last executing test programs: 4m6.072084646s ago: executing program 2 (id=745): open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) r0 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x4207, r0) capget(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x3ff, 0x1d4, 0x9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) capset(&(0x7f0000000140)={0x19980330, r0}, &(0x7f0000000180)={0x698, 0x9a63, 0x1e, 0xe2, 0xf65, 0x2a}) r1 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 4m5.892920759s ago: executing program 2 (id=752): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 4m5.167893343s ago: executing program 2 (id=754): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x12d, 0xb29, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x2c, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x4e20, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x202, 0x10001}}}}, 0x3a) 4m5.044598014s ago: executing program 2 (id=757): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x12d, 0xb29, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x2c, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x4e20, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x202, 0x10001}}}}, 0x3a) (fail_nth: 1) 4m4.822567636s ago: executing program 2 (id=759): set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000002060102000000000000000007000002050005000200000005000400000000000c000780080012400010000014002d5e686173683a69702c706f72742c69700005000100070000000900020073797a3000000000"], 0x58}}, 0x8000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r1}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x3}, 0x4) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000280)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000000c0)=0x633b, 0x4) sendmmsg(r4, &(0x7f0000002b40)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(r4, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2002, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) r6 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a3000000000050001000700000008000940000000011400088010"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) 4m4.595494872s ago: executing program 2 (id=762): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0xffffffffffffffd1) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000280)={0x0, 0x7, 0x0, 0x81, 0xffdfffff}) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) acct(0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) 3m49.65960529s ago: executing program 32 (id=762): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0xffffffffffffffd1) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000280)={0x0, 0x7, 0x0, 0x81, 0xffdfffff}) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) acct(0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) 5.612925389s ago: executing program 0 (id=2956): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x10}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x5, 0x4, 0xff, 0x0, 0xfe, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffbfffff}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) 5.312738603s ago: executing program 0 (id=2957): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f0000000000)='Ke^O', 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000018000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0200000001"], 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xb2, &(0x7f0000000000)=ANY=[@ANYBLOB="000000080000000000010000000000000000000a00000000000301000001010000000000000a00000000000301010002010000000000000a00000000000301020003010000000000000a00000000000301030004010000000000000a00000000000301040005010000000000000a00000000000301050006010000000000000a00000000000301060007010000000000000a00000000000301070008010000000000000a0000000000030108000901000000"]) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) ioctl(r4, 0x8b26, &(0x7f0000000400)="776c616e3000000000000000000000001000000001000000") ioctl(r4, 0x8b26, &(0x7f0000000440)="776c616e3100000000000000000000001000000001000000") ioctl(r4, 0x8b26, &(0x7f0000000480)="776c616e3200000000000000000000001000000001000000") r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) bind$xdp(r5, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x8440, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="e569c262f956f2fffdc720ef929e2e29fac20865a185827f96fe36d3890c880000000098b1e4b12aadbd3e45e3eba21171f9ef0000"]) ioctl$KVM_CAP_X86_GUEST_MODE(r2, 0x4068aea3, &(0x7f00000001c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000013c0)={'ip6gretap0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r7, &(0x7f00000003c0)={0x2c, 0x10, r8}, 0x10) recvfrom(r7, 0x0, 0x0, 0x2000, 0x0, 0x0) 3.874276249s ago: executing program 1 (id=2964): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000190c0)={r0, 0x0, 0x30, 0x14, @val=@netkit}, 0x1c) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r5, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000000)={'vlan0\x00'}) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000019180)="97a1606ab58e71aafe5bbd52e840795961f2e9bf92796ccfdcc9d98f213a79f8ae9e01ffe3f8244b35cf18d01b8c6e180c3b4ea4621ea6b4c9288ef3adacdb4ab3164b48327ce7f5cd1500675135b589d0e2aee950702e249496924544e16375ed49effa0d77130827b59112bb1a75f51bf79b85d72479b725ea9ebc7cf8092aab09d83ec9ad5a1afaa8c319af9b98fb6db1acd8a1b2170fdbe041c9803d69426f4a5e803ec8d96f5c295c264ed29d47927ae4438cf7defb2e3536e4075b691cc208f41516c4a6212f4149ccb4") syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) 3.869695285s ago: executing program 4 (id=2965): r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xee01, 0xee00) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xfc}, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010133}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) keyctl$chown(0x4, r0, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x0) 3.847713265s ago: executing program 4 (id=2966): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00) 3.807511056s ago: executing program 4 (id=2967): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00) (fail_nth: 1) 3.641493732s ago: executing program 4 (id=2968): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$sg(0x0, 0x9, 0x2c4340) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b700000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r7, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0xa1, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r1, 0x6a98047402e98331, 0x70bd2c, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40) recvmmsg(r0, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x100, 0x0) 3.427503812s ago: executing program 4 (id=2970): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) syz_open_dev$dri(0x0, 0x1ff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xf8, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1, 0x0, 0x4}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xf8}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) pread64(r2, &(0x7f0000000040)=""/107, 0x6b, 0xab7f) io_uring_enter(r2, 0x447c, 0xcf95, 0x28, &(0x7f0000000000)={[0x7, 0x1]}, 0x8) sendto$inet6(r0, &(0x7f0000000700)="f3eb0acac346a9c803089afcbae69bd27a0321919df73c3a2377", 0x1a, 0x4010, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)}], 0x1}}], 0x1, 0x4000801) 2.838553363s ago: executing program 0 (id=2971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{0x4, 0xfffd, 0x8, 0xe1a4}, 'syz0\x00', 0x10}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x74}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040880}, 0x4001) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$random(0xffffff9c, &(0x7f0000000100), 0x8000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r4}, 0x38) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, &(0x7f0000000680)=0x104) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001f00)=@newtaction={0x112c, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x1118, 0x1, [@m_police={0x1114, 0x1, 0x0, 0x0, {{0xb}, {0x10e8, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x25242e8}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x5, 0xad8, 0x10001, 0x8001, 0x5, 0x7fff, 0xfffffff6, 0xfffffff4, 0x46, 0x5, 0x8, 0x0, 0x1, 0xd7, 0x0, 0x97, 0x8000, 0xa3, 0x3, 0x7, 0x100, 0x44a8, 0x6, 0x8001, 0x0, 0x7, 0xc4c7, 0x7ff, 0x44, 0x3, 0x0, 0x8, 0x8, 0x28, 0x8, 0x213580fd, 0x2, 0x1, 0x0, 0x5, 0x3, 0x31, 0x7, 0x200, 0x76, 0xec8a, 0x5, 0xe, 0x101, 0x0, 0xe5, 0xc, 0x5, 0x7, 0x4, 0x2, 0x0, 0x80dd, 0xb0, 0x35a26e02, 0xffff, 0xbf, 0x83b, 0x2, 0x200000, 0x8c, 0x2bf, 0x81a8, 0x8, 0x100, 0x3, 0x400, 0x0, 0x7, 0x2, 0x0, 0xffffffff, 0x6, 0x9, 0x237, 0x8, 0xb1, 0x7, 0x11, 0x3, 0xfd, 0xb55, 0x8000, 0x5, 0x6, 0xffffffcd, 0x2, 0x4, 0x80000000, 0x9, 0x7, 0x5, 0xc56a, 0x8, 0xffff, 0x2, 0x3, 0x5c, 0x8, 0x0, 0x6, 0x3, 0x50, 0x10000, 0x8001, 0x5, 0x1, 0x6, 0x7, 0xd, 0x9, 0x10000, 0x19, 0x91d, 0x3, 0x2, 0x1, 0x3, 0x3, 0x7ff, 0x401, 0x7, 0xd70, 0x2c, 0x9, 0x3, 0x6070, 0xfff, 0x1000, 0x8, 0x4, 0x6, 0x5, 0x4, 0x7c, 0x488531db, 0x40, 0x6, 0x5, 0xfffffffb, 0x1000000, 0x1ff, 0x5, 0xc7, 0x0, 0x8, 0x5, 0x5, 0x7, 0xfffffffb, 0x5, 0x5c, 0x1000, 0x3, 0x527, 0x3, 0x5a85, 0xf6, 0xc, 0x1, 0xaa7a, 0x6, 0x1, 0xee1, 0x80000000, 0x825f, 0x9, 0x40, 0x233, 0x80000001, 0x6, 0x401, 0x9, 0x618, 0x6, 0x4, 0x1, 0x846, 0x7, 0xb46, 0x9, 0x1ff, 0xe0, 0x4, 0xd, 0x1, 0xc98, 0x3, 0xffff8000, 0xc, 0x6, 0xfe, 0x1, 0x8, 0x2, 0x2, 0x2, 0xbecd, 0x9, 0x3, 0xba, 0x400, 0x8fe1, 0x371, 0x80, 0x2, 0x8000, 0x10000, 0x9, 0x5, 0x6e36c67d, 0xbe4, 0x7f, 0x1, 0x7, 0x2, 0x3, 0x1, 0x64, 0x8843, 0x6, 0x80, 0x3, 0x6, 0xfffffe01, 0x5, 0x8001, 0xfffffff7, 0x9, 0x9, 0x3ff, 0x751, 0x0, 0x1, 0x8, 0xfffffff3, 0xe, 0x7fff, 0xff, 0x800, 0x3, 0xd, 0x80000000, 0xe, 0xc0, 0x6, 0x6397, 0x9f9, 0x239, 0x89e4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x38f43bb0}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x5e5, 0x0, 0x1, 0xa, 0x2, 0x5, 0x0, 0x5, 0x7, 0x2, 0x4, 0x0, 0x2, 0x1000, 0x7fffffff, 0x80, 0x6, 0x0, 0xffffffff, 0xaffc, 0x1, 0x34, 0x1, 0x4, 0x1, 0x5, 0x9, 0x4, 0x4, 0x1, 0x151d, 0x5, 0x6, 0xfffffffa, 0xd, 0xebc, 0x8, 0x752e, 0x8, 0x289, 0x100, 0xffffffff, 0x7f, 0x7fffffff, 0x101, 0x7f, 0x2, 0x5, 0x5, 0xfffffff7, 0x1, 0x5, 0x3, 0xd, 0x0, 0x7f, 0xffff2a91, 0x3, 0x100, 0x6, 0x2ce, 0x7f, 0xc14, 0xfff, 0x6, 0xfffffff7, 0x5, 0xd9, 0xffff6d2d, 0x7e, 0x0, 0x2, 0x4, 0xd1, 0x0, 0x0, 0x85, 0x1, 0xadfb, 0xd34, 0x9, 0xf324, 0x2000, 0x1, 0x5, 0x80, 0x1000, 0x0, 0x0, 0xecc1, 0xc, 0x1000, 0x7fffffff, 0x4, 0x4, 0x0, 0xfff, 0x7, 0x4, 0x7, 0x22, 0xa, 0x3, 0x2, 0x3e78, 0x134, 0x9, 0x80000001, 0x608, 0x80e8, 0x371, 0x8, 0x6f, 0x0, 0xfffff801, 0x6, 0x0, 0x4, 0x5, 0xffff, 0x0, 0x720fbc85, 0x101, 0x1ff, 0x48, 0xa3f, 0x4, 0xf46b, 0x9, 0x0, 0x4, 0x9, 0x401, 0x81, 0x84c, 0x6, 0x3, 0x5, 0xffff, 0x6, 0x7, 0x31a, 0xa, 0x9, 0xc16, 0x3ff, 0x0, 0x8001, 0x9, 0x1ff, 0x4, 0x68000000, 0x5, 0xfff, 0x800, 0x4, 0x30e9, 0x1, 0x9, 0x6, 0xec, 0x0, 0x7, 0x1, 0x8, 0xe0000, 0x0, 0x7, 0x8000000, 0x3, 0x7f, 0x1ff, 0x2, 0x9, 0x0, 0xfffffff1, 0xeb, 0x6, 0x10000, 0x0, 0x3, 0x6, 0x9, 0xdbe, 0x1000, 0x800, 0x3, 0x2, 0x3, 0x10001, 0xa, 0x7, 0x4, 0x4, 0xffffffff, 0x8, 0x0, 0x8000, 0x7, 0x8, 0x2, 0x8, 0x9, 0x238, 0x800, 0xffffffff, 0x4, 0x5, 0x9, 0x3c, 0x8000, 0x5, 0x1, 0x400, 0x2, 0xd, 0x200, 0xc, 0x2, 0x3, 0x1ff, 0x4, 0x0, 0x212c6b57, 0x75, 0x7, 0x70, 0xfffff219, 0xffffffc0, 0x2, 0x200, 0x6c, 0x7, 0x6, 0x9, 0x6bb1, 0x6, 0x8, 0x1, 0x9, 0x6a, 0xbf, 0x2, 0x2, 0x9, 0x9, 0x2, 0x9, 0x1, 0xc, 0x9, 0x8, 0x10000, 0x7, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6000, 0x5, 0x757ab92d, 0x9b5, 0x3, {0x3, 0x0, 0x0, 0x3, 0x7, 0x8}, {0x1, 0x1, 0x3, 0xe5e, 0x7ff, 0x8}, 0xe, 0x8, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0x5, 0x7fffffff, 0xfffffffe, {0x2, 0x2, 0x7, 0x8001, 0x101, 0x656}, {0x4, 0x1, 0x80, 0xfad, 0xe, 0x3}, 0x0, 0x9, 0xffff}}], [@TCA_POLICE_RESULT={0x8}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x8001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0x9, 0x3, 0xfffffff7, 0x1ff, 0x8, 0x4, 0x10000, 0x7fffffff, 0x0, 0x3ff, 0x9, 0x200, 0x7fff, 0x4, 0x8, 0x9000000, 0x1, 0xa, 0xffff751a, 0x1, 0x6, 0xc9e8, 0x8001, 0xffff, 0x9, 0xb, 0x8, 0x7, 0x100, 0xf, 0x2, 0x5, 0x38, 0x0, 0x5b2d, 0x0, 0x5, 0x5, 0x5, 0x9, 0x6, 0x3ff, 0x6, 0x5, 0x21, 0x1, 0x8, 0x9, 0x5, 0xf0c, 0x4, 0x1, 0xc48, 0x60000, 0x10001, 0x62e5, 0xf5, 0x3, 0x4, 0x6, 0x8, 0x6, 0x4, 0x7fff, 0x4, 0xb7, 0x4, 0x9, 0xdaff, 0xdca, 0x6711, 0x2, 0x6, 0x10001, 0x4, 0x101, 0x3, 0xde5, 0x3, 0x401, 0xffffffbc, 0x8000, 0x1, 0x6, 0xa9, 0x7, 0x9, 0x4, 0x8, 0x3, 0x1, 0xc, 0x4, 0x3, 0x6, 0x0, 0xf5, 0xf, 0x8, 0x1, 0x5, 0x3, 0x6b, 0x6, 0x8, 0x8001, 0x4, 0x0, 0x7, 0x7fff, 0x4, 0x0, 0x8, 0x9f4d, 0x9, 0x1000, 0xa10, 0x6, 0x0, 0x7, 0x7, 0x5, 0x1, 0x4, 0xfffffff7, 0x7fff, 0x9, 0x3, 0x5, 0x717, 0x5, 0x5, 0x4, 0x75, 0x401, 0x6, 0x5, 0x7, 0xd9e, 0x0, 0x7, 0x0, 0x97e2, 0x6, 0x6, 0x1ff, 0x6, 0xfffffffa, 0x2, 0x1000, 0x4, 0x800, 0xfffffff9, 0x8001, 0x3, 0x6, 0x69, 0x0, 0x6, 0x401, 0x474, 0x6, 0x1, 0x0, 0x7b75b7e8, 0xd, 0x401, 0xff, 0x3, 0xd93a, 0x6, 0xb98, 0x0, 0x401, 0x2, 0x6, 0x58, 0x3, 0x38f08769, 0xa78e, 0x7, 0x6, 0x7fff, 0x5, 0xa1b6, 0x5e5a, 0x9, 0x1, 0x1, 0x2, 0x1, 0x6, 0x2, 0xff, 0x4000, 0x0, 0x3, 0xb, 0x9, 0xc060da9, 0x8, 0xfffffffc, 0x0, 0x0, 0x1, 0x6, 0x9, 0x10, 0xa2, 0x2, 0xfffffffc, 0x10, 0x5, 0x4, 0x7392, 0x1, 0x2, 0x6, 0x6, 0x4, 0x9, 0xb1e2, 0x2, 0x1, 0xff, 0x6281, 0x5f, 0xc, 0x0, 0x2, 0x0, 0x7, 0xf987, 0xfffffff7, 0x3, 0x8, 0x2, 0x401, 0x6, 0x2, 0xb, 0x80, 0xfffffff7, 0x1, 0xffffad25, 0xa03, 0xff, 0x0, 0x2, 0x4, 0x4, 0x81, 0x4, 0x3, 0xf]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x8, 0xd4e4, 0x40, 0x3, 0x6, 0x64b8, 0x155a, 0x1000, 0x5dd900, 0x7ff, 0x2800000, 0x401, 0x5d, 0x6, 0xffff, 0x6, 0x80, 0x101, 0x3005f5ab, 0x3b7e6b03, 0xfff, 0x5, 0x2, 0x10000, 0xe, 0x8, 0x4, 0x8, 0x2, 0x7fffffff, 0x566, 0xb1, 0x5, 0x0, 0x0, 0x4, 0x81, 0x1, 0x8, 0x10001, 0x3, 0x0, 0x30000, 0x2, 0x0, 0x1, 0x0, 0x2, 0x2, 0x1, 0x0, 0x2, 0x0, 0x5, 0x1, 0x7, 0x1, 0x5, 0x1, 0x1000, 0x9, 0xfffffffb, 0x8, 0x3, 0xc00000, 0x5da, 0xffff7fff, 0x787, 0x7, 0x5, 0x8, 0x6a65, 0x1, 0x0, 0x5, 0xd6, 0x9, 0x6, 0x3, 0xa, 0xa0b0, 0xffffff81, 0x3ff, 0x1ff, 0xfffffff6, 0xa, 0xf, 0x6, 0x6, 0x7fffffff, 0x3, 0x10000, 0x31a2, 0x10000, 0x9, 0x5d86a571, 0x101, 0x8, 0x9, 0x1, 0x3, 0x2, 0x3, 0xa361, 0x4, 0xfffffff8, 0x80000000, 0x10001, 0xe, 0x2, 0x3d7a3cad, 0xcba, 0x7, 0x8, 0x7, 0x4, 0x800, 0x2, 0x2, 0x7, 0xfffffe00, 0x9, 0xbb7, 0x10, 0x9, 0x1, 0x5, 0x0, 0xff, 0xf, 0x45f, 0x7, 0x6, 0x9, 0x3, 0x7, 0x9, 0xfffffc01, 0x1b9, 0x1ff, 0x10000, 0x2, 0x8, 0xf, 0x5, 0x2, 0x3, 0xecd4, 0xd7, 0x7, 0x6, 0x7, 0x5, 0x7, 0x4, 0x78ad195f, 0x2, 0x6, 0xc, 0x1, 0x7, 0x76, 0xffffffff, 0x4, 0x8, 0x3, 0x7, 0x4, 0x400, 0x5, 0x0, 0x7, 0x2, 0xff, 0xbcdc, 0x40, 0x5, 0x5, 0x2, 0x9, 0x1, 0x2, 0x6, 0x3, 0x39f6, 0xfff, 0x40, 0x5, 0xbf, 0xe8, 0x7fff, 0x2, 0x8, 0x10000, 0x80000001, 0x5, 0x3, 0xc7, 0x7ff, 0x0, 0xfffffff9, 0x3, 0xd23, 0x4, 0x66, 0x2, 0xffffffff, 0x6, 0x9, 0x5, 0x4, 0x8, 0x7, 0xd, 0x7, 0x9, 0x2, 0x5, 0xffffffd4, 0x0, 0xfff, 0x0, 0x6, 0x200, 0x0, 0x0, 0x2, 0x0, 0x7f, 0xfffff801, 0x8, 0x4, 0x9, 0x3, 0x9, 0x2, 0x0, 0xfff, 0x800, 0x9, 0x40, 0x5, 0xfffffffb, 0x8, 0x799, 0x4, 0x3, 0x9, 0x80, 0x3, 0x4, 0x7f, 0x0, 0x4, 0x57]}]]}, {0x4}, {0xc, 0x3, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x112c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000001780)=ANY=[@ANYBLOB="fcc80045004100010002030400ff0fffff04080c000000cb75070205080702d509050311000080590b000007023000050101020204000d0308000300f537e9000500060c040007000100"], 0x4a) flock(0xffffffffffffffff, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000003010101000000001646741400000000"], 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x80) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000040)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-avx\x00'}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000300)="80ba9fe37fe15a4003faed2aa9e3563d271030df15105f522e579c6c6290bec90b4f8210a0f02e15b44b489261f66f7b55590ab6b57c91bdfaddcdd76da1e17c1ebd1e6fe8d347d26d9c22ca75fd4066debe5346f9f1de6ca20ded2e2265a6fe8a9d3311508e0033abbbc5dce4fd4276b6c2af72fae05562868f55a38d65bfbe0a81875ed4d0fc68df802cae8bdf976328000b906deb7ff649363e341a34c8903dbefef1cd63a4286405f603e1d0030aa2b26c16d22f0187b6dc372249d5a70f1640e3f1736951", 0xc7}, {&(0x7f0000000400)="d0b60c8e4f23a541b142399ff1171fa464f6ae93c7", 0x15}, {&(0x7f0000000440)="e9a382cb415c427737332b8793744a6be8d7063a063237bcf02ffe0958161a027232e909508c526f5c29b0100731cea6caf22ab49719088c2e23b01798773e78c866f04dfe7a527ff46ce7ae8ce7270e7781918b961b75bbb891fca4d623a9a3e44ce3ed334a95add657e440a499931b6b362c0f1822b33bc546bab04a2c5de7d9e2579627b52afa2674f1006f0fa1eddc61d85163c02964c7f1adc2afef586ebcecd72c22bf894a35299b24ae1d8ac4d64986987490912196780ef837", 0xbd}], 0x3}, 0x1) 2.501611457s ago: executing program 4 (id=2973): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000190c0)={r0, 0x0, 0x30, 0x14, @val=@netkit}, 0x1c) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r5, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000000)={'vlan0\x00'}) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000019180)="97a1606ab58e71aafe5bbd52e840795961f2e9bf92796ccfdcc9d98f213a79f8ae9e01ffe3f8244b35cf18d01b8c6e180c3b4ea4621ea6b4c9288ef3adacdb4ab3164b48327ce7f5cd1500675135b589d0e2aee950702e249496924544e16375ed49effa0d77130827b59112bb1a75f51bf79b85d72479b725ea9ebc7cf8092aab09d83ec9ad5a1afaa8c319af9b98fb6db1acd8a1b2170fdbe041c9803d69426f4a5e803ec8d96f5c295c264ed29d47927ae4438cf7defb2e3536e4075b691cc208f41516c4a6212f4149ccb4") syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) 1.344560076s ago: executing program 0 (id=2975): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x10}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x5, 0x4, 0xff, 0x0, 0xfe, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffbfffff}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) 1.099274833s ago: executing program 0 (id=2976): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000f07d860b02ffed56c8e87181fef57148d14b0a4b887c94260d313a440ca0b91ed6af131ac2b0014a6b9eba5fe8ea4afa0d6682156bc4645fd0aceba49cd181cf2d73d1ce1905d190a753e008d971bb355240448cfd4f920f1c57fbe3cac8703adacbe7c2c57a2ed867c0b72616c25090bfd49317b803b058f8f6ebf30d29e9e5d09b583518a5324d4301e0d406642e5aca31e4c412a8a5722be8c72132220e7ead1ccfd8b263fcf5a678012a55b723a470f618c82834ec951d95395826500cf5cfa826c0a1df000000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$procfs(0xffffff9c, &(0x7f0000000340)='/proc/meminfo\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x10001}}, './file1\x00'}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r5, 0xb00}], 0x1, 0x0, 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000180)={{r0}, 0x3, 0x1000, 0x9}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x6}, 0x8) r6 = dup2(r4, r0) getsockopt$sock_buf(r6, 0x1, 0x1a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) 771.156072ms ago: executing program 3 (id=2978): r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x9902, 0x1f280, 0x10, 0x39b}) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_io_timeout/interval\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x63e, &(0x7f00000001c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x608, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, [{0x5, 0xe, "7db4000005d4a3b4364be7baa2d73b4ac24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d980110420fa979a3"}, {0x0, 0x9, "1598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e8f222b9ddc4e0bfb5e5c9a484353b785e79b4d8181cf146261723484c54803466e8bedb8ecd2"}, {0x1f, 0x4, "d429145c793e823829b4376332b2c98aee2dae3e1cb11adb2b381eb30650ac6c45f9"}, {0x0, 0xa2, "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"}]}}}}}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000380)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xff}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, [@hopopts={0x3a}], '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 655.641584ms ago: executing program 3 (id=2979): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x75bf048eec1962be, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x6d, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x1ff}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) r4 = socket$inet_sctp(0x2, 0x0, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000003c0)={r6}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000600)={r6, 0x10}, 0x8) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r7) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES16=r7, @ANYRES8=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x44805}, 0x4000) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@private1, 0x0}, &(0x7f0000000140)=0x14) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, r8}, 0x14) fcntl$setlease(r0, 0x400, 0x2) r9 = socket$inet(0x2b, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_clone3(&(0x7f0000000080)={0x0, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x33}, 0x0, 0x5d, 0x0, 0x0, 0x0, {r10}}, 0x58) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000340)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000380)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000004c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000500)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r7, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r12, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) pidfd_send_signal(r11, 0x21, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x480, 0x0, 0xffffffffffffffe0) 520.375615ms ago: executing program 1 (id=2980): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0x20, 0x0, 0x80, 0x3, 0x1, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x7, 0xffff, 0x3, 0x7, 0x8001, [0x0, 0x7]}}) (fail_nth: 1) 409.277574ms ago: executing program 3 (id=2981): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$packet(0x11, 0x2, 0x300) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x119) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000080)={0x3, "8faa7ab68aefc96940add94dd986d4f32634f14a10c1df59d27a3e745fb11661b2c297044eb0864509a8cbc7c48a18ef12f2fb379d0c1959605e2a52b1586bde"}) (fail_nth: 1) 408.973557ms ago: executing program 1 (id=2982): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="05005b"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x24, r6, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "a6"}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000808}, 0x20000060) sendmmsg(r0, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848) 390.716468ms ago: executing program 1 (id=2983): mlock(&(0x7f0000a74000/0x1000)=nil, 0x1000) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xffffffffffffffff}}, './file0\x00'}) openat$cgroup_int(r1, &(0x7f0000000040)='io.latency\x00', 0x2, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) mlock(&(0x7f0000a74000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) (async) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xffffffffffffffff}}, './file0\x00'}) (async) openat$cgroup_int(r1, &(0x7f0000000040)='io.latency\x00', 0x2, 0x0) (async) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) (async) 390.567059ms ago: executing program 3 (id=2984): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x10}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x5, 0x4, 0xff, 0x0, 0xfe, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffbfffff}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) 250.698441ms ago: executing program 1 (id=2985): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x30024404, 0x0, 0xfffe, 0x9, 0xfffffffe, 0x0, 0x0, 0x10, 0x4}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x13) close(r0) r3 = socket(0x10, 0x3, 0x0) r4 = epoll_create1(0x0) dup3(r2, r3, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x20000010) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000100)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}]) r7 = epoll_create1(0x0) r8 = dup3(r3, r7, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r8, &(0x7f0000000300)={0x200f}) (fail_nth: 1) 191.790537ms ago: executing program 0 (id=2986): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x30024404, 0x0, 0xfffe, 0x9, 0xfffffffe, 0x0, 0x0, 0x10, 0x4}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x13) close(r0) r3 = socket(0x10, 0x3, 0x0) r4 = epoll_create1(0x0) dup3(r2, r3, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x20000010) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000100)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}]) r7 = epoll_create1(0x0) r8 = dup3(r3, r7, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r8, &(0x7f0000000300)={0x200f}) 121.637315ms ago: executing program 3 (id=2987): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101201, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f0000000080)={0xc7, 0x0, 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x7ffe}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRESOCT=r5, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000080000002300000007000000c1000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.483881ms ago: executing program 3 (id=2988): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000600)={&(0x7f0000000340)="31f17dc1b5d07bf69ef75ea3ed610a6d70e97cbae38d15b768abbdfcfe7a0e0f681bc99373ac04f43142d4b0f38c0b55d34ffe54955f94c32ba396a6c414f1032ab50715a7e7be8d7ef5a6d8b39e2239feff48db871a2741419386853147703efde3b86e1402d10a9d46b88198e0d2a057ffea6fb0700d6db9d7c889e083b25b8dc0f8094e3e4d803b5df1c93603381ab35a01f10d4fe253bc1d63ea8f88b3b433349fa0d0a3dd7b56e79598638af00c94bbdf09ed407edb94563724c89496f5a349ddb6f1e9d1c8b473", &(0x7f0000000440)=""/88, &(0x7f00000004c0)="cd6881686eb0388e74207795929dd2981cc8b52b0762f5212b42b7d8127a0b9a149ca33edcce0aa3e370c1badb9959c6fef021b45cbe862a9dad", &(0x7f0000000500)="1f286a9f10f04c379178d008e6e7fcb0691e5235279a56b54902ed54badbf2da0c18e661df99addf93743a13e46ac110ce3f85ca3dd01e612762506310c8ecebca8602b7310a10d45da026761151a51f08d9c9eae6917025268a7809831d461af51d203bc225f30042", 0xa9db, r2, 0x4}, 0x38) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x30024404, 0x0, 0xfffe, 0x9, 0xfffffffe, 0x0, 0x0, 0x10, 0x4}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x13) close(r0) r4 = socket(0x10, 0x3, 0x0) dup3(r3, r4, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x20000010) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r5, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'wg0\x00', @ifru_map={0x7, 0xb, 0xffff, 0x84, 0x9, 0x5}}) ioctl$sock_netdev_private(r6, 0x8948, &(0x7f0000000000)) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r7, &(0x7f0000000340)="31ca", 0x2) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x260081, 0xa0) write(r8, &(0x7f0000000140)="2e2f30a9efdfd4981b0c2ad178c2a1b338000000", 0x14) r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r9, &(0x7f00000004c0)='1', 0x1) close(r9) 0s ago: executing program 1 (id=2996): r0 = syz_clone(0x0, 0x0, 0xffffff36, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) ptrace(0x10, r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) kernel console output (not intermixed with test programs): 000000000000 R09: 0000000000000000 [ 322.910590][T16051] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 322.910601][T16051] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.910623][T16051] [ 322.974380][T16057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2752'. [ 323.146680][ T5812] wiimote 0005:057E:0306.0004: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 323.147534][ T5812] wiimote 0005:057E:0306.0004: New device registered [ 323.199342][T16068] batman_adv: batadv0: Adding interface: veth0 [ 323.199433][T16068] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.199770][T16068] batman_adv: batadv0: Interface activated: veth0 [ 323.209852][T16068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.209886][T16068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.227064][T16070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2756'. [ 323.233472][T16068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.233564][T16068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.257227][T16068] batman_adv: batadv0: Interface deactivated: veth0 [ 323.257392][T16068] batman_adv: batadv0: Removing interface: veth0 [ 323.910569][T16065] wiimote 0005:057E:0306.0004: Device removed [ 324.128188][T16075] FAULT_INJECTION: forcing a failure. [ 324.128188][T16075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.128260][T16075] CPU: 1 UID: 0 PID: 16075 Comm: syz.4.2757 Tainted: G L syzkaller #0 PREEMPT(full) [ 324.128292][T16075] Tainted: [L]=SOFTLOCKUP [ 324.128298][T16075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 324.128305][T16075] Call Trace: [ 324.128310][T16075] [ 324.128316][T16075] dump_stack_lvl+0x100/0x190 [ 324.128336][T16075] should_fail_ex.cold+0x5/0xa [ 324.128352][T16075] _copy_from_user+0x2e/0xd0 [ 324.128367][T16075] get_compat_msghdr+0xb3/0x480 [ 324.128386][T16075] ? __pfx_get_compat_msghdr+0x10/0x10 [ 324.128408][T16075] ___sys_sendmsg+0x1b6/0x1e0 [ 324.128430][T16075] ? __pfx____sys_sendmsg+0x10/0x10 [ 324.128455][T16075] ? find_held_lock+0x2b/0x80 [ 324.128477][T16075] __sys_sendmsg+0x160/0x210 [ 324.128492][T16075] ? __pfx___sys_sendmsg+0x10/0x10 [ 324.128510][T16075] ? __pfx_ksys_write+0x10/0x10 [ 324.128524][T16075] __do_fast_syscall_32+0x13a/0x8b0 [ 324.128545][T16075] ? lockdep_hardirqs_on+0x7d/0x110 [ 324.128561][T16075] do_fast_syscall_32+0x32/0x70 [ 324.128577][T16075] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 324.128593][T16075] RIP: 0023:0xf7f53fec [ 324.128635][T16075] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 324.128645][T16075] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 324.128663][T16075] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000900 [ 324.128672][T16075] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 324.128681][T16075] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 324.128691][T16075] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 324.128701][T16075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 324.128715][T16075] [ 324.204231][ T64] Bluetooth: hci2: command 0x0405 tx timeout [ 324.204338][ T5735] Bluetooth: hci0: command 0x0c1a tx timeout [ 324.209313][ T25] wiimote 0005:057E:0306.0004: detected device: Nintendo Wii Remote (Gen 1) [ 324.242356][ T25] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input81 [ 324.307970][ T25] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input82 [ 324.319759][T16081] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 324.326268][ T25] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input80 [ 324.394851][T16089] mac80211_hwsim hwsim12 syzkaller0: Caught tx_queue_len zero misconfig [ 324.400204][T16089] FAULT_INJECTION: forcing a failure. [ 324.400204][T16089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.400701][T16089] CPU: 3 UID: 0 PID: 16089 Comm: syz.4.2762 Tainted: G L syzkaller #0 PREEMPT(full) [ 324.400729][T16089] Tainted: [L]=SOFTLOCKUP [ 324.400736][T16089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 324.400755][T16089] Call Trace: [ 324.400761][T16089] [ 324.400769][T16089] dump_stack_lvl+0x100/0x190 [ 324.400798][T16089] should_fail_ex.cold+0x5/0xa [ 324.400821][T16089] _copy_from_user+0x2e/0xd0 [ 324.400842][T16089] get_compat_msghdr+0xb3/0x480 [ 324.400869][T16089] ? __pfx_get_compat_msghdr+0x10/0x10 [ 324.400902][T16089] ___sys_sendmsg+0x1b6/0x1e0 [ 324.400930][T16089] ? __pfx____sys_sendmsg+0x10/0x10 [ 324.400967][T16089] ? find_held_lock+0x2b/0x80 [ 324.400999][T16089] __sys_sendmsg+0x160/0x210 [ 324.401020][T16089] ? __pfx___sys_sendmsg+0x10/0x10 [ 324.401046][T16089] ? __pfx_ksys_write+0x10/0x10 [ 324.401070][T16089] __do_fast_syscall_32+0x13a/0x8b0 [ 324.401093][T16089] ? lockdep_hardirqs_on+0x7d/0x110 [ 324.401117][T16089] do_fast_syscall_32+0x32/0x70 [ 324.401140][T16089] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 324.401162][T16089] RIP: 0023:0xf7f53fec [ 324.401184][T16089] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 324.401193][T16089] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 324.401211][T16089] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000000 [ 324.401244][T16089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 324.401255][T16089] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 324.401266][T16089] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 324.401277][T16089] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 324.401300][T16089] [ 324.647997][T16096] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 324.650577][T16096] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 324.654513][T16096] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 324.671943][T16093] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input83 [ 324.763206][ T5918] usb 9-1: new full-speed USB device number 51 using dummy_hcd [ 324.913217][ T5918] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 324.914500][ T5918] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 324.914528][ T5918] usb 9-1: config 0 has no interface number 0 [ 324.914556][ T5918] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 324.914578][ T5918] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 324.914599][ T5918] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 324.916278][ T5918] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 324.916297][ T5918] usb 9-1: Product: syz [ 324.916310][ T5918] usb 9-1: SerialNumber: syz [ 324.918679][ T5918] usb 9-1: config 0 descriptor?? [ 324.921286][ T5918] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 324.928288][ T5918] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input84 [ 325.127102][T16095] FAULT_INJECTION: forcing a failure. [ 325.127102][T16095] name failslab, interval 1, probability 0, space 0, times 0 [ 325.132632][T16095] CPU: 0 UID: 0 PID: 16095 Comm: syz.4.2765 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.132668][T16095] Tainted: [L]=SOFTLOCKUP [ 325.132676][T16095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 325.132687][T16095] Call Trace: [ 325.132697][T16095] [ 325.132706][T16095] dump_stack_lvl+0x100/0x190 [ 325.132737][T16095] should_fail_ex.cold+0x5/0xa [ 325.132760][T16095] should_failslab+0xc2/0x120 [ 325.132783][T16095] __kmalloc_noprof+0xfc/0x840 [ 325.132801][T16095] ? rcu_is_watching+0x13/0xc0 [ 325.132819][T16095] ? tomoyo_realpath_from_path+0xb6/0x690 [ 325.132851][T16095] tomoyo_realpath_from_path+0xb6/0x690 [ 325.132882][T16095] tomoyo_path_number_perm+0x23c/0x580 [ 325.132903][T16095] ? tomoyo_path_number_perm+0x22e/0x580 [ 325.132926][T16095] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 325.132949][T16095] ? get_pid_task+0x106/0x250 [ 325.132973][T16095] ? __lock_acquire+0x4c5/0x1ec0 [ 325.133007][T16095] ? __fget_files+0x34/0x3d0 [ 325.133027][T16095] ? find_held_lock+0x2b/0x80 [ 325.133044][T16095] ? __fget_files+0x215/0x3d0 [ 325.133060][T16095] ? hook_file_ioctl_common+0x140/0x440 [ 325.133083][T16095] ? __fget_files+0x215/0x3d0 [ 325.133104][T16095] ? __fget_files+0x21f/0x3d0 [ 325.133127][T16095] security_file_ioctl_compat+0xd3/0x230 [ 325.133152][T16095] __ia32_compat_sys_ioctl+0xc2/0x360 [ 325.133182][T16095] __do_fast_syscall_32+0x13a/0x8b0 [ 325.133205][T16095] ? lockdep_hardirqs_on+0x7d/0x110 [ 325.133228][T16095] do_fast_syscall_32+0x32/0x70 [ 325.133250][T16095] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 325.133272][T16095] RIP: 0023:0xf7f53fec [ 325.133296][T16095] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 325.133304][T16095] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 325.133324][T16095] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040084504 [ 325.133334][T16095] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 325.133345][T16095] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 325.133355][T16095] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 325.133364][T16095] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 325.133387][T16095] [ 325.133396][T16095] ERROR: Out of memory at tomoyo_realpath_from_path. [ 325.162391][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 325.164367][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 325.166366][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 325.166648][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 