last executing test programs: 1m29.49412659s ago: executing program 3 (id=1525): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x3, 0x8, 0x3}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000280)={r1}) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000000540)={&(0x7f00000004c0)=[{&(0x7f00000002c0)="ab30602fb214fe74e4f5f0c018036fb3afedd2769af48d30a3f4b750b99eadfa92970587d0daa0f436f1aad8dc96c67b084dca1d378d6af8e075b6c39734718c99e76ecc944151965bcb354029d00be278aa30532c9804065b649ed2aad14faa20e8a6b80f341b672a616db46498e3ebc09fef52953198442567", 0x7a}, {0xfffffffffffffffd}, {&(0x7f0000000340)="04a703fe57f5cf7f0bb27c4b8fd6f56b1c573a0d8467d6e6a620df8703729b798fc65edaf181ebf50107b5a573ac65c2e55c745db252cf94441828748bbcb3c88efc5d5277342c25f86decbf21712feb13e9e7c8eddda7ad88705d6cfa42b75cda2907ccc4d0fd1838928604ca36f7c2a80a1c7404b0f4b081eee4b339ea6e9f4fba088e82ba62ed9555ba8df61bd63a6cf26649e8edd805ecd70fcfcf", 0x9d}, {&(0x7f0000000400)="a4ab534a6b61c6d82e5b468b9aeec4576da93628bd", 0x15}, {&(0x7f0000000440)="09b51c2613177724f9bcd6c7677bb188310d64f231a92e23201e4f51e727991de7b6645da07fb784065099845420c7fa516e135ce6676bd5b291727be2d939e05ce6aaba37050bf77d742a4a9227847f23fa7327a6ca688e6c4c549c3634564d7b1400982c5fca459e", 0x69}], 0x5, 0x5, 0x0, 0xa42, 0x80, 0x3, 0x5, 0x7}) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) r2 = openat$panthor(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r0, 0xc0106441, &(0x7f0000000600)={0x0, 0x0, 0x1eab}) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r2, 0xc0086442, &(0x7f0000000640)={r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x42}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r5 = syz_open_dev$ndb(&(0x7f00000007c0), 0x0, 0x4e800) ioctl$NBD_DISCONNECT(r5, 0xab08) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000800), 0x2, 0x3}}, 0x20) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000880)=0x23, 0x4) r7 = socket$inet6(0xa, 0x800, 0xbbb) writev(r2, &(0x7f00000029c0)=[{&(0x7f00000008c0)="8e18a5138cffc6f1ed5b5bd7e1b9183a64d86427dfd8f5b1e011aba7610dbc9b04f26ac004b3ef5c9c730f220882390032abaa5f67b40c60ea7a9f40e67a75cdf1cf0abf5818a7d29938024a6b36b22b11283754767293dd4d1bff961ca86cfbb19680655205a112ad21e8d9e392444177daccf788ec0745bd164354b00e6ac514bbd4854dfc09a303f02a9b359b676cdd0112e511ac7659f2b99316", 0x9c}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000002980)="5370ad7710e26fc8f9ea8770add5a6fe38e37e7f34fc5e65bf4c328c8ffb838aac7d033b1d6a98fd26b9e7f1c43477", 0x2f}], 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000002a40)=@generic={&(0x7f0000002a00)='./file0\x00', 0x0, 0x18}, 0x18) getsockopt$inet6_opts(r7, 0x29, 0x36, &(0x7f0000002a80)=""/44, &(0x7f0000002ac0)=0x2c) ioctl$FIOCLEX(r4, 0x5451) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01864c2, &(0x7f0000002b00)={0x0, 0x1, r0}) r8 = syz_open_dev$dvb_frontend(&(0x7f0000002b40), 0xe000000000000, 0x440101) ioctl$FE_DISEQC_SEND_BURST(r8, 0x6f41, &(0x7f0000002b80)=0x1) splice(r8, &(0x7f0000002bc0)=0x1, r4, &(0x7f0000002c00)=0x800, 0x9, 0x6) r9 = syz_open_dev$swradio(&(0x7f0000002c40), 0x0, 0x2) ioctl$VIDIOC_DECODER_CMD(r9, 0xc0485660, &(0x7f0000002c80)={0x3, 0x1, @stop_pts=0x10001}) r10 = fspick(0xffffffffffffff9c, &(0x7f0000002d00)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r10, 0x7, 0x0, 0x0, 0x0) bind$inet6(r7, &(0x7f0000002d40)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c) getsockopt$IP_SET_OP_GET_BYINDEX(r7, 0x1, 0x53, &(0x7f0000002d80)={0x7, 0x7, 0x3}, &(0x7f0000002dc0)=0x28) 1m29.445544717s ago: executing program 3 (id=1526): r0 = syz_ublk_setup_io_uring(0x220, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x3, 0xd0}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r1, r2, 0x0, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x10, 0x0, r3, 0x0, 0x0, 0x0, 0x2, 0x1}) syz_ublk_add_dev(r0, r1, r2, 0x0, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0x613, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x58}}}, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1) 1m29.445056022s ago: executing program 3 (id=1527): r0 = syz_usb_connect$uac3(0x6, 0x109, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf7, 0x3, 0x1, 0x3, 0x40, 0xc, {0x8, 0xb, 0x1, 0x1, 0x1, 0x24, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x3f, 0xaf}, [@input_terminal={0x14, 0x24, 0x2, 0x3, 0x504, 0x3, 0xff, 0x7, 0x4, 0x8, 0x7, 0x1}, @cluster_info_segment={0x6, 0x20, 0x6, 0x95, 0xd8}, @multiply_unit={0xb, 0x24, 0xd, 0x2, 0xbb, 0xffffffff, 0x8001}, @cluster_info_segment={0x6, 0x20, 0x0, 0xb2, 0xe}, @mixer_unit={0xa, 0x24, 0x5, 0x3, 0x3, "7706e47284"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x1}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x11, 0x7, 0x7, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x17, 0x4, {0xa, 0x25, 0x25, 0x80, 0x7, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x80, 0x2, 0x3, 0xff, '?'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x7, 0xf1, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x40, 0x200, 0xc9, 0x1}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x3, 0x1, 0x1}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x81, 0x1, 0x9, 0x36, "ed6fbdf5c4f6db"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xa, 0x2, 0x49, 0x6, "04d5be538c10b8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0x5, 0xfb, {0xa, 0x25, 0x25, 0x0, 0x0, 0xb4}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x91, 0x3, 0x4, 0x40, 0x6}, 0x130, &(0x7f0000000180)={0x5, 0xf, 0x130, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x5, 0x8, 0x6}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x0, 0xf00, 0xc, [0x1e, 0x3f, 0xff0000, 0xff0030, 0x3f00]}, @generic={0xc6, 0x10, 0x3, "5882429a6c6b0e470d2f020bdede74182fb3fdeab356ef07d8e740f27a12a00629444d1814dbbca63297a8eca472517349527d028d32b83db627a87da043945c6ccb90bc8966b565bcdbe6d27f563501dbabfb37af1d10b163a98b08bba62aa6c01404a19e38ea89bda58789e8e3135806cca4ae7fbf8a456500e2536dad1317f0c41cd14b26a2ddc76ca51b5e203eb4c7533dfe0330bb365d5c863301c036674f18bdbf4d0cd85e04b51786473a77e8194755dd06f3de4d25bd836f5a7b6e4434838f"}, @ss_container_id={0x14, 0x10, 0x4, 0xfd, "298cbdfbd5ae77d43c5cf219bf9d8b42"}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x5ded, 0xf, 0x1, [0x3f00, 0xffc00f, 0xff000f, 0xc0c0, 0x3f]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x4, 0x12, 0x9}]}, 0x9, [{0xdf, &(0x7f00000002c0)=@string={0xdf, 0x3, "21eda142032efe670bb4950a0b25802ae121b67ac36c850ce5256ab2d4f6b82d100b610b2a3c7aaecba4a8e43c4676899a73769bc5bbe16c4be9e3bb6eb169232d333d7a177e2b5c5f35e1d2e228cb29fb529040732e81a863c614ffa2167f22ede548a5c6295c7b8f9e81599d8ef7488617f0b2fde06c8c81a69b89d6b242b036a5b5de785abffd28134934e6683bd4f0b3818da50e3eb8658cad44cece6d57eda4fc948de864ef79f1c69fed17531303a75792ea4522e4ca46b8f644e3d88e763d91abea89c4fd5b71385333c205511c7211817265d203f39f9c9374"}}, {0xd, &(0x7f00000003c0)=@string={0xd, 0x3, "1d46f42c6c56ced5728741"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x9b, &(0x7f0000000500)=@string={0x9b, 0x3, "8a687b7a6c68944917ed8cfce84f32310946e928ad3abe236add3810bd52aaad7786f7c570db1944d142ecc7073ec1e567523ef51c2e8fc37916cd2bb351ec635f0d8e7e4028394226ad94e8a237f365fedcb56be3ad8d2303d8196241a41cb9896409f1bbbfb61a20c026d0d1636bb0e56373b1d95f6a33a6c846a23518fec2c0f92ebab37a9ace14fc5c4792a5e500da5b4951fefb3aa53a"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3c0a}}]}) syz_usb_control_io$uac3(r0, &(0x7f0000000840)={0x14, &(0x7f0000000700)={0x40, 0x3, 0x36, {0x36, 0xa, "b8356c301af685a5b8a8c8923f45b5fc2bc8729c0d17195de791e1936f879ac4102e98b3c8f0ae6e748c246f8e350b8a1ff221fd"}}, &(0x7f0000000740)={0x0, 0x3, 0xd4, @string={0xd4, 0x3, "2dc448b23f8acd7a77c9101c987a0d952d41b2cbc0592a841914a382f79b6fc995bf71b1ee1a43ea2bb47f6ad57fec4e805a8df68064b795fbb11fcd20a7c5693bd06242250f01eded2e70f7f0fa27cd72d9cf57031288b07408575e944a093b9e611c88d49e9047a4ba63144ed7ecd1355a70b271c076092eb805248e9326ae29299eafcebcc6b278e42b2c2232fa0ede197c8a0c57ee1fd6f3ce1a3ee167f0f96b0eaadde92864e4bdfc4739d65f11d1415f0f3d1c3426c763a18c6961e3e66cabf739ce24652a13097913ed9f4283f4bf"}}}, &(0x7f0000000ac0)={0x44, &(0x7f0000000880)={0x20, 0x15, 0x4f, "8524344938dbcf8bae6d78a841c2f691b8a78e0aa6b8bc812c4c0388674a7e547cb3448afb3b7ada598d4a0ea1b86d88a9371d3d3979df77e5ce8bccb7732b6452b8120cf883b79e0e5ca78be013a3"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000980)={0x20, 0x81, 0x1, ' '}, &(0x7f00000009c0)={0x20, 0x82, 0x1, "13"}, &(0x7f0000000a00)={0x20, 0x83, 0x3, "523d14"}, &(0x7f0000000a40)={0x20, 0x84, 0x4, "09a6d4c9"}, &(0x7f0000000a80)={0x20, 0x85, 0x3, "266fab"}}) syz_usb_connect$cdc_ecm(0x2, 0x5f, &(0x7f0000000b40)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x40, 0x61f4490328e64411, 0xe, "", [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x8, 0x24, 0x6, 0x0, 0x0, "96753f"}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1878, 0x1, 0xc}, [@ncm={0x6, 0x24, 0x1a, 0x4, 0x2c}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x840, 0x1, 0x80, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x54, 0xd2, 0x60}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x2, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x300, 0x81, 0xf, 0x0, 0xff, 0x8}, 0x94, &(0x7f0000000c00)={0x5, 0xf, 0x94, 0x6, [@ssp_cap={0x18, 0x10, 0xa, 0x6a, 0x3, 0xd, 0x0, 0x0, [0x3fc0, 0x0, 0x3f00]}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x81, 0xf00, 0x7b, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x90, 0x3, 0x5}, @ssp_cap={0x20, 0x10, 0xa, 0xfd, 0x5, 0x1, 0xf00, 0x1, [0xf, 0xffc000, 0x0, 0xc000, 0xf]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xb, 0x3, 0x4}, @generic={0x36, 0x10, 0xb, "7414450abae8d701095fccd4247a22ca5ecddda86196fa8b38ab0dfeaa65482a4547b06cc09e074165832c21382e4fdf293a77"}]}, 0x3, [{0x1c, &(0x7f0000000cc0)=@string={0x1c, 0x3, "c7bb5efedb9f80270b8f3ff4667fc2008c4efd1276c0152285f2"}}, {0xab, &(0x7f0000000d00)=@string={0xab, 0x3, "354235c5d67cb0b5d195b6328a11f6d6e1f4abe7b854b52df8a6f2aac1fd324ada7fc4fa014b1bafa802a2d5614ea62bc7bcc73497849a7538897bcbb92c752a4791ad3e58b1faab7d13f1c0a9ad413f0584b8433a61fb5696da447b074f58f97f08e58e43ddf672c5fa2ef18f3aaf814f425daed1265691108e221634e6b4cfdad51b1c55d032a7268853154299c227346be457e0a794926fdbb7764da6851465f4b729737e9a384f"}}, {0xe6, &(0x7f0000000dc0)=@string={0xe6, 0x3, "dd3dd52d0c473aef2849592f03f010ba87ce100b8955b93fc05794feb09cab0fcbd5ae3be69f6b1bd7a06f7f32f02d42e6ec6fdc76bb6b5eabd1542ec3cc3502e1b38f38c07216b9ae265dd0e292aa4b77a4c0b04b9e0cd45b7a052ba4059f8d28427426e55d5c82ceaf5b94d2cf15972c402833a22bc91fd4ade29ba06336d8d7534d7cfc734d7eeabff469a28ca1dfc5363e4af5e56762987faf63c151b3ba237de72df0442081b6d8ee8539b0fd6d823e67369efe9cc0cec0359e154920be0ff4d437bb2bba75b5079844692b7637b440b57001ef62c80ba2f8c7731dcb558871b3b1"}}]}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f00)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000011c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xaa60, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x22, &(0x7f0000000f80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xc}, @call={0x85, 0x0, 0x0, 0xbe}, @map_fd={0x18, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000010c0)='syzkaller\x00', 0x3, 0x27, &(0x7f0000001100)=""/39, 0x40f00, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0xb, 0x9, 0x1c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[r3], 0x0, 0x10, 0x910}, 0x94) connect$nfc_raw(r1, &(0x7f0000001340)={0x27, 0x0, 0x1000, 0x1}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001480)={r3, &(0x7f0000001380)="78de31523e92eb56024f5d8b8de23faed98532b9f9807e146770c89dd42090ab9a461c9428fc2ed5540a486e3b10bf3a05eb542dab266a2d6e1c0ef4da7bf1b4fd125ce2ac1653e26ac661760d2a54dcb8a27ee6a8a79d10fa164e7fa47b4f499080921d4074cd5bed346c97d53ee77627ffd063068b7faf1da65667700c7f3c619519c8acc7bbaa3e53a1c6f2630dfb0b7ceca7eec646e76ebe67fdf3a50f55fb1d74e0e68afbb19f8dcc6aa87b84341ced6763becfaa8766f0ec13ba06fbe9028c34a508b0703b042862a9080c759d2f6abc417a770607886ec270"}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x14, 0x1c, &(0x7f00000014c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff5fd0}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xd2b5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f00000015c0)='syzkaller\x00', 0x4, 0x55, &(0x7f0000001600)=""/85, 0x41100, 0x60, '\x00', 0x0, @lirc_mode2=0x10, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001680)={0x3, 0x7, 0x80000000, 0x98f8}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f00000016c0)=[r2, r3, r2], 0x0, 0x10, 0xfff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002940)={r4, 0x0, 0x1000, 0x8b, &(0x7f00000017c0)="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", &(0x7f00000027c0)=""/139, 0xd, 0x0, 0x7e, 0x3b, &(0x7f0000002880)="13b1dac9f10aad2eec57fa27d2b795b53a644d3c2d6f05572099529454b34121cceb8eb97d27c51b63711c31dfedcda7942269146c1910b92b2395d40a0c06940a979b5c7a8eff451d94bf89c2911d0eca7f2c1835c7d3984b2541f9ea305472f08b3b2339a6f332fc0ce7eb10dbd7d2fc49d51cc9dff0c43128a574086a", &(0x7f0000002900)="d3e11e0159a847b5cb243af320383d791fbb5a633815e4058667fe4c08d524c80ac25e974fc87c89e2ecd5679129c6ad891d13efb99fd5b0cc6f46", 0x1}, 0x50) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000029c0), 0x100, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000002a00)={0x3, r2, 0x12, {0x5, 0xeb}, 0x80}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000002a40)=@base={0xf, 0x2, 0x9, 0x293, 0x400, r5, 0x0, '\x00', 0x0, r5, 0x5, 0x5, 0x4}, 0x50) recvmsg(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000002ac0)=""/52, 0x34}, {&(0x7f0000002b00)=""/38, 0x26}, {&(0x7f0000002b40)=""/217, 0xd9}, {&(0x7f0000002c40)=""/158, 0x9e}, {&(0x7f0000002d00)=""/219, 0xdb}, {&(0x7f0000002e00)=""/3, 0x3}], 0x6, &(0x7f0000002ec0)=""/142, 0x8e}, 0x41) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000002fc0)={0x2, {0x2, 0xff, 0x43, 0x0, 0x8, 0x4}}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000003000)=@gcm_128={{0x186}, "05e0973e14f80788", "710681043e69bad690cd0a4fdf885e62", "28d0343e", "b73e2ae22ef60df7"}, 0x28) mkdirat(r1, &(0x7f0000003040)='./file0\x00', 0x5) r7 = fsmount(r1, 0x1, 0x70) ioctl$CDROMRESET(r1, 0x5312) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000003080)='net/sockstat\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000030c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000003180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000003140)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, &(0x7f00000031c0)={0x16, 0x98, 0xfa00, {&(0x7f0000003100), 0x7, r9, 0x30, 0x0, @ib={0x1b, 0xd, 0x8, {"c220f52def3e7f53b0242e79f8756eaf"}, 0x1, 0x400, 0x1}}}, 0xa0) r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000032c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000003300)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000003340)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000003380)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000003480)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003440)={&(0x7f00000033c0)={0x5c, r10, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 1m26.383802377s ago: executing program 3 (id=1577): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x8, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{0x0, 0x25, &(0x7f00000002c0)=[{&(0x7f0000000300)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="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", 0x390}, {&(0x7f0000000740)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f03f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x0) 1m26.38310157s ago: executing program 3 (id=1578): r0 = syz_create_resource$futex(&(0x7f0000000000)) r1 = syz_create_resource$futex(&(0x7f0000000040)=0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003000)=@newtfilter={0x654, 0x2c, 0xd2f, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x628, 0x2, [@TCA_U32_SEL={0x624, 0x5, {0x2, 0x7, 0x2, 0x7, 0x80, 0x400, 0x1, 0x7, [{0x2, 0xc13, 0x400, 0x8}, {0x1, 0x2, 0x0, 0xfffffff7}, {0x7, 0x5, 0x10001, 0x196a47b2}, {0x9, 0x4, 0x2, 0x1}, {0x0, 0x68, 0x2, 0x180000}, {0x0, 0x80000000, 0x5d8, 0xe3a}, {0x6e3, 0x1, 0x1, 0x1}, {0x8, 0xff, 0xffff, 0x2}, {0x1ff, 0x9, 0x81, 0x8}, {0x2, 0xffff, 0xf, 0xfffffdfe}, {0x9, 0x1, 0x4, 0x40}, {0x3, 0xb88, 0x0, 0x9}, {0x8, 0x6, 0x4, 0x8}, {0x9, 0x8, 0x40000, 