] [ 73.301149][ T7185] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 73.304241][ T7185] check_prev_add+0xeb/0xe60 [ 73.306189][ T7185] __lock_acquire+0x1528/0x1f40 [ 73.308203][ T7185] lock_acquire+0x1d1/0x380 [ 73.310173][ T7185] __mutex_lock+0x1a4/0x1bd0 [ 73.312134][ T7185] uvcg_streaming_header_allow_link+0x7c/0x650 [ 73.314696][ T7185] configfs_symlink+0x695/0x1340 [ 73.316810][ T7185] vfs_symlink+0x178/0x4d0 [ 73.318780][ T7185] filename_symlinkat+0x2a6/0x560 [ 73.320512][ T7185] __ia32_sys_symlinkat+0x9b/0xe0 [ 73.322649][ T7185] __do_fast_syscall_32+0x13a/0x8b0 [ 73.324839][ T7185] do_fast_syscall_32+0x32/0x70 [ 73.326869][ T7185] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.329477][ T7185] [ 73.329477][ T7185] other info that might help us debug this: [ 73.329477][ T7185] [ 73.331494][ T1820] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 73.335679][ T7185] Chain exists of: [ 73.335679][ T7185] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#27 [ 73.335679][ T7185] [ 73.341171][ T7185] Possible unsafe locking scenario: [ 73.341171][ T7185] [ 73.343558][ T7185] CPU0 CPU1 [ 73.345534][ T7185] ---- ---- [ 73.347503][ T7185] lock(&sb->s_type->i_mutex_key#27); [ 73.349518][ T7185] lock(tpg_instances_lock); [ 73.352151][ T7185] lock(&sb->s_type->i_mutex_key#27); [ 73.355090][ T7185] lock(gadget_subsys.su_mutex); [ 73.357036][ T7185] [ 73.357036][ T7185] *** DEADLOCK *** [ 73.357036][ T7185] [ 73.359818][ T7185] locks held by syz.3.365/7185: 2, last CPU#0: [ 73.361760][ T7185] #0: ffff8880229d0460 (sb_writers#14){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 73.365353][ T7185] #1: ffff888013781dc0 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 73.368805][ T7185] [ 73.368805][ T7185] stack backtrace: [ 73.371063][ T7185] CPU: 0 UID: 0 PID: 7185 Comm: syz.3.365 Tainted: G L syzkaller #0 PREEMPT(full) [ 73.374729][ T7185] Tainted: [L]=SOFTLOCKUP [ 73.376011][ T7185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.379894][ T7185] Call Trace: [ 73.380893][ T7185] [ 73.381775][ T7185] dump_stack_lvl+0x100/0x190 [ 73.383500][ T7185] print_circular_bug.cold+0x178/0x1be [ 73.385642][ T7185] check_noncircular+0x146/0x160 [ 73.387558][ T7185] check_prev_add+0xeb/0xe60 [ 73.389391][ T7185] __lock_acquire+0x1528/0x1f40 [ 73.391125][ T7185] lock_acquire+0x1d1/0x380 [ 73.392464][ T7185] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 73.394875][ T7185] ? __pfx___might_resched+0x10/0x10 [ 73.396933][ T7185] __mutex_lock+0x1a4/0x1bd0 [ 73.398726][ T7185] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 73.400586][ T7185] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 73.402905][ T7185] ? __lock_acquire+0xe8b/0x1f40 [ 73.404809][ T7185] ? __pfx___mutex_lock+0x10/0x10 [ 73.406769][ T7185] ? make_vfsuid+0xec/0x140 [ 73.408387][ T7185] ? __pfx___might_resched+0x10/0x10 [ 73.410082][ T7185] ? make_vfsgid+0xf1/0x140 [ 73.411844][ T7185] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 73.414303][ T7185] ? security_inode_permission+0xbf/0x250 [ 73.416520][ T7185] uvcg_streaming_header_allow_link+0x7c/0x650 [ 73.418877][ T7185] ? inode_permission+0x374/0x620 [ 73.420386][ T7185] ? mntput_no_expire+0xe7/0x220 [ 73.422378][ T7185] configfs_symlink+0x695/0x1340 [ 73.424346][ T7185] ? bpf_lsm_inode_permission+0x9/0x10 [ 73.426159][ T7185] ? security_inode_permission+0xbf/0x250 [ 73.427965][ T7185] ? __pfx_configfs_symlink+0x10/0x10 [ 73.429600][ T7185] vfs_symlink+0x178/0x4d0 [ 73.430973][ T7185] filename_symlinkat+0x2a6/0x560 [ 73.432537][ T7185] ? __pfx_filename_symlinkat+0x10/0x10 [ 73.434192][ T7185] ? strncpy_from_user+0x19d/0x2d0 [ 73.435738][ T7185] ? do_getname+0x191/0x390 [ 73.437125][ T7185] __ia32_sys_symlinkat+0x9b/0xe0 [ 73.438656][ T7185] __do_fast_syscall_32+0x13a/0x8b0 [ 73.440230][ T7185] do_fast_syscall_32+0x32/0x70 [ 73.441703][ T7185] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.443589][ T7185] RIP: 0023:0xf7f44fec [ 73.444809][ T7185] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 73.446781][ T7185] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 73.449290][ T7185] RAX: ffffffffffffffda RBX: 0000000080001500 RCX: 00000000ffffff9c [ 73.451616][ T7185] RDX: 0000000080001600 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.453972][ T7185] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 73.456341][ T7185] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 73.458682][ T7185] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.461027][ T7185] [ 73.492200][ T1820] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 73.492944][ T1820] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.492963][ T1820] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 73.492976][ T1820] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 73.492993][ T1820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.597357][ T7190] netlink: 'syz.1.366': attribute type 2 has an invalid length. [ 73.718729][ T7176] netlink: 56 bytes leftover after parsing attributes in process `syz.0.364'. [ 73.947078][ T1820] cxacru 5-1:1.0: send of cm 0x91 failed (-71) [ 73.947094][ T1820] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 73.947100][ T1820] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 73.947846][ T1820] cxacru 5-1:1.0: probe with driver cxacru failed with error -71 [ 73.952510][ T1820] usb 5-1: USB disconnect, device number 9