last executing test programs: 6m25.313897637s ago: executing program 2 (id=25): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000000500)=@lsasf={0x8, 0x0, 0x1}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r1, 0x0, r3, 0x0, 0x40000004, 0xb) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x44, r5, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x6, 0x4, "d4a5"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x4048086) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000002c0), 0x12) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace_dev_match', 0x20040, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x1b4, r8, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x157, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_a, @random="3922eb059d4c", {0x8, 0x4}, @value=@ver_80211n={0x0, 0x2, 0x3, 0x2, 0x0, 0x2}}, 0x100, 0x1e, {0x0, 0x4, @random="8e81ad0e"}, @val={0x1, 0x5, [{0x30}, {0x2, 0x1}, {0x36, 0x1}, {0xb, 0x1}, {0x48}]}, @void, [{0xdd, 0x32, "f9e79b6d1369f3633a08d04c7c74224f23d6ba26eb9f060ce039a3689440e171e61a98bb05c29b5e1eb82364e381194d7312"}, {0xdd, 0x71, "34d5d8ac6f187eb2f9bc88158d4a2784881d81cdf0270fe58d5acdbd1b68980c68dc21e3f80a728276c2ffe9e58f73e73e72c7e56ac65e4c2b570246f6902c2b24e5c8bdcd26591ff8641bf17d547140498808981482ae29194414f65880a6cbc7270ada2ec29ebcf3bff89f9336a1da28"}, {0xdd, 0x7d, "47f5e1463742e5ab9611d8cff20c7e8a9dae9495fba5c424b71148c5134dfeb21271d187c40feaf39268685fb1f227cb4389a9f3d49bf93cfac95a44f2528b5673bbb0ddee6d413833d9cb785112642fce14c99c1282dd2f118eff352bf27cb7ef7161ef3a964eca8ef84800ba519967cab3e5a0439f1de12fa119adac"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xe63}, @NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8}, @broadcast, @device_b, @random="f359fb5ad4cb", {0x2, 0x5}}, 0xfff3, @val={0x8c, 0x10, {0x3cf, "d8fe8fafce4a", @short="1b33410750e3921c"}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x401, 0x1, 0xee]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 6m25.313437535s ago: executing program 2 (id=27): close(0xffffffffffffffff) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='selinuxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 6m24.481267175s ago: executing program 2 (id=32): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0x1, 0x80000, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x1c, &(0x7f0000000ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x4, 0x4, 0x8}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @jmp={0x5, 0x0, 0xe, 0x4, 0x4, 0x30}, @alu={0x7, 0x0, 0x0, 0x3, 0x4, 0x8, 0xffffffffffffffff}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x6524, 0x85, &(0x7f00000004c0)=""/133, 0x41000, 0x25, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000580)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x10, 0xb8, 0x42}, 0x10, 0x18fdc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/ping_group_range\x00', 0x40642, 0x0) write$cgroup_int(r2, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000006c0)={0x16, 0x0, {0x0, @struct={0x2fd6e8f6, 0x27932f11}, 0x0, 0x2, 0x1, 0x4, 0x101, 0x7756, 0x8, @usage=0x4, 0x2, 0x882, [0x8, 0x2, 0x2, 0x8, 0x0, 0x3]}, {0x2, @struct={0x40, 0x4}, 0x0, 0xfffffffffffffbff, 0x3, 0x569, 0x10001, 0x800, 0x10, @usage=0xffffffffffffffff, 0x2, 0x1, [0x80000000, 0x100000001, 0x5, 0x2, 0xffffffffffffffc0, 0x5]}, {0x2, @usage=0x7, 0x0, 0x0, 0x1ff, 0x7fffffff, 0x7, 0xbe7, 0x24, @usage=0x4, 0x6, 0x9d, [0x0, 0x7, 0x2, 0x2, 0x3, 0xc]}, {0x5, 0x3, 0x7}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000ac0)={r3, 0x5, 0xfffffffffffffff6}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000480)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000004, 0x11, r4, 0x0) (async) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) (async) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000fc0)={{}, {0x1, 0x5}, [], {0x4, 0x4}, [{0x8, 0x4}, {0x8, 0x7}, {0x8, 0x7}, {0x8, 0x5}, {0x8, 0x4}, {0x8, 0x1}, {0x8, 0x3}, {0x8, 0x5}, {0x8, 0x6}, {0x8, 0x9}], {}, {0x20, 0x5}}, 0x74, 0x3) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) (async) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) (async) rmdir(&(0x7f0000000000)='./file0\x00') (async) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4e}, 0x94) write(r0, &(0x7f00000000c0)="c7ae0949d8b5e64f92dc7720", 0xc) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000200)) 6m24.480532457s ago: executing program 2 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cdb66253e040ff08ce008100000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000000000060066008e8800003a00330020"], 0x6c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='0x', 0x2) mount$afs(0x0, &(0x7f000009df40)='.\x00', &(0x7f000009df80), 0x14000, &(0x7f000009dfc0)={[{@dyn}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000200), 0x40, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1/file0/file0'}}]}) 6m24.363087149s ago: executing program 2 (id=34): r0 = socket$tipc(0x1e, 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r1) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="010023010000340200000600000008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000"], 0x24}}, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_TCP_DST={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) sendmsg$tipc(r0, &(0x7f00000007c0)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8040}, 0x40) 6m24.092724371s ago: executing program 2 (id=35): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0x3, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0xc182, 0x8001, 0x8, 0x5, 0xfffffffffffffffe, 0xfffffff8, 0x2}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c362023eb3d259266ec9c37865c6c1a4640ce1b1d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a294ce72c5e341c7535c9a0d39225720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4020000006a97444800", "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"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x295, 0x0, 0x3}) 6m24.09257243s ago: executing program 32 (id=35): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0x3, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0xc182, 0x8001, 0x8, 0x5, 0xfffffffffffffffe, 0xfffffff8, 0x2}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c362023eb3d259266ec9c37865c6c1a4640ce1b1d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a294ce72c5e341c7535c9a0d39225720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4020000006a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x295, 0x0, 0x3}) 6m1.013056252s ago: executing program 1 (id=294): read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000002100)=@v3={0x3000000, [{0x5, 0x16}, {0x8001, 0x5}], r0}, 0x18, 0x2) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) 6m1.012927495s ago: executing program 1 (id=295): r0 = socket(0x8, 0x6, 0xffffffec) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) r1 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/make-it-fail\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgid(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3}) syz_open_procfs(r3, &(0x7f0000000080)='map_files\x00') write$make_it_fail(r1, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'veth1_macvtap\x00', 0xb9}) 6m0.912564793s ago: executing program 1 (id=297): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x39d802, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x200000b, 0x12, r1, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) ioctl$CDROM_LOCKDOOR(r2, 0x5329, 0x0) 6m0.912317228s ago: executing program 1 (id=298): mmap$IORING_OFF_SQ_RING(0x0, 0x3, 0xb, 0x2172, 0xffffffffffffffff, 0x0) r0 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_clone3(&(0x7f0000000240)={0x23800000, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) poll(&(0x7f0000000200)=[{r4, 0x555}], 0x1, 0xfffffffe) r5 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x49, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x6cca, 0x1, 0x33, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000040)=[0x4, 0x1], 0x2) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4000000000000009, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x80}}}, &(0x7f0000000280)=0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x80045700, &(0x7f0000000300)) syz_ublk_setup_queues(r0, r10, 0x0, 0x0, 0x4, &(0x7f0000001540)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r9, '\x00', {0x1, 0x48a, 0x0, 0x0}}, 0x0) 6m0.760220771s ago: executing program 1 (id=304): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000aff0700", @ANYRES32=r0, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x4000004) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, r7, {0x73a495b7045adc82, 0xffff}, {0xffff, 0xffff}, {0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xe}]}, 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x1, 0x80, 0x6, 0x14, {{0xc, 0x4, 0x0, 0x24, 0x30, 0x65, 0x0, 0x7, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x42}, {[@ra={0x94, 0x4, 0x1}, @generic={0x94, 0xc, "4357a7e72ea4b1220bbe"}, @generic={0x94, 0xa, "c799c67902d465b2"}, @end]}}}}}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'wg2\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x3, 0xfff3}, {0x0, 0xfff3}, {0x9, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x200018d1}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r12, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) getpeername$packet(r12, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r11, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r13}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) (async) sendmmsg(r11, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r13}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000001c0)={@initdev, @private, 0x0}, &(0x7f0000000200)=0xc) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r15, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) vmsplice(r15, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r15) (async) close(r15) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r16, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c00050008"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r16, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c00050008"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="70010000", @ANYRES16=r1, @ANYBLOB="000429bd7000fddbdf25040000003400018008000100", @ANYRES32=r4, @ANYBLOB="140002006e657464657673696d300000000000001400020076657468315f766c616e000000000000440001801400020076657468305f6d61637674617000000008000300030000001400020076657468305f6d616376746170000000080003000100000008000300020000003c000180140002006d6163766c616e3100000000000000001400020076657468305f6d616376746170000000080003000200000008000100", @ANYRES32=r7, @ANYBLOB="3c00018008000100", @ANYRES32=r8, @ANYBLOB="08000300030000000800030000000000080003000000000008000100", @ANYRES32=r10, @ANYBLOB="0800030002000000080003000300000028000180080003000000000008000300010000001400020064766d7270310000000000000000000044000180080003000200000008000100", @ANYRES32=r14, @ANYBLOB="12000150", @ANYRES32=r16, @ANYBLOB="14000200626f6e645f736c6176655f31000000001400020076657468315f746f5f7465616d000000"], 0x170}, 0x1, 0x0, 0x0, 0x48040}, 0x24000804) 6m0.441281567s ago: executing program 1 (id=305): r0 = fsopen(0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000003c0)={0x9, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000400)=r2) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0x8}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x38, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0xfff1, 0xffff}, {0xfffb, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0x7, {0x3, 0x0, 0x716, 0x81, 0x8, 0x2c7, {0x1, 0x38004, 0x4ca, 0x8, 0x1a20, 0x9, 0x5e7, 0x80, 0x9, 0x4000, 0x10000007, 0x0, 0x0, 0x8, 0x10000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, r6) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) rmdir(&(0x7f0000000280)='./file0/file0\x00') rmdir(&(0x7f0000000000)='./file0\x00') 6m0.387517912s ago: executing program 33 (id=305): r0 = fsopen(0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000003c0)={0x9, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000400)=r2) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0x8}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x38, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0xfff1, 0xffff}, {0xfffb, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0x7, {0x3, 0x0, 0x716, 0x81, 0x8, 0x2c7, {0x1, 0x38004, 0x4ca, 0x8, 0x1a20, 0x9, 0x5e7, 0x80, 0x9, 0x4000, 0x10000007, 0x0, 0x0, 0x8, 0x10000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, r6) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) rmdir(&(0x7f0000000280)='./file0/file0\x00') rmdir(&(0x7f0000000000)='./file0\x00') 4m49.13862993s ago: executing program 0 (id=1184): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc085}, 0x20000004) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) accept4$tipc(r2, &(0x7f0000000700)=@name, &(0x7f0000000740)=0x10, 0x80000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0xb66, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0xa, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000040), 0x10) r5 = io_uring_setup(0x136a, &(0x7f00000001c0)={0x0, 0xd7e7, 0x40, 0x1, 0xef}) fsopen(&(0x7f0000000200)='nilfs2\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x341100, 0x0) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x0, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private2, @in6=@private1}}, @sadb_lifetime={0x4, 0x4, 0x2}]}, 0xc0}}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x3f, 0x1201}}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0xff, 0x0, 0xffff5af2, 0x2c, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7, 0xf, 0xd}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000780)={0x458, 0x7f, 0xd22}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r9, r11, 0x25, 0x0, @void}, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000800)=ANY=[@ANYBLOB="ec0000003cea09a202acb7a007fae9361ce5828ea4f0a8dd6f35cb", @ANYRES16=0x0, @ANYBLOB="010026bd7000fcdbdf250500000054000180060005004e220000060001000200000014000400fe8000000000000000000000000000340600010002000000060005004e240000060005004e22000014000400fe8000000000000000000000000000aa48000680080006000e00000008000300ffffffff080006000000000014000400fe8000000000000000000000000000bb08000700", @ANYRES32=r7, @ANYBLOB="08000300ac1414bb08000700", @ANYRES32=r8, @ANYBLOB="050005000900000024000180060005004e2100000600010002000000080003000a01010208000700", @ANYRES32=r11, @ANYBLOB="08000400060000000800040080000000"], 0xec}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) 4m48.948535119s ago: executing program 0 (id=1186): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)={0x2c, 0x3f, 0x503, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xd}, @typed={0x4, 0x167}]}, @typed={0x8, 0x40, 0x0, 0x0, @u32=0x5}]}, 0x2c}], 0x1, 0x0, 0x0, 0x24008881}, 0x14008010) 4m48.945476511s ago: executing program 0 (id=1187): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_clone(0x22000100, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000/0x800000)=nil], &(0x7f0000000000)=[0x1, 0x7ff], &(0x7f0000000000), 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) syz_clone(0x22000100, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) (async) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000/0x800000)=nil], &(0x7f0000000000)=[0x1, 0x7ff], &(0x7f0000000000), 0x2) (async) 4m48.883616334s ago: executing program 0 (id=1189): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/38) r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7000004, 0x30, r0, 0xf3a58000) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc0010141, 0x0, 0x33}]}) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 4m48.808209165s ago: executing program 0 (id=1191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x16, &(0x7f00000001c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x80) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x0, 0x20) mkdirat(r2, &(0x7f0000000100)='./dev\x00', 0x100) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='jfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x200002, 0x0) ioctl(r3, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d7061746830") r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='xfrm0\x00', 0x10) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r6 = dup(r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000100)=0x3, 0x4) write$binfmt_script(r6, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x411) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x8, 0x7, 0x4d, 0x800000}, {0x73, 0x27, 0x0, 0xc65}, {0x6, 0xc, 0x9, 0x8}, {0x5, 0xf, 0x9, 0x8982}]}) 4m48.424436698s ago: executing program 0 (id=1197): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x2, @loopback, 0x8}, {0xa, 0x4e23, 0x5, @remote, 0x8}, r1, 0x10007}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x2, @loopback, 0x8}, {0xa, 0x4e23, 0x5, @remote, 0x8}, r1, 0x10007}}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001000010000000000f100000000000000", @ANYRES32=0x0, @ANYBLOB="105407000000000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x44040}, 0x0) 4m48.350519194s ago: executing program 34 (id=1197): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x2, @loopback, 0x8}, {0xa, 0x4e23, 0x5, @remote, 0x8}, r1, 0x10007}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x2, @loopback, 0x8}, {0xa, 0x4e23, 0x5, @remote, 0x8}, r1, 0x10007}}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001000010000000000f100000000000000", @ANYRES32=0x0, @ANYBLOB="105407000000000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x44040}, 0x0) 4m33.643771215s ago: executing program 6 (id=1388): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x280, 0x100089, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m33.499965915s ago: executing program 6 (id=1393): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth/file0\x00', 0x3, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 4m33.426579378s ago: executing program 6 (id=1395): keyctl$invalidate(0x15, 0x0) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="eb82a38742ac2c4358d09caf9589269138b4cce0b148a89d8329fbecd9ac12fc835cf392c3105f1df6aae334e13ca62a9dfce6403c08f34e690e9876d7c07248f579bc4fb93d35c3045ed7b00e0356a0589c9ce3ce7fa618b33787aa1939e2da49c012b0e282dfc3bebaa3d2582fd8cf91c3ddec30acba5ba73cd07f3670f295139c810d0e506ad365f74188399ba309c460cf73ad70a1220f02f2c9b46b370245cd899d8ec3d335bfaf0d0c6638aab04e759abb0e54", 0xb6, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="69078c06aaffc1d8c91ac9bb65", 0xd, 0xfffffffffffffff9) r2 = request_key(&(0x7f0000000200)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)=')\xf6\xcb$:\\/!