0x2}, {0x7fffffff, 0x1, 0x1, 0x3}, {0x0, 0x4, 0x7, 0xae}, {0x94c5, 0x1, 0x6, 0xb}, {0x7, 0x10, 0x8, 0xfffffff0}, {0x101, 0xf004, 0x3, 0x4}, {0x4, 0x3ff, 0x3, 0x3}, {0x1, 0x80000000, 0x10001, 0x4}, {0x1, 0xf3, 0x4, 0x401}, {0xfe, 0x7, 0x10, 0x2}, {0x1ff, 0x9, 0x9, 0x1000}, {0x4dd, 0x4, 0x8001, 0x7}, {0x7, 0x9, 0xff, 0x2}, {0x8, 0x0, 0x0, 0x101}, {0x6, 0x6, 0x8, 0x8}, {0x0, 0x9, 0x3, 0x3}, {0x0, 0x5, 0x7, 0x6}, {0x7b3, 0x1, 0xc, 0x5}, {0x566e, 0x843, 0x0, 0x2}, {0x7, 0x1, 0xffffffff, 0x2}, {0x6, 0xfffffff0, 0x6, 0x7}, {0x80, 0x24f0, 0x5, 0xffffffff}, {0xc, 0x14000, 0x5, 0x9}, {0x4, 0x10000, 0x3, 0x8366}, {0xffffffff, 0x2, 0x100, 0x5}, {0x9, 0x5, 0x0, 0x3}, {0x3, 0x0, 0x6, 0x1}, {0x54, 0xc9, 0x0, 0x4}, {0x6, 0x25, 0x1ff, 0x2}, {0x7, 0x3, 0x4, 0x7}, {0x6c2, 0xe4a, 0x16, 0x800}, {0x5, 0xfe, 0xf, 0xc5}, {0x7, 0x80, 0x7ff}, {0x9, 0x7, 0x3, 0x9b}, {0x8, 0x5, 0xb3, 0x3}, {0x3, 0x297, 0x5, 0x7fffffff}, {0x9, 0x8001, 0x1, 0x10000}, {0x8, 0xf5, 0x5, 0x6101}, {0x80, 0x6, 0xfd, 0x100}, {0xa4, 0x0, 0x4, 0xfffffff7}, {0x80000000, 0x26, 0x6, 0x9}, {0x1, 0x7, 0x800, 0x7}, {0x4, 0x8, 0x0, 0x7}, {0xa2, 0xf54, 0x7, 0x200}, {0x1, 0x9, 0x7, 0x7fff}, {0x4, 0x0, 0xd1, 0x101}, {0x7, 0xfff, 0x6, 0x6}, {0x2, 0x2, 0xd, 0x7}, {0x1, 0x1, 0x1, 0x5}, {0x8001, 0x8}, {0xa6, 0x1, 0x3, 0xf9c}, {0x7fff, 0x0, 0x7, 0xff}, {0xa, 0x3, 0x1, 0xfffff0fd}, {0x7f, 0xa865, 0x327, 0xb843}, {0x6, 0x6, 0x80000, 0x200}, {0x4, 0x101, 0x1, 0x4}, {0x3, 0x4, 0xd488, 0xfffffffc}, {0x3, 0x9, 0x6f3, 0x3}, {0xde21, 0x99e8, 0x2}, {0x6, 0x2, 0xfffffff4, 0x1ff}, {0xfffffde4, 0x5, 0x8, 0xb}, {0x7e5, 0x7ff, 0x8, 0x4}, {0xffff3c1a, 0x5, 0x8, 0x5}, {0xfffffff9, 0x4b06, 0x4, 0x6}, {0x5, 0x3, 0x8, 0x7ff}, {0xbc, 0x9, 0x1, 0x8}, {0xc0d, 0xffffffff, 0xec8d, 0x5}, {0x8000, 0x4, 0x45, 0xfff}, {0xfff, 0x8e, 0x7, 0xfe000000}, {0x2, 0x26, 0x2, 0xffffffff}, {0xe094, 0x5, 0x4}, {0x200, 0x6, 0x572e0c4a, 0x8}, {0x5, 0x96f2, 0xfff, 0xe}, {0x3ff, 0x96, 0x3, 0x83}, {0x200, 0x7f, 0x0, 0x1}, {0x2, 0x8, 0x1500, 0x5}, {0xc03b, 0x3, 0xa, 0x8a}, {0x5, 0x8, 0x9, 0x5}, {0xfffffffa, 0x7f800, 0xfffffffe, 0x5}, {0x98a1, 0x9, 0x9, 0x1}, {0xff, 0x1, 0x9, 0xffffffff}, {0x2, 0xff, 0xf43, 0x400}, {0x7fffffff, 0x3, 0x4, 0x3}, {0x5, 0x4, 0x9, 0xf797}]}}]}}]}, 0x654}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) futex(r1, 0x9, 0x1, 0x0, r1, 0x2) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000940)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38030000", @ANYRES16=0x0, @ANYBLOB="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"], 0x338}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) mkdirat(0xffffffffffffff9c, &(0x7f0000000e40)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r7, &(0x7f0000000f00)=[{{&(0x7f0000000f40)={0xa, 0x4e21, 0xb, @remote}, 0x1c, 0x0}}], 0x1, 0xc040) sendto$inet6(r7, 0x0, 0x0, 0x20000010, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000f80)='./proc/net/xt_recent/syz0\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000fc0)={0x2020}, 0x2020) ioctl$sock_ifreq(r5, 0x89b1, &(0x7f0000000540)={'ip_vti0\x00', @ifru_settings={0x5, 0x4, @raw_hdlc=&(0x7f0000000500)={0x401, 0xc}}}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x4, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x40}}]}, 0x30}}, 0x0) futex(r0, 0x5, 0x0, 0x0, r1, 0x1) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r10) ptrace$cont(0x20, r10, 0x200, 0x7) ptrace$getregs(0xc, r10, 0x4, &(0x7f0000000080)=""/202) 1m25.51426209s ago: executing program 3 (id=1584): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000780)=0x7f, 0x4) bind$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000800)='X', 0x34000, 0x0, &(0x7f0000000840)={0xa, 0x4e23, 0x0, @loopback, 0xf00}, 0x1c) 1m10.452630076s ago: executing program 32 (id=1584): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000780)=0x7f, 0x4) bind$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000800)='X', 0x34000, 0x0, &(0x7f0000000840)={0xa, 0x4e23, 0x0, @loopback, 0xf00}, 0x1c) 1m3.492251155s ago: executing program 2 (id=1858): syz_open_dev$hidraw(&(0x7f0000000180), 0x82, 0x2) syz_open_dev$hidraw(&(0x7f0000000200), 0x82, 0x2) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="85000000070000004d000000000000004500000000000000950000000000000009c9bc6631c1248c81933e3784a658d0c4baeecff9b457e5a861fd3aa4037a72ab04501be580e00b22e241ad7bea36e2e3dfad39cc7e9db6f4e02b56989ec86839d86bc24762455d4efd69399a1c0712eb2dde"], &(0x7f0000000640)='GPL\x00', 0x4, 0x99, &(0x7f0000000680)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f00000008c0)=0x1000000, &(0x7f0000000900)=r1}, 0x20) recvmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40002103) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000903000000000000000000000105000000000200000002000000000000000000000000000003000000e00000000002000000000000000000"], 0x0, 0x66}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r4 = fsopen(&(0x7f0000000740)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000780)='name', &(0x7f00000007c0)='l\xa4\x9e\xab`\xf6\xfa\xfdC\x945\xa81\xad\xa2\xf4\xf5\x19\x82\xbb\x81G6\xa5\x973\xc7', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x181) mount(&(0x7f00000003c0)=@filename='mtd0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000ac0)='./file0\x00') mknod$loop(&(0x7f0000000b00)='./file1\x00', 0x2000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000004000000000000007f00000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000a07b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000014000000850000002300000095", @ANYRES32=r5], &(0x7f0000000400)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls=0x37, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(0x0, &(0x7f0000000140)='net/rpc\x00') r7 = openat(0xffffffffffffffff, &(0x7f00000001c0)='auth.unix.ip/channel\x00', 0x2c000, 0x0) write(r7, &(0x7f0000000240)=' f 0::7.0.0.1 -\\000000\\0 l\\calhost\n', 0x24) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xfffffffffffffffc, 0x5, 0x0, 0xffffffc, 0x1, 0x0, 0xfffffffffffffffa}, &(0x7f0000000100)={0x18, 0x8, 0x1ff, 0x0, 0x7ff, 0x400000, 0x0, 0x92}, 0x0, 0x0, 0x0) 1m3.27448149s ago: executing program 2 (id=1860): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000320000000000000000000000006d7061746830") 1m3.274193798s ago: executing program 2 (id=1862): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x66, &(0x7f0000000700)={@local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x2, 0x58, 0x65, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @dev={0xac, 0x14, 0x14, 0x1b}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x6}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x3, {{0xe, 0x1, 0xfe, 0x1, 0x1, 0x0, 0x5, 0x3}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x2, {{0xb, 0x2, 0x6, 0x0, 0x0, 0x2, 0x2, 0xf9}, 0x2, {0x7fff, 0xb730, 0x1, 0x4, 0x1, 0x1, 0x1}}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x124, 0x1, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4000000}, @CTA_EXPECT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}}}]}, @CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x27}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x90}, 0x4048085) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=[0x8], 0x0, 0x0, 0x1, 0x1, r2}}, 0x40) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x8001) 1m3.202192651s ago: executing program 2 (id=1863): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf253900000008000300", @ANYRES32=r2, @ANYBLOB="24005a8020000180140004000300030007000200ff7ff7ffffff0f000500040002000000"], 0x40}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000280)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f00000003c0)={0x1, r6}) ioctl$DMA_BUF_SET_NAME_A(r8, 0x40086203, &(0x7f00000004c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000008c0)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x2, 0x9, 0x7, 0x5, 0x6, 0x0, 0x7e20ebf3, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x3, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x280, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x108004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x7fffffff, 0x400, 0x401, 0x6, 0x1, 0x6, 0x7, 0x1000204, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x20006, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x403d, 0x7fff, 0x0, 0x5, 0x1, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0xffff, 0x200, 0x1fd, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x3, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0x8, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x49e, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x6, 0x5, 0x0, 0xf, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f0000000d40)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000d80)={0x1, &(0x7f0000000dc0)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r9, 0xffffffffffffffff, 0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r10, &(0x7f0000000500)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000000408010200000000000000000300000206000240890d000005000300010000007989a101de1e1a6492b7923f51c819dfc925688895240983c507"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x2) r11 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c000280050001"], 0xc8}}, 0x0) 1m2.34405476s ago: executing program 2 (id=1867): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000001480)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000014c0)="33000000080001020304184377ec", 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x2, 0x0) write(r2, &(0x7f00000010c0)='handle 2000000000 0 0 0 krb5 \\x000000000000000000000000000000001300000000000000000000000000000000000000\n\x00', 0x68) sendmsg$nl_generic(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYRES64=r2, @ANYRESOCT=r1], 0x38}, 0x1, 0x0, 0x0, 0x4060000}, 0x4008094) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000013c0), 0x1, 0x0) writev(r3, &(0x7f0000000f00)=[{&(0x7f0000001780)="546dedaf55f0940d683135934b72ba5e6d24476a0eebb7096e093104658b40ef29fce314044de283ae39b700ea23ee3fcf33f3978d606bbeb842cb8c41a82b1260b11ad52feb18ca9aa62542ddc310b398970371ced84730c287793788f77b1f39258015b53e538746a8ca1d3f4663e502a4f258d8ea268b527a789b9f2f03cb44aa5e34aa87845ac0282d23b1add357f3ea04367d8f0b825a13e3565bb571629c5dccf088e600"/179, 0xb3}, {&(0x7f0000000b00)="d890bd06355a2b8a6103eff2897ebefe230d076b5a5983c6353bc41bdccbb60872afa64a94a7407c2936755a224f0b71293e45b7006d5a571e5a58f111cd41b437f28013144e8dbb68744aeb83c1dc682f325957e3251f5cd14815b5849124e2db4ec6ea1444e356921c5dc92b8bfd3404", 0x71}], 0x2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r4, 0x6, 0x2b, &(0x7f0000001000), &(0x7f0000001040)=0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000000)=@fragment={0x73, 0x0, 0x1, 0x0, 0x0, 0xd, 0x65}, 0x8) sendto$inet6(r5, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ed) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/mmu_shadow_zapped\x00', 0x1, 0x0) write(r6, &(0x7f0000000180)='0\n', 0x2) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./debug/kvm/mmu_shadow_zapped\x00', &(0x7f0000000ec0)='xfs\x00', 0x1001049, &(0x7f0000001500)='@/\xbd%%\x00\x00\x00\x00\x00\x00\b\x00\x00\x00K\xb3\xcf(\x13ZX\xabQ\x1a\flr\x88\xe7\"\tt)\xca\xc9C\xba\xa5\xc7\xb3\xdcNgyk\xa3\xe6a\xfe\v\xa0[c\xe1\x9d\x1fep\xbb{u\x7f\"\ad\b\xf6f\xc3\xdf0\f\xdd\xee\xe6tH\x91\xe2\xb3k+\t8\xd9\x10+\x03\xd7vq\x89\xda\xd7,\x80\x97J\xe4\x8b\bk\xe0\xca\x84W\x00'/145) syz_usb_connect(0x6, 0x4b3, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000e00)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x201, 0x6, 0x2, 0x9, 0x40, 0x5}, 0x18a, &(0x7f0000000780)={0x5, 0xf, 0x18a, 0x3, [@generic={0xfb, 0x10, 0x0, "ad1e4194518aff1a54e465d3485cd4e2b6dd421ca5bb6932f683d85386f1086994b013b9d16fd6ebdedd9ca5968b18df56715031ce7830ec6f8f61040ca60cdac4117d7bb8cad96e679440a3a55d4a7b2b50568404f95b3785241a6267b06ef1c508549f385edd619ecf1ebf24b6ef4492d1584e3b1b9b4e355afefa5af4eed5f419a186bf5480c77bb311cc3fd0d52917b6b84273954011eaddae93d29eca5a2abc658b9b7fe553c512dd9482275c6011569e9975e9a8502ebde23c000555da343348b90a74b7803de1be054ee3b44f3180f3f5f9ca5b944e59ed8bc847b1c37930b8543b14221d3281dab23fee2f6daa17249085e89a53"}, @generic={0x80, 0x10, 0x2, "23cb03004cc393500919426e96d215d2432af71d324f03cc9d4eb7326c4a213251b3f0f3eb63430d4b089d36e4fe3cdcc865f89e6f5a03a2632c70ee8da53c3c1efe21d0a22f62a0571db88453cd5136d09880948e7816d54458266ab76d2691933bac15428aca0aa435153ceffd18a54e3eac867be12591c85a736139"}, @ss_cap={0xa, 0x10, 0x3, 0x7817c6359d5e9f69, 0x8, 0x6, 0x3, 0x200}]}, 0xa, [{0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x1407}}, {0x2b, &(0x7f0000000980)=@string={0x2b, 0x3, "fd4cef200fc648765bf6909d4c2b3dff1d0619f6acaa612b5b088264a688a4da560b50c4633b292a9d"}}, {0xf8, &(0x7f00000009c0)=@string={0xf8, 0x3, "700362afcd3302ebfff6e1de9cc8144575870b148cf818580f90e8e688730f20ae479ba1a735063d875cc1db767816c39ebc4984859f8a5d818a304f2bbddc89b593cae1faf8933304688dc0aca1b0e31d5fa4c0bf1da350cbb5b3df7763dc9da4469ece1eb1cc9826bdb8f0d95a5a53823e6295f5c742fc167b1af099283262347146f7ab602873eb51b405ff55122dd11f8e926abaa92c6fc68c4fdc6fd55851d1abbdc08d7d899b2df767ad5561f77df651cd036e65ff09ed513203a720f7783dcfa4c146a6de03c5a648837e58893711cbfdc80571693dbd23639a55c660b272b434d2133b712ef9e44cbc99f1ec639cdd7ea4e9"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x140c}}, {0x64, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"]}, {0xa3, &(0x7f0000000b80)=@string={0xa3, 0x3, "1913667658a71c30d9b869bc009f8b7ed815ec259bf07febd96ad8b589856c56464a0c9514642c32aff8049601c5a39609bd668649294d305f20235a2fb871dc99b9e8bea08f60c944b514b808c92bb46e9a69d330124e0067d8faf33030df548daf2a8d5002c8f099a8a070fbdefe2a32d117dd181cfeec17af27a041212cdb20abe4b5f6d502dba23d3cbed9082977602c118a9afa45786745c16e47fe5c76a6"}}, {0x9f, &(0x7f0000000c40)=@string={0x9f, 0x3, "fd81957b122eea1ba2e1f703dd854da853a0a43726f55bf119a5a8123ed079d100f9b0b657b73d0d30f02286a5ebdf5e70169bd93345e5136474c61bb73a879454bc8b8f94b55e167eabf0fb2c9bc2b0477699f6d8187e22c7b68f62c6b9a505710a2de8fb473127711bbe01f9efe968c8ca77755a10f107dd13da9af1639eb1b31ea722ef5e5413e2ede176993753f0ede1c67adaff8e95f8a7fe977d"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x825}}, {0x0, 0xfffffffffffffffd}, {0xae, &(0x7f0000000d40)=ANY=[@ANYBLOB="ae03e2833369d5625271268b432e8b66d03ec96df0bb722cf5cfa79fc3b68365fd61e09f4bd12351ea7ce6d616332b49d00ca142925aeb4d9ba2acfbc124cc2e53ac4dfafd4c5691c4a55893bee0fcf2c36eb912c5ddacfe6663f755c9f7905876bf651fd47491f9a6a79e4b6004a5328bb16f35eefbcd5a5763cc76d9264031b36b64eb2acb787f5fe906d36284d04ad4b27957d82efa08348de1bb528d4489187d0134d560217414c8086ec76f"]}]}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001140), 0x129240, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000001180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f00000011c0)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0, 0x1}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000001280)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r9, 0x3ba0, &(0x7f00000012c0)={0x48, 0x2, r10, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r9, 0x3ba0, &(0x7f0000001340)={0x48, 0x15, r11}) listen(r5, 0x100101) accept4(r5, 0x0, 0x0, 0x80800) 1m1.820856041s ago: executing program 2 (id=1873): syz_open_dev$hidraw(&(0x7f0000000180), 0x82, 0x2) r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x82, 0x2) write$hidraw(r0, 0x0, 0x0) 46.69345982s ago: executing program 33 (id=1873): syz_open_dev$hidraw(&(0x7f0000000180), 0x82, 0x2) r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x82, 0x2) write$hidraw(r0, 0x0, 0x0) 5.353803105s ago: executing program 1 (id=2501): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="550000001100290404850698fae99e0002000000011000", 0x17) 5.352640173s ago: executing program 1 (id=2503): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async, rerun: 64) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='clear_refs\x00') (rerun: 64) writev(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 32) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400e8ff04080102"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1}, 0x6e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x3) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040302"], 0x4) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0xa8002, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000380)=""/246) (async) writev(r2, &(0x7f0000000480)=[{&(0x7f00000004c0)="c021", 