last executing test programs: 1m33.120014573s ago: executing program 0 (id=193): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)="b6445fe1", 0x4) 1m33.057129121s ago: executing program 0 (id=195): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x24000080) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/softnet_stat\x00') read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x2020) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffe94a}}}, &(0x7f0000000040)=0x84) sendmsg$can_raw(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@can={{0x0, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "67a71ebc03e75ca1"}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0xc000) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002200)=ANY=[@ANYBLOB="600000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c000280050001000000000010195d969a659e516000010000000000f0d0fd4a04ff97309d252d3bd8faa0d23c4dec8011df92d77fa1d2205ad70632401bffd35961e35b191db69d49bd94b2ca56e428f66c9968d2a5aa4e852cd618891e59d7efe102cbd85bebf1b230fd27bf"], 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_setup(0x389, &(0x7f0000000040)={0x0, 0xcec7, 0x4000, 0x1, 0x176}, &(0x7f0000000100), 0x0, 0x0) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1}, {0xfff3, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0xfffffffe, 0x1}, @multicast1, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="000008353e0000de000000004011"], 0x20) r9 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r9, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) io_setup(0x2, &(0x7f0000002380)) 1m32.81785272s ago: executing program 0 (id=196): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000040)) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='v7\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x6, &(0x7f00000000c0)=0x1, 0x4) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x1, 0xffffffff, 0x8001, 0x7, 0x1, 0xffffffffffffffff}) r8 = getpid() ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000001c0)) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/user\x00') sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x168, r5, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}]}, 0x168}, 0x1, 0x0, 0x0, 0x2000c080}, 0x4000) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000500)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@private0}}, &(0x7f0000000600)=0xe8) quotactl_fd$Q_SETINFO(r10, 0xffffffff80000602, r11, &(0x7f0000000640)={0x2, 0xb, 0x0, 0x1}) write(r0, &(0x7f0000000080)="b6445fe1", 0x4) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_print_times', 0x20206, 0xac) sendfile(r12, r12, 0x0, 0x68) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000000c0)={'gretap0\x00', {0x2, 0x4e20, @local}}) 1m32.75775778s ago: executing program 0 (id=199): sched_setscheduler(0x0, 0x2, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x100000, 0x1800, 0x1}, 0x20) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x100000041) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x161200, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000079104800000000007900300000000000950074000000000022187069f9fb6bdbca6359d81e8eecd7934bdcd758593c4e4ead4367ee3caad7a68421695cdba2a119ca79a0a9a842dbeba155bc249578ff037773a2813b594c769c354a802307ef4ea733072570de61c55077543278cb2f2ce50f80aa94017b5ba8805c"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8}, 0x94) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) close_range(r4, r6, 0x0) r7 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008840}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r8) 1m32.637275396s ago: executing program 0 (id=203): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000100)={0x800, 0x0, r0}) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000001440)={0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x8c}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) write$proc_mixer(0xffffffffffffffff, 0x0, 0x4000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1m32.632122133s ago: executing program 0 (id=205): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./sys\x00', 0x1ff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xf8efc6028ed0514d}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002040)={0x8, 0x0, &(0x7f0000000d80)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@reply={0x40406301, {0x400, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000800)='./sys\x00', &(0x7f0000000840)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./sys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r4, &(0x7f00000008c0)='dummy_hcd.0', 0xb) 1m17.031215859s ago: executing program 32 (id=205): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./sys\x00', 0x1ff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xf8efc6028ed0514d}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002040)={0x8, 0x0, &(0x7f0000000d80)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@reply={0x40406301, {0x400, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000800)='./sys\x00', &(0x7f0000000840)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./sys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r4, &(0x7f00000008c0)='dummy_hcd.0', 0xb) 6.255214783s ago: executing program 1 (id=1000): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000003580), 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r0, 0x7b3, &(0x7f00000035c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14, 0xe000}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) r3 = gettid() syz_open_procfs(r3, &(0x7f0000000080)='maps\x00') ptrace$ARCH_MAP_VDSO_X32(0x1e, r3, 0x9, 0x2001) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200400095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x2, r4, 0x4}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0xfffffffd}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1100000004000000040000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x430, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="4f6b0100007f80277376b1004feda1048413aba26047ded5"]) 6.118124613s ago: executing program 1 (id=1001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, r1, 0x410, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x3c}}, 0x4000001) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x100, r4, 0xa06eaf13a0e8457, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xd4}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x101}, {0x8, 0xb, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xe}, {0x6, 0x16, 0x7fff}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x996c}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x9}}]}, 0x100}, 0x1, 0x0, 0x0, 0x20008084}, 0x4000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r3}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='md0', 0x3) setsockopt$inet6_udp_int(r5, 0x11, 0x65, &(0x7f0000000780), 0x4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYRES64=r5, @ANYRES16=r8, @ANYBLOB="010028bd7040ffdbdf250f00000008000300", @ANYRES32=r9, @ANYRESDEC=r8], 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0x18) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000004c0)={@mcast2}, &(0x7f0000000500)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x6, 0x9, 0x8, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x1, 0x80, 0x1, 0x400}}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@ipv4_newnexthop={0x24, 0x68, 0x109, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8, 0x10}]}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) r13 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r14, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x7fff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x60, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x5}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x5}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xc0000000}, @ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x5}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x2}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x4004c081) r15 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r15, 0x6) syz_emit_ethernet(0x176, &(0x7f0000000080)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x140, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x25, "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"}]}}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c00010006000600810000001000040000000000000a000191004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x200448d8}, 0xc040) 6.117359411s ago: executing program 1 (id=1003): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000001c0)={0x0, 0x1, 0x3, 0x1d, 0x200, &(0x7f0000003c40)="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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003bc0), 0xffffffffffffffff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="02180000100000000000000000000000030005000000000002000010e000000100000000000000000800120000000000000000000000000010000000000000000000000000000000ac1414bb000000000000000000000000fc010000000000000000000000000000030006000000000002"], 0x80}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r4) sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x2001}, 0x0) setresuid(0xee01, 0xee01, 0x0) setresuid(0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003e80)={&(0x7f0000000600)={0x1c, r2, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c891}, 0x40009) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x4c8082) ioctl$NBD_DO_IT(r9, 0xab03) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0xa801, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x13c, 0x0, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_NAT_DST={0x80, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x2}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}]}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_LABELS_MASK={0x10, 0x17, [0x281, 0x40, 0x9]}, @CTA_TUPLE_REPLY={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xc8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) 5.999007293s ago: executing program 1 (id=1004): r0 = semget(0x1, 0x0, 0xc) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x4, 0x7, 0x45, 0x5, 0xfdf]) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110079, 0x1000, 0x0, 0x7fc, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) syz_fuse_handle_req(r1, &(0x7f0000004300)="d5c2280baf4e05cfa1d1112770cf43a123827586f0f2675b130041ff58ba6533ea7947f2f65b1d458fe88a96133ea3927f41fa6976fad8c967c88679769ee674b80debcd1ec6ce1eb490888bd66a52141fa82f51882b22a8e36ff462b51560307cd0048156800ad137f359719a9c5d6ad6a8c999984f22461c4ca6614ca4cbbd5e9103a3459228e3bd35e3c1cd5f2a83fbefafe7c5a39617ba1d856f37977da077ffcf4d52f5bb3feffa9e100b0279cb635a61ae9f5f4491bb1c9f04c041818a1ae9a25cbca38c4b4754a8be4f52db20ca464b3b4faf0ea8ff193b414e7b7a4ec8aec2e77adc43d09c62d37fc0aa6296a56a9445f264a245d41e77de43c2694cc5885ebd454a3b78b60172e3e6a2fd79efa8b5fbbe827512aa0656920858da51616244ad32e53ed039a270c042662bc966a8fa05e23a51c76585a6f753e57c63b5a1dd11c4ce8773702c5c759471b79ee9bed600d99853afda9b675f071bdf6ff4eb99cb1ae0128ac1f8132f9b7bef82221276395e59f1323c9f9f6bb937a9db0bc2088670ffc3e6233ba73d4e324df7bc866e84e82ab707ab8aadd593913dd3533cddb396e804a63155ad6911962bc49bad21faba90b5570b62d98eb5328214a7198b36ea6df9a72dc248311040e01539112e1d6bcb4ed9d7fb70d22768ec6603e4727b6ed2616eb9108524985ccd70f1361f68b1fb7088829acdd59ec5af9e84409737f0d852a3c55993cb7398b5640c458bc036115b86de7b8e68f1cff882ee5707040571c3e5c9602c773459cfecad4917d8ba2902bd64a676e2c6e507d06dbc806c13c0fd18175087440ce7d7300dfe745b8e98ac63b400e449a3f2518c6112c9864fde68f580ebc2d72e4bbd03f16a7289be813c258b02f76ce901afdafc69046c947c9e801ac635b2a95cca291c052c7f8149c92aaeaab41edb34a70604a7538c4bb6486b983416843fe6a65d7b828d66deb991e71526b7627e71c6a795a02e787bc561ec4b65d4742a129c59bc71b323850cb416f3d32494d6dbfe3ea73cb473b093ae0b0ebbbd3e3251ece756b3cc381f05ea1b8c3f7fbcbb16fc446fc084725e6c3a608221aad8d8179112f9e5ee3697346a0dc0645e530df523cf4daea14764c25da2da863adebaccefc2c83a9257b3131ac2fe04a27bf3aea8979b6f3091b4fef99e203725368d297bad3b020273d0b606d2368e2ecb0776349cb86bbcbaa5c910636527e3cbeca06b4135170d8808c5f113fcd77ecb2f099d1e663617a46ffc5275c8fcc339d315ca1583f66fe7a7e6430405c0be889826c07fcafa17f04e08bc39570a1f499092d390c5dba82d259f652307ff941e9f1f569a48144da846f14452df295553de6ef4e9ba0cd98dd16cf89d8bead08eacd4eea71cc5f8232349f2d8519b1172c724d3bbc415c19c9e679b5a96bc9051cf6f243f243366622023ab1b7039a89152e7db97f291bb3f0213c445c25caf5f0a5a2b382c841cd8a490dc97d008966e94ed0b5ce07bcc0c13b39c349e4b596147a633f3a73ab6012a1582d3d283293bd7c01f99cdbad8e18d24867c39ed0dc3fc3cc800edd23af24b225acb2cca5aa264bcda40e1432cf2cc0050efdff48fd49ae4225a983d1b12facbaaba73294eb225fff64a677d0ed2cd71bab61b3fde8a1fdae638d2036283a8a4ff5a548d05cb706f56ce7e3f55a688fa6c70393c53c33be11f34a38f61f80c8e94e50fc9d7c3695d234705bb9e0b2a8316cf54d7963f548d49f153bf796d0970ed1264c19d79eb77fd0aad4844796cec73a08206b9eca76f2ad76318a20d52e7d3338eac40d03775cca0c2b29a451cb10bc141289c2703198e7137200a360463000fab97d0da72a7b4e8aadfa8a2e559a7d06bf49d6d4a932cb29994ef7ca0c1beabf05b898bb2338e89a67373d50614300f13523fe451d4058e5a522d364ec884099ee3c6e6db8d4ec1e5dc08d127b6301a308a1d6798878c28ef828b91b529a22b7519d249a189a7eb942b94ce26148ea8bf16a44261cd9691ba980ec2d0c710dbee41756cb39b88213ad5763239ae7636e983580c41a40b0f3a3af9fa6f995ed1981d073f63a623554bb01869bdfda190bc8d9507cc067b897e1c5f0d087cf8dfcb171169541fa3cce7c3a620544c74f2d3234935a0acf6c804c43992812925cbaaa24f497e7a00efb20c45c7acb80adb3322cbe0f08d1015b40f5ae1366003ebea977b7b95f803487d10aedca3fd018cfa7b267dae604ed0ada202cbebd731f86b7c6764911d4ff0c75a318ee43b1b556781ac58fbd773b2bd0dd693f9b12fa149bbe392cb2d6bf72015912f4a120e47654d42d14107c67b4502b5ad62044d0022c7f8b255a3e46da4bb8f9e44515e4076ce7b1aefd57c4e264b2cbee4a9e8612ce8517b028067644c927a9ce7564449c8fb0471a87b9b76f374c7c2559379a3004326bdc91be5ec52672dc5fac0883ec527f2a1248601bb9267c3123568b815b90b40ba06c250e3068dee2d7fc232141eaaa130443a5775d049464ec454a7c980d9eebaa4f67a75075a6bc28ded9a5f07fe658a2b9eafa37f14055155409d1aa50be6343d13d515d0531b84644d2f58c280d6d008dee95607f67eb74c900f664d97f411f4ac6afc18f11b6fb75e78b3ff25680ed3bbf5b20969678475b86faa02a751e4cec87735645753f245047371c9e6e2e7ab5a9ea3182b4c96934a21b9df3628b478f5ef705aeda49a0609d4b8f5bf34424581557d029438306002fd4e9cff5a2d4e7d5e23c2992032d314b8fbb46ccda250070fc1b679c9c8646c5fe22d8fe2e0fff73d8153fc46ef7885aeaa2d1eabbe455544d46fdef8e3ef9debfe589870942bcc7196e62736e927c311782b5e4da2889d530a7c1550bff4909d2055941655cbcc5c924a477c80fc3b8a904cd9e62f5fb005b5b00154db5becbe327c0f3ec8314ef3fb53977ec24ff7d15aa83a13b23ab99c5332306023005d2dfb70d3ea2aefababd019ae16d304c083e38997cc94bdeb746fc151849c98dc2a23554e6fe789d3aba8bf4e31133c7f93a3cdcd884271dfdd2c45be398a5349ef5d08456178dfafa31cb4c607f09394d71b3405b3d615c7c59c125db88f72380140345d24c56094711dd833221d6b7c5864d049585605c1301c31982d19e403b601b797fe99d0bbfe30d647a913da72b4c5306f6123e7c572828308a9a8f4c686d07125d0006229c2e890ff7d3c354dde61ccd3b26069a81a98e112e61a930f253d607cda5023f002a09df6b1371638d9661c5a06bed166434f07120ad21476de8ad47296af4b449d581cddc74f9be42a84596fb0634f330a856216a9b32b080c8b66e9f51a758b9ca2e1215ddfe633714ca512032f6547217b1a60fcdb27ac8a04bc7851718b38607bc92c13118a323c3221bad99a8639762abcc4a08654da9938aeb301c55546f5ae7f61439dd883a1b2dede156a57c805ab12337d5381a2fb25b32916a8827fc4de8e2ecc70eeebeb01659d6bf88055477b863fb897d5db275a0c222d261e7df79474858b721e57747fe8997faaf36f5f175b23dd3c5efb2b93fb5824da18d635cd7027a3b0b1c87e7c90a5681682b8a7c47dc82fdd3f329c7b60270100dec8ccdd310245b92f4b0bd9a92e1f2a5733b1b91966be15a4761b06f6fe3b05b60ee7964b4d028257c2210ca88031db0590190d3714c1b6ec86e2821dca03db2fc0c9f0ad9800d1773c8037e9b38c7eb7c99618b731e0526f8453c7e1bb67cffcc2d96cc297e1f917b13dd7dda2a8b12191ed107c1e076ffd4965b9415f830be97935cac23a87f07e26354273c2663c7ef19a27dfe08543fa057e1285c909051602981f5929078214058684bc80bed493f6ef853012cb654d180e414fd484f5cb2cfd06c9b753f417697ff42794649e05fcaa3d53ad0fdfbb0db57dc549115e59978b14dd621370d136176098af2f39a2de72482a29b616e8b308b3d9b46ac9abf3d57ff89fe59b5a97966cc4b97d06c20ee4fd765e1c2abce54dc271a7c7efe656648800c27a9988583b4b76572222cb28916b9ff5f6f649de93923179809405c879a90cb450f604cbe8af55cf2a6d844a59ab0393b394e09c79e1b3c403af6eba69330f6969f78a49eb7022e77a39363f11e07fcc69f670f63c11497352f3f5bfea0aee446da35428cebe28f1c2d23ef3ff97e16ceeb2f88ab19b2b69dcdcc81b947b483cc06c776c52232489f86f4c377eb38056042e2e9e0943fc0ef1490df472b9b244235598894a2ffc296f0a2e4257baca6a3ea8cfb1a22ea8295ab9e5faaa2a9e964ae7625dbf945cdbb369265f429d475ab69413cc5bcb89af57b1b966bd0076f799a401d4b46e5045aceb1ef36e5bbfb037bb7681f2a38ef1df9b84baa3598201d13a813165355bf052bb5e456dc0abdefed995b4eb37a39b313af800f6029243a6a7bec75a23389a90034cac8df6713b919028a14649d756d0093550278aad494de2dfeb76220fd3ee5be31f73839ace7f0d6da650e26f5ded30471ed55d2e814fc1b89102e5917b4e58840ecc211eaffa5a2937abeb882ccdf29308e3ac30e23d66ee79c29b4fb7e793a55e344cac298e30f1ca3333df8b58f43126a3404a61501ce06b75e6e6a4bf13dbfb05efd7b9b4219efd428c8f7f345884640d19f5515abcce05f315f00e65d9aa8022890a23da45ede06f455d66e0c96bbf7e9cc74eddca999a51174b4784eba8a9ebed13415de6bd0f160443d43b78181cfa381313a54e25f6751a38f290e5972ff7f70692e18c4737af2a7f6d4eac52ea594a22be4fd00fac1484e6d2d4d3196b49212b49598f5bc77b34d8a3633cf7212c869557d6eb27bf0d0a02555d9318194e9de9c9730ac72daee7cad6c2d4b248a8744515670766a8f1c739917fb859d98974532477989f4c24345f120f5320fdb8d8d56fa6ff2511e701bab399513cecb3e740e3761d02685a765f5267554d0f9243b51620197adc3b561b59c58f334307220db357c1121d7dbf593898b5d2c505f333445c084a6cbc6a7e5252724c83fcee85e304534780a01e7ecceb2ef53ffb6bc6cb9051b1400493ce55d62c01e972fff3cc7d0b68a2dd4d263c9191df1b629e323797f570083f122db3df6abb6fd6c4a351bb7500c7241e4392ac76e04259968e517a43e907cb0b0533d6750b9587a1a5d852639c6b789d333e848e3ad66cbf19c5ee5a641036cb7a858f822f657dec36cc134d6c1a629cfce1f1e24dbb73d09fba04f53b2c6309d71d92211a1f08535244eefcbb52e095626bcc78b950db1cb8facc3660fa705dceef155b00aef3291367ffcea06b5abe588bbdcea2637761308dc65509798b6a494dae4a75c1922c1234248dbfcabfaab3088a0dad09a135a45d75105314020f3ba8901dc39ee624a32e9f863ff55844974b44e57b30302cd0c349f3cc091befd5665f918c298ba89454fb811ce573e41f27490853a52abd6144e85d77de88c3f2e5506c8de40a3957e65936f3b294ce92610b63cec888cb16fe0e8a7af3dd142da96b57f602cc64ba69966724584c2872e5fc42348a324ff082a3ecfded82c3e5b7292d3726c4800176acab6a7a1479a0b5fea79f299e90ffdb1b3843e2349b8f8dc7881145b3796380474c2ceb57e27726c9e50b746a2b12a214fea9cfd6c668363fe6e402710665118928fedb2f4900322b0c7d2c348881ea52278dae765c14b51fd5e8f000602aa3978d83b76056410c2260931e35d841793c8a36b191f93c33c0e4e6367ef45a1cf5145d774861224afbb11a7b77bb94492ec49827f713f8309d80d22e17701046e04c5b277f7b423cbbada01e6d40beb56e755e583b8f3de4b67c4b5ac83771b805fa7af49de2fc8b9a223293d83e7eb4eea3a3af1d1221e5d458e7cab60eaf1b51550a1b125ce018d76096f16d922f4aba48a728ec1b7d4812fe2ca789261b6d8e0c8edb3ba9007649084899c4f6b7986c1cb4a98d412c801fb91675ee42e2bb511bff6700772d3c03a7cb6adb41cbddc33053f8f65c164e9bd47b931510046506b169216d0a04edc479bc51c28acc536ced3834a7a9ce8fb55b72fa186a559437bf41f04b733e05986c915bc19f1b2f99d3bae6c13873d32e3c809b71881c3075f8dd1746f36409ac7934c25236ee2752560fcdd5175037a6fc5f0da58a229418ce30f3e64f9eb6ff3fe4498f47fdd69ceac5e792c8c9f087316f334b7f75e3432d3f1d03ee97c8f16485ec906c94e6c9580f7d03d98a8da85ec118b77c6c1d3b2e99fbf4b45e66cb4f8817f786d1f90e1e5e250be8c240a9648a219a02e62acbd72d1b0c0b42c75065a35664ea6a03cb05ea179f2e8e50e3d7ed53d31cdc10cf5fce48781fa338e3ee819f410540f045cb0edd7b2d219993faaa97cf95aa6144e889a02069421291d05eade30693a751039fece452c22d1afba081d1c40178fed7684cae475fcc365484118a184670cd7aa2758bdb01058ea9b244d5241f627bc5be11c9395e3cb839b0eac7842a312e1fc8b4ddae2aa4ef907ca5c9b847785051323e16d5497c4424289496277475bba67da750fa05bd8be730e4aabaeb94641fa2263dd3d4eb511b4fa40b8cf8b16d7aded1163f2258add79b04e1eb888afa27d057de2523863fc2da38d44cc69ae2d455900eede5fce69d7e9f8707cdb2456a45dda14d257eee4982f86259b855a0293068aa4aeff9439bc06c8ed5a370fe46fa88fa9bb92872166ac69152d1cbb4720eec5b9a057890cbb838aef12091454fe721395b46f9fa29ec1829fedf65aaec1176bb9eb15511bd77e7d4fe7321b3e0dfda95e5c90c3663956477885d6d94b280f58edbc77e864dca73536cd4988bcde2a3edb91704ad59148d85a001e393cebdb56ee088fa1033cdc6fbcbea30e2974035bfe29cee1eace13e30950bb4658886dae7e565ffd7b71e41feecbcac35fd97c81a8fff9d2a1d43f183c6e984671e06645eb0a60228d1b6c12c28bc6eaa4b9125c57b48ced2e199ed3acf12dbe10af4a56f2f5dca829fd07fc3f7e0de6913c73be0ada3e43bcbe70de784de699d0b51d7a56a3eacaf5d7dcd77d73cfb82e04633574213e05dc98850d822bc6dc90dc3fd6184296287342e2243fe6f0cf94e6d02a1b900d0c718e2afbe7fea2fafa375f209fb9cef5d844b861a1029aa3dd7081e81fe6501bbb413dcd23e013f279ef87e082335ade324b7688054992ccc63fbf9153213ab6d07ed0b79945d19639aaa5dd10e53aafe57f1e323300246cb1d6ede1eb1f319ca6fe1b0cc8e733b34818425888110b6eabe2db302310d0a8bcdd5342146b29c535cc9a95a455c8926d77323a31b948d47dc611815a329654a252fd09dbcec5f3cd8bc7e465759eb8e72ff6fd4ef1f375e4e8762a58148622d14480b7bb9aca2eeab3367a7376c9c85e6ba1735e56a2fcc6baf92c8d21942883f318eab7a568fc7ff01885a7089aa7661b15d73799bc0b8f8ce6a3b61adb6949965a223850b6825616c036e099952e04fde7cf086b5e76d45b86ab78b322f9af580173f2e798a39df7cade0d365c9d46d3fb36970f8a99d7b20a1b275afff852126f21ac24ca8c34deb49ba511f4d9edb4f56941aaaa477253f9bfc9a25a2694bbbe3b917074dd4eb6f1be20395ac33dd932a7ccf0604d64257b5af3faf271c145c190a528e471a7f23a53b5f9ea1bd0cc36410e9c538e91dd01d162edde856087b60dcba2042e65b6ae7b81787bd3308db9eb025b6fd930a9eb74a30883b83cfa8be5270dd3ee3408db7f7b136adebb3ee30f0e0b8835a0ded325363e4a2991cafd4a73483954c0f5d3358b25780608fa48f3f527c7e617ec12eb017df33f5088676d8bc476da251e608394e3d8fc0883fd4d1804f8e07f5e12ffa4ee80365a88abf29936bf1b255539fef95f5cf3bebcd26817edb28e7b6adf4851dcfe8aa1aa097f67c51557326ccf9c46ee2780d491e87774324d4dcf26f2e472a5e199b0cdef01094ea72bd5ad5fe1be6c9d545df3dc5de550665d220718a2c0baed2833cfb1428e2d1c2b9ea1e29f4b07fd6c51492643d4000716cd1e8a4f9d58b6b04b805d8962495323fd62949b17348418201664c6f2f651f99d73f8d17bb5e52dba2e6f94fa33f816d74bb6a45bd6cbdbd07f530406227c8fd11f390e805bbc17bc0e81076a27c0be023b64777afec0a7a0c3f53f03bc2ca72ae2873d68217a1a6905f414c2cb1b9561dfd07850a026da5f5775a66f8f3a6bc29b48c8a81b06ba30994ba8e7e233e3a3a5d886767ea6de91fbfc0a594c2375d62e71c7209d87d0f6c7a79a0d80da328e93f08650ec745495c771410913d094e4190075b7225761172eb420c82ab493548f6de38e17d3e687a89ce77c67c58b875c48c8a4d1664cbc6f67df357e040444fcd515d92d5823fc3ef6485208b6f3eda8cd09ea3b004f7eb06ac268ae8c3bf571aa3f619222a47540f9af340c80c587f7226e3d715b18c3ee41f64777d3a0a09f32190ad67922f6ecc63c956a715c3c42a6aaaf5e588d119210083ceaa414820b62fef87a678cd3f24f8fa3cdb6629b041cd7555974313f56d1b0e117ea925dc95e18b5d3f4ba9812f1067022945c3f5d547370d45853c4db3c9ca4436d7e649e1ac3ec02f9c1e9139849b46027d4b276cb0eb4b09848999f466f528290e47ba9540ceca89390db3fcbacb1d566e22e917f01f4442bd4dd0d350d057ffdf5b3549ca559901e6ff5147bdc25c11b23f1678f