\x00', 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r0, r1, r2}, &(0x7f0000000300)=""/194, 0xc2, &(0x7f0000001440)={&(0x7f0000000400)={'blake2b-384\x00'}, &(0x7f0000000440)="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", 0x1000}) keyctl$set_timeout(0xf, r2, 0x8001) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000001480)='rxrpc_s\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000014c0)={{{@in6=@private0, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f00000015c0)=0xe8) keyctl$get_persistent(0x16, r3, r2) r4 = add_key$keyring(&(0x7f0000001600), &(0x7f0000001640)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$unlink(0x9, r2, r4) r5 = add_key$fscrypt_v1(&(0x7f0000001680), &(0x7f00000016c0)={'fscrypt:', @desc4}, &(0x7f0000001700)={0x0, "51f56271c6012d635f96d975dfea9e77d0dc05212aee5dbe456aad6a9f9408edd2978e1b11d37d9d8387c5412c29e86f4b2979741a53fc98192dcc191a63e2c1", 0x30}, 0x48, r4) keyctl$read(0xb, r5, &(0x7f0000001780)=""/227, 0xe3) r6 = add_key$fscrypt_provisioning(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x3}, &(0x7f0000001900)={0x0, 0x0, @b}, 0x48, r4) r7 = add_key(&(0x7f00000019c0)='id_resolver\x00', &(0x7f0000001a00)={'syz', 0x0}, &(0x7f0000001a40)="e8c3246372c203e689551729b61434d797864fef88fb61db093c9bc0561c484e125835600abe58e841d65876bfa44ce049e43b855a396a1c5e4aa4ebc173571b5ee57b02c0ce935d0864b575f59bdafafd1c9b363a964206", 0x58, r2) keyctl$instantiate(0xc, r6, &(0x7f0000001980)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', 'N#*>\x01', 0x20, 0x2, 0x20, [0x37, 0x63, 0x34, 0x34, 0x61, 0x65, 0x0]}, 0x36, r7) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001ac0), 0x2, 0x0) read$FUSE(r8, &(0x7f0000001b00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) keyctl$negate(0xd, r6, 0x2, r7) keyctl$link(0x8, r1, r2) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003b40)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000003c00)=[@textreal={0x8, &(0x7f0000003b80)="0f01df66b85e0000000f23d00f21f866350000000d0f23f8d962070f30c4e24ddef5660f38dc25660fe7443266b9330b000066b821f9000066ba000000000f302b5f2065650f09", 0x47}], 0x1, 0x10, &(0x7f0000003c40)=[@dstype3={0x7, 0x3}], 0x1) r12 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000003ec0)={0x0, &(0x7f0000003c80)=[@nested_amd_clgi={0x17f, 0x10}, @in_dx={0x69, 0x20, {0xe9c3, 0x5}}, @nested_amd_vmload={0x182, 0x18, 0x8}, @nested_amd_stgi={0x17e, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest64=0x2813, 0x100, 0xff, 0x6}}, @nested_amd_clgi={0x17f, 0x10}, @wrmsr={0x65, 0x20, {0x350, 0x4}}, @wr_crn={0x67, 0x20, {0x4, 0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0xf4b, 0x9, 0x1}}, @nested_vmresume={0x130, 0x18}, @nested_load_code={0x12e, 0x59, {0x1, "c4c2fd3473dbf70d008000000a0000000f20e035040000000f22e066b85c008ee8f340a58f6838ec9e0e00000023c4427d13e9450f30450fc79f020000000f01c9"}}, @out_dx={0x6a, 0x28, {0xb2a4, 0x0, 0x5774e6f7}}, @wrmsr={0x65, 0x20, {0x8cf, 0x4}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x85, 0x2, 0xffffffffffffffff, 0x1}}], 0x201}) ioctl$KVM_SET_DEBUGREGS(r12, 0x4080aea2, &(0x7f0000003f00)={[0x1000, 0x3ff8, 0x2, 0xdddd1000], 0x6, 0x2, 0x3}) sendmsg$IPCTNL_MSG_EXP_DELETE(r11, &(0x7f0000004200)={&(0x7f0000003f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000041c0)={&(0x7f0000003fc0)={0x1e0, 0x2, 0x2, 0xe439b8ec018b11bc, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_EXPECT_NAT={0xb8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x28}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_NAT={0x114, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) keyctl$get_persistent(0x16, r9, r5) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000042c0)={&(0x7f0000004240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@typedef={0xf}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x3}}]}, {0x0, [0x61]}}, &(0x7f0000004280)=""/47, 0x3f, 0x2f, 0x1, 0x26}, 0x28) openat$uhid(0xffffffffffffff9c, &(0x7f0000004300), 0x802, 0x0) add_key(&(0x7f0000004340)='rxrpc\x00', &(0x7f0000004380)={'syz', 0x3}, &(0x7f00000043c0)="a0e59133bba900d055e941613b1957b8a1ebbcaeddd6959fa9ec1e9efe40cbe3670649d10c699cb9fc7fc0a1aa1ec2d678a12f345f7ef36129c2058febdd2ddfcb1a4346ae79f7bddbff80a4b68418a085d3350d4d085d4d55d7849e85f0231292472ae6cb41976b104db38ebbec05048c2d586b82fb4dab5be2bce2a8b2131649c621ed3c536ceffcb639492358bb92f0e55c99b1", 0x95, r5) 4m33.425011214s ago: executing program 6 (id=1397): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f024}) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x2, @win={{0x0, 0x2, 0x800, 0x10001}, 0x1, 0x10005da, 0x0, 0xf, 0x0, 0x5}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x7}]}}}]}, 0x3c}}, 0x0) 4m33.354502963s ago: executing program 6 (id=1399): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x124) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100), 0x4400, 0x0) r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) lseek(r2, 0x0, 0x3) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000200)={r0, &(0x7f0000000100)='ip6erspan\x00', 0x5001, &(0x7f0000000140)={@align=0xffffffff, {0xbdfb, 0x7, 0x4, 0x5}}, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x7}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504a9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}]}}}, @IFLA_CARRIER={0x5, 0x21, 0x5}]}, 0x48}}, 0x20004011) socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000140)='./file1\x00') (async) mkdir(&(0x7f00000001c0)='./file0\x00', 0x124) (async) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100), 0x4400, 0x0) (async) open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) fremovexattr(0xffffffffffffffff, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) (async) lseek(r2, 0x0, 0x3) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000200)={r0, &(0x7f0000000100)='ip6erspan\x00', 0x5001, &(0x7f0000000140)={@align=0xffffffff, {0xbdfb, 0x7, 0x4, 0x5}}, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x7}) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504a9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}]}}}, @IFLA_CARRIER={0x5, 0x21, 0x5}]}, 0x48}}, 0x20004011) (async) 4m33.256521852s ago: executing program 6 (id=1402): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x280, 0x100089, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m17.184831775s ago: executing program 35 (id=1402): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x280, 0x100089, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.520809175s ago: executing program 3 (id=4267): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x2c}}, 0x0) 3.520438647s ago: executing program 3 (id=4268): syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000300)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x2, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "2a995ffbee74ab1b3690842deee3df48f8806827d5c763698c4c288abc85bfcc", "9f6cf565ebbd4ddfc4f9c023b431968db6dbc868705956f8baf975b8cb6e17048850e8e89f732bced1e3baee50e5acb8", "112c482ee3d37cb1a7a31c450e403a6ee32477eaeb41d283c8618b26", {"6652725f56c59b04563b19a79d293550", "25b048c89cb27902d8d629c56b49c550"}}}}}}}, 0x0) (fail_nth: 2) 3.410659231s ago: executing program 3 (id=4269): add_key(&(0x7f00000002c0)='encrypted\x00', 0x0, &(0x7f0000001840)="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", 0x13a, 0xfffffffffffffffd) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f00000001c0)=@v3={0x3000000, [{0x7fffffff, 0xb}, {0x7, 0x100}], 0xee00}, 0x18, 0x1) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)=ANY=[@ANYBLOB="30ff0000", @ANYRES16=r0, @ANYBLOB="00012cbd7000fbdb25410000000c00990003000000380000000800a000050000e90800a10094f60080413146400398d64f0415941a732246db490bafe59ad8328bbebba4bd9d0dc6f740f7311e4342525100bd691708878bdba812c7ff48a6acff284d047c9372aa2d05093999e6250a91f51fa64c27bbd89a0d262ff5825fe7cff90347a5ba5ec51577305b222b7b22f60a1d0a88346f3ab378dbbbaea7faae65bc27f2cf8464d9f82d283c45793b489ce29b4ac19115b27aee8487faff89ab66ca365422"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f00000003c0)='afs\x00', 0x820000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd07, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d7061") sendmsg$nl_route_sched(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001980)=@delchain={0x540, 0x65, 0x8, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0x0, 0x7}, {0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x4cc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xf5}, @TCA_ROUTE4_TO={0x8, 0x2, 0x74}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x61}, @TCA_ROUTE4_POLICE={0x450, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffff91, 0x7fffffff, 0x7f, 0x3, 0x1, 0x5, 0x1, 0x9, 0x5, 0x7fffffff, 0x9, 0x7, 0xfffffff0, 0x7, 0x86, 0x2, 0x916, 0x4, 0x0, 0x1, 0x50b0fef5, 0x3, 0x5, 0x101, 0x7, 0x0, 0x0, 0x81, 0x5, 0x40, 0x0, 0x8001, 0x1, 0x1, 0x9, 0x9, 0x7, 0x8, 0x9, 0x6, 0x7, 0x5, 0x3, 0x7f, 0x5, 0x482, 0x6, 0x3, 0xb, 0xe, 0x4, 0x71, 0x7fff, 0x6, 0x4, 0x44, 0x42be, 0x6, 0x9, 0x4, 0x5, 0x1, 0x7, 0x3, 0x6, 0x5b600000, 0xfffffffd, 0x0, 0x100, 0x6, 0x8, 0x2, 0x9, 0x4, 0x6, 0xdb, 0x5, 0xfffffc00, 0x0, 0x13, 0x8, 0x7, 0x2, 0x4, 0x7, 0xfffffff3, 0xa074, 0x7, 0x1c06ee19, 0x6, 0xa0e, 0x7, 0x3, 0x2, 0x3, 0x7, 0x5, 0x2, 0x8, 0x40, 0x2, 0x6, 0xbf, 0xfffffffc, 0x4, 0x10000, 0xc0000000, 0x14, 0x1, 0x5, 0xdc, 0x3, 0x48000000, 0xb, 0x2, 0x8000, 0xac5, 0x887, 0x4000, 0x5a31, 0xa0, 0x2, 0x1ff, 0x0, 0x1, 0xa, 0x3ff, 0x0, 0x400, 0x4, 0xde, 0xb93c2c80, 0x10000, 0x10, 0xffffffff, 0x5, 0x7, 0x9, 0x1000, 0x4, 0x0, 0x0, 0x6c, 0x40, 0x7, 0x4, 0xf8ae, 0xa33a, 0x187c, 0x4, 0x4, 0x2, 0x1, 0x5, 0x7, 0x4, 0x76, 0xfffffff8, 0x84, 0x1, 0x6, 0x7, 0xffff459b, 0x9f0, 0xfbcf, 0x9, 0x1, 0x9, 0x0, 0x1, 0x101, 0x2, 0x9, 0xfff, 0xfe, 0x1002, 0x3ff, 0x4c2e9bf0, 0x200, 0x2, 0xfffffffd, 0x93f, 0xf8, 0x1, 0x3, 0x9a1f, 0x2, 0x8000, 0x8, 0x690, 0x8, 0x8, 0x3, 0x4, 0x20000, 0x5, 0x7ff, 0x6, 0x3, 0x7f, 0xfffffffa, 0x3, 0x2, 0x68be6eda, 0x5, 0x3, 0x6, 0x9, 0x3, 0x3, 0x1, 0x40, 0x8001, 0x7f, 0xffffffff, 0x7f, 0x10, 0x401, 0x3, 0x833, 0x6, 0xbfd3, 0x7, 0x314, 0xcc51, 0x6, 0x9, 0xf04, 0xe, 0x5, 0x1, 0x80, 0x7f, 0x401, 0x6, 0x7, 0xdeb, 0x3, 0x4, 0xa3c7, 0x3, 0x7, 0x5, 0xffffff5c, 0x9, 0x5, 0x1, 0xf, 0x2e7339b9, 0x2, 0x5, 0x45a, 0x7fffffff, 0xfb, 0x5f, 0xa]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffc, 0x7, 0x5, 0x6, 0x1, {0x6e, 0x1, 0x7, 0x400, 0xdf, 0x1000}, {0xfe, 0x1, 0x4, 0x1, 0x2, 0x2}, 0x7, 0x7fffffff, 0xfff}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x1c}, @TCA_ROUTE4_POLICE={0x38, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0xc9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xae8e}, @TCA_POLICE_RATE64={0xc, 0x8, 0x40}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fffffff}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r2}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xb5}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0xf}}, @TCA_ROUTE4_IIF={0x8, 0x4, r2}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0xc0, 0x6}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x40}, @TCA_CHAIN={0x8, 0xb, 0x53}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x540}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x8, 0xfffffffffffffffe, 0x0, 0x10000, 0x2, 0x4002004c2, 0x2000000000001f7, 0xa, 0x10000000000006, 0x100400, 0x4000003ff, 0xaa, 0x0, 0x3, 0x8d], 0xffc, 0x2c08c6}) prlimit64(0x0, 0x5, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000400)={0x1, 0x5}, 0x2) mprotect(&(0x7f0000308000/0x4000)=nil, 0x4000, 0x8) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000140)={0x2, 0xfe}, 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80}}, 0x21e7, 0x8, 0x3fd, 0x4, 0x0, 0x0, 0x7}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000640)={0x0, 0x1000, "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"}, &(0x7f0000001680)=0x1008) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000016c0)={r6, 0x0, 0x5}, 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x1010, r0, 0x6bd12000) 3.324891625s ago: executing program 3 (id=4270): syz_emit_ethernet(0x32, &(0x7f00000007c0)=ANY=[@ANYBLOB="e90c610faca2bbbbbbbbbbbb0800451100240000e0000311907800000000000000000000fbfe002790788201000000000000"], 0x0) syz_emit_ethernet(0x44, &(0x7f0000000300)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x2, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x22, 0x0, @opaque="0d2d388d6f82134f940e8b7dd869a0fddbac0d17bc621cd308ba"}}}}}, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x4, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@deltaction={0x27c, 0x31, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x70, 0x1, [{0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5722}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x8c, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100f}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd58}}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x4008081}, 0x24000001) 3.324570216s ago: executing program 3 (id=4271): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e00"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) write$char_usb(r1, &(0x7f0000006800)="10", 0x20) 3.076251775s ago: executing program 4 (id=4274): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 3.075909938s ago: executing program 4 (id=4275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x94}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 3.020537511s ago: executing program 4 (id=4276): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x10, 0x30}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="0000000000000000100000008100", 0xe}], 0x1}, 0x4040000) 3.016364921s ago: executing program 4 (id=4277): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x2c}}, 0x0) 2.925255198s ago: executing program 4 (id=4278): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000e400000000004a00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0xab9a3a3bb563c551, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x1, 0x4}, {0x5, 0xb}, {0x6, 0xe}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x2000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) 2.925000612s ago: executing program 4 (id=4279): prctl$PR_SET_IO_FLUSHER(0x43, 0x1) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8002e002a00010002090400ff0306000a4002"], 0x33) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705010240"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000240)={0x7f, 0x7, 0x3ff, 0x10, 0x2, "96ebe1c3bef8a399da115f412870a49e1b5127"}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0x2, 0x8001, 0x2, 0x4}, 0xf, [0x0, 0x0, 0x0, 0x40004, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8298, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x79a1, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x9, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0xd, 0x0, 0x2, 0x8, 0x3, 0x5, 0x80000000, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x4, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x18c, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0xc9, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xcaa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x10, 0x30}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="0000000000000000100000008100", 0xe}], 0x1}, 0x4040000) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) 1.417422138s ago: executing program 5 (id=4283): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) 1.3400197s ago: executing program 5 (id=4284): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 1.339486437s ago: executing program 5 (id=4285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x94}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1.256702712s ago: executing program 5 (id=4286): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x2c}}, 0x0) 1.256263295s ago: executing program 5 (id=4287): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}], 0x1, 0x0) write(r0, &(0x7f0000000d00)="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", 0xffbc) (fail_nth: 1) 1.181248715s ago: executing program 5 (id=4288): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4831) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd00"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x81, 0x1, 0xb, 0x8, "2af15ef6983d2e9e4cea7f3567bf701fa00d6a39ad4b3eb72544d4c1ba33b030"}) 533.118812ms ago: executing program 7 (id=4292): socket$kcm(0x1e, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 422.931007ms ago: executing program 7 (id=4293): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) 422.612018ms ago: executing program 7 (id=4294): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 357.779874ms ago: executing program 7 (id=4295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x94}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 357.198054ms ago: executing program 7 (id=4296): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x2c}}, 0x0) 293.004501ms ago: executing program 7 (id=4297): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 0s ago: executing program 3 (id=4298): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001400b59500000c00000000000ac0"], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) fsopen(0x0, 0x1) 0s ago: executing program 5 (id=4299): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x41c200, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000000)={0x4, &(0x7f0000000480)=[{0x16, '\x00', @data=0x8, 0xd}, {0x46, '\x00', @st={0x4, [{0x0, @uvalue=0x35c0000000000}, {0x2, @svalue=0x200000100000000}, {}, {0x0, @uvalue=0xe84}]}, 0x6447}, {0x19, '\x00', @st={0x4, [{0x3, @svalue=0x8}, {0x2, @uvalue=0x5}, {0x2, @svalue=0xe}, {0x2, @uvalue=0x100}]}, 0x9b10}, {0x1b, '\x00', @buffer={"9410768ce7c10c74c84d2f87556782d4f746b1965d0ec19e8ff88d0f29a848a3", 0x20}, 0x204}]}) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x44040080) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x85) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) ioctl$FE_READ_SIGNAL_STRENGTH(r1, 0x80026f47, &(0x7f0000000280)) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000340)={0x18, 0x1, 0x0, {0x1}}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x124) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100), 0x4400, 0x0) r3 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) readv(r5, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/156, 0x9c}, {&(0x7f0000000180)=""/83, 0x53}, {&(0x7f0000000380)=""/221, 0xdd}, {&(0x7f00000005c0)=""/21, 0x15}, {&(0x7f0000000600)=""/235, 0xeb}], 0x5) kernel console output (not intermixed with test programs): vc: denied { write } for pid=17072 comm="syz.7.3387" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 362.362185][T17075] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3388'. [ 362.404392][ T8314] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 362.567746][ T8314] usb 9-1: Using ep0 maxpacket: 32 [ 362.568585][ T8314] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 362.569565][ T8314] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 362.569587][ T8314] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 362.569604][ T8314] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 362.569617][ T8314] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 362.571591][ T8314] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.571603][ T8314] usb 9-1: Product: syz [ 362.571610][ T8314] usb 9-1: Manufacturer: syz [ 362.571618][ T8314] usb 9-1: SerialNumber: syz [ 362.579597][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 362.580557][ T8314] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input62 [ 362.814330][ T8314] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 362.814343][ T8314] (id 0x00) [ 362.858037][ T8314] rc_core: IR keymap rc-imon-pad not found [ 362.858072][ T8314] Registered IR keymap rc-empty [ 362.858544][ T8314] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 362.858561][ T8314] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 362.894048][T17087] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3392'. [ 363.039645][ T8314] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0 [ 363.040781][ T8314] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0/input63 [ 363.042669][ T8314] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:42> initialized [ 363.163345][ T1688] usb 10-1: USB disconnect, device number 29 [ 363.181546][T17098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3397'. [ 363.234517][ T58] usb 9-1: USB disconnect, device number 42 [ 363.637475][ T25] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 363.811736][ T25] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 363.814152][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.814175][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.814190][ T25] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 363.814217][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.847181][ T25] usb 10-1: config 0 descriptor?? [ 364.148528][ T43] audit: type=1400 audit(2001048874.038:2200): avc: denied { create } for pid=17137 comm="syz.3.3413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 364.244465][ T8314] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 364.304765][ T25] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 364.407165][ T8314] usb 9-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 364.408856][ T8314] usb 9-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 364.408875][ T8314] usb 9-1: config 0 has an invalid descriptor of length 170, skipping remainder of the