last executing test programs: 2m29.310778556s ago: executing program 0 (id=3816): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2m25.82011901s ago: executing program 0 (id=3827): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, &(0x7f0000000040)="9880378312a63e112602d9670ab688dbd0d40a0f4d8b9cb3af17658e2e4f8be7a2f40caf8cadd95b1c97eda546798277b267dc15abe1a12eaf2f0ce524588df014e8d7e56e49bf5e852f0b98", 0x4c, 0x7000000, 0x0, 0x10}]) 2m25.667821591s ago: executing program 0 (id=3830): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x3adb80, 0x0) fcntl$setflags(r1, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = fspick(r0, &(0x7f00000000c0)='./file1\x00', 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00005d7000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0xfe, 0x53, 0x3, 0x58, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2={0xff, 0x5}, 0x8, 0x40, 0xe3e1, 0xcff}}) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000180)='rw\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000006c0), 0x2, 0x2) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCSMRU1(r6, 0x40047452, &(0x7f0000000000)=0x4000004) 2m25.561257984s ago: executing program 0 (id=3831): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000200), 0x2) read(r0, &(0x7f0000000400), 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140), 0x2) read(r0, &(0x7f0000000400), 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0xfa}, 0x2) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl(r2, 0x3b8f, &(0x7f00000000c0)="fd76aad6ce0925712cd85e29c778a1f24ebc49e1eb2399df82d163b67b47ed928ef3d3be0ca5fe28") syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000030400"/20, @ANYRES32=r3, @ANYBLOB="150200000000000008000a00", @ANYRES32=r5, @ANYBLOB="8d347cefb5da88ba029d5b2bb6888d9e70ca719ceacb3cb9d472ecd872aa5336a9813097ec57d4a84080aac41ca79bb2"], 0x28}, 0x1, 0xba01, 0x0, 0x40c0800}, 0x24048080) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000001000000000a00120002"], 0x30}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8800) r7 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r7, 0x0, 0x3b) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1fc}}, 0x0) socket(0x10, 0x3, 0x0) 2m22.503774064s ago: executing program 0 (id=3857): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r2 = syz_open_procfs(0x0, 0x0) getdents64(r2, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) 2m22.411131872s ago: executing program 0 (id=3858): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x37, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c850) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m6.904403365s ago: executing program 32 (id=3858): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x37, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c850) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 29.820641961s ago: executing program 1 (id=4532): r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, r0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x6, 0x1, 0x0, 0x20000000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x44}, @multicast2}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffe, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x3000, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) 29.820099941s ago: executing program 1 (id=4533): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000500)={{r1, &(0x7f00000005c0)='/f\xe6\xab\xa4yh\x8f\xe7\x7f\x11\xc1\x84\xad=\adev\'kvm\x00\xe8*4\xf6\x88\xa4p@\xcd\xcd\xb5\x1c3\b\x1a\xb3\xd9\x16C\x84\xeahpX\x10\x04`\xcc\x82)y&\xa5\xd1LE\xa0<.\xa15\xc1\x00\x16\x03^\x9c\"\xc3:\x8ewB\xee%L\xe8\x92\xab\x96\\B\xc1\xc6|\xb5VI\xc0\xa0*X?\'\xecw5G+\xe9}zA\x00\xfd\x9d\xe3h\xff+\xb3\x1d@H?\x196Pw\x8b\xe6\x92n\xbe\xf48\r\x06\a\f\xb4\xd8\x1a/6B\x10F@\xe5', 0x10200, &(0x7f00000003c0)={@_ha_fsid={[0x7, 0x3]}, {0x43, 0x9, 0x3ff, 0x8}}, 0x9, &(0x7f0000000340), &(0x7f0000000380)=0x4}, {[0x8, 0x400, 0x3, 0x4c42]}, 0x3, 0x83, &(0x7f0000000680)=""/131}) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r2 = io_uring_setup(0x21af, &(0x7f0000000280)={0x0, 0x8789, 0x400, 0x2, 0x116}) close_range(r2, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/block/sda/device/scsi_disk/0:0:0:0/max_write_same_blocks\x00', 0x2, 0x0) write$tun(r3, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x15, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000, r4}, 0x38) (async, rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r4, &(0x7f0000000080), 0x0}, 0x20) (async, rerun: 32) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000140)={{@my=0x0, 0x7f}, @local, 0x4, 0x5, 0x930, 0xb, 0x15a5000000000, 0x2, 0x1}) (async) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000180)={0x8242}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2, 0xb, 0x6, 0xfffffffffffffff9}, 0x7}, 0x20, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r8, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000004, 0x810, r8, 0x201cd000) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async, rerun: 32) rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000000)='./file0\x00') 28.861060489s ago: executing program 1 (id=4535): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180800007d00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000240), 0x4, 0x200000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x109681, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) fsopen(&(0x7f0000000040)='ceph\x00', 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40050) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) 28.700981171s ago: executing program 1 (id=4536): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/memory/auto_online_blocks\x00', 0x20202, 0xa0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000340)={0x9, @pix_mp={0x0, 0x3, 0x41564e57, 0x9, 0x6, [{0x7, 0xf}, {0x7, 0x7b}, {0x400, 0x8}, {0x3, 0x4}, {0x8, 0x67}, {0x980, 0x79a4}, {0xa23, 0xdee}, {0x0, 0x6}], 0xff, 0xe5, 0x7, 0x2, 0x5}}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfd, 0x0, 0xe}]}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000200)={0xc, r4}) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000000)={0x8, r4}) write$ppp(r2, &(0x7f0000000280)='B`', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000480)='./file0/file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000000)={0x0, 0x4, 0x7, &(0x7f0000000700)={0x11, "fd5a4451ed2abb470100270000000000000000f5ffffffffff7fff00"}}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./dev\x00', 0xa) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f00000001c0)=0x9) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r6, 0xc178fd02, &(0x7f0000000180)="040000001f0000000000000038010000000000bfab1dd966cc244e3c374b441cad7b6542100e77d4d490353faaf991e9ba") open_tree(r0, &(0x7f0000000100)='./sys/devices/system/memory/auto_online_blocks\x00', 0x9001) 28.600419119s ago: executing program 1 (id=4537): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x40, 0x1040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x23}]}}}]}, 0x3c}}, 0x0) 28.350534967s ago: executing program 1 (id=4540): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x300, 0x10, 0x3e7, 0x20, 0x1, 0x20, 0x0, &(0x7f0000000300)=[0x0], 0x1, 0x0}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) close(r1) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18090000000000000000000000faffff171200003192a13bdd33d798b086a393cf9493c541353bad1d0f0bb2f19d6fc05c1afa13f05ca5bab2c09b27", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x2c}, 0x24) 28.265428535s ago: executing program 33 (id=4540): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x300, 0x10, 0x3e7, 0x20, 0x1, 0x20, 0x0, &(0x7f0000000300)=[0x0], 0x1, 0x0}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) close(r1) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18090000000000000000000000faffff171200003192a13bdd33d798b086a393cf9493c541353bad1d0f0bb2f19d6fc05c1afa13f05ca5bab2c09b27", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x2c}, 0x24) 1.998076095s ago: executing program 3 (id=4842): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x3, r0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r1, &(0x7f0000002380)={0x18, 0xffffffffffffffda, r2, {0x40}}, 0x18) 1.828749378s ago: executing program 3 (id=4845): socket(0x10, 0x2, 0x0) socket(0xa, 0x3, 0x87) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket(0x1, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r2, &(0x7f0000000000), &(0x7f0000000600)=@udp=r3, 0x2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r6}, 0x14) syz_emit_ethernet(0xd18, &(0x7f0000000700)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xce2, 0x2b, 0x0, @private2, @local, {[], {0x2100, 0x0, 0xce2, 0x0, @gue={{0x2, 0x1, 0x3, 0x6, 0x100, @val=0x80}, "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"}}}}}}}, 0x0) 1.680893404s ago: executing program 3 (id=4847): r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5c050000", @ANYRES16=r2, @ANYBLOB="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"], 0x55c}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) (async) mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, &(0x7f0000001a80)=ANY=[@ANYBLOB='noacl']) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x7fffc, @local, 0xb}, 0x20) (async) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 1.600877644s ago: executing program 3 (id=4849): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x10, 0x3, 0x9) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffffffffffff) (fail_nth: 3) 1.4997975s ago: executing program 5 (id=4850): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) sendmmsg$inet(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)="3df974a52f545d667dfab50813087f4e5a87aa92ad82dfd62ed1b7a13725fea22328aa6b73c48d2a4479f182c0b862d25d942d0516516fe079dcccaa1ff72329a7f69982fee7293e8fe49262c449c335352361a5ca8135852ea93a295ef200000412f5a52d9e99a524021011e31c8c0da2bafd74dbda9a4e032bce983d725780f677a3e3fa1e6a849e88843c04daa04e231c8887ef7e3e01953e782acf5e8d845e883656", 0xa4}, {&(0x7f0000000380)="ce40149fb6b24a46b4f1b918749bbb0db824c476e390ed0ab217ae4c467a3e7e28742a66362e8c9f855190b8e356fdcf37a5952ec716a4c86b4d2fba20b365903c3be18eed104e2d2a6e95e745dd38af6c29170afed88b4323", 0x59}], 0x2}}], 0x1, 0x24040014) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010100}}, 0x24) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x68, r5, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6394bc11539d"}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "70853e6e9a117572dab64fe551"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "076efc49d8a47efa638cefa0282d4e5b"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r2, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1}) 1.420969575s ago: executing program 5 (id=4852): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$netlink(0x10, 0x3, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) 1.419637098s ago: executing program 3 (id=4854): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000480)=0xffff8001) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) fsopen(&(0x7f00000002c0)='xfs\x00', 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202024a0000ac0f0004001e010400cc00040008010f4c302ab5a788f052922dfdf73db9855014a59373363c15662e3daf7ed72a872fe241f81e5571b6ed9f89d376968e88e0ed4ecafb36d469a12c60156339a6bb7f19267a00399c0b65e0026e58bf7c6d06b49a7902f2f6b8d68546c3ade3db9750d6e24687312b65f0c83abd45"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/forward_delay\x00', 0x2, 0x0) write(r6, &(0x7f0000000100)='0', 0x1) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000104000002020000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0057282a12800b00010062726964676500000c0002800600060005"], 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1.347622267s ago: executing program 5 (id=4855): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) pread64(r0, &(0x7f0000000140)=""/211, 0xd3, 0x7) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x8, 0x2}) 1.260071503s ago: executing program 4 (id=4857): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x84, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x8e}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x84}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000080)="470f23fc48b8e7320000000000000f21f80f23e1f8440f014a000f2221c7c4c3fd01ce002063800000002c24f30f556797c483fd005b02ea64267b470f1fcfcf666466430f3833af00580000", 0x4c}], 0x1, 0x8, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000040)={0x8080000, 0x10e000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2af673d1}}]}, 0x38}}, 0x200000c0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x38, r10, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x7fff, 0x400, 0x1, 0x7, 0x9, 0x101, 0x101]}}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r10, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0xc63d, 0x47}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}}, 0x80) 1.259932496s ago: executing program 3 (id=4858): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) set_mempolicy(0x3, 0x0, 0x5) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000580)=0x1) (fail_nth: 2) 1.069664619s ago: executing program 4 (id=4859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd25, 0x25dfdc80, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x10000000, 0x7, 0xffeffffc}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x4c800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)='\r', 0x1}], 0x1}, 0x8004) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'veth0_to_batadv\x00', @link_local}) 1.000391762s ago: executing program 4 (id=4860): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000040000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000004e04010000000000d3400202510000004704000001ed00007b130000000000001d440200000000007a0a00fe00ffffffc3030003e1000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d87906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa57d2c93f49c47944fec01a8aa7749f3187e9efb00000000e0884160b765b07ec9ba020362310223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c0000f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e64c884e9dfed9cd413afe66bd8ee831cdb34726fe0434fbf44c7b33a853330bcaf37ba4e36705807468b37d32087e599165f1bce015145444ef5967b443222f46173cc876015b2d1874be9846f7c1653c02d2ef9a75fdc45820c69bbe1cb575f9aa21aa9d3d58bd5e5fe026142a72e24049b8400c4a28b2d5db8d5f53cb354fba19975fb0b3739baae51cb4b034993ef1463dcdba2da419b320420efdd091d7f6e83c8ac2ccc6c9392a42a33907421ab847c9590c213eda9a7e1db598a23e75a3c0933fc803ca994a86476b995c37c445f68fd99fb4d335ff00d15bc4630c993fffffe000000000000a236a791bcb6eff8d488041db6b8f2c158c2c3f4baacd0c8cc7eb1fd7fba93237e598771cf6f281aa72139"], &(0x7f00000001c0)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0xfffffbfffffffffa, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r1}, 0x0, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r3 = memfd_create(&(0x7f0000000500)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x2) ftruncate(r3, 0xffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) fanotify_mark(r4, 0x0, 0x8000041, 0xffffffffffffffff, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00') write(r4, &(0x7f0000000480)='35\x00', 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="3f000000000000001c0012800900010069706970000000000c000280060011004e220000"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0xfffc, 0x5, 0xffff, 0x0, 0xa, 0x20, 0x0, 0x2b, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@local, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x40, 0x0, 0x3, 0xbf, 0x4c}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x404408c}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x6e22, 0xfffffffc, @remote, 0x7}, 0x80, 0x0}, 0x20000000) syz_emit_ethernet(0x4a, &(0x7f0000001380)=ANY=[@ANYBLOB="aaaa09f3aaaaaaaaaaaaaaaa86dd60e0ffac00142c00fe8000000000000000000000000000bbfe8000000200000000000000000000aa2b00fbfc", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$addseals(r0, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x8000}) write$tun(r4, &(0x7f00000012c0)={@void, @void, @llc={@snap={0x1, 0xab, "bc50", 'T_y', 0x200, "7428eae5372d118d128194060e5f38d7b7cea3fc2db2d7bac2c2b31ce1aabeb8d98b261b796aba996cad29a38c1c53bd163c65b0b14e43c7cc16839959e92200a5ac218e06ecfa42b9fa7d875be93bf45dc82aaf64bff206c000e67edec33f2992d253625c3321bff05055ed722a313ed9c2c1da623ebdbfe6aeaf04bf9193f8c4cb1c4544dad47c0e610f2757a8307db7a37fd125c2719a96f47789c1e9"}}}, 0xa7) 1.000144661s ago: executing program 4 (id=4861): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x5) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x43f, 0x6, 0x80c20048}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r3}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_API_VERSION(r5, 0xae00, 0x0) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000000000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, 0x0, 0x20000000) 847.122022ms ago: executing program 4 (id=4862): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040024bd7000fcdbdf2509000000080003000c9b82c1a9ae219c04cad9fa98c3daf6985a027e36d2d459356fda4f1407cf93b7", @ANYRES32=r2, @ANYRES64], 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x4040040) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='atkbd', 0x5) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) r5 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000032c0)=ANY=[@ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) r10 = epoll_create1(0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x3f, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006480), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r6, @ANYRES16=r12, @ANYRES32, @ANYRES32=r14, @ANYRESDEC=0x0], 0x40}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) setsockopt$sock_timeval(r11, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r11, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r11, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x1, 0x10, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="8f", 0x1}], 0x1}}], 0x1, 0x4004) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)={0xa0002029}) 541.29293ms ago: executing program 4 (id=4863): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) 482.142513ms ago: executing program 5 (id=4866): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x1500, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)) r4 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_KEY(r4, 0x6a, 0x1, 0x0, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x440840, 0x0) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000100)=0x6) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 400.722331ms ago: executing program 5 (id=4868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0xfff5, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 311.064871ms ago: executing program 5 (id=4869): socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getenv(0x4201, r0, 0x7fff, &(0x7f0000000000)) ptrace$pokeuser(0x6, r0, 0x7, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) r2 = socket(0xa, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb}, 0x20) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) write(r3, &(0x7f00000000c0)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1', 0x1) 310.53297ms ago: executing program 2 (id=4871): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600000000000000000007", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 187.156122ms ago: executing program 2 (id=4872): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) 184.865879ms ago: executing program 2 (id=4873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x44, 0x2, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x17}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast1}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000) 66.608154ms ago: executing program 2 (id=4874): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x401, 0xfffffffe, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af3b5ac}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x401, 0xfffffffe, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af3b5ac}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) 706.378µs ago: executing program 2 (id=4875): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "d7a9e2d2b920716e", "6d706ad29d893c8faee6a8fef6811814", "d2d66e7a", "9e9fefe4dd5b1e91"}, 0x28) (async) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="f40010bca0d039cd3f5081c2505c9041a9cefe6485", 0x15}, {&(0x7f0000000080)="b025b48d69a339e70a01fd098ef3c2481e53f56361fef4341382082d87c5f2d506d9f5946d79cea263748cc22280cc27032b8ce3403a859a8c9814681da3fb2954ab483d00704873aa10714654dd6e6f2579e2c0225561cb85390b4efff4914e487f758b791d", 0x66}, {&(0x7f0000000100)="bb71f3b7c307992cbc3dd6135598542e74dd6e9873c088ae43c48e4bbf0e363837b47df1343708af0a497fb857871ebc325f293d38c5bb3ba144df7a6ffe4139f20698adfe88abaf0a266492", 0x4c}, {&(0x7f0000000180)="ec9ee8da3623dcdcd0b566ffecc5b7bb045b852b3c2ef27c9d3af887ab9faab559b65991342e32057ec7be76134a977131467e4f102b6b86953608293973e80a3cb6a5edc105e89db97f0e14bf7c56929095209927447cc94d9ba7e702a3", 0x5e}, {&(0x7f0000000200)="14ffbe2cdd44288953d37e99b5165bd176ff650996d26ea87fa9bd6ce8c2289c66d2a4e817f09e5f12a27765f730927b4cbf0d8e7a13ff91bf8f672403f5", 0x3e}], 0x5}, 0xc080) (async) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') pread64(r1, &(0x7f00000013c0)=""/15, 0xf, 0x404) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000a000000140002"], 0x34}}, 0x0) 0s ago: executing program 2 (id=4876): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x42002, 0x0) write(r0, &(0x7f00000002c0)='0', 0x1) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) close(0x4) syz_emit_vhci(0x0, 0x0) r2 = creat(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RVERSION(r2, 0x0, 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000480)={0x80000000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0xf000, 0x0, 0x0}, 0x58) kernel console output (not intermixed with test programs): 5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.022965][T18517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.194261][T18517] veth0_vlan: entered promiscuous mode [ 762.197800][T18517] veth1_vlan: entered promiscuous mode [ 762.216387][T18517] veth0_macvtap: entered promiscuous mode [ 762.218731][T18517] veth1_macvtap: entered promiscuous mode [ 762.227239][T18517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.233671][T18517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.263041][T11026] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.263084][T11026] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.263112][T11026] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.263140][T11026] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.325745][T14414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.325765][T14414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.355437][T14414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.355458][T14414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.364009][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 762.364028][ T43] audit: type=1400 audit(1790100561.222:2921): avc: denied { mount } for pid=18517 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 762.565115][ T43] audit: type=1400 audit(1790100561.422:2922): avc: denied { create } for pid=18649 comm="syz.5.4564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 762.565162][ T43] audit: type=1400 audit(1790100561.422:2923): avc: denied { getopt } for pid=18649 comm="syz.5.4564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 762.817549][ T43] audit: type=1400 audit(1790100561.672:2924): avc: denied { setopt } for pid=18654 comm="syz.4.4566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 762.819299][ T43] audit: type=1400 audit(1790100561.672:2925): avc: denied { connect } for pid=18654 comm="syz.4.4566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 762.832218][ T5835] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 762.837571][T18655] binder: 18654:18655 ioctl c0306201 200000000040 returned -14 [ 762.837819][T18655] binder: 18654:18655 ioctl c0306201 200000000640 returned -22 [ 762.910863][T18659] l2tp_ppp: sess 2/0: no socket in recv [ 762.992157][ T5835] usb 10-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 762.993120][ T5835] usb 10-1: config 1 has an invalid interface number: 3 but max is 0 [ 762.993142][ T5835] usb 10-1: config 1 has no interface number 0 [ 762.996078][ T5835] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.996127][ T5835] usb 10-1: Product: syz [ 762.996141][ T5835] usb 10-1: Manufacturer: syz [ 762.996155][ T5835] usb 10-1: SerialNumber: syz [ 763.006312][ T5835] usb 10-1: cannot find UAC_HEADER [ 763.051390][T14476] netdevsim netdevsim120 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.051418][T14476] netdevsim netdevsim120 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.063404][ T5835] snd-usb-audio 10-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 763.078327][T13066] udevd[13066]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 763.203156][ T5835] usb 10-1: USB disconnect, device number 2 [ 763.331534][ T67] Bluetooth: hci1: command tx timeout [ 763.738002][T18671] netlink: 'syz.5.4570': attribute type 1 has an invalid length. [ 763.802735][T18673] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 763.853069][T18673] lo speed is unknown, defaulting to 1000 [ 763.908725][T18679] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 335544320, id = 0 [ 763.952922][T18681] bridge0: port 4(syz_tun) entered blocking state [ 763.953085][T18681] bridge0: port 4(syz_tun) entered disabled state [ 763.953230][T18681] syz_tun: entered allmulticast mode [ 763.960510][T18681] syz_tun: entered promiscuous mode [ 763.962676][T18681] bridge0: port 4(syz_tun) entered blocking state [ 763.962765][T18681] bridge0: port 4(syz_tun) entered forwarding state [ 763.970904][T18681] netlink: 'syz.4.4574': attribute type 9 has an invalid length. [ 763.974282][T18681] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4574'. [ 764.129628][T18691] syzkaller0: entered promiscuous mode [ 764.129644][T18691] syzkaller0: entered allmulticast mode [ 764.132580][T18691] tipc: Started in network mode [ 764.132596][T18691] tipc: Node identity aa7aa081c7b8, cluster identity 4711 [ 764.132660][T18691] tipc: Enabled bearer , priority 0 [ 764.135603][T18691] tipc: Resetting bearer [ 764.138460][T18690] tipc: Resetting bearer [ 764.153052][T18690] tipc: Disabling bearer [ 764.224973][T18697] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 764.227002][T18697] FAULT_INJECTION: forcing a failure. [ 764.227002][T18697] name failslab, interval 1, probability 0, space 0, times 0 [ 764.227025][T18697] CPU: 3 UID: 0 PID: 18697 Comm: syz.4.4581 Tainted: G L syzkaller #0 PREEMPT(full) [ 764.227041][T18697] Tainted: [L]=SOFTLOCKUP [ 764.227065][T18697] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 764.227073][T18697] Call Trace: [ 764.227077][T18697] [ 764.227082][T18697] dump_stack_lvl+0x100/0x190 [ 764.227104][T18697] should_fail_ex.cold+0x5/0xa [ 764.227121][T18697] should_failslab+0xc2/0x120 [ 764.227137][T18697] __kmalloc_noprof+0xfc/0x840 [ 764.227150][T18697] ? tomoyo_encode2+0xfb/0x3c0 [ 764.227169][T18697] tomoyo_encode2+0xfb/0x3c0 [ 764.227185][T18697] tomoyo_encode+0x29/0x50 [ 764.227199][T18697] tomoyo_realpath_from_path+0x18c/0x690 [ 764.227217][T18697] tomoyo_path_number_perm+0x23c/0x580 [ 764.227229][T18697] ? tomoyo_path_number_perm+0x22e/0x580 [ 764.227243][T18697] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 764.227260][T18697] ? __lock_acquire+0x5c0/0x1f40 [ 764.227282][T18697] ? __fget_files+0x34/0x3d0 [ 764.227296][T18697] ? find_held_lock+0x2b/0x80 [ 764.227312][T18697] ? hook_file_ioctl_common+0x140/0x440 [ 764.227332][T18697] ? __fget_files+0x21f/0x3d0 [ 764.227348][T18697] security_file_ioctl+0xd3/0x230 [ 764.227363][T18697] __x64_sys_ioctl+0xb7/0x210 [ 764.227376][T18697] do_syscall_64+0x123/0x790 [ 764.227394][T18697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.227407][T18697] RIP: 0033:0x7f139b39e159 [ 764.227417][T18697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.227428][T18697] RSP: 002b:00007f139c2ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 764.227439][T18697] RAX: ffffffffffffffda RBX: 00007f139b625fa0 RCX: 00007f139b39e159 [ 764.227447][T18697] RDX: 00002000000000c0 RSI: 0000000000003b8f RDI: 0000000000000004 [ 764.227454][T18697] RBP: 00007f139c2ea090 R08: 0000000000000000 R09: 0000000000000000 [ 764.227460][T18697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.227467][T18697] R13: 00007f139b626038 R14: 00007f139b625fa0 R15: 00007fff4b80a5b8 [ 764.227482][T18697] [ 764.227518][T18697] ERROR: Out of memory at tomoyo_realpath_from_path. [ 764.254833][T18699] macsec0: entered promiscuous mode [ 764.255600][T18699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4582'. [ 764.263185][T18699] veth1_macvtap: left promiscuous mode [ 764.269662][T18699] macsec0 (unregistering): left promiscuous mode [ 764.312103][T18700] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A”àIƺ¥þ àø§%ùôs’§U]ï [ 764.332431][T18700] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 764.655076][ T43] audit: type=1400 audit(1790100563.512:2926): avc: denied { bind } for pid=18701 comm="syz.2.4583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 764.655312][ T43] audit: type=1400 audit(1790100563.512:2927): avc: denied { connect } for pid=18701 comm="syz.2.4583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 764.859094][ T43] audit: type=1400 audit(1790100563.712:2928): avc: denied { unmount } for pid=13095 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 764.894932][ T43] audit: type=1400 audit(1790100563.752:2929): avc: denied { ioctl } for pid=18711 comm="syz.2.4588" path="socket:[86168]" dev="sockfs" ino=86168 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 764.938225][ T43] audit: type=1400 audit(1790100563.802:2930): avc: denied { mounton } for pid=18717 comm="syz.3.4590" path="/436/trace/error_log" dev="tracefs" ino=5296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 764.943042][T18718] Can't find a SQUASHFS superblock on nullb0 [ 764.944596][T18718] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 765.045285][T18727] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4591'. [ 765.045300][T18727] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4591'. [ 765.045309][T18727] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4591'. [ 765.411519][ T67] Bluetooth: hci1: command tx timeout [ 765.781461][ T5891] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 765.934587][ T5891] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 765.935466][ T5891] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 765.935490][ T5891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.939992][ T5891] as10x_usb: device has been detected [ 765.940401][ T5891] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 765.963269][ T5891] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 765.987283][ T5891] as10x_usb: error during firmware upload part1 [ 765.987704][ T5891] Registered device Abilis Systems DVB-Titan [ 766.088828][T18763] FAULT_INJECTION: forcing a failure. [ 766.088828][T18763] name failslab, interval 1, probability 0, space 0, times 0 [ 766.088857][T18763] CPU: 3 UID: 0 PID: 18763 Comm: syz.5.4601 Tainted: G L syzkaller #0 PREEMPT(full) [ 766.088877][T18763] Tainted: [L]=SOFTLOCKUP [ 766.088882][T18763] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 766.088891][T18763] Call Trace: [ 766.088897][T18763] [ 766.088903][T18763] dump_stack_lvl+0x100/0x190 [ 766.088930][T18763] should_fail_ex.cold+0x5/0xa [ 766.088952][T18763] should_failslab+0xc2/0x120 [ 766.088970][T18763] __kmalloc_cache_noprof+0x91/0x6d0 [ 766.089020][T18763] ? inode_doinit_with_dentry+0x70b/0x1340 [ 766.089040][T18763] ? inode_doinit_with_dentry+0x7b1/0x1340 [ 766.089061][T18763] inode_doinit_with_dentry+0x7b1/0x1340 [ 766.089079][T18763] ? lockdep_count_forward_deps+0x188/0x200 [ 766.089098][T18763] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 766.089121][T18763] selinux_d_instantiate+0x26/0x40 [ 766.089137][T18763] security_d_instantiate+0x14c/0x1b0 [ 766.089157][T18763] d_splice_alias_ops+0xd7/0x15b0 [ 766.089173][T18763] ? rcu_is_watching+0x13/0xc0 [ 766.089192][T18763] ? __up_read+0x333/0x980 [ 766.089209][T18763] ? __pfx_d_splice_alias_ops+0x10/0x10 [ 766.089224][T18763] ? kernfs_iop_lookup+0x234/0x2d0 [ 766.089244][T18763] ? kernfs_iop_lookup+0x234/0x2d0 [ 766.089268][T18763] kernfs_iop_lookup+0x23f/0x2d0 [ 766.089290][T18763] __lookup_slow+0x155/0x320 [ 766.089313][T18763] lookup_slow+0x50/0x70 [ 766.089334][T18763] link_path_walk+0x1377/0x1cc0 [ 766.089355][T18763] path_openat+0x1ac/0x2440 [ 766.089376][T18763] ? __pfx_path_openat+0x10/0x10 [ 766.089398][T18763] do_file_open+0x20e/0x430 [ 766.089418][T18763] ? __pfx_do_file_open+0x10/0x10 [ 766.089442][T18763] ? __pfx_kfree_link+0x10/0x10 [ 766.089463][T18763] ? _raw_spin_unlock+0x28/0x50 [ 766.089488][T18763] ? alloc_fd+0x471/0x7a0 [ 766.089512][T18763] do_sys_openat2+0x10f/0x1e0 [ 766.089531][T18763] ? __pfx_do_sys_openat2+0x10/0x10 [ 766.089552][T18763] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 766.089576][T18763] ? __fget_files+0x21f/0x3d0 [ 766.089605][T18763] __x64_sys_openat+0x12d/0x210 [ 766.089629][T18763] ? __pfx___x64_sys_openat+0x10/0x10 [ 766.089653][T18763] ? ksys_write+0x1ac/0x250 [ 766.089679][T18763] do_syscall_64+0x123/0x790 [ 766.089729][T18763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.089748][T18763] RIP: 0033:0x7f7a9f99e159 [ 766.089762][T18763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.089779][T18763] RSP: 002b:00007f7aa07e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 766.089797][T18763] RAX: ffffffffffffffda RBX: 00007f7a9fc25fa0 RCX: 00007f7a9f99e159 [ 766.089808][T18763] RDX: 0000000000000002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 766.089817][T18763] RBP: 00007f7aa07e3090 R08: 0000000000000000 R09: 0000000000000000 [ 766.089826][T18763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 766.089835][T18763] R13: 00007f7a9fc26038 R14: 00007f7a9fc25fa0 R15: 00007fff4e8970c8 [ 766.089854][T18763] [ 766.216232][T18769] comedi comedi3: dt2817: I/O base address or length out of range [ 766.257740][T18772] bond0: entered promiscuous mode [ 766.257762][T18772] bond_slave_0: entered promiscuous mode [ 766.257967][T18772] bond_slave_1: entered promiscuous mode [ 766.342413][T18776] netlink: 'syz.5.4606': attribute type 1 has an invalid length. [ 766.406580][T18778] FAULT_INJECTION: forcing a failure. [ 766.406580][T18778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 766.406612][T18778] CPU: 2 UID: 0 PID: 18778 Comm: syz.3.4607 Tainted: G L syzkaller #0 PREEMPT(full) [ 766.406635][T18778] Tainted: [L]=SOFTLOCKUP [ 766.406642][T18778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 766.406652][T18778] Call Trace: [ 766.406659][T18778] [ 766.406667][T18778] dump_stack_lvl+0x100/0x190 [ 766.406699][T18778] should_fail_ex.cold+0x5/0xa [ 766.406722][T18778] _copy_from_user+0x2e/0xd0 [ 766.406745][T18778] core_sys_select+0x2d0/0xbb0 [ 766.406772][T18778] ? get_pid_task+0x2a/0x250 [ 766.406796][T18778] ? __pfx_core_sys_select+0x10/0x10 [ 766.406814][T18778] ? find_held_lock+0x2b/0x80 [ 766.406839][T18778] ? get_pid_task+0xfc/0x250 [ 766.406885][T18778] ? __pfx_set_user_sigmask+0x10/0x10 [ 766.406903][T18778] ? __mutex_unlock_slowpath+0x35d/0x930 [ 766.406934][T18778] do_pselect.constprop.0+0x238/0x270 [ 766.406957][T18778] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 766.406985][T18778] ? ksys_write+0x1ac/0x250 [ 766.407009][T18778] __x64_sys_pselect6+0x149/0x1c0 [ 766.407035][T18778] do_syscall_64+0x123/0x790 [ 766.407064][T18778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.407083][T18778] RIP: 0033:0x7f680cf9e159 [ 766.407099][T18778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.407115][T18778] RSP: 002b:00007f680de18028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 766.407133][T18778] RAX: ffffffffffffffda RBX: 00007f680d225fa0 RCX: 00007f680cf9e159 [ 766.407149][T18778] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 766.407158][T18778] RBP: 00007f680de18090 R08: 0000000000000000 R09: 0000000000000000 [ 766.407170][T18778] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 766.407182][T18778] R13: 00007f680d226038 R14: 00007f680d225fa0 R15: 00007ffe5ff4a3d8 [ 766.407206][T18778] [ 766.858890][T18805] syz.3.4617 (18805): drop_caches: 2 [ 767.257342][T18822] xt_IDLETIMER: timeout value is zero [ 767.258908][T18824] FAULT_INJECTION: forcing a failure. [ 767.258908][T18824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.258936][T18824] CPU: 0 UID: 0 PID: 18824 Comm: syz.4.4623 Tainted: G L syzkaller #0 PREEMPT(full) [ 767.258960][T18824] Tainted: [L]=SOFTLOCKUP [ 767.258967][T18824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 767.258978][T18824] Call Trace: [ 767.258983][T18824] [ 767.258990][T18824] dump_stack_lvl+0x100/0x190 [ 767.259020][T18824] should_fail_ex.cold+0x5/0xa [ 767.259044][T18824] _copy_to_user+0x32/0xd0 [ 767.259065][T18824] simple_read_from_buffer+0xcb/0x170 [ 767.259088][T18824] proc_fail_nth_read+0x1af/0x230 [ 767.259112][T18824] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 767.259133][T18824] ? rw_verify_area+0xce/0x6d0 [ 767.259159][T18824] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 767.259180][T18824] vfs_read+0x1e4/0xb40 [ 767.259197][T18824] ? lock_acquire+0x1d1/0x380 [ 767.259216][T18824] ? __fget_files+0x34/0x3d0 [ 767.259235][T18824] ? __pfx_vfs_read+0x10/0x10 [ 767.259251][T18824] ? find_held_lock+0x2b/0x80 [ 767.259277][T18824] ? __fget_files+0x215/0x3d0 [ 767.259300][T18824] ? __fget_files+0x21f/0x3d0 [ 767.259328][T18824] ksys_read+0x12a/0x250 [ 767.259345][T18824] ? __pfx_ksys_read+0x10/0x10 [ 767.259370][T18824] do_syscall_64+0x123/0x790 [ 767.259396][T18824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.259413][T18824] RIP: 0033:0x7f139b35e98e [ 767.259429][T18824] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 767.259444][T18824] RSP: 002b:00007f139c2e9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 767.259460][T18824] RAX: ffffffffffffffda RBX: 00007f139c2ea6c0 RCX: 00007f139b35e98e [ 767.259472][T18824] RDX: 000000000000000f RSI: 00007f139c2ea0a0 RDI: 0000000000000004 [ 767.259482][T18824] RBP: 00007f139c2ea090 R08: 0000000000000000 R09: 0000000000000000 [ 767.259494][T18824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.259504][T18824] R13: 00007f139b626038 R14: 00007f139b625fa0 R15: 00007fff4b80a5b8 [ 767.259525][T18824] [ 767.376872][T18828] syz.5.4625 (18828): drop_caches: 2 [ 767.420248][T18836] FAULT_INJECTION: forcing a failure. [ 767.420248][T18836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.420273][T18836] CPU: 1 UID: 0 PID: 18836 Comm: syz.5.4629 Tainted: G L syzkaller #0 PREEMPT(full) [ 767.420289][T18836] Tainted: [L]=SOFTLOCKUP [ 767.420294][T18836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 767.420304][T18836] Call Trace: [ 767.420310][T18836] [ 767.420318][T18836] dump_stack_lvl+0x100/0x190 [ 767.420348][T18836] should_fail_ex.cold+0x5/0xa [ 767.420372][T18836] _copy_from_user+0x2e/0xd0 [ 767.420393][T18836] kvm_vm_ioctl+0xe3b/0x42d0 [ 767.420424][T18836] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 767.420460][T18836] ? kasan_quarantine_put+0x104/0x240 [ 767.420482][T18836] ? lockdep_hardirqs_on+0x7d/0x110 [ 767.420510][T18836] ? find_held_lock+0x2b/0x80 [ 767.420535][T18836] ? tomoyo_path_number_perm+0x28f/0x580 [ 767.420554][T18836] ? tomoyo_path_number_perm+0x28f/0x580 [ 767.420591][T18836] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 767.420616][T18836] ? do_vfs_ioctl+0x226/0x13e0 [ 767.420637][T18836] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 767.420654][T18836] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 767.420679][T18836] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 767.420705][T18836] ? __fget_files+0x34/0x3d0 [ 767.420739][T18836] ? selinux_file_ioctl+0x13b/0x290 [ 767.420760][T18836] ? selinux_file_ioctl+0xb6/0x290 [ 767.420783][T18836] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 767.420806][T18836] __x64_sys_ioctl+0x18e/0x210 [ 767.420827][T18836] do_syscall_64+0x123/0x790 [ 767.420857][T18836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.420875][T18836] RIP: 0033:0x7f7a9f99e159 [ 767.420893][T18836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.420910][T18836] RSP: 002b:00007f7aa07e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 767.420929][T18836] RAX: ffffffffffffffda RBX: 00007f7a9fc25fa0 RCX: 00007f7a9f99e159 [ 767.420942][T18836] RDX: 00002000000000c0 RSI: 000000004040ae79 RDI: 0000000000000004 [ 767.420954][T18836] RBP: 00007f7aa07e3090 R08: 0000000000000000 R09: 0000000000000000 [ 767.420965][T18836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.420977][T18836] R13: 00007f7a9fc26038 R14: 00007f7a9fc25fa0 R15: 00007fff4e8970c8 [ 767.421027][T18836] [ 767.495801][ T67] Bluetooth: hci1: command tx timeout [ 767.544635][ T43] kauditd_printk_skb: 11 callbacks suppressed [ 767.544648][ T43] audit: type=1400 audit(1790100566.402:2942): avc: denied { read } for pid=18841 comm="syz.3.4631" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 767.544894][ T43] audit: type=1400 audit(1790100566.402:2943): avc: denied { open } for pid=18841 comm="syz.3.4631" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 767.546825][ T43] audit: type=1400 audit(1790100566.402:2944): avc: denied { ioctl } for pid=18841 comm="syz.3.4631" path="socket:[84910]" dev="sockfs" ino=84910 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 767.600176][ T43] audit: type=1400 audit(1790100566.452:2945): avc: denied { read } for pid=18841 comm="syz.3.4631" path="socket:[84910]" dev="sockfs" ino=84910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 767.600658][ T43] audit: type=1400 audit(1790100566.452:2946): avc: denied { map } for pid=18841 comm="syz.3.4631" path="socket:[84910]" dev="sockfs" ino=84910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 767.602347][ T43] audit: type=1400 audit(1790100566.462:2947): avc: denied { append } for pid=18841 comm="syz.3.4631" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 767.712001][T18854] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 767.789368][T18860] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 767.803583][ T5835] usb 7-1: USB disconnect, device number 5 [ 767.827325][ T5835] Unregistered device Abilis Systems DVB-Titan [ 767.830434][ T5835] as10x_usb: device has been disconnected [ 767.990401][T18875] FAULT_INJECTION: forcing a failure. [ 767.990401][T18875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.990461][T18875] CPU: 2 UID: 0 PID: 18875 Comm: syz.3.4640 Tainted: G L syzkaller #0 PREEMPT(full) [ 767.990488][T18875] Tainted: [L]=SOFTLOCKUP [ 767.990495][T18875] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 767.990520][T18875] Call Trace: [ 767.990528][T18875] [ 767.990537][T18875] dump_stack_lvl+0x100/0x190 [ 767.990566][T18875] should_fail_ex.cold+0x5/0xa [ 767.990593][T18875] _copy_from_user+0x2e/0xd0 [ 767.990617][T18875] video_usercopy+0xe71/0x1730 [ 767.990644][T18875] ? __pfx___video_do_ioctl+0x10/0x10 [ 767.990673][T18875] ? __pfx_video_usercopy+0x10/0x10 [ 767.990715][T18875] v4l2_ioctl+0x1bd/0x250 [ 767.990743][T18875] ? __pfx_v4l2_ioctl+0x10/0x10 [ 767.990771][T18875] __x64_sys_ioctl+0x18e/0x210 [ 767.990794][T18875] do_syscall_64+0x123/0x790 [ 767.990825][T18875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.990845][T18875] RIP: 0033:0x7f680cf9e159 [ 767.990861][T18875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.990880][T18875] RSP: 002b:00007f680de18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 767.990900][T18875] RAX: ffffffffffffffda RBX: 00007f680d225fa0 RCX: 00007f680cf9e159 [ 767.990913][T18875] RDX: 0000200000000080 RSI: 0000000040045612 RDI: 0000000000000003 [ 767.990926][T18875] RBP: 00007f680de18090 R08: 0000000000000000 R09: 0000000000000000 [ 767.990937][T18875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.990947][T18875] R13: 00007f680d226038 R14: 00007f680d225fa0 R15: 00007ffe5ff4a3d8 [ 767.990974][T18875] [ 768.155437][T18881] team0 (unregistering): Port device team_slave_0 removed [ 768.157842][T18881] team0 (unregistering): Port device team_slave_1 removed [ 768.230958][T18885] FAULT_INJECTION: forcing a failure. [ 768.230958][T18885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.230980][T18885] CPU: 3 UID: 0 PID: 18885 Comm: syz.4.4643 Tainted: G L syzkaller #0 PREEMPT(full) [ 768.230995][T18885] Tainted: [L]=SOFTLOCKUP [ 768.231000][T18885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 768.231007][T18885] Call Trace: [ 768.231011][T18885] [ 768.231016][T18885] dump_stack_lvl+0x100/0x190 [ 768.231037][T18885] should_fail_ex.cold+0x5/0xa [ 768.231054][T18885] _copy_from_user+0x2e/0xd0 [ 768.231067][T18885] memdup_user+0x6b/0xe0 [ 768.231079][T18885] __x64_sys_kexec_load+0x18e/0x230 [ 768.231097][T18885] do_syscall_64+0x123/0x790 [ 768.231116][T18885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.231129][T18885] RIP: 0033:0x7f139b39e159 [ 768.231139][T18885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.231150][T18885] RSP: 002b:00007f139c2ea028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 768.231161][T18885] RAX: ffffffffffffffda RBX: 00007f139b625fa0 RCX: 00007f139b39e159 [ 768.231169][T18885] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 768.231176][T18885] RBP: 00007f139c2ea090 R08: 0000000000000000 R09: 0000000000000000 [ 768.231183][T18885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.231189][T18885] R13: 00007f139b626038 R14: 00007f139b625fa0 R15: 00007fff4b80a5b8 [ 768.231203][T18885] [ 768.264812][T18887] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4644'. [ 768.264832][T18887] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4644'. [ 768.266855][T18888] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4644'. [ 768.266869][T18888] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4644'. [ 768.420068][T18890] FAULT_INJECTION: forcing a failure. [ 768.420068][T18890] name failslab, interval 1, probability 0, space 0, times 0 [ 768.420099][T18890] CPU: 0 UID: 0 PID: 18890 Comm: syz.4.4645 Tainted: G L syzkaller #0 PREEMPT(full) [ 768.420130][T18890] Tainted: [L]=SOFTLOCKUP [ 768.420135][T18890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 768.420145][T18890] Call Trace: [ 768.420153][T18890] [ 768.420161][T18890] dump_stack_lvl+0x100/0x190 [ 768.420193][T18890] should_fail_ex.cold+0x5/0xa [ 768.420218][T18890] should_failslab+0xc2/0x120 [ 768.420242][T18890] __kmalloc_noprof+0xfc/0x840 [ 768.420261][T18890] ? fuse_direct_io+0x4f1/0x26b0 [ 768.420284][T18890] fuse_direct_io+0x4f1/0x26b0 [ 768.420301][T18890] ? __lock_acquire+0x5c0/0x1f40 [ 768.420324][T18890] ? unwind_next_frame+0xbd/0x2090 [ 768.420355][T18890] ? is_bpf_text_address+0x8a/0x1a0 [ 768.420381][T18890] ? __pfx_fuse_direct_io+0x10/0x10 [ 768.420399][T18890] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 768.420418][T18890] ? is_bpf_text_address+0x94/0x1a0 [ 768.420440][T18890] ? kernel_text_address+0x8d/0x100 [ 768.420469][T18890] fuse_direct_read_iter+0x183/0x1d0 [ 768.420488][T18890] ? __pfx_fuse_direct_read_iter+0x10/0x10 [ 768.420522][T18890] ? lock_acquire+0x1d1/0x380 [ 768.420558][T18890] ? __might_fault+0xc5/0x140 [ 768.420603][T18890] fuse_file_read_iter+0x362/0x460 [ 768.420624][T18890] do_iter_readv_writev+0x616/0x930 [ 768.420654][T18890] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 768.420679][T18890] ? avc_policy_seqno+0x9/0x20 [ 768.420703][T18890] ? selinux_file_permission+0x8f/0x6d0 [ 768.420731][T18890] ? rw_verify_area+0xce/0x6d0 [ 768.420761][T18890] vfs_readv+0x4d3/0x8d0 [ 768.420784][T18890] ? __pfx_vfs_readv+0x10/0x10 [ 768.420807][T18890] ? lock_acquire+0x1d1/0x380 [ 768.420825][T18890] ? __fget_files+0x34/0x3d0 [ 768.420856][T18890] ? __fget_files+0x21f/0x3d0 [ 768.420885][T18890] ? do_preadv+0x1ac/0x270 [ 768.420901][T18890] do_preadv+0x1ac/0x270 [ 768.420919][T18890] ? __pfx_do_preadv+0x10/0x10 [ 768.420944][T18890] do_syscall_64+0x123/0x790 [ 768.420973][T18890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.421027][T18890] RIP: 0033:0x7f139b39e159 [ 768.421043][T18890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.421061][T18890] RSP: 002b:00007f139c2ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 768.421080][T18890] RAX: ffffffffffffffda RBX: 00007f139b625fa0 RCX: 00007f139b39e159 [ 768.421092][T18890] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 768.421103][T18890] RBP: 00007f139c2ea090 R08: 0000000000000002 R09: 0000000000000000 [ 768.421123][T18890] R10: 000000007fffffff R11: 0000000000000246 R12: 0000000000000001 [ 768.421135][T18890] R13: 00007f139b626038 R14: 00007f139b625fa0 R15: 00007fff4b80a5b8 [ 768.421160][T18890] [ 768.526919][T18898] lo speed is unknown, defaulting to 1000 [ 768.627696][T18902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=18902 comm=syz.3.4649 [ 768.782647][T18909] program syz.3.4651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 769.053784][ T43] audit: type=1400 audit(1790100567.902:2948): avc: denied { cmd } for pid=18919 comm="syz.4.4655" path="/dev/null" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=io_uring permissive=1 [ 769.054686][T18918] FAULT_INJECTION: forcing a failure. [ 769.054686][T18918] name failslab, interval 1, probability 0, space 0, times 0 [ 769.054718][T18918] CPU: 1 UID: 0 PID: 18918 Comm: syz.5.4654 Tainted: G L syzkaller #0 PREEMPT(full) [ 769.054742][T18918] Tainted: [L]=SOFTLOCKUP [ 769.054751][T18918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 769.054761][T18918] Call Trace: [ 769.054768][T18918] [ 769.054775][T18918] dump_stack_lvl+0x100/0x190 [ 769.054810][T18918] should_fail_ex.cold+0x5/0xa [ 769.054839][T18918] should_failslab+0xc2/0x120 [ 769.054865][T18918] __kmalloc_cache_noprof+0x91/0x6d0 [ 769.054893][T18918] ? rcu_is_watching+0x13/0xc0 [ 769.054920][T18918] ? vhost_task_create+0xee/0x370 [ 769.054943][T18918] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 769.054970][T18918] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 769.054999][T18918] vhost_task_create+0xee/0x370 [ 769.055017][T18918] ? __pfx_vhost_task_create+0x10/0x10 [ 769.055042][T18918] ? __pfx_vhost_task_fn+0x10/0x10 [ 769.055063][T18918] ? register_lock_class+0x3f/0x7b0 [ 769.055083][T18918] ? rcu_is_watching+0x13/0xc0 [ 769.055108][T18918] ? trace_contention_end+0x126/0x160 [ 769.055135][T18918] kvm_mmu_post_init_vm+0x1b3/0x360 [ 769.055160][T18918] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 769.055185][T18918] ? __pfx___mutex_lock+0x10/0x10 [ 769.055213][T18918] ? kasan_quarantine_put+0x104/0x240 [ 769.055239][T18918] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 769.055262][T18918] ? lock_acquire+0x1d1/0x380 [ 769.055282][T18918] ? do_raw_write_lock+0x11e/0x260 [ 769.055307][T18918] ? find_held_lock+0x2b/0x80 [ 769.055333][T18918] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 769.055358][T18918] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 769.055389][T18918] kvm_vcpu_ioctl+0x730/0x1700 [ 769.055417][T18918] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 769.055443][T18918] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 769.055468][T18918] ? do_vfs_ioctl+0x226/0x13e0 [ 769.055486][T18918] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 769.055505][T18918] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 769.055530][T18918] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 769.055556][T18918] ? __fget_files+0x34/0x3d0 [ 769.055591][T18918] ? selinux_file_ioctl+0x13b/0x290 [ 769.055610][T18918] ? selinux_file_ioctl+0xb6/0x290 [ 769.055641][T18918] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 769.055666][T18918] __x64_sys_ioctl+0x18e/0x210 [ 769.055688][T18918] do_syscall_64+0x123/0x790 [ 769.055717][T18918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.055735][T18918] RIP: 0033:0x7f7a9f99e159 [ 769.055751][T18918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.055769][T18918] RSP: 002b:00007f7aa07e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 769.055789][T18918] RAX: ffffffffffffffda RBX: 00007f7a9fc25fa0 RCX: 00007f7a9f99e159 [ 769.055799][T18918] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 769.055812][T18918] RBP: 00007f7aa07e3090 R08: 0000000000000000 R09: 0000000000000000 [ 769.055825][T18918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.055836][T18918] R13: 00007f7a9fc26038 R14: 00007f7a9fc25fa0 R15: 00007fff4e8970c8 [ 769.055862][T18918] [ 769.221485][T18928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4659'. [ 769.306200][T18932] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32784 sclass=netlink_audit_socket pid=18932 comm=syz.5.4660 [ 769.306443][T18932] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32800 sclass=netlink_audit_socket pid=18932 comm=syz.5.4660 [ 769.306620][T18932] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32816 sclass=netlink_audit_socket pid=18932 comm=syz.5.4660 [ 769.321175][T18932] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32832 sclass=netlink_audit_socket pid=18932 comm=syz.5.4660 [ 769.321601][T18932] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32848 sclass=netlink_audit_socket pid=18932 comm=syz.5.4660 [ 769.321797][T18932] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32864 sclass=netlink_audit_socket pid=18932 comm=syz.5.4660 [ 769.321978][T18932] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32880 sclass=netlink_audit_socket pid=18932 comm=syz.5.4660 [ 769.322170][T18932] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32896 sclass=netlink_audit_socket pid=18932 comm=syz.5.4660 [ 769.322646][T18932] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=4096 sclass=netlink_audit_socket pid=18932 comm=syz.5.4660 [ 769.524943][T18939] openvswitch: netlink: Port -2140340220 exceeds max allowable 65535 [ 769.527577][T18940] openvswitch: netlink: Port -2140340220 exceeds max allowable 65535 [ 769.575252][T18943] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 769.817690][T18960] FAULT_INJECTION: forcing a failure. [ 769.817690][T18960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.817717][T18960] CPU: 0 UID: 0 PID: 18960 Comm: syz.4.4671 Tainted: G L syzkaller #0 PREEMPT(full) [ 769.817739][T18960] Tainted: [L]=SOFTLOCKUP [ 769.817745][T18960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 769.817754][T18960] Call Trace: [ 769.817759][T18960] [ 769.817765][T18960] dump_stack_lvl+0x100/0x190 [ 769.817792][T18960] should_fail_ex.cold+0x5/0xa [ 769.817814][T18960] _copy_from_user+0x2e/0xd0 [ 769.817832][T18960] video_usercopy+0xe71/0x1730 [ 769.817856][T18960] ? __pfx___video_do_ioctl+0x10/0x10 [ 769.817880][T18960] ? __pfx_video_usercopy+0x10/0x10 [ 769.817915][T18960] v4l2_ioctl+0x1bd/0x250 [ 769.817937][T18960] ? __pfx_v4l2_ioctl+0x10/0x10 [ 769.817960][T18960] __x64_sys_ioctl+0x18e/0x210 [ 769.817978][T18960] do_syscall_64+0x123/0x790 [ 769.818002][T18960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.818017][T18960] RIP: 0033:0x7f139b39e159 [ 769.818030][T18960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.818045][T18960] RSP: 002b:00007f139c2ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 769.818068][T18960] RAX: ffffffffffffffda RBX: 00007f139b625fa0 RCX: 00007f139b39e159 [ 769.818078][T18960] RDX: 0000200000000000 RSI: 00000000c008561c RDI: 0000000000000003 [ 769.818088][T18960] RBP: 00007f139c2ea090 R08: 0000000000000000 R09: 0000000000000000 [ 769.818115][T18960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.818124][T18960] R13: 00007f139b626038 R14: 00007f139b625fa0 R15: 00007fff4b80a5b8 [ 769.818145][T18960] [ 769.899636][ T43] audit: type=1400 audit(1790100568.752:2949): avc: denied { listen } for pid=18957 comm="syz.5.4670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 769.900832][ T43] audit: type=1400 audit(1790100568.752:2950): avc: denied { setopt } for pid=18957 comm="syz.5.4670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 770.013707][T18975] syz.4.4673 (18975): drop_caches: 2 [ 770.187267][T18978] syz.4.4674 (18978): drop_caches: 2 [ 770.315140][ T43] audit: type=1400 audit(1790100569.172:2951): avc: denied { mounton } for pid=18980 comm="syz.2.4675" path="/44/file0" dev="tmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 770.376440][T18981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4675'. [ 