02c20e4e2e6f339b262e2b82eae0b15b4227f1d514f99ec78fbcf80c8f6f243536f2d7a809de05ae5e1d676fe950ad3513f801bbe4d16737def4b5ec4b62f8562cd5432bd372645202edeb286662d7e8d0dadac5b91c903c2756bdc4f5a7c931f2c3f7feace2b83f5459a196000e2ed1e1b2accaa9d637d5e408340161331c4b0047bf2ab31d317bb1c8f6e1b3d52f9f240bd971a447942dd4b73301781656aad9ce9b01aed907b7eb3a78397b97e601b04a4cb028d327ef32cf20c34e8dad9c9b1f981ab5c06a2b0271852e2a1016ee460d8568391c9ece5a2b8f29cbc6f2d6cc2e66c30c96df548e67dd6ad8c1ff09dfa22b2e8b2c52a3948c4febb09e3c2d34c0604a5ef930cd53be69a4bed9c9ee057178ece02a6b4df4624191590952888bdfafd2dbeca128d500872a8b236fba9623672c4dc15f56a761ee0c54026112fc464f72d3039587f009b94930dac0dbe444a939b38c0f5bce7aa366bfc2bb909db231178228846f71a56ab219e28cef1b102c1bfadbe8f0916d10a573b8cb38cc2cc2ec496a410a4e82847006d2ed4bac927a63a00416d0bfce59cc69aaf78ddc9566f23582999a655c8ad3b217486fb5a037ce089baf344d55bbd475be4e90b10e92c9c1bae3202c2d63355549f0ac95058724fea81ff9cec027e7b93e2cee43af81c6978fee5faf6216118785251b8ca023115b2f87d5d4b10c29aa3616628ab40a8ef36668ef57d7f9be505eabc01947ca222362818a71b3d63e5725a4d8a2c619b1867f70daa07703360d026d6f65247330be1ba84ddaaa7779591ca261beda4f4c094af65c5c276fe3bfb89f067c8c54af67e78f61bdc114ed4aa869c3adf282d7a8e7272579e9fd9e47611e0dc89f97561110e0141c69b1fa114e27b3d1e2c825ea008a370e08cd0a0610edef20cdd8a7cda0922fff046edfd2ff391a10ffce5dd6045619ce9af6b03f4193d858a76b201ed5beb0f11321707b7b593b23adaee4a0c0caf39dfeebcbd2948030435dc94ca00990c728502ec4686194f0f454304a422023c1b2c5b1ebbcd8cd50fa2d11361e3bbdc306e2739e27de300eda27b1c1ea62d773104cea77c18037c6bcc76423621b45abbe789b384bfdfb46efa1627ff29d9d840bf6e1f05e7e13fae6383e42ce153dcb062fa0cefd0fe9298ddbe77fd78d7036b5a815504b48267203da08ca685bfe8ae89c031074bbe5d3d6dcc6a3a8a8a4d3102765c3b714867f4516df62f214351b97bb8b5697a9f9a9dd78627342b239c524a3943d1d70f8cdd7391f05e7395731a8fc05210c6733ea256040bbbb53389229b84dafaaa3db1d5eca2971d9e550149461f1a672eae2319a99beed48934520666bc54b63085a744b5fc9a9b089b16c50ae945f74adcd4c5d064a12a6e103ef59bcc035a755ad31836eb7d04e5900d3800c822b96b466a9f6611f46b8a7d6131f91c625a5604de5bf01e5ca5d99a714c8dc1160260010f8d55f9125ee453b61c911bdf0824caa804c76d6512802875c5433de9b2e8b6c579a67fec5d2bc64ed3d1c313854221b75c9a0ed42af6f5354e7b1d1bf8661baa1261e68fc20d14b5652d25a536f208bff2b90fefa163a232696e655bcf95bed39355ec865e272fed582aae18858f5096ece40b9108efb00147f9c2ced59bfe2a79826851850ed95b35908dfb4d9ab7da0668a1fa8933ac4f6534e9598481477791fd1a1c269011ac9fe81f0491790e8aac121ffc00e38a7619a1855e6899abc2c670375a3ba4ac0cf652da89a70628cee1a35ae17b3490102e3c88ca324d06fce2151bc9de49472cf6e76ccb16d2a9cbf4161812e2c7758d73631024190fe9b71935de6968b289d3503b497f3f4b6306446ae9c312f8f1c63c1f7e62652173d9ed48cb128815bd44a12061f9b73fbdc6674ab9e0d01807f7bcfa0aa59168420e5ad8b72d7b576e273a1d229934fce2867689a41cb17767cf9defe1a96515a677ba08e10e187a3ce2f1d78e6b43b0d46c36163a1967b203df4f53379ee98422e973ab5c090adff21b5cc84fc78358021f681a0f0fd744f687e4f6c295470bf8f548d2d3dc841481dd51db9124cacde83bc9fef44a3e69e1cb28579d897f3013ac6133395328247fdcc152e5563678258936576196ced017c79bb6a4ea501a44cb25e5af1697afbdb3abb316837470ffdbe985ac3967334a90731602d3fac4f5c2758f04ec9c161a7cf330b7c7549fb62e6c15d07a7203c94edd3a8141c91b2029d6a90b14322337e6610822d9d7bff58c10d9c6cff71822f6456a421a65fdaa5d2c793f256a4e7a39f0d85d65fb95479eff79345c0615c9bbb4fb3324f9360b70dc709b0200042e8461b8cee9ce30beab3e276df48f41f001262fc14153f9764e13b50397442e00d7b11266bde10a3b7f83818086ff0015409679e4472d9e0215804fa9d21cebfa5cb5099cf88750cbeaaf58c2743f2746ea4cb73760ba88a07b91b68553716d563af5d7702219d0c600916dc54242d825c6d68320baf234a39f0b9ea9e6a4a72c4d5829b2f28508f54b33c7e0394a43fe23e7940d9b04bbe790d903a2d2c979e0ea79931b934d094fa2d5948c05cf278c341d788f2061ff617c9fa4700b1e1f0fbfa1b8c42848f2ea01cd318a8748c3336622ead25527ddbcd8a12ba3a5183f4419deb13558ed0ec99e73448c21ede0dbee9c01fc7675e54c60d4dee29c0f8fe81af6fe7b726f5d3c50dac634aefbf1ca6aa4df1b340a4109acf30939f6094c8591218729788111bfde98cd96d4b04b25bcd1bcb7f826241995573bae", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0x20000, 0xcb7b, 0x0, {0x5, 0x0, 0x48b, 0xa, 0x400000000000004, 0xd, 0xfff7ffff, 0x6, 0x101, 0x4000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0xf}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) syz_fuse_handle_req(r1, &(0x7f00000021c0)="3f1b94887993e28c53d781595d469629857ac6d09d0a9d298b3a6f844f02e7e93b9d56c9499468122f04b990680c659e714a0573621e201317fbe3f1054187518f5f7ead956109f95ca75d580ccdc92505da9c0779bc9eada69430098b2eec53dc292aab8d9fe0cf7725895a13d76f843a12323c90f16da9fd1e5677035918373d634f3746415ae259ab9350beb376662be8f202bfb1f8eccb7a51b2e700999d3d5ec0061057ec43d4a4a6b1dc206c303b67c0e383424a13179cf6428782f744524ad2c9dcea31d6ddc4e03d11177eb4ef2cfcd2efe6f054996c643cda1597efecc7223045131ba5ea845c7ceabe3833a7987914f3f7816d55605a05c1c29567661235aaae33e42a4a19bc65512359e1a6c9ac5fc635d66c96e6376f9053daa2bdb765b094364209768b5bf44513c669bf1ade8430fcee06a51039d3679d93dca6990c9aecfe67db02faff1da8d4c33152cddf6e5e449080215e4077608d39185f77c9b9f88fbf48c3a25e28e24648522fc54536494c6e6a056ea812b31c28dbce6cbf864c049864f6396fe28df71be70b8080969dc41386db3573007ff69a9c7ab1652468f6c375f6fbc8caef76924eda599726e34d2f06e58836943516f19d68ca9795e60e4dc1bed100921b9d773edf0c394900a4a7a19e7c80ebe708bf75dd5c8a9f8e691c6e9735d8444ae2f5a8a497baff00e39ae26e7eafd2cc06c1d0646100e613a0622574c468879620552d3be15b4120a5b044ab6995ef05d1db34f9e3cad4fe4981f4bc02cc99daa17af623e00c255f9192ebccc8611838f1a81038d2979ea68cece74110d312008e2ed00a3589bee18ecd16d7ca846a10c2b5034ce655580240d0e458a3b79ebdf6b7bf92264866c395b84b833327ae2aca3084f0858f8fcbb15e9d6fbfff101e19ba9a25d4e022a56d17b060da2b75241548aa468a2e15f7a6be6f2e388d7fce491ba07617b8dfe006a46a09270553f9dbc96f78050424c6c31da72c6fe3496ba49a2baf9b06278653b74be0144903eb33d5b4a22f437f8a5a87014d32cd3f9e5d6feb5ed05e49518655e7e9e9e7c045e37f3306649eca56ec266e87142f8cf33936fc38254483295db379c26b06ef0a8d64a8780daa382b517b8e098ca7a6068386ca61f5b5babaef9d1a60203ea7af719167be451151387a377d7028444bd6712550a8b2e68a9628fa42489b1695d495f695e33fdf37f2c5b9182f9330d68e69a35cccf8451c8ed8ac66ca8f1248f298997476f8d7dc9d059e2fd7de276cc2f033ef9fce0abf8cbab804aea89366adb1f66134316fcd200c481aaa5ff8d349e8469b7826f88d5a8827dfce6eafee0d07617b183fd0b06e9f4f670d684fe79a412ef835bd3c4d70352e2315d4819766947f68986e22532c1fb8ae854ff7d7fa061be03522c5e0449de16237c0334c3539faea9cc4f4c64014fb4ce2b1b3d737d8325a8c9d8b811886f30cf7bda965a3e4d69fc7d0ba2b92761f714bc2fd218c81cb44b5b156aaddd2f31a0a89778eafc6f96426eb944424d65e345039658889a41936ff79441134d25da5fb20fb115298428ab1a899fa2af84e6e06b023acb52ac231763f80ffdda20a6482c58335a8699e9c3f97cd44650fcd69689728ece96c8fbc55821e366e30f16bf738f75f5e6a016cc2366db14c79a1fa1582bb93f5dc820096bdf0505bed2320e52fca0895ffec9382ce7ffacd2a6c7f82850d6de5c4c6f4a160a6944626ead29a341779b1cac61e7ec44d08ffcfd29de215e59fb1212fa43d7991c7c143cf1889b0c51cec43b1626a6438bd87020d0f9bc540019550da700155a3d4cde47f0573e705acb30047aa5f91c25244352d1f7bdb0714093d10853bcef8407e49c2ff8695c5e85562366d74f831e10564d4404cd8c816ec1eb257348435e5ca79bd471d38faab6c09d8209b9d439bfe5b41e4ba2aacee4b89957aaff52cc258de7210da0d9f2d3a1ad23a3f2078ac51583113f0296b89b92e33ff91f5528734022a2e8aa73fd75e7bd44e0266d456b1a5ad61943c84cdd184baa91ea8c104d946bbe9952c178f29eb71663f76f5e216150652b416055872395bb98cc8eb0dd37a91370f94cdff067e393dec783d4499e555c1b1c2a1d96ae5ba65ed8884d9c2b8d48146757b9351a78263d6ac46b1d30a5e797881830e0533de2a8863f19245aee2db7e4bb34d08f7ccf2b0d10611741c4b8c6ec3cfa0eee2f97c689bde3287725843f3fd736ea989a6a8f45d22245f37f7474f7e6cc0ef71426b9039d9767fe7c70b008025fd4fe6084e1b284b75fac6c6a0f9d01031839e6365be261f5b21f16739a2638f4fd321295c4b6920be397750bed2d72e2baf065f87ec96cb557e44733c9c67b81a50b2925aea2639765e92377a67f02fc97c78b1d3c7467809280f4ba9828f4ed766130e6c51b8a3ecfd27b5c199b9d8cdb9ec1ce7a6c076d28520798817374badc110d59b50590c501ca0e3f9cf3781b76b963b8ec00aafab758b504dfaa821ff446b527c9b5b39d05264b2e9030109716fd3a81921c6fca29ff62a43a84289190df1c660f8075ebebdb22e64608bb99812cfeb6d5257654d385eefe6c0863d816bb4007740b5a4de025a103b58d99c258fd82ee3228525e4682f4f81f7149a5903a0d3adcfc9f761798cf763d04182bb4e295709a4bffd185979cb3a88fe7dc332cb48c2f6807964914f10e215aa78998de3a7642b43aa9f07fb77d75398bf848ee573d3801e77d0ba5284bf14657da539020ac7de200c03f01cd955b3629b9cd255984c710be176646af305d42f7e9960fb8dbd627e7afcca6f388fce39e713e88c275b071e6cc82bb63469b283c105dcf50f6790a2e1415346ce6ea10e0fe0323fe43df59461615122ece5897f76f283ff1570255d5f13160d4e47151b90335ce03ae89017a913b7a549df59ad9bfc5268aa5229e41431394eea3df92e8ac0164b0cd8e68f9bff328d20a1a86160a867251aee00c58e6696d6db56b1d46cedcc113c058f6837f9eec6a8c8027a229f8de2cb5c11c05c3d105b6775af838f8bb21a1c08daaad07135a5053afd589f6ba52b48b15ed5b300d7ea9304e088182223338c9cc24e680ad7ff42c655c058aff5d150040d5a94f6b8815e85403962cd8c415126f02a9507c9b6bcd225c3941f3a35ba577390670367cba39669647f51ba8958d927823cb4741b2e0a66fd659619471314f1d373eb0c9ef2d1d16a9e11b86e4ffa8eca193fd38ac1365ed0d78c58e413ab846d9e8a709ccc6f74d856dc06926c6729c9495c3bcbcfe701eee8492079c8e0a806ea2e33302e6116a55b5d0c2804fbac353431d21d48ba757be5f65652dacde3953b118a83db1b4aca61a414b9a2b6493995e1cb48bfdf57bb45dcc1752b5ecc8c0ad7f0190a510a8c942f915343c4636f7f1af03ebfc801691ba15a9d886e5f40f708d0248bc6c03ad90a1fa6a3886603b3b55ae726ebdd7cada7fb5216ae21e732d039268039daf01a5c50c97e20ce04bc0e82afe52ec6c2f4b1f7e34af6e5ed42ef8195f045d1a387c6ea83f8b0d7ecf5f85378aeb940e1fe0c3562ee841dd12244b0ebf281a22682f37b8d1b943369a42d3e915e06364f0fd714c3362e1a9bce095cacdf7598fa6ca9e1f13184b766e402f464a2a09ef371b7d89350cee5a4c514cc735b9d21e801d0d547d5d0fe15ce15e5679ae0e4d7ab37521c8f949d8d768878a18be9c8855b18363a8fcf6244f78c347768659ac0bde5a4292ac813a94dacee1990d5fae7eea2bcfc5dbb75759fc27c39f864ffa688e6983ba66ca878a1b968da7cb9f78b2932ed67756efefb3f2a96f1c5342820e240303995a34ef5694a8b363dd7c04a6a7ab93757a61759e02097e2ef83b4fd8fa73f1b2690e12a41cc69ea2494b1564da7cc13eb25a0b65e779487d0ed9d700e2cf2323457858bedcce3e67c8e4158032140c2feb0d285dbf944f2b14842fbd578c4cc9128eec85f5caf9c169f40991d9c1966e92658b0a298bf197f05382c19a7df9c48a4151e694cce98fa0b041d452c41306d77512158392ffa7ec19b867e1a18e95cc6a37101dbb4d7396c4b83e963a6a2161e5fb6cd4a1239d7eaba9f11b3fc49e6143d00ce672900e6dd3df19dc377109053915c068877bd0191c4e3310e1b85dc05c25fa4d2f3ab9b0e0a5a03950e9d3653a2dda974d6b194f134dd827f84c7345804390ccaae710c10fe89c5f7fad2efdfdce3d635924b15959305262cefe49624322230d039a133fa10482d20fb82df8a006144310b29b326fdcdf7a84454824b6698be2f9c204d9128777b2dd395bb9b5a394047b409d25a0bef00fe745671209704561520c52c8c385d57254143ed602daad6e20b95cadd61354a157f635ccf139a9f232eb05e51a8bff3042ad84c1f910b17bcc47d513bed02297b8e2fb48a4873650824227c21e81d79faa8337d8f2f479f3f6c13de6fbb5b5afe26dcd030b92dc029f7f2af70e42749f3a42ece9e7a2103c3cbcca084d1aea97557c8de75f75771d2fcd35b2279c5b40756f055db1b9075893a8d8c80e6b59256b19e32d4e019652115629b5d778ff5b9ba1497969dfbc6404116d6a7d0bc6f6920249a03882a8fc54e2221107d81a8e3284ca00b9ad1e4ad0a310533a0982fc65ca2ef8802a21aad0c88e2aab22700e50fbac38046a6c35420625476b10bb8ab6769380990c483cc7ef2e192a4766aba36ccfd88797824edf70f48e189c805964167d3ce8a6e773fcc30297c33afdc16286b89fd85721234abfe9efcc2b6ece5375f2fd2ab7ed8faa3410b9394f024693d8ddf8610246daafbd66bbf1cbe953ec73a5c6c578fa34fdc83b21f08d9f77364100328e15bc67f4277f8e79dfecf298fedd2e3bce46dd15cc6d7a5a116dbeaa6c43f2f975090a0cc7a95f7a8f8e0ccf1b3b7f84d1c6c296173fad703d01939f8c7bc918bae63785bed4c55fd8843f202a129d5976b63f04027f414996e7fe77ab1772c5f8eb207834fb4e5f4ae90c3680552626b3ea4d758a5400f8ea32e3d6392f59165ac16f05ea179168734a785ad4413c8ba537071c62c7253007702b27e574815ed66f9151894877498cba25a9eccf02faaaa485e8e2b0a582ab6e9001920f1d42fcfa082688056274a2b57216babb6f09544a1af54f98fc6743de4c07af3fa8a0bebc68c04759b178394ef98c0aead778b66398e6f2862a41c74e3d781b49a89172d71afe4a761145453ee77d7c0e016c3807ff430a1c8a0a79003f901dc0d64efd3a1324ead01c4a8cb916a195b4f88a3fd58b5c3489b7d1522f388006e42e640ec5bd93d40e3b6325ece4016c8f875bf4bd75b6a0a5e317d477ce820d13fa3f69a2f2fbce1acc5c342e3d7af58266f83d061aedadf712eaaa8b6e7b3bde06ef3e0c8df65e42527c520fadfdb9566d6abcbce2c52f9fef1a67ded619a44dab0c38093b2889dd4430f6fe123d6195ad13f7c2c483839a405f640aecba63fd88b018f575290945faaf1597c46a208a9f4764a7dac0b4a2b084f4a1066dc2f2bfd965999c111a96f41d22ce84c29b3fd8a4e8eb8457fe507408dee4e2565bd3627efb053319eb809ec6c210a243f558325f88e6d3ee00e2395c3316a17e261bd6589d6b52bf2ce9d8a5794763b5930aeb8e3c7ce44735a4195b5cc35cff7f8e25fad11a7548c2f07b83bab61bac25ddb9976e43c375def5fec8f2ad1325119f1d9d185cb1ad262f2fc2f4c700bd5f3b5fc87646b8bf593864edc9e2c8a9bee88bebf14712d296fd61a268b75a79a6bb62d8a5f0a2a5360bc29f8de5af2a79826f2840f432a1a9f4ffc79ea6ff003c319711c2771d4da7cb16db18e565bd44e45ba5ff284af97ed1f99b3860317d1f9a143caa567b0f8d1a4ed4e1f97e0d8979a0fa18d3adc4e8561b33df6cfbdaaeff7e55007ca5fee84fc6fb8d5df67a371c8ebf148a4d0d90759a00b2f48edf255ede1d1370ee25da81034a3562123453129b3f49811d5be36366ec01a52d6c2995153aa2a850924829511c73c54f12f53bbb9a3a953d2b90f71c52aa465f67da5706dc5e79f167cefd3242c1f83e26f5ce6f2c7e79320debe03b4407ea1a9f33130b55a5179fbbb9a03998c334671e7e257a4cf2897ba39f7582e1a6e0845e5eb772cbb17ca3576c5edeb3d19147516dc52f71ae638476a3616ef87c61f70bb9f0de63d5c6aae3579d0cc43f6d290c24366100c4c562db5864274af956606b4fbbdc98ac0a15e8e091bca416a6db7d5b16795249285cd951ef9690e48ff73753f6e45da6fba8dd54d7608302b58690285a0bb66e3b952fcc2c70bdf9af8b680fe4308671d90dc0a7e0c4fe0bafbef2ccae0ee71288a9e76bc52028e209cc42cee26a0fd71451c20ea3f85b8d1802e05ee96e8ac43ec96b293c3673eb0897ea42cde09475ceed3b7c150feb379cacab4b4cc5f1d18183dce86db40453743c238f381df813425732f0253c6e5aa95830bb096b98b0f7c6cc959245b2e036e9fa2969a3a6b9e6c0a147a8d0dfb4f3d003ec74a243d626c56647d7d29979ed4d6d2f176c8db561e9537c923a61959f97089ad79df6b08763c112775ff18b301a884773fee7577d74bc13cd51f12dc1f01f43cb97cdefceecace64244255b61108228bdff2f42ebdd82d5147f148683ba60b9c31f2541e9ad52d2549f0f2a01b5b2c1cf7bde2d7b893cfae30789a35f6cd05c6b8a2fbeccc28c92917c0d6e4d1cce8ce0eaa94d8d983701aa9a1222500755cc6fdc72e384d94a1829d7c7b888f2b1efcd4e7ef77a2da1aae037c3c1e172cf06d17cf52eb2dc7da11615c2efb66bd20a1969e962cfb76e6dfba7f96675a89f462a77678920ae4aa657114e13880581d5c0340e41119a0ee5e6aec9782f49df25d4f3ee4bf70261a8640b7b26046baa6ae35100bdd79e84538a2a9481a814433b9e33eaf6f77fd543b7e6324ba02eca1b962d430e50432d714c102325f24e98bdb1b0f170c3210431a6bef8d1b2205ed6c697494a832648fbc50615b692c27e47483fad82d76270f4440cfb868d8f64619826f4fbfcccf4efdf28ce6c531de9e932c030938056d1a1222e00e003baac8c28f43639c4a5b31e5f3582a449ba67e5063323d19a66ea16984b8ea219876b4ca0cd837e8c623e1178acda7d4f291b0bfb73acaa9ca9f9de2bae21634d4982b33767fede3c83846e66141162aea9387009007c721cb713239e2489f322c87781a02a5e8bdaf2aceeaea29e661678646b345b084d1a8cc34b2c6a99d200199cad067979bd39228e76a85f3317d2bfa6f730e5229231b486e2178e8e18bddb937b5986472d5e3a6ffa801630db93e0d9d3873eee4ad52cd8bfb70ef05a1fec680261687ad8317468bd028673fca1c61cd3790a6d701fe96e20de5e8003040ff185b3d5e50f6c3adf132ea5a28b2d861a4c0f8ee77c6fbddf6c4fd0b40e86eb555de81a27be084c7aaf03135bc2e0230e7823f6d3f526619c05527490f3c4cbe325e435861faf2d3bfe95acd2025c7a412e6bd61f6d1bef3492b077c6ec32f1eada77c9912823d994dce5b55180c01d95ee3d6716bba0b92625da73726e7f7d36295ab24e0a0a43b8cdcda046e9fa7884d76e230dd365251ad6c6766b2758d85821a9a342726acc27a372e02c7b54df107e1a0b983c89b6d3a49c6b3ef983a4b9b0511a57e249a012829a00e4f3b15d11bde2c10f77dba8e0b70bce29b8e125b6aa07957fffd4e412cf6e80872fa3ef024cf65fa461eaa32cdcb88dac88585c21002479b8351e944cf84b72d02817474b8fc99eccec7f317e86f960e152b9e7a1b069429d37cf8d2f2b8c6306a65d2f99071ed98afadf0c8e116dfbe50df33ef9c50f7d41671b7f6d511b783b33b633133b5581b85d822021700b81335f91c0ebd94560c20c3a00cf13bb8ee429fa1ceb2daab85d218f057ac6fae695554b7ca9cee263a0db6153d7756b5d17cc28e7624c5c8e93e860e46a41194c42607155c535a4e1919a45a3368373a0e3aa4073d443a5565ddf1c649a5351a45379c4e78257d618d9d4c01e1539b8bddded92bc24b2c0dd8c64a95cc3a0a723f417cc38dec1e8315cea7a88878f69aa3440215580faf51fd28a7ca82f3f29f8629749408c18b6700cdd946929d52beb958f37ff4361e5470bf9e995866476c98b9df3bac2a51610cc2b16ef3bfead3a3c854393bb28ef579d6264984ce63a7ccd1682b521fa7f89a1cc6f37c98097d1f896d4000272df6cfd615089904baf9b8b3f43a7c8d7013a91248851434025be1c50e5bc0ceb582cdd31ca196d0ee47f8d6b054f7ad347d266657df9b47dda56b9758849e4cdc5c668c74d0d5939f9fc50dc881c0d4671e29e3315ace2fffdfb5e9eeab284310bb45ead798a35f70b4a8d26ac3b5e5c1d468e81a8b1317008a32523975ac5cfbefcd48a8de633efbd3b1c4d5ad8e57f750ed796b8522a9150fe0dfe9041003ce4f614b21f855f5df5d4d18d1889773aae47824d46a44ba22f5673c77659bea6145eac9684681db6306ae51923e1bfa47c3d39459a0c1820655bcd4ceb0578b5662598a7c3f7a647ccd6f32dab0a4dc2ce6f4772467767ab76b1ac60f59502184a23fb9c7f9c04721e445a40e3050026ec87a20c059d71ebbe7fb392868f379265de17006606e83ca10700c648876c763df564accef934e971eb15da8a9e5689acd2cd3571fc1b1279cf54acb4721ef44b172d8436ba5e64b22530071fab4752c83a301063372cfe81215ae06fc69bc991ddb088ae489df175ef648743975909046a681d9723783c669e0860903129b8335fd845de556b9f4cd5073534bd15420e08f7488b22a333ed935e8f546576a51e76906a654618c2fee98f1200fcdd1c910c26aea1e0f7ad5672c038aef8a194cefe236ca499a1c6641e4877d548a4708208a1d2a26daccf4469738975b9c760f6b31003205b770ff2012714732c0542d290e9c41a75a691a3d948e5a181adb888570180059961306db3c392403666f57df8719b918bf1f8b54a0db75d59245db332093dff92059576ed8c4469f3b05bcdcb57d9350bdf7f663ef1989fac98d6135e9f3c7d3b8ca2f4725638bcb6f4ee6138787e0dd6f60e003d6473bee872589d695ec871a68742bc9d82309c6ca1f3f67f0f7a921b577260f34a69d6ce6a90db7acfe6175ba14283201390ba850eef7e9c172543379f558b9da18f4132039724ac4c1ce56e22a12f3c323931d89682696d1419e4ab4d140d7c102b5d5f58ea532f9dcf5fe36100507ba6579364c86081a378a152d8895f01806ba350bac8298f599f6a34ccfefdbd526803da85e6ac570b752f887fa97ce4c39e4fadfa66a38a64ee30786627d5e81790bf4f5027b20734ed85f8135fa19b42dcf7740fead322b73e1b97a9bc67448286f8ccc61e9a734bd9dd2595e9d27c6a1b375ea7c67ebb154dae40acb75621129ff73d91b4e2fa1eeb1ec871ad9af74ec3393dccedd17603347e1b8fb2b48db3cffaf2e67ae836b479b4df69e33849bd63cac7f8d2efe96b1bde63d704d96d86ddd5083d58177398a041d2226e2b11e7ccc812d9794a06ac105ddfa1ac418abb94c13a9894dbc164ccaf44026ca3c27a1ca20fcda2385019f5c262829cb30361f353c2a6585d44cb3d34f2c82fc7ae68dc4698bd1cfbb069e94706ce67c62408b59050760cd62286921a8cd800dc911bd1bc79413b0522f775da75a142985663e59f3c7b16f7bfa103901170137e58b8404fb7f0f4f6b02aa1822f99d9b3bfd3cab23028806cebd499e079447900c0c80c0ca29427055d935f0a28ac95dbd3a38e9e6353eaa91f94e96823f73e5b3f79f84178db5a4d39fbaee0a829b21b5ecae1037f94b25bc9e79ec60a0d78780e9b7b2d4427342e2a4fe26956d50f5a25d601cdce7844a0bb413450da43466b085f2f6d7191036b6612d51d7d5ed5529d6820898f07b7da827f1a2e24d5bfac7eef3f53a9acf13235103d4e55db45194154bab90ea1c1a8a76f9487ddba050db65ddbda122d4733d814a14480a41ab2f7b1f996cba7ac9b87d78f3c8ea623f363d59806d2540d21726e938788af793018d35513951fd3947237015a75b2b55014669f32ee85556a175d706383827063e9ff0fd3a48051869a28dbf46ab8e8eb341b772b7d08420fb67b3ecead7842265328dbe69299408e10d2b2e789d2198a9f61e32c98c9f7651dfdd551ce5bcd2672d03947a1a09d5182178196f3f7db4d6e2bb255135a77e51307f3367fb674ccfa858437e352b1b779f41d17ff40a78bc4310d507584f6ffb5f8ef74fd91a9678da8565d0f36740d8a51219d9f2af9dca150a15e466cd93dedb6fd25bde79a3d604eda223a149537f6aed50cb839039ed6a51f72a1e191ab03c33e085ee28362848422d4077a34badc78567376eecf3caab48a0c6044f1a337a8255eee2ae7aebf0896c2af773fde863f1de799f5534bba357554e1474823be680963ed1265c8c217ca51d946e2aa355482733ba35a2eccc635a890c17c11e0837fe2b2c28f1cf3f9abd79179de64865895cba6be44e33234e54537cdae637586ad3888dc7a7fee84f11fa7afc1b716218de6c1d1ca15deb31fe13896a74d7c23a9b120ddbb8b2128ddf28d93b753b9ace87c7ae8b73595069236cc1a581f4ad90e45c4951c7b2f42df70a4503e06949f51137c3becd8e175f9df285983bdf92931d9c741365897825410f2f8c8a3258c8cf733265f98c8db6c1e597e42bf77e9083bd1b7933974e872ddfaf6824cec3824185b955d9bc1b3f194750ad5aacda185d3d24c415c94cb3e0904281f742251c65a349dc7568dee5c307f90a964feb38d63c2ef1ea49064ee8406a2efff8352efe72de2202c169de1ec7f208abaced6990317466641d0c65d01403d6d03e96fbffe88d6b5e2e28c008e3bae9b50d329e02e6b1fee6db687487a550b6210aa86e122eb4e2c8ee67db7efa50d09e904968511694245b404ee96c4719a1d31665818046a19c8ffa6a8445b0acf936ddef86b95e4bd1f1a6e60ed24c00c9878e20db08827ee1fbbdd027f683aabc54c0469e12f6f39525fa91abd9b7fb5ab05c58ac035c1929e947449e7776b7aeddbbb28b2fcbdb7f34a2e4d035f711b25ccb38500f77c8933576a8248e862e1f63835dbbd21a9f50cdb341800f0caf9086ffbff4f24fedc18f2ad36298475ed55fd2b1f777431cecb37a55810865504c8a003d3b035acc67de549bfe78065984df3c2c15b4ec9b144b4a03971e956b3eb5733255a0ff1d67310f66ac2bd4631d094bc1eceae19608574eb795eaff56b7d118fe1117a13ce6ba8933bec29c1ad2f1088a3eace355106ee96a0cf913697a74f3d9709b0c4b361028a4a873785edac0db4d63adad6e926bcf9527fe5c4d93429c674b4025439a0514f43a614e26e601dff9f364954925dfe30de2217080c62eb7d9250b2f1395f2112c90bf63226f327297f3be1138d2dbfcd524c650b12ce977893953de574ed8850b073df69d92a6095b1dac59c9904629a49f2ed48a0f89ac796e", 0x2000, &(0x7f00000092c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000085c0)={0x78, 0x0, 0x5, {0x8001, 0x9, 0x0, {0x0, 0x8c, 0x4, 0xfffffffffffffff8, 0x3, 0x1, 0xf, 0xffffff8d, 0x6, 0x4000, 0x9, 0xee00, 0x0, 0x400, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.159222708s ago: executing program 1 (id=1013): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x7, 0x0, 0xfffffffe}]}, 0x10) r3 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295a5, 0xfffffffd, 0x0, {0xa, 0x68, 0x42, 0xc8, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5.08855736s ago: executing program 1 (id=1015): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x3, 0xfffffffc, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) syz_usb_connect$midi(0x5, 0x2b, &(0x7f0000000480)=ANY=[@ANYBLOB="12010002000000088c0d0c004000010203010902"], 0x0) write$UHID_INPUT2(r0, &(0x7f0000000080)={0xc, {0x67, ' \x00\x00\x00\x00L'}}, 0xc) (fail_nth: 2) 3.119489064s ago: executing program 3 (id=1029): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0082, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004b2000/0x400000)=nil) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xf0, 0x16, 0x633, 0x0, 0x80000000, {{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0x3, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0x2, 0x4, 0x18}}, 0xf0}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r0, &(0x7f00000004c0)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0xfc0, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0xfac, 0x0, @wg=@data={0x4, 0xffffffff, 0x1, "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"}}}}, 0xfce) 2.119784607s ago: executing program 3 (id=1042): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) sendmmsg(r0, &(0x7f00000019c0)=[{{&(0x7f0000000100)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="f7eee6cad61a230f4a219b88017101e3cc9f13818e2ea22bfde90025c7ef48fccc4141b95a9e563e1727ec14c257319a21b44eb4da765f547c42d0a9c6ff3bf55eec77e2c15613f222a295ac3bf36943d37243", 0x53}], 0x1}}, {{&(0x7f0000000480)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x80, &(0x7f0000001740)=[{0x0}], 