325.166829][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 325.167002][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 325.167190][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 325.167361][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 325.167539][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 325.167709][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 325.170296][ T42] usb 9-1: USB disconnect, device number 51 [ 325.178823][ T42] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 325.672588][ T5918] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 325.732870][ T6164] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 325.833833][T16113] syzkaller1: entered allmulticast mode [ 325.845449][ T5918] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 325.846772][ T5918] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 325.846796][ T5918] usb 8-1: config 0 has no interface number 0 [ 325.846828][ T5918] usb 8-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 325.846852][ T5918] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 325.846875][ T5918] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 325.848374][ T5918] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 325.848395][ T5918] usb 8-1: Product: syz [ 325.848407][ T5918] usb 8-1: SerialNumber: syz [ 325.850612][ T5918] usb 8-1: config 0 descriptor?? [ 325.862726][ T5918] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 325.865417][ T5918] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input85 [ 325.883318][ T6164] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 325.884261][ T6164] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 325.884283][ T6164] usb 6-1: config 0 has no interface number 0 [ 325.884314][ T6164] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 325.884334][ T6164] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 325.884351][ T6164] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 325.885989][ T6164] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 325.886011][ T6164] usb 6-1: Product: syz [ 325.886019][ T6164] usb 6-1: SerialNumber: syz [ 325.889786][ T6164] usb 6-1: config 0 descriptor?? [ 325.893886][ T6164] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 325.900837][ T6164] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input86 [ 326.010874][T16115] syzkaller1: entered allmulticast mode [ 326.013540][T16115] FAULT_INJECTION: forcing a failure. [ 326.013540][T16115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.013604][T16115] CPU: 3 UID: 0 PID: 16115 Comm: syz.4.2772 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.013633][T16115] Tainted: [L]=SOFTLOCKUP [ 326.013649][T16115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 326.013659][T16115] Call Trace: [ 326.013664][T16115] [ 326.013669][T16115] dump_stack_lvl+0x100/0x190 [ 326.013690][T16115] should_fail_ex.cold+0x5/0xa [ 326.013708][T16115] _copy_from_iter+0x1f4/0x1690 [ 326.013723][T16115] ? __lock_acquire+0x4c5/0x1ec0 [ 326.013741][T16115] ? __pfx__copy_from_iter+0x10/0x10 [ 326.013755][T16115] ? lock_acquire+0x1d1/0x380 [ 326.013770][T16115] ? aa_file_perm+0x197/0x14d0 [ 326.013789][T16115] ? find_held_lock+0x2b/0x80 [ 326.013803][T16115] tun_get_user+0x265/0x3cc0 [ 326.013823][T16115] ? __lock_acquire+0x4c5/0x1ec0 [ 326.013838][T16115] ? __pfx_tun_get_user+0x10/0x10 [ 326.013851][T16115] ? lockdep_hardirqs_on+0x7d/0x110 [ 326.013867][T16115] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 326.013888][T16115] ? find_held_lock+0x2b/0x80 [ 326.013900][T16115] ? tun_get+0x191/0x370 [ 326.013910][T16115] ? tun_get+0x191/0x370 [ 326.013925][T16115] tun_chr_write_iter+0xdc/0x200 [ 326.013940][T16115] vfs_write+0x6af/0x1050 [ 326.013953][T16115] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 326.013968][T16115] ? __pfx_vfs_write+0x10/0x10 [ 326.013977][T16115] ? find_held_lock+0x2b/0x80 [ 326.013997][T16115] ksys_write+0x12a/0x250 [ 326.014008][T16115] ? __pfx_ksys_write+0x10/0x10 [ 326.014018][T16115] ? ksys_write+0x1ac/0x250 [ 326.014028][T16115] ? __pfx_ksys_write+0x10/0x10 [ 326.014042][T16115] __do_fast_syscall_32+0x13a/0x8b0 [ 326.014059][T16115] ? lockdep_hardirqs_on+0x7d/0x110 [ 326.014074][T16115] do_fast_syscall_32+0x32/0x70 [ 326.014090][T16115] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.014106][T16115] RIP: 0023:0xf7f53fec [ 326.014122][T16115] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 326.014128][T16115] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 326.014140][T16115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 326.014147][T16115] RDX: 0000000000000044 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.014154][T16115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 326.014160][T16115] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 326.014166][T16115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 326.014180][T16115] [ 326.064281][ T6164] usb 8-1: USB disconnect, device number 12 [ 326.064433][ C3] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 326.065660][ T6164] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 326.101409][ T5918] usb 6-1: USB disconnect, device number 5 [ 326.101496][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 326.102279][ T5918] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 326.292843][ T5735] Bluetooth: hci0: command 0x0c1a tx timeout [ 326.438071][T16124] FAULT_INJECTION: forcing a failure. [ 326.438071][T16124] name failslab, interval 1, probability 0, space 0, times 0 [ 326.438135][T16124] CPU: 1 UID: 0 PID: 16124 Comm: syz.4.2775 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.438165][T16124] Tainted: [L]=SOFTLOCKUP [ 326.438172][T16124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 326.438180][T16124] Call Trace: [ 326.438185][T16124] [ 326.438190][T16124] dump_stack_lvl+0x100/0x190 [ 326.438212][T16124] should_fail_ex.cold+0x5/0xa [ 326.438229][T16124] should_failslab+0xc2/0x120 [ 326.438245][T16124] __kmalloc_noprof+0xfc/0x840 [ 326.438258][T16124] ? rcu_is_watching+0x13/0xc0 [ 326.438271][T16124] ? tomoyo_realpath_from_path+0xb6/0x690 [ 326.438308][T16124] tomoyo_realpath_from_path+0xb6/0x690 [ 326.438345][T16124] tomoyo_path_number_perm+0x23c/0x580 [ 326.438370][T16124] ? tomoyo_path_number_perm+0x22e/0x580 [ 326.438396][T16124] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 326.438419][T16124] ? get_pid_task+0x106/0x250 [ 326.438447][T16124] ? __lock_acquire+0x4c5/0x1ec0 [ 326.438484][T16124] ? __fget_files+0x34/0x3d0 [ 326.438505][T16124] ? find_held_lock+0x2b/0x80 [ 326.438525][T16124] ? __fget_files+0x215/0x3d0 [ 326.438546][T16124] ? hook_file_ioctl_common+0x140/0x440 [ 326.438570][T16124] ? __fget_files+0x215/0x3d0 [ 326.438587][T16124] ? __fget_files+0x21f/0x3d0 [ 326.438603][T16124] security_file_ioctl_compat+0xd3/0x230 [ 326.438621][T16124] __ia32_compat_sys_ioctl+0xc2/0x360 [ 326.438643][T16124] __do_fast_syscall_32+0x13a/0x8b0 [ 326.438660][T16124] ? lockdep_hardirqs_on+0x7d/0x110 [ 326.438678][T16124] do_fast_syscall_32+0x32/0x70 [ 326.438695][T16124] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.438711][T16124] RIP: 0023:0xf7f53fec [ 326.438726][T16124] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 326.438732][T16124] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 326.438745][T16124] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0505405 [ 326.438752][T16124] RDX: 00000000800006c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.438760][T16124] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 326.438767][T16124] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 326.438774][T16124] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 326.438789][T16124] [ 326.439027][T16124] ERROR: Out of memory at tomoyo_realpath_from_path. [ 326.944025][T16128] comedi: valid board names for 8255 driver are: [ 326.944078][T16128] 8255 [ 326.944120][T16128] comedi: valid board names for vmk80xx driver are: [ 326.944143][T16128] vmk80xx [ 326.944164][T16128] comedi: valid board names for usbduxsigma driver are: [ 326.944187][T16128] usbduxsigma [ 326.944210][T16128] comedi: valid board names for usbduxfast driver are: [ 326.944235][T16128] usbduxfast [ 326.944259][T16128] comedi: valid board names for usbdux driver are: [ 326.944282][T16128] usbdux [ 326.944304][T16128] comedi: valid board names for ni6501 driver are: [ 326.944328][T16128] ni6501 [ 326.944354][T16128] comedi: valid board names for dt9812 driver are: [ 326.944409][T16128] dt9812 [ 326.944430][T16128] comedi: valid board names for ni_labpc_cs driver are: [ 326.944460][T16128] ni_labpc_cs [ 326.944483][T16128] comedi: valid board names for ni_daq_700 driver are: [ 326.944508][T16128] ni_daq_700 [ 326.944531][T16128] comedi: valid board names for labpc_pci driver are: [ 326.944553][T16128] labpc_pci [ 326.944575][T16128] comedi: valid board names for adl_pci9118 driver are: [ 326.944630][T16128] pci9118dg [ 326.944653][T16128] pci9118hg [ 326.944674][T16128] pci9118hr [ 326.944696][T16128] comedi: valid board names for 8255_pci driver are: [ 326.944719][T16128] 8255_pci [ 326.944741][T16128] comedi: valid board names for s526 driver are: [ 326.944764][T16128] s526 [ 326.944786][T16128] comedi: valid board names for multiq3 driver are: [ 326.944810][T16128] multiq3 [ 326.944831][T16128] comedi: valid board names for pcmuio driver are: [ 326.944855][T16128] pcmuio48 [ 326.944877][T16128] pcmuio96 [ 326.944900][T16128] comedi: valid board names for pcmmio driver are: [ 326.944922][T16128] pcmmio [ 326.944946][T16128] comedi: valid board names for pcmda12 driver are: [ 326.944969][T16128] pcmda12 [ 326.944993][T16128] comedi: valid board names for pcmad driver are: [ 326.945015][T16128] pcmad12 [ 326.945038][T16128] pcmad16 [ 326.945060][T16128] comedi: valid board names for ni_labpc driver are: [ 326.945084][T16128] lab-pc-1200 [ 326.945105][T16128] lab-pc-1200ai [ 326.945128][T16128] lab-pc+ [ 326.945149][T16128] comedi: valid board names for atmio16 driver are: [ 326.945174][T16128] atmio16 [ 326.945195][T16128] atmio16d [ 326.945218][T16128] comedi: valid board names for ni_at_ao driver are: [ 326.945240][T16128] at-ao-6 [ 326.945262][T16128] at-ao-10 [ 326.945285][T16128] comedi: valid board names for ni_at_a2150 driver are: [ 326.945308][T16128] ni_at_a2150 [ 326.945333][T16128] comedi: valid board names for adq12b driver are: [ 326.945358][T16128] adq12b [ 326.945381][T16128] comedi: valid board names for mpc624 driver are: [ 326.945405][T16128] mpc624 [ 326.945426][T16128] comedi: valid board names for c6xdigio driver are: [ 326.945454][T16128] c6xdigio [ 326.945475][T16128] comedi: valid board names for aio_iiro_16 driver are: [ 326.945501][T16128] aio_iiro_16 [ 326.945524][T16128] comedi: valid board names for aio_aio12_8 driver are: [ 326.945550][T16128] aio_aio12_8 [ 326.945574][T16128] aio_ai12_8 [ 326.945597][T16128] aio_ao12_4 [ 326.945620][T16128] comedi: valid board names for fl512 driver are: [ 326.945645][T16128] fl512 [ 326.945668][T16128] comedi: valid board names for dmm32at driver are: [ 326.945692][T16128] dmm32at [ 326.945716][T16128] comedi: valid board names for dt282x driver are: [ 326.945740][T16128] dt2821 [ 326.945763][T16128] dt2821-f [ 326.945787][T16128] dt2821-g [ 326.945808][T16128] dt2823 [ 326.945831][T16128] dt2824-pgh [ 326.945852][T16128] dt2824-pgl [ 326.945874][T16128] dt2825 [ 326.945896][T16128] dt2827 [ 326.945918][T16128] dt2828 [ 326.945941][T16128] dt2829 [ 326.945964][T16128] dt21-ez [ 326.945987][T16128] dt23-ez [ 326.946009][T16128] dt24-ez [ 326.946032][T16128] dt24-ez-pgl [ 326.946054][T16128] comedi: valid board names for dt2817 driver are: [ 326.946077][T16128] dt2817 [ 326.946097][T16128] comedi: valid board names for dt2815 driver are: [ 326.952622][ T43] kauditd_printk_skb: 189 callbacks suppressed [ 326.952641][ T43] audit: type=1800 audit(326.861:5020): pid=16129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2777" name="new_id" dev="sysfs" ino=54844 res=0 errno=0 [ 326.957466][T16129] snd_hda_intel 0000:00:00.0: Unknown PCI class/subclass/prog-if information (0x060000) found, selecting HDAudio legacy driver [ 326.957494][T16129] snd_hda_intel 0000:00:00.0: Too small PCI BAR0 [ 326.957509][T16129] snd_hda_intel 0000:00:00.0: probe with driver snd_hda_intel failed with error -22 [ 327.072618][T16128] dt2815 [ 327.072633][T16128] comedi: valid board names for dt2814 driver are: [ 327.072642][T16128] dt2814 [ 327.072648][T16128] comedi: valid board names for dt2811 driver are: [ 327.072656][T16128] dt2811-pgh [ 327.072662][T16128] dt2811-pgl [ 327.072669][T16128] comedi: valid board names for dt2801 driver are: [ 327.072676][T16128] dt2801 [ 327.072682][T16128] comedi: valid board names for das6402 driver are: [ 327.072690][T16128] das6402-12 [ 327.072697][T16128] das6402-16 [ 327.072703][T16128] comedi: valid board names for das1800 driver are: [ 327.072710][T16128] das-1701st [ 327.072717][T16128] das-1701st-da [ 327.072723][T16128] das-1702st [ 327.072729][T16128] das-1702st-da [ 327.072735][T16128] das-1702hr [ 327.072741][T16128] das-1702hr-da [ 327.072748][T16128] das-1701ao [ 327.072754][T16128] das-1702ao [ 327.072760][T16128] das-1801st [ 327.072766][T16128] das-1801st-da [ 327.072772][T16128] das-1802st [ 327.072778][T16128] das-1802st-da [ 327.072784][T16128] das-1802hr [ 327.072790][T16128] das-1802hr-da [ 327.072797][T16128] das-1801hc [ 327.072803][T16128] das-1802hc [ 327.072809][T16128] das-1801ao [ 327.072815][T16128] das-1802ao [ 327.072821][T16128] comedi: valid board names for das800 driver are: [ 327.072829][T16128] das-800 [ 327.072835][T16128] cio-das800 [ 327.072842][T16128] das-801 [ 327.072848][T16128] cio-das801 [ 327.072853][T16128] das-802 [ 327.072859][T16128] cio-das802 [ 327.072865][T16128] cio-das802/16 [ 327.072871][T16128] comedi: valid board names for isa-das08 driver are: [ 327.072879][T16128] isa-das08 [ 327.072885][T16128] das08-pgm [ 327.072891][T16128] das08-pgh [ 327.072896][T16128] das08-pgl [ 327.072902][T16128] das08-aoh [ 327.072908][T16128] das08-aol [ 327.072914][T16128] das08-aom [ 327.072920][T16128] das08/jr-ao [ 327.072926][T16128] das08jr-16-ao [ 327.072932][T16128] pc104-das08 [ 327.072938][T16128] das08jr/16 [ 327.072945][T16128] comedi: valid board names for das16m1 driver are: [ 327.072952][T16128] das16m1 [ 327.072958][T16128] comedi: valid board names for dac02 driver are: [ 327.072965][T16128] dac02 [ 327.072971][T16128] comedi: valid board names for rti802 driver are: [ 327.072979][T16128] rti802 [ 327.072985][T16128] comedi: valid board names for rti800 driver are: [ 327.072992][T16128] rti800 [ 327.072998][T16128] rti815 [ 327.073004][T16128] comedi: valid board names for pcm3724 driver are: [ 327.073011][T16128] pcm3724 [ 327.073017][T16128] comedi: valid board names for pcl818 driver are: [ 327.073025][T16128] pcl818l [ 327.073031][T16128] pcl818h [ 327.073037][T16128] pcl818hd [ 327.073043][T16128] pcl818hg [ 327.073049][T16128] pcl818 [ 327.073055][T16128] pcl718 [ 327.073061][T16128] pcm3718 [ 327.073067][T16128] comedi: valid board names for pcl816 driver are: [ 327.073074][T16128] pcl816 [ 327.073080][T16128] pcl814b [ 327.073087][T16128] comedi: valid board names for pcl812 driver are: [ 327.073095][T16128] pcl812 [ 327.073101][T16128] pcl812pg [ 327.073107][T16128] acl8112pg [ 327.073112][T16128] acl8112dg [ 327.073119][T16128] acl8112hg [ 327.073125][T16128] a821pgl [ 327.073131][T16128] a821pglnda [ 327.073137][T16128] a821pgh [ 327.073143][T16128] a822pgl [ 327.073148][T16128] a822pgh [ 327.073154][T16128] a823pgl [ 327.073160][T16128] a823pgh [ 327.073167][T16128] pcl813 [ 327.073173][T16128] pcl813b [ 327.073179][T16128] acl8113 [ 327.073185][T16128] iso813 [ 327.073191][T16128] acl8216 [ 327.073197][T16128] a826pg [ 327.073211][T16128] comedi: valid board names for pcl730 driver are: [ 327.073219][T16128] pcl730 [ 327.073225][T16128] iso730 [ 327.073231][T16128] acl7130 [ 327.073237][T16128] pcm3730 [ 327.073243][T16128] pcl725 [ 327.073249][T16128] p8r8dio [ 327.073255][T16128] acl7225b [ 327.073261][T16128] p16r16dio [ 327.073268][T16128] pcl733 [ 327.073274][T16128] pcl734 [ 327.073280][T16128] opmm-1616-xt [ 327.073286][T16128] pearl-mm-p [ 327.073292][T16128] ir104-pbf [ 327.073299][T16128] comedi: valid board names for pcl726 driver are: [ 327.073307][T16128] pcl726 [ 327.073313][T16128] pcl727 [ 327.073319][T16128] pcl728 [ 327.073326][T16128] acl6126 [ 327.073332][T16128] acl6128 [ 327.073337][T16128] comedi: valid board names for pcl724 driver are: [ 327.073345][T16128] pcl724 [ 327.073351][T16128] pcl722 [ 327.073357][T16128] pcl731 [ 327.073363][T16128] acl7122 [ 327.073368][T16128] acl7124 [ 327.073374][T16128] pet48dio [ 327.073380][T16128] pcmio48 [ 327.073386][T16128] onyx-mm-dio [ 327.073392][T16128] comedi: valid board names for pcl711 driver are: [ 327.073400][T16128] pcl711 [ 327.073406][T16128] pcl711b [ 327.073412][T16128] acl8112hg [ 327.073418][T16128] acl8112dg [ 327.073424][T16128] comedi: valid board names for amplc_pc263 driver are: [ 327.073432][T16128] pc263 [ 327.073438][T16128] comedi: valid board names for amplc_pc236 driver are: [ 327.073446][T16128] pc36at [ 327.073453][T16128] comedi: valid board names for amplc_dio200 driver are: [ 327.073461][T16128] pc212e [ 327.073467][T16128] pc214e [ 327.073473][T16128] pc215e [ 327.073479][T16128] pc218e [ 327.073485][T16128] pc272e [ 327.073491][T16128] comedi: valid board names for comedi_parport driver are: [ 327.073499][T16128] comedi_parport [ 327.073506][T16128] comedi: valid board names for comedi_test driver are: [ 327.073514][T16128] comedi_test [ 327.073520][T16128] comedi: valid board names for comedi_bond driver are: [ 327.073529][T16128] comedi_bond [ 328.758942][T16144] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 328.860509][T16149] FAULT_INJECTION: forcing a failure. [ 328.860509][T16149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.860572][T16149] CPU: 2 UID: 0 PID: 16149 Comm: syz.1.2783 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.860624][T16149] Tainted: [L]=SOFTLOCKUP [ 