config [ 364.408911][ T8314] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.423093][ T8314] usb 9-1: config 0 descriptor?? [ 364.434536][ T8314] rndis_host 9-1:0.0: invalid descriptor buffer length [ 364.434555][ T8314] rndis_host 9-1:0.0: GUID doesn't match [ 364.652782][ T1688] usb 9-1: USB disconnect, device number 43 [ 364.710122][T17176] binder: 17175:17176 ioctl c018620c 200000000080 returned -22 [ 365.146885][T17190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3432'. [ 365.304950][T17198] netlink: 'syz.4.3435': attribute type 1 has an invalid length. [ 365.371879][ T1688] usb 12-1: new high-speed USB device number 21 using dummy_hcd [ 365.387034][ T8314] hid_parser_main: 28 callbacks suppressed [ 365.387055][ T8314] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 365.388815][ T8314] hid-generic 0000:0000:0000.0010: hidraw2: HID v0.00 Device [syz1] on syz0 [ 365.533376][ T1688] usb 12-1: Using ep0 maxpacket: 16 [ 365.535345][ T1688] usb 12-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 365.542446][ T1688] usb 12-1: config 0 has an invalid interface number: 105 but max is 0 [ 365.542470][ T1688] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.542486][ T1688] usb 12-1: config 0 has no interface number 0 [ 365.544835][ T1688] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.544855][ T1688] usb 12-1: Product: syz [ 365.544867][ T1688] usb 12-1: Manufacturer: syz [ 365.544879][ T1688] usb 12-1: SerialNumber: syz [ 365.567116][ T1688] usb 12-1: config 0 descriptor?? [ 365.573594][ T1688] uvcvideo 12-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 365.573622][ T1688] uvcvideo 12-1:0.105: No valid video chain found. [ 365.717541][ C3] plantronics 0003:047F:FFFF.000F: usb_submit_urb(ctrl) failed: -1 [ 365.789309][ T58] usb 12-1: USB disconnect, device number 21 [ 366.212432][T17211] input: syz1 as /devices/virtual/input/input64 [ 366.481413][T17233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3445'. [ 366.843862][ T1688] usb 10-1: reset high-speed USB device number 30 using dummy_hcd [ 366.846439][ T1688] usb 10-1: device reset changed ep0 maxpacket size! [ 366.847823][ T25] usb 10-1: USB disconnect, device number 30 [ 366.995434][ T25] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 367.179635][ T25] usb 10-1: Using ep0 maxpacket: 8 [ 367.185089][T17227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.185841][T17227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.187715][T17227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.188228][T17227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.189391][T17227] netlink: ct family unspecified [ 367.189410][T17227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.192784][ T25] usb 10-1: unable to get BOS descriptor or descriptor too short [ 367.192823][ T25] usb 10-1: New USB device found, idVendor=001e, idProduct=0000, bcdDevice= 0.00 [ 367.192850][ T25] usb 10-1: no configurations [ 367.192862][ T25] usb 10-1: can't read configurations, error -22 [ 367.379703][T17267] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3457'. [ 367.708823][T17285] fuse: Bad value for 'fd' [ 367.735503][T17287] 9pnet_virtio: no channels available for device syz [ 367.765899][T17289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3466'. [ 368.213073][T17310] fuse: Bad value for 'fd' [ 368.244131][T17314] 9pnet_virtio: no channels available for device syz [ 368.602885][T17341] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3485'. [ 368.604358][T17342] binder: 17340:17342 ioctl c018620c 0 returned -14 [ 368.704860][T17350] jffs2: notice: (17350) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (3 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 368.710590][ T43] audit: type=1400 audit(2001048878.238:2201): avc: denied { write } for pid=17349 comm="syz.7.3489" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 369.036963][T17364] binder: 17363:17364 ioctl c018620c 0 returned -14 [ 369.109942][T17374] jffs2: notice: (17374) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (4 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 369.113350][ T43] audit: type=1400 audit(2001048878.617:2202): avc: denied { write } for pid=17372 comm="syz.4.3501" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 369.155320][T17379] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3503'. [ 369.156128][T17379] l2tp_ppp: sess 2/0: no socket in recv [ 369.208337][T17383] binder: 17382:17383 ioctl c018620c 0 returned -14 [ 369.473516][T17403] syzkaller0: entered promiscuous mode [ 369.473530][T17403] syzkaller0: entered allmulticast mode [ 369.623729][T17410] No source specified [ 369.986780][T17440] No source specified [ 370.223310][ T25] usb 12-1: new high-speed USB device number 22 using dummy_hcd [ 370.385979][ T25] usb 12-1: Using ep0 maxpacket: 32 [ 370.387360][ T25] usb 12-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 370.388791][ T25] usb 12-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 370.388826][ T25] usb 12-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 370.388852][ T25] usb 12-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 370.388872][ T25] usb 12-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 370.391577][ T25] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.391595][ T25] usb 12-1: Product: syz [ 370.391613][ T25] usb 12-1: Manufacturer: syz [ 370.391625][ T25] usb 12-1: SerialNumber: syz [ 370.399786][ C2] imon 12-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 370.401258][ T25] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/input/input66 [ 370.646715][ T25] imon 12-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 370.646731][ T25] (id 0x00) [ 370.710936][ T25] rc_core: IR keymap rc-imon-pad not found [ 370.710952][ T25] Registered IR keymap rc-empty [ 370.711005][ T25] imon 12-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 370.711019][ T25] imon 12-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 370.749040][T17481] No source specified [ 370.848513][ T25] imon:send_packet: packet tx failed (-71) [ 370.862426][ T25] imon 12-1:155.0: remote input dev register failed [ 370.862505][ T25] imon 12-1:155.0: imon_init_intf0: rc device setup failed [ 370.885772][ T25] imon 12-1:155.0: unable to initialize intf0, err 0 [ 370.885785][ T25] imon:imon_probe: failed to initialize context! [ 370.885792][ T25] imon 12-1:155.0: unable to register, err -19 [ 370.887771][ T25] usb 12-1: USB disconnect, device number 22 [ 371.763732][T17527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3567'. [ 371.764785][T17527] l2tp_ppp: sess 2/0: no socket in recv [ 371.869809][ T58] usb 12-1: new high-speed USB device number 23 using dummy_hcd [ 372.032799][ T58] usb 12-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 372.033910][ T58] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.037281][ T58] usb 12-1: config 0 descriptor?? [ 372.260703][ T58] udl 12-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 372.484044][ T58] [drm] Initialized udl 0.0.1 for 12-1:0.0 on minor 2 [ 372.484059][ T58] [drm] Initialized udl on minor 2 [ 373.062660][T17563] 9pnet_virtio: no channels available for device syz [ 374.068786][T17607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3603'. [ 374.218761][T17615] FAULT_INJECTION: forcing a failure. [ 374.218761][T17615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.218794][T17615] CPU: 1 UID: 0 PID: 17615 Comm: syz.4.3607 Tainted: G L syzkaller #0 PREEMPT(full) [ 374.218820][T17615] Tainted: [L]=SOFTLOCKUP [ 374.218827][T17615] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 374.218839][T17615] Call Trace: [ 374.218845][T17615] [ 374.218852][T17615] dump_stack_lvl+0x100/0x190 [ 374.218883][T17615] should_fail_ex.cold+0x5/0xa [ 374.218911][T17615] _copy_from_user+0x2e/0xd0 [ 374.218935][T17615] __do_sys_clock_adjtime+0x98/0x290 [ 374.218962][T17615] ? __pfx___do_sys_clock_adjtime+0x10/0x10 [ 374.219001][T17615] ? __pfx_ksys_write+0x10/0x10 [ 374.219029][T17615] do_syscall_64+0x123/0x790 [ 374.219059][T17615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.219078][T17615] RIP: 0033:0x7f5aefd9e159 [ 374.219093][T17615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.219109][T17615] RSP: 002b:00007f5af0c0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 374.219128][T17615] RAX: ffffffffffffffda RBX: 00007f5af0025fa0 RCX: 00007f5aefd9e159 [ 374.219140][T17615] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000000 [ 374.219151][T17615] RBP: 00007f5af0c0d090 R08: 0000000000000000 R09: 0000000000000000 [ 374.219162][T17615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.219173][T17615] R13: 00007f5af0026038 R14: 00007f5af0025fa0 R15: 00007ffe4226bfc8 [ 374.219198][T17615] [ 374.302111][T17619] tipc: Started in network mode [ 374.302128][T17619] tipc: Node identity 7f000001, cluster identity 4711 [ 374.302768][T17619] tipc: Enabled bearer , priority 3 [ 374.303297][T17619] tipc: Disabling bearer [ 374.447778][T17627] input: syz1 as /devices/virtual/input/input68 [ 374.490736][T17631] syzkaller1: entered promiscuous mode [ 374.490786][T17631] syzkaller1: entered allmulticast mode [ 374.770810][ T58] udl 12-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 374.770986][ T58] udl 12-1:0.0: [drm] Cannot find any crtc or sizes [ 374.779542][ T8311] udl 12-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 374.784676][ T58] usb 12-1: USB disconnect, device number 23 [ 374.787003][ T8311] udl 12-1:0.0: [drm] Cannot find any crtc or sizes [ 375.068681][T17660] 9pnet_virtio: no channels available for device syz [ 375.074172][T17662] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3625'. [ 375.252088][ T43] audit: type=1326 audit(2001048884.332:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.4.3626" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5aefd9e159 code=0x0 [ 375.253699][ T43] audit: type=1400 audit(2001048884.332:2204): avc: denied { write } for pid=17673 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.333437][ T43] audit: type=1400 audit(2001048884.406:2205): avc: denied { write } for pid=17679 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.364264][T17681] jffs2: notice: (17681) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (4 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 375.427408][ T43] audit: type=1400 audit(2001048884.511:2206): avc: denied { write } for pid=17689 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.545529][T17704] fuse: Bad value for 'fd' [ 375.564929][ T43] audit: type=1400 audit(2001048884.636:2207): avc: denied { write } for pid=17699 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.693145][ T5734] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 375.763120][T17725] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3643'. [ 376.031449][T17747] syzkaller1: entered promiscuous mode [ 376.031472][T17747] syzkaller1: entered allmulticast mode [ 376.251496][T17761] misc userio: No port type given on /dev/userio [ 376.325784][T17772] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3660'. [ 376.386113][T17778] jffs2: notice: (17778) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (4 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 376.394039][T17784] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3664'. [ 376.416314][T17781] syzkaller1: entered promiscuous mode [ 376.416337][T17781] syzkaller1: entered allmulticast mode [ 376.418093][T17784] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3664'. [ 377.182100][T17854] input: syz1 as /devices/virtual/input/input69 [ 377.299437][T17861] trusted_key: encrypted_key: keyword 'u' not recognized [ 377.502439][T17878] FAULT_INJECTION: forcing a failure. [ 377.502439][T17878] name failslab, interval 1, probability 0, space 0, times 0 [ 377.502472][T17878] CPU: 1 UID: 0 PID: 17878 Comm: syz.3.3705 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.502497][T17878] Tainted: [L]=SOFTLOCKUP [ 377.502504][T17878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 377.502515][T17878] Call Trace: [ 377.502522][T17878] [ 377.502530][T17878] dump_stack_lvl+0x100/0x190 [ 377.502562][T17878] should_fail_ex.cold+0x5/0xa [ 377.502588][T17878] should_failslab+0xc2/0x120 [ 377.502623][T17878] __kmalloc_noprof+0xfc/0x840 [ 377.502643][T17878] ? rcu_is_watching+0x13/0xc0 [ 377.502668][T17878] ? tomoyo_realpath_from_path+0xb6/0x690 [ 377.502698][T17878] tomoyo_realpath_from_path+0xb6/0x690 [ 377.502728][T17878] tomoyo_path_number_perm+0x23c/0x580 [ 377.502748][T17878] ? tomoyo_path_number_perm+0x22e/0x580 [ 377.502770][T17878] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 377.502801][T17878] ? __lock_acquire+0x5c0/0x1f40 [ 377.502834][T17878] ? __fget_files+0x34/0x3d0 [ 377.502856][T17878] ? find_held_lock+0x2b/0x80 [ 377.502879][T17878] ? hook_file_ioctl_common+0x140/0x440 [ 377.502908][T17878] ? __fget_files+0x21f/0x3d0 [ 377.502936][T17878] security_file_ioctl+0xd3/0x230 [ 377.502957][T17878] __x64_sys_ioctl+0xb7/0x210 [ 377.502978][T17878] do_syscall_64+0x123/0x790 [ 377.503007][T17878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.503025][T17878] RIP: 0033:0x7fa33859e159 [ 377.503040][T17878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.503057][T17878] RSP: 002b:00007fa339448028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.503076][T17878] RAX: ffffffffffffffda RBX: 00007fa338825fa0 RCX: 00007fa33859e159 [ 377.503088][T17878] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000003 [ 377.503098][T17878] RBP: 00007fa339448090 R08: 0000000000000000 R09: 0000000000000000 [ 377.503110][T17878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.503120][T17878] R13: 00007fa338826038 R14: 00007fa338825fa0 R15: 00007ffd916bb808 [ 377.503145][T17878] [ 377.503153][T17878] ERROR: Out of memory at tomoyo_realpath_from_path. [ 377.503247][T17879] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3706'. [ 377.590880][T17884] jffs2: notice: (17884) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (4 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 377.593215][ T43] audit: type=1400 audit(2001048886.709:2208): avc: denied { write } for pid=17883 comm="syz.7.3708" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 377.706185][T17887] FAULT_INJECTION: forcing a failure. [ 377.706185][T17887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.706215][T17887] CPU: 1 UID: 0 PID: 17887 Comm: syz.7.3709 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.706240][T17887] Tainted: [L]=SOFTLOCKUP [ 377.706246][T17887] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 377.706257][T17887] Call Trace: [ 377.706263][T17887] [ 377.706270][T17887] dump_stack_lvl+0x100/0x190 [ 377.706302][T17887] should_fail_ex.cold+0x5/0xa [ 377.706326][T17887] _copy_from_user+0x2e/0xd0 [ 377.706348][T17887] do_ipv6_setsockopt+0x73d/0x44a0 [ 377.706371][T17887] ? avc_has_perm_noaudit+0x56/0x470 [ 377.706398][T17887] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 377.706421][T17887] ? avc_has_perm_noaudit+0x145/0x470 [ 377.706450][T17887] ? avc_has_perm+0x135/0x1e0 [ 377.706476][T17887] ? __pfx_avc_has_perm+0x10/0x10 [ 377.706501][T17887] ? get_pid_task+0x106/0x250 [ 377.706530][T17887] ? sock_has_perm+0x25a/0x2f0 [ 377.706550][T17887] ? __pfx_sock_has_perm+0x10/0x10 [ 377.706569][T17887] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 377.706601][T17887] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 377.706630][T17887] ? ipv6_setsockopt+0xcb/0x170 [ 377.706649][T17887] ipv6_setsockopt+0xcb/0x170 [ 377.706672][T17887] udpv6_setsockopt+0x64/0xb0 [ 377.706695][T17887] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 377.706722][T17887] do_sock_setsockopt+0xf3/0x1d0 [ 377.706754][T17887] __sys_setsockopt+0x195/0x220 [ 377.706783][T17887] __x64_sys_setsockopt+0xbd/0x160 [ 377.706806][T17887] ? do_syscall_64+0xae/0x790 [ 377.706848][T17887] ? lockdep_hardirqs_on+0x7d/0x110 [ 377.706873][T17887] do_syscall_64+0x123/0x790 [ 377.706901][T17887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.706919][T17887] RIP: 0033:0x7f8defb9e159 [ 377.706934][T17887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.706950][T17887] RSP: 002b:00007f8df0ad6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 377.706968][T17887] RAX: ffffffffffffffda RBX: 00007f8defe25fa0 RCX: 00007f8defb9e159 [ 377.706980][T17887] RDX: 0000000000000019 RSI: 0000000000000029 RDI: 0000000000000003 [ 377.706992][T17887] RBP: 00007f8df0ad6090 R08: 0000000000000004 R09: 0000000000000000 [ 377.707003][T17887] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 377.707014][T17887] R13: 00007f8defe26038 R14: 00007f8defe25fa0 R15: 00007ffcd9cbe1e8 [ 377.707037][T17887] [ 377.760681][T17889] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3710'. [ 378.048525][T17897] FAULT_INJECTION: forcing a failure. [ 378.048525][T17897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.048548][T17897] CPU: 3 UID: 0 PID: 17897 Comm: syz.5.3714 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.048563][T17897] Tainted: [L]=SOFTLOCKUP [ 378.048568][T17897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 378.048574][T17897] Call Trace: [ 378.048578][T17897] [ 378.048583][T17897] dump_stack_lvl+0x100/0x190 [ 378.048603][T17897] should_fail_ex.cold+0x5/0xa [ 378.048619][T17897] _copy_from_user+0x2e/0xd0 [ 378.048635][T17897] copy_mount_options+0x76/0x190 [ 378.048648][T17897] __x64_sys_mount+0x1ab/0x310 [ 378.048667][T17897] ? __pfx___x64_sys_mount+0x10/0x10 [ 378.048689][T17897] do_syscall_64+0x123/0x790 [ 378.048709][T17897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.048722][T17897] RIP: 0033:0x7fec34b9e159 [ 378.048732][T17897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.048744][T17897] RSP: 002b:00007fec35b1c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 378.048756][T17897] RAX: ffffffffffffffda RBX: 00007fec34e25fa0 RCX: 00007fec34b9e159 [ 378.048763][T17897] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 378.048769][T17897] RBP: 00007fec34c3506b R08: 00002000000008c0 R09: 0000000000000000 [ 378.048776][T17897] R10: 000000000010001c R11: 0000000000000246 R12: 0000000000000000 [ 378.048783][T17897] R13: 00007fec34e26038 R14: 00007fec34e25fa0 R15: 00007ffd6652d908 [ 378.048797][T17897] [ 378.088771][T17901] syzkaller1: entered promiscuous mode [ 378.088785][T17901] syzkaller1: entered allmulticast mode [ 378.151539][T17907] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3719'. [ 378.226449][T17916] input: syz1 as /devices/virtual/input/input70 [ 378.620683][T17945] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3733'. [ 379.086049][T17960] input: syz1 as /devices/virtual/input/input71 [ 379.171142][T17966] syzkaller1: entered promiscuous mode [ 379.171176][T17966] syzkaller1: entered allmulticast mode [ 379.585307][T17984] input: syz1 as /devices/virtual/input/input72 [ 379.690864][T17989] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3752'. [ 379.708516][T17991] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3753'. [ 379.845102][T17999] syzkaller1: entered promiscuous mode [ 379.845120][T17999] syzkaller1: entered allmulticast mode [ 380.036186][T18003] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3758'. [ 380.106028][ T1688] usb 12-1: new high-speed USB device number 24 using dummy_hcd [ 380.243468][ T1688] usb 12-1: device descriptor read/64, error -71 [ 380.496343][ T1688] usb 12-1: new high-speed USB device number 25 using dummy_hcd [ 380.593076][T18023] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3764'. [ 380.630351][ T1688] usb 12-1: device descriptor read/64, error -71 [ 380.730062][T18031] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3767'. [ 380.746526][ T1688] usb usb12-port1: attempt power cycle [ 380.819375][T18035] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3769'. [ 380.875348][T18039] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3771'. [ 381.104392][ T1688] usb 12-1: new high-speed USB device number 26 using dummy_hcd [ 381.126189][ T1688] usb 12-1: device descriptor read/8, error -71 [ 381.319019][T18062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3778'. [ 381.361154][T18066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3780'. [ 381.378634][ T1688] usb 12-1: new high-speed USB device number 27 using dummy_hcd [ 381.396265][T18070] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3782'. [ 381.403443][ T1688] usb 12-1: device descriptor read/8, error -71 [ 381.518811][ T1688] usb usb12-port1: unable to enumerate USB device [ 381.726046][T18094] syzkaller1: entered promiscuous mode [ 381.726056][T18094] syzkaller1: entered allmulticast mode [ 381.921396][ T43] audit: type=1400 audit(2001048890.876:2209): avc: denied { shutdown } for pid=18101 comm="syz.4.3794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 382.022083][T18102] [syz.4.