0x1}}], 0x2, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 1.549891469s ago: executing program 2 (id=1046): r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xf}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x20004040) 1.549736649s ago: executing program 2 (id=1047): mlockall(0x6) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) mlockall(0x1) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 1.297122436s ago: executing program 4 (id=1051): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000100)={0x800, 0x0, r0}) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000001440)={0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x8c}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x69, 0x14001) ioctl$XFS_IOC_ERROR_INJECTION(r4, 0x40085874, &(0x7f0000000140)={r2, 0xfffffb84}) write$proc_mixer(0xffffffffffffffff, 0x0, 0x4000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}], {0x14}}, 0xc8}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.2934121s ago: executing program 3 (id=1052): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x280, 0x1e0, 0x3014, 0x1, 0x8, 0x0, 0x2}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) sendto$inet(r1, &(0x7f0000000080)="e00c", 0x2, 0x4005, 0x0, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) bind$unix(r4, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r5 = syz_open_dev$video(&(0x7f0000000200), 0x4, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000300)={0x1, @pix={0x280, 0x1e0, 0x42474752, 0x1, 0x280, 0x4b000, 0x8}}) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000500)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000600)=0x1) (fail_nth: 11) 1.209676214s ago: executing program 4 (id=1053): syz_clone3(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x80800) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) bind$inet(r2, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x0, [0x4, 0x5, 0xee41]}, &(0x7f00000000c0)=0x44) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) 1.209459643s ago: executing program 4 (id=1054): keyctl$instantiate(0xc, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='load ecryptfs user:trust000000000000064 '], 0x32, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x800, 0x0, {0x9, 0x0, 0x80, 0x0, {0x0, 0x4e22, [], [], 0x0, [0x1]}, 0x0, 0x100000}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x1, &(0x7f0000000000)=0x5, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x52, 0x109, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) connect$netlink(r2, &(0x7f0000000100)=@unspec, 0xc) getsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0xfffffffffffffffd, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2686dd60011c4e00083a"], 0x0) 1.109570191s ago: executing program 4 (id=1055): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x4002) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.009946188s ago: executing program 2 (id=1056): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176673d72656c61746901653a38302d3919"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = getpid() r2 = getpgrp(r1) tgkill(r1, r2, 0x19) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000004000000000000000000000000000000000000f800272c812ac1bb2ad4c36768df74afff2a9d51205cd0f465f5e4a753c863296dff1547f3a67c527204700e8416271345abf9513cb855c543d6b50c5418f8e6f62222c919c3998e689d3e58945e8ef3c236fa6d110cef4556c718e188187c38b669ee1cbf07cfc51fbcb3834de50ba4271f7f2482c47809c01c626409cb6209bd4789aacf8a2d88d2c84ca8fe9be6989ad62c9c01552ead058bec4c45c98fdf989b2d61d71a7a4ca8734ee02ff21527de2331c1f2889f66eab8a7be0b10385f20bce69938582bd93d2583ae7cbac37178fa91d9160e0791f721454a0771971dfbe11a82dc1f17bb0e681bcb869f6e9e74d942633a7fdd9a02216c094e30470092f80bd616e799a1900826"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c000280050001000000000014000180ba67fb39ee57cb710d81ed75c2e708000100e000000208000200e000000208000740000000001000"], 0x74}}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') write$binfmt_script(r5, 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) connect$unix(r6, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x7, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @alu={0x7, 0x1, 0xb, 0x2, 0xa, 0xffffffffffffffff}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @ldst={0x1, 0x0, 0x3, 0x1}, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="53c27c180ac600000000000086dd606410a600082f00fc020000000000000000000008000000000000000000000000000000000000aa841f000011000000"], 0x0) syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00') r7 = syz_open_procfs$namespace(0x0, &(0x7f0000003380)='ns/cgroup\x00') ioctl$COMEDI_CMDTEST(r7, 0x8050640a, 0x0) 1.009573221s ago: executing program 2 (id=1057): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x20004000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000200)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000440)={0x3, 0x4566, 0x2, 0x73b6, 0x4}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323bac0c45b45602067fffffff81004e22030d00ff00289242a8002000eaa57b00090080020e1b05000000000000ff0004f0c70f000800ffffffffffffffffff0300e7ee0000000000000000020000", 0x58}], 0x1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x130, 0x5c, 0x160, 0x0, 0x3e0, 0x1f8, 0x228, 0x25a, 0x1f8, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0x100, 0x130, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d174", 0x1}}, @common=@srh={{0x30}, {0x4, 0x4, 0x2, 0xb, 0x1, 0x4015, 0x1005}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x80000000, 0x4, 0x5, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r7 = syz_open_dev$mtd(&(0x7f0000000280), 0x1000, 0xdbf5737a02495776) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r7, 0xc0096616, &(0x7f00000002c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_emit_ethernet(0x3e, &(0x7f0000000900)=ANY=[@ANYBLOB="0180c2000000001100000000cd05883300000000000000000100000e22000894780000000000000793715875370c440000"], 0x0) 898.851733ms ago: executing program 2 (id=1058): sched_setscheduler(0x0, 0x2, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x100000, 0x1800, 0x1}, 0x20) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x3d) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$inet6_sctp(0xa, 0x3, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r6, 0x81, 0x3}, 0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000000c0)={r6, 0x1}, &(0x7f0000000240)=0x8) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(r7, r8, 0x0) r9 = accept(r1, 0x0, 0x0) r10 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008840}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r9, {0x2}}, './file0\x00'}) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r12) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, r13, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x30}, 0x1, 0x900}, 0x0) 379.215047ms ago: executing program 3 (id=1059): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x4c, 0x0, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x5, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0xa, 0x1, 0x0, r1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0x1}, {0x16, 0x4, 0x6}]}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x64848}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x0, 0x2, 0x0, 0x1, @void}}}, @IFLA_IFNAME={0x14, 0x3, 'pim6reg1\x00'}]}, 0x48}}, 0x840) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x17, &(0x7f00000000c0)=0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) 307.317033ms ago: executing program 3 (id=1060): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x0, 0xc}, {0xfff1, 0xffff}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000140)={0x2, 0x1, 0x6, 0x0, 0x7fff}) 237.652676ms ago: executing program 3 (id=1061): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r0, 0x5452, &(0x7f0000000000)={0x2, 0x0, 0x5, 0x0, 0x36, 0x7f}) 236.931446ms ago: executing program 4 (id=1062): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10400006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x2, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0xffe, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x4, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x1, 0x9, 0x2, 0x7fffffff, 0x4, 0xff7ffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x4, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13ffd, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80a80, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff01"], 0x1a4}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r9, 0x4008ae9c, 0x0) epoll_create1(0x0) socket$inet_tcp(0x2, 0x1, 0x0) 59.923312ms ago: executing program 2 (id=1063): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x280, 0x1e0, 0x3014, 0x1, 0x8, 0x0, 0x2}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) sendto$inet(r1, &(0x7f0000000080)="e00c", 0x2, 0x4005, 0x0, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) bind$unix(r4, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x9, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x29, 0x40, 0x6, 0x0, 0x8000000bdb], 0xd000, 0x43102}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000480)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x7, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x6, 0x9, 0x3, 0x3ff, 0x7], 0xeeee8000, 0x2c2}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x4000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x10, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x54000, 0x58000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xb000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xeeee0000, 0x9, 0xa0, 0x4, 0x8, 0x5, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0x26000, 0x4, 0x5, 0xf3, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x9, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcb, 0x7, 0x1, 0x9, 0x2, 0x19, 0xb0, 0x9}, {0x25000, 0x30}, {0x2, 0x7}, 0x10000, 0x0, 0x0, 0x2024, 0x0, 0x4400, 0x8080000, [0x9, 0x100000000000202, 0x1000, 0xb]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_open_dev$video(&(0x7f0000000200), 0x4, 0x2) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000300)={0x1, @pix={0x280, 0x1e0, 0x42474752, 0x1, 0x280, 0x4b000, 0x8}}) ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000000500)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r8, 0x40045612, &(0x7f0000000600)=0x1) 0s ago: executing program 4 (id=1064): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000600)={0x0, 0x9}, &(0x7f0000000740)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000780)=@assoc_value={r1}, 0x8) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000200)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000002c0)={0x0, 0x0, 0x0}) r4 = syz_open_dev$mtd(&(0x7f00000004c0), 0x7, 0x200000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r0) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, r6, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10000000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x21d}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x54800}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040004}, 0x80) ioctl$MEMWRITE(r4, 0xc0304d18, &(0x7f0000000700)={0x5, 0xee, 0x7a, &(0x7f0000000500)="214e3793bdf4015d37e8697fd72aa4f178903a77ab1a8b6cf7a5d43c66661c93c493ec2e2f21cdc9bca6d090900e0e508c9d10c0c75d1b694a74f4ae4d0fe2b0f55ee4b8fd2fb558ce73fba1b4ee905ed4c7489290adc82cf5b4ed6ab3b7baa2ae500ae878b69e4fd266858c91ddcbd479d8e5375877848a3704a158cc7d33c1f92865107e3f945acfa9a43cb0c9ff1aefe790dc7593948b0f96d4700f884c7637311d0bb46875ee002cf38725e504c8c4feba168c9ef92fe7414b7bfde5d995a8483eaa1e279f3cf6955278b63fcb87eb89e8c98313b2eb3c2a02fdf16f717bb3143544626bfabaf578a2c7283f", &(0x7f0000000680)="1c06c5c3d97c4256e00c6c71e1870f4af26e89762940090fd81c3e48546f9eaea1266cb1cd955ea0eca7e61733d5c60c54345615285401ec431cd22d241ffcf252eeb6395d8aebbc962f30dbed75449b364d419f9b7a6a35f84fa9a8c7b4fcacea7d373ac96e7b5562c32e5536428005cb8f239ef082d0ca6b21", 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x9, 0x1, 0xa}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000480)={r2, r3, r7, 0x0, 0x0, 0xa, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r9, r9, 0x2f, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={r10, r9, 0x4, r9}, 0x10) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000100)=0x1) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f0000000180)=@multiplanar_mmap={0xffff2c9a, 0x2, 0x4, 0x40, 0x1, {}, {0x1, 0x8, 0x6d, 0x6, 0x3, 0x80, "148f5e20"}, 0x3, 0x1, {&(0x7f0000000040)=[{0x8, 0x2, {0x3}, 0x5}, {0x9, 0x8000, {0xe}, 0x800}]}, 0x7, 0x0, r11}) kernel console output (not intermixed with test programs): 0/0x10 [ 135.468594][ T8107] ip_vs_in_hook+0x9f2/0x2840 [ 135.468613][ T8107] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 135.468628][ T8107] ? __pfx_ip_vs_out_hook+0x10/0x10 [ 135.468657][ T8107] nf_hook_slow+0xbf/0x220 [ 135.468676][ T8107] __ip_local_out+0x541/0xb80 [ 135.468689][ T8107] ? __pfx___ip_local_out+0x10/0x10 [ 135.468700][ T8107] ? ip_make_skb+0x1f4/0x310 [ 135.468713][ T8107] ? __pfx_dst_output+0x10/0x10 [ 135.468724][ T8107] ? __pfx_ip_make_skb+0x10/0x10 [ 135.468736][ T8107] ? csum_tcpudp_nofold+0x24/0x50 [ 135.468754][ T8107] ip_send_skb+0x4a/0x2a0 [ 135.468767][ T8107] udp_send_skb+0xa38/0xfc0 [ 135.468789][ T8107] udp_sendmsg+0x1760/0x2710 [ 135.468802][ T8107] ? __pfx_udp_sendmsg+0x10/0x10 [ 135.468814][ T8107] ? vsnprintf+0x4c5/0x1300 [ 135.468827][ T8107] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 135.468844][ T8107] ? down_write+0x146/0x1f0 [ 135.468868][ T8107] udpv6_sendmsg+0x1420/0x2c20 [ 135.468882][ T8107] ? find_held_lock+0x2b/0x80 [ 135.468900][ T8107] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 135.468913][ T8107] ? do_raw_spin_lock+0x128/0x260 [ 135.468940][ T8107] ? __local_bh_enable_ip+0xa5/0x120 [ 135.468957][ T8107] ? lockdep_hardirqs_on+0x7d/0x110 [ 135.468969][ T8107] ? inet_autobind+0x145/0x1a0 [ 135.468980][ T8107] ? __local_bh_enable_ip+0xa5/0x120 [ 135.468997][ T8107] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 135.469012][ T8107] ? inet6_sendmsg+0x105/0x140 [ 135.469025][ T8107] inet6_sendmsg+0x105/0x140 [ 135.469040][ T8107] ____sys_sendmsg+0x704/0xbe0 [ 135.469057][ T8107] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.469076][ T8107] ___sys_sendmsg+0x190/0x1e0 [ 135.469092][ T8107] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.469106][ T8107] ? get_pid_task+0x106/0x250 [ 135.469125][ T8107] ? find_held_lock+0x2b/0x80 [ 135.469145][ T8107] __sys_sendmsg+0x160/0x210 [ 135.469157][ T8107] ? __pfx___sys_sendmsg+0x10/0x10 [ 135.469175][ T8107] do_syscall_64+0x123/0x790 [ 135.469188][ T8107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.469201][ T8107] RIP: 0033:0x7f123099e0d9 [ 135.469211][ T8107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.469222][ T8107] RSP: 002b:00007f1231830028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.469233][ T8107] RAX: ffffffffffffffda RBX: 00007f1230c25fa0 RCX: 00007f123099e0d9 [ 135.469240][ T8107] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 135.469247][ T8107] RBP: 00007f1231830090 R08: 0000000000000000 R09: 0000000000000000 [ 135.469253][ T8107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 135.469259][ T8107] R13: 00007f1230c26038 R14: 00007f1230c25fa0 R15: 00007ffe854b42a8 [ 135.469273][ T8107] [ 135.469280][ T8107] IPVS: ip_vs_conn_new(): no memory [ 135.636302][ T42] audit: type=1400 audit(1787320823.566:572): avc: denied { create } for pid=8109 comm="syz.2.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 135.646178][ T8110] e1000e 0000:00:02.0 eth1: S0ix is not supported on this device [ 135.704635][ T8112] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 135.772374][ T5670] tipc: Node number set to 4294246401 [ 135.799146][ T8116] xt_ecn: cannot match TCP bits for non-tcp packets [ 135.800827][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.808'. [ 135.803718][ T42] audit: type=1400 audit(1787320823.736:573): avc: denied { bpf } for pid=8114 comm="syz.4.807" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 135.805217][ T8116] netlink: 40 bytes leftover after parsing attributes in process `syz.4.807'. [ 135.917150][ T8123] syzkaller1: entered promiscuous mode [ 135.919508][ T8123] syzkaller1: entered allmulticast mode [ 136.059156][ T8123] SELinux: failed to load policy [ 136.064047][ T62] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 136.151730][ T42] audit: type=1400 audit(1787320824.076:574): avc: denied { setopt } for pid=8124 comm="syz.3.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.212277][ T62] usb 9-1: Using ep0 maxpacket: 32 [ 136.214461][ T62] usb 9-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 136.218320][ T62] usb 9-1: config 0 has an invalid interface number: 119 but max is 0 [ 136.221002][ T62] usb 9-1: config 0 has no interface number 0 [ 136.223947][ T62] usb 9-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 136.227710][ T62] usb 9-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 136.231362][ T62] usb 9-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 136.236076][ T62] usb 9-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.243572][ T62] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.249191][ T62] usb 9-1: Product: syz [ 136.250998][ T62] usb 9-1: Manufacturer: syz [ 136.253183][ T62] usb 9-1: SerialNumber: syz [ 136.258209][ T62] usb 9-1: config 0 descriptor?? [ 136.264385][ T62] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.119/input/input53 [ 136.271492][ C0] bcm5974 9-1:0.119: trackpad urb failed: -1 [ 136.392297][ T1347] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 136.467255][ T62] usb 9-1: USB disconnect, device number 12 [ 136.553523][ T1347] usb 6-1: Using ep0 maxpacket: 8 [ 136.555814][ T1347] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 136.560088][ T1347] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 136.563646][ T1347] usb 6-1: config 179 has no interface number 0 [ 136.566210][ T1347] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 136.570680][ T1347] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 136.578986][ T1347] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 136.584477][ T1347] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 136.587398][ T8141] netlink: 164 bytes leftover after parsing attributes in process `syz.2.816'. [ 136.589263][ T1347] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 136.596980][ T1347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.601973][ T8131] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 136.635898][ T8143] FAULT_INJECTION: forcing a failure. [ 136.635898][ T8143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.640708][ T8143] CPU: 0 UID: 0 PID: 8143 Comm: syz.2.818 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.640728][ T8143] Tainted: [L]=SOFTLOCKUP [ 136.640732][ T8143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.640739][ T8143] Call Trace: [ 136.640745][ T8143] [ 136.640750][ T8143] dump_stack_lvl+0x100/0x190 [ 136.640776][ T8143] should_fail_ex.cold+0x5/0xa [ 136.640792][ T8143] strncpy_from_user+0x3b/0x2d0 [ 136.640807][ T8143] bpf_prog_load+0x14dc/0x2a80 [ 136.640840][ T8143] ? __pfx_bpf_prog_load+0x10/0x10 [ 136.640863][ T8143] __sys_bpf+0x1f46/0x4a30 [ 136.640881][ T8143] ? __pfx___sys_bpf+0x10/0x10 [ 136.640897][ T8143] ? find_held_lock+0x2b/0x80 [ 136.640910][ T8143] ? get_pid_task+0xfc/0x250 [ 136.640924][ T8143] ? get_pid_task+0xfc/0x250 [ 136.640940][ T8143] ? find_held_lock+0x2b/0x80 [ 136.640956][ T8143] ? rcu_read_lock_any_held+0x6a/0x90 [ 136.640970][ T8143] ? find_held_lock+0x2b/0x80 [ 136.640983][ T8143] ? ksys_write+0x190/0x250 [ 136.640997][ T8143] ? ksys_write+0x190/0x250 [ 136.641020][ T8143] ? fput+0x7c/0x100 [ 136.641037][ T8143] ? ksys_write+0x1ac/0x250 [ 136.641052][ T8143] ? __x64_sys_bpf+0xce/0x140 [ 136.641066][ T8143] __x64_sys_bpf+0xce/0x140 [ 136.641082][ T8143] ? do_syscall_64+0xae/0x790 [ 136.641096][ T8143] do_syscall_64+0x123/0x790 [ 136.641109][ T8143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.641121][ T8143] RIP: 0033:0x7f123099e0d9 [ 136.641132][ T8143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.641144][ T8143] RSP: 002b:00007f1231830028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 136.641156][ T8143] RAX: ffffffffffffffda RBX: 00007f1230c25fa0 RCX: 00007f123099e0d9 [ 136.641163][ T8143] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 136.641170][ T8143] RBP: 00007f1231830090 R08: 0000000000000000 R09: 0000000000000000 [ 136.641177][ T8143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 136.641184][ T8143] R13: 00007f1230c26038 R14: 00007f1230c25fa0 R15: 00007ffe854b42a8 [ 136.641197][ T8143] [ 136.694586][ T8145] FAULT_INJECTION: forcing a failure. [ 136.694586][ T8145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.724860][ T8145] CPU: 0 UID: 0 PID: 8145 Comm: syz.3.819 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.724889][ T8145] Tainted: [L]=SOFTLOCKUP [ 136.724894][ T8145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.724904][ T8145] Call Trace: [ 136.724912][ T8145] [ 136.724919][ T8145] dump_stack_lvl+0x100/0x190 [ 136.724950][ T8145] should_fail_ex.cold+0x5/0xa [ 136.724974][ T8145] _copy_from_user+0x2e/0xd0 [ 136.725001][ T8145] bpf_prog_load+0x1490/0x2a80 [ 136.725024][ T8145] ? __pfx_bpf_prog_load+0x10/0x10 [ 136.725057][ T8145] __sys_bpf+0x1f46/0x4a30 [ 136.725084][ T8145] ? __pfx___sys_bpf+0x10/0x10 [ 136.725104][ T8145] ? find_held_lock+0x2b/0x80 [ 136.725124][ T8145] ? get_pid_task+0xfc/0x250 [ 136.725142][ T8145] ? get_pid_task+0xfc/0x250 [ 136.725166][ T8145] ? find_held_lock+0x2b/0x80 [ 136.725189][ T8145] ? rcu_read_lock_any_held+0x6a/0x90 [ 136.725209][ T8145] ? find_held_lock+0x2b/0x80 [ 136.725227][ T8145] ? ksys_write+0x190/0x250 [ 136.725248][ T8145] ? ksys_write+0x190/0x250 [ 136.725292][ T8145] ? fput+0x7c/0x100 [ 136.725316][ T8145] ? ksys_write+0x1ac/0x250 [ 136.725338][ T8145] ? __x64_sys_bpf+0xce/0x140 [ 136.725358][ T8145] __x64_sys_bpf+0xce/0x140 [ 136.725380][ T8145] ? do_syscall_64+0xae/0x790 [ 136.725400][ T8145] do_syscall_64+0x123/0x790 [ 136.725419][ T8145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.725437][ T8145] RIP: 0033:0x7fd1ad59e0d9 [ 136.725452][ T8145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.725467][ T8145] RSP: 002b:00007fd1ae439028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 136.725485][ T8145] RAX: ffffffffffffffda RBX: 00007fd1ad825fa0 RCX: 00007fd1ad59e0d9 [ 136.725495][ T8145] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 136.725505][ T8145] RBP: 00007fd1ae439090 R08: 0000000000000000 R09: 0000000000000000 [ 136.725514][ T8145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 