328.860630][T16149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 328.860638][T16149] Call Trace: [ 328.860644][T16149] [ 328.860649][T16149] dump_stack_lvl+0x100/0x190 [ 328.860671][T16149] should_fail_ex.cold+0x5/0xa [ 328.860689][T16149] _copy_from_user+0x2e/0xd0 [ 328.860710][T16149] get_compat_msghdr+0xb3/0x480 [ 328.860729][T16149] ? __pfx_get_compat_msghdr+0x10/0x10 [ 328.860753][T16149] ___sys_sendmsg+0x1b6/0x1e0 [ 328.860773][T16149] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.860800][T16149] ? find_held_lock+0x2b/0x80 [ 328.860825][T16149] __sys_sendmsg+0x160/0x210 [ 328.860841][T16149] ? __pfx___sys_sendmsg+0x10/0x10 [ 328.860860][T16149] ? __pfx_ksys_write+0x10/0x10 [ 328.860876][T16149] __do_fast_syscall_32+0x13a/0x8b0 [ 328.860895][T16149] ? lockdep_hardirqs_on+0x7d/0x110 [ 328.860912][T16149] do_fast_syscall_32+0x32/0x70 [ 328.860929][T16149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.860947][T16149] RIP: 0023:0xf7f72fec [ 328.860964][T16149] Code: Unable to access opcode bytes at 0xf7f72fc2. [ 328.860971][T16149] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 328.860983][T16149] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 328.860992][T16149] RDX: 0000000000000804 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.860999][T16149] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 328.861007][T16149] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 328.861014][T16149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 328.861030][T16149] [ 328.961646][T16156] FAULT_INJECTION: forcing a failure. [ 328.961646][T16156] name failslab, interval 1, probability 0, space 0, times 0 [ 328.961726][T16156] CPU: 2 UID: 0 PID: 16156 Comm: syz.1.2786 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.961754][T16156] Tainted: [L]=SOFTLOCKUP [ 328.961760][T16156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 328.961768][T16156] Call Trace: [ 328.961773][T16156] [ 328.961778][T16156] dump_stack_lvl+0x100/0x190 [ 328.961797][T16156] should_fail_ex.cold+0x5/0xa [ 328.961814][T16156] should_failslab+0xc2/0x120 [ 328.961829][T16156] __kmalloc_noprof+0xfc/0x840 [ 328.961842][T16156] ? inotify_handle_inode_event+0x1aa/0x6a0 [ 328.961864][T16156] inotify_handle_inode_event+0x1aa/0x6a0 [ 328.961884][T16156] ? __pfx_inotify_handle_inode_event+0x10/0x10 [ 328.961902][T16156] fsnotify_handle_inode_event.isra.0+0x1e3/0x480 [ 328.961921][T16156] fsnotify+0x1b45/0x3240 [ 328.961939][T16156] ? __pfx_fsnotify+0x10/0x10 [ 328.961956][T16156] ? import_iovec+0x82/0xb0 [ 328.961971][T16156] vfs_readv+0x7aa/0x8d0 [ 328.961993][T16156] ? __lock_acquire+0x4c5/0x1ec0 [ 328.962011][T16156] ? __pfx_vfs_readv+0x10/0x10 [ 328.962031][T16156] ? lock_acquire+0x1d1/0x380 [ 328.962045][T16156] ? __fget_files+0x34/0x3d0 [ 328.962062][T16156] ? __fget_files+0x21f/0x3d0 [ 328.962078][T16156] ? do_readv+0x28a/0x340 [ 328.962094][T16156] do_readv+0x28a/0x340 [ 328.962111][T16156] ? __pfx_do_readv+0x10/0x10 [ 328.962127][T16156] ? ksys_write+0x1ac/0x250 [ 328.962138][T16156] ? __pfx_ksys_write+0x10/0x10 [ 328.962151][T16156] __do_fast_syscall_32+0x13a/0x8b0 [ 328.962168][T16156] ? lockdep_hardirqs_on+0x7d/0x110 [ 328.962184][T16156] do_fast_syscall_32+0x32/0x70 [ 328.962201][T16156] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.962217][T16156] RIP: 0023:0xf7f72fec [ 328.962231][T16156] Code: Unable to access opcode bytes at 0xf7f72fc2. [ 328.962236][T16156] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000091 [ 328.962248][T16156] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 328.962255][T16156] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.962262][T16156] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 328.962268][T16156] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 328.962275][T16156] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 328.962289][T16156] [ 329.218510][T16168] batadv_slave_1: entered promiscuous mode [ 329.221318][T16168] FAULT_INJECTION: forcing a failure. [ 329.221318][T16168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.222589][T16168] CPU: 0 UID: 0 PID: 16168 Comm: syz.4.2792 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.222610][T16168] Tainted: [L]=SOFTLOCKUP [ 329.222614][T16168] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 329.222622][T16168] Call Trace: [ 329.222627][T16168] [ 329.222692][T16168] dump_stack_lvl+0x100/0x190 [ 329.222730][T16168] should_fail_ex.cold+0x5/0xa [ 329.222747][T16168] _copy_from_user+0x2e/0xd0 [ 329.222762][T16168] packet_setsockopt+0x1745/0x2380 [ 329.222776][T16168] ? __lock_acquire+0x4c5/0x1ec0 [ 329.222795][T16168] ? __pfx_packet_setsockopt+0x10/0x10 [ 329.222807][T16168] ? aa_sk_perm+0x389/0xab0 [ 329.222825][T16168] ? __pfx_aa_sk_perm+0x10/0x10 [ 329.222840][T16168] ? lock_acquire+0x1d1/0x380 [ 329.222854][T16168] ? __fget_files+0x34/0x3d0 [ 329.222867][T16168] ? find_held_lock+0x2b/0x80 [ 329.222881][T16168] ? aa_sock_opt_perm+0x114/0x1e0 [ 329.222894][T16168] ? __pfx_packet_setsockopt+0x10/0x10 [ 329.222908][T16168] do_sock_setsockopt+0xf3/0x1d0 [ 329.222927][T16168] __sys_setsockopt+0x119/0x190 [ 329.222945][T16168] __ia32_sys_setsockopt+0xbc/0x160 [ 329.222958][T16168] ? __do_fast_syscall_32+0xb3/0x8b0 [ 329.222975][T16168] ? lockdep_hardirqs_on+0x7d/0x110 [ 329.222989][T16168] __do_fast_syscall_32+0x13a/0x8b0 [ 329.223004][T16168] ? lockdep_hardirqs_on+0x7d/0x110 [ 329.223019][T16168] do_fast_syscall_32+0x32/0x70 [ 329.223035][T16168] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 329.223052][T16168] RIP: 0023:0xf7f53fec [ 329.223072][T16168] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 329.223078][T16168] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 329.223091][T16168] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000107 [ 329.223098][T16168] RDX: 0000000000000002 RSI: 0000000080000080 RDI: 0000000000000010 [ 329.223105][T16168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 329.223112][T16168] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 329.223119][T16168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 329.223133][T16168] [ 329.226080][T16170] batadv_slave_1: entered promiscuous mode [ 329.226987][T16169] batadv_slave_1: left promiscuous mode [ 329.227270][T16167] batadv_slave_1: left promiscuous mode [ 329.327193][T16174] batadv_slave_1: entered promiscuous mode [ 329.329005][T16173] batadv_slave_1: left promiscuous mode [ 329.426539][ T43] audit: type=1804 audit(329.331:5021): pid=16179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2797" name="/newroot/365/file0" dev="tmpfs" ino=2021 res=1 errno=0 [ 329.533379][T16183] FAULT_INJECTION: forcing a failure. [ 329.533379][T16183] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 329.533446][T16183] CPU: 2 UID: 0 PID: 16183 Comm: syz.4.2799 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.533474][T16183] Tainted: [L]=SOFTLOCKUP [ 329.533483][T16183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 329.533494][T16183] Call Trace: [ 329.533501][T16183] [ 329.533510][T16183] dump_stack_lvl+0x100/0x190 [ 329.533544][T16183] should_fail_ex.cold+0x5/0xa [ 329.533567][T16183] ? prepare_alloc_pages+0x16d/0x5b0 [ 329.533593][T16183] should_fail_alloc_page+0xeb/0x140 [ 329.533618][T16183] prepare_alloc_pages+0x1f0/0x5b0 [ 329.533644][T16183] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 329.533682][T16183] ? kasan_quarantine_put+0x104/0x240 [ 329.533700][T16183] ? lockdep_hardirqs_on+0x7d/0x110 [ 329.533725][T16183] ? process_measurement+0x1090/0x2350 [ 329.533744][T16183] ? process_measurement+0x10d0/0x2350 [ 329.533763][T16183] ? kfree+0x22b/0x6d0 [ 329.533787][T16183] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 329.533814][T16183] ? process_measurement+0x1f4/0x2350 [ 329.533838][T16183] ? __lock_acquire+0x4c5/0x1ec0 [ 329.533872][T16183] ? lock_acquire+0x1d1/0x380 [ 329.533894][T16183] ? unwind_next_frame+0xbd/0x2090 [ 329.533918][T16183] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 329.533945][T16183] ? policy_nodemask+0xed/0x4f0 [ 329.533972][T16183] alloc_pages_mpol+0x201/0x550 [ 329.533997][T16183] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 329.534022][T16183] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 329.534047][T16183] ? is_bpf_text_address+0x94/0x1a0 [ 329.534075][T16183] ___kmalloc_large_node+0xe8/0x130 [ 329.534100][T16183] ? __lock_acquire+0x4c5/0x1ec0 [ 329.534123][T16183] __kmalloc_large_node_noprof+0x1c/0x70 [ 329.534155][T16183] __kmalloc_noprof+0x5a8/0x840 [ 329.534173][T16183] ? iovec_from_user+0x8d/0x140 [ 329.534198][T16183] iovec_from_user+0x8d/0x140 [ 329.534219][T16183] __import_iovec+0x81/0x640 [ 329.534239][T16183] import_iovec+0x82/0xb0 [ 329.534253][T16183] __do_sys_vmsplice+0x202/0x13c0 [ 329.534270][T16183] ? lock_acquire+0x1d1/0x380 [ 329.534286][T16183] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 329.534299][T16183] ? get_pid_task+0xfc/0x250 [ 329.534311][T16183] ? get_pid_task+0xfc/0x250 [ 329.534326][T16183] ? proc_fail_nth_write+0x9f/0x220 [ 329.534338][T16183] ? find_held_lock+0x2b/0x80 [ 329.534352][T16183] ? rcu_read_lock_any_held+0x6a/0x90 [ 329.534365][T16183] ? find_held_lock+0x2b/0x80 [ 329.534376][T16183] ? ksys_write+0x190/0x250 [ 329.534387][T16183] ? ksys_write+0x190/0x250 [ 329.534402][T16183] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 329.534418][T16183] ? __fget_files+0x21f/0x3d0 [ 329.534433][T16183] ? fput+0x7c/0x100 [ 329.534446][T16183] ? ksys_write+0x1ac/0x250 [ 329.534456][T16183] ? __pfx_ksys_write+0x10/0x10 [ 329.534469][T16183] ? __do_fast_syscall_32+0x13a/0x8b0 [ 329.534485][T16183] __do_fast_syscall_32+0x13a/0x8b0 [ 329.534500][T16183] ? lockdep_hardirqs_on+0x7d/0x110 [ 329.534515][T16183] do_fast_syscall_32+0x32/0x70 [ 329.534531][T16183] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 329.534546][T16183] RIP: 0023:0xf7f53fec [ 329.534562][T16183] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 329.534567][T16183] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 000000000000013c [ 329.534580][T16183] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 329.534587][T16183] RDX: 00000000000002ae RSI: 0000000000000000 RDI: 0000000000000000 [ 329.534594][T16183] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 329.534600][T16183] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 329.534607][T16183] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 329.534620][T16183] [ 329.610413][T16187] lo speed is unknown, defaulting to 1000 [ 329.676691][T16193] FAULT_INJECTION: forcing a failure. [ 329.676691][T16193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.676770][T16193] CPU: 2 UID: 0 PID: 16193 Comm: syz.3.2802 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.676819][T16193] Tainted: [L]=SOFTLOCKUP [ 329.676828][T16193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 329.676841][T16193] Call Trace: [ 329.676849][T16193] [ 329.676857][T16193] dump_stack_lvl+0x100/0x190 [ 329.676888][T16193] should_fail_ex.cold+0x5/0xa [ 329.676913][T16193] _copy_to_user+0x32/0xd0 [ 329.676937][T16193] simple_read_from_buffer+0xcb/0x170 [ 329.676961][T16193] proc_fail_nth_read+0x1af/0x230 [ 329.676991][T16193] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 329.677024][T16193] ? rw_verify_area+0xce/0x6d0 [ 329.677051][T16193] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 329.677082][T16193] vfs_read+0x1e4/0xb40 [ 329.677101][T16193] ? lock_acquire+0x1d1/0x380 [ 329.677125][T16193] ? __fget_files+0x34/0x3d0 [ 329.677146][T16193] ? __pfx_vfs_read+0x10/0x10 [ 329.677162][T16193] ? find_held_lock+0x2b/0x80 [ 329.677183][T16193] ? __fget_files+0x215/0x3d0 [ 329.677208][T16193] ? __fget_files+0x21f/0x3d0 [ 329.677235][T16193] ksys_read+0x12a/0x250 [ 329.677251][T16193] ? __pfx_ksys_read+0x10/0x10 [ 329.677277][T16193] do_int80_emulation+0x166/0x650 [ 329.677305][T16193] asm_int80_emulation+0x1a/0x20 [ 329.677323][T16193] RIP: 0023:0xf71375ab [ 329.677339][T16193] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 329.677358][T16193] RSP: 002b:00000000f53f64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 329.677377][T16193] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53f65d0 [ 329.677389][T16193] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 329.677400][T16193] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 329.677411][T16193] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 329.677423][T16193] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 329.677449][T16193] [ 329.804308][ T43] audit: type=1800 audit(329.711:5022): pid=16197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2804" name="cur_state" dev="sysfs" ino=5896 res=0 errno=0 [ 329.805712][T16197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2804'. [ 329.844071][T16197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2804'. [ 330.207883][T16219] usb usb8: usbfs: process 16219 (syz.1.2812) did not claim interface 0 before use [ 330.222515][T16222] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 330.266634][T16226] FAULT_INJECTION: forcing a failure. [ 330.266634][T16226] name failslab, interval 1, probability 0, space 0, times 0 [ 330.266711][T16226] CPU: 2 UID: 0 PID: 16226 Comm: syz.1.2814 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.266748][T16226] Tainted: [L]=SOFTLOCKUP [ 330.266756][T16226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 330.266764][T16226] Call Trace: [ 330.266768][T16226] [ 330.266773][T16226] dump_stack_lvl+0x100/0x190 [ 330.266795][T16226] should_fail_ex.cold+0x5/0xa [ 330.266811][T16226] should_failslab+0xc2/0x120 [ 330.266826][T16226] __kmalloc_noprof+0xfc/0x840 [ 330.266838][T16226] ? rcu_is_watching+0x13/0xc0 [ 330.266850][T16226] ? tomoyo_realpath_from_path+0xb6/0x690 [ 330.266871][T16226] tomoyo_realpath_from_path+0xb6/0x690 [ 330.266892][T16226] tomoyo_path_number_perm+0x23c/0x580 [ 330.266906][T16226] ? tomoyo_path_number_perm+0x22e/0x580 [ 330.266922][T16226] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 330.266938][T16226] ? get_pid_task+0x106/0x250 [ 330.266953][T16226] ? __lock_acquire+0x4c5/0x1ec0 [ 330.266975][T16226] ? __fget_files+0x34/0x3d0 [ 330.266987][T16226] ? find_held_lock+0x2b/0x80 [ 330.266999][T16226] ? __fget_files+0x215/0x3d0 [ 330.267009][T16226] ? hook_file_ioctl_common+0x140/0x440 [ 330.267025][T16226] ? __fget_files+0x215/0x3d0 [ 330.267038][T16226] ? __fget_files+0x21f/0x3d0 [ 330.267053][T16226] security_file_ioctl_compat+0xd3/0x230 [ 330.267069][T16226] __ia32_compat_sys_ioctl+0xc2/0x360 [ 330.267089][T16226] __do_fast_syscall_32+0x13a/0x8b0 [ 330.267105][T16226] ? lockdep_hardirqs_on+0x7d/0x110 [ 330.267121][T16226] do_fast_syscall_32+0x32/0x70 [ 330.267137][T16226] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 330.267152][T16226] RIP: 0023:0xf7f72fec [ 330.267167][T16226] Code: Unable to access opcode bytes at 0xf7f72fc2. [ 330.267172][T16226] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 330.267184][T16226] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 330.267191][T16226] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 330.267198][T16226] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 330.267204][T16226] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 330.267211][T16226] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 330.267225][T16226] [ 330.267264][T16226] ERROR: Out of memory at tomoyo_realpath_from_path. [ 330.267816][T16226] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 330.406256][T16229] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 330.550085][ T43] audit: type=1800 audit(330.451:5023): pid=14972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="vendor" dev="sysfs" ino=258405 res=0 errno=0 [ 330.550610][ T43] audit: type=1800 audit(330.451:5024): pid=14972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=258406 res=0 errno=0 [ 330.636877][T16239] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 330.642001][T16239] netlink: 'syz.1.2819': attribute type 8 has an invalid length. [ 330.851805][ T43] audit: type=1800 audit(330.751:5025): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=260866 res=0 errno=0 [ 330.870580][ T43] audit: type=1800 audit(330.771:5026): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=260876 res=0 errno=0 [ 331.172541][ T5812] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 331.322569][ T5812] usb 8-1: Using ep0 maxpacket: 32 [ 331.325265][ T5812] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 331.329648][ T5812] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.334071][ T5812] usb 8-1: config 0 has no interfaces? [ 331.338675][ T5812] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 331.341859][ T5812] usb 8-1: Product: syz [ 331.341874][ T5812] usb 8-1: Manufacturer: syz [ 331.341882][ T5812] usb 8-1: SerialNumber: syz [ 331.344552][ T43] audit: type=1800 audit(331.251:5027): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=260903 res=0 errno=0 [ 331.344611][ T5812] usb 8-1: config 0 descriptor?? [ 331.346061][ T43] audit: type=1800 audit(331.251:5028): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=260935 res=0 errno=0 [ 331.346542][ T43] audit: type=1800 audit(331.251:5029): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=260910 res=0 errno=0 [ 331.751504][ T5918] usb 8-1: USB disconnect, device number 13 [ 332.054380][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 332.054431][ T43] audit: type=1800 audit(331.961:5036): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 332.766812][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2827'. [ 333.011558][ T43] audit: type=1800 audit(332.911:5037): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=260973 res=0 errno=0 [ 333.057209][ T43] audit: type=1800 audit(332.961:5038): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 333.065574][ T43] audit: type=1800 audit(332.971:5039): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=261025 res=0 errno=0 [ 333.076425][T16312] FAULT_INJECTION: forcing a failure. [ 333.076425][T16312] name failslab, interval 1, probability 0, space 0, times 0 [ 333.076528][T16312] CPU: 3 UID: 0 PID: 16312 Comm: syz.4.2832 Tainted: G L