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [403c!=40, 4,4000] [ 382.179746][T18123] FAULT_INJECTION: forcing a failure. [ 382.179746][T18123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.179768][T18123] CPU: 1 UID: 0 PID: 18123 Comm: syz.4.3799 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.179784][T18123] Tainted: [L]=SOFTLOCKUP [ 382.179788][T18123] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 382.179794][T18123] Call Trace: [ 382.179806][T18123] [ 382.179811][T18123] dump_stack_lvl+0x100/0x190 [ 382.179832][T18123] should_fail_ex.cold+0x5/0xa [ 382.179865][T18123] _copy_from_user+0x2e/0xd0 [ 382.179884][T18123] copy_msghdr_from_user+0x9f/0x4c0 [ 382.179897][T18123] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 382.179912][T18123] ? lock_acquire+0x1d1/0x380 [ 382.179925][T18123] ? get_pid_task+0x2a/0x250 [ 382.179943][T18123] ___sys_sendmsg+0x106/0x1e0 [ 382.179955][T18123] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.179967][T18123] ? get_pid_task+0x106/0x250 [ 382.179988][T18123] ? find_held_lock+0x2b/0x80 [ 382.180012][T18123] __sys_sendmsg+0x160/0x210 [ 382.180028][T18123] ? __pfx___sys_sendmsg+0x10/0x10 [ 382.180051][T18123] do_syscall_64+0x123/0x790 [ 382.180071][T18123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.180083][T18123] RIP: 0033:0x7f5aefd9e159 [ 382.180093][T18123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.180104][T18123] RSP: 002b:00007f5af0c0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.180116][T18123] RAX: ffffffffffffffda RBX: 00007f5af0025fa0 RCX: 00007f5aefd9e159 [ 382.180123][T18123] RDX: 0000000004040000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 382.180130][T18123] RBP: 00007f5af0c0d090 R08: 0000000000000000 R09: 0000000000000000 [ 382.180143][T18123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.180150][T18123] R13: 00007f5af0026038 R14: 00007f5af0025fa0 R15: 00007ffe4226bfc8 [ 382.180165][T18123] [ 382.286280][T18130] l2tp_ppp: sess 2/0: no socket in recv [ 382.422304][T18143] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18143 comm=syz.5.3808 [ 382.427052][T18143] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18143 comm=syz.5.3808 [ 383.528350][T18191] input: syz1 as /devices/virtual/input/input73 [ 383.890563][ T25] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 384.029868][ T25] usb 9-1: device descriptor read/64, error -71 [ 384.298357][ T25] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 384.330918][T18209] netlink: 'syz.7.3831': attribute type 5 has an invalid length. [ 384.438085][ T25] usb 9-1: device descriptor read/64, error -71 [ 384.566062][ T25] usb usb9-port1: attempt power cycle [ 384.925417][T18238] FAULT_INJECTION: forcing a failure. [ 384.925417][T18238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.925453][T18238] CPU: 3 UID: 0 PID: 18238 Comm: syz.7.3841 Tainted: G L syzkaller #0 PREEMPT(full) [ 384.925492][T18238] Tainted: [L]=SOFTLOCKUP [ 384.925501][T18238] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 384.925513][T18238] Call Trace: [ 384.925520][T18238] [ 384.925529][T18238] dump_stack_lvl+0x100/0x190 [ 384.925562][T18238] should_fail_ex.cold+0x5/0xa [ 384.925590][T18238] _copy_from_user+0x2e/0xd0 [ 384.925613][T18238] __x64_sys_epoll_ctl+0x131/0x1e0 [ 384.925634][T18238] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 384.925662][T18238] do_syscall_64+0x123/0x790 [ 384.925695][T18238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.925717][T18238] RIP: 0033:0x7f8defb9e159 [ 384.925734][T18238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.925752][T18238] RSP: 002b:00007f8df0ad6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 384.925771][T18238] RAX: ffffffffffffffda RBX: 00007f8defe25fa0 RCX: 00007f8defb9e159 [ 384.925784][T18238] RDX: ffffffffffffffff RSI: 0000000000000001 RDI: 0000000000000003 [ 384.925795][T18238] RBP: 00007f8df0ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 384.925807][T18238] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 384.925818][T18238] R13: 00007f8defe26038 R14: 00007f8defe25fa0 R15: 00007ffcd9cbe1e8 [ 384.925843][T18238] [ 384.952204][ T25] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 384.979548][ T25] usb 9-1: device descriptor read/8, error -71 [ 385.018101][T18242] input: syz1 as /devices/virtual/input/input74 [ 385.241766][ T25] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 385.264216][ T25] usb 9-1: device descriptor read/8, error -71 [ 385.284714][ C1] net_ratelimit: 65 callbacks suppressed [ 385.382664][ T25] usb usb9-port1: unable to enumerate USB device [ 385.597676][T18253] FAULT_INJECTION: forcing a failure. [ 385.597676][T18253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.597707][T18253] CPU: 3 UID: 0 PID: 18253 Comm: syz.5.3847 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.597752][T18253] Tainted: [L]=SOFTLOCKUP [ 385.597760][T18253] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 385.597771][T18253] Call Trace: [ 385.597778][T18253] [ 385.597786][T18253] dump_stack_lvl+0x100/0x190 [ 385.597818][T18253] should_fail_ex.cold+0x5/0xa [ 385.597846][T18253] _copy_from_user+0x2e/0xd0 [ 385.597868][T18253] copy_msghdr_from_user+0x9f/0x4c0 [ 385.597891][T18253] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 385.597918][T18253] ? lock_acquire+0x1d1/0x380 [ 385.597939][T18253] ? get_pid_task+0x2a/0x250 [ 385.597990][T18253] ___sys_sendmsg+0x106/0x1e0 [ 385.598011][T18253] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.598032][T18253] ? get_pid_task+0x106/0x250 [ 385.598067][T18253] ? find_held_lock+0x2b/0x80 [ 385.598109][T18253] __sys_sendmsg+0x160/0x210 [ 385.598135][T18253] ? __pfx___sys_sendmsg+0x10/0x10 [ 385.598174][T18253] do_syscall_64+0x123/0x790 [ 385.598203][T18253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.598223][T18253] RIP: 0033:0x7fec34b9e159 [ 385.598239][T18253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.598256][T18253] RSP: 002b:00007fec35b1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.598276][T18253] RAX: ffffffffffffffda RBX: 00007fec34e25fa0 RCX: 00007fec34b9e159 [ 385.598289][T18253] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000003 [ 385.598302][T18253] RBP: 00007fec35b1c090 R08: 0000000000000000 R09: 0000000000000000 [ 385.598314][T18253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.598326][T18253] R13: 00007fec34e26038 R14: 00007fec34e25fa0 R15: 00007ffd6652d908 [ 385.598350][T18253] [ 385.778820][T18262] __nla_validate_parse: 13 callbacks suppressed [ 385.778837][T18262] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3851'. [ 385.780161][T18262] l2tp_ppp: sess 2/0: no socket in recv [ 386.233872][ T25] usb 12-1: new high-speed USB device number 28 using dummy_hcd [ 386.242590][T18282] FAULT_INJECTION: forcing a failure. [ 386.242590][T18282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.242611][T18282] CPU: 2 UID: 0 PID: 18282 Comm: syz.5.3860 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.242630][T18282] Tainted: [L]=SOFTLOCKUP [ 386.242636][T18282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 386.242645][T18282] Call Trace: [ 386.242649][T18282] [ 386.242654][T18282] dump_stack_lvl+0x100/0x190 [ 386.242673][T18282] should_fail_ex.cold+0x5/0xa [ 386.242690][T18282] _copy_from_user+0x2e/0xd0 [ 386.242704][T18282] move_addr_to_kernel+0x65/0x170 [ 386.242717][T18282] __sys_connect+0xb5/0x170 [ 386.242730][T18282] ? __pfx___sys_connect+0x10/0x10 [ 386.242742][T18282] ? __fget_files+0x21f/0x3d0 [ 386.242762][T18282] ? __pfx_ksys_write+0x10/0x10 [ 386.242777][T18282] __x64_sys_connect+0x72/0xb0 [ 386.242789][T18282] ? lockdep_hardirqs_on+0x7d/0x110 [ 386.242807][T18282] do_syscall_64+0x123/0x790 [ 386.242825][T18282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.242837][T18282] RIP: 0033:0x7fec34b9e159 [ 386.242847][T18282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.242858][T18282] RSP: 002b:00007fec35b1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 386.242869][T18282] RAX: ffffffffffffffda RBX: 00007fec34e25fa0 RCX: 00007fec34b9e159 [ 386.242877][T18282] RDX: 000000000000000c RSI: 0000200000000140 RDI: 0000000000000003 [ 386.242884][T18282] RBP: 00007fec35b1c090 R08: 0000000000000000 R09: 0000000000000000 [ 386.242891][T18282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.242897][T18282] R13: 00007fec34e26038 R14: 00007fec34e25fa0 R15: 00007ffd6652d908 [ 386.242912][T18282] [ 386.393118][ T25] usb 12-1: device descriptor read/64, error -71 [ 386.441371][ T43] audit: type=1400 audit(2001048895.098:2210): avc: denied { connect } for pid=18285 comm="syz.5.3862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 386.624403][T18288] infiniband syz1: set active [ 386.624468][T18288] infiniband syz1: added syz_tun [ 386.629873][T18288] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 386.629894][T18288] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 386.629916][T18288] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 386.663449][ T25] usb 12-1: new high-speed USB device number 29 using dummy_hcd [ 386.691275][T18288] RDS/IB: syz1: added [ 386.691298][T18288] smc: adding ib device syz1 with port count 1 [ 386.691308][T18288] smc: ib device syz1 port 1 has no pnetid [ 386.813320][ T25] usb 12-1: device descriptor read/64, error -71 [ 386.932354][ T25] usb usb12-port1: attempt power cycle [ 387.151430][T18331] fuseblk: Unknown parameter 'bd½ÅøðA<„K V¤WLè šê_rõ)"ž^Æ®˜oÌÝ Š:¿ÿôéÀðÐ_]‡»dqÇL¸TA‚æ¶ [ 387.151430][T18331] [ÇljŽ¢h3:&cž_‰Ä|tž·ßq [ 387.151430][T18331] NyùD(ÎöÂ0%è¿n#ZÇNu¸ð"n‰0x0000000000000003' [ 387.271347][ T5734] Bluetooth: hci2: link tx timeout [ 387.271494][ T5734] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 387.277421][T18339] random: crng reseeded on system resumption [ 387.289073][T18339] Hibernate inconsistent memory map detected! [ 387.289078][T18339] PM: hibernation: Image mismatch: architecture specific data [ 387.298382][ T25] usb 12-1: new high-speed USB device number 30 using dummy_hcd [ 387.320770][ T25] usb 12-1: device descriptor read/8, error -71 [ 387.589695][ T25] usb 12-1: new high-speed USB device number 31 using dummy_hcd [ 387.613813][ T25] usb 12-1: device descriptor read/8, error -71 [ 387.650479][T18344] netlink: 'syz.5.3880': attribute type 12 has an invalid length. [ 387.741268][ T25] usb usb12-port1: unable to enumerate USB device [ 387.932659][T18355] FAULT_INJECTION: forcing a failure. [ 387.932659][T18355] name failslab, interval 1, probability 0, space 0, times 0 [ 387.932684][T18355] CPU: 2 UID: 0 PID: 18355 Comm: syz.5.3883 Tainted: G L syzkaller #0 PREEMPT(full) [ 387.932700][T18355] Tainted: [L]=SOFTLOCKUP [ 387.932705][T18355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 387.932711][T18355] Call Trace: [ 387.932716][T18355] [ 387.932721][T18355] dump_stack_lvl+0x100/0x190 [ 387.932743][T18355] should_fail_ex.cold+0x5/0xa [ 387.932761][T18355] should_failslab+0xc2/0x120 [ 387.932778][T18355] __kmalloc_noprof+0xfc/0x840 [ 387.932791][T18355] ? rcu_is_watching+0x13/0xc0 [ 387.932807][T18355] ? tomoyo_encode2+0xfb/0x3c0 [ 387.932825][T18355] tomoyo_encode2+0xfb/0x3c0 [ 387.932841][T18355] tomoyo_encode+0x29/0x50 [ 387.932876][T18355] tomoyo_realpath_from_path+0x18c/0x690 [ 387.932895][T18355] tomoyo_path_number_perm+0x23c/0x580 [ 387.932909][T18355] ? tomoyo_path_number_perm+0x22e/0x580 [ 387.932925][T18355] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 387.932943][T18355] ? __lock_acquire+0x5c0/0x1f40 [ 387.932962][T18355] ? __fget_files+0x34/0x3d0 [ 387.932977][T18355] ? find_held_lock+0x2b/0x80 [ 387.932993][T18355] ? hook_file_ioctl_common+0x140/0x440 [ 387.933012][T18355] ? __fget_files+0x21f/0x3d0 [ 387.933029][T18355] security_file_ioctl+0xd3/0x230 [ 387.933107][T18355] __x64_sys_ioctl+0xb7/0x210 [ 387.933125][T18355] do_syscall_64+0x123/0x790 [ 387.933146][T18355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.933160][T18355] RIP: 0033:0x7fec34b9e159 [ 387.933170][T18355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.933182][T18355] RSP: 002b:00007fec35b1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.933194][T18355] RAX: ffffffffffffffda RBX: 00007fec34e25fa0 RCX: 00007fec34b9e159 [ 387.933202][T18355] RDX: 00002000000001c0 RSI: 00000000c0106f32 RDI: 0000000000000003 [ 387.933210][T18355] RBP: 00007fec34c3506b R08: 0000000000000000 R09: 0000000000000000 [ 387.933218][T18355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.933225][T18355] R13: 00007fec34e26038 R14: 00007fec34e25fa0 R15: 00007ffd6652d908 [ 387.933241][T18355] [ 387.933304][T18355] ERROR: Out of memory at tomoyo_realpath_from_path. [ 388.237001][T18381] FAULT_INJECTION: forcing a failure. [ 388.237001][T18381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.237054][T18381] CPU: 2 UID: 0 PID: 18381 Comm: syz.4.3890 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.237082][T18381] Tainted: [L]=SOFTLOCKUP [ 388.237089][T18381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 388.237100][T18381] Call Trace: [ 388.237108][T18381] [ 388.237116][T18381] dump_stack_lvl+0x100/0x190 [ 388.237165][T18381] should_fail_ex.cold+0x5/0xa [ 388.237194][T18381] _copy_to_user+0x32/0xd0 [ 388.237218][T18381] simple_read_from_buffer+0xcb/0x170 [ 388.237246][T18381] proc_fail_nth_read+0x1af/0x230 [ 388.237270][T18381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 388.237299][T18381] ? rw_verify_area+0xce/0x6d0 [ 388.237328][T18381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 388.237351][T18381] vfs_read+0x1e4/0xb40 [ 388.237372][T18381] ? lock_acquire+0x1d1/0x380 [ 388.237392][T18381] ? __fget_files+0x34/0x3d0 [ 388.237416][T18381] ? __pfx_vfs_read+0x10/0x10 [ 388.237434][T18381] ? find_held_lock+0x2b/0x80 [ 388.237462][T18381] ? __fget_files+0x215/0x3d0 [ 388.237490][T18381] ? __fget_files+0x21f/0x3d0 [ 388.237522][T18381] ksys_read+0x12a/0x250 [ 388.237542][T18381] ? __pfx_ksys_read+0x10/0x10 [ 388.237570][T18381] do_syscall_64+0x123/0x790 [ 388.237601][T18381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.237626][T18381] RIP: 0033:0x7f5aefd5e98e [ 388.237642][T18381] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 388.237658][T18381] RSP: 002b:00007f5af0c0cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 388.237677][T18381] RAX: ffffffffffffffda RBX: 00007f5af0c0d6c0 RCX: 00007f5aefd5e98e [ 388.237688][T18381] RDX: 000000000000000f RSI: 00007f5af0c0d0a0 RDI: 0000000000000004 [ 388.237699][T18381] RBP: 00007f5af0c0d090 R08: 0000000000000000 R09: 0000000000000000 [ 388.237711][T18381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.237722][T18381] R13: 00007f5af0026038 R14: 00007f5af0025fa0 R15: 00007ffe4226bfc8 [ 388.237748][T18381] [ 388.326738][T18385] jffs2: notice: (18385) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (4 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 388.329035][ T43] audit: type=1400 audit(2001048896.850:2211): avc: denied { write } for pid=18384 comm="syz.4.3891" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 388.629282][T18412] input: syz1 as /devices/virtual/input/input75 [ 388.681405][T18414] jffs2: notice: (18414) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (4 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 388.685199][ T43] audit: type=1400 audit(2001048897.175:2212): avc: denied { write } for pid=18413 comm="syz.4.3904" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 389.512310][ T5735] Bluetooth: hci2: command 0x0406 tx timeout [ 390.884894][ C3] net_ratelimit: 62 callbacks suppressed [ 396.426542][ C0] net_ratelimit: 46 callbacks suppressed [ 397.294902][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 397.294953][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 402.144989][ C1] net_ratelimit: 70 callbacks suppressed [ 402.840563][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 405.814300][T18431] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 405.930372][T18448] input: syz1 as /devices/virtual/input/input76 [ 405.998443][ T8314] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 406.185038][ T8314] usb 10-1: Using ep0 maxpacket: 32 [ 406.185575][ T8314] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 406.186502][ T8314] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.186515][ T8314] usb 10-1: config 0 has no interfaces? [ 406.188380][ T8314] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.188390][ T8314] usb 10-1: Product: syz [ 406.188398][ T8314] usb 10-1: Manufacturer: syz [ 406.188405][ T8314] usb 10-1: SerialNumber: syz [ 406.190059][ T8314] usb 10-1: config 0 descriptor?? [ 406.701230][T18452] jffs2: notice: (18452) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (4 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 406.706060][ T43] audit: type=1400 audit(2001048913.820:2213): avc: denied { write } for pid=18451 comm="syz.7.3917" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 407.033557][ T5734] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 407.045743][ T5734] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 407.047363][ T5734] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 407.049718][ T5734] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 407.057494][ T5734] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 407.162207][T12039] syz_tun (unregistering): left allmulticast mode [ 407.424449][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.424485][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.526901][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.526930][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.634485][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.634512][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.690680][ C0] net_ratelimit: 85 callbacks suppressed ** 133 printk messages dropped ** ** 203 printk messages dropped ** ** 292 printk messages dropped ** ** 231 printk messages dropped ** ** 92 printk messages dropped ** ** 2 printk messages dropped ** ** 9 printk messages dropped ** ** 25 printk messages dropped ** ** 48 printk messages dropped ** ** 40 printk messages dropped ** ** 53 printk messages dropped ** ** 29 printk messages dropped ** ** 5 printk messages dropped ** [ 407.800928][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.800947][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.807205][T18471] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.807247][T18471] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.807350][T18471] bridge_slave_0: entered allmulticast mode [ 407.808207][T18471] bridge_slave_0: entered promiscuous mode [ 407.810683][T18471] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.811013][T18471] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.811108][T18471] bridge_slave_1: entered allmulticast mode [ 407.811857][T18471] bridge_slave_1: entered promiscuous mode [ 407.863766][T18471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.884767][T18471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.966816][T18471] team0: Port device team_slave_0 added [ 407.968208][T18471] team0: Port device team_slave_1 added [ 407.998088][T18471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.998098][T18471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.998112][T18471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.070181][T18471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.070187][T18471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.070200][T18471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.208135][T18471] hsr_slave_0: entered promiscuous mode [ 408.208936][T18471] hsr_slave_1: entered promiscuous mode [ 408.209430][T18471] debugfs: 'hsr0' already exists in 'hsr' [ 408.209441][T18471] Cannot create hsr debugfs directory [ 408.256591][ T5813] netdevsim netdevsim7 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.256853][ T5813] netdevsim netdevsim7 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.256873][ T5813] netdevsim netdevsim7 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.256891][ T5813] netdevsim netdevsim7 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.321148][ T13] bridge_slave_1: left allmulticast mode [ 408.321159][ T13] bridge_slave_1: left promiscuous mode [ 408.321309][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.340257][ T13] bridge_slave_0: left allmulticast mode [ 408.340268][ T13] bridge_slave_0: left promiscuous mode [ 408.340401][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.468197][T18501] FAULT_INJECTION: forcing a failure. [ 408.468197][T18501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.468218][T18501] CPU: 3 UID: 0 PID: 18501 Comm: syz.4.3929 Tainted: G L syzkaller #0 PREEMPT(full) [ 408.468234][T18501] Tainted: [L]=SOFTLOCKUP [ 408.468239][T18501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 408.468245][T18501] Call Trace: [ 408.468250][T18501] [ 408.468255][T18501] dump_stack_lvl+0x100/0x190 [ 408.468276][T18501] should_fail_ex.cold+0x5/0xa [ 408.468293][T18501] strncpy_from_user+0x3b/0x2d0 [ 408.468307][T18501] ? get_pid_task+0x106/0x250 [ 408.468324][T18501] path_setxattrat+0x127/0x3b0 [ 408.468342][T18501] ? __pfx_path_setxattrat+0x10/0x10 [ 408.468360][T18501] ? ksys_write+0x190/0x250 [ 408.468372][T18501] ? ksys_write+0x190/0x250 [ 408.468393][T18501] ? fput+0x7c/0x100 [ 408.468408][T18501] ? ksys_write+0x1ac/0x250 [ 408.468420][T18501] ? __pfx_ksys_write+0x10/0x10 [ 408.468434][T18501] __x64_sys_fsetxattr+0xc5/0x140 [ 408.468451][T18501] ? do_syscall_64+0xae/0x790 [ 408.468469][T18501] ? lockdep_hardirqs_on+0x7d/0x110 [ 408.468486][T18501] do_syscall_64+0x123/0x790 [ 408.468504][T18501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.468516][T18501] RIP: 0033:0x7f5aefd9e159 [ 408.468526][T18501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.468537][T18501] RSP: 002b:00007f5af0c0d028 EFLAGS: 00000246 [ 408.468543][T18501] ORIG_RAX: 00000000000000be [ 408.468549][T18501] RAX: ffffffffffffffda RBX: 00007f5af0025fa0 RCX: 00007f5aefd9e159 [ 408.468556][T18501] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 408.468563][T18501] RBP: 00007f5af0c0d090 R08: 0000000000000000 R09: 0000000000000000 [ 408.468570][T18501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 ** 95 printk messages dropped ** ** 204 printk messages dropped ** ** 198 printk messages dropped ** ** 184 printk messages dropped ** ** 150 printk messages dropped ** ** 219 printk messages dropped ** ** 186 printk messages dropped ** ** 201 printk messages dropped ** ** 220 printk messages dropped ** ** 213 printk messages dropped ** ** 225 printk messages dropped ** ** 191 printk messages dropped ** ** 26 printk messages dropped ** ** 51 printk messages dropped ** ** 104 printk messages dropped ** ** 163 printk messages dropped ** ** 140 printk messages dropped ** ** 189 printk messages dropped ** ** 236 printk messages dropped ** ** 196 printk messages dropped ** ** 211 printk messages dropped ** ** 250 printk messages dropped ** ** 231 printk messages dropped ** ** 198 printk messages dropped ** ** 217 printk messages dropped ** ** 236 printk messages dropped ** ** 230 printk messages dropped ** ** 243 printk messages dropped ** ** 227 printk messages dropped ** ** 235 printk messages dropped ** ** 34 printk messages dropped ** [ 408.851979][ T13] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 408.885058][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.936077][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.987935][ T13] bond0 (unregistering): Released all slaves [ 409.009946][ T5851] usb 10-1: USB disconnect, device number 33 [ 409.260699][ T5734] Bluetooth: hci3: command tx timeout [ 409.275450][ T13] tipc: Left network mode [ 409.332769][ T43] audit: type=1400 audit(2001048916.248:2214): avc: denied { write } for pid=18520 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.445477][ T43] audit: type=1400 audit(2001048916.340:2215): avc: denied { write } for pid=18526 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.528454][T18471] netdevsim netdevsim7 eth21 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.653081][ T5446] 8021q: adding VLAN 0 to HW filter on device eth18 [ 409.913631][T18471] netdevsim netdevsim7 eth20 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.089683][ T43] audit: type=1400 audit(2001048916.950:2216): avc: denied { write } for pid=18535 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.217197][T18471] netdevsim netdevsim7 eth19 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.225544][ T43] audit: type=1400 audit(2001048917.079:2217): avc: denied { write } for pid=18538 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.415802][T18471] netdevsim netdevsim7 eth18 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.553062][ T43] audit: type=1400 audit(2001048917.374:2218): avc: denied { write } for pid=18552 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.633054][ T43] audit: type=1400 audit(2001048917.457:2219): avc: denied { write } for pid=18563 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.724691][ T43] audit: type=1400 audit(2001048917.531:2220): avc: denied { write } for pid=18571 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.725920][ T8311] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 410.781111][T18471] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 410.793347][T18471] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 410.806750][ T43] audit: type=1400 audit(2001048917.605:2221): avc: denied { write } for pid=18578 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.820783][T18471] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 410.834486][T18471] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 410.836897][T18471] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 410.850828][T18471] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 410.855034][T18471] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 410.872442][T18471] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 410.897055][ T8311] usb 10-1: Using ep0 maxpacket: 32 [ 410.897620][ T8311] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 410.898565][ T8311] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.898577][ T8311] usb 10-1: config 0 has no interfaces? [ 410.901574][ T8311] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.901585][ T8311] usb 10-1: Product: syz [ 410.901592][ T8311] usb 10-1: Manufacturer: syz [ 410.901600][ T8311] usb 10-1: SerialNumber: syz [ 410.907774][ T8311] usb 10-1: config 0 descriptor?? [ 410.989921][T18471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.000748][T18471] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.005659][ T6768] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.005735][ T6768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.012701][ T6775] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.012777][ T6775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.311969][T18471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.400917][ T13] hsr_slave_0: left promiscuous mode [ 411.403703][ T13] hsr_slave_1: left promiscuous mode [ 411.413798][ T13] veth1_macvtap: left promiscuous mode [ 411.413818][ T13] veth0_macvtap: left promiscuous mode [ 411.413889][ T13] veth1_vlan: left allmulticast mode [ 411.413994][ T13] veth1_vlan: left promiscuous mode [ 411.414027][ T13] veth0_vlan: left promiscuous mode [ 411.504132][ T5734] Bluetooth: hci3: command tx timeout [ 411.701335][ T13] team0 (unregistering): Port device team_slave_1 removed [ 411.713520][ T13] team0 (unregistering): Port device team_slave_0 removed [ 411.880269][T18612] FAULT_INJECTION: forcing a failure. [ 411.880269][T18612] name failslab, interval 1, probability 0, space 0, times 0 [ 411.880287][T18612] CPU: 3 UID: 0 PID: 18612 Comm: syz.4.3948 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.880303][T18612] Tainted: [L]=SOFTLOCKUP [ 411.880307][T18612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 411.880314][T18612] Call Trace: [ 411.880318][T18612] [ 411.880323][T18612] dump_stack_lvl+0x100/0x190 [ 411.880344][T18612] should_fail_ex.cold+0x5/0xa [ 411.880363][T18612] should_failslab+0xc2/0x120 [ 411.880380][T18612] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 411.880394][T18612] ? __alloc_skb+0x140/0x710 [ 411.880411][T18612] __alloc_skb+0x140/0x710 [ 411.880424][T18612] ? __alloc_skb+0x5b7/0x710 [ 411.880438][T18612] ? __pfx___alloc_skb+0x10/0x10 [ 411.880456][T18612] netlink_alloc_large_skb+0x69/0x150 [ 411.880471][T18612] netlink_sendmsg+0x680/0xda0 [ 411.880488][T18612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.880503][T18612] ? selinux_socket_sendmsg+0x198/0x2f0 [ 411.880539][T18612] sock_sendmsg+0x394/0x410 [ 411.880550][T18612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.880564][T18612] ? __pfx_sock_sendmsg+0x10/0x10 [ 411.880579][T18612] ? avc_has_perm_noaudit+0x56/0x470 [ 411.880599][T18612] splice_to_socket+0xb3c/0x11a0 [ 411.880623][T18612] ? __pfx_splice_to_socket+0x10/0x10 [ 411.880643][T18612] ? inode_has_perm.isra.0+0x14a/0x1a0 [ 411.880669][T18612] ? bpf_lsm_file_permission+0x9/0x10 [ 411.880684][T18612] ? security_file_permission+0x76/0x210 [ 411.880701][T18612] ? __pfx_splice_to_socket+0x10/0x10 [ 411.880718][T18612] do_splice+0x109c/0x1fa0 [ 411.880735][T18612] ? __lock_acquire+0x5c0/0x1f40 [ 411.880749][T18612] ? ksys_write+0x190/0x250 [ 411.880766][T18612] ? lock_acquire+0x1d1/0x380 [ 411.880786][T18612] ? __pfx_do_splice+0x10/0x10 [ 411.880807][T18612] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 411.880826][T18612] ? __fget_files+0x34/0x3d0 [ 411.880853][T18612] ? find_held_lock+0x2b/0x80 [ 411.880881][T18612] __do_splice+0x33b/0x370 [ 411.880905][T18612] ? __pfx___do_splice+0x10/0x10 [ 411.880936][T18612] __x64_sys_splice+0x187/0x250 [ 411.880962][T18612] do_syscall_64+0x123/0x790 [ 411.880991][T18612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.881009][T18612] RIP: 0033:0x7f5aefd9e159 [ 411.881024][T18612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.881045][T18612] RSP: 002b:00007f5af0c0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 411.881066][T18612] RAX: ffffffffffffffda RBX: 00007f5af0025fa0 RCX: 00007f5aefd9e159 [ 411.881078][T18612] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 411.881088][T18612] RBP: 00007f5af0c0d090 R08: 0000000000003000 R09: 100000000000000d [ 411.881102][T18612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.881112][T18612] R13: 00007f5af0026038 R14: 00007f5af0025fa0 R15: 00007ffe4226bfc8 [ 411.881136][T18612] [ 411.909532][T18471] veth0_vlan: entered promiscuous mode [ 411.923226][T18471] veth1_vlan: entered promiscuous mode [ 411.946117][T18471] veth0_macvtap: entered promiscuous mode [ 411.952839][T18471] veth1_macvtap: entered promiscuous mode [ 411.992713][T18471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.995658][T18471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.998649][ T5813] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.998736][ T5813] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.998811][ T5813] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.998840][ T5813] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.151012][ T6778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.151021][ T6778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.198927][ T6010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.198938][ T6010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.303997][ T13] IPVS: stop unused estimator thread 0... [ 413.047282][T18666] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3965'. [ 413.141845][T18670] FAULT_INJECTION: forcing a failure. [ 413.141845][T18670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.141868][T18670] CPU: 2 UID: 0 PID: 18670 Comm: syz.4.3967 Tainted: G L syzkaller #0 PREEMPT(full) [ 413.141891][T18670] Tainted: [L]=SOFTLOCKUP [ 413.141897][T18670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 413.141907][T18670] Call Trace: [ 413.141914][T18670] [ 413.141923][T18670] dump_stack_lvl+0x100/0x190 [ 413.141954][T18670] should_fail_ex.cold+0x5/0xa [ 413.141981][T18670] _copy_from_user+0x2e/0xd0 [ 413.142004][T18670] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 413.142030][T18670] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 413.142053][T18670] do_sock_getsockopt+0x2d0/0x6e0 [ 413.142073][T18670] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 413.142093][T18670] ? __fget_files+0x34/0x3d0 [ 413.142107][T18670] ? find_held_lock+0x2b/0x80 [ 413.142127][T18670] ? __fget_files+0x21f/0x3d0 [ 413.142144][T18670] __sys_getsockopt+0x148/0x260 [ 413.142163][T18670] ? __x64_sys_getsockopt+0xbd/0x160 [ 413.142177][T18670] __x64_sys_getsockopt+0xbd/0x160 [ 413.142191][T18670] ? do_syscall_64+0xae/0x790 [ 413.142208][T18670] ? lockdep_hardirqs_on+0x7d/0x110 [ 413.142224][T18670] do_syscall_64+0x123/0x790 [ 413.142243][T18670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.142255][T18670] RIP: 0033:0x7f5aefd9e159 [ 413.142264][T18670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.142275][T18670] RSP: 002b:00007f5af0c0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 413.142287][T18670] RAX: ffffffffffffffda RBX: 00007f5af0025fa0 RCX: 00007f5aefd9e159 [ 413.142294][T18670] RDX: 0000000000000007 RSI: 000000000000011b RDI: 0000000000000004 [ 413.142301][T18670] RBP: 00007f5af0c0d090 R08: 0000200000000180 R09: 0000000000000000 [ 413.142308][T18670] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 413.142315][T18670] R13: 00007f5af0026038 R14: 00007f5af0025fa0 R15: 00007ffe4226bfc8 [ 413.142329][T18670] [ 413.236518][ C0] net_ratelimit: 184 callbacks suppressed [ 413.498583][T18695] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3975'. [ 413.731310][ T7153] usb 10-1: USB disconnect, device number 34 [ 413.758400][ T5734] Bluetooth: hci3: command tx timeout [ 413.810183][T18719] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3985'. [ 413.842503][T18715] FAULT_INJECTION: forcing a failure. [ 413.842503][T18715] name failslab, interval 1, probability 0, space 0, times 0 [ 413.842523][T18715] CPU: 0 UID: 0 PID: 18715 Comm: syz.5.3984 Tainted: G L syzkaller #0 PREEMPT(full) [ 413.842539][T18715] Tainted: [L]=SOFTLOCKUP [ 413.842544][T18715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 413.842551][T18715] Call Trace: [ 413.842556][T18715] [ 413.842560][T18715] dump_stack_lvl+0x100/0x190 [ 413.842582][T18715] should_fail_ex.cold+0x5/0xa [ 413.842603][T18715] should_failslab+0xc2/0x120 [ 413.842626][T18715] __kmalloc_noprof+0xfc/0x840 [ 413.842642][T18715] ? rcu_is_watching+0x13/0xc0 [ 413.842665][T18715] ? tomoyo_realpath_from_path+0xb6/0x690 [ 413.842696][T18715] tomoyo_realpath_from_path+0xb6/0x690 [ 413.842723][T18715] tomoyo_path_number_perm+0x23c/0x580 [ 413.842741][T18715] ? tomoyo_path_number_perm+0x22e/0x580 [ 413.842779][T18715] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 413.842808][T18715] ? __lock_acquire+0x5c0/0x1f40 [ 413.842838][T18715] ? __fget_files+0x34/0x3d0 [ 413.842862][T18715] ? find_held_lock+0x2b/0x80 [ 413.842886][T18715] ? hook_file_ioctl_common+0x140/0x440 [ 413.842905][T18715] ? __fget_files+0x21f/0x3d0 [ 413.842922][T18715] security_file_ioctl+0xd3/0x230 [ 413.842936][T18715] __x64_sys_ioctl+0xb7/0x210 [ 413.842950][T18715] do_syscall_64+0x123/0x790 [ 413.842969][T18715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.842981][T18715] RIP: 0033:0x7fec34b9e159 [ 413.842991][T18715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.843003][T18715] RSP: 002b:00007fec35b1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 413.843014][T18715] RAX: ffffffffffffffda RBX: 00007fec34e25fa0 RCX: 00007fec34b9e159 [ 413.843022][T18715] RDX: 0000000000000000 RSI: 0000000000008906 RDI: 0000000000000004 [ 413.843028][T18715] RBP: 00007fec35b1c090 R08: 0000000000000000 R09: 0000000000000000 [ 413.843035][T18715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.843042][T18715] R13: 00007fec34e26038 R14: 00007fec34e25fa0 R15: 00007ffd6652d908 [ 413.843057][T18715] [ 413.843217][T18715] ERROR: Out of memory at tomoyo_realpath_from_path. [ 414.129224][T18744] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3993'. [ 414.158838][T18746] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3994'. [ 414.375217][ T7153] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 414.548025][ T7153] usb 9-1: Using ep0 maxpacket: 32 [ 414.548529][ T7153] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 414.549436][ T7153] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.549450][ T7153] usb 9-1: config 0 has no interfaces? [ 414.551280][ T7153] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.551290][ T7153] usb 9-1: Product: syz [ 414.551298][ T7153] usb 9-1: Manufacturer: syz [ 414.551305][ T7153] usb 9-1: SerialNumber: syz [ 414.553137][ T7153] usb 9-1: config 0 descriptor?? [ 414.682397][T18773] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4003'. [ 414.720905][T18776] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4004'. [ 415.002724][ T1688] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 415.138150][T18793] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4012'. [ 415.143123][ T1688] usb 10-1: device descriptor read/64, error -71 [ 415.227512][ T43] audit: type=1400 audit(2001048921.686:2222): avc: denied { getopt } for pid=18795 comm="syz.3.4013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 415.227924][T18797] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4013'. [ 415.284869][T18798] ip6t_rt: too many addresses specified [ 415.413745][ T1688] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 415.565529][ T1688] usb 10-1: device descriptor read/64, error -71 [ 415.696088][ T1688] usb usb10-port1: attempt power cycle [ 416.020767][ T5734] Bluetooth: hci3: command tx timeout [ 416.085437][ T1688] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 416.089033][T18811] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4015'. [ 416.109038][ T1688] usb 10-1: device descriptor read/8, error -71 [ 416.214951][T18823] 9pnet_virtio: no channels available for device syz [ 416.388834][ T1688] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 416.411758][ T1688] usb 10-1: device descriptor read/8, error -71 [ 416.531542][ T1688] usb usb10-port1: unable to enumerate USB device [ 416.535079][T18841] 9pnet_virtio: no channels available for device syz [ 416.537059][T18841] FAULT_INJECTION: forcing a failure. [ 416.537059][T18841] name failslab, interval 1, probability 0, space 0, times 0 [ 416.537077][T18841] CPU: 2 UID: 0 PID: 18841 Comm: syz.7.4025 Tainted: G L syzkaller #0 PREEMPT(full) [ 416.537093][T18841] Tainted: [L]=SOFTLOCKUP [ 416.537097][T18841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 416.537104][T18841] Call Trace: [ 416.537108][T18841] [ 416.537113][T18841] dump_stack_lvl+0x100/0x190 [ 416.537134][T18841] should_fail_ex.cold+0x5/0xa [ 416.537151][T18841] should_failslab+0xc2/0x120 [ 416.537167][T18841] __kmalloc_cache_noprof+0x91/0x6d0 [ 416.537185][T18841] ? alloc_pipe_info+0x10e/0x590 [ 416.537203][T18841] alloc_pipe_info+0x10e/0x590 [ 416.537220][T18841] splice_direct_to_actor+0x78f/0xa30 [ 416.537237][T18841] ? __pfx_direct_splice_actor+0x10/0x10 [ 416.537252][T18841] ? inode_has_perm.isra.0+0x14a/0x1a0 [ 416.537268][T18841] ? __file_has_perm+0x32e/0x4a0 [ 416.537280][T18841] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 416.537297][T18841] ? __pfx___file_has_perm+0x10/0x10 [ 416.537313][T18841] do_splice_direct+0x174/0x240 [ 416.537329][T18841] ? __pfx_do_splice_direct+0x10/0x10 [ 416.537346][T18841] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 416.537362][T18841] ? bpf_lsm_file_permission+0x9/0x10 [ 416.537377][T18841] ? security_file_permission+0x76/0x210 [ 416.537393][T18841] ? rw_verify_area+0xce/0x6d0 [ 416.537412][T18841] do_sendfile+0xadc/0xe20 [ 416.537425][T18841] ? __pfx_do_sendfile+0x10/0x10 [ 416.537436][T18841] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 416.537455][T18841] ? __fget_files+0x21f/0x3d0 [ 416.537473][T18841] __x64_sys_sendfile64+0x1d8/0x220 [ 416.537492][T18841] ? ksys_write+0x1ac/0x250 [ 416.537504][T18841] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 416.537530][T18841] do_syscall_64+0x123/0x790 [ 416.537549][T18841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.537561][T18841] RIP: 0033:0x7fbebb19e159 [ 416.537571][T18841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.537582][T18841] RSP: 002b:00007fbebc00e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 416.537593][T18841] RAX: ffffffffffffffda RBX: 00007fbebb425fa0 RCX: 00007fbebb19e159 [ 416.537601][T18841] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 416.537607][T18841] RBP: 00007fbebc00e090 R08: 0000000000000000 R09: 0000000000000000 [ 416.537615][T18841] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000001 [ 416.537621][T18841] R13: 00007fbebb426038 R14: 00007fbebb425fa0 R15: 00007fffa8f578d8 [ 416.537635][T18841] [ 417.014931][T18865] can0: slcan on pts0. [ 417.024638][ T43] audit: type=1400 audit(2001048923.347:2223): avc: denied { ioctl } for pid=18864 comm="syz.7.4033" path="socket:[90494]" dev="sockfs" ino=90494 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 417.093231][ T43] audit: type=1400 audit(2001048923.412:2224): avc: denied { write } for pid=18867 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.137429][ T43] audit: type=1400 audit(2001048923.458:2225): avc: denied { write } for pid=18870 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.143741][T18864] can0 (unregistered): slcan off pts0. [ 417.197780][ T43] audit: type=1400 audit(2001048923.504:2226): avc: denied { write } for pid=18872 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.198230][T18877] 9pnet_virtio: no channels available for device syz [ 417.239636][ T43] audit: type=1400 audit(2001048923.550:2227): avc: denied { write } for pid=18881 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.380943][T18570] usb 9-1: USB disconnect, device number 48 [ 418.100747][ T8311] usb 12-1: new high-speed USB device number 32 using dummy_hcd [ 418.262508][ T8311] usb 12-1: Using ep0 maxpacket: 32 [ 418.263024][ T8311] usb 12-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 418.263956][ T8311] usb 12-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 418.265924][ T8311] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.265934][ T8311] usb 12-1: Product: syz [ 418.265941][ T8311] usb 12-1: Manufacturer: syz [ 418.265949][ T8311] usb 12-1: SerialNumber: syz [ 418.269394][ T8311] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 418.269429][ T8311] imon 12-1:155.0: unable to initialize intf0, err -19 [ 418.269436][ T8311] imon:imon_probe: failed to initialize context! [ 418.269442][ T8311] imon 12-1:155.0: unable to register, err -19 [ 418.368796][T18954] FAULT_INJECTION: forcing a failure. [ 418.368796][T18954] name failslab, interval 1, probability 0, space 0, times 0 [ 418.368815][T18954] CPU: 2 UID: 0 PID: 18954 Comm: syz.4.4062 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.368830][T18954] Tainted: [L]=SOFTLOCKUP [ 418.368834][T18954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 418.368841][T18954] Call Trace: [ 418.368845][T18954] [ 418.368850][T18954] dump_stack_lvl+0x100/0x190 [ 418.368870][T18954] should_fail_ex.cold+0x5/0xa [ 418.368887][T18954] should_failslab+0xc2/0x120 [ 418.368903][T18954] __kvmalloc_node_noprof+0x113/0x9b0 [ 418.368918][T18954] ? traverse.part.0.constprop.0+0x397/0x650 [ 418.368936][T18954] traverse.part.0.constprop.0+0x397/0x650 [ 418.368951][T18954] ? __pfx__kstrtoull+0x10/0x10 [ 418.368970][T18954] seq_read_iter+0x93f/0x1270 [ 418.368997][T18954] seq_read+0x344/0x4d0 [ 418.369011][T18954] ? __pfx_seq_read+0x10/0x10 [ 418.369030][T18954] ? selinux_file_permission+0x8f/0x6d0 [ 418.369046][T18954] ? __pfx_seq_read+0x10/0x10 [ 418.369060][T18954] proc_reg_read+0x240/0x330 [ 418.369078][T18954] ? __pfx_proc_reg_read+0x10/0x10 [ 418.369095][T18954] vfs_read+0x1e4/0xb40 [ 418.369108][T18954] ? lock_acquire+0x1d1/0x380 [ 418.369120][T18954] ? __fget_files+0x34/0x3d0 [ 418.369135][T18954] ? __pfx_vfs_read+0x10/0x10 [ 418.369146][T18954] ? find_held_lock+0x2b/0x80 [ 418.369161][T18954] ? __fget_files+0x215/0x3d0 [ 418.369175][T18954] ? __fget_files+0x215/0x3d0 [ 418.369192][T18954] ? __fget_files+0x21f/0x3d0 [ 418.369210][T18954] __x64_sys_pread64+0x1eb/0x250 [ 418.369224][T18954] ? __pfx___x64_sys_pread64+0x10/0x10 [ 418.369241][T18954] do_syscall_64+0x123/0x790 [ 418.369260][T18954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.369272][T18954] RIP: 0033:0x7f5aefd9e159 [ 418.369282][T18954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.369292][T18954] RSP: 002b:00007f5af0c0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 418.369305][T18954] RAX: ffffffffffffffda RBX: 00007f5af0025fa0 RCX: 00007f5aefd9e159 [ 418.369312][T18954] RDX: 00000000000000fd RSI: 0000200000000100 RDI: 0000000000000005 [ 418.369320][T18954] RBP: 00007f5af0c0d090 R08: 0000000000000000 R09: 0000000000000000 [ 418.369326][T18954] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 418.369333][T18954] R13: 00007f5af0026038 R14: 00007f5af0025fa0 R15: 00007ffe4226bfc8 [ 418.369347][T18954] [ 418.490525][T18967] __nla_validate_parse: 8 callbacks suppressed [ 418.490535][T18967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4066'. [ 418.706640][ C3] net_ratelimit: 166 callbacks suppressed [ 419.104455][T19002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4077'. [ 419.290675][ T43] audit: type=1400 audit(2001048925.443:2228): avc: denied { ioctl } for pid=19012 comm="syz.5.4082" path="socket:[90698]" dev="sockfs" ino=90698 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 419.291742][ T43] audit: type=1400 audit(2001048925.452:2229): avc: denied { create } for pid=19012 comm="syz.5.4082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 419.293548][ T43] audit: type=1400 audit(2001048925.452:2230): avc: denied { bind } for pid=19012 comm="syz.5.4082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 419.293980][ T43] audit: type=1400 audit(2001048925.452:2231): avc: denied { connect } for pid=19012 comm="syz.5.4082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 419.776275][T19048] vlan2: entered promiscuous mode [ 419.776284][T19048] bridge0: entered promiscuous mode [ 419.941310][T19064] FAULT_INJECTION: forcing a failure. [ 419.941310][T19064] name failslab, interval 1, probability 0, space 0, times 0 [ 419.941415][T19064] CPU: 0 UID: 0 PID: 19064 Comm: syz.4.4106 Tainted: G L syzkaller #0 PREEMPT(full) [ 419.941439][T19064] Tainted: [L]=SOFTLOCKUP [ 419.941446][T19064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 419.941456][T19064] Call Trace: [ 419.941462][T19064] [ 419.941470][T19064] dump_stack_lvl+0x100/0x190 [ 419.941500][T19064] should_fail_ex.cold+0x5/0xa [ 419.941525][T19064] should_failslab+0xc2/0x120 [ 419.941548][T19064] __kmalloc_noprof+0xfc/0x840 [ 419.941568][T19064] ? tomoyo_encode2+0xfb/0x3c0 [ 419.941589][T19064] tomoyo_encode2+0xfb/0x3c0 [ 419.941606][T19064] tomoyo_encode+0x29/0x50 [ 419.941622][T19064] tomoyo_realpath_from_path+0x18c/0x690 [ 419.941649][T19064] tomoyo_path_number_perm+0x23c/0x580 [ 419.941667][T19064] ? tomoyo_path_number_perm+0x22e/0x580 [ 419.941687][T19064] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 419.941714][T19064] ? __lock_acquire+0x5c0/0x1f40 [ 419.941743][T19064] ? __fget_files+0x34/0x3d0 [ 419.941765][T19064] ? find_held_lock+0x2b/0x80 [ 419.941813][T19064] ? hook_file_ioctl_common+0x140/0x440 [ 419.941844][T19064] ? __fget_files+0x21f/0x3d0 [ 419.941869][T19064] security_file_ioctl+0xd3/0x230 [ 419.941890][T19064] __x64_sys_ioctl+0xb7/0x210 [ 419.941911][T19064] do_syscall_64+0x123/0x790 [ 419.941943][T19064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.941962][T19064] RIP: 0033:0x7f5aefd9e159 [ 419.941976][T19064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.941993][T19064] RSP: 002b:00007f5af0c0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 419.942010][T19064] RAX: ffffffffffffffda RBX: 00007f5af0025fa0 RCX: 00007f5aefd9e159 [ 419.942022][T19064] RDX: 0000000000000000 RSI: 00000000c008551c RDI: 0000000000000003 [ 419.942033][T19064] RBP: 00007f5af0c0d090 R08: 0000000000000000 R09: 0000000000000000 [ 419.942043][T19064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.942054][T19064] R13: 00007f5af0026038 R14: 00007f5af0025fa0 R15: 00007ffe4226bfc8 [ 419.942078][T19064] [ 419.942095][T19064] ERROR: Out of memory at tomoyo_realpath_from_path. [ 421.102342][ T8311] usb 12-1: USB disconnect, device number 32 [ 421.346365][T19097] FAULT_INJECTION: forcing a failure. [ 421.346365][T19097] name failslab, interval 1, probability 0, space 0, times 0 [ 421.346389][T19097] CPU: 0 UID: 0 PID: 19097 Comm: syz.4.4113 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.346410][T19097] Tainted: [L]=SOFTLOCKUP [ 421.346416][T19097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 421.346426][T19097] Call Trace: [ 421.346432][T19097] [ 421.346439][T19097] dump_stack_lvl+0x100/0x190 [ 421.346461][T19097] should_fail_ex.cold+0x5/0xa [ 421.346478][T19097] should_failslab+0xc2/0x120 [ 421.346494][T19097] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 421.346508][T19097] ? __alloc_skb+0x5b7/0x710 [ 421.346521][T19097] ? __alloc_skb+0x140/0x710 [ 421.346542][T19097] __alloc_skb+0x140/0x710 [ 421.346555][T19097] ? __alloc_skb+0x5b7/0x710 [ 421.346569][T19097] ? __pfx___alloc_skb+0x10/0x10 [ 421.346586][T19097] netlink_alloc_large_skb+0x69/0x150 [ 421.346602][T19097] netlink_sendmsg+0x680/0xda0 [ 421.346618][T19097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.346633][T19097] ? selinux_socket_sendmsg+0x198/0x2f0 [ 421.346649][T19097] ____sys_sendmsg+0xa4d/0xbe0 [ 421.346659][T19097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.346674][T19097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.346688][T19097] ? lock_acquire+0x1d1/0x380 [ 421.346700][T19097] ? get_pid_task+0x2a/0x250 [ 421.346717][T19097] ___sys_sendmsg+0x190/0x1e0 [ 421.346730][T19097] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.346741][T19097] ? get_pid_task+0x106/0x250 [ 421.346762][T19097] ? find_held_lock+0x2b/0x80 [ 421.346787][T19097] __sys_sendmsg+0x160/0x210 [ 421.346803][T19097] ? __pfx___sys_sendmsg+0x10/0x10 [ 421.346825][T19097] do_syscall_64+0x123/0x790 [ 421.346844][T19097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.346856][T19097] RIP: 0033:0x7f5aefd9e159 [ 421.346867][T19097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.346878][T19097] RSP: 002b:00007f5af0c0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.346890][T19097] RAX: ffffffffffffffda RBX: 00007f5af0025fa0 RCX: 00007f5aefd9e159 [ 421.346897][T19097] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 421.346905][T19097] RBP: 00007f5af0c0d090 R08: 0000000000000000 R09: 0000000000000000 [ 421.346911][T19097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.346918][T19097] R13: 00007f5af0026038 R14: 00007f5af0025fa0 R15: 00007ffe4226bfc8 [ 421.346932][T19097] [ 421.352651][T19095] jffs2: notice: (19095) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (4 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 421.356468][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 421.356478][ T43] audit: type=1400 audit(2001048927.345:2233): avc: denied { write } for pid=19094 comm="syz.7.4112" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 421.412391][T19100] input: syz1 as /devices/virtual/input/input77 [ 421.477969][T19104] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4115'. [ 421.512514][ T8314] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 421.653142][ T8314] usb 10-1: device descriptor read/64, error -71 [ 421.746399][T19126] jffs2: notice: (19126) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (4 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 421.747936][ T43] audit: type=1400 audit(2001048927.705:2234): avc: denied { write } for pid=19125 comm="syz.3.4123" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 421.761436][ T9] usb 12-1: new high-speed USB device number 33 using dummy_hcd [ 421.806236][T19131] input: syz1 as /devices/virtual/input/input78 [ 421.913479][ T8314] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 421.918262][T19137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4128'. [ 421.923924][ T9] usb 12-1: Using ep0 maxpacket: 32 [ 421.930446][ T9] usb 12-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 421.931767][ T9] usb 12-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 421.933655][ T9] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.933664][ T9] usb 12-1: Product: syz [ 421.933672][ T9] usb 12-1: Manufacturer: syz [ 421.933680][ T9] usb 12-1: SerialNumber: syz [ 421.942759][ T9] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 421.942794][ T9] imon 12-1:155.0: unable to initialize intf0, err -19 [ 421.942801][ T9] imon:imon_probe: failed to initialize context! [ 421.942807][ T9] imon 12-1:155.0: unable to register, err -19 [ 422.054534][ T8314] usb 10-1: device descriptor read/64, error -71 [ 422.151419][ T7153] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 422.174476][ T8314] usb usb10-port1: attempt power cycle [ 422.313758][ T7153] usb 9-1: Using ep0 maxpacket: 8 [ 422.314344][ T7153] usb 9-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 422.315417][ T7153] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.315430][ T7153] usb 9-1: config 0 has no interfaces? [ 422.317652][ T7153] usb 9-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 422.317662][ T7153] usb 9-1: Product: syz [ 422.317670][ T7153] usb 9-1: Manufacturer: syz [ 422.317678][ T7153] usb 9-1: SerialNumber: syz [ 422.319535][ T7153] usb 9-1: config 0 descriptor?? [ 422.542482][ T7153] usb 9-1: USB disconnect, device number 49 [ 422.552109][ T8314] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 422.574442][ T8314] usb 10-1: device descriptor read/8, error -71 [ 422.844436][ T8314] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 422.868406][ T8314] usb 10-1: device descriptor read/8, error -71 [ 422.986095][ T8314] usb usb10-port1: unable to enumerate USB device [ 423.154459][T19160] jffs2: notice: (19160) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (4 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 423.163836][ T43] audit: type=1400 audit(2001048929.016:2235): avc: denied { write } for pid=19159 comm="syz.4.4134" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 423.233367][T19166] input: syz1 as /devices/virtual/input/input79 [ 423.293033][T19168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4137'. [ 423.642157][T19196] jffs2: notice: (19196) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (4 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 423.644784][ T43] audit: type=1400 audit(2001048929.459:2236): avc: denied { write } for pid=19195 comm="syz.4.4147" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 423.770488][T19200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4148'. [ 424.067264][T19216] jffs2: notice: (19216) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (4 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 424.069166][ T43] audit: type=1400 audit(2001048929.856:2237): avc: denied { write } for pid=19215 comm="syz.4.4156" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 424.228410][T19222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4158'. [ 424.328412][ C3] net_ratelimit: 57 callbacks suppressed [ 424.366201][T19230] FAULT_INJECTION: forcing a failure. [ 424.366201][T19230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.366230][T19230] CPU: 3 UID: 0 PID: 19230 Comm: syz.4.4162 Tainted: G L syzkaller #0 PREEMPT(full) [ 424.366248][T19230] Tainted: [L]=SOFTLOCKUP [ 424.366252][T19230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 424.366259][T19230] Call Trace: [ 424.366264][T19230] [ 424.366269][T19230] dump_stack_lvl+0x100/0x190 [ 424.366289][T19230] should_fail_ex.cold+0x5/0xa [ 424.366306][T19230] _copy_from_user+0x2e/0xd0 [ 424.366320][T19230] copy_msghdr_from_user+0x9f/0x4c0 [ 424.366342][T19230] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 424.366358][T19230] ? lock_acquire+0x1d1/0x380 [ 424.366370][T19230] ? get_pid_task+0x2a/0x250 [ 424.366387][T19230] ___sys_sendmsg+0x106/0x1e0 [ 424.366399][T19230] ? __pfx____sys_sendmsg+0x10/0x10 [ 424.366411][T19230] ? get_pid_task+0x106/0x250 [ 424.366431][T19230] ? find_held_lock+0x2b/0x80 [ 424.366456][T19230] __sys_sendmsg+0x160/0x210 [ 424.366472][T19230] ? __pfx___sys_sendmsg+0x10/0x10 [ 424.366494][T19230] do_syscall_64+0x123/0x790 [ 424.366513][T19230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.366525][T19230] RIP: 0033:0x7f5aefd9e159 [ 424.366535][T19230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.366545][T19230] RSP: 002b:00007f5af0c0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.366557][T19230] RAX: ffffffffffffffda RBX: 00007f5af0025fa0 RCX: 00007f5aefd9e159 [ 424.366564][T19230] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 424.366571][T19230] RBP: 00007f5af0c0d090 R08: 0000000000000000 R09: 0000000000000000 [ 424.366577][T19230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.366584][T19230] R13: 00007f5af0026038 R14: 00007f5af0025fa0 R15: 00007ffe4226bfc8 [ 424.366598][T19230] [ 424.429933][T19234] FAULT_INJECTION: forcing a failure. [ 424.429933][T19234] name failslab, interval 1, probability 0, space 0, times 0 [ 424.429958][T19234] CPU: 3 UID: 0 PID: 19234 Comm: syz.4.4164 Tainted: G L syzkaller #0 PREEMPT(full) [ 424.429973][T19234] Tainted: [L]=SOFTLOCKUP [ 424.429978][T19234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 424.429984][T19234] Call Trace: [ 424.429989][T19234] [ 424.429993][T19234] dump_stack_lvl+0x100/0x190 [ 424.430014][T19234] should_fail_ex.cold+0x5/0xa [ 424.430031][T19234] should_failslab+0xc2/0x120 [ 424.430048][T19234] __kmalloc_cache_noprof+0x91/0x6d0 [ 424.430066][T19234] ? net_generic+0x25/0x2a0 [ 424.430082][T19234] ? tipc_sub_subscribe+0x15c/0x730 [ 424.430102][T19234] tipc_sub_subscribe+0x15c/0x730 [ 424.430121][T19234] tipc_conn_rcv_sub+0x21e/0x3d0 [ 424.430139][T19234] tipc_topsrv_kern_subscr+0x20b/0x3c0 [ 424.430158][T19234] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 424.430176][T19234] ? net_generic+0xea/0x2a0 [ 424.430198][T19234] tipc_group_create+0x4ab/0x660 [ 424.430221][T19234] tipc_setsockopt+0x611/0xe30 [ 424.430248][T19234] ? __pfx_tipc_setsockopt+0x10/0x10 [ 424.430266][T19234] ? __fget_files+0x215/0x3d0 [ 424.430283][T19234] ? selinux_socket_setsockopt+0x6a/0x80 [ 424.430298][T19234] ? __pfx_tipc_setsockopt+0x10/0x10 [ 424.430313][T19234] do_sock_setsockopt+0xf3/0x1d0 [ 424.430333][T19234] __sys_setsockopt+0x195/0x220 [ 424.430350][T19234] __x64_sys_setsockopt+0xbd/0x160 [ 424.430364][T19234] ? do_syscall_64+0xae/0x790 [ 424.430383][T19234] ? lockdep_hardirqs_on+0x7d/0x110 [ 424.430400][T19234] do_syscall_64+0x123/0x790 [ 424.430418][T19234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.430431][T19234] RIP: 0033:0x7f5aefd9e159 [ 424.430441][T19234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.430451][T19234] RSP: 002b:00007f5af0c0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 424.430467][T19234] RAX: ffffffffffffffda RBX: 00007f5af0025fa0 RCX: 00007f5aefd9e159 [ 424.430474][T19234] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 424.430481][T19234] RBP: 00007f5aefe3506b R08: 0000000000000010 R09: 0000000000000000 [ 424.430488][T19234] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 