770.376462][T18981] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4675'. [ 770.725490][T18995] FAULT_INJECTION: forcing a failure. [ 770.725490][T18995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.725515][T18995] CPU: 1 UID: 0 PID: 18995 Comm: syz.5.4681 Tainted: G L syzkaller #0 PREEMPT(full) [ 770.725530][T18995] Tainted: [L]=SOFTLOCKUP [ 770.725534][T18995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 770.725541][T18995] Call Trace: [ 770.725545][T18995] [ 770.725549][T18995] dump_stack_lvl+0x100/0x190 [ 770.725570][T18995] should_fail_ex.cold+0x5/0xa [ 770.725586][T18995] _copy_from_iter+0x1f4/0x1690 [ 770.725602][T18995] ? __asan_memset+0x23/0x50 [ 770.725614][T18995] ? __pfx__copy_from_iter+0x10/0x10 [ 770.725627][T18995] ? __pfx___alloc_skb+0x10/0x10 [ 770.725646][T18995] netlink_sendmsg+0x808/0xda0 [ 770.725662][T18995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 770.725676][T18995] ? selinux_socket_sendmsg+0x198/0x2f0 [ 770.725692][T18995] ____sys_sendmsg+0xa4d/0xbe0 [ 770.725708][T18995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 770.725723][T18995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 770.725751][T18995] ? lock_acquire+0x1d1/0x380 [ 770.725763][T18995] ? get_pid_task+0x2a/0x250 [ 770.725780][T18995] ___sys_sendmsg+0x190/0x1e0 [ 770.725792][T18995] ? __pfx____sys_sendmsg+0x10/0x10 [ 770.725803][T18995] ? get_pid_task+0x106/0x250 [ 770.725823][T18995] ? find_held_lock+0x2b/0x80 [ 770.725847][T18995] __sys_sendmsg+0x160/0x210 [ 770.725862][T18995] ? __pfx___sys_sendmsg+0x10/0x10 [ 770.725883][T18995] do_syscall_64+0x123/0x790 [ 770.725902][T18995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.725914][T18995] RIP: 0033:0x7f7a9f99e159 [ 770.725924][T18995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.725935][T18995] RSP: 002b:00007f7aa07e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 770.725947][T18995] RAX: ffffffffffffffda RBX: 00007f7a9fc25fa0 RCX: 00007f7a9f99e159 [ 770.725954][T18995] RDX: 00000000200088c2 RSI: 0000200000000340 RDI: 0000000000000003 [ 770.725961][T18995] RBP: 00007f7aa07e3090 R08: 0000000000000000 R09: 0000000000000000 [ 770.725968][T18995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.725975][T18995] R13: 00007f7a9fc26038 R14: 00007f7a9fc25fa0 R15: 00007fff4e8970c8 [ 770.725989][T18995] [ 770.778755][T18998] syzkaller0: entered promiscuous mode [ 770.778770][T18998] syzkaller0: entered allmulticast mode [ 770.784565][T18998] tipc: Started in network mode [ 770.784580][T18998] tipc: Node identity ae49fac3d81d, cluster identity 4711 [ 770.784660][T18998] tipc: Enabled bearer , priority 0 [ 770.811808][T18998] tipc: Resetting bearer [ 770.820160][T18996] tipc: Resetting bearer [ 770.839297][T18996] tipc: Disabling bearer [ 770.852006][T18999] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.907195][T19002] syz.5.4684 (19002): drop_caches: 2 [ 771.124958][T19005] syz.2.4685 (19005): drop_caches: 1 [ 771.124958][T19007] syz.2.4685 (19007): drop_caches: 1 [ 771.143282][T19005] syz.2.4685 (19005): drop_caches: 1 [ 771.201479][ T25] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 771.331588][ T25] usb 10-1: device descriptor read/64, error -71 [ 771.387639][T19018] FAULT_INJECTION: forcing a failure. [ 771.387639][T19018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.387671][T19018] CPU: 0 UID: 0 PID: 19018 Comm: syz.2.4690 Tainted: G L syzkaller #0 PREEMPT(full) [ 771.387696][T19018] Tainted: [L]=SOFTLOCKUP [ 771.387703][T19018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 771.387715][T19018] Call Trace: [ 771.387721][T19018] [ 771.387729][T19018] dump_stack_lvl+0x100/0x190 [ 771.387760][T19018] should_fail_ex.cold+0x5/0xa [ 771.387786][T19018] _copy_from_iter+0x1f4/0x1690 [ 771.387813][T19018] ? rcu_is_watching+0x13/0xc0 [ 771.387840][T19018] ? __pfx__copy_from_iter+0x10/0x10 [ 771.387860][T19018] ? __kasan_kmalloc+0xaa/0xb0 [ 771.387883][T19018] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 771.387902][T19018] ? print_kernel_ident+0x11/0x40 [ 771.387928][T19018] ? proc_sys_call_handler+0x169/0x5a0 [ 771.387953][T19018] ? proc_sys_call_handler+0x2c7/0x5a0 [ 771.387983][T19018] proc_sys_call_handler+0x3ed/0x5a0 [ 771.388010][T19018] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 771.388039][T19018] ? __lock_acquire+0x5c0/0x1f40 [ 771.388062][T19018] do_iter_readv_writev+0x6f7/0x930 [ 771.388098][T19018] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 771.388123][T19018] ? lock_acquire+0x1d1/0x380 [ 771.388142][T19018] vfs_writev+0x360/0xdd0 [ 771.388157][T19018] ? __pfx_vfs_writev+0x10/0x10 [ 771.388171][T19018] ? lock_acquire+0x1d1/0x380 [ 771.388182][T19018] ? __fget_files+0x34/0x3d0 [ 771.388201][T19018] ? __fget_files+0x21f/0x3d0 [ 771.388218][T19018] ? do_pwritev+0x1ac/0x270 [ 771.388229][T19018] do_pwritev+0x1ac/0x270 [ 771.388240][T19018] ? __pfx_do_pwritev+0x10/0x10 [ 771.388255][T19018] do_syscall_64+0x123/0x790 [ 771.388274][T19018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.388286][T19018] RIP: 0033:0x7fbcc719e159 [ 771.388296][T19018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.388307][T19018] RSP: 002b:00007fbcc80c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 771.388319][T19018] RAX: ffffffffffffffda RBX: 00007fbcc7426090 RCX: 00007fbcc719e159 [ 771.388327][T19018] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000004 [ 771.388334][T19018] RBP: 00007fbcc80c5090 R08: 0000000000000001 R09: 0000000000000000 [ 771.388341][T19018] R10: 0000000000003815 R11: 0000000000000246 R12: 0000000000000001 [ 771.388348][T19018] R13: 00007fbcc7426128 R14: 00007fbcc7426090 R15: 00007ffe67459a58 [ 771.388362][T19018] [ 771.444800][T19016] syz.2.4690 (19016): drop_caches: 1 [ 771.531234][T19016] syz.2.4690 (19016): drop_caches: 1 [ 771.573481][ T25] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 771.630657][T19030] syzkaller0: left promiscuous mode [ 771.630677][T19030] syzkaller0: left allmulticast mode [ 771.678599][T19034] Invalid logical block size (8) [ 771.680848][T19034] fuse: Bad value for 'group_id' [ 771.680864][T19034] fuse: Bad value for 'group_id' [ 771.701747][ T25] usb 10-1: device descriptor read/64, error -71 [ 771.716667][T19036] FAULT_INJECTION: forcing a failure. [ 771.716667][T19036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.716696][T19036] CPU: 2 UID: 0 PID: 19036 Comm: syz.2.4698 Tainted: G L syzkaller #0 PREEMPT(full) [ 771.716719][T19036] Tainted: [L]=SOFTLOCKUP [ 771.716726][T19036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 771.716737][T19036] Call Trace: [ 771.716743][T19036] [ 771.716750][T19036] dump_stack_lvl+0x100/0x190 [ 771.716783][T19036] should_fail_ex.cold+0x5/0xa [ 771.716812][T19036] _copy_from_user+0x2e/0xd0 [ 771.716834][T19036] lru_gen_seq_write+0x186/0x14c0 [ 771.716857][T19036] ? __lock_acquire+0x5c0/0x1f40 [ 771.716879][T19036] ? _parse_integer_limit+0x1ac/0x220 [ 771.716909][T19036] ? __pfx_lru_gen_seq_write+0x10/0x10 [ 771.716934][T19036] ? __pfx__kstrtoull+0x10/0x10 [ 771.716961][T19036] ? __might_fault+0xc5/0x140 [ 771.717012][T19036] ? look_up_lock_class+0x64/0x120 [ 771.717042][T19036] ? register_lock_class+0x3f/0x7b0 [ 771.717061][T19036] ? __lock_acquire+0x5c0/0x1f40 [ 771.717086][T19036] ? __lock_acquire+0x5c0/0x1f40 [ 771.717116][T19036] ? __debugfs_file_get+0x1fc/0x860 [ 771.717138][T19036] ? __pfx___debugfs_file_get+0x10/0x10 [ 771.717167][T19036] ? lock_acquire+0x1d1/0x380 [ 771.717187][T19036] ? ksys_write+0x12a/0x250 [ 771.717212][T19036] ? full_proxy_write+0x135/0x1a0 [ 771.717234][T19036] full_proxy_write+0x135/0x1a0 [ 771.717260][T19036] vfs_write+0x2aa/0x1050 [ 771.717282][T19036] ? __pfx_full_proxy_write+0x10/0x10 [ 771.717303][T19036] ? lock_acquire+0x1d1/0x380 [ 771.717323][T19036] ? __fget_files+0x34/0x3d0 [ 771.717346][T19036] ? __pfx_vfs_write+0x10/0x10 [ 771.717365][T19036] ? find_held_lock+0x2b/0x80 [ 771.717390][T19036] ? __fget_files+0x215/0x3d0 [ 771.717418][T19036] ? __fget_files+0x21f/0x3d0 [ 771.717450][T19036] ksys_write+0x12a/0x250 [ 771.717471][T19036] ? __pfx_ksys_write+0x10/0x10 [ 771.717498][T19036] do_syscall_64+0x123/0x790 [ 771.717524][T19036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.717544][T19036] RIP: 0033:0x7fbcc719e159 [ 771.717561][T19036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.717577][T19036] RSP: 002b:00007fbcc80e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 771.717599][T19036] RAX: ffffffffffffffda RBX: 00007fbcc7425fa0 RCX: 00007fbcc719e159 [ 771.717610][T19036] RDX: 0000000000000007 RSI: 0000200000000240 RDI: 0000000000000003 [ 771.717621][T19036] RBP: 00007fbcc80e6090 R08: 0000000000000000 R09: 0000000000000000 [ 771.717631][T19036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.717641][T19036] R13: 00007fbcc7426038 R14: 00007fbcc7425fa0 R15: 00007ffe67459a58 [ 771.717664][T19036] [ 771.815075][ T25] usb usb10-port1: attempt power cycle [ 771.816063][T19041] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 772.151421][ T25] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 772.172030][ T25] usb 10-1: device descriptor read/8, error -71 [ 772.411577][ T25] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 772.432396][ T25] usb 10-1: device descriptor read/8, error -71 [ 772.544091][ T25] usb usb10-port1: unable to enumerate USB device [ 772.679932][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 772.679944][ T43] audit: type=1400 audit(1790100571.532:2957): avc: denied { write } for pid=19084 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 772.729801][ T43] audit: type=1400 audit(1790100571.582:2958): avc: denied { write } for pid=19087 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 773.573924][ T43] audit: type=1400 audit(1790100572.432:2959): avc: denied { write } for pid=19093 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 773.640559][ T43] audit: type=1400 audit(1790100572.492:2960): avc: denied { write } for pid=19096 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 773.770195][T19106] FAULT_INJECTION: forcing a failure. [ 773.770195][T19106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.770217][T19106] CPU: 0 UID: 0 PID: 19106 Comm: syz.4.4711 Tainted: G L syzkaller #0 PREEMPT(full) [ 773.770234][T19106] Tainted: [L]=SOFTLOCKUP [ 773.770238][T19106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 773.770245][T19106] Call Trace: [ 773.770249][T19106] [ 773.770254][T19106] dump_stack_lvl+0x100/0x190 [ 773.770284][T19106] should_fail_ex.cold+0x5/0xa [ 773.770301][T19106] _copy_from_user+0x2e/0xd0 [ 773.770319][T19106] __sys_bpf+0x2f5/0x4a30 [ 773.770335][T19106] ? __pfx___sys_bpf+0x10/0x10 [ 773.770346][T19106] ? find_held_lock+0x2b/0x80 [ 773.770362][T19106] ? get_pid_task+0xfc/0x250 [ 773.770377][T19106] ? get_pid_task+0xfc/0x250 [ 773.770396][T19106] ? find_held_lock+0x2b/0x80 [ 773.770415][T19106] ? rcu_read_lock_any_held+0x6a/0x90 [ 773.770432][T19106] ? find_held_lock+0x2b/0x80 [ 773.770447][T19106] ? ksys_write+0x190/0x250 [ 773.770459][T19106] ? ksys_write+0x190/0x250 [ 773.770471][T19106] ? lock_acquire+0x1d1/0x380 [ 773.770495][T19106] ? fput+0x7c/0x100 [ 773.770510][T19106] ? ksys_write+0x1ac/0x250 [ 773.770523][T19106] ? __x64_sys_bpf+0xce/0x140 [ 773.770534][T19106] __x64_sys_bpf+0xce/0x140 [ 773.770546][T19106] ? do_syscall_64+0xae/0x790 [ 773.770567][T19106] do_syscall_64+0x123/0x790 [ 773.770585][T19106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.770597][T19106] RIP: 0033:0x7f139b39e159 [ 773.770607][T19106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.770618][T19106] RSP: 002b:00007f139c2ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 773.770630][T19106] RAX: ffffffffffffffda RBX: 00007f139b625fa0 RCX: 00007f139b39e159 [ 773.770637][T19106] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 773.770644][T19106] RBP: 00007f139c2ea090 R08: 0000000000000000 R09: 0000000000000000 [ 773.770651][T19106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.770657][T19106] R13: 00007f139b626038 R14: 00007f139b625fa0 R15: 00007fff4b80a5b8 [ 773.770671][T19106] [ 773.834967][T19112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4713'. [ 773.834987][T19112] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4713'. [ 773.839535][T19112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4713'. [ 773.839555][T19112] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4713'. [ 773.862341][ T5601] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.862369][ T5601] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.862387][ T5601] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.862637][ T5601] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.967048][T19121] FAULT_INJECTION: forcing a failure. [ 773.967048][T19121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.967072][T19121] CPU: 1 UID: 0 PID: 19121 Comm: syz.4.4714 Tainted: G L syzkaller #0 PREEMPT(full) [ 773.967088][T19121] Tainted: [L]=SOFTLOCKUP [ 773.967092][T19121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 773.967099][T19121] Call Trace: [ 773.967103][T19121] [ 773.967109][T19121] dump_stack_lvl+0x100/0x190 [ 773.967129][T19121] should_fail_ex.cold+0x5/0xa [ 773.967146][T19121] _copy_from_user+0x2e/0xd0 [ 773.967159][T19121] snd_pcm_oss_write2+0x1c2/0x400 [ 773.967186][T19121] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 773.967203][T19121] ? snd_pcm_kernel_ioctl+0x12e/0x280 [ 773.967216][T19121] ? snd_pcm_oss_prepare+0x11e/0x240 [ 773.967234][T19121] snd_pcm_oss_write+0x729/0xa30 [ 773.967252][T19121] ? security_file_permission+0x76/0x210 [ 773.967269][T19121] vfs_write+0x2aa/0x1050 [ 773.967282][T19121] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 773.967299][T19121] ? lock_acquire+0x1d1/0x380 [ 773.967312][T19121] ? __fget_files+0x34/0x3d0 [ 773.967326][T19121] ? __pfx_vfs_write+0x10/0x10 [ 773.967336][T19121] ? find_held_lock+0x2b/0x80 [ 773.967352][T19121] ? __fget_files+0x215/0x3d0 [ 773.967366][T19121] ? __fget_files+0x215/0x3d0 [ 773.967382][T19121] ? __fget_files+0x21f/0x3d0 [ 773.967400][T19121] ksys_write+0x12a/0x250 [ 773.967412][T19121] ? __pfx_ksys_write+0x10/0x10 [ 773.967428][T19121] do_syscall_64+0x123/0x790 [ 773.967447][T19121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.967459][T19121] RIP: 0033:0x7f139b39e159 [ 773.967469][T19121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.967498][T19121] RSP: 002b:00007f139c2c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 773.967511][T19121] RAX: ffffffffffffffda RBX: 00007f139b626090 RCX: 00007f139b39e159 [ 773.967518][T19121] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 773.967525][T19121] RBP: 00007f139c2c9090 R08: 0000000000000000 R09: 0000000000000000 [ 773.967532][T19121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.967539][T19121] R13: 00007f139b626128 R14: 00007f139b626090 R15: 00007fff4b80a5b8 [ 773.967553][T19121] [ 774.073644][T19125] FAULT_INJECTION: forcing a failure. [ 774.073644][T19125] name failslab, interval 1, probability 0, space 0, times 0 [ 774.073674][T19125] CPU: 3 UID: 0 PID: 19125 Comm: syz.5.4716 Tainted: G L syzkaller #0 PREEMPT(full) [ 774.073705][T19125] Tainted: [L]=SOFTLOCKUP [ 774.073711][T19125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 774.073721][T19125] Call Trace: [ 774.073727][T19125] [ 774.073735][T19125] dump_stack_lvl+0x100/0x190 [ 774.073765][T19125] should_fail_ex.cold+0x5/0xa [ 774.073790][T19125] should_failslab+0xc2/0x120 [ 774.073813][T19125] __kmalloc_cache_noprof+0x91/0x6d0 [ 774.073839][T19125] ? rcu_is_watching+0x13/0xc0 [ 774.073862][T19125] ? vhost_task_create+0xee/0x370 [ 774.073881][T19125] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 774.073905][T19125] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 774.073930][T19125] vhost_task_create+0xee/0x370 [ 774.073948][T19125] ? __pfx_vhost_task_create+0x10/0x10 [ 774.073972][T19125] ? __pfx_vhost_task_fn+0x10/0x10 [ 774.073991][T19125] ? register_lock_class+0x3f/0x7b0 [ 774.074010][T19125] ? rcu_is_watching+0x13/0xc0 [ 774.074032][T19125] ? trace_contention_end+0x126/0x160 [ 774.074059][T19125] kvm_mmu_post_init_vm+0x1b3/0x360 [ 774.074082][T19125] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 774.074105][T19125] ? __pfx___mutex_lock+0x10/0x10 [ 774.074130][T19125] ? kasan_quarantine_put+0x104/0x240 [ 774.074153][T19125] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 774.074174][T19125] ? lock_acquire+0x1d1/0x380 [ 774.074192][T19125] ? do_raw_write_lock+0x11e/0x260 [ 774.074214][T19125] ? find_held_lock+0x2b/0x80 [ 774.074237][T19125] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 774.074259][T19125] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 774.074289][T19125] kvm_vcpu_ioctl+0x730/0x1700 [ 774.074314][T19125] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 774.074338][T19125] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 774.074361][T19125] ? do_vfs_ioctl+0x226/0x13e0 [ 774.074381][T19125] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 774.074397][T19125] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 774.074422][T19125] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 774.074446][T19125] ? __fget_files+0x34/0x3d0 [ 774.074479][T19125] ? selinux_file_ioctl+0x13b/0x290 [ 774.074498][T19125] ? selinux_file_ioctl+0xb6/0x290 [ 774.074519][T19125] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 774.074545][T19125] __x64_sys_ioctl+0x18e/0x210 [ 774.074565][T19125] do_syscall_64+0x123/0x790 [ 774.074594][T19125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.074612][T19125] RIP: 0033:0x7f7a9f99e159 [ 774.074626][T19125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.074642][T19125] RSP: 002b:00007f7aa07e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 774.074660][T19125] RAX: ffffffffffffffda RBX: 00007f7a9fc25fa0 RCX: 00007f7a9f99e159 [ 774.074671][T19125] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 774.074682][T19125] RBP: 00007f7aa07e3090 R08: 0000000000000000 R09: 0000000000000000 [ 774.074697][T19125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.074707][T19125] R13: 00007f7a9fc26038 R14: 00007f7a9fc25fa0 R15: 00007fff4e8970c8 [ 774.074732][T19125] [ 774.230429][T19131] program syz.5.4720 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 774.266276][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 774.401150][ T43] audit: type=1400 audit(1790100573.252:2961): avc: denied { mounton } for pid=19142 comm="syz.5.4725" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 774.410880][T19144] syz.5.4725: attempt to access beyond end of device [ 774.410880][T19144] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 774.410901][T19144] gfs2: error -5 reading superblock [ 774.554877][ T5752] Bluetooth: hci1: hcon ffff88803be14000 sent 1 < count 65532 [ 774.581804][ T5752] Bluetooth: hci1: hcon ffff88803be14000 sent 0 < count 65532 [ 774.592505][ T1133] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 774.603096][ T1133] ata1.00: configured for UDMA/100 [ 774.638015][T19157] FAULT_INJECTION: forcing a failure. [ 774.638015][T19157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 774.638049][T19157] CPU: 0 UID: 0 PID: 19157 Comm: syz.4.4729 Tainted: G L syzkaller #0 PREEMPT(full) [ 774.638077][T19157] Tainted: [L]=SOFTLOCKUP [ 774.638085][T19157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 774.638096][T19157] Call Trace: [ 774.638103][T19157] [ 774.638112][T19157] dump_stack_lvl+0x100/0x190 [ 774.638147][T19157] should_fail_ex.cold+0x5/0xa [ 774.638185][T19157] _copy_from_user+0x2e/0xd0 [ 774.638210][T19157] lru_gen_seq_write+0x186/0x14c0 [ 774.638240][T19157] ? __lock_acquire+0x5c0/0x1f40 [ 774.638262][T19157] ? _parse_integer_limit+0x1ac/0x220 [ 774.638292][T19157] ? __pfx_lru_gen_seq_write+0x10/0x10 [ 774.638319][T19157] ? __pfx__kstrtoull+0x10/0x10 [ 774.638348][T19157] ? __might_fault+0xc5/0x140 [ 774.638377][T19157] ? look_up_lock_class+0x64/0x120 [ 774.638407][T19157] ? register_lock_class+0x3f/0x7b0 [ 774.638428][T19157] ? __lock_acquire+0x5c0/0x1f40 [ 774.638455][T19157] ? __lock_acquire+0x5c0/0x1f40 [ 774.638490][T19157] ? __debugfs_file_get+0x1fc/0x860 [ 774.638514][T19157] ? __pfx___debugfs_file_get+0x10/0x10 [ 774.638538][T19157] ? lock_acquire+0x1d1/0x380 [ 774.638560][T19157] ? ksys_write+0x12a/0x250 [ 774.638584][T19157] ? full_proxy_write+0x135/0x1a0 [ 774.638608][T19157] full_proxy_write+0x135/0x1a0 [ 774.638635][T19157] vfs_write+0x2aa/0x1050 [ 774.638657][T19157] ? __pfx_full_proxy_write+0x10/0x10 [ 774.638681][T19157] ? lock_acquire+0x1d1/0x380 [ 774.638701][T19157] ? __fget_files+0x34/0x3d0 [ 774.638725][T19157] ? __pfx_vfs_write+0x10/0x10 [ 774.638744][T19157] ? find_held_lock+0x2b/0x80 [ 774.638772][T19157] ? __fget_files+0x215/0x3d0 [ 774.638801][T19157] ? __fget_files+0x21f/0x3d0 [ 774.638832][T19157] ksys_write+0x12a/0x250 [ 774.638853][T19157] ? __pfx_ksys_write+0x10/0x10 [ 774.638881][T19157] do_syscall_64+0x123/0x790 [ 774.638912][T19157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.638930][T19157] RIP: 0033:0x7f139b39e159 [ 774.638945][T19157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.638961][T19157] RSP: 002b:00007f139c2ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 774.638979][T19157] RAX: ffffffffffffffda RBX: 00007f139b625fa0 RCX: 00007f139b39e159 [ 774.638991][T19157] RDX: 0000000000000007 RSI: 0000200000000240 RDI: 0000000000000003 [ 774.639002][T19157] RBP: 00007f139c2ea090 R08: 0000000000000000 R09: 0000000000000000 [ 774.639013][T19157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.639023][T19157] R13: 00007f139b626038 R14: 00007f139b625fa0 R15: 00007fff4b80a5b8 [ 774.639039][T19157] [ 774.873241][T19163] FAULT_INJECTION: forcing a failure. [ 774.873241][T19163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 774.873273][T19163] CPU: 2 UID: 0 PID: 19163 Comm: syz.4.4731 Tainted: G L syzkaller #0 PREEMPT(full) [ 774.873295][T19163] Tainted: [L]=SOFTLOCKUP [ 774.873301][T19163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 774.873311][T19163] Call Trace: [ 774.873317][T19163] [ 774.873324][T19163] dump_stack_lvl+0x100/0x190 [ 774.873356][T19163] should_fail_ex.cold+0x5/0xa [ 774.873383][T19163] _copy_from_user+0x2e/0xd0 [ 774.873405][T19163] video_usercopy+0xe71/0x1730 [ 774.873429][T19163] ? __pfx___video_do_ioctl+0x10/0x10 [ 774.873452][T19163] ? __pfx_video_usercopy+0x10/0x10 [ 774.873493][T19163] v4l2_ioctl+0x1bd/0x250 [ 774.873521][T19163] ? __pfx_v4l2_ioctl+0x10/0x10 [ 774.873555][T19163] __x64_sys_ioctl+0x18e/0x210 [ 774.873579][T19163] do_syscall_64+0x123/0x790 [ 774.873626][T19163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.873647][T19163] RIP: 0033:0x7f139b39e159 [ 774.873664][T19163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.873681][T19163] RSP: 002b:00007f139c2ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 774.873700][T19163] RAX: ffffffffffffffda RBX: 00007f139b625fa0 RCX: 00007f139b39e159 [ 774.873712][T19163] RDX: 0000200000000400 RSI: 00000000c008561c RDI: 0000000000000003 [ 774.873724][T19163] RBP: 00007f139c2ea090 R08: 0000000000000000 R09: 0000000000000000 [ 774.873737][T19163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.873748][T19163] R13: 00007f139b626038 R14: 00007f139b625fa0 R15: 00007fff4b80a5b8 [ 774.873775][T19163] [ 775.093759][T19174] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 775.150143][T19179] xt_hashlimit: size too large, truncated to 1048576 [ 775.441242][T19207] FAULT_INJECTION: forcing a failure. [ 775.441242][T19207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.441366][T19207] CPU: 3 UID: 0 PID: 19207 Comm: syz.4.4745 Tainted: G L syzkaller #0 PREEMPT(full) [ 775.441389][T19207] Tainted: [L]=SOFTLOCKUP [ 775.441398][T19207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 775.441409][T19207] Call Trace: [ 775.441415][T19207] [ 775.441422][T19207] dump_stack_lvl+0x100/0x190 [ 775.441452][T19207] should_fail_ex.cold+0x5/0xa [ 775.441479][T19207] _copy_from_user+0x2e/0xd0 [ 775.441500][T19207] dvb_usercopy+0x27e/0x340 [ 775.441516][T19207] ? __pfx_dvb_frontend_do_ioctl+0x10/0x10 [ 775.441538][T19207] ? __pfx_dvb_usercopy+0x10/0x10 [ 775.441547][T19207] ? __fget_files+0x34/0x3d0 [ 775.441567][T19207] ? selinux_file_ioctl+0x13b/0x290 [ 775.441580][T19207] ? selinux_file_ioctl+0xb6/0x290 [ 775.441594][T19207] dvb_frontend_ioctl+0x50/0x80 [ 775.441610][T19207] ? __pfx_dvb_frontend_ioctl+0x10/0x10 [ 775.441626][T19207] __x64_sys_ioctl+0x18e/0x210 [ 775.441639][T19207] do_syscall_64+0x123/0x790 [ 775.441657][T19207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.441669][T19207] RIP: 0033:0x7f139b39e159 [ 775.441679][T19207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.441690][T19207] RSP: 002b:00007f139c2ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 775.441702][T19207] RAX: ffffffffffffffda RBX: 00007f139b625fa0 RCX: 00007f139b39e159 [ 775.441709][T19207] RDX: 0000200000000100 RSI: 0000000040106f52 RDI: 0000000000000003 [ 775.441716][T19207] RBP: 00007f139c2ea090 R08: 0000000000000000 R09: 0000000000000000 [ 775.441723][T19207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.441730][T19207] R13: 00007f139b626038 R14: 00007f139b625fa0 R15: 00007fff4b80a5b8 [ 775.441744][T19207] [ 775.467123][T19210] FAULT_INJECTION: forcing a failure. [ 775.467123][T19210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.467144][T19210] CPU: 1 UID: 0 PID: 19210 Comm: syz.4.4746 Tainted: G L syzkaller #0 PREEMPT(full) [ 775.467160][T19210] Tainted: [L]=SOFTLOCKUP [ 775.467166][T19210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 775.467174][T19210] Call Trace: [ 775.467179][T19210] [ 775.467184][T19210] dump_stack_lvl+0x100/0x190 [ 775.467205][T19210] should_fail_ex.cold+0x5/0xa [ 775.467221][T19210] _copy_from_iter+0x1f4/0x1690 [ 775.467237][T19210] ? __asan_memset+0x23/0x50 [ 775.467249][T19210] ? __pfx__copy_from_iter+0x10/0x10 [ 775.467262][T19210] ? __pfx___alloc_skb+0x10/0x10 [ 775.467281][T19210] netlink_sendmsg+0x808/0xda0 [ 775.467298][T19210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.467312][T19210] ? selinux_socket_sendmsg+0x198/0x2f0 [ 775.467327][T19210] ____sys_sendmsg+0xa4d/0xbe0 [ 775.467344][T19210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.467359][T19210] ? __pfx_____sys_sendmsg+0x10/0x10 [ 775.467379][T19210] ? lock_acquire+0x1d1/0x380 [ 775.467392][T19210] ? get_pid_task+0x2a/0x250 [ 775.467409][T19210] ___sys_sendmsg+0x190/0x1e0 [ 775.467421][T19210] ? __pfx____sys_sendmsg+0x10/0x10 [ 775.467432][T19210] ? get_pid_task+0x106/0x250 [ 775.467452][T19210] ? find_held_lock+0x2b/0x80 [ 775.467477][T19210] __sys_sendmsg+0x160/0x210 [ 775.467492][T19210] ? __pfx___sys_sendmsg+0x10/0x10 [ 775.467514][T19210] do_syscall_64+0x123/0x790 [ 775.467532][T19210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.467544][T19210] RIP: 0033:0x7f139b39e159 [ 775.467557][T19210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.467572][T19210] RSP: 002b:00007f139c2ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.467592][T19210] RAX: ffffffffffffffda RBX: 00007f139b625fa0 RCX: 00007f139b39e159 [ 775.467605][T19210] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 775.467616][T19210] RBP: 00007f139c2ea090 R08: 0000000000000000 R09: 0000000000000000 [ 775.467627][T19210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.467637][T19210] R13: 00007f139b626038 R14: 00007f139b625fa0 R15: 00007fff4b80a5b8 [ 775.467662][T19210] [ 775.506005][T19212] device-mapper: table: 248:4: zero-length target [ 775.506022][T19212] device-mapper: ioctl: error adding target to table [ 775.631428][ T25] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 775.791377][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 775.791969][ T25] usb 10-1: New USB device found, idVendor=008a, idProduct=a000, bcdDevice= 9.02 [ 775.793238][ T25] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 775.793263][ T25] usb 10-1: can't read configurations, error -61 [ 775.798119][T19219] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 775.798204][T19219] CIFS: VFS: Malformed UNC in devname [ 775.892117][T19221] FAULT_INJECTION: forcing a failure. [ 775.892117][T19221] name failslab, interval 1, probability 0, space 0, times 0 [ 775.892154][T19221] CPU: 0 UID: 0 PID: 19221 Comm: syz.3.4750 Tainted: G L syzkaller #0 PREEMPT(full) [ 775.892174][T19221] Tainted: [L]=SOFTLOCKUP [ 775.892180][T19221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 775.892189][T19221] Call Trace: [ 775.892195][T19221] [ 775.892201][T19221] dump_stack_lvl+0x100/0x190 [ 775.892228][T19221] should_fail_ex.cold+0x5/0xa [ 775.892250][T19221] should_failslab+0xc2/0x120 [ 775.892269][T19221] kmem_cache_alloc_noprof+0x92/0x6a0 [ 775.892287][T19221] ? alloc_empty_file+0x5b/0x1c0 [ 775.892311][T19221] alloc_empty_file+0x5b/0x1c0 [ 775.892332][T19221] path_openat+0xdb/0x2440 [ 775.892354][T19221] ? __pfx_path_openat+0x10/0x10 [ 775.892378][T19221] do_file_open+0x20e/0x430 [ 775.892398][T19221] ? __pfx_do_file_open+0x10/0x10 [ 775.892430][T19221] ? _raw_spin_unlock+0x28/0x50 [ 775.892449][T19221] ? alloc_fd+0x471/0x7a0 [ 775.892473][T19221] do_sys_openat2+0x10f/0x1e0 [ 775.892494][T19221] ? __pfx_do_sys_openat2+0x10/0x10 [ 775.892515][T19221] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 775.892539][T19221] ? __fget_files+0x21f/0x3d0 [ 775.892560][T19221] __x64_sys_openat+0x12d/0x210 [ 775.892581][T19221] ? __pfx___x64_sys_openat+0x10/0x10 [ 775.892601][T19221] ? ksys_write+0x1ac/0x250 [ 775.892634][T19221] do_syscall_64+0x123/0x790 [ 775.892658][T19221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.892674][T19221] RIP: 0033:0x7f680cf9e159 [ 775.892687][T19221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.892701][T19221] RSP: 002b:00007f680de18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 775.892717][T19221] RAX: ffffffffffffffda RBX: 00007f680d225fa0 RCX: 00007f680cf9e159 [ 775.892727][T19221] RDX: 0000000000000000 RSI: 0000200000002180 RDI: ffffffffffffff9c [ 775.892737][T19221] RBP: 00007f680de18090 R08: 0000000000000000 R09: 0000000000000000 [ 775.892745][T19221] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 775.892754][T19221] R13: 00007f680d226038 R14: 00007f680d225fa0 R15: 00007ffe5ff4a3d8 [ 775.892773][T19221] [ 775.941516][ T25] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 776.091454][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 776.092465][ T25] usb 10-1: New USB device found, idVendor=008a, idProduct=a000, bcdDevice= 9.02 [ 776.093800][ T25] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 776.093830][ T25] usb 10-1: can't read configurations, error -61 [ 776.094328][ T25] usb usb10-port1: attempt power cycle [ 776.291408][ T5752] Bluetooth: hci4: command 0x1003 tx timeout [ 776.291430][ T67] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 776.419662][T19226] FAULT_INJECTION: forcing a failure. [ 776.419662][T19226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 776.419684][T19226] CPU: 1 UID: 0 PID: 19226 Comm: syz.2.4752 Tainted: G L syzkaller #0 PREEMPT(full) [ 776.419699][T19226] Tainted: [L]=SOFTLOCKUP [ 776.419704][T19226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 776.419711][T19226] Call Trace: [ 776.419715][T19226] [ 776.419720][T19226] dump_stack_lvl+0x100/0x190 [ 776.419741][T19226] should_fail_ex.cold+0x5/0xa [ 776.419777][T19226] _copy_from_user+0x2e/0xd0 [ 776.419792][T19226] snd_pcm_common_ioctl+0x61d/0x3490 [ 776.419807][T19226] ? do_vfs_ioctl+0x226/0x13e0 [ 776.419819][T19226] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 776.419831][T19226] ? __pfx_snd_pcm_common_ioctl+0x10/0x10 [ 776.419854][T19226] snd_pcm_ioctl+0x84/0xc0 [ 776.419865][T19226] ? __pfx_snd_pcm_ioctl+0x10/0x10 [ 776.419878][T19226] __x64_sys_ioctl+0x18e/0x210 [ 776.419891][T19226] do_syscall_64+0x123/0x790 [ 776.419909][T19226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.419922][T19226] RIP: 0033:0x7fbcc719e159 [ 776.419932][T19226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.419943][T19226] RSP: 002b:00007fbcc80e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 776.419955][T19226] RAX: ffffffffffffffda RBX: 00007fbcc7425fa0 RCX: 00007fbcc719e159 [ 776.419963][T19226] RDX: 0000200000000a40 RSI: 0000000040184152 RDI: 0000000000000003 [ 776.419970][T19226] RBP: 00007fbcc80e6090 R08: 0000000000000000 R09: 0000000000000000 [ 776.419985][T19226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.419991][T19226] R13: 00007fbcc7426038 R14: 00007fbcc7425fa0 R15: 00007ffe67459a58 [ 776.420006][T19226] [ 776.431735][ T25] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 776.491453][ T43] audit: type=1400 audit(1790100575.342:2962): avc: denied { write } for pid=19229 comm="syz.2.4754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 776.504821][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 776.505265][ T25] usb 10-1: New USB device found, idVendor=008a, idProduct=a000, bcdDevice= 9.02 [ 776.506490][ T25] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 776.506506][ T25] usb 10-1: can't read configurations, error -61 [ 776.641346][ T25] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 776.661916][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 776.662399][ T25] usb 10-1: New USB device found, idVendor=008a, idProduct=a000, bcdDevice= 9.02 [ 776.663724][ T25] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 776.663752][ T25] usb 10-1: can't read configurations, error -61 [ 776.663939][ T25] usb usb10-port1: unable to enumerate USB device [ 776.721680][T18499] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 776.755906][T12881] wiimote 0005:057E:0330.0060: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 776.759374][T12881] wiimote 0005:057E:0330.0060: New device registered [ 776.763033][T19235] wiimote 0005:057E:0330.0060: Device removed [ 777.054794][T19239] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 777.086769][T18499] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 777.089793][T18499] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 777.089828][T18499] usb 7-1: can't read configurations, error -71 [ 777.163607][T19245] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.4760'. [ 777.164163][T19245] syz0: rxe_newlink: already configured on lo [ 777.197584][T19247] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4761'. [ 777.199185][T19247] netlink: 'syz.4.4761': attribute type 1 has an invalid length. [ 777.253559][T19248] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4761'. [ 777.355137][ T43] audit: type=1800 audit(1790100576.212:2963): pid=19252 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.4763" name=8006 dev="sda1" ino=2050 res=0 errno=0 [ 777.424056][T19257] FAULT_INJECTION: forcing a failure. [ 777.424056][T19257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.424078][T19257] CPU: 3 UID: 0 PID: 19257 Comm: syz.4.4765 Tainted: G L syzkaller #0 PREEMPT(full) [ 777.424093][T19257] Tainted: [L]=SOFTLOCKUP [ 777.424097][T19257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 777.424104][T19257] Call Trace: [ 777.424109][T19257] [ 777.424114][T19257] dump_stack_lvl+0x100/0x190 [ 777.424135][T19257] should_fail_ex.cold+0x5/0xa [ 777.424152][T19257] _copy_from_user+0x2e/0xd0 [ 777.424166][T19257] kstrtouint_from_user+0xd6/0x1d0 [ 777.424183][T19257] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 777.424202][T19257] ? lock_acquire+0x1d1/0x380 [ 777.424221][T19257] proc_fail_nth_write+0x83/0x220 [ 777.424236][T19257] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 777.424255][T19257] vfs_write+0x2aa/0x1050 [ 777.424313][T19257] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 777.424340][T19257] ? lock_acquire+0x1d1/0x380 [ 777.424352][T19257] ? __fget_files+0x34/0x3d0 [ 777.424367][T19257] ? __pfx_vfs_write+0x10/0x10 [ 777.424378][T19257] ? find_held_lock+0x2b/0x80 [ 777.424394][T19257] ? __fget_files+0x215/0x3d0 [ 777.424411][T19257] ? __fget_files+0x21f/0x3d0 [ 777.424429][T19257] ksys_write+0x12a/0x250 [ 777.424441][T19257] ? __pfx_ksys_write+0x10/0x10 [ 777.424458][T19257] do_syscall_64+0x123/0x790 [ 777.424488][T19257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.424501][T19257] RIP: 0033:0x7f139b35e98e [ 777.424512][T19257] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 777.424523][T19257] RSP: 002b:00007f139c2e9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 777.424642][T19257] RAX: ffffffffffffffda RBX: 00007f139c2ea6c0 RCX: 00007f139b35e98e [ 777.424650][T19257] RDX: 0000000000000001 RSI: 00007f139c2ea0a0 RDI: 0000000000000004 [ 777.424657][T19257] RBP: 00007f139c2ea090 R08: 0000000000000000 R09: 0000000000000000 [ 777.424668][T19257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.424677][T19257] R13: 00007f139b626038 R14: 00007f139b625fa0 R15: 00007fff4b80a5b8 [ 777.424707][T19257] [ 777.469778][ T43] audit: type=1400 audit(1790100576.322:2964): avc: denied { mount } for pid=19258 comm="syz.4.4766" name="/" dev="configfs" ino=2092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 777.628112][T19264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4768'. [ 777.628320][T19265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4768'. [ 777.778081][ T43] audit: type=1400 audit(1790100576.632:2965): avc: denied { write } for pid=19271 comm="syz.2.4771" name="functions" dev="configfs" ino=11565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 777.778118][ T43] audit: type=1400 audit(1790100576.632:2966): avc: denied { create } for pid=19271 comm="syz.2.4771" name="midi2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 777.811542][T12881] wiimote 0005:057E:0330.0060: detected device: Nintendo Wii Remote Plus (Gen 2) [ 777.817540][T12881] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0060/input/input271 [ 777.828646][T12881] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0060/input/input272 [ 