0x1700}], 0x1) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)={0x28, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x8, 0x31, 0x0, 0x0, @ipv4=@local}]}, 0x28}], 0x1}, 0x0) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000500)=0x8) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xffa1, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x20000, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x200}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x50}, 0x1, 0x200000000000000, 0x0, 0x400c800}, 0x40) 4.744129554s ago: executing program 1 (id=2507): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000fdffffff0000000000000001180100002020642500000000002020207b1af8ff00000000bfa108000000000047010000f6ffffffb7020000080000009f03000000000000850000001900000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0xc}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a09058103"], 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000000c0)={0x0, 0x6, [0x5, 0x9, 0x3, 0x5, 0xa5e, 0xc22e]}) syz_open_dev$evdev(&(0x7f0000000080), 0xe, 0xc100) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) 3.588690924s ago: executing program 1 (id=2514): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x8008af26, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500), 0x2800, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newsa={0x140, 0x10, 0x401, 0x0, 0x0, {{@in=@local, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x4d2, 0x32}, @in=@remote, {0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48008) syz_emit_ethernet(0x8f, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x40, 0x32, 0x0, @remote, @local}, {0x4d2, 0x1, @cc={0x1, 0x0, 0x0, 0x3, 0x4, 0x1, 0x1, [@ipv6=@esp={0xe, 0x6, "4dab46", 0x23, 0x32, 0x0, @loopback={0xfeffffff}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {0x4d5, 0x0, @cc={0x1, 0x0, 0x4812, 0x4, 0x5, 0x6, 0x6}, "e4", 0x1}}}]}}}}}}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x4c2}) 3.584871404s ago: executing program 1 (id=2516): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, &(0x7f00000007c0)="0bcde56ca9a62cbf", 0x8) 2.161687738s ago: executing program 1 (id=2529): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, &(0x7f00000007c0)="0bcde56ca9a62cbf", 0x8) 744.122475ms ago: executing program 0 (id=2554): keyctl$setperm(0x5, 0x0, 0x20020413) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0}) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='blacklist\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='$.]\x00', r0) r1 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x40000) ioctl$CEC_ADAP_G_CAPS(r1, 0xc04c6100, &(0x7f00000001c0)) 743.723436ms ago: executing program 0 (id=2555): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7400000010000104000000000015000000000000", @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 683.761885ms ago: executing program 0 (id=2557): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x89, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xa1, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000800)={0xffffffffffffffff, 0x8, 0x53, 0x8, @vifc_lcl_ifindex=r1, @private=0xa010101}, 0x10) r2 = syz_open_dev$video4linux(&(0x7f0000000840), 0xfffffffffffffffa, 0x101001) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000880)={0x0, 0x0, '\x00', @raw_data=[0x101, 0x4, 0x4, 0x1000, 0x0, 0x30000000, 0x3, 0x4, 0x1, 0x72, 0xfffff270, 0x6, 0x0, 0x1, 0xc, 0x40, 0x8, 0x7, 0x0, 0x2, 0x2, 0xfffff1cf, 0x0, 0x0, 0x0, 0x17e4, 0x4, 0x7, 0xedcb, 0x4, 0x7f, 0x240000]}) r3 = fsopen(&(0x7f0000000000)='logfs\x00', 0x0) syz_open_dev$cec(&(0x7f0000000080), 0xffffffffffffffff, 0x4ae60) r4 = syz_io_uring_setup(0x34d1, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0xae}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) r8 = socket$unix(0x1, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000008d"], 0x0, 0x26}, 0x20) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'veth0_macvtap\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20000000) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) setns(0xc9, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000940)={'ip6_vti0\x00', 0x0}) r14 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r14, 0x107, 0xf, &(0x7f0000000980), 0x56) sendmsg$kcm(r14, &(0x7f00000009c0)={&(0x7f0000000a00)=@xdp={0x2c, 0xb, r13, 0x42}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="27030200dc0f14000e0007000024c1020000ff3207c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) sendmsg$nl_route_sched(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffbffff, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x48103, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 593.0172ms ago: executing program 4 (id=2558): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) capset(&(0x7f0000001740)={0x20071026}, &(0x7f0000001780)={0x0, 0x2}) write$FUSE_INIT(r0, 0x0, 0x0) 589.964543ms ago: executing program 0 (id=2559): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a00), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x28}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x508, 0x98, 0x208, 0x208, 0x3a0, 0x208, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x568) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x5, 0x0) dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x7e, @private1={0xfc, 0x1, '\x00', 0xfd}, @local, {[], {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000440)='bond_slave_1\x00', 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04250c20"], 0x7) shutdown(0xffffffffffffffff, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000003c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000400)="2b0000000600aabbccddeec0", 0xc) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) r6 = io_uring_setup(0x6d27, &(0x7f0000000140)={0x0, 0xa33a, 0x40, 0x400001, 0x1000208}) r7 = syz_open_dev$video(&(0x7f00000001c0), 0x1, 0x2) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000b00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000200)={0x1, 0x2, 0x2}) ioctl$VIDIOC_STREAMON(r7, 0x40045612, &(0x7f0000000300)=0x2) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 589.804419ms ago: executing program 4 (id=2560): r0 = syz_ublk_setup_io_uring(0x220, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x3, 0xd0}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x10, 0x0, r4, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x25, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1) 533.706911ms ago: executing program 4 (id=2561): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x18, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0x11e}]}, 0x18}, 0x1, 0x0, 0xfffffff0, 0x40815}, 0xc000) 533.54175ms ago: executing program 4 (id=2562): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001200)={0x18, 0x9a, &(0x7f00000012c0)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000001340)='GPL\x00'}, 0x94) 453.932225ms ago: executing program 4 (id=2563): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0xe28de53c53dd637f, 0x2, 0x40000000) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x145}) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount(&(0x7f00000003c0)=@filename='./dev/sda1\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000440)='ext4\x00', 0x8410, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x20000, 0x80) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0x41009432, 0x0) r4 = fanotify_init(0x20, 0x40000) fstatfs(r4, &(0x7f00000004c0)=""/18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x168, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x122}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {0x0, [0x0, 0x0, 0x0, 0x1]}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xffffffff, 0xffffffff, 'batadv_slave_1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x4, 0x2, 0x47}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES16=r1, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r0], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54222002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x40841, &(0x7f00000000c0)={0x11, 0x86dd, r2}, 0x14) 403.52528ms ago: executing program 4 (id=2564): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, &(0x7f00000007c0)="0bcde56ca9a62cbf", 0x8) 252.345116ms ago: executing program 5 (id=2568): r0 = syz_ublk_setup_io_uring(0x220, &(0x7f0000000340)={0x0, 0x7948, 0x80, 0x3, 0xd0}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$rds(0x15, 0x5, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x149a82, 0x8) write$cgroup_int(r5, &(0x7f0000000100)=0x8000000001cb, 0x12) write$nci(r5, &(0x7f0000000180)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x7}, 0x4) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x10, 0x0, r4, 0x0, 0x0, 0x0, 0x2, 0x1}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0x613, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x58}}}, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1) 143.759198ms ago: executing program 5 (id=2569): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) capset(&(0x7f0000001740)={0x20071026}, &(0x7f0000001780)={0x0, 0x2}) write$FUSE_INIT(r0, 0x0, 0x0) 142.151827ms ago: executing program 5 (id=2570): r0 = syz_ublk_setup_io_uring(0x220, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x3, 0xd0}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) socket$rds(0x15, 0x5, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x25, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1) 63.300102ms ago: executing program 5 (id=2571): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000500)=0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="120000000a0000000400000003"], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f00000005c0), &(0x7f0000000600)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r0, &(0x7f0000000680), &(0x7f00000006c0)=@tcp=r1}, 0x20) r2 = dup(r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)=r2}, 0x20) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='wwnn=0x2000000010000001,wwpn=0x20\b\x00000010000002', 0x2f) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f00000005c0)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000007c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r5}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x14cf, &(0x7f0000000880)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x2d, &(0x7f0000000a00)=[{&(0x7f0000000a40)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r3, 0x80705864, &(0x7f0000000000)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001900110027bd7000000088fa0f5f89ea00f21c0100000500915a9f3ad1276d1f86677adbb3b4df5d4a67cfae795d4dda36aa50834684dba16c4e02f1dfe150baa55a071b7ec283dddb4d6be9341b"], 0x1c}}, 0x0) mkdir(&(0x7f0000000300)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./trace\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0) r9 = openat(0xffffff9c, &(0x7f0000000440)='./trace/events/mac80211/enable\x00', 0x450600, 0x100) read$FUSE(r9, 0x0, 0x0) 62.946063ms ago: executing program 0 (id=2572): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@multiplanar_userptr={0x6, 0x2, 0x4, 0x8, 0x9, {0x0, 0x2710}, {0xb, 0xc, 0x9, 0x5c, 0x8, 0xd, "90e6784d"}, 0x7, 0x2, {&(0x7f0000000300)=[{0x9, 0x4, {&(0x7f0000000280)}, 0x9e}, {0x3, 0x9, {&(0x7f00000002c0)}, 0x40}]}, 0x400}) 530.831µs ago: executing program 5 (id=2573): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80802, 0x0) pipe(&(0x7f00000003c0)) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0c00018008000600", @ANYRES32, @ANYBLOB="0c000280050023000000000008000500", @ANYRES32=r1], 0x318}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 103.876µs ago: executing program 0 (id=2574): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x5, @empty, 0xffffffff}, {0xa, 0x4e20, 0x101, @remote, 0x7}, r2, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000180)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000400)={0x200, 0x200, 0x20}) 0s ago: executing program 5 (id=2575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x14, r1, 0x1, 0x470bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) (fail_nth: 5) kernel console output (not intermixed with test programs): d [ 210.096321][ T1355] imon 10-1:0.0: unable to initialize intf0, err -19 [ 210.096329][ T1355] imon:imon_probe: failed to initialize context! [ 210.096335][ T1355] imon 10-1:0.0: unable to register, err -19 [ 210.801102][T11652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2143'. [ 210.836738][ T43] audit: type=1400 audit(1791816574.996:1946): avc: denied { ioctl } for pid=11651 comm="syz.1.2143" path="socket:[51008]" dev="sockfs" ino=51008 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 210.933615][T11654] fuse: Bad value for 'fd' [ 210.967981][T11656] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 210.979681][ T66] Bluetooth: hci1: unexpected event for opcode 0x200c [ 210.982570][T11656] Bluetooth: MGMT ver 1.23 [ 211.049140][ T66] Bluetooth: hci0: command tx timeout [ 211.081988][T11663] netlink: 8772 bytes leftover after parsing attributes in process `syz.4.2148'. usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 211.270656][T11669] FAULT_INJECTION: forcing a failure. [ 211.270656][T11669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.270677][T11669] CPU: 3 UID: 0 PID: 11669 Comm: syz.4.2151 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.270693][T11669] Tainted: [L]=SOFTLOCKUP [ 211.270697][T11669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.270704][T11669] Call Trace: [ 211.270708][T11669] [ 211.270713][T11669] dump_stack_lvl+0x100/0x190 [ 211.270738][T11669] should_fail_ex.cold+0x5/0xa [ 211.270754][T11669] _copy_to_user+0x32/0xd0 [ 211.270771][T11669] simple_read_from_buffer+0xcb/0x170 [ 211.270790][T11669] proc_fail_nth_read+0x1af/0x230 [ 211.270807][T11669] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 211.270826][T11669] ? rw_verify_area+0xce/0x6d0 [ 211.270837][T11669] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 211.270854][T11669] vfs_read+0x1e4/0xb40 [ 211.270868][T11669] ? lock_acquire+0x1d1/0x380 [ 211.270881][T11669] ? __fget_files+0x34/0x3d0 [ 211.270897][T11669] ? __pfx_vfs_read+0x10/0x10 [ 211.270909][T11669] ? find_held_lock+0x2b/0x80 [ 211.270926][T11669] ? __fget_files+0x215/0x3d0 [ 211.270945][T11669] ? __fget_files+0x21f/0x3d0 [ 211.270964][T11669] ksys_read+0x12a/0x250 [ 211.270978][T11669] ? __pfx_ksys_read+0x10/0x10 [ 211.270995][T11669] do_syscall_64+0x123/0x790 [ 211.271034][T11669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.271047][T11669] RIP: 0033:0x7fc466b5ea0e [ 211.271056][T11669] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 211.271067][T11669] RSP: 002b:00007fc464df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 211.271091][T11669] RAX: ffffffffffffffda RBX: 00007fc464df66c0 RCX: 00007fc466b5ea0e [ 211.271099][T11669] RDX: 000000000000000f RSI: 00007fc464df60a0 RDI: 0000000000000005 [ 211.271106][T11669] RBP: 00007fc464df6090 R08: 0000000000000000 R09: 0000000000000000 [ 211.271113][T11669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.271119][T11669] R13: 00007fc466e26038 R14: 00007fc466e25fa0 R15: 00007ffd5cdc2a18 [ 211.271134][T11669] [ 211.308237][T11672] fuse: Bad value for 'fd' [ 211.589047][ T1355] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 211.759504][ T1355] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 211.759541][ T1355] usb 9-1: too many configurations: 13, using maximum allowed: 8 [ 211.760895][ T1355] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 211.760923][ T1355] usb 9-1: can't read configurations, error -61 [ 211.888837][ T1355] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 212.049252][ T1355] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.049277][ T1355] usb 9-1: too many configurations: 13, using maximum allowed: 8 [ 212.050438][ T1355] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 212.050454][ T1355] usb 9-1: can't read configurations, error -61 [ 212.051081][ T1355] usb usb9-port1: attempt power cycle [ 212.375695][ T35] usb 10-1: USB disconnect, device number 8 [ 212.398925][ T1355] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 212.399069][T11687] netlink: 8772 bytes leftover after parsing attributes in process `syz.5.2158'. [ 212.423620][ T1355] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.423658][ T1355] usb 9-1: too many configurations: 13, using maximum allowed: 8 [ 212.424925][ T1355] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 212.424952][ T1355] usb 9-1: can't read configurations, error -61 [ 212.494446][T11692] fuse: Bad value for 'fd' [ 212.520099][T11695] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 212.548891][ T1355] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 212.550256][T11693] hid-generic 0003:0627:0001.0001: pid 11693 passed too large report [ 212.570206][ T1355] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.570240][ T1355] usb 9-1: too many configurations: 13, using maximum allowed: 8 [ 212.571440][ T1355] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 212.571457][ T1355] usb 9-1: can't read configurations, error -61 [ 212.571677][ T1355] usb usb9-port1: unable to enumerate USB device [ 212.909266][ T10] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 213.089177][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 213.092090][ T10] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 213.092966][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.092998][ T10] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.093019][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 213.095934][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.095949][ T10] usb 6-1: Product: syz [ 213.095958][ T10] usb 6-1: Manufacturer: syz [ 213.095966][ T10] usb 6-1: SerialNumber: syz [ 213.100386][ T10] usb 6-1: config 0 descriptor?? [ 213.106797][T11623] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 213.113967][T11623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 213.115058][T11623] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 213.125072][T11623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 213.125886][T11623] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 213.131368][T11623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 213.132170][T11623] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 213.136551][T11623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 213.139437][ T66] Bluetooth: hci0: command tx timeout [ 213.189551][ T13] bridge_slave_1: left allmulticast mode [ 213.189593][ T13] bridge_slave_1: left promiscuous mode [ 213.194773][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.203816][ T13] bridge_slave_0: left allmulticast mode [ 213.203888][ T13] bridge_slave_0: left promiscuous mode [ 213.204100][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.253741][T11717] netlink: 8772 bytes leftover after parsing attributes in process `syz.5.2168'. [ 213.310176][ T10] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 213.310328][ T10] imon 6-1:0.0: unable to initialize intf0, err -19 [ 213.310339][ T10] imon:imon_probe: failed to initialize context! [ 213.310348][ T10] imon 6-1:0.0: unable to register, err -19 [ 213.320831][ T10] usb 6-1: USB disconnect, device number 62 [ 213.368406][T11723] fuse: Invalid rootmode [ 213.416907][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.423191][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.424019][ T13] bond0 (unregistering): Released all slaves [ 213.426807][ T13] bond1 (unregistering): Released all slaves [ 213.433236][ T13] bond2 (unregistering): Released all slaves [ 213.438240][ T13] bond3 (unregistering): Released all slaves [ 213.443276][ T13] bond4 (unregistering): Released all slaves [ 213.449261][ T13] bond5 (unregistering): Released all slaves [ 213.456049][ T13] bond6 (unregistering): Released all slaves [ 213.459806][T11725] FAULT_INJECTION: forcing a failure. [ 213.459806][T11725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.459826][T11725] CPU: 0 UID: 0 PID: 11725 Comm: syz.5.2171 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.459841][T11725] Tainted: [L]=SOFTLOCKUP [ 213.459845][T11725] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.459852][T11725] Call Trace: [ 213.459856][T11725] [ 213.459861][T11725] dump_stack_lvl+0x100/0x190 [ 213.459881][T11725] should_fail_ex.cold+0x5/0xa [ 213.459897][T11725] _copy_from_user+0x2e/0xd0 [ 213.459913][T11725] core_sys_select+0x319/0xbb0 [ 213.459932][T11725] ? __pfx_core_sys_select+0x10/0x10 [ 213.459947][T11725] ? find_held_lock+0x2b/0x80 [ 213.459964][T11725] ? get_pid_task+0xfc/0x250 [ 213.459991][T11725] ? __pfx_set_user_sigmask+0x10/0x10 [ 213.460003][T11725] ? __mutex_unlock_slowpath+0x35d/0x930 [ 213.460022][T11725] do_pselect.constprop.0+0x238/0x270 [ 213.460040][T11725] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 213.460059][T11725] ? ksys_write+0x1ac/0x250 [ 213.460075][T11725] __x64_sys_pselect6+0x149/0x1c0 [ 213.460093][T11725] do_syscall_64+0x123/0x790 [ 213.460110][T11725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.460121][T11725] RIP: 0033:0x7f5dc699e1d9 [ 213.460131][T11725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.460142][T11725] RSP: 002b:00007f5dc77d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 213.460153][T11725] RAX: ffffffffffffffda RBX: 00007f5dc6c25fa0 RCX: 00007f5dc699e1d9 [ 213.460160][T11725] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000040 [ 213.460167][T11725] RBP: 00007f5dc77d0090 R08: 0000000000000000 R09: 0000000000000000 [ 213.460173][T11725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.460180][T11725] R13: 00007f5dc6c26038 R14: 00007f5dc6c25fa0 R15: 00007ffcabacb6a8 [ 213.460194][T11725] [ 213.464301][ T13] bond7 (unregistering): Released all slaves [ 213.474499][ T13] bond8 (unregistering): Released all slaves [ 213.483705][ T13] bond9 (unregistering): Released all slaves [ 213.496880][ T13] bond10 (unregistering): Released all slaves [ 213.506532][ T13] bond11 (unregistering): Released all slaves [ 213.527118][ T13] bond12 (unregistering): (slave veth0_to_bond): Releasing active interface [ 213.531331][T11730] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 213.540715][ T13] bond12 (unregistering): Released all slaves [ 213.581373][T11623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.594817][T11623] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.597701][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.597746][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.602123][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.602166][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.758777][ T5101] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 213.943671][ T5101] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 213.944590][ T5101] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.944627][ T5101] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.944652][ T5101] usb 6-1: config 0 interface 0 has no altsetting 0 [ 213.946448][ T5101] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.946466][ T5101] usb 6-1: Product: syz [ 213.946483][ T5101] usb 6-1: Manufacturer: syz [ 213.946497][ T5101] usb 6-1: SerialNumber: syz [ 213.949334][ T5101] usb 6-1: config 0 descriptor?? [ 213.970395][T11623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.990029][T11623] veth0_vlan: entered promiscuous mode [ 213.993971][T11623] veth1_vlan: entered promiscuous mode [ 214.010750][T11623] veth0_macvtap: entered promiscuous mode [ 214.019808][T11623] veth1_macvtap: entered promiscuous mode [ 214.038759][T11623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.052484][T11623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.126724][T11743] xt_CT: No such helper "pptp" [ 214.161546][ T5101] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 214.161679][ T5101] imon 6-1:0.0: unable to initialize intf0, err -19 [ 214.161695][ T5101] imon:imon_probe: failed to initialize context! [ 214.161706][ T5101] imon 6-1:0.0: unable to register, err -19 [ 214.164416][ T13] hsr_slave_0: left promiscuous mode [ 214.167425][ T13] hsr_slave_1: left promiscuous mode [ 214.168150][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.168179][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.169739][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.169756][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.194233][ T13] veth1_macvtap: left promiscuous mode [ 214.194961][ T13] veth0_macvtap: left promiscuous mode [ 214.195129][ T13] veth1_vlan: left promiscuous mode [ 214.195197][ T13] veth0_vlan: left promiscuous mode [ 214.350741][ T13] team0 (unregistering): Port device team_slave_1 removed [ 214.355306][ T13] team0 (unregistering): Port device team_slave_0 removed [ 214.461159][ T1159] smc: removing ib device syz0 [ 214.504236][ T5876] infiniband syz_device_name_32_chars_1234567: ib_query_port failed (-19) [ 214.505956][ T35] infiniband syz0: ib_query_port failed (-19) [ 214.524833][ T1180] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed [ 214.567759][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.567775][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.600721][ T1159] smbdirect: ib_dev[syz0] removed [ 214.620024][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.620111][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.621077][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.676844][T11753] netlink: 8772 bytes leftover after parsing attributes in process `syz.4.2177'. [ 214.698919][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.789383][T11758] fuse: Invalid rootmode [ 214.799863][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.799881][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.843186][T11761] device-mapper: table: 248:3: zero-length target [ 214.843198][T11761] device-mapper: ioctl: error adding target to table [ 214.892245][T11764] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 215.148768][ T5819] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 215.219676][ T66] Bluetooth: hci0: command tx timeout [ 215.319772][ T5819] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 215.319809][ T5819] usb 9-1: too many configurations: 13, using maximum allowed: 8 [ 215.320378][ T5819] usb 9-1: config 0 has no interfaces? [ 215.320890][ T5819] usb 9-1: config 0 has no interfaces? [ 215.321393][ T5819] usb 9-1: config 0 has no interfaces? [ 215.322051][ T5819] usb 9-1: config 0 has no interfaces? [ 215.322611][ T5819] usb 9-1: config 0 has no interfaces? [ 215.323362][ T5819] usb 9-1: config 0 has no interfaces? [ 215.323897][ T5819] usb 9-1: config 0 has no interfaces? [ 215.324613][ T5819] usb 9-1: config 0 has no interfaces? [ 215.327138][ T5819] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.327159][ T5819] usb 9-1: Product: syz [ 215.327172][ T5819] usb 9-1: Manufacturer: syz [ 215.327184][ T5819] usb 9-1: SerialNumber: syz [ 215.348017][ T5819] usb 9-1: config 0 descriptor?? [ 215.557923][ T35] usb 9-1: USB disconnect, device number 16 [ 215.571985][T11806] netlink: 8772 bytes leftover after parsing attributes in process `syz.5.2185'. [ 215.673357][T11815] fuse: Invalid rootmode [ 215.712948][T11818] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2188'. [ 215.768951][ T5888] page_pool_release_retry() stalled pool shutdown: id 40, 1 inflight 60 sec [ 215.871688][T11827] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 215.956215][T11831] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2193'. [ 216.056276][T11835] netlink: 8752 bytes leftover after parsing attributes in process `syz.5.2195'. [ 216.096139][T11837] fuse: Bad value for 'rootmode' [ 216.447707][ T5819] usb 6-1: USB disconnect, device number 63 [ 216.495881][T11857] netlink: 8752 bytes leftover after parsing attributes in process `syz.0.2205'. [ 216.518177][T11859] fuse: Bad value for 'rootmode' [ 216.562169][T11863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.577527][T11867] netlink: 'syz.5.2209': attribute type 1 has an invalid length. [ 216.577541][T11867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2209'. [ 216.577700][T11867] 8021q: VLANs not supported on tunl0 [ 216.588154][T11869] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 216.597098][ T66] Bluetooth: hci1: unexpected event for opcode 0x200c [ 216.597630][T11871] device-mapper: table: 248:3: multipath: not enough path parameters (-EINVAL) [ 216.597642][T11871] device-mapper: ioctl: error adding target to table [ 216.759051][T11882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2215'. [ 216.798417][T11886] fuse: Bad value for 'rootmode' [ 216.888870][ T5805] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 216.906845][T11894] MINIX-fs: unable to read superblock [ 217.059411][ T5805] usb 5-1: Using ep0 maxpacket: 16 [ 217.059993][ T5805] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 217.060949][ T5805] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 217.060974][ T5805] usb 5-1: config 0 interface 0 has no altsetting 0 [ 217.062794][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.062814][ T5805] usb 5-1: Product: syz [ 217.062826][ T5805] usb 5-1: Manufacturer: syz [ 217.062841][ T5805] usb 5-1: SerialNumber: syz [ 217.067573][ T5805] usb 5-1: config 0 descriptor?? [ 217.169262][ T5876] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 217.232870][ T43] audit: type=1400 audit(1791816581.396:1947): avc: denied { ioctl } for pid=11895 comm="syz.5.2221" path="socket:[54743]" dev="sockfs" ino=54743 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 217.277066][ T5805] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 217.277112][ T5805] imon 5-1:0.0: unable to initialize intf0, err -19 [ 217.277121][ T5805] imon:imon_probe: failed to initialize context! [ 217.277127][ T5805] imon 5-1:0.0: unable to register, err -19 [ 217.281828][ T5805] usb 5-1: USB disconnect, device number 71 [ 217.339808][ T5876] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.339843][ T5876] usb 9-1: too many configurations: 13, using maximum allowed: 8 [ 217.340403][ T5876] usb 9-1: config 0 has no interfaces? [ 217.340907][ T5876] usb 9-1: config 0 has no interfaces? [ 217.341405][ T5876] usb 9-1: config 0 has no interfaces? [ 217.341901][ T5876] usb 9-1: config 0 has no interfaces? [ 217.342359][ T5876] usb 9-1: config 0 has no interfaces? [ 217.342848][ T5876] usb 9-1: config 0 has no interfaces? [ 217.343340][ T5876] usb 9-1: config 0 has no interfaces? [ 217.343834][ T5876] usb 9-1: config 0 has no interfaces? [ 217.345842][ T5876] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.345857][ T5876] usb 9-1: Product: syz [ 217.345868][ T5876] usb 9-1: Manufacturer: syz [ 217.345879][ T5876] usb 9-1: SerialNumber: syz [ 217.347900][ T5876] usb 9-1: config 0 descriptor?? [ 217.553983][ T5805] usb 9-1: USB disconnect, device number 17 [ 217.718972][ T5876] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 217.843710][T11904] PKCS7: Unsupported SignerInfo version [ 217.869447][ T5876] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 217.870469][ T5876] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 217.870494][ T5876] usb 5-1: config 0 interface 0 has no altsetting 0 [ 217.872421][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.872442][ T5876] usb 5-1: Product: syz [ 217.872456][ T5876] usb 5-1: Manufacturer: syz [ 217.872472][ T5876] usb 5-1: SerialNumber: syz [ 217.874487][ T5876] usb 5-1: config 0 descriptor?? [ 217.923616][T11908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.005728][T11912] fuse: Unknown parameter 'use00000000000000000000' [ 218.077654][ T5876] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 218.077696][ T5876] imon 5-1:0.0: unable to initialize intf0, err -19 [ 218.077707][ T5876] imon:imon_probe: failed to initialize context! [ 218.077716][ T5876] imon 5-1:0.0: unable to register, err -19 [ 218.318896][ T5819] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 218.458754][ T5819] usb 10-1: device descriptor read/64, error -71 [ 218.689770][T11920] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 218.718818][ T5819] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 218.858756][ T5819] usb 10-1: device descriptor read/64, error -71 [ 218.969734][ T5819] usb usb10-port1: attempt power cycle [ 