syzkaller #0 PREEMPT(full) [ 333.076593][T16312] Tainted: [L]=SOFTLOCKUP [ 333.076604][T16312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 333.076619][T16312] Call Trace: [ 333.076628][T16312] [ 333.076638][T16312] dump_stack_lvl+0x100/0x190 [ 333.076673][T16312] should_fail_ex.cold+0x5/0xa [ 333.076710][T16312] should_failslab+0xc2/0x120 [ 333.076739][T16312] kmem_cache_alloc_noprof+0x92/0x6a0 [ 333.076767][T16312] ? security_file_alloc+0x34/0x2c0 [ 333.076801][T16312] security_file_alloc+0x34/0x2c0 [ 333.076827][T16312] init_file+0x95/0x480 [ 333.076852][T16312] alloc_empty_file+0x79/0x1c0 [ 333.076879][T16312] path_openat+0xdb/0x2440 [ 333.076904][T16312] ? __pfx_path_openat+0x10/0x10 [ 333.076931][T16312] do_file_open+0x20e/0x430 [ 333.077019][T16312] ? __pfx_do_file_open+0x10/0x10 [ 333.077059][T16312] ? _raw_spin_unlock+0x28/0x50 [ 333.077085][T16312] ? alloc_fd+0x471/0x7a0 [ 333.077114][T16312] do_sys_openat2+0x10f/0x1e0 [ 333.077142][T16312] ? __pfx_do_sys_openat2+0x10/0x10 [ 333.077176][T16312] __ia32_compat_sys_openat+0x12d/0x210 [ 333.077205][T16312] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 333.077243][T16312] __do_fast_syscall_32+0x13a/0x8b0 [ 333.077279][T16312] do_fast_syscall_32+0x32/0x70 [ 333.077312][T16312] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 333.077337][T16312] RIP: 0023:0xf7f53fec [ 333.077361][T16312] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 333.077371][T16312] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 333.077389][T16312] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0 [ 333.077403][T16312] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.077415][T16312] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 333.077429][T16312] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 333.077440][T16312] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 333.077466][T16312] [ 333.081198][T16316] FAULT_INJECTION: forcing a failure. [ 333.081198][T16316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.081223][T16316] CPU: 2 UID: 0 PID: 16316 Comm: syz.0.2833 Tainted: G L syzkaller #0 PREEMPT(full) [ 333.081240][T16316] Tainted: [L]=SOFTLOCKUP [ 333.081244][T16316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 333.081252][T16316] Call Trace: [ 333.081257][T16316] [ 333.081263][T16316] dump_stack_lvl+0x100/0x190 [ 333.081283][T16316] should_fail_ex.cold+0x5/0xa [ 333.081300][T16316] _copy_from_user+0x2e/0xd0 [ 333.081314][T16316] get_compat_msghdr+0xb3/0x480 [ 333.081338][T16316] ? __pfx_get_compat_msghdr+0x10/0x10 [ 333.081360][T16316] ___sys_sendmsg+0x1b6/0x1e0 [ 333.081379][T16316] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.081403][T16316] ? find_held_lock+0x2b/0x80 [ 333.081425][T16316] __sys_sendmsg+0x160/0x210 [ 333.081439][T16316] ? __pfx___sys_sendmsg+0x10/0x10 [ 333.081457][T16316] ? __pfx_ksys_write+0x10/0x10 [ 333.081471][T16316] __do_fast_syscall_32+0x13a/0x8b0 [ 333.081488][T16316] ? lockdep_hardirqs_on+0x7d/0x110 [ 333.081505][T16316] do_fast_syscall_32+0x32/0x70 [ 333.081521][T16316] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 333.081536][T16316] RIP: 0023:0xf7fa7fec [ 333.081551][T16316] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 333.081556][T16316] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 333.081568][T16316] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 333.081576][T16316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.081582][T16316] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 333.081589][T16316] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 333.081596][T16316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 333.081609][T16316] [ 333.124935][ T43] audit: type=1800 audit(332.981:5040): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=260983 res=0 errno=0 [ 333.124964][ T43] audit: type=1804 audit(333.001:5041): pid=16314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2834" name="/newroot/191/file1/file0" dev="9p" ino=76302687 res=1 errno=0 [ 333.131098][ T43] audit: type=1800 audit(333.031:5042): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 333.372593][ T1282] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 333.543168][ T1282] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 333.544319][ T1282] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.544347][ T1282] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.544362][ T1282] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 333.544376][ T1282] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.547517][ T1282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.547546][ T1282] usb 5-1: Product: syz [ 333.547561][ T1282] usb 5-1: Manufacturer: syz [ 333.547578][ T1282] usb 5-1: SerialNumber: syz [ 333.552187][ T43] audit: type=1800 audit(333.451:5043): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=261070 res=0 errno=0 [ 333.554752][ T43] audit: type=1800 audit(333.461:5044): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=261102 res=0 errno=0 [ 333.555422][ T43] audit: type=1800 audit(333.461:5045): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=261077 res=0 errno=0 [ 333.555530][ T1282] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 333.555556][ T1282] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 333.555593][ T1282] usbserial_generic 5-1:1.0: generic converter detected [ 333.571524][ T1282] usb 5-1: generic converter now attached to ttyUSB0 [ 333.662660][ T5841] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 333.766268][T16318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2835'. [ 333.822615][ T5841] usb 8-1: Using ep0 maxpacket: 32 [ 333.823480][ T5918] usb 5-1: USB disconnect, device number 19 [ 333.825687][ T5918] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 333.825971][ T5918] usbserial_generic 5-1:1.0: device disconnected [ 333.832491][ T5841] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 333.838991][ T5841] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.842801][ T5841] usb 8-1: config 0 has no interfaces? [ 333.847460][ T5841] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 333.847536][ T5841] usb 8-1: Product: syz [ 333.847560][ T5841] usb 8-1: Manufacturer: syz [ 333.847585][ T5841] usb 8-1: SerialNumber: syz [ 333.856554][ T5841] usb 8-1: config 0 descriptor?? [ 334.243983][ T6164] usb 8-1: USB disconnect, device number 14 [ 334.376759][ T5812] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 334.411137][T16347] fuse: fd is not a fuse device [ 334.414623][T16347] loop5: detected capacity change from 0 to 7 [ 334.422335][T16347] Dev loop5: unable to read RDB block 7 [ 334.423653][T16347] loop5: AHDI p1 p3 p4 [ 334.423669][T16347] loop5: partition table partially beyond EOD, truncated [ 334.423782][T16347] loop5: p1 size 100663296 extends beyond EOD, truncated [ 334.426347][T16347] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 334.438960][T16347] hpfs: hpfs_map_sector(): read error [ 334.532757][ T5812] usb 9-1: Using ep0 maxpacket: 32 [ 334.533619][ T5812] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 334.534597][ T5812] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.534611][ T5812] usb 9-1: config 0 has no interfaces? [ 334.536597][ T5812] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 334.536613][ T5812] usb 9-1: Product: syz [ 334.536622][ T5812] usb 9-1: Manufacturer: syz [ 334.536631][ T5812] usb 9-1: SerialNumber: syz [ 334.538261][ T5812] usb 9-1: config 0 descriptor?? [ 334.560524][T16349] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 334.560594][T16349] CPU: 1 UID: 0 PID: 16349 Comm: syz.0.2837 Tainted: G L syzkaller #0 PREEMPT(full) [ 334.560625][T16349] Tainted: [L]=SOFTLOCKUP [ 334.560632][T16349] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 334.560642][T16349] Call Trace: [ 334.560647][T16349] [ 334.560654][T16349] dump_stack_lvl+0x100/0x190 [ 334.560677][T16349] sysfs_warn_dup.cold+0x1c/0x28 [ 334.560711][T16349] sysfs_create_dir_ns+0x24b/0x2b0 [ 334.560727][T16349] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 334.560739][T16349] ? find_held_lock+0x2b/0x80 [ 334.560753][T16349] ? kobject_add_internal+0x25f/0x930 [ 334.560776][T16349] ? kobject_add_internal+0x25f/0x930 [ 334.560798][T16349] ? class_dir_child_ns_type+0xd/0x60 [ 334.560820][T16349] kobject_add_internal+0x2c8/0x930 [ 334.560841][T16349] kobject_add+0x16a/0x1e0 [ 334.560852][T16349] ? __pfx_kobject_add+0x10/0x10 [ 334.560864][T16349] ? get_device_parent+0x1b3/0x4c0 [ 334.560879][T16349] ? kobject_put+0xb9/0x640 [ 334.560906][T16349] device_add+0x294/0x1970 [ 334.560925][T16349] ? lockdep_init_map_type+0x5c/0x250 [ 334.560945][T16349] ? __pfx_device_add+0x10/0x10 [ 334.560963][T16349] ? lockdep_init_map_type+0x5c/0x250 [ 334.560983][T16349] ? __init_waitqueue_head+0xca/0x150 [ 334.561014][T16349] tty_register_device_attr+0x388/0x7f0 [ 334.561033][T16349] ? lockdep_init_map_type+0x5c/0x250 [ 334.561049][T16349] ? __pfx_tty_register_device_attr+0x10/0x10 [ 334.561067][T16349] ? tty_port_init+0x156/0x1c0 [ 334.561084][T16349] gsm_activate_mux+0x155/0x2a0 [ 334.561100][T16349] gsmld_ioctl+0xbbc/0x15c0 [ 334.561120][T16349] ? __pfx_gsmld_ioctl+0x10/0x10 [ 334.561147][T16349] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 334.561167][T16349] ? __pfx_gsmld_ioctl+0x10/0x10 [ 334.561183][T16349] tty_compat_ioctl+0x396/0x420 [ 334.561197][T16349] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 334.561212][T16349] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 334.561233][T16349] __do_fast_syscall_32+0x13a/0x8b0 [ 334.561252][T16349] do_fast_syscall_32+0x32/0x70 [ 334.561268][T16349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 334.561284][T16349] RIP: 0023:0xf7fa7fec [ 334.561301][T16349] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 334.561307][T16349] RSP: 002b:00000000f542450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 334.561320][T16349] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000404c4701 [ 334.561328][T16349] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 334.561335][T16349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 334.561342][T16349] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 334.561349][T16349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 334.561364][T16349] [ 334.562147][T16349] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 334.955737][ T1282] usb 9-1: USB disconnect, device number 52 [ 335.900210][T16371] input: syz0 as /devices/virtual/input/input90 [ 335.988480][T16373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2841'. [ 335.988537][T16373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2841'. [ 335.999996][T16374] netlink: 'syz.4.2849': attribute type 3 has an invalid length. [ 336.382124][T16383] input: syz0 as /devices/virtual/input/input91 [ 336.900653][T16389] FAULT_INJECTION: forcing a failure. [ 336.900653][T16389] name failslab, interval 1, probability 0, space 0, times 0 [ 336.900725][T16389] CPU: 2 UID: 0 PID: 16389 Comm: syz.3.2846 Tainted: G L syzkaller #0 PREEMPT(full) [ 336.900769][T16389] Tainted: [L]=SOFTLOCKUP [ 336.900778][T16389] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 336.900790][T16389] Call Trace: [ 336.900797][T16389] [ 336.900807][T16389] dump_stack_lvl+0x100/0x190 [ 336.900838][T16389] should_fail_ex.cold+0x5/0xa [ 336.900862][T16389] should_failslab+0xc2/0x120 [ 336.900886][T16389] kmem_cache_alloc_noprof+0x92/0x6a0 [ 336.900910][T16389] ? security_file_alloc+0x34/0x2c0 [ 336.900940][T16389] security_file_alloc+0x34/0x2c0 [ 336.900966][T16389] init_file+0x95/0x480 [ 336.900989][T16389] alloc_empty_file+0x79/0x1c0 [ 336.901013][T16389] path_openat+0xdb/0x2440 [ 336.901036][T16389] ? __pfx_path_openat+0x10/0x10 [ 336.901060][T16389] do_file_open+0x20e/0x430 [ 336.901079][T16389] ? __pfx_do_file_open+0x10/0x10 [ 336.901128][T16389] ? _raw_spin_unlock+0x28/0x50 [ 336.901151][T16389] ? alloc_fd+0x471/0x7a0 [ 336.901177][T16389] do_sys_openat2+0x10f/0x1e0 [ 336.901199][T16389] ? __pfx_do_sys_openat2+0x10/0x10 [ 336.901228][T16389] __ia32_compat_sys_openat+0x12d/0x210 [ 336.901253][T16389] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 336.901285][T16389] __do_fast_syscall_32+0x13a/0x8b0 [ 336.901310][T16389] do_fast_syscall_32+0x32/0x70 [ 336.901333][T16389] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 336.901354][T16389] RIP: 0023:0xf7f38fec [ 336.901392][T16389] Code: Unable to access opcode bytes at 0xf7f38fc2. [ 336.901403][T16389] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 336.901421][T16389] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0 [ 336.901433][T16389] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 336.901444][T16389] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 336.901456][T16389] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 336.901467][T16389] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 336.901489][T16389] [ 337.078502][ T43] kauditd_printk_skb: 116 callbacks suppressed [ 337.078613][ T43] audit: type=1800 audit(336.981:5162): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 337.098470][T16394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2856'. [ 337.098534][T16394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2856'. [ 337.320739][T16400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2847'. [ 337.341309][ T43] audit: type=1800 audit(337.241:5163): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=262506 res=0 errno=0 [ 337.356969][ T43] audit: type=1800 audit(337.261:5164): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=262516 res=0 errno=0 [ 337.712491][ T5965] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 337.781903][ T43] audit: type=1800 audit(337.681:5165): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=262543 res=0 errno=0 [ 337.791283][ T43] audit: type=1800 audit(337.691:5166): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=262558 res=0 errno=0 [ 337.791362][ T43] audit: type=1800 audit(337.691:5167): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=262561 res=0 errno=0 [ 337.791398][ T43] audit: type=1800 audit(337.691:5168): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=262560 res=0 errno=0 [ 337.791432][ T43] audit: type=1800 audit(337.691:5169): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=262559 res=0 errno=0 [ 337.812664][T16420] input: syz0 as /devices/virtual/input/input93 [ 337.820688][ T43] audit: type=1800 audit(337.721:5170): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=262550 res=0 errno=0 [ 337.828876][ T43] audit: type=1800 audit(337.731:5171): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=262553 res=0 errno=0 [ 337.882613][ T5965] usb 6-1: Using ep0 maxpacket: 32 [ 337.883353][ T5965] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 337.884707][ T5965] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.884725][ T5965] usb 6-1: config 0 has no interfaces? [ 337.897237][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 337.897294][ T5965] usb 6-1: Product: syz [ 337.897337][ T5965] usb 6-1: Manufacturer: syz [ 337.897361][ T5965] usb 6-1: SerialNumber: syz [ 337.900148][ T5965] usb 6-1: config 0 descriptor?? [ 338.122923][ T64] Bluetooth: hci2: command 0x0405 tx timeout [ 338.293094][T16435] fuse: fd is not a fuse device [ 338.295746][T16435] loop5: detected capacity change from 0 to 7 [ 338.306607][T16435] Dev loop5: unable to read RDB block 7 [ 338.306682][T16435] loop5: AHDI p1 p3 p4 [ 338.306737][T16435] loop5: partition table partially beyond EOD, truncated [ 338.306898][T16435] loop5: p1 size 100663296 extends beyond EOD, truncated [ 338.323459][ T5965] usb 6-1: USB disconnect, device number 6 [ 338.336382][T16435] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 338.396537][T16435] hpfs: hpfs_map_sector(): read error [ 338.567066][T16441] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 338.567109][T16441] CPU: 3 UID: 0 PID: 16441 Comm: syz.4.2854 Tainted: G L syzkaller #0 PREEMPT(full) [ 338.567138][T16441] Tainted: [L]=SOFTLOCKUP [ 338.567144][T16441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.567153][T16441] Call Trace: [ 338.567157][T16441] [ 338.567163][T16441] dump_stack_lvl+0x100/0x190 [ 338.567187][T16441] sysfs_warn_dup.cold+0x1c/0x28 [ 338.567215][T16441] sysfs_create_dir_ns+0x24b/0x2b0 [ 338.567230][T16441] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 338.567243][T16441] ? find_held_lock+0x2b/0x80 [ 338.567257][T16441] ? kobject_add_internal+0x25f/0x930 [ 338.567275][T16441] ? kobject_add_internal+0x25f/0x930 [ 338.567294][T16441] ? class_dir_child_ns_type+0xd/0x60 [ 338.567312][T16441] kobject_add_internal+0x2c8/0x930 [ 338.567332][T16441] kobject_add+0x16a/0x1e0 [ 338.567342][T16441] ? __pfx_kobject_add+0x10/0x10 [ 338.567354][T16441] ? get_device_parent+0x1b3/0x4c0 [ 338.567369][T16441] ? kobject_put+0xb9/0x640 [ 338.567390][T16441] device_add+0x294/0x1970 [ 338.567406][T16441] ? lockdep_init_map_type+0x5c/0x250 [ 338.567423][T16441] ? __pfx_device_add+0x10/0x10 [ 338.567437][T16441] ? lockdep_init_map_type+0x5c/0x250 [ 338.567454][T16441] ? __init_waitqueue_head+0xca/0x150 [ 338.567475][T16441] tty_register_device_attr+0x388/0x7f0 [ 338.567490][T16441] ? lockdep_init_map_type+0x5c/0x250 [ 338.567506][T16441] ? __pfx_tty_register_device_attr+0x10/0x10 [ 338.567524][T16441] ? tty_port_init+0x156/0x1c0 [ 338.567540][T16441] gsm_activate_mux+0x155/0x2a0 [ 338.567556][T16441] gsmld_ioctl+0xbbc/0x15c0 [ 338.567575][T16441] ? __pfx_gsmld_ioctl+0x10/0x10 [ 338.567602][T16441] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 338.567622][T16441] ? __pfx_gsmld_ioctl+0x10/0x10 [ 338.567637][T16441] tty_compat_ioctl+0x396/0x420 [ 338.567650][T16441] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 338.567664][T16441] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 338.567685][T16441] __do_fast_syscall_32+0x13a/0x8b0 [ 338.567703][T16441] do_fast_syscall_32+0x32/0x70 [ 338.567719][T16441] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 338.567734][T16441] RIP: 0023:0xf7f53fec [ 338.567748][T16441] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 338.567753][T16441] RSP: 