777.830478][T12881] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0060/input/input270 [ 777.864670][ T43] audit: type=1400 audit(1790100576.722:2967): avc: denied { unmount } for pid=18004 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 777.934360][T19279] nvme nvme0: failed to connect socket: -101 [ 778.182838][T19288] FAULT_INJECTION: forcing a failure. [ 778.182838][T19288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.182871][T19288] CPU: 2 UID: 0 PID: 19288 Comm: syz.2.4775 Tainted: G L syzkaller #0 PREEMPT(full) [ 778.182901][T19288] Tainted: [L]=SOFTLOCKUP [ 778.182924][T19288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 778.182938][T19288] Call Trace: [ 778.182945][T19288] [ 778.182953][T19288] dump_stack_lvl+0x100/0x190 [ 778.182986][T19288] should_fail_ex.cold+0x5/0xa [ 778.183013][T19288] _copy_to_user+0x32/0xd0 [ 778.183037][T19288] simple_read_from_buffer+0xcb/0x170 [ 778.183064][T19288] proc_fail_nth_read+0x1af/0x230 [ 778.183090][T19288] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 778.183115][T19288] ? rw_verify_area+0xce/0x6d0 [ 778.183144][T19288] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 778.183165][T19288] vfs_read+0x1e4/0xb40 [ 778.183184][T19288] ? lock_acquire+0x1d1/0x380 [ 778.183203][T19288] ? __fget_files+0x34/0x3d0 [ 778.183225][T19288] ? __pfx_vfs_read+0x10/0x10 [ 778.183244][T19288] ? find_held_lock+0x2b/0x80 [ 778.183270][T19288] ? __fget_files+0x215/0x3d0 [ 778.183297][T19288] ? __fget_files+0x21f/0x3d0 [ 778.183327][T19288] ksys_read+0x12a/0x250 [ 778.183348][T19288] ? __pfx_ksys_read+0x10/0x10 [ 778.183374][T19288] do_syscall_64+0x123/0x790 [ 778.183404][T19288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.183423][T19288] RIP: 0033:0x7fbcc715e98e [ 778.183438][T19288] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 778.183453][T19288] RSP: 002b:00007fbcc80e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 778.183472][T19288] RAX: ffffffffffffffda RBX: 00007fbcc80e66c0 RCX: 00007fbcc715e98e [ 778.183485][T19288] RDX: 000000000000000f RSI: 00007fbcc80e60a0 RDI: 0000000000000004 [ 778.183497][T19288] RBP: 00007fbcc80e6090 R08: 0000000000000000 R09: 0000000000000000 [ 778.183509][T19288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.183520][T19288] R13: 00007fbcc7426038 R14: 00007fbcc7425fa0 R15: 00007ffe67459a58 [ 778.183544][T19288] [ 778.354220][T19290] device-mapper: table: 248:4: zero-length target [ 778.354237][T19290] device-mapper: ioctl: error adding target to table [ 778.390519][ T43] audit: type=1400 audit(1790100577.242:2968): avc: denied { setopt } for pid=19292 comm="syz.5.4777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 778.577364][T19295] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 778.741406][ T5891] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 778.902672][ T5891] usb 10-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 778.903517][ T5891] usb 10-1: config 1 has an invalid interface number: 3 but max is 0 [ 778.903531][ T5891] usb 10-1: config 1 has no interface number 0 [ 778.906744][ T5891] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.906765][ T5891] usb 10-1: Product: syz [ 778.906776][ T5891] usb 10-1: Manufacturer: syz [ 778.906788][ T5891] usb 10-1: SerialNumber: syz [ 778.914518][ T5891] usb 10-1: 3:1 : does not exist [ 778.914531][ T5891] usb 10-1: 3:2 : does not exist [ 778.981137][T19309] smpboot: CPU 1 is now offline [ 779.048473][T19309] smpboot: CPU 3 is now offline [ 779.067668][T19311] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 779.077395][ T35] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 779.094737][T19311] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 779.115436][ T5891] usb 10-1: USB disconnect, device number 11 [ 779.162371][T19314] FAULT_INJECTION: forcing a failure. [ 779.162371][T19314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 779.162402][T19314] CPU: 1 UID: 0 PID: 19314 Comm: syz.2.4785 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.162426][T19314] Tainted: [L]=SOFTLOCKUP [ 779.162433][T19314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 779.162442][T19314] Call Trace: [ 779.162449][T19314] [ 779.162456][T19314] dump_stack_lvl+0x100/0x190 [ 779.162486][T19314] should_fail_ex.cold+0x5/0xa [ 779.162510][T19314] _copy_from_user+0x2e/0xd0 [ 779.162530][T19314] blkdev_common_ioctl+0x314/0x2b80 [ 779.162555][T19314] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 779.162580][T19314] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 779.162601][T19314] ? do_vfs_ioctl+0x226/0x13e0 [ 779.162642][T19314] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 779.162658][T19314] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 779.162682][T19314] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 779.162706][T19314] ? __fget_files+0x34/0x3d0 [ 779.162733][T19314] blkdev_ioctl+0x43b/0x6f0 [ 779.162754][T19314] ? __pfx_blkdev_ioctl+0x10/0x10 [ 779.162773][T19314] ? selinux_file_ioctl+0x13b/0x290 [ 779.162792][T19314] ? selinux_file_ioctl+0xb6/0x290 [ 779.162813][T19314] ? __pfx_blkdev_ioctl+0x10/0x10 [ 779.162834][T19314] __x64_sys_ioctl+0x18e/0x210 [ 779.162854][T19314] do_syscall_64+0x123/0x790 [ 779.162881][T19314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.162900][T19314] RIP: 0033:0x7fbcc719e159 [ 779.162916][T19314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.162933][T19314] RSP: 002b:00007fbcc80e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 779.162952][T19314] RAX: ffffffffffffffda RBX: 00007fbcc7425fa0 RCX: 00007fbcc719e159 [ 779.162965][T19314] RDX: 0000200000000000 RSI: 000000000000127f RDI: 0000000000000004 [ 779.162977][T19314] RBP: 00007fbcc80e6090 R08: 0000000000000000 R09: 0000000000000000 [ 779.162989][T19314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.163000][T19314] R13: 00007fbcc7426038 R14: 00007fbcc7425fa0 R15: 00007ffe67459a58 [ 779.163031][T19314] [ 779.242211][ T35] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 779.248837][ T35] usb 9-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 779.248856][ T35] usb 9-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 779.248868][ T35] usb 9-1: config 0 interface 0 has no altsetting 0 [ 779.250512][ T35] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 779.250535][ T35] usb 9-1: Product: syz [ 779.250548][ T35] usb 9-1: Manufacturer: syz [ 779.250561][ T35] usb 9-1: SerialNumber: syz [ 779.252680][ T35] usb 9-1: config 0 descriptor?? [ 779.253469][T19307] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 779.261876][ T35] usb 9-1: selecting invalid altsetting 0 [ 779.458871][ T5851] usb 9-1: USB disconnect, device number 14 [ 779.531501][T18499] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 779.670765][T19318] device-mapper: table: 248:4: zero-length target [ 779.670782][T19318] device-mapper: ioctl: error adding target to table [ 779.702000][T18499] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 779.702812][T18499] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 779.702827][T18499] usb 7-1: config 0 interface 0 has no altsetting 0 [ 779.704341][T18499] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 779.704353][T18499] usb 7-1: Product: syz [ 779.704361][T18499] usb 7-1: Manufacturer: syz [ 779.704368][T18499] usb 7-1: SerialNumber: syz [ 779.705775][T18499] usb 7-1: config 0 descriptor?? [ 779.712781][T18499] usb 7-1: selecting invalid altsetting 0 [ 779.925798][T18499] usb 7-1: USB disconnect, device number 8 [ 780.014716][ T43] audit: type=1400 audit(1790100578.872:2969): avc: denied { setattr } for pid=19328 comm="syz.5.4791" name="trace_clock" dev="tracefs" ino=5208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 780.112925][T19337] netlink: 'syz.5.4796': attribute type 1 has an invalid length. [ 780.138800][T19337] bridge1: entered promiscuous mode [ 780.143821][T19337] bond1: (slave bridge1): making interface the new active one [ 780.144653][T19337] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 780.189793][T19340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4797'. [ 780.189822][T19340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4797'. [ 780.214891][T19340] netlink: 'syz.5.4797': attribute type 7 has an invalid length. [ 780.214913][T19340] netlink: 'syz.5.4797': attribute type 8 has an invalid length. [ 780.292062][ T25] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 780.344724][T19344] FAULT_INJECTION: forcing a failure. [ 780.344724][T19344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.344781][T19344] CPU: 2 UID: 0 PID: 19344 Comm: syz.5.4799 Tainted: G L syzkaller #0 PREEMPT(full) [ 780.344798][T19344] Tainted: [L]=SOFTLOCKUP [ 780.344802][T19344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 780.344809][T19344] Call Trace: [ 780.344813][T19344] [ 780.344819][T19344] dump_stack_lvl+0x100/0x190 [ 780.344839][T19344] should_fail_ex.cold+0x5/0xa [ 780.344856][T19344] _copy_from_user+0x2e/0xd0 [ 780.344869][T19344] restore_altstack+0x98/0x170 [ 780.344886][T19344] ? __pfx_restore_altstack+0x10/0x10 [ 780.344903][T19344] ? _raw_spin_unlock_irq+0x23/0x50 [ 780.344918][T19344] ? lockdep_hardirqs_on+0x7d/0x110 [ 780.344959][T19344] ? _raw_spin_unlock_irq+0x2e/0x50 [ 780.344975][T19344] __do_sys_rt_sigreturn+0x1ab/0x2c0 [ 780.344993][T19344] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 780.345015][T19344] do_syscall_64+0x123/0x790 [ 780.345033][T19344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.345046][T19344] RIP: 0033:0x7f7a9f93f4d9 [ 780.345057][T19344] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 780.345068][T19344] RSP: 002b:00007f7aa07e2340 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 780.345080][T19344] RAX: ffffffffffffffda RBX: 00007f7a9fc25fa0 RCX: 00007f7a9f93f4d9 [ 780.345087][T19344] RDX: 00007f7aa07e2340 RSI: 00007f7aa07e2470 RDI: 0000000000000021 [ 780.345094][T19344] RBP: 00007f7aa07e3090 R08: 0000000000000000 R09: 0000000000000000 [ 780.345101][T19344] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 780.345107][T19344] R13: 00007f7a9fc26038 R14: 00007f7a9fc25fa0 R15: 00007fff4e8970c8 [ 780.345121][T19344] [ 780.441782][T19346] FAULT_INJECTION: forcing a failure. [ 780.441782][T19346] name failslab, interval 1, probability 0, space 0, times 0 [ 780.441796][ T25] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 780.441819][ T25] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 780.441813][T19346] CPU: 0 UID: 0 PID: 19346 Comm: syz.5.4800 Tainted: G L syzkaller #0 PREEMPT(full) [ 780.441839][T19346] Tainted: [L]=SOFTLOCKUP [ 780.441846][T19346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 780.441858][T19346] Call Trace: [ 780.441865][T19346] [ 780.441873][T19346] dump_stack_lvl+0x100/0x190 [ 780.441906][T19346] should_fail_ex.cold+0x5/0xa [ 780.441934][T19346] should_failslab+0xc2/0x120 [ 780.441959][T19346] __kmalloc_cache_noprof+0x91/0x6d0 [ 780.441995][T19346] ? rcu_is_watching+0x13/0xc0 [ 780.442020][T19346] ? vhost_task_create+0xee/0x370 [ 780.442040][T19346] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 780.442067][T19346] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 780.442097][T19346] vhost_task_create+0xee/0x370 [ 780.442116][T19346] ? __pfx_vhost_task_create+0x10/0x10 [ 780.442143][T19346] ? __pfx_vhost_task_fn+0x10/0x10 [ 780.442163][T19346] ? register_lock_class+0x3f/0x7b0 [ 780.442184][T19346] ? rcu_is_watching+0x13/0xc0 [ 780.442209][T19346] ? trace_contention_end+0x126/0x160 [ 780.442237][T19346] kvm_mmu_post_init_vm+0x1b3/0x360 [ 780.442262][T19346] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 780.442287][T19346] ? __pfx___mutex_lock+0x10/0x10 [ 780.442313][T19346] ? kasan_quarantine_put+0x104/0x240 [ 780.442338][T19346] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 780.442360][T19346] ? lock_acquire+0x1d1/0x380 [ 780.442381][T19346] ? do_raw_write_lock+0x11e/0x260 [ 780.442404][T19346] ? find_held_lock+0x2b/0x80 [ 780.442430][T19346] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 780.442455][T19346] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 780.442485][T19346] kvm_vcpu_ioctl+0x730/0x1700 [ 780.442513][T19346] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 780.442539][T19346] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 780.442563][T19346] ? do_vfs_ioctl+0x226/0x13e0 [ 780.442584][T19346] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 780.442601][T19346] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 780.442629][T19346] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 780.442656][T19346] ? __fget_files+0x34/0x3d0 [ 780.442690][T19346] ? selinux_file_ioctl+0x13b/0x290 [ 780.442710][T19346] ? selinux_file_ioctl+0xb6/0x290 [ 780.442733][T19346] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 780.442760][T19346] __x64_sys_ioctl+0x18e/0x210 [ 780.442782][T19346] do_syscall_64+0x123/0x790 [ 780.442812][T19346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.442831][T19346] RIP: 0033:0x7f7a9f99e159 [ 780.442847][T19346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.442864][T19346] RSP: 002b:00007f7aa07e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 780.442883][T19346] RAX: ffffffffffffffda RBX: 00007f7a9fc25fa0 RCX: 00007f7a9f99e159 [ 780.442896][T19346] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 780.442907][T19346] RBP: 00007f7aa07e3090 R08: 0000000000000000 R09: 0000000000000000 [ 780.442919][T19346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.442929][T19346] R13: 00007f7a9fc26038 R14: 00007f7a9fc25fa0 R15: 00007fff4e8970c8 [ 780.442956][T19346] [ 780.444047][ T25] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 780.444091][ T25] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 780.444114][ T25] usb 9-1: config 0 interface 0 has no altsetting 0 [ 780.445051][ T25] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 780.445090][ T25] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 780.445114][ T25] usb 9-1: config 0 interface 0 has no altsetting 0 [ 780.446440][ T25] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 780.446476][ T25] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 780.446492][ T25] usb 9-1: config 0 interface 0 has no altsetting 0 [ 780.447253][ T25] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 780.447282][ T25] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 780.447301][ T25] usb 9-1: config 0 interface 0 has no altsetting 0 [ 780.448156][ T25] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 780.448189][ T25] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 780.448202][ T25] usb 9-1: config 0 interface 0 has no altsetting 0 [ 780.449004][ T25] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 780.449025][ T25] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 780.449038][ T25] usb 9-1: config 0 interface 0 has no altsetting 0 [ 780.449838][ T25] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 780.449859][ T25] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 780.449872][ T25] usb 9-1: config 0 interface 0 has no altsetting 0 [ 780.450645][ T25] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 780.450665][ T25] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 780.450680][ T25] usb 9-1: config 0 interface 0 has no altsetting 0 [ 780.454895][ T25] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 780.454910][ T25] usb 9-1: Product: syz [ 780.454918][ T25] usb 9-1: Manufacturer: syz [ 780.454925][ T25] usb 9-1: SerialNumber: syz [ 780.465967][ T25] usb 9-1: config 0 descriptor?? [ 780.473887][ T25] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 780.477767][T19349] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 780.478469][T19350] overlayfs: upper fs does not support file handles, falling back to index=off. [ 780.554065][ T5828] hid-generic 0005:4C4A:4155.0061: unknown main item tag 0x0 [ 780.560919][ T5828] hid-generic 0005:4C4A:4155.0061: hidraw2: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 780.676611][ T25] usb 9-1: USB disconnect, device number 15 [ 780.680874][ T25] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 781.196882][ T43] audit: type=1400 audit(1790100580.052:2970): avc: denied { setattr } for pid=19368 comm="syz.5.4806" name="/" dev="9p" ino=76284067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 781.651389][ T35] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 781.811621][ T35] usb 9-1: Using ep0 maxpacket: 32 [ 781.812667][ T35] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 781.813687][ T35] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 781.813709][ T35] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 781.813722][ T35] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 781.813735][ T35] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 781.815511][ T35] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.815524][ T35] usb 9-1: Product: syz [ 781.815532][ T35] usb 9-1: Manufacturer: syz [ 781.815540][ T35] usb 9-1: SerialNumber: syz [ 781.821575][ C3] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 781.822633][ T35] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input273 [ 782.051839][ T35] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 782.051852][ T35] (id 0x00) [ 782.091415][ T35] rc_core: IR keymap rc-imon-pad not found [ 782.091429][ T35] Registered IR keymap rc-empty [ 782.091470][ T35] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 782.091480][ T35] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 782.244277][ T35] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0 [ 782.247155][ T35] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0/input274 [ 782.250395][ T35] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:16> initialized [ 782.833457][ T25] usb 9-1: USB disconnect, device number 16 [ 782.835893][T19409] imon:send_packet: packet tx failed (-71) [ 782.862902][T19409] imon:vfd_write: send packet #1 failed [ 783.333479][T19424] program syz.3.4814 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 783.382351][T19426] binder: 19425:19426 ioctl c0306201 200000000640 returned -22 [ 783.621585][ T5891] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 783.636657][T19434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4819'. [ 783.773486][ T5891] usb 7-1: unable to get BOS descriptor or descriptor too short [ 783.773531][ T5891] usb 7-1: New USB device found, idVendor=1430, idProduct=6cdc, bcdDevice=85.cc [ 783.774648][ T5891] usb 7-1: config 8 has an invalid interface number: 198 but max is 0 [ 783.774667][ T5891] usb 7-1: config 8 has no interface number 0 [ 783.774697][ T5891] usb 7-1: config 8 interface 198 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 783.777717][ T5891] usb 7-1: string descriptor 0 read error: -22 [ 783.777813][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.780642][T19428] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 783.986482][ T5891] usb 7-1: USB disconnect, device number 9 [ 784.184744][T19436] binder: 