219.099782][T11931] fuse: fd is not a fuse device [ 219.101845][ T43] audit: type=1400 audit(1791816583.266:1948): avc: denied { ioctl } for pid=11930 comm="syz.1.2235" path="socket:[54777]" dev="sockfs" ino=54777 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 219.335208][T11941] fuse: Unknown parameter 'use00000000000000000000' [ 219.338716][ T5819] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 219.371068][ T5819] usb 10-1: device descriptor read/8, error -71 [ 219.610560][ T5819] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 219.629434][ T5819] usb 10-1: device descriptor read/8, error -71 [ 219.638777][ T35] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 219.739293][ T5819] usb usb10-port1: unable to enumerate USB device [ 219.799773][ T35] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.799810][ T35] usb 9-1: too many configurations: 13, using maximum allowed: 8 [ 219.800374][ T35] usb 9-1: config 0 has no interfaces? [ 219.800925][ T35] usb 9-1: config 0 has no interfaces? [ 219.801459][ T35] usb 9-1: config 0 has no interfaces? [ 219.801989][ T35] usb 9-1: config 0 has no interfaces? [ 219.802546][ T35] usb 9-1: config 0 has no interfaces? [ 219.803092][ T35] usb 9-1: config 0 has no interfaces? [ 219.803621][ T35] usb 9-1: config 0 has no interfaces? [ 219.804141][ T35] usb 9-1: config 0 has no interfaces? [ 219.806224][ T35] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.806244][ T35] usb 9-1: Product: syz [ 219.806258][ T35] usb 9-1: Manufacturer: syz [ 219.806270][ T35] usb 9-1: SerialNumber: syz [ 219.809445][ T35] usb 9-1: config 0 descriptor?? [ 220.014077][ T5819] usb 9-1: USB disconnect, device number 18 [ 220.364988][ T5888] usb 5-1: USB disconnect, device number 72 [ 220.482606][T11951] openvswitch: netlink: IP tunnel dst address not specified [ 220.509102][T11955] openvswitch: netlink: IP tunnel dst address not specified [ 220.509120][T11955] FAULT_INJECTION: forcing a failure. [ 220.509120][T11955] name failslab, interval 1, probability 0, space 0, times 0 [ 220.509137][T11955] CPU: 3 UID: 0 PID: 11955 Comm: syz.0.2243 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.509152][T11955] Tainted: [L]=SOFTLOCKUP [ 220.509156][T11955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.509163][T11955] Call Trace: [ 220.509167][T11955] [ 220.509172][T11955] dump_stack_lvl+0x100/0x190 [ 220.509193][T11955] should_fail_ex.cold+0x5/0xa [ 220.509209][T11955] should_failslab+0xc2/0x120 [ 220.509226][T11955] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 220.509242][T11955] ? __alloc_skb+0x140/0x710 [ 220.509262][T11955] __alloc_skb+0x140/0x710 [ 220.509279][T11955] ? __alloc_skb+0x5b7/0x710 [ 220.509296][T11955] ? __pfx___alloc_skb+0x10/0x10 [ 220.509312][T11955] ? genl_rcv_msg+0x4be/0x800 [ 220.509328][T11955] netlink_ack+0x117/0xb80 [ 220.509348][T11955] netlink_rcv_skb+0x333/0x420 [ 220.509365][T11955] ? __pfx_genl_rcv_msg+0x10/0x10 [ 220.509378][T11955] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 220.509401][T11955] ? netlink_deliver_tap+0x1ae/0xcc0 [ 220.509420][T11955] genl_rcv+0x28/0x40 [ 220.509430][T11955] netlink_unicast+0x585/0x850 [ 220.509449][T11955] ? __pfx_netlink_unicast+0x10/0x10 [ 220.509470][T11955] netlink_sendmsg+0x8b0/0xda0 [ 220.509490][T11955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.509508][T11955] ? selinux_socket_sendmsg+0x198/0x2f0 [ 220.509527][T11955] ____sys_sendmsg+0xa4d/0xbe0 [ 220.509540][T11955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.509558][T11955] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.509575][T11955] ? lock_acquire+0x1d1/0x380 [ 220.509588][T11955] ? get_pid_task+0x2a/0x250 [ 220.509605][T11955] ___sys_sendmsg+0x190/0x1e0 [ 220.509621][T11955] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.509636][T11955] ? get_pid_task+0x106/0x250 [ 220.509656][T11955] ? find_held_lock+0x2b/0x80 [ 220.509687][T11955] __sys_sendmsg+0x160/0x210 [ 220.509699][T11955] ? __pfx___sys_sendmsg+0x10/0x10 [ 220.509718][T11955] do_syscall_64+0x123/0x790 [ 220.509736][T11955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.509748][T11955] RIP: 0033:0x7f7269d9e1d9 [ 220.509758][T11955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.509769][T11955] RSP: 002b:00007f726abf2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.509781][T11955] RAX: ffffffffffffffda RBX: 00007f726a025fa0 RCX: 00007f7269d9e1d9 [ 220.509788][T11955] RDX: 0000000004008094 RSI: 0000200000000000 RDI: 0000000000000003 [ 220.509795][T11955] RBP: 00007f726abf2090 R08: 0000000000000000 R09: 0000000000000000 [ 220.509802][T11955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.509809][T11955] R13: 00007f726a026038 R14: 00007f726a025fa0 R15: 00007ffed030b598 [ 220.509823][T11955] [ 220.626308][T11963] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 221.144173][T11972] fuse: Unknown parameter 'use00000000000000000000' [ 221.166320][ T43] audit: type=1400 audit(1791816585.326:1949): avc: denied { connect } for pid=11973 comm="syz.0.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 221.300295][ T43] audit: type=1400 audit(1791816585.466:1950): avc: denied { read } for pid=11980 comm="syz.0.2254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 221.502378][T11991] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 221.502395][T11991] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 221.503151][T11991] vhci_hcd vhci_hcd.0: Device attached [ 221.503566][T11992] vhci_hcd: connection closed [ 221.505884][ T5804] vhci_hcd vhci_hcd.0: stop threads [ 221.506396][ T5804] vhci_hcd vhci_hcd.0: release socket [ 221.506415][ T5804] vhci_hcd vhci_hcd.0: disconnect device [ 221.508897][ T1355] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 221.548860][ T5888] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 221.658777][ T1355] usb 10-1: Using ep0 maxpacket: 16 [ 221.659579][ T1355] usb 10-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 221.660666][ T1355] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 221.660688][ T1355] usb 10-1: config 0 interface 0 has no altsetting 0 [ 221.663054][ T1355] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.663079][ T1355] usb 10-1: Product: syz [ 221.663092][ T1355] usb 10-1: Manufacturer: syz [ 221.663105][ T1355] usb 10-1: SerialNumber: syz [ 221.665494][ T1355] usb 10-1: config 0 descriptor?? [ 221.718879][ T5888] usb 9-1: Using ep0 maxpacket: 8 [ 221.719609][ T5888] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 221.721194][ T5888] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 221.723524][ T5888] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 221.723589][ T5888] usb 9-1: SerialNumber: syz [ 221.874573][ T1355] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 221.874764][ T1355] imon 10-1:0.0: unable to initialize intf0, err -19 [ 221.874838][ T1355] imon:imon_probe: failed to initialize context! [ 221.874850][ T1355] imon 10-1:0.0: unable to register, err -19 [ 221.878405][ T1355] usb 10-1: USB disconnect, device number 13 [ 222.035718][T11997] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 222.318919][ T1355] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 222.339194][ T5888] cdc_ether 9-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 222.408336][ T43] audit: type=1400 audit(1791816586.566:1951): avc: denied { write } for pid=11999 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.450543][ T43] audit: type=1400 audit(1791816586.616:1952): avc: denied { write } for pid=12002 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.479148][ T1355] usb 10-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 222.494677][ T1355] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 222.494693][ T1355] usb 10-1: config 0 interface 0 has no altsetting 0 [ 222.523864][ T1355] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.523880][ T1355] usb 10-1: Product: syz [ 222.523888][ T1355] usb 10-1: Manufacturer: syz [ 222.523896][ T1355] usb 10-1: SerialNumber: syz [ 222.536618][ T1355] usb 10-1: config 0 descriptor?? [ 222.537958][ T35] usb 9-1: USB disconnect, device number 19 [ 222.556367][ T35] cdc_ether 9-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 222.578735][T12008] fuse: Unknown parameter 'user_i00000000000000000000' [ 222.588825][ T43] audit: type=1400 audit(1791816586.746:1953): avc: denied { write } for pid=12006 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.593913][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 222.631142][ T43] audit: type=1400 audit(1791816586.796:1954): avc: denied { write } for pid=12013 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.696471][T12017] device-mapper: table: 248:3: multipath: invalid number of feature args (-EINVAL) [ 222.696488][T12017] device-mapper: ioctl: error adding target to table [ 222.710298][ T43] audit: type=1400 audit(1791816586.876:1955): avc: denied { write } for pid=12015 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.764863][ T43] audit: type=1400 audit(1791816586.926:1956): avc: denied { write } for pid=12022 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.789927][T12025] loop3: detected capacity change from 0 to 7 [ 222.792014][T12025] Dev loop3: unable to read RDB block 7 [ 222.792046][T12025] loop3: unable to read partition table [ 222.792206][T12025] loop3: partition table beyond EOD, truncated [ 222.792244][T12025] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 222.796906][ T1355] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 222.796945][ T1355] imon 10-1:0.0: unable to initialize intf0, err -19 [ 222.796954][ T1355] imon:imon_probe: failed to initialize context! [ 222.796960][ T1355] imon 10-1:0.0: unable to register, err -19 [ 222.864277][ T43] audit: type=1400 audit(1791816587.026:1957): avc: denied { write } for pid=12027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.911340][ T43] audit: type=1400 audit(1791816587.076:1958): avc: denied { write } for pid=12033 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.912851][T12035] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 222.955948][T12038] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 223.012347][T12042] fuse: fd is not a fuse device [ 223.124130][ T43] audit: type=1400 audit(1791816587.286:1959): avc: denied { bind } for pid=12049 comm="syz.4.2275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 223.779149][ T1355] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 223.941149][ T1355] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.941174][ T1355] usb 5-1: too many configurations: 13, using maximum allowed: 8 [ 223.942232][ T1355] usb 5-1: config 0 has no interfaces? [ 223.942635][ T1355] usb 5-1: config 0 has no interfaces? [ 223.943066][ T1355] usb 5-1: config 0 has no interfaces? [ 223.943523][ T1355] usb 5-1: config 0 has no interfaces? [ 223.943918][ T1355] usb 5-1: config 0 has no interfaces? [ 223.944318][ T1355] usb 5-1: config 0 has no interfaces? [ 223.944711][ T1355] usb 5-1: config 0 has no interfaces? [ 223.945118][ T1355] usb 5-1: config 0 has no interfaces? [ 223.950387][ T1355] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.950404][ T1355] usb 5-1: Product: syz [ 223.950412][ T1355] usb 5-1: Manufacturer: syz [ 223.950420][ T1355] usb 5-1: SerialNumber: syz [ 223.951988][ T1355] usb 5-1: config 0 descriptor?? [ 223.980042][T12067] fuse: fd is not a fuse device [ 224.156883][ T1355] usb 5-1: USB disconnect, device number 73 [ 224.195707][T12083] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 224.210869][ T5741] Bluetooth: hci1: unexpected event for opcode 0x200c [ 224.334577][T12089] fuse: Unknown parameter 'user_id00000000000000000000' [ 224.371563][T12091] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 224.764232][T12108] fuse: fd is not a fuse device [ 224.802717][T12112] __nla_validate_parse: 1 callbacks suppressed [ 224.802736][T12112] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2301'. [ 224.808942][ T1355] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 224.842638][T12116] netlink: 'syz.1.2303': attribute type 1 has an invalid length. [ 224.860465][T12117] bond5: (slave veth0_to_bond): Releasing active interface [ 224.867907][T12117] bond9: (slave veth0_to_bond): making interface the new active one [ 224.875467][T12117] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 224.882968][T12116] macvlan2: entered promiscuous mode [ 224.882987][T12116] macvlan2: entered allmulticast mode [ 224.883932][T12116] bond9: entered promiscuous mode [ 224.883945][T12116] veth0_to_bond: entered promiscuous mode [ 224.884572][T12116] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 224.885097][T12116] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 224.885157][T12116] bond9: left promiscuous mode [ 224.885168][T12116] veth0_to_bond: left promiscuous mode [ 224.973832][ T1355] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 224.977534][ T1355] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 224.977569][ T1355] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 224.977588][ T1355] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 224.977612][ T1355] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 224.982562][ T1355] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.982587][ T1355] usb 5-1: Product: syz [ 224.982602][ T1355] usb 5-1: Manufacturer: syz [ 224.982617][ T1355] usb 5-1: SerialNumber: syz [ 224.987384][ T1355] usb 5-1: config 0 descriptor?? [ 225.046342][T12129] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 225.064784][T12131] fuse: fd is not a fuse device [ 225.096375][ T5101] usb 10-1: USB disconnect, device number 14 [ 225.118521][T12136] ip_tables: iptables: counters copy to user failed while replacing table [ 225.189909][ T5805] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 225.194601][ T1355] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 225.208093][T12139] ceph: No mds server is up or the cluster is laggy [ 225.209140][ T5741] Bluetooth: hci0: command 0x0c3a tx timeout [ 225.211042][ T66] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 225.422712][T12155] fuse: Bad value for 'fd' [ 225.595031][ T1355] usb 5-1: USB disconnect, device number 74 [ 225.614064][T12161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2321'. [ 225.614081][T12161] netlink: 'syz.4.2321': attribute type 1 has an invalid length. [ 225.727409][T12163] openvswitch: netlink: Message has 40 unknown bytes. [ 225.740231][ T5805] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 225.865508][T12168] FAULT_INJECTION: forcing a failure. [ 225.865508][T12168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.865531][T12168] CPU: 0 UID: 0 PID: 12168 Comm: syz.4.2324 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.865546][T12168] Tainted: [L]=SOFTLOCKUP [ 225.865551][T12168] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.865570][T12168] Call Trace: [ 225.865575][T12168] [ 225.865580][T12168] dump_stack_lvl+0x100/0x190 [ 225.865602][T12168] should_fail_ex.cold+0x5/0xa [ 225.865619][T12168] _copy_from_user+0x2e/0xd0 [ 225.865638][T12168] __sys_bpf+0x2f5/0x4a30 [ 225.865656][T12168] ? __pfx___sys_bpf+0x10/0x10 [ 225.865668][T12168] ? find_held_lock+0x2b/0x80 [ 225.865685][T12168] ? futex_wake+0x4ea/0x5e0 [ 225.865709][T12168] ? rcu_read_lock_any_held+0x6a/0x90 [ 225.865726][T12168] ? find_held_lock+0x2b/0x80 [ 225.865742][T12168] ? ksys_write+0x190/0x250 [ 225.865756][T12168] ? ksys_write+0x190/0x250 [ 225.865779][T12168] ? __x64_sys_futex+0x34f/0x4d0 [ 225.865795][T12168] ? __x64_sys_futex+0x358/0x4d0 [ 225.865811][T12168] ? fput+0x7c/0x100 [ 225.865828][T12168] ? __pfx___x64_sys_futex+0x10/0x10 [ 225.865843][T12168] ? ksys_write+0x1ac/0x250 [ 225.865858][T12168] ? __x64_sys_bpf+0xce/0x140 [ 225.865870][T12168] __x64_sys_bpf+0xce/0x140 [ 225.865883][T12168] ? do_syscall_64+0xae/0x790 [ 225.865900][T12168] do_syscall_64+0x123/0x790 [ 225.865916][T12168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.865928][T12168] RIP: 0033:0x7fc466b9e1d9 [ 225.865938][T12168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.865949][T12168] RSP: 002b:00007fc464df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.865962][T12168] RAX: ffffffffffffffda RBX: 00007fc466e25fa0 RCX: 00007fc466b9e1d9 [ 225.865970][T12168] RDX: 0000000000000028 RSI: 0000200000000740 RDI: 0000000000000012 [ 225.865977][T12168] RBP: 00007fc466c35888 R08: 0000000000000000 R09: 0000000000000000 [ 225.865983][T12168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.865990][T12168] R13: 00007fc466e26038 R14: 00007fc466e25fa0 R15: 00007ffd5cdc2a18 [ 225.866005][T12168] [ 225.873750][T12168] FAULT_INJECTION: forcing a failure. [ 225.873750][T12168] name failslab, interval 1, probability 0, space 0, times 0 [ 225.873779][T12168] CPU: 1 UID: 0 PID: 12168 Comm: syz.4.2324 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.873803][T12168] Tainted: [L]=SOFTLOCKUP [ 225.873810][T12168] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.873821][T12168] Call Trace: [ 225.873828][T12168] [ 225.873836][T12168] dump_stack_lvl+0x100/0x190 [ 225.873862][T12168] should_fail_ex.cold+0x5/0xa [ 225.873887][T12168] should_failslab+0xc2/0x120 [ 225.873930][T12168] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 225.873950][T12168] ? __d_alloc+0x35/0xa50 [ 225.873972][T12168] __d_alloc+0x35/0xa50 [ 225.873991][T12168] d_alloc_parallel+0x105/0x14c0 [ 225.874018][T12168] ? lock_acquire+0x1d1/0x380 [ 225.874038][T12168] ? __d_lookup+0x73/0x4a0 [ 225.874056][T12168] ? __pfx_d_alloc_parallel+0x10/0x10 [ 225.874078][T12168] ? __d_lookup+0x25c/0x4a0 [ 225.874103][T12168] ? __d_lookup+0x266/0x4a0 [ 225.874128][T12168] lookup_open+0x6bb/0x1990 [ 225.874155][T12168] path_openat+0xa2c/0x2440 [ 225.874185][T12168] ? __pfx_path_openat+0x10/0x10 [ 225.874215][T12168] do_file_open+0x20e/0x430 [ 225.874240][T12168] ? __pfx_do_file_open+0x10/0x10 [ 225.874272][T12168] ? __pfx_kfree_link+0x10/0x10 [ 225.874301][T12168] ? _raw_spin_unlock+0x28/0x50 [ 225.874323][T12168] ? alloc_fd+0x471/0x7a0 [ 225.874354][T12168] do_sys_openat2+0x10f/0x1e0 [ 225.874368][T12168] ? __pfx_do_sys_openat2+0x10/0x10 [ 225.874395][T12168] __x64_sys_openat+0x12d/0x210 [ 225.874412][T12168] ? __pfx___x64_sys_openat+0x10/0x10 [ 225.874429][T12168] ? selinux_file_ioctl+0xb6/0x290 [ 225.874460][T12168] do_syscall_64+0x123/0x790 [ 225.874483][T12168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.874502][T12168] RIP: 0033:0x7fc466b5ea0e [ 225.874517][T12168] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 225.874538][T12168] RSP: 002b:00007fc464df5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 225.874551][T12168] RAX: ffffffffffffffda RBX: 00007fc464df66c0 RCX: 00007fc466b5ea0e [ 225.874562][T12168] RDX: 0000000000000002 RSI: 00007fc464df5f90 RDI: ffffffffffffff9c [ 225.874575][T12168] RBP: 00007fc466c35888 R08: 0000000000000000 R09: 0000000000000000 [ 225.874587][T12168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.874598][T12168] R13: 00007fc466e26038 R14: 00007fc466e25fa0 R15: 00007ffd5cdc2a18 [ 225.874627][T12168] [ 225.890529][ T5805] usb 10-1: Using ep0 maxpacket: 16 [ 225.891168][ T5805] usb 10-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 225.892112][ T5805] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 225.892127][ T5805] usb 10-1: config 0 interface 0 has no altsetting 0 [ 225.894103][ T5805] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.894116][ T5805] usb 10-1: Product: syz [ 225.894123][ T5805] usb 10-1: Manufacturer: syz [ 225.894131][ T5805] usb 10-1: SerialNumber: syz [ 225.897933][ T5805] usb 10-1: config 0 descriptor?? [ 226.028902][T12174] fuse: Bad value for 'fd' [ 226.086897][T12180] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 226.106541][ T5805] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 226.106610][ T5805] imon 10-1:0.0: unable to initialize intf0, err -19 [ 226.106623][ T5805] imon:imon_probe: failed to initialize context! [ 226.106632][ T5805] imon 10-1:0.0: unable to register, err -19 [ 226.109554][ T66] Bluetooth: hci1: unexpected event for opcode 0x200c [ 226.115578][ T5805] usb 10-1: USB disconnect, device number 15 [ 226.189428][T12184] dummyusb_generic_handle_packet: ctrl buffer too small (16384 > 4096) 0 speed is unknown, defaulting to 1000 [ 226.190281][T12184] dummy0 speed is unknown, defaulting to 1000 [ 226.191287][T12184] dummy0 speed is unknown, defaulting to 1000 [ 226.270684][ T1355] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 226.274530][T12184] infiniband syz0: set active [ 226.274568][ T5101] dummy0 speed is unknown, defaulting to 1000 [ 226.274601][T12184] infiniband syz0: added dummy0 [ 226.280278][T12184] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 226.280300][T12184] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 226.280321][T12184] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 226.303580][T12184] RDS/IB: syz0: added [ 226.303606][T12184] smc: adding ib device syz0 with port count 1 [ 226.303616][T12184] smc: ib device syz0 port 1 has no pnetid [ 226.303665][ T5101] dummy0 speed is unknown, defaulting to 1000 [ 226.305583][T12184] dummy0 speed is unknown, defaulting to 1000 [ 226.410595][T12198] fuse: Bad value for 'fd' [ 226.419258][T12184] dummy0 speed is unknown, defaulting to 1000 [ 226.516652][T12184] dummy0 speed is unknown, defaulting to 1000 [ 226.539406][ T5805] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 226.657484][T12184] dummy0 speed is unknown, defaulting to 1000 [ 226.689407][ T5805] usb 10-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 226.690204][ T5805] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 226.690219][ T5805] usb 10-1: config 0 interface 0 has no altsetting 0 [ 226.691722][ T5805] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.691735][ T5805] usb 10-1: Product: syz [ 226.691743][ T5805] usb 10-1: Manufacturer: syz [ 226.691750][ T5805] usb 10-1: SerialNumber: syz [ 226.693577][ T5805] usb 10-1: config 0 descriptor?? [ 226.778742][ T1355] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 226.790439][T12184] dummy0 speed is unknown, defaulting to 1000 [ 226.896650][ T5805] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 226.896691][ T5805] imon 10-1:0.0: unable to initialize intf0, err -19 [ 226.896700][ T5805] imon:imon_probe: failed to initialize context! [ 226.896705][ T5805] imon 10-1:0.0: unable to register, err -19 [ 226.914636][T12184] dummy0 speed is unknown, defaulting to 1000 [ 226.929496][ T1355] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.929527][ T1355] usb 9-1: too many configurations: 13, using maximum allowed: 8 [ 226.930408][ T1355] usb 9-1: config 0 has no interfaces? [ 226.930805][ T1355] usb 9-1: config 0 has no interfaces? [ 226.931179][ T1355] usb 9-1: config 0 has no interfaces? [ 226.931548][ T1355] usb 9-1: config 0 has no interfaces? [ 226.931919][ T1355] usb 9-1: config 0 has no interfaces? [ 226.932516][ T1355] usb 9-1: config 0 has no interfaces? [ 226.932953][ T1355] usb 9-1: config 0 has no interfaces? [ 226.933390][ T1355] usb 9-1: config 0 has no interfaces? [ 226.935189][ T1355] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.935205][ T1355] usb 9-1: Product: syz [ 226.935215][ T1355] usb 9-1: Manufacturer: syz [ 226.935225][ T1355] usb 9-1: SerialNumber: syz [ 226.937917][ T1355] usb 9-1: config 0 descriptor?? [ 227.141482][ T5820] usb 9-1: USB disconnect, device number 20 [ 227.209066][ T1355] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 227.217132][T12218] fuse: Unknown parameter '0x0000000000000004' [ 227.258452][T12224] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 227.299347][ T43] audit: type=1400 audit(1791816591.466:1960): avc: denied { watch } for pid=12225 comm="syz.0.2349" path="pipe:[56811]" dev="pipefs" ino=56811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 227.444118][T12232] e1000e 0000:00:02.0 eth1: removed PHC [ 227.475360][ T43] audit: type=1400 audit(1791816591.636:1961): avc: denied { write } for pid=12234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.525040][ T43] audit: type=1400 audit(1791816591.686:1962): avc: denied { write } for pid=12238 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.556021][T12232] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 227.638361][ T43] audit: type=1400 audit(1791816591.796:1963): avc: denied { write } for pid=12241 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.676528][ T43] audit: type=1400 audit(1791816591.836:1964): avc: denied { write } for pid=12244 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.743129][ T43] audit: type=1400 audit(1791816591.906:1965): avc: denied { write } for pid=12246 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.782706][T12237] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 227.788740][ T1355] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 227.791020][T12237] pci 0000:00:02.0: BAR 0 [mem 0xfea80000-0xfea9ffff] [ 227.791123][T12237] pci 0000:00:02.0: BAR 1 [mem 0xfeaa0000-0xfeabffff] [ 227.791238][T12237] pci 0000:00:02.0: BAR 2 [io 0xc080-0xc09f] [ 227.791326][T12237] pci 0000:00:02.0: BAR 3 [mem 0xfeaf0000-0xfeaf3fff] [ 227.791508][T12237] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 227.791847][ T43] audit: type=1400 audit(1791816591.956:1966): avc: denied { write } for pid=12249 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.791967][T12237] pci 0000:00:02.0: enabling Extended Tags [ 227.823943][T12237] pci 0000:00:02.0: Adding to iommu group 2 [ 227.841454][T12237] pci 0000:00:02.0: ROM [mem 0x80000000-0x8003ffff pref]: assigned [ 227.841477][T12237] pci 0000:00:02.0: BAR 0 [mem 0x80040000-0x8005ffff]: assigned [ 227.842563][T12237] pci 0000:00:02.0: BAR 1 [mem 0x80060000-0x8007ffff]: assigned [ 227.843633][T12237] pci 0000:00:02.0: BAR 3 [mem 0x80080000-0x80083fff]: assigned [ 227.844749][T12237] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 227.870844][ T43] audit: type=1400 audit(1791816592.036:1967): avc: denied { write } for pid=12252 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.886526][T12237] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 227.930822][ T43] audit: type=1400 audit(1791816592.096:1968): avc: denied { write } for pid=12255 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.946069][ T1355] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 227.946859][ T1355] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 227.946874][ T1355] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 227.946886][ T1355] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 227.946898][ T1355] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 227.948391][ T1355] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.948403][ T1355] usb 9-1: Product: syz [ 227.948410][ T1355] usb 9-1: Manufacturer: syz [ 227.948418][ T1355] usb 9-1: SerialNumber: syz [ 227.954796][ T1355] usb 9-1: config 0 descriptor?? [ 227.973139][T12237] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 228.012650][ T43] audit: type=1400 audit(1791816592.176:1969): avc: denied { write } for pid=12257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.068340][ T43] audit: type=1400 audit(1791816592.226:1970): avc: denied { write } for pid=12260 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.080322][T12237] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 228.080354][T12237] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 228.080582][T12237] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 228.154359][T12268] netlink: 'syz.1.2354': attribute type 1 has an invalid length. [ 228.157983][ T1355] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 228.177774][T12268] bond9: (slave veth0_to_bond): Releasing active interface [ 228.185421][T12268] bond10: (slave veth0_to_bond): making interface the new active one [ 228.187094][T12268] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 228.192465][T12268] macvlan2: entered promiscuous mode [ 228.192477][T12268] macvlan2: entered allmulticast mode [ 228.192711][T12268] bond10: entered promiscuous mode [ 228.192719][T12268] veth0_to_bond: entered promiscuous mode [ 228.193089][T12268] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 228.193426][T12268] bond10: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 228.193467][T12268] bond10: left promiscuous mode [ 228.193475][T12268] veth0_to_bond: left promiscuous mode [ 228.288616][T12276] fuse: Unknown parameter '0x0000000000000004' [ 228.360883][T12286] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 228.411692][T12291] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 228.423699][T12291] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 228.560312][ T5876] usb 9-1: USB disconnect, device number 21 [ 228.783876][ T5441] 8021q: adding VLAN 0 to HW filter on device eth1 [ 229.168638][T12314] device-mapper: table: 248:3: multipath: not enough priority group arguments (-EINVAL) [ 229.168733][T12314] device-mapper: ioctl: error adding target to table [ 229.187970][ T35] usb 10-1: USB disconnect, device number 16 [ 229.233110][T12318] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2364'. [ 229.233142][T12318] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2364'. [ 229.253852][ T5876] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 229.285047][T12324] fuse: Unknown parameter '0x0000000000000004' [ 229.295825][ T5741] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 229.301957][ T5741] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 229.302590][ T5741] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 229.303254][ T5741] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 229.303647][ T5741] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 229.330438][T12328] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 229.461524][T12345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2371'. [ 229.472218][T12345] bond4: entered promiscuous mode [ 229.472247][T12345] bond4: entered allmulticast mode [ 229.472445][T12345] 8021q: adding VLAN 0 to HW filter on device bond4 [ 229.551943][T12357] fuse: Unknown parameter '0x0000000000000004' [ 229.576308][T12323] dummy0 speed is unknown, defaulting to 1000 [ 229.627699][T12361] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 229.628741][ T5101] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 229.739482][ T1355] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 229.789691][ T5101] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 229.789717][ T5101] usb 5-1: too many configurations: 13, using maximum allowed: 8 [ 229.790158][ T5101] usb 5-1: config 0 has no interfaces? [ 229.790577][ T5101] usb 5-1: config 0 has no interfaces? [ 229.791007][ T5101] usb 5-1: config 0 has no interfaces? [ 229.791432][ T5101] usb 5-1: config 0 has no interfaces? [ 229.791802][ T5101] usb 5-1: config 0 has no interfaces? [ 229.792184][ T5101] usb 5-1: config 0 has no interfaces? [ 229.792573][ T5101] usb 5-1: config 0 has no interfaces? [ 229.792940][ T5101] usb 5-1: config 0 has no interfaces? [ 229.794463][ T5101] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.794476][ T5101] usb 5-1: Product: syz [ 229.794483][ T5101] usb 5-1: Manufacturer: syz [ 229.794492][ T5101] usb 5-1: SerialNumber: syz [ 229.796129][ T5101] usb 5-1: config 0 descriptor?? [ 229.868741][ T5776] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.868762][ T5776] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 229.887852][T12323] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.887895][T12323] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.887954][T12323] bridge_slave_0: entered allmulticast mode [ 229.888861][T12323] bridge_slave_0: entered promiscuous mode [ 229.891504][T12323] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.891598][T12323] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.891749][T12323] bridge_slave_1: entered allmulticast mode [ 229.892585][T12323] bridge_slave_1: entered promiscuous mode [ 229.906139][ T1355] usb 9-1: Using ep0 maxpacket: 16 [ 229.906595][ T1355] usb 9-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 229.907338][T12323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.907391][ T1355] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.907406][ T1355] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 229.907418][ T1355] usb 9-1: config 0 interface 0 has no altsetting 0 [ 229.908797][T12323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.909086][ T1355] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.909099][ T1355] usb 9-1: Product: syz [ 229.909106][ T1355] usb 9-1: Manufacturer: syz [ 229.909114][ T1355] usb 9-1: SerialNumber: syz [ 229.917893][ T1355] usb 9-1: config 0 descriptor?? [ 229.930228][T12323] team0: Port device team_slave_0 added [ 229.932445][T12323] team0: Port device team_slave_1 added [ 229.951463][T12323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.951474][T12323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.951487][T12323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.952303][T12323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.952310][T12323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.952323][T12323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.974896][T12323] hsr_slave_0: entered promiscuous mode [ 229.975801][T12323] hsr_slave_1: entered promiscuous mode [ 229.987096][ T5776] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.987115][ T5776] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 229.998512][ T5101] usb 5-1: USB disconnect, device number 75 [ 230.053419][ T5776] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.053440][ T5776] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 230.112536][ T5776] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.112558][ T5776] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 230.123133][ T1355] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 230.123174][ T1355] imon 9-1:0.0: unable to initialize intf0, err -90 [ 230.123182][ T1355] imon:imon_probe: failed to initialize context! [ 230.123188][ T1355] imon 9-1:0.0: unable to register, err -19 [ 230.129985][ T1355] usb 9-1: USB disconnect, device number 22 [ 230.255199][ T5776] bridge_slave_1: left allmulticast mode [ 230.255225][ T5776] bridge_slave_1: left promiscuous mode [ 230.255400][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.259814][ T5776] bridge_slave_0: left allmulticast mode [ 230.259836][ T5776] bridge_slave_0: left promiscuous mode [ 230.260034][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.383745][ T5776] bond2 (unregistering): (slave xfrm1): Releasing backup interface [ 230.383763][ T5776] xfrm1 (unregistering): left promiscuous mode [ 230.452372][ T5776] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.458065][ T5776] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.462910][ T5776] bond0 (unregistering): Released all slaves [ 230.465732][ T5776] bond1 (unregistering): Released all slaves [ 230.471782][ T5776] bond2 (unregistering): Released all slaves [ 230.477024][ T5776] bond3 (unregistering): Released all slaves [ 230.485009][ T5776] bond4 (unregistering): Released all slaves [ 230.490137][ T5776] bond5 (unregistering): Released all slaves [ 230.497410][ T5776] bond6 (unregistering): Released all slaves [ 230.506237][ T5776] bond7 (unregistering): (slave bond8): Releasing backup interface [ 230.506973][ T5776] bond7 (unregistering): Released all slaves [ 230.522973][ T5776] bond8 (unregistering): Released all slaves [ 230.527890][ T5776] bond9 (unregistering): Released all slaves [ 230.535563][ T5776] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface [ 230.537521][ T5776] bond10 (unregistering): Released all slaves [ 230.543597][T12389] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.16777216.63), cmd(3) [ 230.559383][ T5441] 8021q: adding VLAN 0 to HW filter on device eth2 [ 230.579344][T12391] fuse: Unknown parameter '0x0000000000000004' [ 230.598742][ T35] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 230.640321][ T9] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 230.648311][T12393] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 230.750535][ T35] usb 9-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 230.753884][ T35] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 230.753900][ T35] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 230.753912][ T35] usb 9-1: config 0 interface 0 has no altsetting 0 [ 230.757549][ T35] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.757565][ T35] usb 9-1: Product: syz [ 230.757577][ T35] usb 9-1: Manufacturer: syz [ 230.757588][ T35] usb 9-1: SerialNumber: syz [ 230.762242][ T35] usb 9-1: config 0 descriptor?? [ 230.769133][ T9] usb 5-1: device descriptor read/64, error -71 [ 230.925402][ T5776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.925424][ T5776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.926366][ T5776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.926380][ T5776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.936325][ T5776] veth1_macvtap: left promiscuous mode [ 230.936355][ T5776] veth0_macvtap: left promiscuous mode [ 230.936453][ T5776] veth1_vlan: left promiscuous mode [ 230.936503][ T5776] veth0_vlan: left promiscuous mode [ 230.966527][ T35] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 230.966570][ T35] imon 9-1:0.0: unable to initialize intf0, err -90 [ 230.966578][ T35] imon:imon_probe: failed to initialize context! [ 230.966584][ T35] imon 9-1:0.0: unable to register, err -19 [ 231.013819][ T9] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 231.124166][ T5776] team0 (unregistering): Port device team_slave_1 removed [ 231.129005][ T5776] team0 (unregistering): Port device team_slave_0 removed [ 231.138779][ T9] usb 5-1: device descriptor read/64, error -71 [ 231.249223][ T9] usb usb5-port1: attempt power cycle [ 231.364323][T12323] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 231.366012][T12323] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 231.366358][T12323] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 231.367785][T12323] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 231.368435][T12323] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 231.372389][T12323] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 231.372761][T12323] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 231.379222][T12323] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 231.380947][ T66] Bluetooth: hci3: command tx timeout [ 231.430224][T12323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.436518][T12323] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.445511][ T4599] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.445556][ T4599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.446545][ T4599] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.446587][ T4599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.588781][ T9] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 231.609917][ T9] usb 5-1: device descriptor read/8, error -71 [ 231.722874][T12323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.746737][T12323] veth0_vlan: entered promiscuous mode [ 231.749854][T12323] veth1_vlan: entered promiscuous mode [ 231.767507][T12323] veth0_macvtap: entered promiscuous mode [ 231.772825][T12323] veth1_macvtap: entered promiscuous mode [ 231.780005][T12323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.785150][T12323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.824628][ T5804] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.847359][ T4599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.847373][ T4599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.852158][ T9] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 231.868816][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.869163][ T9] usb 5-1: device descriptor read/8, error -71 [ 231.870226][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.870239][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.880398][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.888852][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.979049][ T9] usb usb5-port1: unable to enumerate USB device [ 232.468559][T12455] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 232.570855][T12458] FAULT_INJECTION: forcing a failure. [ 232.570855][T12458] name failslab, interval 1, probability 0, space 0, times 0 [ 232.570878][T12458] CPU: 0 UID: 0 PID: 12458 Comm: syz.5.2394 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.570893][T12458] Tainted: [L]=SOFTLOCKUP [ 232.570898][T12458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.570904][T12458] Call Trace: [ 232.570930][T12458] [ 232.570936][T12458] dump_stack_lvl+0x100/0x190 [ 232.570965][T12458] should_fail_ex.cold+0x5/0xa [ 232.570982][T12458] should_failslab+0xc2/0x120 [ 232.571016][T12458] __kmalloc_noprof+0xfc/0x840 [ 232.571030][T12458] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 232.571051][T12458] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 232.571068][T12458] genl_family_rcv_msg_doit+0xc7/0x300 [ 232.571081][T12458] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 232.571099][T12458] ? bpf_lsm_capable+0x9/0x10 [ 232.571109][T12458] ? security_capable+0x80/0x260 [ 232.571126][T12458] genl_rcv_msg+0x560/0x800 [ 232.571142][T12458] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.571154][T12458] ? __lock_acquire+0x5c0/0x1f40 [ 232.571166][T12458] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 232.571181][T12458] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 232.571196][T12458] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 232.571216][T12458] netlink_rcv_skb+0x159/0x420 [ 232.571233][T12458] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.571245][T12458] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 232.571268][T12458] ? netlink_deliver_tap+0x1ae/0xcc0 [ 232.571287][T12458] genl_rcv+0x28/0x40 [ 232.571297][T12458] netlink_unicast+0x585/0x850 [ 232.571316][T12458] ? __pfx_netlink_unicast+0x10/0x10 [ 232.571337][T12458] netlink_sendmsg+0x8b0/0xda0 [ 232.571357][T12458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.571376][T12458] ? selinux_socket_sendmsg+0x198/0x2f0 [ 232.571394][T12458] ____sys_sendmsg+0xa4d/0xbe0 [ 232.571407][T12458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.571426][T12458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.571443][T12458] ? lock_acquire+0x1d1/0x380 [ 232.571455][T12458] ? get_pid_task+0x2a/0x250 [ 232.571473][T12458] ___sys_sendmsg+0x190/0x1e0 [ 232.571489][T12458] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.571503][T12458] ? get_pid_task+0x106/0x250 [ 232.571524][T12458] ? find_held_lock+0x2b/0x80 [ 232.571550][T12458] __sys_sendmsg+0x160/0x210 [ 232.571561][T12458] ? __pfx___sys_sendmsg+0x10/0x10 [ 232.571581][T12458] do_syscall_64+0x123/0x790 [ 232.571602][T12458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.571614][T12458] RIP: 0033:0x7f5dc699e1d9 [ 232.571624][T12458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.571639][T12458] RSP: 002b:00007f5dc77d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.571650][T12458] RAX: ffffffffffffffda RBX: 00007f5dc6c25fa0 RCX: 00007f5dc699e1d9 [ 232.571658][T12458] RDX: 00000000000000b0 RSI: 0000200000000580 RDI: 0000000000000003 [ 232.571665][T12458] RBP: 00007f5dc77d0090 R08: 0000000000000000 R09: 0000000000000000 [ 232.571671][T12458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.571678][T12458] R13: 00007f5dc6c26038 R14: 00007f5dc6c25fa0 R15: 00007ffcabacb6a8 [ 232.571693][T12458] [ 232.617700][T12462] fuse: Unknown parameter '0x0000000000000004' [ 232.641889][T12460] FAULT_INJECTION: forcing a failure. [ 232.641889][T12460] name failslab, interval 1, probability 0, space 0, times 0 [ 232.641922][T12460] CPU: 1 UID: 0 PID: 12460 Comm: syz.5.2395 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.641948][T12460] Tainted: [L]=SOFTLOCKUP [ 232.641955][T12460] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.641967][T12460] Call Trace: [ 232.641974][T12460] [ 232.641983][T12460] dump_stack_lvl+0x100/0x190 [ 232.642016][T12460] should_fail_ex.cold+0x5/0xa [ 232.642043][T12460] should_failslab+0xc2/0x120 [ 232.642071][T12460] __kmalloc_noprof+0xfc/0x840 [ 232.642095][T12460] ? alloc_port_data+0x13c/0x460 [ 232.642119][T12460] alloc_port_data+0x13c/0x460 [ 232.642142][T12460] ib_device_set_netdev+0x100/0x860 [ 232.642159][T12460] ? __sanitizer_cov_trace_pc+0xc/0x70 [ 232.642190][T12460] rxe_register_device+0x244/0x360 [ 232.642217][T12460] rxe_net_add+0x95/0xf0 [ 232.642238][T12460] rxe_newlink+0x9c/0x160 [ 232.642257][T12460] nldev_newlink+0x3b0/0x630 [ 232.642285][T12460] ? __pfx_nldev_newlink+0x10/0x10 [ 232.642383][T12460] ? cred_has_capability.isra.0+0x186/0x300 [ 232.642412][T12460] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 232.642438][T12460] ? lock_acquire+0x1d1/0x380 [ 232.642469][T12460] ? cap_capable+0x107/0x430 [ 232.642494][T12460] ? security_capable+0x80/0x260 [ 232.642523][T12460] ? ns_capable+0xd2/0xf0 [ 232.642541][T12460] ? __pfx_nldev_newlink+0x10/0x10 [ 232.642569][T12460] rdma_nl_rcv_msg+0x392/0x6f0 [ 232.642596][T12460] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 232.642625][T12460] ? __lock_acquire+0x5c0/0x1f40 [ 232.642647][T12460] ? __netlink_lookup+0xa9/0x900 [ 232.642677][T12460] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 232.642707][T12460] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 232.642742][T12460] ? netlink_deliver_tap+0x1ae/0xcc0 [ 232.642774][T12460] netlink_unicast+0x585/0x850 [ 232.642818][T12460] ? __pfx_netlink_unicast+0x10/0x10 [ 232.642856][T12460] netlink_sendmsg+0x8b0/0xda0 [ 232.642887][T12460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.642938][T12460] ? selinux_socket_sendmsg+0x198/0x2f0 [ 232.642968][T12460] ____sys_sendmsg+0xa4d/0xbe0 [ 232.642990][T12460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.643020][T12460] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.643048][T12460] ? lock_acquire+0x1d1/0x380 [ 232.643068][T12460] ? get_pid_task+0x2a/0x250 [ 232.643096][T12460] ___sys_sendmsg+0x190/0x1e0 [ 232.643122][T12460] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.643146][T12460] ? get_pid_task+0x106/0x250 [ 232.643182][T12460] ? find_held_lock+0x2b/0x80 [ 232.643226][T12460] __sys_sendmsg+0x160/0x210 [ 232.643246][T12460] ? __pfx___sys_sendmsg+0x10/0x10 [ 232.643280][T12460] do_syscall_64+0x123/0x790 [ 232.643310][T12460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.643329][T12460] RIP: 0033:0x7f5dc699e1d9 [ 232.643346][T12460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.643364][T12460] RSP: 002b:00007f5dc77d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.643383][T12460] RAX: ffffffffffffffda RBX: 00007f5dc6c25fa0 RCX: 00007f5dc699e1d9 [ 232.643396][T12460] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 232.643408][T12460] RBP: 00007f5dc77d0090 R08: 0000000000000000 R09: 0000000000000000 [ 232.643420][T12460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.643431][T12460] R13: 00007f5dc6c26038 R14: 00007f5dc6c25fa0 R15: 00007ffcabacb6a8 [ 232.643458][T12460] [ 232.643533][T12460] rdma_rxe: rxe_newlink: failed to add dummy0 [ 232.702718][T12466] FAULT_INJECTION: forcing a failure. [ 232.702718][T12466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.702749][T12466] CPU: 0 UID: 0 PID: 12466 Comm: syz.0.2397 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.702770][T12466] Tainted: [L]=SOFTLOCKUP [ 232.702774][T12466] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.702781][T12466] Call Trace: [ 232.702785][T12466] [ 232.702790][T12466] dump_stack_lvl+0x100/0x190 [ 232.702810][T12466] should_fail_ex.cold+0x5/0xa [ 232.702825][T12466] _copy_from_user+0x2e/0xd0 [ 232.702842][T12466] __sys_bpf+0x2f5/0x4a30 [ 232.702859][T12466] ? __pfx___sys_bpf+0x10/0x10 [ 232.702870][T12466] ? find_held_lock+0x2b/0x80 [ 232.702887][T12466] ? futex_wake+0x4ea/0x5e0 [ 232.702925][T12466] ? rcu_read_lock_any_held+0x6a/0x90 [ 232.702946][T12466] ? find_held_lock+0x2b/0x80 [ 232.702963][T12466] ? ksys_write+0x190/0x250 [ 232.702977][T12466] ? ksys_write+0x190/0x250 [ 232.703000][T12466] ? __x64_sys_futex+0x34f/0x4d0 [ 232.703021][T12466] ? __x64_sys_futex+0x358/0x4d0 [ 232.703037][T12466] ? fput+0x7c/0x100 [ 232.703052][T12466] ? __pfx___x64_sys_futex+0x10/0x10 [ 232.703068][T12466] ? ksys_write+0x1ac/0x250 [ 232.703084][T12466] ? __x64_sys_bpf+0xce/0x140 [ 232.703096][T12466] __x64_sys_bpf+0xce/0x140 [ 232.703110][T12466] ? do_syscall_64+0xae/0x790 [ 232.703127][T12466] do_syscall_64+0x123/0x790 [ 232.703143][T12466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.703155][T12466] RIP: 