136.725524][ T8145] R13: 00007fd1ad826038 R14: 00007fd1ad825fa0 R15: 00007ffcb7bd1838 [ 136.725545][ T8145] [ 136.822927][ T62] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input54 [ 136.895383][ T8156] netlink: 112 bytes leftover after parsing attributes in process `syz.2.824'. [ 137.013185][ T5670] usb 6-1: USB disconnect, device number 14 [ 137.013193][ C2] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 137.018237][ C2] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 137.263169][ T8178] deleting an unspecified loop device is not supported. [ 137.266286][ T8178] netlink: 60 bytes leftover after parsing attributes in process `syz.3.834'. [ 137.270935][ T8178] netlink: 60 bytes leftover after parsing attributes in process `syz.3.834'. [ 137.275138][ T8178] netlink: 'syz.3.834': attribute type 32 has an invalid length. [ 137.350529][ T8181] FAULT_INJECTION: forcing a failure. [ 137.350529][ T8181] name failslab, interval 1, probability 0, space 0, times 0 [ 137.357472][ T8181] CPU: 3 UID: 0 PID: 8181 Comm: syz.3.835 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.357497][ T8181] Tainted: [L]=SOFTLOCKUP [ 137.357501][ T8181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.357508][ T8181] Call Trace: [ 137.357513][ T8181] [ 137.357518][ T8181] dump_stack_lvl+0x100/0x190 [ 137.357541][ T8181] should_fail_ex.cold+0x5/0xa [ 137.357558][ T8181] should_failslab+0xc2/0x120 [ 137.357576][ T8181] kmem_cache_alloc_noprof+0x91/0x6a0 [ 137.357594][ T8181] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 137.357622][ T8181] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 137.357642][ T8181] mmu_topup_memory_caches+0x25/0x170 [ 137.357669][ T8181] kvm_mmu_load+0xe2/0x2570 [ 137.357688][ T8181] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 137.357703][ T8181] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 137.357718][ T8181] ? __pfx_kvm_mmu_load+0x10/0x10 [ 137.357735][ T8181] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 137.357751][ T8181] ? kvm_check_and_inject_events+0x873/0x12a0 [ 137.357770][ T8181] ? record_steal_time+0x3f0/0xbb0 [ 137.357786][ T8181] vcpu_run+0x3ab0/0x5df0 [ 137.357801][ T8181] ? trace_event_buffer_commit+0x20a/0xa80 [ 137.357827][ T8181] ? __pfx_vcpu_run+0x10/0x10 [ 137.357851][ T8181] ? rcu_is_watching+0x13/0xc0 [ 137.357873][ T8181] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 137.357884][ T8181] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 137.357906][ T8181] kvm_vcpu_ioctl+0x730/0x1700 [ 137.357929][ T8181] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 137.357952][ T8181] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.357979][ T8181] ? do_vfs_ioctl+0x226/0x13e0 [ 137.357999][ T8181] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 137.358017][ T8181] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 137.358047][ T8181] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 137.358084][ T8181] ? selinux_file_ioctl+0x13b/0x290 [ 137.358130][ T8181] ? selinux_file_ioctl+0xb6/0x290 [ 137.358156][ T8181] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 137.358191][ T8181] __x64_sys_ioctl+0x18e/0x210 [ 137.358215][ T8181] do_syscall_64+0x123/0x790 [ 137.358239][ T8181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.358264][ T8181] RIP: 0033:0x7fd1ad59e0d9 [ 137.358281][ T8181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.358297][ T8181] RSP: 002b:00007fd1ae439028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 137.358316][ T8181] RAX: ffffffffffffffda RBX: 00007fd1ad825fa0 RCX: 00007fd1ad59e0d9 [ 137.358326][ T8181] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 137.358335][ T8181] RBP: 00007fd1ae439090 R08: 0000000000000000 R09: 0000000000000000 [ 137.358343][ T8181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 137.358352][ T8181] R13: 00007fd1ad826038 R14: 00007fd1ad825fa0 R15: 00007ffcb7bd1838 [ 137.358375][ T8181] [ 137.651093][ T8190] program syz.1.838 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.664808][ T8192] FAULT_INJECTION: forcing a failure. [ 137.664808][ T8192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.670875][ T8192] CPU: 2 UID: 0 PID: 8192 Comm: syz.3.839 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.670903][ T8192] Tainted: [L]=SOFTLOCKUP [ 137.670910][ T8192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.670920][ T8192] Call Trace: [ 137.670927][ T8192] [ 137.670935][ T8192] dump_stack_lvl+0x100/0x190 [ 137.670965][ T8192] should_fail_ex.cold+0x5/0xa [ 137.670989][ T8192] _copy_from_iter+0x1f4/0x1690 [ 137.671012][ T8192] ? __pfx__copy_from_iter+0x10/0x10 [ 137.671029][ T8192] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 137.671065][ T8192] copy_page_from_iter+0x238/0x300 [ 137.671082][ T8192] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 137.671141][ T8192] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 137.671159][ T8192] ? unwind_get_return_address+0x59/0xa0 [ 137.671178][ T8192] ? arch_stack_walk+0xa6/0xf0 [ 137.671209][ T8192] ? _kstrtoull+0x13c/0x1f0 [ 137.671240][ T8192] ? __pfx__kstrtoull+0x10/0x10 [ 137.671258][ T8192] tun_get_user+0x1674/0x3cc0 [ 137.671284][ T8192] ? __pfx_tun_get_user+0x10/0x10 [ 137.671317][ T8192] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 137.671345][ T8192] ? find_held_lock+0x2b/0x80 [ 137.671360][ T8192] ? tun_get+0x191/0x370 [ 137.671378][ T8192] ? tun_get+0x191/0x370 [ 137.671398][ T8192] tun_chr_write_iter+0xdc/0x200 [ 137.671411][ T8192] vfs_write+0x6af/0x1050 [ 137.671427][ T8192] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 137.671440][ T8192] ? __pfx_vfs_write+0x10/0x10 [ 137.671453][ T8192] ? find_held_lock+0x2b/0x80 [ 137.671474][ T8192] ksys_write+0x12a/0x250 [ 137.671488][ T8192] ? __pfx_ksys_write+0x10/0x10 [ 137.671506][ T8192] do_syscall_64+0x123/0x790 [ 137.671521][ T8192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.671534][ T8192] RIP: 0033:0x7fd1ad55e90e [ 137.671544][ T8192] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 137.671555][ T8192] RSP: 002b:00007fd1ae438fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 137.671567][ T8192] RAX: ffffffffffffffda RBX: 00007fd1ae4396c0 RCX: 00007fd1ad55e90e [ 137.671575][ T8192] RDX: 000000000000004a RSI: 0000200000000000 RDI: 00000000000000c8 [ 137.671581][ T8192] RBP: 00007fd1ae439090 R08: 0000000000000000 R09: 0000000000000000 [ 137.671588][ T8192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.671595][ T8192] R13: 00007fd1ad826038 R14: 00007fd1ad825fa0 R15: 00007ffcb7bd1838 [ 137.671609][ T8192] [ 137.798276][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 137.798289][ T42] audit: type=1400 audit(1787320825.726:580): avc: denied { map } for pid=8195 comm="syz.3.841" path="/dev/tty2" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 137.839403][ T8198] syzkaller0: entered promiscuous mode [ 137.841204][ T8198] syzkaller0: entered allmulticast mode [ 137.884790][ T42] audit: type=1400 audit(1787320825.816:581): avc: denied { read write } for pid=8200 comm="syz.1.843" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 137.903180][ T42] audit: type=1400 audit(1787320825.816:582): avc: denied { open } for pid=8200 comm="syz.1.843" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 137.992523][ T42] audit: type=1400 audit(1787320825.916:583): avc: denied { ioctl } for pid=8204 comm="syz.3.845" path="socket:[22452]" dev="sockfs" ino=22452 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 138.227835][ T8221] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 138.232978][ T8221] bond1: (slave sit1): Error -95 calling set_mac_address [ 138.616410][ T1129] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 138.623030][ T1129] ata1.00: configured for UDMA/100 [ 138.772104][ T42] audit: type=1400 audit(1787320826.696:584): avc: denied { read append } for pid=8227 comm="syz.2.853" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 138.773784][ T5723] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 138.780539][ T42] audit: type=1400 audit(1787320826.696:585): avc: denied { open } for pid=8227 comm="syz.2.853" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 138.784206][ T5723] CPU: 2 UID: 0 PID: 5723 Comm: kworker/u34:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.784235][ T5723] Tainted: [L]=SOFTLOCKUP [ 138.784241][ T5723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.784253][ T5723] Workqueue: hci3 hci_rx_work [ 138.784317][ T5723] Call Trace: [ 138.784324][ T5723] [ 138.784331][ T5723] dump_stack_lvl+0x100/0x190 [ 138.784361][ T5723] sysfs_warn_dup.cold+0x1c/0x28 [ 138.784387][ T5723] sysfs_create_dir_ns+0x24b/0x2b0 [ 138.784413][ T5723] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 138.784443][ T5723] ? find_held_lock+0x2b/0x80 [ 138.784464][ T5723] ? kobject_add_internal+0x25f/0x930 [ 138.784499][ T5723] ? kobject_add_internal+0x25f/0x930 [ 138.784524][ T5723] ? do_raw_spin_unlock+0x145/0x1e0 [ 138.784557][ T5723] kobject_add_internal+0x2c8/0x930 [ 138.784588][ T5723] kobject_add+0x16a/0x1e0 [ 138.784618][ T5723] ? __pfx_kobject_add+0x10/0x10 [ 138.784642][ T5723] ? class_to_subsys+0x10f/0x150 [ 138.784681][ T5723] ? kobject_put+0xb9/0x640 [ 138.784703][ T5723] ? _raw_spin_unlock+0x28/0x50 [ 138.784744][ T5723] device_add+0x294/0x1970 [ 138.784776][ T5723] ? __pfx_dev_set_name+0x10/0x10 [ 138.784804][ T5723] ? __pfx_device_add+0x10/0x10 [ 138.784834][ T5723] ? mgmt_send_event_skb+0x2fb/0x460 [ 138.784879][ T5723] hci_conn_add_sysfs+0x1a3/0x260 [ 138.784904][ T5723] le_conn_complete_evt+0x121b/0x2120 [ 138.784949][ T5723] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 138.784980][ T5723] ? hci_event_packet+0x186/0xcd0 [ 138.785005][ T5723] ? hci_event_packet+0x186/0xcd0 [ 138.785045][ T5723] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 138.785083][ T5723] ? skb_pull_data+0x15f/0x1e0 [ 138.785111][ T5723] hci_le_meta_evt+0x34a/0x5f0 [ 138.785138][ T5723] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 138.785170][ T5723] hci_event_packet+0x51c/0xcd0 [ 138.785206][ T5723] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 138.785226][ T5723] ? __pfx_hci_event_packet+0x10/0x10 [ 138.785262][ T5723] ? kcov_remote_start+0x387/0x670 [ 138.785294][ T5723] ? lockdep_hardirqs_on+0x7d/0x110 [ 138.785320][ T5723] hci_rx_work+0x451/0xfc0 [ 138.785377][ T5723] process_one_work+0xac7/0x1b10 [ 138.785422][ T5723] ? __pfx_process_one_work+0x10/0x10 [ 138.785467][ T5723] ? __pfx_hci_rx_work+0x10/0x10 [ 138.785503][ T5723] worker_thread+0x5ef/0xe50 [ 138.785543][ T5723] ? __pfx_worker_thread+0x10/0x10 [ 138.785570][ T5723] ? kthread+0x13a/0x450 [ 138.785596][ T5723] ? __pfx_worker_thread+0x10/0x10 [ 138.785620][ T5723] kthread+0x373/0x450 [ 138.785647][ T5723] ? __pfx_kthread+0x10/0x10 [ 138.785672][ T5723] ret_from_fork+0x730/0xd60 [ 138.785711][ T5723] ? __pfx_ret_from_fork+0x10/0x10 [ 138.785746][ T5723] ? __switch_to+0x800/0x10f0 [ 138.785770][ T5723] ? __pfx_kthread+0x10/0x10 [ 138.785799][ T5723] ret_from_fork_asm+0x1a/0x30 [ 138.785832][ T5723] [ 138.785947][ T5723] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 138.904947][ T5723] Bluetooth: hci3: failed to register connection device [ 138.924240][ T8228] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 138.927638][ T8228] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 138.941521][ T8228] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 138.947374][ T8228] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 138.949850][ T8228] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 138.953566][ T8228] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 138.957058][ T8228] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 138.959067][ T8228] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 138.964943][ T8228] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 138.968936][ T8228] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 138.970813][ T8228] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 138.973988][ T8228] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 138.977203][ T8228] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 138.980383][ T8228] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 138.982423][ T8228] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 138.988127][ T8228] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 139.002363][ T8228] __nla_validate_parse: 3 callbacks suppressed [ 139.002376][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.853'. [ 139.069147][ T8236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.072284][ T8236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.078163][ T8236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.082256][ T8236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.147778][ T8241] mqueue: Unknown parameter 'aclâáöc±†©Òq' [ 139.276898][ T42] audit: type=1400 audit(1787320827.206:586): avc: denied { sqpoll } for pid=8242 comm="syz.2.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 139.315804][ T42] audit: type=1400 audit(1787320827.246:587): avc: denied { ioctl } for pid=8246 comm="syz.1.858" path="socket:[25157]" dev="sockfs" ino=25157 ioctlcmd=0x5838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 139.327586][ T42] audit: type=1400 audit(1787320827.256:588): avc: denied { bind } for pid=8246 comm="syz.1.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 139.336834][ T42] audit: type=1400 audit(1787320827.266:589): avc: denied { read } for pid=8246 comm="syz.1.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 139.347228][ T8251] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 139.387725][ T8254] tipc: Enabling of bearer rejected, already enabled [ 139.427924][ T8257] FAULT_INJECTION: forcing a failure. [ 139.427924][ T8257] name failslab, interval 1, probability 0, space 0, times 0 [ 139.433312][ T8257] CPU: 3 UID: 0 PID: 8257 Comm: syz.4.861 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.433331][ T8257] Tainted: [L]=SOFTLOCKUP [ 139.433336][ T8257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.433343][ T8257] Call Trace: [ 139.433348][ T8257] [ 139.433353][ T8257] dump_stack_lvl+0x100/0x190 [ 139.433380][ T8257] should_fail_ex.cold+0x5/0xa [ 139.433403][ T8257] should_failslab+0xc2/0x120 [ 139.433429][ T8257] kmem_cache_alloc_noprof+0x91/0x6a0 [ 139.433456][ T8257] ? nf_ct_expect_alloc+0x21/0x130 [ 139.433485][ T8257] nf_ct_expect_alloc+0x21/0x130 [ 139.433508][ T8257] ip_vs_nfct_expect_related+0x92/0x230 [ 139.433535][ T8257] ? __pfx_ip_vs_nfct_expect_related+0x10/0x10 [ 139.433552][ T8257] ? __nf_nat_mangle_tcp_packet+0x2c3/0x4c0 [ 139.433572][ T8257] ip_vs_ftp_out+0xabf/0x11b0 [ 139.433587][ T8257] ? __pfx_ip_vs_ftp_out+0x10/0x10 [ 139.433597][ T8257] ? enqueue_to_backlog+0x325/0x1130 [ 139.433623][ T8257] ? __pfx_ip_vs_ftp_out+0x10/0x10 [ 139.433633][ T8257] ? ip_vs_app_pkt_out+0x35b/0x930 [ 139.433650][ T8257] ip_vs_app_pkt_out+0x35b/0x930 [ 139.433668][ T8257] ? __pfx_ip_vs_app_pkt_out+0x10/0x10 [ 139.433688][ T8257] ? skb_ensure_writable+0xf5/0x480 [ 139.433703][ T8257] tcp_snat_handler+0x545/0x14d0 [ 139.433719][ T8257] ? __pfx_tcp_snat_handler+0x10/0x10 [ 139.433732][ T8257] ? ip_vs_conn_out_get_proto+0x2db/0x400 [ 139.433749][ T8257] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 139.433766][ T8257] ? skb_ensure_writable+0xf5/0x480 [ 139.433780][ T8257] handle_response+0x4c1/0xdb0 [ 139.433796][ T8257] ? __pfx_tcp_snat_handler+0x10/0x10 [ 139.433812][ T8257] ip_vs_out_hook+0x795/0x1de0 [ 139.433831][ T8257] ? __pfx_ip_vs_out_hook+0x10/0x10 [ 139.433852][ T8257] ? __pfx_ipt_do_table+0x10/0x10 [ 139.433867][ T8257] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 139.433886][ T8257] ? nf_nat_inet_fn+0x530/0xb50 [ 139.433902][ T8257] ? nf_nat_ipv4_local_fn+0xb2/0x5a0 [ 139.433918][ T8257] nf_hook_slow+0xbf/0x220 [ 139.433937][ T8257] __ip_local_out+0x541/0xb80 [ 139.433951][ T8257] ? __pfx___ip_local_out+0x10/0x10 [ 139.433965][ T8257] ? __pfx_dst_output+0x10/0x10 [ 139.433976][ T8257] ? find_held_lock+0x2b/0x80 [ 139.433990][ T8257] ? ip4_dst_hoplimit+0x1a9/0x400 [ 139.434003][ T8257] ip_local_out+0x2a/0x1f0 [ 139.434016][ T8257] __ip_queue_xmit+0x885/0x1f40 [ 139.434030][ T8257] ? __pfx_ip_queue_xmit+0x10/0x10 [ 139.434042][ T8257] __tcp_transmit_skb+0x3506/0x4f20 [ 139.434066][ T8257] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 139.434112][ T8257] ? ktime_get+0x22c/0x320 [ 139.434130][ T8257] ? lockdep_hardirqs_on+0x7d/0x110 [ 139.434146][ T8257] tcp_write_xmit+0x1130/0x8470 [ 139.434169][ T8257] ? __asan_memset+0x23/0x50 [ 139.434183][ T8257] ? __alloc_skb+0x4e9/0x710 [ 139.434200][ T8257] ? __pfx__copy_from_iter+0x10/0x10 [ 139.434213][ T8257] __tcp_push_pending_frames+0xaf/0x3b0 [ 139.434229][ T8257] ? skb_page_frag_refill+0x309/0x4b0 [ 139.434246][ T8257] tcp_push+0x225/0x700 [ 139.434262][ T8257] tcp_sendmsg_locked+0x17e9/0x4430 [ 139.434289][ T8257] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 139.434306][ T8257] ? do_raw_spin_lock+0x128/0x260 [ 139.434318][ T8257] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 139.434344][ T8257] ? __local_bh_enable_ip+0xa5/0x120 [ 139.434365][ T8257] tcp_sendmsg+0x2e/0x50 [ 139.434379][ T8257] ? __pfx_tcp_sendmsg+0x10/0x10 [ 139.434394][ T8257] inet_sendmsg+0xb9/0x140 [ 139.434408][ T8257] sock_write_iter+0x4ea/0x5b0 [ 139.434423][ T8257] ? __pfx_inet_sendmsg+0x10/0x10 [ 139.434436][ T8257] ? __pfx_sock_write_iter+0x10/0x10 [ 139.434453][ T8257] ? bpf_lsm_file_permission+0x9/0x10 [ 139.434465][ T8257] ? security_file_permission+0x76/0x210 [ 139.434485][ T8257] ? rw_verify_area+0xce/0x6d0 [ 139.434500][ T8257] vfs_write+0x6af/0x1050 [ 139.434514][ T8257] ? __pfx_sock_write_iter+0x10/0x10 [ 139.434529][ T8257] ? __pfx_vfs_write+0x10/0x10 [ 139.434542][ T8257] ? find_held_lock+0x2b/0x80 [ 139.434564][ T8257] ksys_write+0x1f8/0x250 [ 139.434579][ T8257] ? __pfx_ksys_write+0x10/0x10 [ 139.434597][ T8257] do_syscall_64+0x123/0x790 [ 139.434611][ T8257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.434624][ T8257] RIP: 0033:0x7fee1db9e0d9 [ 139.434635][ T8257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.434646][ T8257] RSP: 002b:00007fee1eb16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 139.434658][ T8257] RAX: ffffffffffffffda RBX: 00007fee1de25fa0 RCX: 00007fee1db9e0d9 [ 139.434666][ T8257] RDX: 000000000000002c RSI: 0000200000000500 RDI: 0000000000000006 [ 139.434672][ T8257] RBP: 00007fee1eb16090 R08: 0000000000000000 R09: 0000000000000000 [ 139.434679][ T8257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.434686][ T8257] R13: 00007fee1de26038 R14: 00007fee1de25fa0 R15: 00007ffc82fb8ba8 [ 139.434700][ T8257] [ 139.752296][ T5960] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 139.932390][ T5960] usb 7-1: Using ep0 maxpacket: 16 [ 139.934940][ T5960] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 139.939652][ T5960] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 880, setting to 64 [ 139.945629][ T5960] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.948310][ T5960] usb 7-1: Product: syz [ 139.949585][ T5960] usb 7-1: Manufacturer: syz [ 139.951021][ T5960] usb 7-1: SerialNumber: syz [ 139.954425][ T5960] usb 7-1: config 0 descriptor?? [ 139.958516][ T5960] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 139.961440][ T5960] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 140.179121][ T8261] xt_ecn: cannot match TCP bits for non-tcp packets [ 140.187045][ T8261] netlink: 40 bytes leftover after parsing attributes in process `syz.1.862'. [ 140.218240][ T8263] FAULT_INJECTION: forcing a failure. [ 140.218240][ T8263] name failslab, interval 1, probability 0, space 0, times 0 [ 140.223459][ T8263] CPU: 3 UID: 0 PID: 8263 Comm: syz.4.863 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.223479][ T8263] Tainted: [L]=SOFTLOCKUP [ 140.223484][ T8263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.223491][ T8263] Call Trace: [ 140.223496][ T8263] [ 140.223502][ T8263] dump_stack_lvl+0x100/0x190 [ 140.223524][ T8263] should_fail_ex.cold+0x5/0xa [ 140.223541][ T8263] should_failslab+0xc2/0x120 [ 140.223560][ T8263] kmem_cache_alloc_noprof+0x91/0x6a0 [ 140.223576][ T8263] ? lock_acquire+0x1b9/0x370 [ 140.223593][ T8263] ? skb_clone+0x190/0x400 [ 140.223608][ T8263] skb_clone+0x190/0x400 [ 140.223619][ T8263] dev_queue_xmit_nit+0x255/0xa60 [ 140.223635][ T8263] dev_hard_start_xmit+0x2f5/0x760 [ 140.223654][ T8263] __dev_queue_xmit+0x1bbf/0x4970 [ 140.223674][ T8263] ? __pfx___dev_queue_xmit+0x10/0x10 [ 140.223695][ T8263] ? rcu_is_watching+0x13/0xc0 [ 140.223713][ T8263] ? __skb_clone+0x570/0x760 [ 140.223732][ T8263] netlink_deliver_tap+0xa4d/0xcc0 [ 140.223751][ T8263] netlink_unicast+0x62b/0x850 [ 140.223769][ T8263] ? __pfx_netlink_unicast+0x10/0x10 [ 140.223786][ T8263] ? __pfx_sock_has_perm+0x10/0x10 [ 140.223804][ T8263] netlink_sendmsg+0x8b0/0xda0 [ 140.223823][ T8263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.223841][ T8263] ? selinux_socket_sendmsg+0x198/0x2f0 [ 140.223858][ T8263] ____sys_sendmsg+0xa4d/0xbe0 [ 140.223873][ T8263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.223895][ T8263] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.223915][ T8263] ___sys_sendmsg+0x190/0x1e0 [ 140.223931][ T8263] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.223945][ T8263] ? get_pid_task+0x106/0x250 [ 140.223964][ T8263] ? find_held_lock+0x2b/0x80 [ 140.223985][ T8263] __sys_sendmsg+0x160/0x210 [ 140.223997][ T8263] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.224015][ T8263] do_syscall_64+0x123/0x790 [ 140.224030][ T8263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.224043][ T8263] RIP: 0033:0x7fee1db9e0d9 [ 140.224054][ T8263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.224065][ T8263] RSP: 002b:00007fee1eb16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.224078][ T8263] RAX: ffffffffffffffda RBX: 00007fee1de25fa0 RCX: 00007fee1db9e0d9 [ 140.224085][ T8263] RDX: 0000000000040000 RSI: 00002000000002c0 RDI: 000000000000000a [ 140.224092][ T8263] RBP: 00007fee1eb16090 R08: 0000000000000000 R09: 0000000000000000 [ 140.224098][ T8263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.224105][ T8263] R13: 00007fee1de26038 R14: 00007fee1de25fa0 R15: 00007ffc82fb8ba8 [ 140.224118][ T8263] [ 140.225766][ T8263] tipc: Enabling of bearer rejected, already enabled [ 140.226143][ T5960] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 140.363175][ T8266] vivid-004: kernel_thread() failed [ 140.367052][ T8266] vivid-004: kernel_thread() failed [ 140.397324][ T5960] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 140.401101][ T5960] em28xx 7-1:0.0: board has no eeprom [ 140.432476][ T5511] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 140.437011][ T8276] netlink: 32 bytes leftover