002b:00000000f53d450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 338.567766][T16441] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000404c4701 [ 338.567773][T16441] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 338.567780][T16441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 338.567787][T16441] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 338.567794][T16441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 338.567809][T16441] [ 338.567882][T16441] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 338.587559][T16443] input: syz0 as /devices/virtual/input/input97 [ 338.645948][T16443] netlink: 'syz.0.2855': attribute type 3 has an invalid length. [ 338.824997][T16445] input: syz0 as /devices/virtual/input/input98 [ 339.262733][ T5834] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 339.307613][T16473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2860'. [ 339.412563][ T5834] usb 5-1: Using ep0 maxpacket: 32 [ 339.417256][ T5834] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 339.440731][ T5834] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.447060][ T5834] usb 5-1: config 0 has no interfaces? [ 339.462198][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 339.466373][ T5834] usb 5-1: Product: syz [ 339.468409][ T5834] usb 5-1: Manufacturer: syz [ 339.471683][ T5834] usb 5-1: SerialNumber: syz [ 339.481502][ T5834] usb 5-1: config 0 descriptor?? [ 339.850304][T16492] input: syz0 as /devices/virtual/input/input99 [ 339.866115][T16492] netlink: 'syz.3.2867': attribute type 3 has an invalid length. [ 339.949282][ T5834] usb 5-1: USB disconnect, device number 20 [ 340.020078][T16499] input: syz0 as /devices/virtual/input/input100 [ 340.053392][T16500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2869'. [ 340.339403][T16505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2870'. [ 340.971093][T16515] FAULT_INJECTION: forcing a failure. [ 340.971093][T16515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.971157][T16515] CPU: 1 UID: 0 PID: 16515 Comm: syz.3.2872 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.971193][T16515] Tainted: [L]=SOFTLOCKUP [ 340.971199][T16515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 340.971207][T16515] Call Trace: [ 340.971212][T16515] [ 340.971217][T16515] dump_stack_lvl+0x100/0x190 [ 340.971238][T16515] should_fail_ex.cold+0x5/0xa [ 340.971254][T16515] _copy_to_user+0x32/0xd0 [ 340.971270][T16515] simple_read_from_buffer+0xcb/0x170 [ 340.971286][T16515] proc_fail_nth_read+0x1af/0x230 [ 340.971306][T16515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 340.971326][T16515] ? rw_verify_area+0xce/0x6d0 [ 340.971343][T16515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 340.971361][T16515] vfs_read+0x1e4/0xb40 [ 340.971377][T16515] ? lock_acquire+0x1d1/0x380 [ 340.971393][T16515] ? __fget_files+0x34/0x3d0 [ 340.971405][T16515] ? __pfx_vfs_read+0x10/0x10 [ 340.971415][T16515] ? find_held_lock+0x2b/0x80 [ 340.971427][T16515] ? __fget_files+0x215/0x3d0 [ 340.971442][T16515] ? __fget_files+0x21f/0x3d0 [ 340.971457][T16515] ksys_read+0x12a/0x250 [ 340.971468][T16515] ? __pfx_ksys_read+0x10/0x10 [ 340.971482][T16515] do_int80_emulation+0x166/0x650 [ 340.971501][T16515] asm_int80_emulation+0x1a/0x20 [ 340.971513][T16515] RIP: 0023:0xf71375ab [ 340.971523][T16515] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 340.971534][T16515] RSP: 002b:00000000f53f64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 340.971546][T16515] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f53f65d0 [ 340.971554][T16515] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 340.971560][T16515] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 340.971567][T16515] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 340.971574][T16515] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 340.971594][T16515] [ 341.073265][T16517] veth1: Caught tx_queue_len zero misconfig [ 341.806019][T16528] input: syz0 as /devices/virtual/input/input101 [ 341.839836][T16528] netlink: 'syz.0.2876': attribute type 3 has an invalid length. [ 342.129610][ T43] kauditd_printk_skb: 135 callbacks suppressed [ 342.129706][ T43] audit: type=1800 audit(342.031:5307): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 342.261773][T16541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2886'. [ 342.459207][T16549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2880'. [ 342.887776][T16552] input: syz0 as /devices/virtual/input/input103 [ 342.889859][ T43] audit: type=1800 audit(342.791:5308): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=263962 res=0 errno=0 [ 342.894165][ T43] audit: type=1800 audit(342.801:5309): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=263977 res=0 errno=0 [ 342.896191][ T43] audit: type=1800 audit(342.801:5310): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=263980 res=0 errno=0 [ 342.898203][ T43] audit: type=1800 audit(342.801:5311): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=263979 res=0 errno=0 [ 342.901961][ T43] audit: type=1800 audit(342.801:5312): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=263978 res=0 errno=0 [ 342.901994][ T43] audit: type=1800 audit(342.801:5313): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=263969 res=0 errno=0 [ 342.903445][ T43] audit: type=1800 audit(342.811:5314): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=263972 res=0 errno=0 [ 342.905960][ T43] audit: type=1800 audit(342.811:5315): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=263965 res=0 errno=0 [ 342.908977][ T43] audit: type=1800 audit(342.811:5316): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=263993 res=0 errno=0 [ 343.242559][T16556] kvm: pic: non byte read [ 343.247298][T16556] kvm: pic: level sensitive irq not supported [ 343.247649][T16556] kvm: pic: non byte read [ 343.253222][T16556] kvm: pic: level sensitive irq not supported [ 343.253524][T16556] kvm: pic: non byte read [ 343.258522][T16556] kvm: pic: level sensitive irq not supported [ 343.258848][T16556] kvm: pic: non byte read [ 343.270107][T16556] kvm: pic: level sensitive irq not supported [ 343.270602][T16556] kvm: pic: non byte read [ 343.277558][T16556] kvm: pic: level sensitive irq not supported [ 343.277909][T16556] kvm: pic: non byte read [ 343.282985][T16556] kvm: pic: level sensitive irq not supported [ 343.283322][T16556] kvm: pic: non byte read [ 343.288204][T16556] kvm: pic: level sensitive irq not supported [ 343.288696][T16556] kvm: pic: non byte read [ 343.293698][T16556] kvm: pic: level sensitive irq not supported [ 343.294019][T16556] kvm: pic: non byte read [ 343.313577][T16559] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2884'. [ 343.313757][T16559] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2884'. [ 343.436405][T16562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2885'. [ 343.511073][T16564] input: syz0 as /devices/virtual/input/input104 [ 343.563572][T16564] netlink: 'syz.1.2887': attribute type 3 has an invalid length. [ 343.957967][T16573] FAULT_INJECTION: forcing a failure. [ 343.957967][T16573] name failslab, interval 1, probability 0, space 0, times 0 [ 343.958015][T16573] CPU: 3 UID: 0 PID: 16573 Comm: syz.4.2889 Tainted: G L syzkaller #0 PREEMPT(full) [ 343.958044][T16573] Tainted: [L]=SOFTLOCKUP [ 343.958049][T16573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 343.958057][T16573] Call Trace: [ 343.958062][T16573] [ 343.958068][T16573] dump_stack_lvl+0x100/0x190 [ 343.958089][T16573] should_fail_ex.cold+0x5/0xa [ 343.958106][T16573] should_failslab+0xc2/0x120 [ 343.958123][T16573] __kmalloc_noprof+0xfc/0x840 [ 343.958135][T16573] ? rcu_is_watching+0x13/0xc0 [ 343.958148][T16573] ? tomoyo_realpath_from_path+0xb6/0x690 [ 343.958171][T16573] tomoyo_realpath_from_path+0xb6/0x690 [ 343.958192][T16573] tomoyo_path_number_perm+0x23c/0x580 [ 343.958207][T16573] ? tomoyo_path_number_perm+0x22e/0x580 [ 343.958224][T16573] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 343.958240][T16573] ? get_pid_task+0x106/0x250 [ 343.958257][T16573] ? __lock_acquire+0x4c5/0x1ec0 [ 343.958279][T16573] ? __fget_files+0x34/0x3d0 [ 343.958292][T16573] ? find_held_lock+0x2b/0x80 [ 343.958305][T16573] ? __fget_files+0x215/0x3d0 [ 343.958323][T16573] ? hook_file_ioctl_common+0x140/0x440 [ 343.958346][T16573] ? __fget_files+0x215/0x3d0 [ 343.958371][T16573] ? __fget_files+0x21f/0x3d0 [ 343.958390][T16573] security_file_ioctl_compat+0xd3/0x230 [ 343.958413][T16573] __ia32_compat_sys_ioctl+0xc2/0x360 [ 343.958442][T16573] __do_fast_syscall_32+0x13a/0x8b0 [ 343.958466][T16573] ? lockdep_hardirqs_on+0x7d/0x110 [ 343.958490][T16573] do_fast_syscall_32+0x32/0x70 [ 343.958511][T16573] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 343.958531][T16573] RIP: 0023:0xf7f53fec [ 343.958553][T16573] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 343.958561][T16573] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 343.958577][T16573] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 343.958589][T16573] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 343.958601][T16573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 343.958611][T16573] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 343.958622][T16573] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 343.958640][T16573] [ 343.961154][T16575] FAULT_INJECTION: forcing a failure. [ 343.961154][T16575] name failslab, interval 1, probability 0, space 0, times 0 [ 343.961179][T16575] CPU: 0 UID: 0 PID: 16575 Comm: syz.1.2891 Tainted: G L syzkaller #0 PREEMPT(full) [ 343.961195][T16575] Tainted: [L]=SOFTLOCKUP [ 343.961201][T16575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 343.961212][T16575] Call Trace: [ 343.961216][T16575] [ 343.961221][T16575] dump_stack_lvl+0x100/0x190 [ 343.961241][T16575] should_fail_ex.cold+0x5/0xa [ 343.961257][T16575] should_failslab+0xc2/0x120 [ 343.961279][T16575] __kmalloc_noprof+0xfc/0x840 [ 343.961290][T16575] ? rcu_is_watching+0x13/0xc0 [ 343.961302][T16575] ? tomoyo_realpath_from_path+0xb6/0x690 [ 343.961323][T16575] tomoyo_realpath_from_path+0xb6/0x690 [ 343.961344][T16575] tomoyo_path_number_perm+0x23c/0x580 [ 343.961359][T16575] ? tomoyo_path_number_perm+0x22e/0x580 [ 343.961374][T16575] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 343.961390][T16575] ? get_pid_task+0x106/0x250 [ 343.961405][T16575] ? __lock_acquire+0x4c5/0x1ec0 [ 343.961427][T16575] ? __fget_files+0x34/0x3d0 [ 343.961439][T16575] ? find_held_lock+0x2b/0x80 [ 343.961450][T16575] ? __fget_files+0x215/0x3d0 [ 343.961461][T16575] ? hook_file_ioctl_common+0x140/0x440 [ 343.961476][T16575] ? __fget_files+0x215/0x3d0 [ 343.961490][T16575] ? __fget_files+0x21f/0x3d0 [ 343.961504][T16575] security_file_ioctl_compat+0xd3/0x230 [ 343.961521][T16575] __ia32_compat_sys_ioctl+0xc2/0x360 [ 343.961540][T16575] __do_fast_syscall_32+0x13a/0x8b0 [ 343.961556][T16575] ? lockdep_hardirqs_on+0x7d/0x110 [ 343.961572][T16575] do_fast_syscall_32+0x32/0x70 [ 343.961587][T16575] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 343.961602][T16575] RIP: 0023:0xf7f72fec [ 343.961617][T16575] Code: Unable to access opcode bytes at 0xf7f72fc2. [ 343.961622][T16575] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 343.961634][T16575] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0505350 [ 343.961641][T16575] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 343.961648][T16575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 343.961655][T16575] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 343.961661][T16575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 343.961675][T16575] [ 343.961681][T16575] ERROR: Out of memory at tomoyo_realpath_from_path. [ 344.034361][T16573] ERROR: Out of memory at tomoyo_realpath_from_path. [ 344.086511][T16571] fuse: Bad value for 'fd' [ 344.139046][T16573] kvm: pic: non byte read [ 344.140353][T16573] kvm: pic: level sensitive irq not supported [ 344.142000][T16573] kvm: pic: level sensitive irq not supported [ 344.231561][T16584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2893'. [ 344.380536][T16594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2894'. [ 344.547482][T16597] FAULT_INJECTION: forcing a failure. [ 344.547482][T16597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.547554][T16597] CPU: 3 UID: 0 PID: 16597 Comm: syz.3.2897 Tainted: G L syzkaller #0 PREEMPT(full) [ 344.547586][T16597] Tainted: [L]=SOFTLOCKUP [ 344.547592][T16597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 344.547601][T16597] Call Trace: [ 344.547606][T16597] [ 344.547619][T16597] dump_stack_lvl+0x100/0x190 [ 344.547642][T16597] should_fail_ex.cold+0x5/0xa [ 344.547660][T16597] _copy_to_user+0x32/0xd0 [ 344.547677][T16597] simple_read_from_buffer+0xcb/0x170 [ 344.547694][T16597] proc_fail_nth_read+0x1af/0x230 [ 344.547717][T16597] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.547740][T16597] ? rw_verify_area+0xce/0x6d0 [ 344.547759][T16597] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.547799][T16597] vfs_read+0x1e4/0xb40 [ 344.547817][T16597] ? lock_acquire+0x1d1/0x380 [ 344.547842][T16597] ? __fget_files+0x34/0x3d0 [ 344.547863][T16597] ? __pfx_vfs_read+0x10/0x10 [ 344.547880][T16597] ? find_held_lock+0x2b/0x80 [ 344.547903][T16597] ? __fget_files+0x215/0x3d0 [ 344.547925][T16597] ? __fget_files+0x21f/0x3d0 [ 344.547952][T16597] ksys_read+0x12a/0x250 [ 344.547971][T16597] ? __pfx_ksys_read+0x10/0x10 [ 344.547999][T16597] do_int80_emulation+0x166/0x650 [ 344.548034][T16597] asm_int80_emulation+0x1a/0x20 [ 344.548072][T16597] RIP: 0023:0xf71375ab [ 344.548087][T16597] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 344.548101][T16597] RSP: 002b:00000000f53f64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 344.548117][T16597] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53f65d0 [ 344.548126][T16597] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 344.548135][T16597] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 344.548148][T16597] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 344.548160][T16597] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 344.548189][T16597] [ 345.049797][T16604] input: syz0 as /devices/virtual/input/input105 [ 345.080679][T16604] netlink: 'syz.1.2899': attribute type 3 has an invalid length. [ 345.353392][T16617] FAULT_INJECTION: forcing a failure. [ 345.353392][T16617] name failslab, interval 1, probability 0, space 0, times 0 [ 345.353458][T16617] CPU: 1 UID: 0 PID: 16617 Comm: syz.4.2905 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.353486][T16617] Tainted: [L]=SOFTLOCKUP [ 345.353496][T16617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 345.353503][T16617] Call Trace: [ 345.353509][T16617] [ 345.353514][T16617] dump_stack_lvl+0x100/0x190 [ 345.353535][T16617] should_fail_ex.cold+0x5/0xa [ 345.353552][T16617] should_failslab+0xc2/0x120 [ 345.353567][T16617] kmem_cache_alloc_noprof+0x92/0x6a0 [ 345.353582][T16617] ? do_getname+0x35/0x390 [ 345.353601][T16617] do_getname+0x35/0x390 [ 345.353618][T16617] __ia32_sys_mknod+0x77/0xc0 [ 345.353632][T16617] __do_fast_syscall_32+0x13a/0x8b0 [ 345.353648][T16617] ? lockdep_hardirqs_on+0x7d/0x110 [ 345.353664][T16617] do_fast_syscall_32+0x32/0x70 [ 345.353680][T16617] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 345.353695][T16617] RIP: 0023:0xf7f53fec [ 345.353714][T16617] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 345.353720][T16617] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 000000000000000e [ 345.353732][T16617] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000000006000 [ 345.353740][T16617] RDX: 0000000000000708 RSI: 0000000000000000 RDI: 0000000000000000 [ 345.353747][T16617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 345.353753][T16617] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 345.353761][T16617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 345.353775][T16617] [ 345.454722][T16625] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 345.457207][T16625] jffs2: notice: (16625) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 345.875629][T16638] input: syz0 as /devices/virtual/input/input106 [ 345.882807][ T5834] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 346.146448][T16641] netlink: 'syz.0.2909': attribute type 3 has an invalid length. [ 346.162581][ T5834] usb 9-1: Using ep0 maxpacket: 32 [ 346.163906][ T5834] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 346.167367][ T5834] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.167405][ T5834] usb 9-1: config 0 has no interfaces? [ 346.174679][ T5834] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 346.176491][ T5834] usb 9-1: Product: syz [ 346.178283][ T5834] usb 9-1: Manufacturer: syz [ 346.178320][ T5834] usb 9-1: SerialNumber: syz [ 346.216597][ T5834] usb 9-1: config 0 descriptor?? [ 346.362515][T16643] input: syz0 as /devices/virtual/input/input107 [ 346.398633][T16643] netlink: 'syz.0.2919': attribute type 3 has an invalid length. [ 347.067720][T16659] FAULT_INJECTION: forcing a failure. [ 347.067720][T16659] name failslab, interval 1, probability 0, space 0, times 0 [ 347.067805][T16659] CPU: 3 UID: 0 PID: 16659 Comm: syz.0.2915 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.067844][T16659] Tainted: [L]=SOFTLOCKUP [ 347.067852][T16659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 347.067863][T16659] Call Trace: [ 347.067870][T16659] [ 347.067878][T16659] dump_stack_lvl+0x100/0x190 [ 347.067906][T16659] should_fail_ex.cold+0x5/0xa [ 347.067929][T16659] should_failslab+0xc2/0x120 [ 347.067953][T16659] __kmalloc_noprof+0xfc/0x840 [ 347.067971][T16659] ? rcu_is_watching+0x13/0xc0 [ 347.067988][T16659] ? tomoyo_realpath_from_path+0xb6/0x690 [ 347.068021][T16659] tomoyo_realpath_from_path+0xb6/0x690 [ 347.068072][T16659] tomoyo_path_number_perm+0x23c/0x580 [ 347.068100][T16659] ? tomoyo_path_number_perm+0x22e/0x580 [ 347.068124][T16659] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 347.068163][T16659] ? get_pid_task+0x106/0x250 [ 347.068189][T16659] ? __lock_acquire+0x4c5/0x1ec0 [ 347.068224][T16659] ? __fget_files+0x34/0x3d0 [ 347.068243][T16659] ? find_held_lock+0x2b/0x80 [ 347.068261][T16659] ? __fget_files+0x215/0x3d0 [ 347.068278][T16659] ? hook_file_ioctl_common+0x140/0x440 [ 347.068304][T16659] ? __fget_files+0x215/0x3d0 [ 347.068326][T16659] ? __fget_files+0x21f/0x3d0 [ 347.068347][T16659] security_file_ioctl_compat+0xd3/0x230 [ 347.068373][T16659] __ia32_compat_sys_ioctl+0xc2/0x360 [ 347.068402][T16659] __do_fast_syscall_32+0x13a/0x8b0 [ 347.068427][T16659] ? lockdep_hardirqs_on+0x7d/0x110 [ 347.068449][T16659] do_fast_syscall_32+0x32/0x70 [ 347.068472][T16659] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 347.068494][T16659] RIP: 0023:0xf7fa7fec [ 347.068540][T16659] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 347.068548][T16659] RSP: 002b:00000000f544550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 347.068566][T16659] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004008ae90 [ 347.068578][T16659] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 347.068588][T16659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 347.068598][T16659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.068608][T16659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 347.068633][T16659] [ 347.068797][T16659] ERROR: Out of memory at tomoyo_realpath_from_path. [ 347.335330][ T5834] usb 9-1: USB disconnect, device number 53 [ 347.396557][ T43] kauditd_printk_skb: 66 callbacks suppressed [ 347.399374][ T43] audit: type=1800 audit(347.301:5383): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 347.486759][ T43] audit: type=1800 audit(347.391:5384): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 347.509621][ T43] audit: type=1800 audit(347.411:5385): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=264423 res=0 errno=0 [ 347.512700][T16673] input: syz0 as /devices/virtual/input/input108 [ 347.517180][ T43] audit: type=1800 audit(347.411:5386): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=264438 res=0 errno=0 [ 347.517218][ T43] audit: type=1800 audit(347.411:5387): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=264441 res=0 errno=0 [ 347.517245][ T43] audit: type=1800 audit(347.411:5388): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=264440 res=0 errno=0 [ 347.517273][ T43] audit: type=1800 audit(347.411:5389): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=264439 res=0 errno=0 [ 347.517301][ T43] audit: type=1800 audit(347.421:5390): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=264430 res=0 errno=0 [ 347.517333][ T43] audit: type=1800 audit(347.421:5391): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=264433 res=0 errno=0 [ 347.517365][ T43] audit: type=1800 audit(347.421:5392): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=264426 res=0 errno=0 [ 347.588211][T16673] netlink: 'syz.0.2921': attribute type 3 has an invalid length. [ 347.813678][T16684] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2923'. [ 347.834810][T16681] trusted_key: syz.0.2923 sent an empty control message without MSG_MORE. [ 347.999929][T16692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2926'. [ 348.030374][T16688] FAULT_INJECTION: forcing a failure. [ 348.030374][T16688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.041911][T16688] CPU: 2 UID: 0 PID: 16688 Comm: syz.0.2925 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.041958][T16688] Tainted: [L]=SOFTLOCKUP [ 348.041966][T16688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 348.041978][T16688] Call Trace: [ 348.041986][T16688] [ 348.041994][T16688] dump_stack_lvl+0x100/0x190 [ 348.042044][T16688] should_fail_ex.cold+0x5/0xa [ 348.042067][T16688] save_fsave_header+0x14c/0x2f0 [ 348.042094][T16688] ? __pfx_save_fsave_header+0x10/0x10 [ 348.042127][T16688] ? copy_fpstate_to_sigframe+0x2b8/0xae0 [ 348.042152][T16688] ? __local_bh_enable_ip+0xa5/0x120 [ 348.042184][T16688] copy_fpstate_to_sigframe+0x755/0xae0 [ 348.042208][T16688] ? do_raw_spin_lock+0x128/0x260 [ 348.042249][T16688] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 348.042278][T16688] ? posixtimer_deliver_signal+0x1a0/0x6e0 [ 348.042300][T16688] ? x86_task_fpu+0x5f/0x90 [ 348.042324][T16688] get_sigframe+0x3fb/0x940 [ 348.042354][T16688] ? __pfx_get_sigframe+0x10/0x10 [ 348.042392][T16688] ? rcu_is_watching+0x13/0xc0 [ 348.042414][T16688] ? siginfo_layout+0x156/0x290 [ 348.042445][T16688] ia32_setup_rt_frame+0xe7/0xaf0 [ 348.042479][T16688] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 348.042514][T16688] arch_do_signal_or_restart+0x459/0x7a0 [ 348.042541][T16688] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 348.042572][T16688] ? fput+0x7c/0x100 [ 348.042606][T16688] exit_to_user_mode_loop+0x139/0x700 [ 348.042633][T16688] ? rcu_is_watching+0x13/0xc0 [ 348.042653][T16688] do_int80_emulation+0x555/0x650 [ 348.042688][T16688] asm_int80_emulation+0x1a/0x20 [ 348.042708][T16688] RIP: 0023:0xf71a75ab [ 348.042724][T16688] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 348.042742][T16688] RSP: 002b:00000000f54664bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 348.042764][T16688] RAX: 0000000000000001 RBX: 0000000000000004 RCX: 00000000f54665c0 [ 348.042776][T16688] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 348.042787][T16688] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 348.042800][T16688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.042810][T16688] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 348.042835][T16688] [ 348.294257][T16700] FAULT_INJECTION: forcing a failure. [ 348.294257][T16700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.294349][T16700] CPU: 3 UID: 0 PID: 16700 Comm: syz.0.2930 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.294378][T16700] Tainted: [L]=SOFTLOCKUP [ 348.294385][T16700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 348.294394][T16700] Call Trace: [ 348.294399][T16700] [ 348.294405][T16700] dump_stack_lvl+0x100/0x190 [ 348.294428][T16700] should_fail_ex.cold+0x5/0xa [ 348.294444][T16700] _copy_from_user+0x2e/0xd0 [ 348.294459][T16700] get_compat_msghdr+0xb3/0x480 [ 348.294490][T16700] ? __pfx_get_compat_msghdr+0x10/0x10 [ 348.294520][T16700] ? __lock_acquire+0x4c5/0x1ec0 [ 348.294541][T16700] ___sys_recvmsg+0x193/0x1a0 [ 348.294559][T16700] ? __pfx____sys_recvmsg+0x10/0x10 [ 348.294577][T16700] ? lock_acquire+0x1d1/0x380 [ 348.294603][T16700] do_recvmmsg+0x54d/0x740 [ 348.294621][T16700] ? __pfx_do_recvmmsg+0x10/0x10 [ 348.294639][T16700] ? find_held_lock+0x2b/0x80 [ 348.294651][T16700] ? ksys_write+0x190/0x250 [ 348.294663][T16700] ? ksys_write+0x190/0x250 [ 348.294678][T16700] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 348.294698][T16700] __sys_recvmmsg+0x21f/0x270 [ 348.294714][T16700] ? __pfx___sys_recvmmsg+0x10/0x10 [ 348.294729][T16700] ? ksys_write+0x1ac/0x250 [ 348.294741][T16700] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 348.294759][T16700] ? __do_fast_syscall_32+0xb3/0x8b0 [ 348.294781][T16700] ? lockdep_hardirqs_on+0x7d/0x110 [ 348.294801][T16700] __do_fast_syscall_32+0x13a/0x8b0 [ 348.294820][T16700] ? lockdep_hardirqs_on+0x7d/0x110 [ 348.294841][T16700] do_fast_syscall_32+0x32/0x70 [ 348.294861][T16700] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 348.294882][T16700] RIP: 0023:0xf7fa7fec [ 348.294904][T16700] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 348.294912][T16700] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 348.294929][T16700] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002f00 [ 348.294940][T16700] RDX: 0000000000000001 RSI: 0000000000000100 RDI: 0000000000000000 [ 348.294950][T16700] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 348.294961][T16700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.294971][T16700] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 348.294993][T16700] [ 348.409541][T16702] input: syz0 as /devices/virtual/input/input109 [ 348.462315][T16702] netlink: 'syz.0.2931': attribute type 3 has an invalid length. [ 348.990741][ T5822] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 349.143189][ T5822] usb 8-1: Using ep0 maxpacket: 32 [ 349.150186][ T5822] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 349.164107][ T5822] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.169566][ T5822] usb 8-1: config 0 has no interfaces? [ 349.183108][ T5822] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 349.187727][ T5822] usb 8-1: Product: syz [ 349.193082][ T5822] usb 8-1: Manufacturer: syz [ 349.197149][ T5822] usb 8-1: SerialNumber: syz [ 349.282638][ T5822] usb 8-1: config 0 descriptor?? [ 349.410403][T16717] FAULT_INJECTION: forcing a failure. [ 349.410403][T16717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.410487][T16717] CPU: 0 UID: 0 PID: 16717 Comm: syz.4.2936 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.410526][T16717] Tainted: [L]=SOFTLOCKUP [ 349.410534][T16717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 349.410546][T16717] Call Trace: [ 349.410553][T16717] [ 349.410560][T16717] dump_stack_lvl+0x100/0x190 [ 349.410594][T16717] should_fail_ex.cold+0x5/0xa [ 349.410620][T16717] _copy_from_user+0x2e/0xd0 [ 349.410642][T16717] get_compat_msghdr+0xb3/0x480 [ 349.410669][T16717] ? __pfx_get_compat_msghdr+0x10/0x10 [ 349.410703][T16717] ___sys_sendmsg+0x1b6/0x1e0 [ 349.410732][T16717] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.410768][T16717] ? find_held_lock+0x2b/0x80 [ 349.410803][T16717] __sys_sendmsg+0x160/0x210 [ 349.410826][T16717] ? __pfx___sys_sendmsg+0x10/0x10 [ 349.410853][T16717] ? __pfx_ksys_write+0x10/0x10 [ 349.410877][T16717] __do_fast_syscall_32+0x13a/0x8b0 [ 349.410902][T16717] ? lockdep_hardirqs_on+0x7d/0x110 [ 349.410925][T16717] do_fast_syscall_32+0x32/0x70 [ 349.410949][T16717] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 349.410974][T16717] RIP: 0023:0xf7f53fec [ 349.410995][T16717] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 349.411003][T16717] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 349.411021][T16717] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002a00 [ 349.411034][T16717] RDX: 0000000000044004 RSI: 0000000000000000 RDI: 0000000000000000 [ 349.411044][T16717] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 349.411055][T16717] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 349.411067][T16717] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 349.411089][T16717] [ 350.122799][ T5834] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 350.267903][T16729] input: syz0 as /devices/virtual/input/input110 [ 350.291583][ T5834] usb 5-1: Using ep0 maxpacket: 32 [ 350.293976][ T5834] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 350.303498][ T5834] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.303756][ T5834] usb 5-1: config 0 has no interfaces? [ 350.329817][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 350.330425][ T5834] usb 5-1: Product: syz [ 350.332201][ T5834] usb 5-1: Manufacturer: syz [ 350.333036][ T5834] usb 5-1: SerialNumber: syz [ 350.356392][ T5834] usb 5-1: config 0 descriptor?? [ 350.584408][T16729] netlink: 'syz.1.2937': attribute type 3 has an invalid length. [ 350.766869][ T5812] usb 8-1: USB disconnect, device number 15 [ 350.999792][T16738] input: syz0 as /devices/virtual/input/input111 [ 351.031786][T16738] netlink: 'syz.1.2941': attribute type 3 has an invalid length. [ 351.255402][T16745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2944'. [ 351.583593][ T5841] usb 5-1: USB disconnect, device number 21 [ 351.894112][T16758] input: syz0 as /devices/virtual/input/input112 [ 351.922952][T16758] netlink: 'syz.3.2948': attribute type 3 has an invalid length. [ 352.014707][T16762] input: syz0 as /devices/virtual/input/input113 [ 352.028102][T16762] netlink: 'syz.3.2950': attribute type 3 has an invalid length. [ 352.079287][T16764] FAULT_INJECTION: forcing a failure. [ 352.079287][T16764] name failslab, interval 1, probability 0, space 0, times 0 [ 352.079344][T16764] CPU: 0 UID: 0 PID: 16764 Comm: syz.3.2951 Tainted: G L syzkaller #0 PREEMPT(full) [ 352.079372][T16764] Tainted: [L]=SOFTLOCKUP [ 352.079378][T16764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 352.079385][T16764] Call Trace: [ 352.079390][T16764] [ 352.079394][T16764] dump_stack_lvl+0x100/0x190 [ 352.079413][T16764] should_fail_ex.cold+0x5/0xa [ 352.079429][T16764] should_failslab+0xc2/0x120 [ 352.079444][T16764] kmem_cache_alloc_noprof+0x92/0x6a0 [ 352.079456][T16764] ? rcu_is_watching+0x13/0xc0 [ 352.079468][T16764] ? do_getname+0x35/0x390 [ 352.079485][T16764] do_getname+0x35/0x390 [ 352.079502][T16764] vfs_open_tree+0x286/0xae0 [ 352.079517][T16764] ? _raw_spin_unlock+0x28/0x50 [ 352.079531][T16764] ? __pfx_vfs_open_tree+0x10/0x10 [ 352.079548][T16764] __ia32_sys_open_tree+0xa3/0x150 [ 352.079563][T16764] __do_fast_syscall_32+0x13a/0x8b0 [ 352.079579][T16764] ? lockdep_hardirqs_on+0x7d/0x110 [ 352.079595][T16764] do_fast_syscall_32+0x32/0x70 [ 352.079610][T16764] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 352.079625][T16764] RIP: 0023:0xf7f38fec [ 352.079639][T16764] Code: Unable to access opcode bytes at 0xf7f38fc2. [ 352.079648][T16764] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 00000000000001ac [ 352.079660][T16764] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000100 [ 352.079668][T16764] RDX: 0000000000089901 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.079675][T16764] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 352.079682][T16764] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 352.079689][T16764] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 352.079704][T16764] [ 352.402845][ T43] kauditd_printk_skb: 68 callbacks suppressed [ 352.402895][ T43] audit: type=1800 audit(352.311:5461): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=264968 res=0 errno=0 [ 352.414456][ T43] audit: type=1800 audit(352.321:5462): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=264978 res=0 errno=0 [ 352.587641][ T43] audit: type=1800 audit(352.491:5463): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 352.629410][T16786] input: syz0 as /devices/virtual/input/input114 [ 352.636349][ T43] audit: type=1800 audit(352.541:5464): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=265008 res=0 errno=0 [ 352.647212][ T43] audit: type=1800 audit(352.551:5465): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=265023 res=0 errno=0 [ 352.654915][T16786] netlink: 'syz.4.2958': attribute type 3 has an invalid length. [ 352.658411][ T43] audit: type=1800 audit(352.561:5466): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=265026 res=0 errno=0 [ 352.666224][ T43] audit: type=1800 audit(352.571:5467): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=265025 res=0 errno=0 [ 352.674050][ T43] audit: type=1800 audit(352.581:5468): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=265024 res=0 errno=0 [ 352.681557][ T43] audit: type=1800 audit(352.581:5469): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=265015 res=0 errno=0 [ 352.689403][ T43] audit: type=1800 audit(352.591:5470): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=265018 res=0 errno=0 [ 352.793864][ T1282] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 352.862781][ T5812] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 352.879375][T16792] FAULT_INJECTION: forcing a failure. [ 352.879375][T16792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.879438][T16792] CPU: 3 UID: 0 PID: 16792 Comm: syz.4.2960 Tainted: G L syzkaller #0 PREEMPT(full) [ 352.879466][T16792] Tainted: [L]=SOFTLOCKUP [ 352.879475][T16792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 352.879483][T16792] Call Trace: [ 352.879488][T16792] [ 352.879493][T16792] dump_stack_lvl+0x100/0x190 [ 352.879512][T16792] should_fail_ex.cold+0x5/0xa [ 352.879540][T16792] _copy_from_user+0x2e/0xd0 [ 352.879556][T16792] do_ip_vs_set_ctl+0x53c/0xc90 [ 352.879576][T16792] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 352.879595][T16792] ? rcu_is_watching+0x13/0xc0 [ 352.879610][T16792] ? find_held_lock+0x2b/0x80 [ 352.879623][T16792] ? nf_sockopt_find.isra.0+0x222/0x290 [ 352.879638][T16792] ? nf_sockopt_find.isra.0+0x222/0x290 [ 352.879657][T16792] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 352.879682][T16792] ? nf_setsockopt+0x8d/0xf0 [ 352.879695][T16792] nf_setsockopt+0x8d/0xf0 [ 352.879710][T16792] ip_setsockopt+0xcb/0xf0 [ 352.879729][T16792] tcp_setsockopt+0xa7/0x100 [ 352.879744][T16792] smc_setsockopt+0x1b6/0xa40 [ 352.879756][T16792] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 352.879774][T16792] ? __pfx_smc_setsockopt+0x10/0x10 [ 352.879788][T16792] ? aa_sock_opt_perm+0x114/0x1e0 [ 352.879802][T16792] ? __pfx_smc_setsockopt+0x10/0x10 [ 352.879815][T16792] do_sock_setsockopt+0xf3/0x1d0 [ 352.879833][T16792] __sys_setsockopt+0x119/0x190 [ 352.879848][T16792] __ia32_sys_setsockopt+0xbc/0x160 [ 352.879861][T16792] ? __do_fast_syscall_32+0xb3/0x8b0 [ 352.879877][T16792] ? lockdep_hardirqs_on+0x7d/0x110 [ 352.879891][T16792] __do_fast_syscall_32+0x13a/0x8b0 [ 352.879906][T16792] ? lockdep_hardirqs_on+0x7d/0x110 [ 352.879921][T16792] do_fast_syscall_32+0x32/0x70 [ 352.879937][T16792] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 352.879952][T16792] RIP: 0023:0xf7f53fec [ 352.879966][T16792] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 352.879972][T16792] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 352.879984][T16792] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 352.879991][T16792] RDX: 0000000000000480 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.879998][T16792] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 352.880004][T16792] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 352.880011][T16792] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 352.880026][T16792] [ 352.952675][ T1282] usb 6-1: Using ep0 maxpacket: 32 [ 352.953339][ T1282] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 352.955664][ T1282] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.955680][ T1282] usb 6-1: config 0 has no interfaces? [ 352.960000][ T1282] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 352.960016][ T1282] usb 6-1: Product: syz [ 352.960024][ T1282] usb 6-1: Manufacturer: syz [ 352.960032][ T1282] usb 6-1: SerialNumber: syz [ 352.961438][ T1282] usb 6-1: config 0 descriptor?? [ 353.013454][ T5812] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 353.021555][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.026015][ T5812] usb 5-1: Product: syz [ 353.030914][ T5812] usb 5-1: Manufacturer: syz [ 353.030999][ T5812] usb 5-1: SerialNumber: syz [ 353.069378][ T5822] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 353.420273][ T1282] usb 6-1: USB disconnect, device number 7 [ 353.468684][ T5841] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 353.612624][ T5841] usb 8-1: Using ep0 maxpacket: 8 [ 353.614531][ T5841] usb 8-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=cd.7b [ 353.615575][ T5841] usb 8-1: config 13 has an invalid interface number: 57 but max is 0 [ 353.615598][ T5841] usb 8-1: config 13 has no interface number 0 [ 353.615628][ T5841] usb 8-1: config 13 interface 57 altsetting 6 endpoint 0xF has invalid maxpacket 399, setting to 64 [ 353.615649][ T5841] usb 8-1: config 13 interface 57 altsetting 6 endpoint 0x7 has an invalid bInterval 73, changing to 10 [ 353.615668][ T5841] usb 8-1: config 13 interface 57 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 353.615685][ T5841] usb 8-1: config 13 interface 57 altsetting 6 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 353.615703][ T5841] usb 8-1: config 13 interface 57 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 353.615720][ T5841] usb 8-1: config 13 interface 57 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 353.615735][ T5841] usb 8-1: config 13 interface 57 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 353.615750][ T5841] usb 8-1: config 13 interface 57 altsetting 6 endpoint 0xD has invalid maxpacket 2039, setting to 64 [ 353.615769][ T5841] usb 8-1: config 13 interface 57 altsetting 6 bulk endpoint 0x8 has invalid maxpacket 1023 [ 353.615786][ T5841] usb 8-1: config 13 interface 57 has no altsetting 0 [ 353.619168][ T5841] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.619188][ T5841] usb 8-1: Product: చ [ 353.619199][ T5841] usb 8-1: Manufacturer:  [ 353.619211][ T5841] usb 8-1: SerialNumber: ఄ [ 353.619470][T16805] 9p: Bad value for 'wfdno' [ 353.623865][T16799] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 353.624202][T16799] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 353.851281][ T5841] usb 8-1: USB disconnect, device number 16 [ 354.095264][T16816] FAULT_INJECTION: forcing a failure. [ 354.095264][T16816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.095330][T16816] CPU: 3 UID: 0 PID: 16816 Comm: syz.4.2967 Tainted: G L syzkaller #0 PREEMPT(full) [ 354.095381][T16816] Tainted: [L]=SOFTLOCKUP [ 354.095388][T16816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 354.095398][T16816] Call Trace: [ 354.095404][T16816] [ 354.095410][T16816] dump_stack_lvl+0x100/0x190 [ 354.095435][T16816] should_fail_ex.cold+0x5/0xa [ 354.095455][T16816] _copy_from_user+0x2e/0xd0 [ 354.095472][T16816] get_compat_msghdr+0xb3/0x480 [ 354.095495][T16816] ? __pfx_get_compat_msghdr+0x10/0x10 [ 354.095515][T16816] ? __lock_acquire+0x4c5/0x1ec0 [ 354.095537][T16816] ? __lock_acquire+0x4c5/0x1ec0 [ 354.095560][T16816] ___sys_sendmsg+0x1b6/0x1e0 [ 354.095604][T16816] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.095628][T16816] ? finish_task_switch.isra.0+0x149/0x10d0 [ 354.095684][T16816] ? find_held_lock+0x2b/0x80 [ 354.095727][T16816] __sys_sendmsg+0x160/0x210 [ 354.095759][T16816] ? __pfx___sys_sendmsg+0x10/0x10 [ 354.095797][T16816] ? exit_to_user_mode_loop+0x166/0x700 [ 354.095824][T16816] ? rcu_is_watching+0x13/0xc0 [ 354.095844][T16816] __do_fast_syscall_32+0x13a/0x8b0 [ 354.095867][T16816] ? lockdep_hardirqs_on+0x7d/0x110 [ 354.095889][T16816] do_fast_syscall_32+0x32/0x70 [ 354.095920][T16816] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 354.095950][T16816] RIP: 0023:0xf7f53fec [ 354.095982][T16816] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 354.095994][T16816] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 354.096021][T16816] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 354.096040][T16816] RDX: 0000000000000c00 RSI: 0000000000000000 RDI: 0000000000000000 [ 354.096055][T16816] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 354.096070][T16816] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 354.096085][T16816] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 354.096120][T16816] [ 354.362520][ T5822] usb 5-1: Service connection timeout for: 256 [ 354.362622][ T5822] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 354.381746][ T5822] ath9k_htc: Failed to initialize the device [ 354.489865][T16828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2969'. [ 354.602658][ T5918] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 354.754156][ T5918] usb 6-1: Using ep0 maxpacket: 32 [ 354.760257][ T5918] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 354.771366][ T5918] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.775154][ T5918] usb 6-1: config 0 has no interfaces? [ 354.786748][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 354.786842][ T5918] usb 6-1: Product: syz [ 354.790085][ T5918] usb 6-1: Manufacturer: syz [ 354.793853][ T5918] usb 6-1: SerialNumber: syz [ 354.823999][ T5918] usb 6-1: config 0 descriptor?? [ 355.081994][T16833] input: syz0 as /devices/virtual/input/input115 [ 355.155244][T16835] netlink: 'syz.0.2971': attribute type 3 has an invalid length. qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 355.522616][T16837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2972'. [ 355.574739][T16837] 9pnet_virtio: no channels available for device syz [ 355.575548][T16837] overlay: ./file0 is not a directory [ 356.723104][ T25] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 356.784264][ T5822] usb 5-1: ath9k_htc: USB layer deinitialized [ 356.885676][T16851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2976'. [ 356.903744][ T25] usb 9-1: Using ep0 maxpacket: 32 [ 356.907928][ T25] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 356.912769][ T25] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.912859][ T25] usb 9-1: config 0 has no interfaces? [ 356.931758][ T25] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 356.931930][ T25] usb 9-1: Product: syz [ 356.931966][ T25] usb 9-1: Manufacturer: syz [ 356.932027][ T25] usb 9-1: SerialNumber: syz [ 356.982989][ T9] usb 5-1: USB disconnect, device number 22 [ 356.998967][ T25] usb 9-1: config 0 descriptor?? [ 357.097819][ T5965] usb 6-1: USB disconnect, device number 8 [ 357.381277][T16866] FAULT_INJECTION: forcing a failure. [ 357.381277][T16866] name failslab, interval 1, probability 0, space 0, times 0 [ 357.381449][T16866] CPU: 0 UID: 0 PID: 16866 Comm: syz.1.2980 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.381482][T16866] Tainted: [L]=SOFTLOCKUP [ 357.381489][T16866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 357.381497][T16866] Call Trace: [ 357.381502][T16866] [ 357.381508][T16866] dump_stack_lvl+0x100/0x190 [ 357.381531][T16866] should_fail_ex.cold+0x5/0xa [ 357.381549][T16866] should_failslab+0xc2/0x120 [ 357.381566][T16866] __kmalloc_noprof+0xfc/0x840 [ 357.381580][T16866] ? rcu_is_watching+0x13/0xc0 [ 357.381593][T16866] ? tomoyo_realpath_from_path+0xb6/0x690 [ 357.381618][T16866] tomoyo_realpath_from_path+0xb6/0x690 [ 357.381643][T16866] tomoyo_path_number_perm+0x23c/0x580 [ 357.381667][T16866] ? tomoyo_path_number_perm+0x22e/0x580 [ 357.381686][T16866] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 357.381704][T16866] ? get_pid_task+0x106/0x250 [ 357.381723][T16866] ? __lock_acquire+0x4c5/0x1ec0 [ 357.381749][T16866] ? __fget_files+0x34/0x3d0 [ 357.381763][T16866] ? find_held_lock+0x2b/0x80 [ 357.381777][T16866] ? __fget_files+0x215/0x3d0 [ 357.381789][T16866] ? hook_file_ioctl_common+0x140/0x440 [ 357.381807][T16866] ? __fget_files+0x215/0x3d0 [ 357.381823][T16866] ? __fget_files+0x21f/0x3d0 [ 357.381839][T16866] security_file_ioctl_compat+0xd3/0x230 [ 357.381858][T16866] __ia32_compat_sys_ioctl+0xc2/0x360 [ 357.381882][T16866] __do_fast_syscall_32+0x13a/0x8b0 [ 357.381901][T16866] ? lockdep_hardirqs_on+0x7d/0x110 [ 357.381919][T16866] do_fast_syscall_32+0x32/0x70 [ 357.381937][T16866] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 357.381954][T16866] RIP: 0023:0xf7f72fec [ 357.381970][T16866] Code: Unable to access opcode bytes at 0xf7f72fc2. [ 357.381977][T16866] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 357.381990][T16866] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 357.381998][T16866] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 357.382006][T16866] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 357.382014][T16866] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 357.382022][T16866] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 357.382040][T16866] [ 357.382478][T16866] ERROR: Out of memory at tomoyo_realpath_from_path. [ 357.428135][T16869] FAULT_INJECTION: forcing a failure. [ 357.428135][T16869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.428165][T16869] CPU: 1 UID: 0 PID: 16869 Comm: syz.3.2981 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.428192][T16869] Tainted: [L]=SOFTLOCKUP [ 357.428199][T16869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 357.428211][T16869] Call Trace: [ 357.428218][T16869] [ 357.428226][T16869] dump_stack_lvl+0x100/0x190 [ 357.428246][T16869] should_fail_ex.cold+0x5/0xa [ 357.428269][T16869] _copy_to_user+0x32/0xd0 [ 357.428292][T16869] simple_read_from_buffer+0xcb/0x170 [ 357.428313][T16869] proc_fail_nth_read+0x1af/0x230 [ 357.428338][T16869] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 357.428366][T16869] ? rw_verify_area+0xce/0x6d0 [ 357.428391][T16869] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 357.428419][T16869] vfs_read+0x1e4/0xb40 [ 357.428432][T16869] ? lock_acquire+0x1d1/0x380 [ 357.428474][T16869] ? __fget_files+0x34/0x3d0 [ 357.428489][T16869] ? __pfx_vfs_read+0x10/0x10 [ 357.428499][T16869] ? find_held_lock+0x2b/0x80 [ 357.428514][T16869] ? __fget_files+0x215/0x3d0 [ 357.428528][T16869] ? __fget_files+0x21f/0x3d0 [ 357.428544][T16869] ksys_read+0x12a/0x250 [ 357.428556][T16869] ? __pfx_ksys_read+0x10/0x10 [ 357.428571][T16869] do_int80_emulation+0x166/0x650 [ 357.428590][T16869] asm_int80_emulation+0x1a/0x20 [ 357.428602][T16869] RIP: 0023:0xf71375ab [ 357.428612][T16869] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 357.428624][T16869] RSP: 002b:00000000f53d54bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 357.428636][T16869] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f53d55d0 [ 357.428644][T16869] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 357.428651][T16869] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 357.428657][T16869] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 357.428664][T16869] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 357.428679][T16869] [ 357.662772][ T43] kauditd_printk_skb: 66 callbacks suppressed [ 357.662860][ T43] audit: type=1800 audit(357.561:5537): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 357.687223][ T43] audit: type=1800 audit(357.591:5538): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=266090 res=0 errno=0 [ 357.706845][ T43] audit: type=1800 audit(357.611:5539): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=266109 res=0 errno=0 [ 357.738249][T16885] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2987'. [ 357.758862][T16880] FAULT_INJECTION: forcing a failure. [ 357.758862][T16880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.758943][T16880] CPU: 0 UID: 0 PID: 16880 Comm: syz.1.2985 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.758983][T16880] Tainted: [L]=SOFTLOCKUP [ 357.758991][T16880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 357.759002][T16880] Call Trace: [ 357.759018][T16880] [ 357.759026][T16880] dump_stack_lvl+0x100/0x190 [ 357.759056][T16880] should_fail_ex.cold+0x5/0xa [ 357.759079][T16880] _copy_from_user+0x2e/0xd0 [ 357.759102][T16880] __ia32_sys_epoll_ctl+0x130/0x1e0 [ 357.759130][T16880] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 357.759154][T16880] ? ksys_write+0x1ac/0x250 [ 357.759172][T16880] ? __pfx_ksys_write+0x10/0x10 [ 357.759195][T16880] __do_fast_syscall_32+0x13a/0x8b0 [ 357.759220][T16880] ? lockdep_hardirqs_on+0x7d/0x110 [ 357.759245][T16880] do_fast_syscall_32+0x32/0x70 [ 357.759270][T16880] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 357.759292][T16880] RIP: 0023:0xf7f72fec [ 357.759317][T16880] Code: Unable to access opcode bytes at 0xf7f72fc2. [ 357.759327][T16880] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 357.759348][T16880] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000001 [ 357.759361][T16880] RDX: 0000000000000006 RSI: 0000000080000300 RDI: 0000000000000000 [ 357.759374][T16880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 357.759386][T16880] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 357.759398][T16880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 357.759425][T16880] [ 357.786637][ T5965] usb 9-1: USB disconnect, device number 54 [ 357.870529][ T43] audit: type=1800 audit(357.771:5540): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=266128 res=0 errno=0 [ 357.934685][T16888] nvmet: adding nsid 1 to subsystem testsubsys [ 357.937817][ T43] audit: type=1800 audit(357.841:5541): pid=16888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2988" name="buffered_io" dev="configfs" ino=47572 res=0 errno=0 [ 357.939821][T16888] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 357.942523][ T43] audit: type=1800 audit(357.841:5542): pid=16888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2988" name="enable" dev="configfs" ino=47573 res=0 errno=0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 357.947797][ T43] audit: type=1800 audit(357.851:5543): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 357.972277][T16888] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 357.975680][T16888] CPU: 3 UID: 0 PID: 16888 Comm: syz.3.2988 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.980274][T16888] Tainted: [L]=SOFTLOCKUP [ 357.982174][T16888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 357.986045][T16888] RIP: 0010:strlen+0x1e/0xa0 [ 357.987699][T16888] Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 55 48 89 fa 48 89 fd 53 48 c1 ea 03 48 83 ec 08 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 50 80 7d 00 00 [ 357.995609][T16888] RSP: 0018:ffffc900066a7b28 EFLAGS: 00010296 [ 357.998443][T16888] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90028d61000 [ 358.002248][T16888] RDX: 0000000000000000 RSI: ffffffff829532ee RDI: 0000000000000000 [ 358.006220][T16888] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 358.009571][T16888] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 358.012798][T16888] R13: 0000000000000000 R14: ffff8880140e1010 R15: ffff88804ce90000 [ 358.016504][T16888] FS: 0000000000000000(0000) GS:ffff888096c67000(0063) knlGS:00000000f53f6b40 [ 358.020916][T16888] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 358.023656][T16888] CR2: 000000000c389458 CR3: 000000006123d000 CR4: 0000000000352ef0 [ 358.026796][T16888] Call Trace: [ 358.028270][T16888] [ 358.029746][T16888] do_getname_kernel+0x26/0x250 [ 358.032130][T16888] filp_open+0x1d/0x50 [ 358.034162][T16888] nvmet_file_ns_enable+0x95/0x420 [ 358.036544][T16888] nvmet_ns_enable+0x35f/0x5d0 [ 358.038702][T16888] nvmet_ns_enable_store+0x11e/0x160 [ 358.040801][T16888] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 358.043319][T16888] ? configfs_write_iter+0x388/0x4e0 [ 358.045704][T16888] configfs_write_iter+0x302/0x4e0 [ 358.048535][T16888] vfs_write+0x6af/0x1050 [ 358.050991][T16888] ? __pfx_configfs_write_iter+0x10/0x10 [ 358.053698][T16888] ? __pfx_vfs_write+0x10/0x10 [ 358.055952][T16888] ? find_held_lock+0x2b/0x80 [ 358.058233][T16888] ksys_write+0x12a/0x250 [ 358.060102][T16888] ? __pfx_ksys_write+0x10/0x10 [ 358.062303][T16888] __do_fast_syscall_32+0x13a/0x8b0 [ 358.064634][T16888] ? lockdep_hardirqs_on+0x7d/0x110 [ 358.066957][T16888] do_fast_syscall_32+0x32/0x70 [ 358.069168][T16888] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 358.071944][T16888] RIP: 0023:0xf7f38fec [ 358.073779][T16888] Code: Unable to access opcode bytes at 0xf7f38fc2. [ 358.076923][T16888] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 358.080530][T16888] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800004c0 [ 358.083822][T16888] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 358.087115][T16888] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 358.090309][T16888] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 358.093547][T16888] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 358.097027][T16888] [ 358.098512][T16888] Modules linked in: [ 358.100781][T16888] ---[ end trace 0000000000000000 ]--- [ ** replaying previous printk message ** [ 358.104002][T16888] RIP: 0010:strlen+0x1e/0xa0 [ 358.104067][T16888] Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 55 48 89 fa 48 89 fd 53 48 c1 ea 03 48 83 ec 08 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 50 80 7d 00 00 [ 358.104084][T16888] RSP: 0018:ffffc900066a7b28 EFLAGS: 00010296 [ 358.104098][T16888] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90028d61000 [ 358.104107][T16888] RDX: 0000000000000000 RSI: ffffffff829532ee RDI: 0000000000000000 [ 358.104116][T16888] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 358.104124][T16888] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 358.104131][T16888] R13: 0000000000000000 R14: ffff8880140e1010 R15: ffff88804ce90000 [ 358.104140][T16888] FS: 0000000000000000(0000) GS:ffff888096c67000(0063) knlGS:00000000f53f6b40 [ 358.104165][T16888] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 358.104175][T16888] CR2: 00000000f71b8c10 CR3: 000000006123d000 CR4: 0000000000352ef0 [ 358.104185][T16888] Kernel panic - not syncing: Fatal exception [ 358.140047][T16888] Kernel Offset: disabled [ 358.141536][T16888] Rebooting in 86400 seconds..