424.430494][T19234] R13: 00007f5af0026038 R14: 00007f5af0025fa0 R15: 00007ffe4226bfc8 [ 424.430509][T19234] [ 424.430513][T19234] tipc: Subscription rejected, no memory [ 424.494600][T19236] jffs2: notice: (19236) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (3 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 424.496809][ T43] audit: type=1400 audit(2001048930.253:2238): avc: denied { write } for pid=19235 comm="syz.4.4165" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 424.618536][T19241] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4167'. [ 424.788010][ T8307] usb 12-1: USB disconnect, device number 33 [ 424.924415][T19260] jffs2: notice: (19260) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (4 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 424.925982][ T43] audit: type=1400 audit(2001048930.650:2239): avc: denied { write } for pid=19259 comm="syz.4.4176" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 425.051401][T19267] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4178'. [ 425.075804][ T7153] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 425.239160][ T7153] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 425.240081][ T7153] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.240095][ T7153] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 425.240135][ T7153] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.245031][ T7153] usb 10-1: config 0 descriptor?? [ 425.309199][T19283] jffs2: notice: (19283) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (4 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 425.311370][ T43] audit: type=1400 audit(2001048931.001:2240): avc: denied { write } for pid=19282 comm="syz.7.4187" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 425.445344][T18570] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 425.538383][T19288] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4189'. [ 425.539123][T19288] l2tp_ppp: sess 2/0: no socket in recv [ 425.608528][T18570] usb 9-1: Using ep0 maxpacket: 32 [ 425.609139][T18570] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 425.612494][T18570] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 425.614948][T18570] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.614966][T18570] usb 9-1: Product: syz [ 425.614979][T18570] usb 9-1: Manufacturer: syz [ 425.614998][T18570] usb 9-1: SerialNumber: syz [ 425.628718][T18570] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 425.628784][T18570] imon 9-1:155.0: unable to initialize intf0, err -19 [ 425.628796][T18570] imon:imon_probe: failed to initialize context! [ 425.628807][T18570] imon 9-1:155.0: unable to register, err -19 [ 425.966839][ T43] audit: type=1400 audit(2001048931.610:2241): avc: denied { connect } for pid=19304 comm="syz.7.4196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 426.848902][T19317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4199'. [ 426.923231][T19322] netlink: 'syz.7.4202': attribute type 1 has an invalid length. [ 427.006172][ T43] audit: type=1400 audit(2001048932.570:2242): avc: denied { create } for pid=19321 comm="syz.7.4202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 427.014454][T19322] veth3: entered allmulticast mode [ 427.025886][T19322] bond1: (slave veth3): Enslaving as an active interface with a down link [ 427.285577][ T5734] Bluetooth: hci0: command 0x0406 tx timeout [ 427.394003][ T5820] usb 12-1: new high-speed USB device number 34 using dummy_hcd [ 427.556334][ T5820] usb 12-1: Using ep0 maxpacket: 8 [ 427.556976][ T5820] usb 12-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 427.558138][ T5820] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.560766][ T5820] usb 12-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 427.560784][ T5820] usb 12-1: Product: syz [ 427.560797][ T5820] usb 12-1: Manufacturer: syz [ 427.560810][ T5820] usb 12-1: SerialNumber: syz [ 427.563515][ T5820] usb 12-1: config 0 descriptor?? [ 427.566812][ T5820] imon_raw 12-1:0.0: IR endpoint missing [ 427.784566][ T5820] usb 12-1: USB disconnect, device number 34 [ 427.924301][T19338] FAULT_INJECTION: forcing a failure. [ 427.924301][T19338] name failslab, interval 1, probability 0, space 0, times 0 [ 427.924328][T19338] CPU: 2 UID: 0 PID: 19338 Comm: syz.3.4207 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.924352][T19338] Tainted: [L]=SOFTLOCKUP [ 427.924359][T19338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 427.924370][T19338] Call Trace: [ 427.924376][T19338] [ 427.924384][T19338] dump_stack_lvl+0x100/0x190 [ 427.924417][T19338] should_fail_ex.cold+0x5/0xa [ 427.924461][T19338] should_failslab+0xc2/0x120 [ 427.924487][T19338] __kmalloc_noprof+0xfc/0x840 [ 427.924508][T19338] ? tomoyo_encode2+0xfb/0x3c0 [ 427.924536][T19338] tomoyo_encode2+0xfb/0x3c0 [ 427.924562][T19338] tomoyo_encode+0x29/0x50 [ 427.924584][T19338] tomoyo_realpath_from_path+0x18c/0x690 [ 427.924614][T19338] tomoyo_path_number_perm+0x23c/0x580 [ 427.924632][T19338] ? tomoyo_path_number_perm+0x22e/0x580 [ 427.924654][T19338] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 427.924683][T19338] ? __lock_acquire+0x5c0/0x1f40 [ 427.924716][T19338] ? __fget_files+0x34/0x3d0 [ 427.924740][T19338] ? find_held_lock+0x2b/0x80 [ 427.924765][T19338] ? hook_file_ioctl_common+0x140/0x440 [ 427.924796][T19338] ? __fget_files+0x21f/0x3d0 [ 427.924825][T19338] security_file_ioctl+0xd3/0x230 [ 427.924848][T19338] __x64_sys_ioctl+0xb7/0x210 [ 427.924870][T19338] do_syscall_64+0x123/0x790 [ 427.924900][T19338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.924920][T19338] RIP: 0033:0x7fa33859e159 [ 427.924935][T19338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.924953][T19338] RSP: 002b:00007fa339448028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.924972][T19338] RAX: ffffffffffffffda RBX: 00007fa338825fa0 RCX: 00007fa33859e159 [ 427.924985][T19338] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000003 [ 427.924996][T19338] RBP: 00007fa339448090 R08: 0000000000000000 R09: 0000000000000000 [ 427.925014][T19338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.925025][T19338] R13: 00007fa338826038 R14: 00007fa338825fa0 R15: 00007ffd916bb808 [ 427.925050][T19338] [ 427.927814][T19338] ERROR: Out of memory at tomoyo_realpath_from_path. [ 427.982346][T19340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4208'. [ 428.093153][ T8314] usb 10-1: USB disconnect, device number 43 [ 428.199021][T19351] FAULT_INJECTION: forcing a failure. [ 428.199021][T19351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.199053][T19351] CPU: 0 UID: 0 PID: 19351 Comm: syz.5.4213 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.199078][T19351] Tainted: [L]=SOFTLOCKUP [ 428.199085][T19351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 428.199096][T19351] Call Trace: [ 428.199103][T19351] [ 428.199111][T19351] dump_stack_lvl+0x100/0x190 [ 428.199143][T19351] should_fail_ex.cold+0x5/0xa [ 428.199170][T19351] _copy_to_user+0x32/0xd0 [ 428.199194][T19351] simple_read_from_buffer+0xcb/0x170 [ 428.199221][T19351] proc_fail_nth_read+0x1af/0x230 [ 428.199246][T19351] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 428.199272][T19351] ? rw_verify_area+0xce/0x6d0 [ 428.199309][T19351] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 428.199333][T19351] vfs_read+0x1e4/0xb40 [ 428.199353][T19351] ? lock_acquire+0x1d1/0x380 [ 428.199373][T19351] ? __fget_files+0x34/0x3d0 [ 428.199396][T19351] ? __pfx_vfs_read+0x10/0x10 [ 428.199413][T19351] ? find_held_lock+0x2b/0x80 [ 428.199440][T19351] ? __fget_files+0x215/0x3d0 [ 428.199467][T19351] ? __fget_files+0x21f/0x3d0 [ 428.199498][T19351] ksys_read+0x12a/0x250 [ 428.199517][T19351] ? __pfx_ksys_read+0x10/0x10 [ 428.199544][T19351] do_syscall_64+0x123/0x790 [ 428.199573][T19351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.199592][T19351] RIP: 0033:0x7fec34b5e98e [ 428.199607][T19351] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 428.199624][T19351] RSP: 002b:00007fec35b1bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 428.199642][T19351] RAX: ffffffffffffffda RBX: 00007fec35b1c6c0 RCX: 00007fec34b5e98e [ 428.199653][T19351] RDX: 000000000000000f RSI: 00007fec35b1c0a0 RDI: 0000000000000004 [ 428.199664][T19351] RBP: 00007fec35b1c090 R08: 0000000000000000 R09: 0000000000000000 [ 428.199674][T19351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.199685][T19351] R13: 00007fec34e26038 R14: 00007fec34e25fa0 R15: 00007ffd6652d908 [ 428.199711][T19351] [ 428.425872][T19363] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4217'. [ 428.467629][ T5820] usb 9-1: USB disconnect, device number 50 [ 428.528296][T19370] binder: BINDER_SET_CONTEXT_MGR already set [ 428.528311][T19370] binder: 19367:19370 ioctl 4018620d 200000000100 returned -16 [ 428.529052][T19369] binder: 19367:19369 ioctl c0306201 200000000080 returned -14 [ 428.529179][T19370] binder: 19367:19370 ioctl c0306201 200000000080 returned -14 [ 428.769541][ T1688] usb 12-1: new high-speed USB device number 35 using dummy_hcd [ 428.807243][T19388] FAULT_INJECTION: forcing a failure. [ 428.807243][T19388] name failslab, interval 1, probability 0, space 0, times 0 [ 428.807270][T19388] CPU: 0 UID: 0 PID: 19388 Comm: syz.5.4228 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.807292][T19388] Tainted: [L]=SOFTLOCKUP [ 428.807298][T19388] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 428.807306][T19388] Call Trace: [ 428.807312][T19388] [ 428.807326][T19388] dump_stack_lvl+0x100/0x190 [ 428.807356][T19388] should_fail_ex.cold+0x5/0xa [ 428.807380][T19388] should_failslab+0xc2/0x120 [ 428.807401][T19388] __kmalloc_noprof+0xfc/0x840 [ 428.807420][T19388] ? io_cache_alloc_new+0x45/0xe0 [ 428.807450][T19388] io_cache_alloc_new+0x45/0xe0 [ 428.807475][T19388] io_uring_alloc_async_data+0x17e/0x300 [ 428.807500][T19388] io_send_zc_prep+0x49b/0xa60 [ 428.807528][T19388] io_submit_sqes+0xa03/0x2480 [ 428.807560][T19388] __do_sys_io_uring_enter+0xa88/0x1b10 [ 428.807584][T19388] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 428.807611][T19388] ? __fget_files+0x21f/0x3d0 [ 428.807632][T19388] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 428.807656][T19388] ? fput+0x7c/0x100 [ 428.807678][T19388] ? ksys_write+0x1ac/0x250 [ 428.807696][T19388] ? __pfx_ksys_write+0x10/0x10 [ 428.807722][T19388] do_syscall_64+0x123/0x790 [ 428.807748][T19388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.807766][T19388] RIP: 0033:0x7fec34b9e159 [ 428.807781][T19388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.807796][T19388] RSP: 002b:00007fec35b1c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 428.807814][T19388] RAX: ffffffffffffffda RBX: 00007fec34e25fa0 RCX: 00007fec34b9e159 [ 428.807825][T19388] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000003 [ 428.807835][T19388] RBP: 00007fec35b1c090 R08: 0000000000000000 R09: 0000000000000000 [ 428.807845][T19388] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 428.807855][T19388] R13: 00007fec34e26038 R14: 00007fec34e25fa0 R15: 00007ffd6652d908 [ 428.807879][T19388] [ 428.932571][ T1688] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 428.933580][ T1688] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.933594][ T1688] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 428.933623][ T1688] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.935211][ T1688] usb 12-1: config 0 descriptor?? [ 428.954197][ T5604] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 429.094565][ T8314] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 429.127092][ T5604] usb 9-1: Using ep0 maxpacket: 8 [ 429.129983][ T5604] usb 9-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 429.131372][ T5604] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.134148][ T5604] usb 9-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 429.134158][ T5604] usb 9-1: Product: syz [ 429.134166][ T5604] usb 9-1: Manufacturer: syz [ 429.134173][ T5604] usb 9-1: SerialNumber: syz [ 429.135762][ T5604] usb 9-1: config 0 descriptor?? [ 429.143912][ T5604] imon_raw 9-1:0.0: IR endpoint missing [ 429.269101][ T8314] usb 10-1: Using ep0 maxpacket: 32 [ 429.269950][ T8314] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 429.271394][ T8314] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 429.271431][ T8314] usb 10-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 429.274430][ T8314] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.274447][ T8314] usb 10-1: Product: syz [ 429.274460][ T8314] usb 10-1: Manufacturer: syz [ 429.274473][ T8314] usb 10-1: SerialNumber: syz [ 429.309518][ T8314] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 429.309586][ T8314] imon 10-1:155.0: unable to initialize intf0, err -19 [ 429.309599][ T8314] imon:imon_probe: failed to initialize context! [ 429.309608][ T8314] imon 10-1:155.0: unable to register, err -19 [ 429.366217][ T1688] usb 9-1: USB disconnect, device number 51 [ 429.826667][T19394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4230'. [ 429.871422][ T43] audit: type=1400 audit(2001048935.210:2243): avc: denied { ioctl } for pid=19395 comm="syz.3.4231" path="/dev/loop-control" dev="devtmpfs" ino=655 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 429.876541][ C2] net_ratelimit: 81 callbacks suppressed [ 430.266404][T19415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4239'. [ 430.411069][T19420] FAULT_INJECTION: forcing a failure. [ 430.411069][T19420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.411101][T19420] CPU: 3 UID: 0 PID: 19420 Comm: syz.4.4241 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.411126][T19420] Tainted: [L]=SOFTLOCKUP [ 430.411133][T19420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 430.411144][T19420] Call Trace: [ 430.411151][T19420] [ 430.411159][T19420] dump_stack_lvl+0x100/0x190 [ 430.411187][T19420] should_fail_ex.cold+0x5/0xa [ 430.411213][T19420] _copy_from_user+0x2e/0xd0 [ 430.411234][T19420] copy_msghdr_from_user+0x9f/0x4c0 [ 430.411255][T19420] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 430.411281][T19420] ? lock_acquire+0x1d1/0x380 [ 430.411298][T19420] ? get_pid_task+0x2a/0x250 [ 430.411324][T19420] ___sys_sendmsg+0x106/0x1e0 [ 430.411345][T19420] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.411363][T19420] ? get_pid_task+0x106/0x250 [ 430.411396][T19420] ? find_held_lock+0x2b/0x80 [ 430.411433][T19420] __sys_sendmsg+0x160/0x210 [ 430.411457][T19420] ? __pfx___sys_sendmsg+0x10/0x10 [ 430.411494][T19420] do_syscall_64+0x123/0x790 [ 430.411524][T19420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.411540][T19420] RIP: 0033:0x7f5aefd9e159 [ 430.411556][T19420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.411572][T19420] RSP: 002b:00007f5af0c0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.411592][T19420] RAX: ffffffffffffffda RBX: 00007f5af0025fa0 RCX: 00007f5aefd9e159 [ 430.411604][T19420] RDX: 0000000000040000 RSI: 0000200000000200 RDI: 0000000000000003 [ 430.411615][T19420] RBP: 00007f5af0c0d090 R08: 0000000000000000 R09: 0000000000000000 [ 430.411627][T19420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.411637][T19420] R13: 00007f5af0026038 R14: 00007f5af0025fa0 R15: 00007ffe4226bfc8 [ 430.411659][T19420] [ 430.816824][ T8307] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 430.979261][ T8307] usb 9-1: Using ep0 maxpacket: 8 [ 430.979967][ T8307] usb 9-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 430.981213][ T8307] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.986531][ T8307] usb 9-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 430.986548][ T8307] usb 9-1: Product: syz [ 430.986561][ T8307] usb 9-1: Manufacturer: syz [ 430.986574][ T8307] usb 9-1: SerialNumber: syz [ 431.010740][ T8307] usb 9-1: config 0 descriptor?? [ 431.016468][ T8307] imon_raw 9-1:0.0: IR endpoint missing [ 431.090196][T19432] tc_dump_action: action bad kind [ 431.158802][ T43] audit: type=1800 audit(2001048936.401:2244): pid=19432 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.4247" name=08 dev="sda1" ino=2052 res=0 errno=0 [ 431.239611][ T8307] usb 9-1: USB disconnect, device number 52 [ 431.246870][T19438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4248'. [ 431.792270][ T5604] usb 12-1: USB disconnect, device number 35 [ 431.958184][T19459] FAULT_INJECTION: forcing a failure. [ 431.958184][T19459] name failslab, interval 1, probability 0, space 0, times 0 [ 431.958211][T19459] CPU: 0 UID: 0 PID: 19459 Comm: syz.7.4258 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.958237][T19459] Tainted: [L]=SOFTLOCKUP [ 431.958243][T19459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 431.958255][T19459] Call Trace: [ 431.958263][T19459] [ 431.958272][T19459] dump_stack_lvl+0x100/0x190 [ 431.958302][T19459] should_fail_ex.cold+0x5/0xa [ 431.958328][T19459] should_failslab+0xc2/0x120 [ 431.958353][T19459] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 431.958373][T19459] ? __alloc_skb+0x5b7/0x710 [ 431.958397][T19459] ? __alloc_skb+0x140/0x710 [ 431.958422][T19459] __alloc_skb+0x140/0x710 [ 431.958445][T19459] ? __alloc_skb+0x5b7/0x710 [ 431.958468][T19459] ? __pfx___alloc_skb+0x10/0x10 [ 431.958499][T19459] netlink_alloc_large_skb+0x69/0x150 [ 431.958524][T19459] netlink_sendmsg+0x680/0xda0 [ 431.958549][T19459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.958573][T19459] ? selinux_socket_sendmsg+0x198/0x2f0 [ 431.958598][T19459] ____sys_sendmsg+0xa4d/0xbe0 [ 431.958614][T19459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.958654][T19459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 431.958678][T19459] ? lock_acquire+0x1d1/0x380 [ 431.958697][T19459] ? get_pid_task+0x2a/0x250 [ 431.958724][T19459] ___sys_sendmsg+0x190/0x1e0 [ 431.958745][T19459] ? __pfx____sys_sendmsg+0x10/0x10 [ 431.958765][T19459] ? get_pid_task+0x106/0x250 [ 431.958798][T19459] ? find_held_lock+0x2b/0x80 [ 431.958844][T19459] __sys_sendmsg+0x160/0x210 [ 431.958870][T19459] ? __pfx___sys_sendmsg+0x10/0x10 [ 431.958909][T19459] do_syscall_64+0x123/0x790 [ 431.958940][T19459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.958960][T19459] RIP: 0033:0x7fbebb19e159 [ 431.958977][T19459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.958996][T19459] RSP: 002b:00007fbebc00e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.959014][T19459] RAX: ffffffffffffffda RBX: 00007fbebb425fa0 RCX: 00007fbebb19e159 [ 431.959027][T19459] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 431.959037][T19459] RBP: 00007fbebc00e090 R08: 0000000000000000 R09: 0000000000000000 [ 431.959048][T19459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.959059][T19459] R13: 00007fbebb426038 R14: 00007fbebb425fa0 R15: 00007fffa8f578d8 [ 431.959084][T19459] [ 432.031747][ T43] audit: type=1400 audit(2001048937.205:2245): avc: denied { getopt } for pid=19460 comm="syz.7.4260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 432.032045][ T43] audit: type=1400 audit(2001048937.205:2246): avc: denied { setopt } for pid=19460 comm="syz.7.4260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 432.032297][T19461] lapbether: lapb_data_request error - 4 [ 432.114166][ T8307] usb 10-1: USB disconnect, device number 44 [ 432.163961][T19463] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.285421][T19463] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.366835][ T9] usb 12-1: new high-speed USB device number 36 using dummy_hcd [ 432.451201][T19463] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.533154][ T9] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 432.534673][ T9] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.534691][ T9] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 432.534734][ T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.537566][ T9] usb 12-1: config 0 descriptor?? [ 432.591094][T19463] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.593216][ T8307] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 432.619122][ T43] audit: type=1400 audit(2001048937.749:2247): avc: denied { setattr } for pid=19481 