after parsing attributes in process `syz.4.866'. [ 140.463324][ T5960] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 140.468971][ T5960] em28xx 7-1:0.0: dvb set to bulk mode. [ 140.471002][ T849] em28xx 7-1:0.0: Binding DVB extension [ 140.478549][ T8279] netlink: 156 bytes leftover after parsing attributes in process `syz.4.867'. [ 140.481745][ T5960] usb 7-1: USB disconnect, device number 12 [ 140.486016][ T5960] em28xx 7-1:0.0: Disconnecting em28xx [ 140.511423][ T849] em28xx 7-1:0.0: Registering input extension [ 140.522007][ T5960] em28xx 7-1:0.0: Closing input extension [ 140.564869][ T5960] em28xx: Freeing device [ 140.583189][ T5511] usb 6-1: Using ep0 maxpacket: 32 [ 140.585634][ T5511] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 140.589764][ T5511] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 140.594509][ T5511] usb 6-1: config 0 has no interface number 0 [ 140.596731][ T5511] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 140.600501][ T5511] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 140.604478][ T5511] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 140.608079][ T5511] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.614925][ T5511] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.617809][ T5511] usb 6-1: Product: syz [ 140.619334][ T5511] usb 6-1: Manufacturer: syz [ 140.620907][ T5511] usb 6-1: SerialNumber: syz [ 140.624509][ T5511] usb 6-1: config 0 descriptor?? [ 140.630414][ T5511] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.119/input/input56 [ 140.835764][ T5960] usb 6-1: USB disconnect, device number 15 [ 140.982413][ T5723] Bluetooth: hci3: command 0x0c1a tx timeout [ 140.982502][ T5727] Bluetooth: hci1: command 0x0c1a tx timeout [ 140.984436][ T5723] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.988365][ T5731] Bluetooth: hci2: command 0x0c1a tx timeout [ 141.030479][ T8307] netlink: 'syz.2.871': attribute type 11 has an invalid length. [ 141.052386][ T5731] Bluetooth: hci4: command 0x0c1a tx timeout [ 141.115960][ T8319] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 141.141572][ T8322] FAULT_INJECTION: forcing a failure. [ 141.141572][ T8322] name failslab, interval 1, probability 0, space 0, times 0 [ 141.145992][ T8322] CPU: 3 UID: 0 PID: 8322 Comm: syz.2.874 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.146010][ T8322] Tainted: [L]=SOFTLOCKUP [ 141.146015][ T8322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.146021][ T8322] Call Trace: [ 141.146027][ T8322] [ 141.146031][ T8322] dump_stack_lvl+0x100/0x190 [ 141.146053][ T8322] should_fail_ex.cold+0x5/0xa [ 141.146070][ T8322] should_failslab+0xc2/0x120 [ 141.146111][ T8322] __kmalloc_noprof+0xfc/0x820 [ 141.146127][ T8322] ? lockdep_init_map_type+0x5c/0x250 [ 141.146146][ T8322] ? nft_trans_alloc+0x1d/0x2d0 [ 141.146165][ T8322] nft_trans_alloc+0x1d/0x2d0 [ 141.146181][ T8322] nf_tables_newtable+0x1363/0x1a90 [ 141.146197][ T8322] ? __pfx_nf_tables_newtable+0x10/0x10 [ 141.146212][ T8322] ? __nla_parse+0x40/0x60 [ 141.146231][ T8322] nfnetlink_rcv_batch+0x1410/0x2880 [ 141.146256][ T8322] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 141.146269][ T8322] ? find_held_lock+0x2b/0x80 [ 141.146290][ T8322] ? avc_has_perm_noaudit+0x145/0x3b0 [ 141.146316][ T8322] ? __nla_parse+0x40/0x60 [ 141.146333][ T8322] nfnetlink_rcv+0x3bd/0x440 [ 141.146345][ T8322] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 141.146361][ T8322] netlink_unicast+0x585/0x850 [ 141.146380][ T8322] ? __pfx_netlink_unicast+0x10/0x10 [ 141.146400][ T8322] netlink_sendmsg+0x8b0/0xda0 [ 141.146419][ T8322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.146436][ T8322] ? selinux_socket_sendmsg+0x198/0x2f0 [ 141.146454][ T8322] ____sys_sendmsg+0xa4d/0xbe0 [ 141.146468][ T8322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.146486][ T8322] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.146506][ T8322] ___sys_sendmsg+0x190/0x1e0 [ 141.146521][ T8322] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.146536][ T8322] ? get_pid_task+0x106/0x250 [ 141.146555][ T8322] ? find_held_lock+0x2b/0x80 [ 141.146576][ T8322] __sys_sendmsg+0x160/0x210 [ 141.146588][ T8322] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.146605][ T8322] do_syscall_64+0x123/0x790 [ 141.146621][ T8322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.146633][ T8322] RIP: 0033:0x7f123099e0d9 [ 141.146643][ T8322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.146653][ T8322] RSP: 002b:00007f1231830028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.146664][ T8322] RAX: ffffffffffffffda RBX: 00007f1230c25fa0 RCX: 00007f123099e0d9 [ 141.146671][ T8322] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 141.146678][ T8322] RBP: 00007f1231830090 R08: 0000000000000000 R09: 0000000000000000 [ 141.146685][ T8322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.146691][ T8322] R13: 00007f1230c26038 R14: 00007f1230c25fa0 R15: 00007ffe854b42a8 [ 141.146705][ T8322] [ 141.273585][ T8332] FAULT_INJECTION: forcing a failure. [ 141.273585][ T8332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.279148][ T8332] CPU: 1 UID: 0 PID: 8332 Comm: syz.2.876 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.279178][ T8332] Tainted: [L]=SOFTLOCKUP [ 141.279185][ T8332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.279196][ T8332] Call Trace: [ 141.279204][ T8332] [ 141.279213][ T8332] dump_stack_lvl+0x100/0x190 [ 141.279247][ T8332] should_fail_ex.cold+0x5/0xa [ 141.279274][ T8332] _copy_to_user+0x32/0xd0 [ 141.279305][ T8332] copy_siginfo_to_user+0x27/0xc0 [ 141.279327][ T8332] x64_setup_rt_frame+0xa03/0xce0 [ 141.279358][ T8332] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 141.279388][ T8332] arch_do_signal_or_restart+0x5ee/0x7e0 [ 141.279412][ T8332] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 141.279440][ T8332] ? fault_signal_pending+0x28/0x1d0 [ 141.279468][ T8332] irqentry_exit+0x402/0xa10 [ 141.279493][ T8332] asm_exc_page_fault+0x26/0x30 [ 141.279511][ T8332] RIP: 0033:0x7f12308571b6 [ 141.279529][ T8332] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d 5c da 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48 [ 141.279546][ T8332] RSP: 002b:00007f123182ff60 EFLAGS: 00010206 [ 141.279563][ T8332] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 0000200000c00000 [ 141.279575][ T8332] RDX: 00000000000025f5 RSI: 0000200000c00000 RDI: 0000200000c01000 [ 141.279587][ T8332] RBP: 00007f1230a54660 R08: 0000000000000000 R09: ffffffffffffffff [ 141.279598][ T8332] R10: ffffffffffffffff R11: 0000000000000000 R12: 00000000003ff000 [ 141.279609][ T8332] R13: 0000200000c00000 R14: 00007f1230c25fa0 R15: 0000000000000000 [ 141.279634][ T8332] [ 141.431351][ T8348] FAULT_INJECTION: forcing a failure. [ 141.431351][ T8348] name failslab, interval 1, probability 0, space 0, times 0 [ 141.435526][ T8348] CPU: 3 UID: 0 PID: 8348 Comm: syz.1.882 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.435545][ T8348] Tainted: [L]=SOFTLOCKUP [ 141.435549][ T8348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.435555][ T8348] Call Trace: [ 141.435560][ T8348] [ 141.435564][ T8348] dump_stack_lvl+0x100/0x190 [ 141.435588][ T8348] should_fail_ex.cold+0x5/0xa [ 141.435604][ T8348] should_failslab+0xc2/0x120 [ 141.435623][ T8348] __kmalloc_noprof+0xfc/0x820 [ 141.435638][ T8348] ? cap_capable+0x107/0x430 [ 141.435654][ T8348] ? lsm_blob_alloc+0x68/0x90 [ 141.435668][ T8348] lsm_blob_alloc+0x68/0x90 [ 141.435680][ T8348] security_bpf_prog_load+0x5b/0x2f0 [ 141.435698][ T8348] ? bpf_vlog_init+0x118/0x150 [ 141.435713][ T8348] bpf_check+0x16dd/0xa7c0 [ 141.435726][ T8348] ? __css_rstat_updated+0x1ce/0x590 [ 141.435737][ T8348] ? __lock_acquire+0x4c5/0x1ec0 [ 141.435754][ T8348] ? __pfx___css_rstat_updated+0x10/0x10 [ 141.435768][ T8348] ? __lock_acquire+0x4c5/0x1ec0 [ 141.435787][ T8348] ? __pfx_bpf_check+0x10/0x10 [ 141.435800][ T8348] ? find_held_lock+0x2b/0x80 [ 141.435813][ T8348] ? bpf_prog_load+0x1a09/0x2a80 [ 141.435827][ T8348] ? __asan_memset+0x23/0x50 [ 141.435843][ T8348] ? bpf_prog_load+0x1ac3/0x2a80 [ 141.435854][ T8348] bpf_prog_load+0x1ac3/0x2a80 [ 141.435868][ T8348] ? __pfx_bpf_prog_load+0x10/0x10 [ 141.435889][ T8348] __sys_bpf+0x1f46/0x4a30 [ 141.435907][ T8348] ? __pfx___sys_bpf+0x10/0x10 [ 141.435921][ T8348] ? find_held_lock+0x2b/0x80 [ 141.435933][ T8348] ? get_pid_task+0xfc/0x250 [ 141.435946][ T8348] ? get_pid_task+0xfc/0x250 [ 141.435962][ T8348] ? find_held_lock+0x2b/0x80 [ 141.435977][ T8348] ? rcu_read_lock_any_held+0x6a/0x90 [ 141.435991][ T8348] ? find_held_lock+0x2b/0x80 [ 141.436004][ T8348] ? ksys_write+0x190/0x250 [ 141.436018][ T8348] ? ksys_write+0x190/0x250 [ 141.436041][ T8348] ? fput+0x7c/0x100 [ 141.436057][ T8348] ? ksys_write+0x1ac/0x250 [ 141.436072][ T8348] ? __x64_sys_bpf+0xce/0x140 [ 141.436086][ T8348] __x64_sys_bpf+0xce/0x140 [ 141.436101][ T8348] ? do_syscall_64+0xae/0x790 [ 141.436115][ T8348] do_syscall_64+0x123/0x790 [ 141.436127][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.436139][ T8348] RIP: 0033:0x7f6a8359e0d9 [ 141.436149][ T8348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.436160][ T8348] RSP: 002b:00007f6a84408028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 141.436172][ T8348] RAX: ffffffffffffffda RBX: 00007f6a83825fa0 RCX: 00007f6a8359e0d9 [ 141.436180][ T8348] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 141.436186][ T8348] RBP: 00007f6a84408090 R08: 0000000000000000 R09: 0000000000000000 [ 141.436193][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.436199][ T8348] R13: 00007f6a83826038 R14: 00007f6a83825fa0 R15: 00007ffe0af4bd58 [ 141.436213][ T8348] [ 141.556192][ T8355] syzkaller0: entered promiscuous mode [ 141.558266][ T8355] syzkaller0: entered allmulticast mode [ 141.900498][ T5822] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 141.905872][ T5822] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 141.913542][ T5822] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 141.918111][ T5822] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 141.924960][ T5822] rtc rtc0: __rtc_set_alarm: err=-22 [ 142.168124][ T8380] syzkaller0: entered promiscuous mode [ 142.169938][ T8380] syzkaller0: entered allmulticast mode [ 142.349622][ T8372] FAULT_INJECTION: forcing a failure. [ 142.349622][ T8372] name failslab, interval 1, probability 0, space 0, times 0 [ 142.353730][ T8372] CPU: 1 UID: 0 PID: 8372 Comm: syz.4.888 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.353771][ T8372] Tainted: [L]=SOFTLOCKUP [ 142.353777][ T8372] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.353785][ T8372] Call Trace: [ 142.353792][ T8372] [ 142.353799][ T8372] dump_stack_lvl+0x100/0x190 [ 142.353831][ T8372] should_fail_ex.cold+0x5/0xa [ 142.353856][ T8372] should_failslab+0xc2/0x120 [ 142.353875][ T8372] __kmalloc_noprof+0xfc/0x820 [ 142.353891][ T8372] ? constrain_params_by_rules+0x175/0xd20 [ 142.353929][ T8372] constrain_params_by_rules+0x175/0xd20 [ 142.353948][ T8372] ? kfree+0x22b/0x6c0 [ 142.353971][ T8372] ? constrain_params_by_rules+0xa88/0xd20 [ 142.353993][ T8372] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 142.354018][ T8372] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 142.354037][ T8372] ? snd_pcm_oss_release+0x238/0x300 [ 142.354056][ T8372] ? __fput+0x3ff/0xb50 [ 142.354082][ T8372] ? fput_close_sync+0x118/0x250 [ 142.354102][ T8372] ? snd_interval_refine+0x2d0/0x580 [ 142.354130][ T8372] snd_pcm_hw_refine+0x82a/0xb40 [ 142.354153][ T8372] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 142.354171][ T8372] ? snd_pcm_hw_refine+0x35c/0xb40 [ 142.354194][ T8372] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 142.354217][ T8372] ? __kasan_kmalloc+0xaa/0xb0 [ 142.354238][ T8372] snd_pcm_hw_param_first+0x2b0/0x680 [ 142.354261][ T8372] snd_pcm_hw_param_near.constprop.0+0x739/0x850 [ 142.354286][ T8372] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 142.354307][ T8372] ? calc_src_frames.isra.0+0x17c/0x1c0 [ 142.354339][ T8372] snd_pcm_oss_change_params_locked+0x18d9/0x39f0 [ 142.354372][ T8372] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 142.354392][ T8372] ? __pfx___mutex_lock+0x10/0x10 [ 142.354406][ T8372] ? snd_pcm_oss_sync+0x1a0/0x840 [ 142.354430][ T8372] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 142.354455][ T8372] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 142.354478][ T8372] snd_pcm_oss_sync+0x1de/0x840 [ 142.354502][ T8372] snd_pcm_oss_release+0x238/0x300 [ 142.354523][ T8372] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 142.354544][ T8372] __fput+0x3ff/0xb50 [ 142.354557][ T8372] fput_close_sync+0x118/0x250 [ 142.354569][ T8372] ? __pfx_fput_close_sync+0x10/0x10 [ 142.354584][ T8372] __x64_sys_close+0x8b/0x120 [ 142.354596][ T8372] do_syscall_64+0x123/0x790 [ 142.354609][ T8372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.354622][ T8372] RIP: 0033:0x7fee1db9e0d9 [ 142.354633][ T8372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.354644][ T8372] RSP: 002b:00007fee1eb16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 142.354656][ T8372] RAX: ffffffffffffffda RBX: 00007fee1de25fa0 RCX: 00007fee1db9e0d9 [ 142.354663][ T8372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 142.354669][ T8372] RBP: 00007fee1eb16090 R08: 0000000000000000 R09: 0000000000000000 [ 142.354676][ T8372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.354682][ T8372] R13: 00007fee1de26038 R14: 00007fee1de25fa0 R15: 00007ffc82fb8ba8 [ 142.354696][ T8372] [ 142.504525][ T8388] overlayfs: failed to resolve './bus': -2 [ 142.521277][ T8390] FAULT_INJECTION: forcing a failure. [ 142.521277][ T8390] name failslab, interval 1, probability 0, space 0, times 0 [ 142.526876][ T8390] CPU: 0 UID: 0 PID: 8390 Comm: syz.3.895 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.526895][ T8390] Tainted: [L]=SOFTLOCKUP [ 142.526900][ T8390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.526907][ T8390] Call Trace: [ 142.526913][ T8390] [ 142.526918][ T8390] dump_stack_lvl+0x100/0x190 [ 142.526941][ T8390] should_fail_ex.cold+0x5/0xa [ 142.526958][ T8390] should_failslab+0xc2/0x120 [ 142.526976][ T8390] kmem_cache_alloc_noprof+0x91/0x6a0 [ 142.526993][ T8390] ? inet_bind2_bucket_create+0x36/0x5f0 [ 142.527013][ T8390] inet_bind2_bucket_create+0x36/0x5f0 [ 142.527030][ T8390] __inet_hash_connect+0x1527/0x2000 [ 142.527056][ T8390] ? __pfx___inet_check_established+0x10/0x10 [ 142.527078][ T8390] ? __pfx___inet_hash_connect+0x10/0x10 [ 142.527101][ T8390] ? inet_init_ehash_secret+0xd/0x60 [ 142.527119][ T8390] ? inet_hash_connect+0x9f/0x340 [ 142.527143][ T8390] tcp_v4_connect+0xeb3/0x1b40 [ 142.527165][ T8390] ? __pfx_tcp_v4_connect+0x10/0x10 [ 142.527179][ T8390] ? __lock_acquire+0x4c5/0x1ec0 [ 142.527198][ T8390] __inet_stream_connect+0x208/0xf90 [ 142.527216][ T8390] ? __pfx___inet_stream_connect+0x10/0x10 [ 142.527229][ T8390] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 142.527244][ T8390] ? __local_bh_enable_ip+0xa5/0x120 [ 142.527266][ T8390] inet_stream_connect+0x57/0xa0 [ 142.527280][ T8390] __sys_connect_file+0x146/0x1a0 [ 142.527300][ T8390] __sys_connect+0x141/0x170 [ 142.527316][ T8390] ? __pfx___sys_connect+0x10/0x10 [ 142.527332][ T8390] ? __fget_files+0x21f/0x3d0 [ 142.527354][ T8390] ? __pfx_ksys_write+0x10/0x10 [ 142.527372][ T8390] __x64_sys_connect+0x72/0xb0 [ 142.527388][ T8390] ? lockdep_hardirqs_on+0x7d/0x110 [ 142.527402][ T8390] do_syscall_64+0x123/0x790 [ 142.527415][ T8390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.527427][ T8390] RIP: 0033:0x7fd1ad59e0d9 [ 142.527439][ T8390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.527449][ T8390] RSP: 002b:00007fd1ae439028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 142.527461][ T8390] RAX: ffffffffffffffda RBX: 00007fd1ad825fa0 RCX: 00007fd1ad59e0d9 [ 142.527468][ T8390] RDX: 0000000000000010 RSI: 0000200000000700 RDI: 0000000000000007 [ 142.527475][ T8390] RBP: 00007fd1ae439090 R08: 0000000000000000 R09: 0000000000000000 [ 142.527482][ T8390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.527488][ T8390] R13: 00007fd1ad826038 R14: 00007fd1ad825fa0 R15: 00007ffcb7bd1838 [ 142.527502][ T8390] [ 142.850138][ T5511] wiimote 0005:057E:0306.0017: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 142.856469][ T5511] wiimote 0005:057E:0306.0017: New device registered [ 142.861518][ T8402] wiimote 0005:057E:0306.0017: Device removed [ 142.890134][ T8404] fido_id[8404]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 143.052654][ T5731] Bluetooth: hci0: command 0x0c1a tx timeout [ 143.052702][ T5723] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.053503][ T65] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.054229][ T5727] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.132350][ T5723] Bluetooth: hci4: command 0x0c1a tx timeout [ 143.183903][ T1347] wiimote 0005:057E:0306.0018: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 143.188242][ T1347] wiimote 0005:057E:0306.0018: New device registered [ 143.239798][ T5822] libceph: connect (1)[c::]:6789 error -101 [ 143.246186][ T5822] libceph: mon0 (1)[c::]:6789 connect error [ 143.254338][ T5822] libceph: connect (1)[c::]:6789 error -101 [ 143.256455][ T5822] libceph: mon0 (1)[c::]:6789 connect error [ 143.327792][ T8413] ceph: No mds server is up or the cluster is laggy [ 143.412408][ T62] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 143.562299][ T62] usb 6-1: Using ep0 maxpacket: 8 [ 143.565203][ T62] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 143.570402][ T62] usb 6-1: config 0 has no interfaces? [ 143.574822][ T62] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.578189][ T62] usb 6-1: Product: syz [ 143.579916][ T62] usb 6-1: Manufacturer: syz [ 143.581933][ T62] usb 6-1: SerialNumber: syz [ 143.588127][ T62] usb 6-1: config 0 descriptor?? [ 143.793174][ T8410] FAULT_INJECTION: forcing a failure. [ 143.793174][ T8410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.798140][ T8410] CPU: 3 UID: 0 PID: 8410 Comm: syz.1.903 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.798172][ T8410] Tainted: [L]=SOFTLOCKUP [ 143.798179][ T8410] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.798189][ T8410] Call Trace: [ 143.798198][ T8410] [ 143.798207][ T8410] dump_stack_lvl+0x100/0x190 [ 143.798240][ T8410] should_fail_ex.cold+0x5/0xa [ 143.798266][ T8410] _copy_from_user+0x2e/0xd0 [ 143.798296][ T8410] uhid_char_write+0x18d/0x10e0 [ 143.798343][ T8410] vfs_write+0x2aa/0x1050 [ 143.798368][ T8410] ? __pfx_uhid_char_write+0x10/0x10 [ 143.798389][ T8410] ? __pfx_vfs_write+0x10/0x10 [ 143.798410][ T8410] ? find_held_lock+0x2b/0x80 [ 143.798431][ T8410] ? __fget_files+0x215/0x3d0 [ 143.798456][ T8410] ? __fget_files+0x215/0x3d0 [ 143.798486][ T8410] ? __fget_files+0x21f/0x3d0 [ 143.798518][ T8410] ksys_write+0x1f8/0x250 [ 143.798540][ T8410] ? __pfx_ksys_write+0x10/0x10 [ 143.798570][ T8410] do_syscall_64+0x123/0x790 [ 143.798594][ T8410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.798616][ T8410] RIP: 0033:0x7f6a8359e0d9 [ 143.798634][ T8410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.798651][ T8410] RSP: 002b:00007f6a84408028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 143.798670][ T8410] RAX: ffffffffffffffda RBX: 00007f6a83825fa0 RCX: 00007f6a8359e0d9 [ 143.798683][ T8410] RDX: 000000000000000c RSI: 0000200000000080 RDI: 0000000000000003 [ 143.798695][ T8410] RBP: 00007f6a84408090 R08: 0000000000000000 R09: 0000000000000000 [ 143.798706][ T8410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.798716][ T8410] R13: 00007f6a83826038 R14: 00007f6a83825fa0 R15: 00007ffe0af4bd58 [ 143.798742][ T8410] [ 143.799572][ T849] usb 6-1: USB disconnect, device number 16 [ 143.803559][ T8409] wiimote 0005:057E:0306.0018: Device removed [ 143.942527][ T5511] wiimote 0005:057E:0306.0017: detected device: Nintendo Wii Remote (Gen 1) [ 143.952089][ T8429] FAULT_INJECTION: forcing a failure. [ 143.952089][ T8429] name failslab, interval 1, probability 0, space 0, times 0 [ 143.956775][ T8429] CPU: 3 UID: 0 PID: 8429 Comm: syz.4.910 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.956795][ T8429] Tainted: [L]=SOFTLOCKUP [ 143.956799][ T8429] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.956807][ T8429] Call Trace: [ 143.956812][ T8429] [ 143.956817][ T8429] dump_stack_lvl+0x100/0x190 [ 143.956840][ T8429] should_fail_ex.cold+0x5/0xa [ 143.956857][ T8429] should_failslab+0xc2/0x120 [ 143.956875][ T8429] __kmalloc_cache_noprof+0x91/0x6b0 [ 143.956890][ T8429] ? media_pipeline_add_pad+0xf3/0xa00 [ 143.956920][ T8429] media_pipeline_add_pad+0xf3/0xa00 [ 143.956935][ T8429] __media_pipeline_start+0xa4d/0x22b0 [ 143.956953][ T8429] ? __pfx___media_pipeline_start+0x10/0x10 [ 143.956971][ T8429] media_pipeline_start+0x49/0x70 [ 143.956984][ T8429] video_device_pipeline_start+0x79/0xa0 [ 143.957007][ T8429] vimc_capture_start_streaming+0x7d/0x130 [ 143.957025][ T8429] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 143.957042][ T8429] vb2_start_streaming+0x162/0x570 [ 143.957053][ T8429] ? __bitmap_weight+0xd7/0x110 [ 143.957069][ T8429] vb2_core_streamon+0x26a/0x3c0 [ 143.957081][ T8429] vb2_ioctl_streamon+0xd9/0x150 [ 143.957106][ T8429] ? v4l_streamon+0x1a/0xa0 [ 143.957122][ T8429] __video_do_ioctl+0xb2a/0xdf0 [ 143.957140][ T8429] ? __might_fault+0xc5/0x140 [ 143.957154][ T8429] ? __pfx___video_do_ioctl+0x10/0x10 [ 143.957173][ T8429] video_usercopy+0x47a/0x1730 [ 143.957189][ T8429] ? __pfx___video_do_ioctl+0x10/0x10 [ 143.957204][ T8429] ? __pfx_video_usercopy+0x10/0x10 [ 143.957230][ T8429] v4l2_ioctl+0x1bd/0x250 [ 143.957245][ T8429] ? __pfx_v4l2_ioctl+0x10/0x10 [ 143.957261][ T8429] __x64_sys_ioctl+0x18e/0x210 [ 143.957277][ T8429] do_syscall_64+0x123/0x790 [ 143.957292][ T8429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.957305][ T8429] RIP: 0033:0x7fee1db9e0d9 [ 143.957315][ T8429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.957326][ T8429] RSP: 002b:00007fee1eb16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.957338][ T8429] RAX: ffffffffffffffda RBX: 00007fee1de25fa0 RCX: 00007fee1db9e0d9 [ 143.957346][ T8429] RDX: 0000200000000600 RSI: 0000000040045612 RDI: 0000000000000006 [ 143.957353][ T8429] RBP: 00007fee1eb16090 R08: 0000000000000000 R09: 0000000000000000 [ 143.957360][ T8429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.957367][ T8429] R13: 00007fee1de26038 R14: 00007fee1de25fa0 R15: 00007ffc82fb8ba8 [ 143.957381][ T8429] [ 143.958493][ T5511] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0017/input/input58 [ 144.069256][ T5511] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0017/input/input59 [ 144.080349][ T5511] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0017/input/input57 [ 144.252350][ T1347] wiimote 0005:057E:0306.0018: detected device: Nintendo Wii Remote (Gen 1) [ 144.255462][ T1347] sysfs: cannot create duplicate filename '/class/power_supply/wiimote_battery_syz0' [ 144.258444][ T1347] CPU: 2 UID: 0 PID: 1347 Comm: kworker/2:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.258472][ T1347] Tainted: [L]=SOFTLOCKUP [ 144.258480][ T1347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.258492][ T1347] Workqueue: events wiimote_init_worker [ 144.258514][ T1347] Call Trace: [ 144.258520][ T1347] [ 144.258525][ T1347] dump_stack_lvl+0x100/0x190 [ 144.258545][ T1347] sysfs_warn_dup.cold+0x1c/0x28 [ 144.258565][ T1347] sysfs_do_create_link_sd+0x113/0x140 [ 144.258584][ T1347] sysfs_create_link+0x61/0xc0 [ 144.258595][ T1347] device_add+0x675/0x1970 [ 144.258612][ T1347] ? __pfx_device_add+0x10/0x10 [ 144.258627][ T1347] ? lockdep_init_map_type+0x5c/0x250 [ 144.258646][ T1347] ? __raw_spin_lock_init+0x3a/0x110 [ 144.258659][ T1347] __power_supply_register.part.0+0x954/0x1300 [ 144.258681][ T1347] ? __pfx___power_supply_register.part.0+0x10/0x10 [ 144.258700][ T1347] ? __pfx_wiimod_battery_probe+0x10/0x10 [ 144.258715][ T1347] ? kasprintf+0xc7/0x100 [ 144.258727][ T1347] ? __pfx_kasprintf+0x10/0x10 [ 144.258739][ T1347] ? trace_kmalloc+0xeb/0x110 [ 144.258756][ T1347] ? __kasan_kmalloc+0xaa/0xb0 [ 144.258775][ T1347] power_supply_register+0xce/0x110 [ 144.258793][ T1347] wiimod_battery_probe+0x21e/0x370 [ 144.258809][ T1347] ? __pfx_wiimod_battery_probe+0x10/0x10 [ 144.258823][ T1347] ? input_ff_create+0x256/0x310 [ 144.258835][ T1347] ? __pfx_wiimod_rumble_play+0x10/0x10 [ 144.258858][ T1347] ? __pfx_wiimod_battery_probe+0x10/0x10 [ 144.258872][ T1347] wiimote_init_worker+0xd55/0x2730 [ 144.258889][ T1347] ? __pfx_wiimote_init_worker+0x10/0x10 [ 144.258905][ T1347] ? process_one_work+0x906/0x1b10 [ 144.258922][ T1347] ? process_one_work+0x906/0x1b10 [ 144.258943][ T1347] process_one_work+0xac7/0x1b10 [ 144.258963][ T1347] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 144.258982][ T1347] ? __pfx_process_one_work+0x10/0x10 [ 144.259002][ T1347] ? __pfx_wiimote_init_worker+0x10/0x10 [ 144.259017][ T1347] worker_thread+0x5ef/0xe50 [ 144.259037][ T1347] ? kthread+0x13a/0x450 [ 144.259051][ T1347] ? __pfx_worker_thread+0x10/0x10 [ 144.259065][ T1347] kthread+0x373/0x450 [ 144.259077][ T1347] ? __pfx_kthread+0x10/0x10 [ 144.259092][ T1347] ret_from_fork+0x730/0xd60 [ 144.259112][ T1347] ? __pfx_ret_from_fork+0x10/0x10 [ 144.259130][ T1347] ? __switch_to+0x800/0x10f0 [ 144.259144][ T1347] ? __pfx_kthread+0x10/0x10 [ 144.259158][ T1347] ret_from_fork_asm+0x1a/0x30 [ 144.259176][ T1347] [ 144.259379][ T1347] wiimote 0005:057E:0306.0018: cannot register battery device [ 144.505657][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 144.505675][ T42] audit: type=1400 audit(1787320832.436:606): avc: denied { bind } for pid=8433 comm="syz.2.