19435:19436 ioctl c018620b 0 returned -14 [ 784.249641][T19440] 8021q: VLANs not supported on gre0 [ 784.368540][ T43] audit: type=1800 audit(1790100583.222:2971): pid=19451 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.4825" name=08 dev="sda1" ino=2051 res=0 errno=0 [ 784.778982][T19481] netlink: 116 bytes leftover after parsing attributes in process `syz.5.4832'. [ 784.817378][T19487] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 784.896553][T19493] selinux_netlink_send: 18 callbacks suppressed [ 784.896577][T19493] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32784 sclass=netlink_audit_socket pid=19493 comm=syz.2.4836 [ 784.896816][T19493] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32800 sclass=netlink_audit_socket pid=19493 comm=syz.2.4836 [ 784.897044][T19493] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32816 sclass=netlink_audit_socket pid=19493 comm=syz.2.4836 [ 784.905315][T19493] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32832 sclass=netlink_audit_socket pid=19493 comm=syz.2.4836 [ 784.905547][T19493] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32848 sclass=netlink_audit_socket pid=19493 comm=syz.2.4836 [ 784.905737][T19493] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32864 sclass=netlink_audit_socket pid=19493 comm=syz.2.4836 [ 784.905904][T19493] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32880 sclass=netlink_audit_socket pid=19493 comm=syz.2.4836 [ 784.906081][T19493] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32896 sclass=netlink_audit_socket pid=19493 comm=syz.2.4836 [ 784.906407][T19493] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=4096 sclass=netlink_audit_socket pid=19493 comm=syz.2.4836 [ 784.906593][T19493] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=29008 sclass=netlink_audit_socket pid=19493 comm=syz.2.4836 [ 785.077173][T19498] netlink: 'syz.2.4838': attribute type 1 has an invalid length. [ 785.093136][T19498] 8021q: adding VLAN 0 to HW filter on device bond1 [ 785.222342][T19507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4842'. [ 785.222367][T19507] netlink: 'syz.3.4842': attribute type 30 has an invalid length. [ 785.255259][T19508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4841'. [ 785.274625][T19507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4842'. [ 785.274662][T19507] netlink: 'syz.3.4842': attribute type 30 has an invalid length. [ 785.310179][ T43] audit: type=1400 audit(1790100584.162:2972): avc: denied { getopt } for pid=19511 comm="syz.4.4844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 785.403621][T19517] comedi: valid board names for 8255 driver are: [ 785.403635][T19517] 8255 [ 785.403640][T19517] comedi: valid board names for vmk80xx driver are: [ 785.403647][T19517] vmk80xx [ 785.403652][T19517] comedi: valid board names for usbduxsigma driver are: [ 785.403659][T19517] usbduxsigma [ 785.403665][T19517] comedi: valid board names for usbduxfast driver are: [ 785.403673][T19517] usbduxfast [ 785.403678][T19517] comedi: valid board names for usbdux driver are: [ 785.403685][T19517] usbdux [ 785.403691][T19517] comedi: valid board names for ni6501 driver are: [ 785.403698][T19517] ni6501 [ 785.403704][T19517] comedi: valid board names for dt9812 driver are: [ 785.403712][T19517] dt9812 [ 785.403718][T19517] comedi: valid board names for ni_labpc_cs driver are: [ 785.403726][T19517] ni_labpc_cs [ 785.403732][T19517] comedi: valid board names for ni_daq_700 driver are: [ 785.403740][T19517] ni_daq_700 [ 785.403747][T19517] comedi: valid board names for labpc_pci driver are: [ 785.403755][T19517] labpc_pci [ 785.403762][T19517] comedi: valid board names for adl_pci9118 driver are: [ 785.403770][T19517] pci9118dg [ 785.403777][T19517] pci9118hg [ 785.403783][T19517] pci9118hr [ 785.403790][T19517] comedi: valid board names for 8255_pci driver are: [ 785.403798][T19517] 8255_pci [ 785.403804][T19517] comedi: valid board names for s526 driver are: [ 785.403812][T19517] s526 [ 785.403819][T19517] comedi: valid board names for multiq3 driver are: [ 785.403827][T19517] multiq3 [ 785.403834][T19517] comedi: valid board names for pcmuio driver are: [ 785.403842][T19517] pcmuio48 [ 785.403848][T19517] pcmuio96 [ 785.403854][T19517] comedi: valid board names for pcmmio driver are: [ 785.403862][T19517] pcmmio [ 785.403868][T19517] comedi: valid board names for pcmda12 driver are: [ 785.403876][T19517] pcmda12 [ 785.403881][T19517] comedi: valid board names for pcmad driver are: [ 785.403890][T19517] pcmad12 [ 785.403896][T19517] pcmad16 [ 785.403902][T19517] comedi: valid board names for ni_labpc driver are: [ 785.403910][T19517] lab-pc-1200 [ 785.403916][T19517] lab-pc-1200ai [ 785.403923][T19517] lab-pc+ [ 785.403930][T19517] comedi: valid board names for atmio16 driver are: [ 785.403937][T19517] atmio16 [ 785.403944][T19517] atmio16d [ 785.403950][T19517] comedi: valid board names for ni_at_ao driver are: [ 785.403958][T19517] at-ao-6 [ 785.403964][T19517] at-ao-10 [ 785.403971][T19517] comedi: valid board names for ni_at_a2150 driver are: [ 785.403978][T19517] ni_at_a2150 [ 785.403985][T19517] comedi: valid board names for adq12b driver are: [ 785.403993][T19517] adq12b [ 785.403999][T19517] comedi: valid board names for mpc624 driver are: [ 785.404007][T19517] mpc624 [ 785.404013][T19517] comedi: valid board names for c6xdigio driver are: [ 785.404022][T19517] c6xdigio [ 785.404028][T19517] comedi: valid board names for aio_iiro_16 driver are: [ 785.404036][T19517] aio_iiro_16 [ 785.404042][T19517] comedi: valid board names for aio_aio12_8 driver are: [ 785.404050][T19517] aio_aio12_8 [ 785.404058][T19517] aio_ai12_8 [ 785.404063][T19517] aio_ao12_4 [ 785.404069][T19517] comedi: valid board names for fl512 driver are: [ 785.404077][T19517] fl512 [ 785.404083][T19517] comedi: valid board names for dmm32at driver are: [ 785.404090][T19517] dmm32at [ 785.404097][T19517] comedi: valid board names for dt282x driver are: [ 785.404104][T19517] dt2821 [ 785.404110][T19517] dt2821-f [ 785.404117][T19517] dt2821-g [ 785.404124][T19517] dt2823 [ 785.404130][T19517] dt2824-pgh [ 785.404137][T19517] dt2824-pgl [ 785.404143][T19517] dt2825 [ 785.404150][T19517] dt2827 [ 785.404156][T19517] dt2828 [ 785.404162][T19517] dt2829 [ 785.404169][T19517] dt21-ez [ 785.404175][T19517] dt23-ez [ 785.404181][T19517] dt24-ez [ 785.404188][T19517] dt24-ez-pgl [ 785.404194][T19517] comedi: valid board names for dt2817 driver are: [ 785.404206][T19517] dt2817 [ 785.404212][T19517] comedi: valid board names for dt2815 driver are: [ 785.404220][T19517] dt2815 [ 785.404227][T19517] comedi: valid board names for dt2814 driver are: [ 785.404235][T19517] dt2814 [ 785.404241][T19517] comedi: valid board names for dt2811 driver are: [ 785.404250][T19517] dt2811-pgh [ 785.404256][T19517] dt2811-pgl [ 785.404264][T19517] comedi: valid board names for dt2801 driver are: [ 785.404272][T19517] dt2801 [ 785.404279][T19517] comedi: valid board names for das6402 driver are: [ 785.404288][T19517] das6402-12 [ 785.404295][T19517] das6402-16 [ 785.404302][T19517] comedi: valid board names for das1800 driver are: [ 785.404311][T19517] das-1701st [ 785.404318][T19517] das-1701st-da [ 785.404325][T19517] das-1702st [ 785.404332][T19517] das-1702st-da [ 785.404339][T19517] das-1702hr [ 785.404346][T19517] das-1702hr-da [ 785.404353][T19517] das-1701ao [ 785.404359][T19517] das-1702ao [ 785.404365][T19517] das-1801st [ 785.404372][T19517] das-1801st-da [ 785.404378][T19517] das-1802st [ 785.404385][T19517] das-1802st-da [ 785.404392][T19517] das-1802hr [ 785.404398][T19517] das-1802hr-da [ 785.404405][T19517] das-1801hc [ 785.404411][T19517] das-1802hc [ 785.404418][T19517] das-1801ao [ 785.404425][T19517] das-1802ao [ 785.404546][T19517] comedi: valid board names for das800 driver are: [ 785.404557][T19517] das-800 [ 785.404564][T19517] cio-das800 [ 785.404571][T19517] das-801 [ 785.404577][T19517] cio-das801 [ 785.404584][T19517] das-802 [ 785.404591][T19517] cio-das802 [ 785.404598][T19517] cio-das802/16 [ 785.404605][T19517] comedi: valid board names for isa-das08 driver are: [ 785.404614][T19517] isa-das08 [ 785.404621][T19517] das08-pgm [ 785.404627][T19517] das08-pgh [ 785.404634][T19517] das08-pgl [ 785.404640][T19517] das08-aoh [ 785.404647][T19517] das08-aol [ 785.404653][T19517] das08-aom [ 785.404660][T19517] das08/jr-ao [ 785.404667][T19517] das08jr-16-ao [ 785.404673][T19517] pc104-das08 [ 785.404680][T19517] das08jr/16 [ 785.404687][T19517] comedi: valid board names for das16m1 driver are: [ 785.404694][T19517] das16m1 [ 785.404700][T19517] comedi: valid board names for dac02 driver are: [ 785.404709][T19517] dac02 [ 785.404715][T19517] comedi: valid board names for rti802 driver are: [ 785.404723][T19517] rti802 [ 785.404729][T19517] comedi: valid board names for rti800 driver are: [ 785.404737][T19517] rti800 [ 785.404743][T19517] rti815 [ 785.404750][T19517] comedi: valid board names for pcm3724 driver are: [ 785.404758][T19517] pcm3724 [ 785.404764][T19517] comedi: valid board names for pcl818 driver are: [ 785.404772][T19517] pcl818l [ 785.404779][T19517] pcl818h [ 785.404785][T19517] pcl818hd [ 785.404792][T19517] pcl818hg [ 785.404798][T19517] pcl818 [ 785.404809][T19517] pcl718 [ 785.404815][T19517] pcm3718 [ 785.404822][T19517] comedi: valid board names for pcl816 driver are: [ 785.404829][T19517] pcl816 [ 785.404835][T19517] pcl814b [ 785.404841][T19517] comedi: valid board names for pcl812 driver are: [ 785.404849][T19517] pcl812 [ 785.404856][T19517] pcl812pg [ 785.404862][T19517] acl8112pg [ 785.404868][T19517] acl8112dg [ 785.404875][T19517] acl8112hg [ 785.407324][T19517] a821pgl [ 785.407332][T19517] a821pglnda [ 785.407336][T19517] a821pgh [ 785.407341][T19517] a822pgl [ 785.407345][T19517] a822pgh [ 785.407349][T19517] a823pgl [ 785.407353][T19517] a823pgh [ 785.407357][T19517] pcl813 [ 785.407361][T19517] pcl813b [ 785.407365][T19517] acl8113 [ 785.407369][T19517] iso813 [ 785.407373][T19517] acl8216 [ 785.407377][T19517] a826pg [ 785.407382][T19517] comedi: valid board names for pcl730 driver are: [ 785.407388][T19517] pcl730 [ 785.407392][T19517] iso730 [ 785.407396][T19517] acl7130 [ 785.407400][T19517] pcm3730 [ 785.407403][T19517] pcl725 [ 785.407407][T19517] p8r8dio [ 785.407411][T19517] acl7225b [ 785.407415][T19517] p16r16dio [ 785.407419][T19517] pcl733 [ 785.407423][T19517] pcl734 [ 785.407427][T19517] opmm-1616-xt [ 785.407432][T19517] pearl-mm-p [ 785.407435][T19517] ir104-pbf [ 785.407440][T19517] comedi: valid board names for pcl726 driver are: [ 785.407446][T19517] pcl726 [ 785.407450][T19517] pcl727 [ 785.407454][T19517] pcl728 [ 785.407458][T19517] acl6126 [ 785.407462][T19517] acl6128 [ 785.407466][T19517] comedi: valid board names for pcl724 driver are: [ 785.407471][T19517] pcl724 [ 785.407481][T19517] pcl722 [ 785.407485][T19517] pcl731 [ 785.407489][T19517] acl7122 [ 785.407493][T19517] acl7124 [ 785.407498][T19517] pet48dio [ 785.407502][T19517] pcmio48 [ 785.407506][T19517] onyx-mm-dio [ 785.407511][T19517] comedi: valid board names for pcl711 driver are: [ 785.407516][T19517] pcl711 [ 785.407520][T19517] pcl711b [ 785.407524][T19517] acl8112hg [ 785.407528][T19517] acl8112dg [ 785.407532][T19517] comedi: valid board names for amplc_pc263 driver are: [ 785.407537][T19517] pc263 [ 785.407541][T19517] comedi: valid board names for amplc_pc236 driver are: [ 785.407547][T19517] pc36at [ 785.407551][T19517] comedi: valid board names for amplc_dio200 driver are: [ 785.407556][T19517] pc212e [ 785.407560][T19517] pc214e [ 785.407564][T19517] pc215e [ 785.407568][T19517] pc218e [ 785.407572][T19517] pc272e [ 785.407576][T19517] comedi: valid board names for comedi_parport driver are: [ 785.407581][T19517] comedi_parport [ 785.407586][T19517] comedi: valid board names for comedi_test driver are: [ 785.407592][T19517] comedi_test [ 785.407596][T19517] comedi: valid board names for comedi_bond driver are: [ 785.407601][T19517] comedi_bond [ 785.423274][T19517] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 785.442480][T19517] romfs: unable to set blocksize [ 785.442480][T19517] [ 785.446338][T19508] infiniband syz2: set active [ 785.446389][T19508] infiniband syz2: added team_slave_0 [ 785.452040][T19508] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 785.452067][T19508] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 785.452089][T19508] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 785.470956][T19508] RDS/IB: syz2: added [ 785.470996][T19508] smc: adding ib device syz2 with port count 1 [ 785.471012][T19508] smc: ib device syz2 port 1 has no pnetid [ 785.748814][ T43] audit: type=1400 audit(1790100584.602:2973): avc: denied { create } for pid=19531 comm="syz.4.4851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 785.754638][ T43] audit: type=1400 audit(1790100584.602:2974): avc: denied { write } for pid=19531 comm="syz.4.4851" path="socket:[93416]" dev="sockfs" ino=93416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 785.797165][T19534] FAULT_INJECTION: forcing a failure. [ 785.797165][T19534] name failslab, interval 1, probability 0, space 0, times 0 [ 785.797199][T19534] CPU: 3 UID: 0 PID: 19534 Comm: syz.5.4852 Tainted: G L syzkaller #0 PREEMPT(full) [ 785.797224][T19534] Tainted: [L]=SOFTLOCKUP [ 785.797232][T19534] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 785.797243][T19534] Call Trace: [ 785.797252][T19534] [ 785.797260][T19534] dump_stack_lvl+0x100/0x190 [ 785.797293][T19534] should_fail_ex.cold+0x5/0xa [ 785.797319][T19534] should_failslab+0xc2/0x120 [ 785.797344][T19534] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 785.797366][T19534] ? x509_cert_parse+0x3bd/0x910 [ 785.797391][T19534] kmemdup_noprof+0x29/0x60 [ 785.797420][T19534] x509_cert_parse+0x3bd/0x910 [ 785.797442][T19534] x509_key_preparse+0x65/0x9c0 [ 785.797467][T19534] asymmetric_key_preparse+0xce/0x1d0 [ 785.797492][T19534] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 785.797520][T19534] __key_create_or_update+0x463/0xe30 [ 785.797547][T19534] ? __pfx___key_create_or_update+0x10/0x10 [ 785.797572][T19534] ? lookup_user_key+0x3f3/0x1300 [ 785.797604][T19534] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 785.797629][T19534] key_create_or_update+0x42/0x60 [ 785.797655][T19534] __do_sys_add_key+0x2e8/0x460 [ 785.797681][T19534] ? __sys_socket+0xac/0x260 [ 785.797701][T19534] ? __pfx___do_sys_add_key+0x10/0x10 [ 785.797736][T19534] do_syscall_64+0x123/0x790 [ 785.797766][T19534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.797784][T19534] RIP: 0033:0x7f7a9f99e159 [ 785.797802][T19534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.797819][T19534] RSP: 002b:00007f7aa07e3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 785.797840][T19534] RAX: ffffffffffffffda RBX: 00007f7a9fc25fa0 RCX: 00007f7a9f99e159 [ 785.797852][T19534] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 785.797864][T19534] RBP: 00007f7a9fa3506b R08: ffffffffffffffff R09: 0000000000000000 [ 785.797875][T19534] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 785.797886][T19534] R13: 00007f7a9fc26038 R14: 00007f7a9fc25fa0 R15: 00007fff4e8970c8 [ 785.797911][T19534] [ 785.827598][T19536] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 785.944143][T19547] netlink: 'syz.4.4857': attribute type 142 has an invalid length. [ 786.187363][T19555] FAULT_INJECTION: forcing a failure. [ 786.187363][T19555] name failslab, interval 1, probability 0, space 0, times 0 [ 786.187395][T19555] CPU: 3 UID: 0 PID: 19555 Comm: syz.4.4860 Tainted: G L syzkaller #0 PREEMPT(full) [ 786.187419][T19555] Tainted: [L]=SOFTLOCKUP [ 786.187426][T19555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 786.187436][T19555] Call Trace: [ 786.187442][T19555] [ 786.187450][T19555] dump_stack_lvl+0x100/0x190 [ 786.187482][T19555] should_fail_ex.cold+0x5/0xa [ 786.187508][T19555] should_failslab+0xc2/0x120 [ 786.187531][T19555] kmem_cache_alloc_noprof+0x92/0x6a0 [ 786.187547][T19555] ? __pfx_map_id_range_down+0x10/0x10 [ 786.187562][T19555] ? security_inode_alloc+0x3b/0x2c0 [ 786.187576][T19555] security_inode_alloc+0x3b/0x2c0 [ 786.187589][T19555] inode_init_always_gfp+0xc6f/0xfb0 [ 786.187606][T19555] alloc_inode+0x8e/0x250 [ 786.187617][T19555] new_inode+0x22/0x1c0 [ 786.187626][T19555] ? trace_kmem_cache_alloc+0xdd/0x100 [ 786.187643][T19555] shmem_get_inode+0x1e3/0xf70 [ 786.187659][T19555] ? __pfx_shmem_get_inode+0x10/0x10 [ 786.187674][T19555] ? mas_preallocate+0x528/0xee0 [ 786.187688][T19555] __shmem_file_setup+0x168/0x460 [ 786.187703][T19555] ? __pfx___shmem_file_setup+0x10/0x10 [ 786.187718][T19555] ? vm_area_alloc+0x1f/0x160 [ 786.187735][T19555] shmem_zero_setup+0x96/0x1b0 [ 786.187754][T19555] __mmap_region+0x26b8/0x32e0 [ 786.187774][T19555] ? __pfx___mmap_region+0x10/0x10 [ 786.187794][T19555] ? kfree_skbmem+0x19a/0x210 [ 786.187811][T19555] ? __lock_acquire+0x5c0/0x1f40 [ 786.187858][T19555] ? avc_has_perm_noaudit+0x145/0x470 [ 786.187879][T19555] mmap_region+0x3db/0x6d0 [ 786.187890][T19555] ? rcu_is_watching+0x13/0xc0 [ 786.187905][T19555] ? __pfx_mmap_region+0x10/0x10 [ 786.187918][T19555] ? selinux_mmap_addr+0xe2/0x110 [ 786.187929][T19555] ? bpf_lsm_mmap_addr+0x9/0x30 [ 786.187955][T19555] ? security_mmap_addr+0x71/0x1e0 [ 786.187969][T19555] ? __get_unmapped_area+0x255/0x3e0 [ 786.187986][T19555] do_mmap+0x12c7/0x1c30 [ 786.188004][T19555] ? lock_acquire+0x1d1/0x380 [ 786.188017][T19555] ? __pfx_do_mmap+0x10/0x10 [ 786.188037][T19555] ? __pfx_down_write_killable+0x10/0x10 [ 786.188057][T19555] vm_mmap_pgoff+0x28d/0x470 [ 786.188073][T19555] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 786.188090][T19555] ? __pfx_do_futex+0x10/0x10 [ 786.188107][T19555] ? fd_install+0x223/0x580 [ 786.188123][T19555] ksys_mmap_pgoff+0xe4/0x610 [ 786.188137][T19555] ? __x64_sys_futex+0x358/0x4d0 [ 786.188154][T19555] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 786.188168][T19555] ? xfd_validate_state+0x129/0x190 [ 786.188183][T19555] __x64_sys_mmap+0x125/0x190 [ 786.188198][T19555] do_syscall_64+0x123/0x790 [ 786.188216][T19555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.188227][T19555] RIP: 0033:0x7f139b39e159 [ 786.188238][T19555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.188248][T19555] RSP: 002b:00007f139c2ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 786.188260][T19555] RAX: ffffffffffffffda RBX: 00007f139b625fa0 RCX: 00007f139b39e159 [ 786.188267][T19555] RDX: 0000000002000007 RSI: 0000000008000002 RDI: 0000000000000000 [ 786.188274][T19555] RBP: 00007f139b43506b R08: ffffffffffffffff R09: 0000000000000000 [ 786.188281][T19555] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 786.188287][T19555] R13: 00007f139b626038 R14: 00007f139b625fa0 R15: 00007fff4b80a5b8 [ 786.188302][T19555] [ 786.190294][T19555] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 786.448212][T19560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4862'. [ 