comm="syz.3.4269" name="SCTPv6" dev="sockfs" ino=91685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 432.624582][T19482] misc userio: The device must be registered before sending interrupts [ 432.632071][ T43] audit: type=1400 audit(2001048937.758:2248): avc: denied { map } for pid=19481 comm="syz.3.4269" path="socket:[91685]" dev="sockfs" ino=91685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 432.767411][ T8307] usb 10-1: Using ep0 maxpacket: 8 [ 432.771232][ T8307] usb 10-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 432.772238][ T8307] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.772276][ T8307] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 432.774538][ T8307] usb 10-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 432.774553][ T8307] usb 10-1: Product: syz [ 432.774563][ T8307] usb 10-1: Manufacturer: syz [ 432.774573][ T8307] usb 10-1: SerialNumber: syz [ 432.785284][ T8307] usb 10-1: config 0 descriptor?? [ 432.808430][ T8307] imon_raw 10-1:0.0: IR endpoint missing [ 432.812400][ T5813] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.812777][ T5813] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.812844][ T5813] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.831826][T13025] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.010966][ T8314] usb 10-1: USB disconnect, device number 45 [ 433.641561][ T43] audit: type=1326 audit(2001048938.691:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19511 comm="syz.5.4281" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec34b9e159 code=0x0 [ 434.786969][T19525] FAULT_INJECTION: forcing a failure. [ 434.786969][T19525] name failslab, interval 1, probability 0, space 0, times 0 [ 434.786996][T19525] CPU: 3 UID: 0 PID: 19525 Comm: syz.5.4287 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.787020][T19525] Tainted: [L]=SOFTLOCKUP [ 434.787027][T19525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.787038][T19525] Call Trace: [ 434.787044][T19525] [ 434.787053][T19525] dump_stack_lvl+0x100/0x190 [ 434.787084][T19525] should_fail_ex.cold+0x5/0xa [ 434.787110][T19525] should_failslab+0xc2/0x120 [ 434.787135][T19525] __kmalloc_cache_noprof+0x91/0x6d0 [ 434.787163][T19525] ? sctp_datamsg_from_user+0x8e/0x1360 [ 434.787195][T19525] sctp_datamsg_from_user+0x8e/0x1360 [ 434.787222][T19525] ? __sk_mem_raise_allocated+0x789/0x1570 [ 434.787254][T19525] ? __sk_mem_schedule+0xd0/0x100 [ 434.787280][T19525] sctp_sendmsg_to_asoc+0xb1c/0x1c50 [ 434.787303][T19525] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 434.787316][T19525] ? do_raw_spin_lock+0x128/0x260 [ 434.787337][T19525] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 434.787355][T19525] ? sctp_sendmsg_check_sflags+0x176/0x360 [ 434.787368][T19525] sctp_sendmsg+0x1144/0x22e0 [ 434.787387][T19525] ? __pfx_sctp_sendmsg+0x10/0x10 [ 434.787400][T19525] ? sock_has_perm+0x25a/0x2f0 [ 434.787412][T19525] ? __pfx_sock_has_perm+0x10/0x10 [ 434.787433][T19525] ? __pfx_sctp_sendmsg+0x10/0x10 [ 434.787448][T19525] inet_sendmsg+0x11c/0x140 [ 434.787461][T19525] sock_write_iter+0x4ea/0x5b0 [ 434.787471][T19525] ? __pfx_inet_sendmsg+0x10/0x10 [ 434.787482][T19525] ? __pfx_sock_write_iter+0x10/0x10 [ 434.787497][T19525] ? bpf_lsm_file_permission+0x9/0x10 [ 434.787512][T19525] ? security_file_permission+0x76/0x210 [ 434.787527][T19525] ? rw_verify_area+0xce/0x6d0 [ 434.787547][T19525] vfs_write+0x6af/0x1050 [ 434.787559][T19525] ? __pfx_sock_write_iter+0x10/0x10 [ 434.787571][T19525] ? __pfx_vfs_write+0x10/0x10 [ 434.787582][T19525] ? find_held_lock+0x2b/0x80 [ 434.787607][T19525] ksys_write+0x1f8/0x250 [ 434.787619][T19525] ? __pfx_ksys_write+0x10/0x10 [ 434.787635][T19525] do_syscall_64+0x123/0x790 [ 434.787672][T19525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.787684][T19525] RIP: 0033:0x7fec34b9e159 [ 434.787695][T19525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.787706][T19525] RSP: 002b:00007fec35b1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 434.787718][T19525] RAX: ffffffffffffffda RBX: 00007fec34e25fa0 RCX: 00007fec34b9e159 [ 434.787726][T19525] RDX: 000000000000ffbc RSI: 0000200000000d00 RDI: 0000000000000003 [ 434.787733][T19525] RBP: 00007fec35b1c090 R08: 0000000000000000 R09: 0000000000000000 [ 434.787740][T19525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.787746][T19525] R13: 00007fec34e26038 R14: 00007fec34e25fa0 R15: 00007ffd6652d908 [ 434.787761][T19525] [ 435.117098][ T25] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 435.301320][ T25] usb 10-1: Using ep0 maxpacket: 8 [ 435.302144][ T25] usb 10-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 435.303301][ T25] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.303323][ T25] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 435.305655][ T25] usb 10-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 435.305665][ T25] usb 10-1: Product: syz [ 435.305673][ T25] usb 10-1: Manufacturer: syz [ 435.305681][ T25] usb 10-1: SerialNumber: syz [ 435.307610][ T25] usb 10-1: config 0 descriptor?? [ 435.311492][ T25] imon_raw 10-1:0.0: IR endpoint missing [ 435.369216][ T8311] usb 12-1: USB disconnect, device number 36 [ 435.396095][T19529] net_ratelimit: 68 callbacks suppressed [ 435.476360][T19534] FAULT_INJECTION: forcing a failure. [ 435.476360][T19534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.476380][T19534] CPU: 2 UID: 0 PID: 19534 Comm: syz.7.4291 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.476396][T19534] Tainted: [L]=SOFTLOCKUP [ 435.476401][T19534] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 435.476407][T19534] Call Trace: [ 435.476412][T19534] [ 435.476416][T19534] dump_stack_lvl+0x100/0x190 [ 435.476437][T19534] should_fail_ex.cold+0x5/0xa [ 435.476453][T19534] _copy_from_user+0x2e/0xd0 [ 435.476467][T19534] move_addr_to_kernel+0x65/0x170 [ 435.476479][T19534] copy_msghdr_from_user+0x3f0/0x4c0 [ 435.476492][T19534] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 435.476507][T19534] ? lock_acquire+0x1d1/0x380 [ 435.476519][T19534] ? get_pid_task+0x2a/0x250 [ 435.476536][T19534] ___sys_sendmsg+0x106/0x1e0 [ 435.476548][T19534] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.476559][T19534] ? get_pid_task+0x106/0x250 [ 435.476580][T19534] ? find_held_lock+0x2b/0x80 [ 435.476604][T19534] __sys_sendmsg+0x160/0x210 [ 435.476619][T19534] ? __pfx___sys_sendmsg+0x10/0x10 [ 435.476641][T19534] do_syscall_64+0x123/0x790 [ 435.476659][T19534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.476671][T19534] RIP: 0033:0x7fbebb19e159 [ 435.476681][T19534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.476692][T19534] RSP: 002b:00007fbebc00e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.476704][T19534] RAX: ffffffffffffffda RBX: 00007fbebb425fa0 RCX: 00007fbebb19e159 [ 435.476712][T19534] RDX: 0000000004040000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 435.476719][T19534] RBP: 00007fbebc00e090 R08: 0000000000000000 R09: 0000000000000000 [ 435.476725][T19534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.476732][T19534] R13: 00007fbebb426038 R14: 00007fbebb425fa0 R15: 00007fffa8f578d8 [ 435.476746][T19534] [ 435.529181][ T8307] usb 10-1: USB disconnect, device number 46 [ 435.973191][ T8311] usb 12-1: new high-speed USB device number 37 using dummy_hcd [ 436.047166][T19548] syzkaller1: entered promiscuous mode [ 436.047182][T19548] syzkaller1: entered allmulticast mode [ 436.121214][T19550] ------------[ cut here ]------------ [ 436.121222][T19550] field width 778789743 out of range [ 436.121232][T19550] WARNING: lib/vsprintf.c:2654 at vsnprintf+0x106b/0x1300, CPU#3: syz.5.4299/19550 [ 436.129910][T19550] Modules linked in: [ 436.131772][T19550] CPU: 3 UID: 0 PID: 19550 Comm: syz.5.4299 Tainted: G L syzkaller #0 PREEMPT(full) [ 436.136826][T19550] Tainted: [L]=SOFTLOCKUP [ 436.139213][T19550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 436.144575][T19550] RIP: 0010:vsnprintf+0x106e/0x1300 [ 436.147467][T19550] Code: 74 08 48 89 df e8 82 a0 b0 f6 44 89 74 24 4c 44 0f b6 2b 49 89 de e9 f6 f3 ff ff e8 8c 36 3d f6 48 8d 3d 15 b8 88 05 44 89 ee <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 [ 436.157616][T19550] RSP: 0018:ffffc900044e6f20 EFLAGS: 00010087 [ 436.160951][T19550] [ 436.162290][T19550] RAX: 0000000000001ea3 RBX: ffffffff8ceb53c2 RCX: ffffc90007651000 [ 436.166556][T19550] RDX: 0000000000080000 RSI: 000000002e6b636f RDI: ffffffff9157a420 [ 436.170065][T19550] RBP: ffffc900044e7010 R08: 0000000000000004 R09: 000000002e6b636f [ 436.173392][T19550] R10: 00000000007fffff R11: 0000000000000000 R12: 0000000000000002 [ 436.176704][T19550] R13: 000000002e6b636f R14: 0000000000000030 R15: 00000000007fffff [ 436.180031][T19550] FS: 00007fec35b1c6c0(0000) GS:ffff8880d5e53000(0000) knlGS:0000000000000000 [ 436.183768][T19550] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 436.186548][T19550] CR2: 00007fec34b87780 CR3: 000000003edd7000 CR4: 0000000000352ef0 [ 436.189955][T19550] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 436.192436][T19550] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 436.195162][T19550] Call Trace: [ 436.196261][T19550] [ 436.197254][T19550] ? __pfx_vsnprintf+0x10/0x10 [ 436.198903][T19550] ? desc_read+0x2e2/0x380 [ 436.200365][T19550] va_format+0x14e/0x4b0 [ 436.201926][T19550] ? __pfx_va_format+0x10/0x10 [ 436.204175][T19550] ? desc_read_finalized_seq+0x131/0x1d0 [ 436.206256][T19550] pointer+0x929/0xe50 [ 436.207919][T19550] ? dentry_name+0xef/0xb40 [ 436.209577][T19550] ? __pfx_pointer+0x10/0x10 [ 436.211250][T19550] ? __pfx__prb_read_valid+0x10/0x10 [ 436.213513][T19550] vsnprintf+0x649/0x1300 [ 436.215674][T19550] ? __pfx_vsnprintf+0x10/0x10 [ 436.217926][T19550] ? vprintk_store+0x6e8/0xbe0 [ 436.220541][T19550] vprintk_store+0x3b3/0xbe0 [ 436.222904][T19550] ? __lock_acquire+0x5c0/0x1f40 [ 436.225216][T19550] ? __pfx_vprintk_store+0x10/0x10 [ 436.227458][T19550] ? vsnprintf+0x4c5/0x1300 [ 436.229790][T19550] ? __pfx_vsnprintf+0x10/0x10 [ 436.232293][T19550] ? printk_percpu_data_ready+0x9/0x20 [ 436.234643][T19550] ? nbcon_get_cpu_emergency_nesting+0x3b/0x50 [ 436.237208][T19550] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 436.239656][T19550] vprintk_emit+0x139/0x6b0 [ 436.241551][T19550] ? __pfx_vprintk_emit+0x10/0x10 [ 436.243607][T19550] ? is_bpf_text_address+0x94/0x1a0 [ 436.245685][T19550] ? __kernel_text_address+0xd/0x30 [ 436.247801][T19550] dev_vprintk_emit+0x391/0x3e0 [ 436.249933][T19550] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 436.252008][T19550] ? lockdep_hardirqs_on+0x7d/0x110 [ 436.254152][T19550] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 436.256518][T19550] ? stack_depot_save_flags+0x49a/0x9f0 [ 436.258886][T19550] dev_printk_emit+0xd2/0x10d [ 436.260897][T19550] ? __pfx_dev_printk_emit+0x10/0x10 [ 436.263099][T19550] ? kasan_save_stack+0x30/0x50 [ 436.265136][T19550] ? memdup_user+0x2a/0xe0 [ 436.267012][T19550] ? dvb_get_property.isra.0+0x162/0x690 [ 436.269589][T19550] ? dvb_frontend_handle_ioctl+0x138c/0x2f00 [ 436.271769][T19550] ? dvb_frontend_do_ioctl+0x1ce/0x320 [ 436.273807][T19550] ? dvb_usercopy+0x167/0x340 [ 436.275394][T19550] ? dvb_frontend_ioctl+0x50/0x80 [ 436.277181][T19550] ? __x64_sys_ioctl+0x18e/0x210 [ 436.279481][T19550] ? do_syscall_64+0x123/0x790 [ 436.281202][T19550] __dynamic_dev_dbg+0x252/0x310 [ 436.282849][T19550] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 436.284986][T19550] ? __might_fault+0xc5/0x140 [ 436.286747][T19550] ? find_held_lock+0x2b/0x80 [ 436.288472][T19550] ? __might_fault+0xc5/0x140 [ 436.290191][T19550] dtv_property_process_get.isra.0+0xf40/0x3690 [ 436.292427][T19550] ? _copy_from_user+0x59/0xd0 [ 436.294260][T19550] dvb_get_property.isra.0+0x273/0x690 [ 436.296204][T19550] ? __pfx_dvb_get_property.isra.0+0x10/0x10 [ 436.298325][T19550] dvb_frontend_handle_ioctl+0x138c/0x2f00 [ 436.300455][T19550] ? __pfx_dvb_frontend_handle_ioctl+0x10/0x10 [ 436.302440][T19550] ? do_raw_spin_lock+0x128/0x260 [ 436.304056][T19550] ? find_held_lock+0x2b/0x80 [ 436.305552][T19550] ? down_interruptible+0x66/0xa0 [ 436.307172][T19550] ? rcu_is_watching+0x13/0xc0 [ 436.308748][T19550] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 436.310603][T19550] ? lockdep_hardirqs_on+0x7d/0x110 [ 436.312247][T19550] dvb_frontend_do_ioctl+0x1ce/0x320 [ 436.314058][T19550] dvb_usercopy+0x167/0x340 [ 436.315492][T19550] ? __pfx_dvb_frontend_do_ioctl+0x10/0x10 [ 436.317325][T19550] ? __pfx_dvb_usercopy+0x10/0x10 [ 436.318936][T19550] ? __fget_files+0x34/0x3d0 [ 436.320428][T19550] ? selinux_file_ioctl+0x13b/0x290 [ 436.322075][T19550] ? selinux_file_ioctl+0xb6/0x290 [ 436.324070][T19550] dvb_frontend_ioctl+0x50/0x80 [ 436.326187][T19550] ? __pfx_dvb_frontend_ioctl+0x10/0x10 [ 436.328355][T19550] __x64_sys_ioctl+0x18e/0x210 [ 436.330213][T19550] do_syscall_64+0x123/0x790 [ 436.332102][T19550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.334422][T19550] RIP: 0033:0x7fec34b9e159 [ 436.336177][T19550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.344721][T19550] RSP: 002b:00007fec35b1c028 EFLAGS: 00000246 [ 436.347940][T19550] ORIG_RAX: 0000000000000010 [ 436.350469][T19550] RAX: ffffffffffffffda RBX: 00007fec34e25fa0 RCX: 00007fec34b9e159 [ 436.354386][T19550] RDX: 0000200000000000 RSI: 0000000080106f53 RDI: 0000000000000003 [ 436.357689][T19550] RBP: 00007fec34c3506b R08: 0000000000000000 R09: 0000000000000000 [ 436.360559][T19550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.363886][T19550] R13: 00007fec34e26038 R14: 00007fec34e25fa0 R15: 00007ffd6652d908 [ 436.366831][T19550] [ 436.367987][ T5719] 842_decompress: op is 14 [ 436.367994][T19550] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 436.371835][T19550] CPU: 3 UID: 0 PID: 19550 Comm: syz.5.4299 Tainted: G L syzkaller #0 PREEMPT(full) [ 436.375514][T19550] Tainted: [L]=SOFTLOCKUP [ 436.377075][T19550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 436.380458][T19550] Call Trace: [ 436.381601][T19550] [ 436.382622][T19550] dump_stack_lvl+0x100/0x190 [ 436.384136][T19550] vpanic+0x553/0x970 [ 436.385420][T19550] ? __pfx_vpanic+0x10/0x10 [ 436.386868][T19550] panic+0xd1/0xe0 [ 436.388064][T19550] ? __pfx_panic+0x10/0x10 [ 436.389530][T19550] check_panic_on_warn.cold+0x19/0x34 [ 436.391259][T19550] ? vsnprintf+0x106b/0x1300 [ 436.392756][T19550] __warn.cold+0x191/0x318 [ 436.394182][T19550] __report_bug+0x30f/0x440 [ 436.395627][T19550] ? vsnprintf+0x106b/0x1300 [ 436.397080][T19550] ? __pfx___report_bug+0x10/0x10 [ 436.398677][T19550] ? put_dec_full8+0x1d/0x2c0 [ 436.400165][T19550] ? put_dec+0x2e/0xc0 [ 436.401459][T19550] ? put_dec_trunc8+0x28b/0x370 [ 436.403061][T19550] report_bug_entry+0xe2/0x290 [ 436.404633][T19550] ? vsnprintf+0x106e/0x1300 [ 436.406118][T19550] handle_bug+0x1cd/0x2a0 [ 436.407488][T19550] exc_invalid_op+0x17/0x50 [ 436.408961][T19550] asm_exc_invalid_op+0x1a/0x20 [ 436.410497][T19550] RIP: 0010:vsnprintf+0x106e/0x1300 [ 436.412128][T19550] Code: 74 08 48 89 df e8 82 a0 b0 f6 44 89 74 24 4c 44 0f b6 2b 49 89 de e9 f6 f3 ff ff e8 8c 36 3d f6 48 8d 3d 15 b8 88 05 44 89 ee <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 [ 436.418293][T19550] RSP: 0018:ffffc900044e6f20 EFLAGS: 00010087 [ 436.420216][T19550] RAX: 0000000000001ea3 RBX: ffffffff8ceb53c2 RCX: ffffc90007651000 [ 436.422768][T19550] RDX: 0000000000080000 RSI: 000000002e6b636f RDI: ffffffff9157a420 [ 436.425224][T19550] RBP: ffffc900044e7010 R08: 0000000000000004 R09: 000000002e6b636f [ 436.427725][T19550] R10: 00000000007fffff R11: 0000000000000000 R12: 0000000000000002 [ 436.430399][T19550] R13: 000000002e6b636f R14: 0000000000000030 R15: 00000000007fffff [ 436.432925][T19550] ? __pfx_vsnprintf+0x10/0x10 [ 436.434481][T19550] ? desc_read+0x2e2/0x380 [ 436.435891][T19550] va_format+0x14e/0x4b0 [ 436.437240][T19550] ? __pfx_va_format+0x10/0x10 [ 436.438803][T19550] ? desc_read_finalized_seq+0x131/0x1d0 [ 436.440583][T19550] pointer+0x929/0xe50 [ 436.441936][T19550] ? dentry_name+0xef/0xb40 [ 436.443477][T19550] ? __pfx_pointer+0x10/0x10 [ 436.444950][T19550] ? __pfx__prb_read_valid+0x10/0x10 [ 436.446648][T19550] vsnprintf+0x649/0x1300 [ 436.448027][T19550] ? __pfx_vsnprintf+0x10/0x10 [ 436.449565][T19550] ? vprintk_store+0x6e8/0xbe0 [ 436.451163][T19550] vprintk_store+0x3b3/0xbe0 [ 436.452624][T19550] ? __lock_acquire+0x5c0/0x1f40 [ 436.454198][T19550] ? __pfx_vprintk_store+0x10/0x10 [ 436.455990][T19550] ? vsnprintf+0x4c5/0x1300 [ 436.457475][T19550] ? __pfx_vsnprintf+0x10/0x10 [ 436.459013][T19550] ? printk_percpu_data_ready+0x9/0x20 [ 436.460717][T19550] ? nbcon_get_cpu_emergency_nesting+0x3b/0x50 [ 436.462702][T19550] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 436.464556][T19550] vprintk_emit+0x139/0x6b0 [ 436.466006][T19550] ? __pfx_vprintk_emit+0x10/0x10 [ 436.467582][T19550] ? is_bpf_text_address+0x94/0x1a0 [ 436.469257][T19550] ? __kernel_text_address+0xd/0x30 [ 436.470924][T19550] dev_vprintk_emit+0x391/0x3e0 [ 436.472457][T19550] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 436.474287][T19550] ? lockdep_hardirqs_on+0x7d/0x110 [ 436.475926][T19550] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 436.477765][T19550] ? stack_depot_save_flags+0x49a/0x9f0 [ 436.479534][T19550] dev_printk_emit+0xd2/0x10d [ 436.481069][T19550] ? __pfx_dev_printk_emit+0x10/0x10 [ 436.482885][T19550] ? kasan_save_stack+0x30/0x50 [ 436.484450][T19550] ? memdup_user+0x2a/0xe0 [ 436.485877][T19550] ? dvb_get_property.isra.0+0x162/0x690 [ 436.487661][T19550] ? dvb_frontend_handle_ioctl+0x138c/0x2f00 [ 436.489555][T19550] ? dvb_frontend_do_ioctl+0x1ce/0x320 [ 436.491304][T19550] ? dvb_usercopy+0x167/0x340 [ 436.492823][T19550] ? dvb_frontend_ioctl+0x50/0x80 [ 436.494451][T19550] ? __x64_sys_ioctl+0x18e/0x210 [ 436.496033][T19550] ? do_syscall_64+0x123/0x790 [ 436.497595][T19550] __dynamic_dev_dbg+0x252/0x310 [ 436.499181][T19550] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 436.500891][T19550] ? __might_fault+0xc5/0x140 [ 436.502400][T19550] ? find_held_lock+0x2b/0x80 [ 436.503931][T19550] ? __might_fault+0xc5/0x140 [ 436.505425][T19550] dtv_property_process_get.isra.0+0xf40/0x3690 [ 436.507402][T19550] ? _copy_from_user+0x59/0xd0 [ 436.508986][T19550] dvb_get_property.isra.0+0x273/0x690 [ 436.510779][T19550] ? __pfx_dvb_get_property.isra.0+0x10/0x10 [ 436.512712][T19550] dvb_frontend_handle_ioctl+0x138c/0x2f00 [ 436.514676][T19550] ? __pfx_dvb_frontend_handle_ioctl+0x10/0x10 [ 436.516648][T19550] ? do_raw_spin_lock+0x128/0x260 [ 436.518257][T19550] ? find_held_lock+0x2b/0x80 [ 436.519750][T19550] ? down_interruptible+0x66/0xa0 [ 436.521350][T19550] ? rcu_is_watching+0x13/0xc0 [ 436.522979][T19550] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 436.524852][T19550] ? lockdep_hardirqs_on+0x7d/0x110 [ 436.526556][T19550] dvb_frontend_do_ioctl+0x1ce/0x320 [ 436.528230][T19550] dvb_usercopy+0x167/0x340 [ 436.529679][T19550] ? __pfx_dvb_frontend_do_ioctl+0x10/0x10 [ 436.531669][T19550] ? __pfx_dvb_usercopy+0x10/0x10 [ 436.533297][T19550] ? __fget_files+0x34/0x3d0 [ 436.534776][T19550] ? selinux_file_ioctl+0x13b/0x290 [ 436.536468][T19550] ? selinux_file_ioctl+0xb6/0x290 [ 436.538095][T19550] dvb_frontend_ioctl+0x50/0x80 [ 436.539673][T19550] ? __pfx_dvb_frontend_ioctl+0x10/0x10 [ 436.541435][T19550] __x64_sys_ioctl+0x18e/0x210 [ 436.543004][T19550] do_syscall_64+0x123/0x790 [ 436.544473][T19550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.546367][T19550] RIP: 0033:0x7fec34b9e159 [ 436.547775][T19550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.553900][T19550] RSP: 002b:00007fec35b1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 436.556491][T19550] RAX: ffffffffffffffda RBX: 00007fec34e25fa0 RCX: 00007fec34b9e159 [ 436.558970][T19550] RDX: 0000200000000000 RSI: 0000000080106f53 RDI: 0000000000000003 [ 436.561458][T19550] RBP: 00007fec34c3506b R08: 0000000000000000 R09: 0000000000000000 [ 436.563980][T19550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.566458][T19550] R13: 00007fec34e26038 R14: 00007fec34e25fa0 R15: 00007ffd6652d908 [ 436.568931][T19550] [ 436.570594][T19550] Kernel Offset: disabled [ 436.571950][T19550] Rebooting in 86400 seconds..