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 144.516094][ T42] audit: type=1400 audit(1787320832.436:607): avc: denied { listen } for pid=8433 comm="syz.2.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 144.560649][ T42] audit: type=1400 audit(1787320832.486:608): avc: denied { accept } for pid=8433 comm="syz.2.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 144.610958][ T8434] comedi comedi3: comedi_test: 4 microvolt, 2 microsecond waveform attached [ 144.898724][ T42] audit: type=1400 audit(1787320832.826:609): avc: denied { append } for pid=8440 comm="syz.4.915" name="frontend0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 145.034631][ T8443] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 145.038795][ T8443] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 145.132368][ T5723] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.133742][ T5731] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.133850][ T5727] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.142311][ T5731] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.163601][ T8446] netlink: 'syz.4.917': attribute type 8 has an invalid length. [ 145.179700][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.917'. [ 145.213249][ T5731] Bluetooth: hci4: command 0x0c1a tx timeout [ 145.237494][ T8451] Line length is too long: Should be less than 4094 [ 145.921816][ T8463] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 145.963307][ T8463] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 145.967788][ T8463] overlayfs: failed to look up (tracing) for ino (-66) [ 145.976835][ T8463] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 145.982016][ T8463] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 146.358586][ T8474] ±ÿ†Ý'É|d: renamed from lo (while UP) [ 146.399295][ T8478] FAULT_INJECTION: forcing a failure. [ 146.399295][ T8478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.404882][ T8478] CPU: 0 UID: 0 PID: 8478 Comm: syz.4.929 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.404912][ T8478] Tainted: [L]=SOFTLOCKUP [ 146.404918][ T8478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.404930][ T8478] Call Trace: [ 146.404937][ T8478] [ 146.404945][ T8478] dump_stack_lvl+0x100/0x190 [ 146.404978][ T8478] should_fail_ex.cold+0x5/0xa [ 146.405005][ T8478] _copy_from_user+0x2e/0xd0 [ 146.405037][ T8478] kstrtouint_from_user+0xd6/0x1d0 [ 146.405063][ T8478] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 146.405085][ T8478] ? __lock_acquire+0x4c5/0x1ec0 [ 146.405120][ T8478] ? lock_acquire+0x1b9/0x370 [ 146.405149][ T8478] proc_fail_nth_write+0x83/0x220 [ 146.405177][ T8478] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 146.405212][ T8478] vfs_write+0x2aa/0x1050 [ 146.405239][ T8478] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 146.405267][ T8478] ? __pfx_vfs_write+0x10/0x10 [ 146.405288][ T8478] ? find_held_lock+0x2b/0x80 [ 146.405310][ T8478] ? __fget_files+0x215/0x3d0 [ 146.405342][ T8478] ? __fget_files+0x21f/0x3d0 [ 146.405380][ T8478] ksys_write+0x12a/0x250 [ 146.405403][ T8478] ? __pfx_ksys_write+0x10/0x10 [ 146.405433][ T8478] do_syscall_64+0x123/0x790 [ 146.405458][ T8478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.405475][ T8478] RIP: 0033:0x7fee1db5e90e [ 146.405491][ T8478] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 146.405508][ T8478] RSP: 002b:00007fee1eb15fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 146.405527][ T8478] RAX: ffffffffffffffda RBX: 00007fee1eb166c0 RCX: 00007fee1db5e90e [ 146.405539][ T8478] RDX: 0000000000000001 RSI: 00007fee1eb160a0 RDI: 0000000000000007 [ 146.405550][ T8478] RBP: 00007fee1eb16090 R08: 0000000000000000 R09: 0000000000000000 [ 146.405561][ T8478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.405572][ T8478] R13: 00007fee1de26038 R14: 00007fee1de25fa0 R15: 00007ffc82fb8ba8 [ 146.405596][ T8478] [ 146.526807][ T42] audit: type=1400 audit(1787321090.456:610): avc: denied { read } for pid=8482 comm="syz.4.931" dev="nsfs" ino=4026533781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 146.535335][ T42] audit: type=1400 audit(1787321090.456:611): avc: denied { open } for pid=8482 comm="syz.4.931" path="net:[4026533781]" dev="nsfs" ino=4026533781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 146.545616][ T42] audit: type=1400 audit(1787321090.476:612): avc: denied { unmount } for pid=6694 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 146.573042][ T8485] FAULT_INJECTION: forcing a failure. [ 146.573042][ T8485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.577156][ T8485] CPU: 3 UID: 0 PID: 8485 Comm: syz.4.932 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.577175][ T8485] Tainted: [L]=SOFTLOCKUP [ 146.577179][ T8485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.577186][ T8485] Call Trace: [ 146.577192][ T8485] [ 146.577196][ T8485] dump_stack_lvl+0x100/0x190 [ 146.577219][ T8485] should_fail_ex.cold+0x5/0xa [ 146.577235][ T8485] _copy_from_iter+0x1f4/0x1690 [ 146.577249][ T8485] ? _copy_from_iter+0x270/0x1690 [ 146.577264][ T8485] ? __pfx__copy_from_iter+0x10/0x10 [ 146.577278][ T8485] ? __pfx__copy_from_iter+0x10/0x10 [ 146.577288][ T8485] ? _copy_from_iter+0x270/0x1690 [ 146.577300][ T8485] copy_page_from_iter+0x238/0x300 [ 146.577313][ T8485] skb_copy_datagram_from_iter+0x399/0x720 [ 146.577334][ T8485] packet_sendmsg+0x2257/0x4f00 [ 146.577360][ T8485] ? sock_has_perm+0x25a/0x2f0 [ 146.577375][ T8485] ? __pfx_sock_has_perm+0x10/0x10 [ 146.577392][ T8485] ? __pfx_packet_sendmsg+0x10/0x10 [ 146.577409][ T8485] ? __might_fault+0xc5/0x140 [ 146.577426][ T8485] ? selinux_socket_sendmsg+0x198/0x2f0 [ 146.577444][ T8485] __sys_sendto+0x48b/0x4e0 [ 146.577460][ T8485] ? __pfx_packet_sendmsg+0x10/0x10 [ 146.577477][ T8485] ? __pfx___sys_sendto+0x10/0x10 [ 146.577497][ T8485] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 146.577517][ T8485] ? ksys_write+0x1ac/0x250 [ 146.577531][ T8485] ? __pfx_ksys_write+0x10/0x10 [ 146.577547][ T8485] __x64_sys_sendto+0xe0/0x1c0 [ 146.577564][ T8485] ? do_syscall_64+0xae/0x790 [ 146.577575][ T8485] ? lockdep_hardirqs_on+0x7d/0x110 [ 146.577587][ T8485] do_syscall_64+0x123/0x790 [ 146.577599][ T8485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.577612][ T8485] RIP: 0033:0x7fee1db9e0d9 [ 146.577623][ T8485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.577634][ T8485] RSP: 002b:00007fee1eb16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 146.577646][ T8485] RAX: ffffffffffffffda RBX: 00007fee1de25fa0 RCX: 00007fee1db9e0d9 [ 146.577653][ T8485] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000006 [ 146.577659][ T8485] RBP: 00007fee1eb16090 R08: 0000200000000140 R09: 0000000000000014 [ 146.577666][ T8485] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 146.577672][ T8485] R13: 00007fee1de26038 R14: 00007fee1de25fa0 R15: 00007ffc82fb8ba8 [ 146.577685][ T8485] [ 146.694540][ T42] audit: type=1400 audit(1787321090.626:613): avc: denied { name_bind } for pid=8486 comm="syz.4.933" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 146.834350][ T8491] Illegal XDP return value 4294967274 on prog (id 33) dev N/A, expect packet loss! [ 146.837995][ T8491] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.935'. [ 147.087486][ T8506] FAULT_INJECTION: forcing a failure. [ 147.087486][ T8506] name failslab, interval 1, probability 0, space 0, times 0 [ 147.091937][ T8506] CPU: 2 UID: 0 PID: 8506 Comm: syz.4.942 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.091965][ T8506] Tainted: [L]=SOFTLOCKUP [ 147.091972][ T8506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.091983][ T8506] Call Trace: [ 147.091991][ T8506] [ 147.091998][ T8506] dump_stack_lvl+0x100/0x190 [ 147.092031][ T8506] should_fail_ex.cold+0x5/0xa [ 147.092074][ T8506] should_failslab+0xc2/0x120 [ 147.092104][ T8506] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 147.092131][ T8506] ? __alloc_skb+0x140/0x710 [ 147.092164][ T8506] __alloc_skb+0x140/0x710 [ 147.092189][ T8506] ? __alloc_skb+0x5b7/0x710 [ 147.092216][ T8506] ? __pfx___alloc_skb+0x10/0x10 [ 147.092249][ T8506] ? avc_has_perm_noaudit+0x145/0x3b0 [ 147.092278][ T8506] __tipc_nl_compat_doit+0xa3/0x3d0 [ 147.092321][ T8506] ? kmem_cache_free+0x127/0x6b0 [ 147.092343][ T8506] ? __pfx___tipc_nl_compat_doit+0x10/0x10 [ 147.092367][ T8506] ? __dev_queue_xmit+0x1bbf/0x4970 [ 147.092391][ T8506] ? netlink_deliver_tap+0xa4d/0xcc0 [ 147.092415][ T8506] ? netlink_unicast+0x62b/0x850 [ 147.092450][ T8506] ? bpf_lsm_capable+0x9/0x10 [ 147.092471][ T8506] ? security_capable+0x80/0x260 [ 147.092497][ T8506] tipc_nl_compat_doit+0x11e/0x290 [ 147.092526][ T8506] tipc_nl_compat_recv+0x908/0xc40 [ 147.092555][ T8506] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 147.092581][ T8506] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 147.092610][ T8506] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 147.092647][ T8506] ? trace_contention_end+0x126/0x160 [ 147.092686][ T8506] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 147.092709][ T8506] genl_family_rcv_msg_doit+0x214/0x300 [ 147.092731][ T8506] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 147.092750][ T8506] ? genl_get_cmd+0x3e7/0x760 [ 147.092785][ T8506] ? __dev_queue_xmit+0xa33/0x4970 [ 147.092808][ T8506] ? __radix_tree_lookup+0x217/0x2b0 [ 147.092841][ T8506] genl_rcv_msg+0x560/0x800 [ 147.092861][ T8506] ? __pfx_genl_rcv_msg+0x10/0x10 [ 147.092879][ T8506] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 147.092913][ T8506] netlink_rcv_skb+0x159/0x420 [ 147.092938][ T8506] ? __pfx_genl_rcv_msg+0x10/0x10 [ 147.092955][ T8506] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 147.092990][ T8506] ? netlink_deliver_tap+0x1ae/0xcc0 [ 147.093017][ T8506] genl_rcv+0x28/0x40 [ 147.093041][ T8506] netlink_unicast+0x585/0x850 [ 147.093068][ T8506] ? __pfx_netlink_unicast+0x10/0x10 [ 147.093092][ T8506] ? __pfx_sock_has_perm+0x10/0x10 [ 147.093118][ T8506] netlink_sendmsg+0x8b0/0xda0 [ 147.093147][ T8506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.093176][ T8506] ? selinux_socket_sendmsg+0x198/0x2f0 [ 147.093203][ T8506] ____sys_sendmsg+0xa4d/0xbe0 [ 147.093223][ T8506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.093255][ T8506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.093287][ T8506] ___sys_sendmsg+0x190/0x1e0 [ 147.093311][ T8506] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.093333][ T8506] ? get_pid_task+0x106/0x250 [ 147.093366][ T8506] ? find_held_lock+0x2b/0x80 [ 147.093401][ T8506] __sys_sendmsg+0x160/0x210 [ 147.093420][ T8506] ? __pfx___sys_sendmsg+0x10/0x10 [ 147.093450][ T8506] do_syscall_64+0x123/0x790 [ 147.093471][ T8506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.093490][ T8506] RIP: 0033:0x7fee1db9e0d9 [ 147.093506][ T8506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.093521][ T8506] RSP: 002b:00007fee1eb16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.093540][ T8506] RAX: ffffffffffffffda RBX: 00007fee1de25fa0 RCX: 00007fee1db9e0d9 [ 147.093551][ T8506] RDX: 0000000000040000 RSI: 00002000000002c0 RDI: 000000000000000a [ 147.093560][ T8506] RBP: 00007fee1eb16090 R08: 0000000000000000 R09: 0000000000000000 [ 147.093567][ T8506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.093573][ T8506] R13: 00007fee1de26038 R14: 00007fee1de25fa0 R15: 00007ffc82fb8ba8 [ 147.093588][ T8506] [ 147.212231][ T5731] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.357006][ T8514] FAULT_INJECTION: forcing a failure. [ 147.357006][ T8514] name failslab, interval 1, probability 0, space 0, times 0 [ 147.360951][ T8514] CPU: 0 UID: 0 PID: 8514 Comm: syz.4.946 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.360970][ T8514] Tainted: [L]=SOFTLOCKUP [ 147.360974][ T8514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.360981][ T8514] Call Trace: [ 147.360986][ T8514] [ 147.360991][ T8514] dump_stack_lvl+0x100/0x190 [ 147.361013][ T8514] should_fail_ex.cold+0x5/0xa [ 147.361029][ T8514] should_failslab+0xc2/0x120 [ 147.361048][ T8514] __kmalloc_cache_noprof+0x91/0x6b0 [ 147.361062][ T8514] ? __ip_vs_get_out_rt+0xb8f/0x20c0 [ 147.361083][ T8514] __ip_vs_get_out_rt+0xb8f/0x20c0 [ 147.361103][ T8514] ? __pfx___ip_vs_get_out_rt+0x10/0x10 [ 147.361123][ T8514] ip_vs_nat_xmit+0x210/0xd00 [ 147.361142][ T8514] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 147.361158][ T8514] ? ip_vs_in_hook+0x168a/0x2840 [ 147.361175][ T8514] ? __local_bh_enable_ip+0xa5/0x120 [ 147.361196][ T8514] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 147.361211][ T8514] ip_vs_in_hook+0xc86/0x2840 [ 147.361230][ T8514] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 147.361245][ T8514] ? __pfx_ip_vs_out_hook+0x10/0x10 [ 147.361275][ T8514] nf_hook_slow+0xbf/0x220 [ 147.361293][ T8514] __ip_local_out+0x541/0xb80 [ 147.361307][ T8514] ? __pfx___ip_local_out+0x10/0x10 [ 147.361318][ T8514] ? ip_make_skb+0x1f4/0x310 [ 147.361331][ T8514] ? __pfx_dst_output+0x10/0x10 [ 147.361342][ T8514] ? __pfx_ip_make_skb+0x10/0x10 [ 147.361354][ T8514] ? csum_tcpudp_nofold+0x24/0x50 [ 147.361373][ T8514] ip_send_skb+0x4a/0x2a0 [ 147.361386][ T8514] udp_send_skb+0xa38/0xfc0 [ 147.361408][ T8514] udp_sendmsg+0x1760/0x2710 [ 147.361423][ T8514] ? __pfx_udp_sendmsg+0x10/0x10 [ 147.361434][ T8514] ? vsnprintf+0x4c5/0x1300 [ 147.361447][ T8514] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 147.361465][ T8514] ? down_write+0x146/0x1f0 [ 147.361489][ T8514] udpv6_sendmsg+0x1420/0x2c20 [ 147.361504][ T8514] ? find_held_lock+0x2b/0x80 [ 147.361522][ T8514] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 147.361535][ T8514] ? do_raw_spin_lock+0x128/0x260 [ 147.361563][ T8514] ? __local_bh_enable_ip+0xa5/0x120 [ 147.361580][ T8514] ? lockdep_hardirqs_on+0x7d/0x110 [ 147.361592][ T8514] ? inet_autobind+0x145/0x1a0 [ 147.361604][ T8514] ? __local_bh_enable_ip+0xa5/0x120 [ 147.361621][ T8514] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 147.361636][ T8514] ? inet6_sendmsg+0x105/0x140 [ 147.361651][ T8514] inet6_sendmsg+0x105/0x140 [ 147.361666][ T8514] ____sys_sendmsg+0x704/0xbe0 [ 147.361682][ T8514] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.361702][ T8514] ___sys_sendmsg+0x190/0x1e0 [ 147.361718][ T8514] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.361737][ T8514] ? get_pid_task+0x106/0x250 [ 147.361755][ T8514] ? find_held_lock+0x2b/0x80 [ 147.361775][ T8514] __sys_sendmsg+0x160/0x210 [ 147.361788][ T8514] ? __pfx___sys_sendmsg+0x10/0x10 [ 147.361805][ T8514] do_syscall_64+0x123/0x790 [ 147.361819][ T8514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.361831][ T8514] RIP: 0033:0x7fee1db9e0d9 [ 147.361842][ T8514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.361853][ T8514] RSP: 002b:00007fee1eb16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.361865][ T8514] RAX: ffffffffffffffda RBX: 00007fee1de25fa0 RCX: 00007fee1db9e0d9 [ 147.361872][ T8514] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 147.361879][ T8514] RBP: 00007fee1eb16090 R08: 0000000000000000 R09: 0000000000000000 [ 147.361886][ T8514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 147.361893][ T8514] R13: 00007fee1de26038 R14: 00007fee1de25fa0 R15: 00007ffc82fb8ba8 [ 147.361906][ T8514] [ 147.518823][ T8520] kvm: kvm [8519]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x6 [ 147.579236][ T42] audit: type=1400 audit(1787321091.506:614): avc: denied { mounton } for pid=8519 comm="syz.4.948" path="/172/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 147.590590][ T8523] overlay: ./file0/file1 is not a directory [ 148.321041][ T5731] Bluetooth: hci3: unexpected subevent 0x19 length: 24 < 28 [ 148.435052][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.951'. [ 148.573209][ T8540] openvswitch: netlink: IPv4 tunnel dst address is zero [ 148.575664][ T8540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.194308][ T8554] syzkaller0: entered promiscuous mode [ 149.196515][ T8554] syzkaller0: entered allmulticast mode [ 149.249806][ T8558] tipc: Enabling of bearer rejected, already enabled [ 149.333909][ T8562] syzkaller0: entered promiscuous mode [ 149.336377][ T8562] syzkaller0: entered allmulticast mode [ 149.425234][ T8566] overlay: ./file1/file2 is not a directory [ 149.493105][ T8570] bond3: Unable to set down delay as MII monitoring is disabled [ 149.499729][ T8570] bond3 (unregistering): Released all slaves [ 149.594153][ T8564] nvme_rdma: malformed address passed: 1:4420 [ 149.596813][ T8564] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 149.629681][ T42] audit: type=1400 audit(1787321093.556:615): avc: denied { write } for pid=8576 comm="syz.1.968" name="subsystems" dev="configfs" ino=4644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 149.640009][ T42] audit: type=1400 audit(1787321093.566:616): avc: denied { write } for pid=8576 comm="syz.1.968" name="subsystems" dev="configfs" ino=4644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 149.789456][ T8585] loop5: detected capacity change from 0 to 14 [ 149.798138][ T8585] Dev loop5: unable to read RDB block 14 [ 149.800793][ T8585] loop5: AHDI p1 p3 p4 [ 149.802709][ T8585] loop5: partition table partially beyond EOD, truncated [ 149.806933][ T8585] loop5: p1 size 100663296 extends beyond EOD, truncated [ 149.816347][ T8585] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 149.946772][ T8586] Dev loop5: unable to read RDB block 14 [ 149.948830][ T8586] loop5: AHDI p1 p3 p4 [ 149.950262][ T8586] loop5: partition table partially beyond EOD, truncated [ 149.952767][ T8586] loop5: p1 size 100663296 extends beyond EOD, truncated [ 149.956419][ T8586] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 149.973999][ T8585] Dev loop5: unable to read RDB block 14 [ 149.975987][ T8585] loop5: AHDI p1 p3 p4 [ 149.977481][ T8585] loop5: partition table partially beyond EOD, truncated [ 149.980288][ T8585] loop5: p1 size 100663296 extends beyond EOD, truncated [ 149.984244][ T8585] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 149.999748][ T6056] udevd[6056]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 150.002835][ T6055] udevd[6055]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 150.037283][ T6056] udevd[6056]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 150.038897][ T6055] udevd[6055]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 150.060979][ T6056] udevd[6056]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 150.061074][ T6055] udevd[6055]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 150.145621][ T42] audit: type=1400 audit(1787321094.076:617): avc: denied { write } for pid=8595 comm="syz.4.