786.492465][T19559] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input275 [ 786.759453][T19567] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4866'. [ 786.893952][T19575] netlink: 'syz.2.4870': attribute type 3 has an invalid length. [ 786.893992][T19575] netlink: 'syz.2.4870': attribute type 3 has an invalid length. [ 786.894020][T19575] netlink: 'syz.2.4870': attribute type 3 has an invalid length. [ 786.894042][T19575] netlink: 'syz.2.4870': attribute type 3 has an invalid length. [ 786.894063][T19575] netlink: 'syz.2.4870': attribute type 3 has an invalid length. [ 786.894085][T19575] netlink: 'syz.2.4870': attribute type 3 has an invalid length. [ 787.013894][T19573] FAULT_INJECTION: forcing a failure. [ 787.013894][T19573] name failslab, interval 1, probability 0, space 0, times 0 [ 787.013919][T19573] CPU: 2 UID: 0 PID: 19573 Comm: syz.5.4869 Tainted: G L syzkaller #0 PREEMPT(full) [ 787.013934][T19573] Tainted: [L]=SOFTLOCKUP [ 787.013938][T19573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 787.013945][T19573] Call Trace: [ 787.013949][T19573] [ 787.013954][T19573] dump_stack_lvl+0x100/0x190 [ 787.013975][T19573] should_fail_ex.cold+0x5/0xa [ 787.013993][T19573] should_failslab+0xc2/0x120 [ 787.014010][T19573] kmem_cache_alloc_noprof+0x92/0x6a0 [ 787.014024][T19573] ? sk_prot_alloc+0x60/0x2a0 [ 787.014044][T19573] sk_prot_alloc+0x60/0x2a0 [ 787.014062][T19573] sk_alloc+0x36/0xe80 [ 787.014075][T19573] inet6_create+0x385/0x12b0 [ 787.014089][T19573] ? inet6_create+0x7f/0x12b0 [ 787.014103][T19573] __sock_create+0x339/0x860 [ 787.014117][T19573] __sys_socket+0x14d/0x260 [ 787.014129][T19573] ? __pfx___sys_socket+0x10/0x10 [ 787.014147][T19573] __x64_sys_socket+0x72/0xb0 [ 787.014157][T19573] ? lockdep_hardirqs_on+0x7d/0x110 [ 787.014174][T19573] do_syscall_64+0x123/0x790 [ 787.014192][T19573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.014204][T19573] RIP: 0033:0x7f7a9f99e159 [ 787.014218][T19573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.014234][T19573] RSP: 002b:00007f7aa07e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 787.014250][T19573] RAX: ffffffffffffffda RBX: 00007f7a9fc25fa0 RCX: 00007f7a9f99e159 [ 787.014260][T19573] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 000000000000000a [ 787.014270][T19573] RBP: 00007f7a9fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 787.014280][T19573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.014289][T19573] R13: 00007f7a9fc26038 R14: 00007f7a9fc25fa0 R15: 00007fff4e8970c8 [ 787.014310][T19573] [ 787.164280][T19573] Console: switching to colour dummy device 80x25 [ 787.444376][T19578] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 787.465708][T19578] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 787.466213][T19578] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 787.466372][T19578] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 787.466628][T19578] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 787.467852][T19578] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 787.520800][T19578] pci 0000:00:01.0: Adding to iommu group 1 [ 787.532603][T19578] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 787.532626][T19578] pci 0000:00:01.0: vgaarb: bridge control possible [ 787.532640][T19578] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 787.545613][T19578] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 787.549002][T19578] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 787.556046][T19578] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 787.654761][T19578] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 787.657252][T19578] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 787.662070][T19578] [drm] features: -virgl +edid -resource_blob -host_visible [ 787.662082][T19578] [drm] features: -context_init -blob_alignment [ 787.703466][T19578] ------------[ cut here ]------------ [ 787.703482][T19578] kmem_cache of name 'virtio-gpu-vbufs' already exists [ 787.703497][T19578] WARNING: mm/slab_common.c:111 at __kmem_cache_create_args+0xa9/0x430, CPU#3: syz.5.4869/19578 [ 787.714378][T19578] Modules linked in: [ 787.716041][T19578] CPU: 3 UID: 0 PID: 19578 Comm: syz.5.4869 Tainted: G L syzkaller #0 PREEMPT(full) [ 787.720876][T19578] Tainted: [L]=SOFTLOCKUP [ 787.723878][T19578] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 787.728071][T19578] RIP: 0010:__kmem_cache_create_args+0xac/0x430 [ 787.730590][T19578] Code: 48 8b 43 60 48 8d 58 a0 48 3d d0 81 f9 8e 74 1f 48 8b 7b 58 48 89 ee e8 f2 3a 70 09 85 c0 75 e0 48 8d 3d 97 f0 ec 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 72 3c 70 09 48 85 c0 0f [ 787.739084][T19578] RSP: 0018:ffffc900033b6f18 EFLAGS: 00010246 [ 787.742172][T19578] RAX: 0000000000000000 RBX: ffff8881022fd7c0 RCX: fffff52000676dbe [ 787.745428][T19578] RDX: 0000000000000000 RSI: ffffffff8c91a0e0 RDI: ffffffff9149ccb0 [ 787.748680][T19578] RBP: ffffffff8c91a0e0 R08: 0000000000000000 R09: fffffbfff228a88b [ 787.751985][T19578] R10: ffffc900033b6f18 R11: 0000000000000001 R12: 0000000000000000 [ 787.755154][T19578] R13: ffffc900033b6f88 R14: 00000000000000d8 R15: ffff888013bb4fce [ 787.758332][T19578] FS: 00007f7aa07c26c0(0000) GS:ffff8880d5e53000(0000) knlGS:0000000000000000 [ 787.762020][T19578] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 787.764644][T19578] CR2: 00007fbcc71eb840 CR3: 000000005cbca000 CR4: 0000000000352ef0 [ 787.767829][T19578] Call Trace: [ 787.769227][T19578] [ 787.770459][T19578] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 787.772723][T19578] ? __pfx__printk+0x10/0x10 [ 787.774667][T19578] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 787.777096][T19578] ? lockdep_init_map_type+0x5c/0x250 [ 787.779268][T19578] virtio_gpu_init.cold+0x40d/0x1293 [ 787.781563][T19578] ? vga_remove_vgacon.cold+0x1d/0x99 [ 787.783765][T19578] ? __pfx_virtio_gpu_init+0x10/0x10 [ 787.785952][T19578] ? is_console_locked+0x9/0x20 [ 787.787948][T19578] ? con_is_bound+0x141/0x190 [ 787.789903][T19578] ? vga_remove_vgacon+0x21/0x30 [ 787.792132][T19578] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 787.794946][T19578] virtio_gpu_probe+0x21c/0x360 [ 787.797015][T19578] virtio_dev_probe+0x6a2/0xbe0 [ 787.798913][T19578] ? __pfx_virtio_dev_probe+0x10/0x10 [ 787.801011][T19578] ? kernfs_create_link+0x1bd/0x240 [ 787.802929][T19578] ? kernfs_put+0x3f/0x60 [ 787.804596][T19578] ? sysfs_do_create_link_sd+0xbb/0x140 [ 787.806712][T19578] ? sysfs_create_link+0x68/0xc0 [ 787.808686][T19578] ? __pfx_virtio_dev_probe+0x10/0x10 [ 787.810782][T19578] really_probe+0x241/0xa60 [ 787.812576][T19578] __driver_probe_device+0x210/0x460 [ 787.814560][T19578] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 787.816930][T19578] driver_probe_device+0x4a/0x140 [ 787.818863][T19578] __device_attach_driver+0x1df/0x320 [ 787.820931][T19578] ? __pfx___device_attach_driver+0x10/0x10 [ 787.823208][T19578] bus_for_each_drv+0x159/0x1e0 [ 787.825256][T19578] ? __pfx_bus_for_each_drv+0x10/0x10 [ 787.827391][T19578] ? lockdep_hardirqs_on+0x7d/0x110 [ 787.829756][T19578] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 787.832268][T19578] __device_attach+0x1e4/0x4d0 [ 787.834248][T19578] ? __pfx___device_attach+0x10/0x10 [ 787.836399][T19578] ? do_raw_spin_unlock+0x145/0x1e0 [ 787.838549][T19578] device_initial_probe+0xaf/0xd0 [ 787.840632][T19578] bus_probe_device+0x64/0x160 [ 787.842744][T19578] device_add+0x121d/0x1970 [ 787.844385][T19578] ? __pfx_device_add+0x10/0x10 [ 787.846687][T19578] ? ioread8+0x88/0xd0 [ 787.848281][T19578] ? ioread8+0x8a/0xd0 [ 787.849894][T19578] ? ioread8+0x8f/0xd0 [ 787.851611][T19578] register_virtio_device+0x4f0/0x5d0 [ 787.853688][T19578] ? __pfx_register_virtio_device+0x10/0x10 [ 787.855955][T19578] ? __pfx_pcibios_set_master+0x10/0x10 [ 787.858118][T19578] ? __raw_spin_lock_init+0x3a/0x110 [ 787.860184][T19578] ? __pfx_virtio_pci_probe+0x10/0x10 [ 787.862483][T19578] virtio_pci_probe+0x255/0x410 [ 787.864329][T19578] local_pci_probe+0xdd/0x1b0 [ 787.866203][T19578] pci_call_probe+0x176/0x800 [ 787.868111][T19578] ? pci_match_device+0x147/0x7d0 [ 787.870087][T19578] ? __pfx_pci_call_probe+0x10/0x10 [ 787.872775][T19578] ? __pfx_pci_match_device+0x10/0x10 [ 787.874999][T19578] ? pci_find_host_bridge+0x3c/0x80 [ 787.876962][T19578] ? up_write+0x2dc/0x5b0 [ 787.878586][T19578] pci_device_probe+0x25b/0x400 [ 787.880416][T19578] ? __pfx_pci_device_probe+0x10/0x10 [ 787.882561][T19578] ? kernfs_create_link+0x1bd/0x240 [ 787.884610][T19578] ? sysfs_create_link+0x68/0xc0 [ 787.886537][T19578] ? __pfx_pci_device_probe+0x10/0x10 [ 787.888613][T19578] really_probe+0x241/0xa60 [ 787.890420][T19578] __driver_probe_device+0x210/0x460 [ 787.892564][T19578] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 787.894833][T19578] driver_probe_device+0x4a/0x140 [ 787.896747][T19578] __device_attach_driver+0x1df/0x320 [ 787.898820][T19578] ? __pfx___device_attach_driver+0x10/0x10 [ 787.901058][T19578] bus_for_each_drv+0x159/0x1e0 [ 787.904622][T19578] ? __pfx_bus_for_each_drv+0x10/0x10 [ 787.906697][T19578] ? lockdep_hardirqs_on+0x7d/0x110 [ 787.908611][T19578] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 787.910820][T19578] __device_attach+0x1e4/0x4d0 [ 787.912679][T19578] ? __pfx___device_attach+0x10/0x10 [ 787.914644][T19578] ? do_raw_spin_unlock+0x145/0x1e0 [ 787.916566][T19578] device_initial_probe+0xaf/0xd0 [ 787.918399][T19578] pci_bus_add_device+0xc5/0x100 [ 787.920357][T19578] pci_bus_add_devices+0x9a/0x1f0 [ 787.922536][T19578] pci_rescan_bus+0x2a/0x40 [ 787.924467][T19578] rescan_store+0xfb/0x130 [ 787.926273][T19578] ? __pfx_rescan_store+0x10/0x10 [ 787.928412][T19578] ? sysfs_file_kobj+0xe4/0x290 [ 787.930458][T19578] ? __pfx_rescan_store+0x10/0x10 [ 787.932451][T19578] bus_attr_store+0x74/0xb0 [ 787.934412][T19578] ? __pfx_bus_attr_store+0x10/0x10 [ 787.936438][T19578] sysfs_kf_write+0xf2/0x150 [ 787.938229][T19578] kernfs_fop_write_iter+0x3e0/0x5f0 [ 787.940427][T19578] ? __pfx_sysfs_kf_write+0x10/0x10 [ 787.942541][T19578] vfs_write+0x6af/0x1050 [ 787.944319][T19578] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 787.946720][T19578] ? __pfx_vfs_write+0x10/0x10 [ 787.948765][T19578] ? find_held_lock+0x2b/0x80 [ 787.950544][T19578] ksys_write+0x12a/0x250 [ 787.952234][T19578] ? __pfx_ksys_write+0x10/0x10 [ 787.954056][T19578] do_syscall_64+0x123/0x790 [ 787.955912][T19578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.958281][T19578] RIP: 0033:0x7f7a9f99e159 [ 787.959899][T19578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.967122][T19578] RSP: 002b:00007f7aa07c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 787.970161][T19578] RAX: ffffffffffffffda RBX: 00007f7a9fc26090 RCX: 00007f7a9f99e159 [ 787.973299][T19578] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 000000000000000a [ 787.976190][T19578] RBP: 00007f7a9fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 787.979072][T19578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.982195][T19578] R13: 00007f7a9fc26128 R14: 00007f7a9fc26090 R15: 00007fff4e8970c8 [ 787.985138][T19578] [ 787.986306][T19578] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 787.988934][T19578] CPU: 3 UID: 0 PID: 19578 Comm: syz.5.4869 Tainted: G L syzkaller #0 PREEMPT(full) [ 787.992781][T19578] Tainted: [L]=SOFTLOCKUP [ 787.994368][T19578] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 787.997910][T19578] Call Trace: [ 787.999153][T19578] [ 788.000257][T19578] dump_stack_lvl+0x100/0x190 [ 788.002047][T19578] vpanic+0x553/0x970 [ 788.003527][T19578] ? __pfx_vpanic+0x10/0x10 [ 788.005289][T19578] panic+0xd1/0xe0 [ 788.006783][T19578] ? __pfx_panic+0x10/0x10 [ 788.008530][T19578] check_panic_on_warn.cold+0x19/0x34 [ 788.010635][T19578] ? __kmem_cache_create_args+0xa9/0x430 [ 788.012679][T19578] __warn.cold+0x191/0x318 [ 788.014400][T19578] __report_bug+0x30f/0x440 [ 788.016124][T19578] ? __kmem_cache_create_args+0xa9/0x430 [ 788.018387][T19578] ? __pfx___report_bug+0x10/0x10 [ 788.020488][T19578] ? __mutex_lock+0x26c/0x1bd0 [ 788.022388][T19578] ? __kmem_cache_create_args+0x44/0x430 [ 788.024637][T19578] report_bug_entry+0xe2/0x290 [ 788.026518][T19578] ? __kmem_cache_create_args+0xac/0x430 [ 788.028668][T19578] handle_bug+0x1cd/0x2a0 [ 788.030357][T19578] exc_invalid_op+0x17/0x50 [ 788.032165][T19578] asm_exc_invalid_op+0x1a/0x20 [ 788.034080][T19578] RIP: 0010:__kmem_cache_create_args+0xac/0x430 [ 788.036583][T19578] Code: 48 8b 43 60 48 8d 58 a0 48 3d d0 81 f9 8e 74 1f 48 8b 7b 58 48 89 ee e8 f2 3a 70 09 85 c0 75 e0 48 8d 3d 97 f0 ec 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 72 3c 70 09 48 85 c0 0f [ 788.044066][T19578] RSP: 0018:ffffc900033b6f18 EFLAGS: 00010246 [ 788.046466][T19578] RAX: 0000000000000000 RBX: ffff8881022fd7c0 RCX: fffff52000676dbe [ 788.049746][T19578] RDX: 0000000000000000 RSI: ffffffff8c91a0e0 RDI: ffffffff9149ccb0 [ 788.052778][T19578] RBP: ffffffff8c91a0e0 R08: 0000000000000000 R09: fffffbfff228a88b [ 788.055999][T19578] R10: ffffc900033b6f18 R11: 0000000000000001 R12: 0000000000000000 [ 788.058825][T19578] R13: ffffc900033b6f88 R14: 00000000000000d8 R15: ffff888013bb4fce [ 788.061615][T19578] ? __kmem_cache_create_args+0x9e/0x430 [ 788.063531][T19578] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 788.065374][T19578] ? __pfx__printk+0x10/0x10 [ 788.066956][T19578] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 788.068967][T19578] ? lockdep_init_map_type+0x5c/0x250 [ 788.071017][T19578] virtio_gpu_init.cold+0x40d/0x1293 [ 788.073055][T19578] ? vga_remove_vgacon.cold+0x1d/0x99 [ 788.075141][T19578] ? __pfx_virtio_gpu_init+0x10/0x10 [ 788.077180][T19578] ? is_console_locked+0x9/0x20 [ 788.079054][T19578] ? con_is_bound+0x141/0x190 [ 788.080799][T19578] ? vga_remove_vgacon+0x21/0x30 [ 788.082782][T19578] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 788.085744][T19578] virtio_gpu_probe+0x21c/0x360 [ 788.087641][T19578] virtio_dev_probe+0x6a2/0xbe0 [ 788.089561][T19578] ? __pfx_virtio_dev_probe+0x10/0x10 [ 788.091618][T19578] ? kernfs_create_link+0x1bd/0x240 [ 788.093636][T19578] ? kernfs_put+0x3f/0x60 [ 788.095333][T19578] ? sysfs_do_create_link_sd+0xbb/0x140 [ 788.097461][T19578] ? sysfs_create_link+0x68/0xc0 [ 788.099387][T19578] ? __pfx_virtio_dev_probe+0x10/0x10 [ 788.101493][T19578] really_probe+0x241/0xa60 [ 788.103264][T19578] __driver_probe_device+0x210/0x460 [ 788.105347][T19578] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 788.107864][T19578] driver_probe_device+0x4a/0x140 [ 788.110260][T19578] __device_attach_driver+0x1df/0x320 [ 788.112387][T19578] ? __pfx___device_attach_driver+0x10/0x10 [ 788.114964][T19578] bus_for_each_drv+0x159/0x1e0 [ 788.117090][T19578] ? __pfx_bus_for_each_drv+0x10/0x10 [ 788.119195][T19578] ? lockdep_hardirqs_on+0x7d/0x110 [ 788.121184][T19578] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 788.123327][T19578] __device_attach+0x1e4/0x4d0 [ 788.125100][T19578] ? __pfx___device_attach+0x10/0x10 [ 788.127021][T19578] ? do_raw_spin_unlock+0x145/0x1e0 [ 788.129000][T19578] device_initial_probe+0xaf/0xd0 [ 788.130920][T19578] bus_probe_device+0x64/0x160 [ 788.132758][T19578] device_add+0x121d/0x1970 [ 788.134536][T19578] ? __pfx_device_add+0x10/0x10 [ 788.136408][T19578] ? ioread8+0x88/0xd0 [ 788.137974][T19578] ? ioread8+0x8a/0xd0 [ 788.139574][T19578] ? ioread8+0x8f/0xd0 [ 788.141138][T19578] register_virtio_device+0x4f0/0x5d0 [ 788.143047][T19578] ? __pfx_register_virtio_device+0x10/0x10 [ 788.145209][T19578] ? __pfx_pcibios_set_master+0x10/0x10 [ 788.147174][T19578] ? __raw_spin_lock_init+0x3a/0x110 [ 788.149080][T19578] ? __pfx_virtio_pci_probe+0x10/0x10 [ 788.151123][T19578] virtio_pci_probe+0x255/0x410 [ 788.153003][T19578] local_pci_probe+0xdd/0x1b0 [ 788.154797][T19578] pci_call_probe+0x176/0x800 [ 788.156573][T19578] ? pci_match_device+0x147/0x7d0 [ 788.158491][T19578] ? __pfx_pci_call_probe+0x10/0x10 [ 788.160481][T19578] ? __pfx_pci_match_device+0x10/0x10 [ 788.162543][T19578] ? pci_find_host_bridge+0x3c/0x80 [ 788.164549][T19578] ? up_write+0x2dc/0x5b0 [ 788.166215][T19578] pci_device_probe+0x25b/0x400 [ 788.168075][T19578] ? __pfx_pci_device_probe+0x10/0x10 [ 788.170155][T19578] ? kernfs_create_link+0x1bd/0x240 [ 788.172079][T19578] ? sysfs_create_link+0x68/0xc0 [ 788.173880][T19578] ? __pfx_pci_device_probe+0x10/0x10 [ 788.175814][T19578] really_probe+0x241/0xa60 [ 788.177627][T19578] __driver_probe_device+0x210/0x460 [ 788.179694][T19578] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 788.182043][T19578] driver_probe_device+0x4a/0x140 [ 788.184019][T19578] __device_attach_driver+0x1df/0x320 [ 788.186099][T19578] ? __pfx___device_attach_driver+0x10/0x10 [ 788.188334][T19578] bus_for_each_drv+0x159/0x1e0 [ 788.190197][T19578] ? __pfx_bus_for_each_drv+0x10/0x10 [ 788.192175][T19578] ? lockdep_hardirqs_on+0x7d/0x110 [ 788.194119][T19578] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 788.196279][T19578] __device_attach+0x1e4/0x4d0 [ 788.198064][T19578] ? __pfx___device_attach+0x10/0x10 [ 788.200152][T19578] ? do_raw_spin_unlock+0x145/0x1e0 [ 788.202484][T19578] device_initial_probe+0xaf/0xd0 [ 788.204677][T19578] pci_bus_add_device+0xc5/0x100 [ 788.206563][T19578] pci_bus_add_devices+0x9a/0x1f0 [ 788.208462][T19578] pci_rescan_bus+0x2a/0x40 [ 788.210171][T19578] rescan_store+0xfb/0x130 [ 788.211883][T19578] ? __pfx_rescan_store+0x10/0x10 [ 788.213858][T19578] ? sysfs_file_kobj+0xe4/0x290 [ 788.215716][T19578] ? __pfx_rescan_store+0x10/0x10 [ 788.217582][T19578] bus_attr_store+0x74/0xb0 [ 788.219318][T19578] ? __pfx_bus_attr_store+0x10/0x10 [ 788.221354][T19578] sysfs_kf_write+0xf2/0x150 [ 788.223138][T19578] kernfs_fop_write_iter+0x3e0/0x5f0 [ 788.225257][T19578] ? __pfx_sysfs_kf_write+0x10/0x10 [ 788.227238][T19578] vfs_write+0x6af/0x1050 [ 788.228952][T19578] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 788.231186][T19578] ? __pfx_vfs_write+0x10/0x10 [ 788.232990][T19578] ? find_held_lock+0x2b/0x80 [ 788.234812][T19578] ksys_write+0x12a/0x250 [ 788.236455][T19578] ? __pfx_ksys_write+0x10/0x10 [ 788.238327][T19578] do_syscall_64+0x123/0x790 [ 788.240115][T19578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.242402][T19578] RIP: 0033:0x7f7a9f99e159 [ 788.244120][T19578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.251281][T19578] RSP: 002b:00007f7aa07c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 788.254383][T19578] RAX: ffffffffffffffda RBX: 00007f7a9fc26090 RCX: 00007f7a9f99e159 [ 788.257382][T19578] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 000000000000000a [ 788.260346][T19578] RBP: 00007f7a9fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 788.263246][T19578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.266181][T19578] R13: 00007f7a9fc26128 R14: 00007f7a9fc26090 R15: 00007fff4e8970c8 [ 788.269117][T19578] [ 788.270993][T19578] Kernel Offset: disabled [ 788.272675][T19578] Rebooting in 86400 seconds..