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 150.178580][ T42] audit: type=1400 audit(1787321094.106:618): avc: denied { view } for pid=8595 comm="syz.4.975" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 150.252876][ T8601] FAULT_INJECTION: forcing a failure. [ 150.252876][ T8601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.257038][ T8601] CPU: 2 UID: 0 PID: 8601 Comm: syz.4.976 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.257057][ T8601] Tainted: [L]=SOFTLOCKUP [ 150.257061][ T8601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.257068][ T8601] Call Trace: [ 150.257074][ T8601] [ 150.257079][ T8601] dump_stack_lvl+0x100/0x190 [ 150.257101][ T8601] should_fail_ex.cold+0x5/0xa [ 150.257119][ T8601] _copy_to_user+0x32/0xd0 [ 150.257139][ T8601] simple_read_from_buffer+0xcb/0x170 [ 150.257159][ T8601] proc_fail_nth_read+0x1af/0x230 [ 150.257177][ T8601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.257195][ T8601] ? rw_verify_area+0xce/0x6d0 [ 150.257208][ T8601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.257225][ T8601] vfs_read+0x1e4/0xb40 [ 150.257240][ T8601] ? __pfx_vfs_read+0x10/0x10 [ 150.257253][ T8601] ? find_held_lock+0x2b/0x80 [ 150.257268][ T8601] ? __fget_files+0x215/0x3d0 [ 150.257287][ T8601] ? __fget_files+0x21f/0x3d0 [ 150.257307][ T8601] ksys_read+0x12a/0x250 [ 150.257320][ T8601] ? __pfx_ksys_read+0x10/0x10 [ 150.257338][ T8601] do_syscall_64+0x123/0x790 [ 150.257353][ T8601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.257365][ T8601] RIP: 0033:0x7fee1db5e90e [ 150.257375][ T8601] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 150.257386][ T8601] RSP: 002b:00007fee1eb15fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.257398][ T8601] RAX: ffffffffffffffda RBX: 00007fee1eb166c0 RCX: 00007fee1db5e90e [ 150.257405][ T8601] RDX: 000000000000000f RSI: 00007fee1eb160a0 RDI: 0000000000000008 [ 150.257412][ T8601] RBP: 00007fee1eb16090 R08: 0000000000000000 R09: 0000000000000000 [ 150.257418][ T8601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.257425][ T8601] R13: 00007fee1de26038 R14: 00007fee1de25fa0 R15: 00007ffc82fb8ba8 [ 150.257438][ T8601] [ 150.361563][ T8605] IPVS: Unknown mcast interface: lo [ 150.502601][ T8610] syzkaller0: entered promiscuous mode [ 150.504961][ T8610] syzkaller0: entered allmulticast mode [ 150.625060][ T8612] overlayfs: conflicting lowerdir path [ 150.678164][ T8618] FAULT_INJECTION: forcing a failure. [ 150.678164][ T8618] name failslab, interval 1, probability 0, space 0, times 0 [ 150.689104][ T8618] CPU: 3 UID: 0 PID: 8618 Comm: syz.2.983 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.689127][ T8618] Tainted: [L]=SOFTLOCKUP [ 150.689132][ T8618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.689139][ T8618] Call Trace: [ 150.689144][ T8618] [ 150.689149][ T8618] dump_stack_lvl+0x100/0x190 [ 150.689254][ T8618] should_fail_ex.cold+0x5/0xa [ 150.689272][ T8618] should_failslab+0xc2/0x120 [ 150.689291][ T8618] __kmalloc_cache_noprof+0x91/0x6b0 [ 150.689306][ T8618] ? media_pipeline_add_pad+0xf3/0xa00 [ 150.689323][ T8618] media_pipeline_add_pad+0xf3/0xa00 [ 150.689338][ T8618] __media_pipeline_start+0x56f/0x22b0 [ 150.689356][ T8618] ? __pfx___media_pipeline_start+0x10/0x10 [ 150.689375][ T8618] media_pipeline_start+0x49/0x70 [ 150.689388][ T8618] video_device_pipeline_start+0x79/0xa0 [ 150.689405][ T8618] vimc_capture_start_streaming+0x7d/0x130 [ 150.689423][ T8618] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 150.689440][ T8618] vb2_start_streaming+0x162/0x570 [ 150.689451][ T8618] ? __bitmap_weight+0xd7/0x110 [ 150.689467][ T8618] vb2_core_streamon+0x26a/0x3c0 [ 150.689478][ T8618] vb2_ioctl_streamon+0xd9/0x150 [ 150.689495][ T8618] ? v4l_streamon+0x1a/0xa0 [ 150.689511][ T8618] __video_do_ioctl+0xb2a/0xdf0 [ 150.689527][ T8618] ? __might_fault+0xc5/0x140 [ 150.689541][ T8618] ? __pfx___video_do_ioctl+0x10/0x10 [ 150.689560][ T8618] video_usercopy+0x47a/0x1730 [ 150.689575][ T8618] ? __pfx___video_do_ioctl+0x10/0x10 [ 150.689591][ T8618] ? __pfx_video_usercopy+0x10/0x10 [ 150.689614][ T8618] v4l2_ioctl+0x1bd/0x250 [ 150.689629][ T8618] ? __pfx_v4l2_ioctl+0x10/0x10 [ 150.689644][ T8618] __x64_sys_ioctl+0x18e/0x210 [ 150.689661][ T8618] do_syscall_64+0x123/0x790 [ 150.689676][ T8618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.689688][ T8618] RIP: 0033:0x7f123099e0d9 [ 150.689699][ T8618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.689710][ T8618] RSP: 002b:00007f1231830028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.689722][ T8618] RAX: ffffffffffffffda RBX: 00007f1230c25fa0 RCX: 00007f123099e0d9 [ 150.689730][ T8618] RDX: 0000200000000600 RSI: 0000000040045612 RDI: 0000000000000006 [ 150.689736][ T8618] RBP: 00007f1231830090 R08: 0000000000000000 R09: 0000000000000000 [ 150.689743][ T8618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.689749][ T8618] R13: 00007f1230c26038 R14: 00007f1230c25fa0 R15: 00007ffe854b42a8 [ 150.689763][ T8618] [ 150.832990][ T42] audit: type=1400 audit(1787321094.766:619): avc: denied { append } for pid=8619 comm="syz.1.984" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 151.454089][ T8631] netlink: 152 bytes leftover after parsing attributes in process `syz.3.987'. [ 151.951666][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 152.064511][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.990'. [ 152.104305][ T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 152.108454][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 152.111648][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.115116][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 152.118391][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.124008][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 152.126668][ T9] usb 7-1: Product: syz [ 152.128082][ T9] usb 7-1: Manufacturer: syz [ 152.133914][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 152.135769][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 152.138609][ T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 152.140660][ T9] cdc_wdm 7-1:1.0: Unknown control protocol [ 152.269321][ T8649] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.994'. [ 152.274178][ T8649] openvswitch: netlink: Message has 512 unknown bytes. [ 152.337463][ T5960] usb 7-1: USB disconnect, device number 13 [ 153.168883][ T8665] syzkaller1: entered promiscuous mode [ 153.171159][ T8665] syzkaller1: entered allmulticast mode [ 153.181294][ T42] audit: type=1400 audit(1787321097.106:620): avc: denied { remount } for pid=8664 comm="syz.1.1000" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 153.283178][ T42] audit: type=1400 audit(1787321097.217:621): avc: denied { unmount } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 153.312166][ T8667] openvswitch: netlink: Invalid VLAN frame [ 153.388859][ T42] audit: type=1400 audit(1787321097.317:622): avc: denied { create } for pid=8670 comm="syz.1.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 153.393500][ T8671] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1003'. [ 153.395863][ T42] audit: type=1400 audit(1787321097.317:623): avc: denied { write } for pid=8670 comm="syz.1.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 153.760629][ T8679] trusted_key: syz.2.1005 sent an empty control message without MSG_MORE. [ 154.039633][ T8687] syzkaller0: entered promiscuous mode [ 154.041650][ T8687] syzkaller0: entered allmulticast mode [ 154.057525][ T8687] tipc: Enabled bearer , priority 0 [ 154.060907][ T8686] tipc: Resetting bearer [ 154.074514][ T8686] tipc: Disabling bearer [ 154.272840][ T8698] tipc: Enabling of bearer rejected, already enabled [ 154.277661][ T8698] geneve0: entered allmulticast mode [ 154.390588][ T5822] wiimote 0005:057E:0306.0019: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 154.401559][ T5822] wiimote 0005:057E:0306.0019: New device registered [ 154.621212][ T5511] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 154.771236][ T5511] usb 6-1: Using ep0 maxpacket: 8 [ 154.774165][ T5511] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 154.778557][ T5511] usb 6-1: config 0 has no interfaces? [ 154.782386][ T5511] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.785018][ T5511] usb 6-1: Product: syz [ 154.786383][ T5511] usb 6-1: Manufacturer: syz [ 154.788340][ T5511] usb 6-1: SerialNumber: syz [ 154.792871][ T5511] usb 6-1: config 0 descriptor?? [ 154.998604][ T5822] wiimote 0005:057E:0306.0019: detected device: Nintendo Wii Remote (Gen 1) [ 154.998656][ T8705] FAULT_INJECTION: forcing a failure. [ 154.998656][ T8705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.008362][ T8705] CPU: 2 UID: 0 PID: 8705 Comm: syz.1.1015 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.008380][ T8705] Tainted: [L]=SOFTLOCKUP [ 155.008384][ T8705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.008392][ T8705] Call Trace: [ 155.008397][ T8705] [ 155.008401][ T8705] dump_stack_lvl+0x100/0x190 [ 155.008424][ T8705] should_fail_ex.cold+0x5/0xa [ 155.008441][ T8705] _copy_to_user+0x32/0xd0 [ 155.008461][ T8705] simple_read_from_buffer+0xcb/0x170 [ 155.008481][ T8705] proc_fail_nth_read+0x1af/0x230 [ 155.008499][ T8705] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.008517][ T8705] ? rw_verify_area+0xce/0x6d0 [ 155.008530][ T8705] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.008546][ T8705] vfs_read+0x1e4/0xb40 [ 155.008562][ T8705] ? __pfx_vfs_read+0x10/0x10 [ 155.008575][ T8705] ? find_held_lock+0x2b/0x80 [ 155.008590][ T8705] ? __fget_files+0x215/0x3d0 [ 155.008609][ T8705] ? __fget_files+0x21f/0x3d0 [ 155.008629][ T8705] ksys_read+0x12a/0x250 [ 155.008642][ T8705] ? __pfx_ksys_read+0x10/0x10 [ 155.008659][ T8705] do_syscall_64+0x123/0x790 [ 155.008674][ T8705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.008686][ T8705] RIP: 0033:0x7f6a8355e90e [ 155.008697][ T8705] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 155.008708][ T8705] RSP: 002b:00007f6a84407fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 155.008720][ T8705] RAX: ffffffffffffffda RBX: 00007f6a844086c0 RCX: 00007f6a8355e90e [ 155.008727][ T8705] RDX: 000000000000000f RSI: 00007f6a844080a0 RDI: 0000000000000005 [ 155.008734][ T8705] RBP: 00007f6a84408090 R08: 0000000000000000 R09: 0000000000000000 [ 155.008740][ T8705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.008747][ T8705] R13: 00007f6a83826038 R14: 00007f6a83825fa0 R15: 00007ffe0af4bd58 [ 155.008761][ T8705] [ 155.017267][ T5822] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0019/input/input62 [ 155.025711][ T1347] usb 6-1: USB disconnect, device number 17 [ 155.032494][ T8704] wiimote 0005:057E:0306.0019: Device removed [ 155.045216][ T5822] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0019/input/input63 [ 155.093926][ T5822] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0019/input/input61 [ 155.144480][ T8717] FAULT_INJECTION: forcing a failure. [ 155.144480][ T8717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.152138][ T8717] CPU: 1 UID: 0 PID: 8717 Comm: syz.3.1020 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.152161][ T8717] Tainted: [L]=SOFTLOCKUP [ 155.152165][ T8717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.152172][ T8717] Call Trace: [ 155.152177][ T8717] [ 155.152182][ T8717] dump_stack_lvl+0x100/0x190 [ 155.152205][ T8717] should_fail_ex.cold+0x5/0xa [ 155.152222][ T8717] _copy_to_user+0x32/0xd0 [ 155.152243][ T8717] copy_siginfo_to_user+0x27/0xc0 [ 155.152256][ T8717] x64_setup_rt_frame+0xa03/0xce0 [ 155.152276][ T8717] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 155.152294][ T8717] arch_do_signal_or_restart+0x5ee/0x7e0 [ 155.152309][ T8717] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 155.152331][ T8717] exit_to_user_mode_loop+0x139/0x700 [ 155.152351][ T8717] ? rcu_is_watching+0x13/0xc0 [ 155.152364][ T8717] do_syscall_64+0x661/0x790 [ 155.152379][ T8717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.152392][ T8717] RIP: 0033:0x7fd1ad4571b6 [ 155.152403][ T8717] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d 5c da 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48 [ 155.152413][ T8717] RSP: 002b:00007fd1ae438f60 EFLAGS: 00010206 [ 155.152423][ T8717] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 0000200000c00000 [ 155.152430][ T8717] RDX: 00000000000025f5 RSI: 0000200000c00000 RDI: 0000200000c01000 [ 155.152437][ T8717] RBP: 00007fd1ad654660 R08: 0000000000000000 R09: ffffffffffffffff [ 155.152444][ T8717] R10: ffffffffffffffff R11: 0000000000000000 R12: 00000000003ff000 [ 155.152451][ T8717] R13: 0000200000c00000 R14: 00007fd1ad825fa0 R15: 0000000000000000 [ 155.152464][ T8717] [ 155.240410][ T8722] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 155.274810][ T8724] FAULT_INJECTION: forcing a failure. [ 155.274810][ T8724] name failslab, interval 1, probability 0, space 0, times 0 [ 155.280430][ T8724] CPU: 0 UID: 0 PID: 8724 Comm: syz.4.1023 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.280451][ T8724] Tainted: [L]=SOFTLOCKUP [ 155.280455][ T8724] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.280462][ T8724] Call Trace: [ 155.280468][ T8724] [ 155.280473][ T8724] dump_stack_lvl+0x100/0x190 [ 155.280496][ T8724] should_fail_ex.cold+0x5/0xa [ 155.280512][ T8724] should_failslab+0xc2/0x120 [ 155.280531][ T8724] kmem_cache_alloc_noprof+0x91/0x6a0 [ 155.280547][ T8724] ? mas_next_range+0x9b/0xf0 [ 155.280562][ T8724] ? vm_area_alloc+0x1f/0x160 [ 155.280576][ T8724] vm_area_alloc+0x1f/0x160 [ 155.280588][ T8724] __mmap_region+0x103d/0x30b0 [ 155.280604][ T8724] ? post_alloc_hook+0xed/0x120 [ 155.280618][ T8724] ? __pfx___mmap_region+0x10/0x10 [ 155.280630][ T8724] ? get_page_from_freelist+0x110d/0x35b0 [ 155.280646][ T8724] ? kasan_save_stack+0x3f/0x50 [ 155.280670][ T8724] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 155.280684][ T8724] ? mas_prev+0x9b/0xf0 [ 155.280730][ T8724] mmap_region+0x3db/0x6d0 [ 155.280745][ T8724] ? __pfx_mmap_region+0x10/0x10 [ 155.280759][ T8724] ? thp_get_unmapped_area_vmaflags+0x2a5/0x330 [ 155.280774][ T8724] ? selinux_mmap_addr+0x2b/0x110 [ 155.280791][ T8724] ? bpf_lsm_mmap_addr+0x9/0x30 [ 155.280802][ T8724] ? security_mmap_addr+0x71/0x1e0 [ 155.280827][ T8724] ? __get_unmapped_area+0x255/0x3e0 [ 155.280846][ T8724] do_mmap+0x12c7/0x1c30 [ 155.280867][ T8724] ? __pfx_do_mmap+0x10/0x10 [ 155.280884][ T8724] ? __pfx___might_resched+0x10/0x10 [ 155.280901][ T8724] ? selinux_mmap_file+0x154/0x1c0 [ 155.280916][ T8724] ? __pfx_down_write_killable+0x10/0x10 [ 155.280944][ T8724] vm_mmap_pgoff+0x28d/0x470 [ 155.280964][ T8724] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 155.280983][ T8724] ? find_held_lock+0x2b/0x80 [ 155.280996][ T8724] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 155.281012][ T8724] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 155.281030][ T8724] ksys_mmap_pgoff+0xe4/0x610 [ 155.281060][ T8724] ? find_held_lock+0x2b/0x80 [ 155.281076][ T8724] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 155.281097][ T8724] __x64_sys_mmap+0x125/0x190 [ 155.281118][ T8724] do_syscall_64+0x123/0x790 [ 155.281133][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.281145][ T8724] RIP: 0033:0x7fee1db9de42 [ 155.281156][ T8724] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 155.281168][ T8724] RSP: 002b:00007fee1eb14d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 155.281184][ T8724] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fee1db9de42 [ 155.281194][ T8724] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 155.281204][ T8724] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 155.281213][ T8724] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 155.281223][ T8724] R13: 0000000000001000 R14: 0000000000000022 R15: 00007fee1dc52aea [ 155.281246][ T8724] [ 155.461388][ T5960] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 155.621143][ T5960] usb 7-1: Using ep0 maxpacket: 8 [ 155.625489][ T5960] usb 7-1: unable to get BOS descriptor or descriptor too short [ 155.628889][ T5960] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 155.634076][ T5960] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 155.637574][ T5960] usb 7-1: config 0 has no interface number 0 [ 155.640213][ T5960] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 155.645054][ T5960] usb 7-1: config 0 interface 88 has no altsetting 0 [ 155.650783][ T5960] usb 7-1: string descriptor 0 read error: -22 [ 155.653897][ T5960] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 155.662256][ T5960] usb 7-1: config 0 descriptor?? [ 155.673335][ T5960] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.88/input/input64 [ 155.880173][ T1347] usb 7-1: USB disconnect, device number 14 [ 155.967167][ T8731] FAULT_INJECTION: forcing a failure. [ 155.967167][ T8731] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 155.972071][ T8731] CPU: 0 UID: 0 PID: 8731 Comm: syz.4.1026 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.972090][ T8731] Tainted: [L]=SOFTLOCKUP [ 155.972094][ T8731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.972101][ T8731] Call Trace: [ 155.972105][ T8731] [ 155.972110][ T8731] dump_stack_lvl+0x100/0x190 [ 155.972145][ T8731] should_fail_ex.cold+0x5/0xa [ 155.972160][ T8731] ? prepare_alloc_pages+0x16d/0x5b0 [ 155.972181][ T8731] should_fail_alloc_page+0xeb/0x140 [ 155.972200][ T8731] prepare_alloc_pages+0x1f0/0x5b0 [ 155.972220][ T8731] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 155.972240][ T8731] ? find_held_lock+0x2b/0x80 [ 155.972255][ T8731] ? is_bpf_text_address+0x8a/0x1a0 [ 155.972267][ T8731] ? is_bpf_text_address+0x8a/0x1a0 [ 155.972279][ T8731] ? bpf_ksym_find+0x128/0x1c0 [ 155.972293][ T8731] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 155.972310][ T8731] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 155.972324][ T8731] ? is_bpf_text_address+0x94/0x1a0 [ 155.972336][ T8731] ? __kernel_text_address+0xd/0x30 [ 155.972351][ T8731] ? unwind_get_return_address+0x59/0xa0 [ 155.972366][ T8731] ? arch_stack_walk+0xa6/0xf0 [ 155.972384][ T8731] ? __pfx_stack_trace_save+0x10/0x10 [ 155.972399][ T8731] ? stack_depot_save_flags+0x27/0x9f0 [ 155.972414][ T8731] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 155.972434][ T8731] ? policy_nodemask+0xed/0x4f0 [ 155.972454][ T8731] alloc_pages_mpol+0x201/0x550 [ 155.972472][ T8731] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 155.972494][ T8731] alloc_pages_noprof+0x1a/0x160 [ 155.972508][ T8731] get_free_pages_noprof+0x10/0xb0 [ 155.972524][ T8731] __kasan_populate_vmalloc+0xa0/0x210 [ 155.972546][ T8731] alloc_vmap_area+0x95d/0x2bb0 [ 155.972575][ T8731] ? kasan_save_track+0x14/0x30 [ 155.972598][ T8731] ? __kasan_kmalloc+0xaa/0xb0 [ 155.972619][ T8731] ? __pfx_alloc_vmap_area+0x10/0x10 [ 155.972643][ T8731] ? __get_vm_area_node+0x124/0x350 [ 155.972664][ T8731] __get_vm_area_node+0x1ed/0x350 [ 155.972684][ T8731] __vmalloc_node_range_noprof+0x262/0x1460 [ 155.972696][ T8731] ? bpf_check+0x1800/0xa7c0 [ 155.972712][ T8731] ? bpf_check+0x1800/0xa7c0 [ 155.972730][ T8731] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 155.972744][ T8731] ? avc_has_perm_noaudit+0x145/0x3b0 [ 155.972759][ T8731] ? bpf_check+0x1800/0xa7c0 [ 155.972770][ T8731] __vmalloc_node_noprof+0xad/0xf0 [ 155.972781][ T8731] ? bpf_check+0x1800/0xa7c0 [ 155.972793][ T8731] __vmalloc_noprof+0xa3/0x120 [ 155.972804][ T8731] ? __pfx___vmalloc_noprof+0x10/0x10 [ 155.972816][ T8731] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 155.972830][ T8731] ? security_bpf_prog_load+0x10f/0x2f0 [ 155.972846][ T8731] ? bpf_vlog_init+0x118/0x150 [ 155.972860][ T8731] bpf_check+0x1800/0xa7c0 [ 155.972872][ T8731] ? __lock_acquire+0x4c5/0x1ec0 [ 155.972888][ T8731] ? __pfx___css_rstat_updated+0x10/0x10 [ 155.972903][ T8731] ? __lock_acquire+0x4c5/0x1ec0 [ 155.972922][ T8731] ? __pfx_bpf_check+0x10/0x10 [ 155.972935][ T8731] ? find_held_lock+0x2b/0x80 [ 155.972947][ T8731] ? bpf_prog_load+0x1a09/0x2a80 [ 155.972961][ T8731] ? __asan_memset+0x23/0x50 [ 155.972988][ T8731] ? bpf_prog_load+0x1ac3/0x2a80 [ 155.972999][ T8731] bpf_prog_load+0x1ac3/0x2a80 [ 155.973013][ T8731] ? __pfx_bpf_prog_load+0x10/0x10 [ 155.973036][ T8731] __sys_bpf+0x1f46/0x4a30 [ 155.973054][ T8731] ? __pfx___sys_bpf+0x10/0x10 [ 155.973068][ T8731] ? find_held_lock+0x2b/0x80 [ 155.973080][ T8731] ? get_pid_task+0xfc/0x250 [ 155.973092][ T8731] ? get_pid_task+0xfc/0x250 [ 155.973108][ T8731] ? find_held_lock+0x2b/0x80 [ 155.973124][ T8731] ? rcu_read_lock_any_held+0x6a/0x90 [ 155.973138][ T8731] ? find_held_lock+0x2b/0x80 [ 155.973150][ T8731] ? ksys_write+0x190/0x250 [ 155.973165][ T8731] ? ksys_write+0x190/0x250 [ 155.973188][ T8731] ? fput+0x7c/0x100 [ 155.973204][ T8731] ? ksys_write+0x1ac/0x250 [ 155.973219][ T8731] ? __x64_sys_bpf+0xce/0x140 [ 155.973233][ T8731] __x64_sys_bpf+0xce/0x140 [ 155.973249][ T8731] ? do_syscall_64+0xae/0x790 [ 155.973262][ T8731] do_syscall_64+0x123/0x790 [ 155.973275][ T8731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.973288][ T8731] RIP: 0033:0x7fee1db9e0d9 [ 155.973298][ T8731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.973310][ T8731] RSP: 002b:00007fee1eb16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.973322][ T8731] RAX: ffffffffffffffda RBX: 00007fee1de25fa0 RCX: 00007fee1db9e0d9 [ 155.973329][ T8731] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 155.973335][ T8731] RBP: 00007fee1eb16090 R08: 0000000000000000 R09: 0000000000000000 [ 155.973342][ T8731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.973348][ T8731] R13: 00007fee1de26038 R14: 00007fee1de25fa0 R15: 00007ffc82fb8ba8 [ 155.973362][ T8731] [ 155.973416][ T8731] syz.4.1026: vmalloc error: size 3400, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 156.153893][ T8731] CPU: 0 UID: 0 PID: 8731 Comm: syz.4.1026 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.153912][ T8731] Tainted: [L]=SOFTLOCKUP [ 156.153916][ T8731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.153923][ T8731] Call Trace: [ 156.153928][ T8731] [ 156.153933][ T8731] dump_stack_lvl+0x100/0x190 [ 156.153955][ T8731] warn_alloc.cold+0x9e/0xb2 [ 156.153969][ T8731] ? __pfx_warn_alloc+0x10/0x10 [ 156.153984][ T8731] ? lockdep_hardirqs_on+0x7d/0x110 [ 156.153999][ T8731] ? __get_vm_area_node+0x2f0/0x350 [ 156.154036][ T8731] ? __get_vm_area_node+0x22b/0x350 [ 156.154056][ T8731] __vmalloc_node_range_noprof+0xf6b/0x1460 [ 156.154072][ T8731] ? bpf_check+0x1800/0xa7c0 [ 156.154087][ T8731] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 156.154100][ T8731] ? avc_has_perm_noaudit+0x145/0x3b0 [ 156.154116][ T8731] ? bpf_check+0x1800/0xa7c0 [ 156.154126][ T8731] __vmalloc_node_noprof+0xad/0xf0 [ 156.154137][ T8731] ? bpf_check+0x1800/0xa7c0 [ 156.154150][ T8731] __vmalloc_noprof+0xa3/0x120 [ 156.154160][ T8731] ? __pfx___vmalloc_noprof+0x10/0x10 [ 156.154173][ T8731] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 156.154186][ T8731] ? security_bpf_prog_load+0x10f/0x2f0 [ 156.154201][ T8731] ? bpf_vlog_init+0x118/0x150 [ 156.154215][ T8731] bpf_check+0x1800/0xa7c0 [ 156.154227][ T8731] ? __lock_acquire+0x4c5/0x1ec0 [ 156.154248][ T8731] ? __pfx___css_rstat_updated+0x10/0x10 [ 156.154263][ T8731] ? __lock_acquire+0x4c5/0x1ec0 [ 156.154283][ T8731] ? __pfx_bpf_check+0x10/0x10 [ 156.154295][ T8731] ? find_held_lock+0x2b/0x80 [ 156.154308][ T8731] ? bpf_prog_load+0x1a09/0x2a80 [ 156.154322][ T8731] ? __asan_memset+0x23/0x50 [ 156.154339][ T8731] ? bpf_prog_load+0x1ac3/0x2a80 [ 156.154350][ T8731] bpf_prog_load+0x1ac3/0x2a80 [ 156.154364][ T8731] ? __pfx_bpf_prog_load+0x10/0x10 [ 156.154386][ T8731] __sys_bpf+0x1f46/0x4a30 [ 156.154405][ T8731] ? __pfx___sys_bpf+0x10/0x10 [ 156.154420][ T8731] ? find_held_lock+0x2b/0x80 [ 156.154432][ T8731] ? get_pid_task+0xfc/0x250 [ 156.154445][ T8731] ? get_pid_task+0xfc/0x250 [ 156.154461][ T8731] ? find_held_lock+0x2b/0x80 [ 156.154483][ T8731] ? rcu_read_lock_any_held+0x6a/0x90 [ 156.154503][ T8731] ? find_held_lock+0x2b/0x80 [ 156.154522][ T8731] ? ksys_write+0x190/0x250 [ 156.154544][ T8731] ? ksys_write+0x190/0x250 [ 156.154578][ T8731] ? fput+0x7c/0x100 [ 156.154595][ T8731] ? ksys_write+0x1ac/0x250 [ 156.154610][ T8731] ? __x64_sys_bpf+0xce/0x140 [ 156.154624][ T8731] __x64_sys_bpf+0xce/0x140 [ 156.154640][ T8731] ? do_syscall_64+0xae/0x790 [ 156.154653][ T8731] do_syscall_64+0x123/0x790 [ 156.154666][ T8731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.154678][ T8731] RIP: 0033:0x7fee1db9e0d9 [ 156.154689][ T8731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.154700][ T8731] RSP: 002b:00007fee1eb16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 156.154713][ T8731] RAX: ffffffffffffffda RBX: 00007fee1de25fa0 RCX: 00007fee1db9e0d9 [ 156.154720][ T8731] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 156.154727][ T8731] RBP: 00007fee1eb16090 R08: 0000000000000000 R09: 0000000000000000 [ 156.154735][ T8731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 156.154744][ T8731] R13: 00007fee1de26038 R14: 00007fee1de25fa0 R15: 00007ffc82fb8ba8 [ 156.154765][ T8731] [ 156.154771][ T8731] Mem-Info: [ 156.274542][ T8731] active_anon:11359 inactive_anon:2 isolated_anon:0 [ 156.274542][ T8731] active_file:3438 inactive_file:61694 isolated_file:0 [ 156.274542][ T8731] unevictable:1000 dirty:103 writeback:0 [ 156.274542][ T8731] slab_reclaimable:12267 slab_unreclaimable:74926 [ 156.274542][ T8731] mapped:30554 shmem:1562 pagetables:5980 [ 156.274542][ T8731] sec_pagetables:294 bounce:0 [ 156.274542][ T8731] kernel_misc_reclaimable:0 [ 156.274542][ T8731] free:414421 free_pcp:8639 free_cma:0 [ 156.289708][ T8731] Node 0 active_anon:45428kB inactive_anon:0kB active_file:13752kB inactive_file:246472kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:122180kB dirty:412kB writeback:0kB shmem:4248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14112kB pagetables:5340kB sec_pagetables:1176kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 156.301766][ T8731] Node 1 active_anon:8kB inactive_anon:8kB active_file:0kB inactive_file:304kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:18580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 156.312888][ T8731] Node 0 DMA free:7640kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:1876kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 156.322647][ T8731] lowmem_reserve[]: 0 1224 1224 1224 1224 [ 156.324543][ T8731] Node 0 DMA32 free:49480kB boost:0kB min:27364kB low:34204kB high:41044kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45428kB inactive_anon:0kB active_file:13752kB inactive_file:244596kB unevictable:2000kB writepending:412kB zspages:0kB present:2080628kB managed:1253908kB mlocked:0kB bounce:0kB free_pcp:18360kB local_pcp:2404kB free_cma:0kB [ 156.335526][ T8731] lowmem_reserve[]: 0 0 0 0 0 [ 156.337137][ T8731] Node 1 Normal free:1600564kB boost:0kB min:39872kB low:49840kB high:59808kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:8kB active_file:0kB inactive_file:304kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:20672kB local_pcp:2164kB free_cma:0kB [ 156.350381][ T8731] lowmem_reserve[]: 0 0 0 0 0 [ 156.352585][ T8731] Node 0 DMA: 6*4kB (UM) 10*8kB (UM) 37*16kB (UM) 29*32kB (UM) 16*64kB (UM) 5*128kB (UM) 1*256kB (M) 2*512kB (M) 3*1024kB (UM) 0*2048kB 0*4096kB = 7640kB [ 156.359010][ T8731] Node 0 DMA32: 244*4kB (UME) 265*8kB (UM) 133*16kB (UME) 252*32kB (UME) 54*64kB (UME) 29*128kB (UME) 15*256kB (ME) 21*512kB (UM) 8*1024kB (UM) 0*2048kB 0*4096kB = 43240kB [ 156.365951][ T8731] Node 1 Normal: 227*4kB (UM) 501*8kB (UM) 128*16kB (UME) 268*32kB (UE) 516*64kB (UME) 519*128kB (UME) 505*256kB (UM) 487*512kB (UME) 453*1024kB (UME) 34*2048kB (UME) 140*4096kB (UM) = 1600564kB [ 156.373187][ T8731] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.377243][ T8731] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=3 hugepages_size=2048kB [ 156.381373][ T8731] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.385389][ T8731] Node 1 hugepages_total=4 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 156.389231][ T8731] 66692 total pagecache pages [ 156.391618][ T8731] 2 pages in swap cache [ 156.393410][ T8731] Free swap = 124988kB [ 156.395223][ T8731] Total swap = 124996kB [ 156.396711][ T8731] 1048443 pages RAM [ 156.397961][ T8731] 0 pages HighMem/MovableOnly [ 156.399466][ T8731] 285655 pages reserved [ 156.400813][ T8731] 0 pages cma reserved [ 156.518523][ T8750] ALSA: mixer_oss: invalid OSS volume '' [ 156.735557][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1036'. [ 156.792646][ T8758] usbcore.quirks: string doesn't fit in 127 chars. [ 156.920510][ T42] audit: type=1800 audit(1787321100.847:624): pid=8763 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1037" name="zoned" dev="configfs" ino=28874 res=0 errno=0 [ 156.927843][ T42] audit: type=1800 audit(1787321100.857:625): pid=8763 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1037" name="power" dev="configfs" ino=28191 res=0 errno=0 [ 156.994842][ T8769] Context (ID=0x1) not attached to queue pair (handle=0x2:0x80009) [ 157.008043][ T8748] FAULT_INJECTION: forcing a failure. [ 157.008043][ T8748] name failslab, interval 1, probability 0, space 0, times 0 [ 157.013416][ T8769] syzkaller0: entered promiscuous mode [ 157.013432][ T8769] syzkaller0: entered allmulticast mode [ 157.018243][ T8748] CPU: 0 UID: 0 PID: 8748 Comm: syz.4.1032 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.018270][ T8748] Tainted: [L]=SOFTLOCKUP [ 157.018274][ T8748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.018281][ T8748] Call Trace: [ 157.018287][ T8748] [ 157.018292][ T8748] dump_stack_lvl+0x100/0x190 [ 157.018315][ T8748] should_fail_ex.cold+0x5/0xa [ 157.018332][ T8748] should_failslab+0xc2/0x120 [ 157.018352][ T8748] __kmalloc_noprof+0xfc/0x820 [ 157.018367][ T8748] ? arch_stack_walk+0xa6/0xf0 [ 157.018380][ T8748] ? constrain_params_by_rules+0x175/0xd20 [ 157.018398][ T8748] constrain_params_by_rules+0x175/0xd20 [ 157.018414][ T8748] ? stack_trace_save+0x8e/0xc0 [ 157.018429][ T8748] ? stack_depot_save_flags+0x27/0x9f0 [ 157.018444][ T8748] ? stack_depot_save_flags+0x27/0x9f0 [ 157.018457][ T8748] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 157.018471][ T8748] ? kasan_save_stack+0x3f/0x50 [ 157.018487][ T8748] ? __kasan_kmalloc+0xaa/0xb0 [ 157.018502][ T8748] ? __kmalloc_cache_noprof+0x2e7/0x6b0 [ 157.018515][ T8748] ? snd_pcm_oss_release+0x238/0x300 [ 157.018530][ T8748] ? __fput+0x3ff/0xb50 [ 157.018539][ T8748] ? fput_close_sync+0x118/0x250 [ 157.018549][ T8748] ? __x64_sys_close+0x8b/0x120 [ 157.018565][ T8748] ? snd_interval_refine+0x2d0/0x580 [ 157.018584][ T8748] snd_pcm_hw_refine+0x82a/0xb40 [ 157.018614][ T8748] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 157.018633][ T8748] ? kasan_save_track+0x14/0x30 [ 157.018648][ T8748] ? __kasan_kmalloc+0xaa/0xb0 [ 157.018666][ T8748] snd_pcm_hw_param_last+0x2b2/0x660 [ 157.018682][ T8748] snd_pcm_hw_param_near.constprop.0+0x546/0x850 [ 157.018699][ T8748] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 157.018713][ T8748] ? calc_src_frames.isra.0+0x17c/0x1c0 [ 157.018731][ T8748] snd_pcm_oss_change_params_locked+0x193a/0x39f0 [ 157.018754][ T8748] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 157.018768][ T8748] ? __pfx___mutex_lock+0x10/0x10 [ 157.018782][ T8748] ? snd_pcm_oss_sync+0x1a0/0x840 [ 157.018800][ T8748] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 157.018816][ T8748] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 157.018831][ T8748] snd_pcm_oss_sync+0x1de/0x840 [ 157.018847][ T8748] snd_pcm_oss_release+0x238/0x300 [ 157.018861][ T8748] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 157.018875][ T8748] __fput+0x3ff/0xb50 [ 157.018888][ T8748] fput_close_sync+0x118/0x250 [ 157.018900][ T8748] ? __pfx_fput_close_sync+0x10/0x10 [ 157.018915][ T8748] __x64_sys_close+0x8b/0x120 [ 157.018927][ T8748] do_syscall_64+0x123/0x790 [ 157.018940][ T8748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.018952][ T8748] RIP: 0033:0x7fee1db9e0d9 [ 157.018963][ T8748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.018973][ T8748] RSP: 002b:00007fee1eb16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 157.018985][ T8748] RAX: ffffffffffffffda RBX: 00007fee1de25fa0 RCX: 00007fee1db9e0d9 [ 157.018992][ T8748] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 157.018998][ T8748] RBP: 00007fee1eb16090 R08: 0000000000000000 R09: 0000000000000000 [ 157.019005][ T8748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.019011][ T8748] R13: 00007fee1de26038 R14: 00007fee1de25fa0 R15: 00007ffc82fb8ba8 [ 157.019025][ T8748] [ 157.186375][ T42] audit: type=1326 audit(1787321101.117:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.4.1040" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee1db9e0d9 code=0x0 [ 157.586935][ T8786] FAULT_INJECTION: forcing a failure. [ 157.586935][ T8786] name failslab, interval 1, probability 0, space 0, times 0 [ 157.590903][ T8786] CPU: 2 UID: 0 PID: 8786 Comm: syz.2.1044 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.590929][ T8786] Tainted: [L]=SOFTLOCKUP [ 157.590936][ T8786] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.590947][ T8786] Call Trace: [ 157.590955][ T8786] [ 157.590962][ T8786] dump_stack_lvl+0x100/0x190 [ 157.590989][ T8786] should_fail_ex.cold+0x5/0xa [ 157.591006][ T8786] should_failslab+0xc2/0x120 [ 157.591033][ T8786] __kmalloc_noprof+0xfc/0x820 [ 157.591057][ T8786] ? rcu_is_watching+0x13/0xc0 [ 157.591080][ T8786] ? tomoyo_realpath_from_path+0xb6/0x690 [ 157.591110][ T8786] tomoyo_realpath_from_path+0xb6/0x690 [ 157.591132][ T8786] tomoyo_path_number_perm+0x23c/0x580 [ 157.591148][ T8786] ? tomoyo_path_number_perm+0x22e/0x580 [ 157.591164][ T8786] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 157.591193][ T8786] ? find_held_lock+0x2b/0x80 [ 157.591206][ T8786] ? hook_file_ioctl_common+0x140/0x440 [ 157.591223][ T8786] ? __fget_files+0x21f/0x3d0 [ 157.591245][ T8786] security_file_ioctl+0xd3/0x230 [ 157.591264][ T8786] __x64_sys_ioctl+0xb7/0x210 [ 157.591280][ T8786] do_syscall_64+0x123/0x790 [ 157.591296][ T8786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.591308][ T8786] RIP: 0033:0x7f123099e0d9 [ 157.591319][ T8786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.591331][ T8786] RSP: 002b:00007f1231830028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.591343][ T8786] RAX: ffffffffffffffda RBX: 00007f1230c25fa0 RCX: 00007f123099e0d9 [ 157.591350][ T8786] RDX: 0000200000000000 RSI: 000000000000541b RDI: 0000000000000003 [ 157.591357][ T8786] RBP: 00007f1231830090 R08: 0000000000000000 R09: 0000000000000000 [ 157.591364][ T8786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.591371][ T8786] R13: 00007f1230c26038 R14: 00007f1230c25fa0 R15: 00007ffe854b42a8 [ 157.591385][ T8786] [ 157.591390][ T8786] ERROR: Out of memory at tomoyo_realpath_from_path. [ 157.695981][ T42] audit: type=1400 audit(1787321101.627:627): avc: denied { setattr } for pid=8787 comm="syz.2.1045" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 157.705644][ T42] audit: type=1400 audit(1787321101.637:628): avc: denied { write } for pid=8787 comm="syz.2.1045" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 158.079507][ T8797] kAFS: No cell specified [ 158.126597][ T8802] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1050'. [ 158.265917][ T8812] trusted_key: encrypted_key: insufficient parameters specified [ 158.284225][ T8813] FAULT_INJECTION: forcing a failure. [ 158.284225][ T8813] name failslab, interval 1, probability 0, space 0, times 0 [ 158.288274][ T8813] CPU: 2 UID: 0 PID: 8813 Comm: syz.3.1052 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.288293][ T8813] Tainted: [L]=SOFTLOCKUP [ 158.288297][ T8813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.288304][ T8813] Call Trace: [ 158.288309][ T8813] [ 158.288314][ T8813] dump_stack_lvl+0x100/0x190 [ 158.288337][ T8813] should_fail_ex.cold+0x5/0xa [ 158.288355][ T8813] should_failslab+0xc2/0x120 [ 158.288373][ T8813] __kmalloc_cache_noprof+0x91/0x6b0 [ 158.288388][ T8813] ? media_pipeline_add_pad+0xf3/0xa00 [ 158.288406][ T8813] media_pipeline_add_pad+0xf3/0xa00 [ 158.288421][ T8813] __media_pipeline_start+0xa4d/0x22b0 [ 158.288439][ T8813] ? __pfx___media_pipeline_start+0x10/0x10 [ 158.288458][ T8813] media_pipeline_start+0x49/0x70 [ 158.288471][ T8813] video_device_pipeline_start+0x79/0xa0 [ 158.288488][ T8813] vimc_capture_start_streaming+0x7d/0x130 [ 158.288505][ T8813] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 158.288522][ T8813] vb2_start_streaming+0x162/0x570 [ 158.288533][ T8813] ? __bitmap_weight+0xd7/0x110 [ 158.288549][ T8813] vb2_core_streamon+0x26a/0x3c0 [ 158.288561][ T8813] vb2_ioctl_streamon+0xd9/0x150 [ 158.288578][ T8813] ? v4l_streamon+0x1a/0xa0 [ 158.288594][ T8813] __video_do_ioctl+0xb2a/0xdf0 [ 158.288611][ T8813] ? __might_fault+0xc5/0x140 [ 158.288625][ T8813] ? __pfx___video_do_ioctl+0x10/0x10 [ 158.288644][ T8813] video_usercopy+0x47a/0x1730 [ 158.288659][ T8813] ? __pfx___video_do_ioctl+0x10/0x10 [ 158.288675][ T8813] ? __pfx_video_usercopy+0x10/0x10 [ 158.288698][ T8813] v4l2_ioctl+0x1bd/0x250 [ 158.288712][ T8813] ? __pfx_v4l2_ioctl+0x10/0x10 [ 158.288728][ T8813] __x64_sys_ioctl+0x18e/0x210 [ 158.288745][ T8813] do_syscall_64+0x123/0x790 [ 158.288760][ T8813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.288772][ T8813] RIP: 0033:0x7fd1ad59e0d9 [ 158.288787][ T8813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.288798][ T8813] RSP: 002b:00007fd1ae3f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.288810][ T8813] RAX: ffffffffffffffda RBX: 00007fd1ad826180 RCX: 00007fd1ad59e0d9 [ 158.288818][ T8813] RDX: 0000200000000600 RSI: 0000000040045612 RDI: 0000000000000006 [ 158.288825][ T8813] RBP: 00007fd1ae3f7090 R08: 0000000000000000 R09: 0000000000000000 [ 158.288831][ T8813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 158.288838][ T8813] R13: 00007fd1ad826218 R14: 00007fd1ad826180 R15: 00007ffcb7bd1838 [ 158.288852][ T8813] [ 158.401472][ T8818] tmpfs: Bad value for 'mpol' [ 158.406932][ T8818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1056'. [ 158.409837][ T8818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1056'. [ 158.417713][ T42] audit: type=1400 audit(1787321102.347:629): avc: denied { ioctl } for pid=8817 comm="" path="cgroup:[4026532873]" dev="nsfs" ino=4026532873 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 158.477705][ T8820] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 158.481765][ T8820] ip6t_srh: unknown srh match flags 4015 [ 159.056499][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1059'. [ 159.143285][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1060'. [ 159.425943][ T8841] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 159.430052][ T8841] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 159.450222][ T8837] ------------[ cut here ]------------ [ 159.452314][ T8837] origin->pipe && origin->pipe != pipe [ 159.452326][ T8837] WARNING: drivers/media/mc/mc-entity.c:785 at __media_pipeline_start+0x1add/0x22b0, CPU#0: syz.2.1063/8837 [ 159.457890][ T8837] Modules linked in: [ 159.459406][ T8837] CPU: 0 UID: 0 PID: 8837 Comm: syz.2.1063 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.462909][ T8837] Tainted: [L]=SOFTLOCKUP [ 159.464287][ T8837] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.467567][ T8837] RIP: 0010:__media_pipeline_start+0x1add/0x22b0 [ 159.469590][ T8837] Code: 4d f0 f9 66 90 41 bc f0 ff ff ff e9 5d f9 ff ff e8 a8 4d f0 f9 48 8b 7c 24 10 e8 fe f4 56 fa e9 75 f2 ff ff e8 94 4d f0 f9 90 <0f> 0b 90 41 bc ea ff ff ff e9 a7 e6 ff ff e8 70 21 63 fa e9 a5 f4 [ 159.475828][ T8837] RSP: 0018:ffffc900072f79b8 EFLAGS: 00010283 [ 159.477788][ T8837] RAX: 0000000000000732 RBX: ffff88802f15ca10 RCX: ffffc9000c742000 [ 159.480393][ T8837] RDX: 0000000000080000 RSI: ffffffff881ab43c RDI: ffff88802f156b00 [ 159.482945][ T8837] RBP: ffff88802dcb9168 R08: 0000000000000005 R09: 0000000000000000 [ 159.485432][ T8837] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802f156a10 [ 159.487920][ T8837] R13: ffff88802f156020 R14: ffff88802f156750 R15: ffff88802f156ac8 [ 159.490457][ T8837] FS: 00007f12318306c0(0000) GS:ffff8880d5ba2000(0000) knlGS:0000000000000000 [ 159.493389][ T8837] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.495562][ T8837] CR2: 0000000000000000 CR3: 000000004998c000 CR4: 0000000000352ef0 [ 159.498459][ T8837] Call Trace: [ 159.499886][ T8837] [ 159.501266][ T8837] ? __pfx___mutex_lock+0x10/0x10 [ 159.503004][ T8837] ? __pfx___media_pipeline_start+0x10/0x10 [ 159.504909][ T8837] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 159.506700][ T8837] media_pipeline_start+0x49/0x70 [ 159.508388][ T8837] video_device_pipeline_start+0x79/0xa0 [ 159.510179][ T8837] vimc_capture_start_streaming+0x7d/0x130 [ 159.512165][ T8837] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 159.514242][ T8837] vb2_start_streaming+0x162/0x570 [ 159.515904][ T8837] ? __bitmap_weight+0xd7/0x110 [ 159.517499][ T8837] vb2_core_streamon+0x26a/0x3c0 [ 159.519084][ T8837] vb2_ioctl_streamon+0xd9/0x150 [ 159.520758][ T8837] ? v4l_streamon+0x1a/0xa0 [ 159.522230][ T8837] __video_do_ioctl+0xb2a/0xdf0 [ 159.523801][ T8837] ? __might_fault+0xc5/0x140 [ 159.525302][ T8837] ? __pfx___video_do_ioctl+0x10/0x10 [ 159.527052][ T8837] video_usercopy+0x47a/0x1730 [ 159.528588][ T8837] ? __pfx___video_do_ioctl+0x10/0x10 [ 159.530324][ T8837] ? __pfx_video_usercopy+0x10/0x10 [ 159.532070][ T8837] v4l2_ioctl+0x1bd/0x250 [ 159.533468][ T8837] ? __pfx_v4l2_ioctl+0x10/0x10 [ 159.534970][ T8837] __x64_sys_ioctl+0x18e/0x210 [ 159.536507][ T8837] do_syscall_64+0x123/0x790 [ 159.538006][ T8837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.539919][ T8837] RIP: 0033:0x7f123099e0d9 [ 159.541422][ T8837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.547492][ T8837] RSP: 002b:00007f1231830028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.550147][ T8837] RAX: ffffffffffffffda RBX: 00007f1230c25fa0 RCX: 00007f123099e0d9 [ 159.552726][ T8837] RDX: 0000200000000600 RSI: 0000000040045612 RDI: 0000000000000009 [ 159.555235][ T8837] RBP: 00007f1230a35024 R08: 0000000000000000 R09: 0000000000000000 [ 159.557726][ T8837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.560368][ T8837] R13: 00007f1230c26038 R14: 00007f1230c25fa0 R15: 00007ffe854b42a8 [ 159.563026][ T8837] [ 159.563974][ T8837] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 159.566297][ T8837] CPU: 0 UID: 0 PID: 8837 Comm: syz.2.1063 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.569746][ T8837] Tainted: [L]=SOFTLOCKUP [ 159.571148][ T8837] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.574310][ T8837] Call Trace: [ 159.575388][ T8837] [ 159.576378][ T8837] dump_stack_lvl+0x100/0x190 [ 159.578210][ T8837] vpanic+0x553/0x970 [ 159.579520][ T8837] ? __pfx_vpanic+0x10/0x10 [ 159.581127][ T8837] panic+0xd1/0xe0 [ 159.582366][ T8837] ? __pfx_panic+0x10/0x10 [ 159.583807][ T8837] check_panic_on_warn.cold+0x19/0x34 [ 159.585504][ T8837] ? __media_pipeline_start+0x1add/0x22b0 [ 159.587383][ T8837] __warn.cold+0x191/0x318 [ 159.588839][ T8837] __report_bug+0x30f/0x440 [ 159.590341][ T8837] ? __media_pipeline_start+0x1add/0x22b0 [ 159.592149][ T8837] ? __pfx___report_bug+0x10/0x10 [ 159.593760][ T8837] ? __lock_acquire+0x4c5/0x1ec0 [ 159.595352][ T8837] ? unwind_get_return_address+0x59/0xa0 [ 159.597203][ T8837] ? arch_stack_walk+0xa6/0xf0 [ 159.598753][ T8837] ? __media_pipeline_start+0x1add/0x22b0 [ 159.600580][ T8837] report_bug+0xb3/0x220 [ 159.601943][ T8837] ? __media_pipeline_start+0x1add/0x22b0 [ 159.603787][ T8837] handle_bug+0x16a/0x2a0 [ 159.605205][ T8837] exc_invalid_op+0x17/0x50 [ 159.606695][ T8837] asm_exc_invalid_op+0x1a/0x20 [ 159.608253][ T8837] RIP: 0010:__media_pipeline_start+0x1add/0x22b0 [ 159.610269][ T8837] Code: 4d f0 f9 66 90 41 bc f0 ff ff ff e9 5d f9 ff ff e8 a8 4d f0 f9 48 8b 7c 24 10 e8 fe f4 56 fa e9 75 f2 ff ff e8 94 4d f0 f9 90 <0f> 0b 90 41 bc ea ff ff ff e9 a7 e6 ff ff e8 70 21 63 fa e9 a5 f4 [ 159.617174][ T8837] RSP: 0018:ffffc900072f79b8 EFLAGS: 00010283 [ 159.619737][ T8837] RAX: 0000000000000732 RBX: ffff88802f15ca10 RCX: ffffc9000c742000 [ 159.622705][ T8837] RDX: 0000000000080000 RSI: ffffffff881ab43c RDI: ffff88802f156b00 [ 159.625188][ T8837] RBP: ffff88802dcb9168 R08: 0000000000000005 R09: 0000000000000000 [ 159.627730][ T8837] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802f156a10 [ 159.630170][ T8837] R13: ffff88802f156020 R14: ffff88802f156750 R15: ffff88802f156ac8 [ 159.632672][ T8837] ? __media_pipeline_start+0x1adc/0x22b0 [ 159.634488][ T8837] ? __media_pipeline_start+0x1adc/0x22b0 [ 159.636310][ T8837] ? __pfx___mutex_lock+0x10/0x10 [ 159.637916][ T8837] ? __pfx___media_pipeline_start+0x10/0x10 [ 159.639828][ T8837] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 159.641546][ T8837] media_pipeline_start+0x49/0x70 [ 159.643160][ T8837] video_device_pipeline_start+0x79/0xa0 [ 159.644945][ T8837] vimc_capture_start_streaming+0x7d/0x130 [ 159.646842][ T8837] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 159.648867][ T8837] vb2_start_streaming+0x162/0x570 [ 159.650500][ T8837] ? __bitmap_weight+0xd7/0x110 [ 159.651964][ T8837] vb2_core_streamon+0x26a/0x3c0 [ 159.653460][ T8837] vb2_ioctl_streamon+0xd9/0x150 [ 159.654984][ T8837] ? v4l_streamon+0x1a/0xa0 [ 159.656387][ T8837] __video_do_ioctl+0xb2a/0xdf0 [ 159.657932][ T8837] ? __might_fault+0xc5/0x140 [ 159.659424][ T8837] ? __pfx___video_do_ioctl+0x10/0x10 [ 159.661160][ T8837] video_usercopy+0x47a/0x1730 [ 159.662685][ T8837] ? __pfx___video_do_ioctl+0x10/0x10 [ 159.664364][ T8837] ? __pfx_video_usercopy+0x10/0x10 [ 159.666039][ T8837] v4l2_ioctl+0x1bd/0x250 [ 159.667407][ T8837] ? __pfx_v4l2_ioctl+0x10/0x10 [ 159.668916][ T8837] __x64_sys_ioctl+0x18e/0x210 [ 159.670429][ T8837] do_syscall_64+0x123/0x790 [ 159.671911][ T8837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.673786][ T8837] RIP: 0033:0x7f123099e0d9 [ 159.675210][ T8837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.681557][ T8837] RSP: 002b:00007f1231830028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.684194][ T8837] RAX: ffffffffffffffda RBX: 00007f1230c25fa0 RCX: 00007f123099e0d9 [ 159.686669][ T8837] RDX: 0000200000000600 RSI: 0000000040045612 RDI: 0000000000000009 [ 159.689000][ T8837] RBP: 00007f1230a35024 R08: 0000000000000000 R09: 0000000000000000 [ 159.691411][ T8837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.693723][ T8837] R13: 00007f1230c26038 R14: 00007f1230c25fa0 R15: 00007ffe854b42a8 [ 159.696066][ T8837] [ 159.697676][ T8837] Kernel Offset: disabled [ 159.699051][ T8837] Rebooting in 86400 seconds..