0033:0x7f7269d9e1d9 [ 232.703165][T12466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.703176][T12466] RSP: 002b:00007f726abf2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 232.703189][T12466] RAX: ffffffffffffffda RBX: 00007f726a025fa0 RCX: 00007f7269d9e1d9 [ 232.703196][T12466] RDX: 0000000000000028 RSI: 00002000000005c0 RDI: 0000000000000012 [ 232.703204][T12466] RBP: 00007f7269e35888 R08: 0000000000000000 R09: 0000000000000000 [ 232.703212][T12466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.703219][T12466] R13: 00007f726a026038 R14: 00007f726a025fa0 R15: 00007ffed030b598 [ 232.703233][T12466] [ 232.829657][T12472] netlink: 'syz.5.2400': attribute type 2 has an invalid length. [ 232.829676][T12472] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2400'. [ 232.836816][T12472] : entered promiscuous mode [ 232.920240][T12476] netlink: 'syz.5.2402': attribute type 21 has an invalid length. [ 232.959966][T12478] FAULT_INJECTION: forcing a failure. [ 232.959966][T12478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.960004][T12478] CPU: 3 UID: 0 PID: 12478 Comm: syz.5.2403 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.960031][T12478] Tainted: [L]=SOFTLOCKUP [ 232.960038][T12478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.960049][T12478] Call Trace: [ 232.960056][T12478] [ 232.960064][T12478] dump_stack_lvl+0x100/0x190 [ 232.960095][T12478] should_fail_ex.cold+0x5/0xa [ 232.960123][T12478] _copy_from_iter+0x1f4/0x1690 [ 232.960152][T12478] ? __asan_memset+0x23/0x50 [ 232.960176][T12478] ? __pfx__copy_from_iter+0x10/0x10 [ 232.960201][T12478] ? __pfx___alloc_skb+0x10/0x10 [ 232.960241][T12478] netlink_sendmsg+0x808/0xda0 [ 232.960274][T12478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.960304][T12478] ? selinux_socket_sendmsg+0x198/0x2f0 [ 232.960335][T12478] ____sys_sendmsg+0xa4d/0xbe0 [ 232.960358][T12478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.960387][T12478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.960417][T12478] ? lock_acquire+0x1d1/0x380 [ 232.960439][T12478] ? get_pid_task+0x2a/0x250 [ 232.960471][T12478] ___sys_sendmsg+0x190/0x1e0 [ 232.960497][T12478] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.960521][T12478] ? get_pid_task+0x106/0x250 [ 232.960556][T12478] ? find_held_lock+0x2b/0x80 [ 232.960599][T12478] __sys_sendmsg+0x160/0x210 [ 232.960619][T12478] ? __pfx___sys_sendmsg+0x10/0x10 [ 232.960651][T12478] do_syscall_64+0x123/0x790 [ 232.960679][T12478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.960698][T12478] RIP: 0033:0x7f5dc699e1d9 [ 232.960713][T12478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.960730][T12478] RSP: 002b:00007f5dc77d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.960747][T12478] RAX: ffffffffffffffda RBX: 00007f5dc6c25fa0 RCX: 00007f5dc699e1d9 [ 232.960759][T12478] RDX: 00000000000000b0 RSI: 0000200000000580 RDI: 0000000000000003 [ 232.960770][T12478] RBP: 00007f5dc77d0090 R08: 0000000000000000 R09: 0000000000000000 [ 232.960781][T12478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.960792][T12478] R13: 00007f5dc6c26038 R14: 00007f5dc6c25fa0 R15: 00007ffcabacb6a8 [ 232.960818][T12478] [ 232.978835][ T9] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 233.004140][T12480] fuse: Unknown parameter 'fd0x0000000000000004' [ 233.054657][T12484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=12484 comm=syz.5.2406 [ 233.054675][T12484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=12484 comm=syz.5.2406 [ 233.054686][T12484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=12484 comm=syz.5.2406 [ 233.054698][T12484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=12484 comm=syz.5.2406 [ 233.054709][T12484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=12484 comm=syz.5.2406 [ 233.054720][T12484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=12484 comm=syz.5.2406 [ 233.054732][T12484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=12484 comm=syz.5.2406 [ 233.131076][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.131102][ T9] usb 5-1: too many configurations: 13, using maximum allowed: 8 [ 233.131504][ T9] usb 5-1: config 0 has no interfaces? [ 233.131885][ T9] usb 5-1: config 0 has no interfaces? [ 233.132575][ T9] usb 5-1: config 0 has no interfaces? [ 233.132961][ T9] usb 5-1: config 0 has no interfaces? [ 233.133370][ T9] usb 5-1: config 0 has no interfaces? [ 233.133784][ T9] usb 5-1: config 0 has no interfaces? [ 233.134186][ T9] usb 5-1: config 0 has no interfaces? [ 233.134579][ T9] usb 5-1: config 0 has no interfaces? [ 233.136225][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.136237][ T9] usb 5-1: Product: syz [ 233.136246][ T9] usb 5-1: Manufacturer: syz [ 233.136253][ T9] usb 5-1: SerialNumber: syz [ 233.140113][ T9] usb 5-1: config 0 descriptor?? [ 233.167570][T12492] rdma_rxe: rxe_newlink: failed to add dummy0 [ 233.259157][T12498] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 233.271229][ T58] usb 9-1: USB disconnect, device number 23 [ 233.314639][T12502] fuse: Unknown parameter 'fd0x0000000000000004' [ 233.319851][T12501] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.347169][ T5899] usb 5-1: USB disconnect, device number 80 [ 233.358736][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 233.358753][ T43] audit: type=1400 audit(1791816597.516:1990): avc: denied { mount } for pid=12503 comm="syz.5.2416" name="/" dev="hugetlbfs" ino=59500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 233.361931][ T43] audit: type=1400 audit(1791816597.526:1991): avc: denied { mounton } for pid=12503 comm="syz.5.2416" path="/bus" dev="hugetlbfs" ino=59502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 233.366197][T12504] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 233.366217][T12504] overlayfs: failed to set xattr on upper [ 233.366224][T12504] overlayfs: ...falling back to redirect_dir=nofollow. [ 233.366231][T12504] overlayfs: ...falling back to index=off. [ 233.366238][T12504] overlayfs: ...falling back to uuid=null. [ 233.366253][T12504] overlayfs: maximum fs stacking depth exceeded [ 233.391490][T12501] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.447854][T12501] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.495140][T12501] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.560172][T12512] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.587383][T12512] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.609391][ T5804] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.621241][ T5776] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.628779][ T5776] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.628880][ T5776] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.647242][T12512] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.707084][T12512] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.787022][ T5776] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.808811][ T5776] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.819123][ T5776] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.819198][ T5776] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.828745][T12520] fuse: Unknown parameter 'fd0x0000000000000004' [ 233.928848][ T5888] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 233.937589][T12532] netlink: 'syz.1.2429': attribute type 1 has an invalid length. [ 233.993402][T12536] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 234.008949][ T5101] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 234.089063][ T5888] usb 9-1: Using ep0 maxpacket: 16 [ 234.089551][ T5888] usb 9-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 234.090441][ T5888] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 234.090466][ T5888] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 234.090484][ T5888] usb 9-1: config 0 interface 0 has no altsetting 0 [ 234.092060][ T5888] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.092073][ T5888] usb 9-1: Product: syz [ 234.092080][ T5888] usb 9-1: Manufacturer: syz [ 234.092088][ T5888] usb 9-1: SerialNumber: syz [ 234.093766][ T5888] usb 9-1: config 0 descriptor?? [ 234.138855][ T5101] usb 5-1: device descriptor read/64, error -71 [ 234.300904][ T5888] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 234.300976][ T5888] imon 9-1:0.0: unable to initialize intf0, err -90 [ 234.300991][ T5888] imon:imon_probe: failed to initialize context! [ 234.301001][ T5888] imon 9-1:0.0: unable to register, err -19 [ 234.306093][ T5888] usb 9-1: USB disconnect, device number 24 [ 234.378791][ T5101] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 234.518767][ T5101] usb 5-1: device descriptor read/64, error -71 [ 234.539639][T12539] NILFS (nullb0): couldn't find nilfs on the device [ 234.540802][ T43] audit: type=1400 audit(1791816598.706:1992): avc: denied { watch_reads } for pid=12538 comm="syz.1.2432" path="pipe:[56843]" dev="pipefs" ino=56843 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 234.543057][T12539] dns_resolver: Unsupported server list version (0) [ 234.549735][T12541] NILFS (nullb0): couldn't find nilfs on the device [ 234.640546][ T5101] usb usb5-port1: attempt power cycle [ 234.650339][T12546] hid-generic 0003:0627:0001.0001: pid 12546 passed too large report [ 234.758749][ T5819] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 234.919497][ T5819] usb 9-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 234.920298][ T5819] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 234.920314][ T5819] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 234.920325][ T5819] usb 9-1: config 0 interface 0 has no altsetting 0 [ 234.921816][ T5819] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.921828][ T5819] usb 9-1: Product: syz [ 234.921835][ T5819] usb 9-1: Manufacturer: syz [ 234.921843][ T5819] usb 9-1: SerialNumber: syz [ 234.923654][ T5819] usb 9-1: config 0 descriptor?? [ 234.978886][ T5101] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 235.009593][ T5101] usb 5-1: device descriptor read/8, error -71 [ 235.009953][T12561] FAULT_INJECTION: forcing a failure. [ 235.009953][T12561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.009971][T12561] CPU: 2 UID: 0 PID: 12561 Comm: syz.1.2439 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.009999][T12561] Tainted: [L]=SOFTLOCKUP [ 235.010004][T12561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 235.010011][T12561] Call Trace: [ 235.010016][T12561] [ 235.010021][T12561] dump_stack_lvl+0x100/0x190 [ 235.010041][T12561] should_fail_ex.cold+0x5/0xa [ 235.010057][T12561] core_sys_select+0x938/0xbb0 [ 235.010076][T12561] ? __pfx_core_sys_select+0x10/0x10 [ 235.010090][T12561] ? find_held_lock+0x2b/0x80 [ 235.010107][T12561] ? get_pid_task+0xfc/0x250 [ 235.010140][T12561] ? __pfx_set_user_sigmask+0x10/0x10 [ 235.010152][T12561] ? __mutex_unlock_slowpath+0x35d/0x930 [ 235.010171][T12561] do_pselect.constprop.0+0x238/0x270 [ 235.010189][T12561] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 235.010208][T12561] ? ksys_write+0x1ac/0x250 [ 235.010223][T12561] __x64_sys_pselect6+0x149/0x1c0 [ 235.010241][T12561] do_syscall_64+0x123/0x790 [ 235.010258][T12561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.010270][T12561] RIP: 0033:0x7fb646b9e1d9 [ 235.010280][T12561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.010292][T12561] RSP: 002b:00007fb6479fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 235.010303][T12561] RAX: ffffffffffffffda RBX: 00007fb646e25fa0 RCX: 00007fb646b9e1d9 [ 235.010311][T12561] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000040 [ 235.010318][T12561] RBP: 00007fb6479fc090 R08: 0000000000000000 R09: 0000000000000000 [ 235.010324][T12561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.010331][T12561] R13: 00007fb646e26038 R14: 00007fb646e25fa0 R15: 00007ffff7524b88 [ 235.010345][T12561] [ 235.040220][T12564] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 235.126501][ T5819] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 235.126542][ T5819] imon 9-1:0.0: unable to initialize intf0, err -90 [ 235.126550][ T5819] imon:imon_probe: failed to initialize context! [ 235.126556][ T5819] imon 9-1:0.0: unable to register, err -19 [ 235.249338][ T5101] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 235.269532][ T5101] usb 5-1: device descriptor read/8, error -71 [ 235.378916][ T5101] usb usb5-port1: unable to enumerate USB device [ 235.614565][T12567] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.693449][T12567] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.763623][T12567] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.837152][T12567] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.958777][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.968884][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.968939][ T5804] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.978851][ T5776] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.001472][T12573] FAULT_INJECTION: forcing a failure. [ 236.001472][T12573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.001509][T12573] CPU: 3 UID: 0 PID: 12573 Comm: syz.1.2443 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.001533][T12573] Tainted: [L]=SOFTLOCKUP [ 236.001540][T12573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.001549][T12573] Call Trace: [ 236.001553][T12573] [ 236.001559][T12573] dump_stack_lvl+0x100/0x190 [ 236.001610][T12573] should_fail_ex.cold+0x5/0xa [ 236.001634][T12573] _copy_from_user+0x2e/0xd0 [ 236.001656][T12573] copy_msghdr_from_user+0x9f/0x4c0 [ 236.001678][T12573] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 236.001707][T12573] ? lock_acquire+0x1d1/0x380 [ 236.001725][T12573] ? get_pid_task+0x2a/0x250 [ 236.001749][T12573] ___sys_sendmsg+0x106/0x1e0 [ 236.001772][T12573] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.001793][T12573] ? get_pid_task+0x106/0x250 [ 236.001824][T12573] ? find_held_lock+0x2b/0x80 [ 236.001864][T12573] __sys_sendmsg+0x160/0x210 [ 236.001882][T12573] ? __pfx___sys_sendmsg+0x10/0x10 [ 236.001911][T12573] do_syscall_64+0x123/0x790 [ 236.001935][T12573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.001953][T12573] RIP: 0033:0x7fb646b9e1d9 [ 236.001967][T12573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.001983][T12573] RSP: 002b:00007fb6479fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.002000][T12573] RAX: ffffffffffffffda RBX: 00007fb646e25fa0 RCX: 00007fb646b9e1d9 [ 236.002007][T12573] RDX: 00000000000000b0 RSI: 0000200000000580 RDI: 0000000000000003 [ 236.002018][T12573] RBP: 00007fb6479fc090 R08: 0000000000000000 R09: 0000000000000000 [ 236.002028][T12573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.002038][T12573] R13: 00007fb646e26038 R14: 00007fb646e25fa0 R15: 00007ffff7524b88 [ 236.002062][T12573] [ 236.086368][ T43] audit: type=1400 audit(1791816600.246:1993): avc: denied { relabelfrom } for pid=12577 comm="syz.1.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 236.086593][ T43] audit: type=1400 audit(1791816600.246:1994): avc: denied { relabelto } for pid=12577 comm="syz.1.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 236.144182][ T43] audit: type=1400 audit(1791816600.306:1995): avc: denied { write } for pid=12577 comm="syz.1.2445" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 236.144779][T12579] binder: 12577:12579 ioctl c0306201 200000000780 returned -14 [ 236.796116][T12590] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 236.801406][ T66] Bluetooth: hci0: unexpected event for opcode 0x200c [ 237.249395][ T58] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 237.412050][ T5819] usb 9-1: USB disconnect, device number 25 [ 237.412855][ T58] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 237.412892][ T58] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 237.413454][ T58] usb 6-1: config 0 has no interfaces? [ 237.413925][ T58] usb 6-1: config 0 has no interfaces? [ 237.414381][ T58] usb 6-1: config 0 has no interfaces? [ 237.414866][ T58] usb 6-1: config 0 has no interfaces? [ 237.415359][ T58] usb 6-1: config 0 has no interfaces? [ 237.415780][ T58] usb 6-1: config 0 has no interfaces? [ 237.416223][ T58] usb 6-1: config 0 has no interfaces? [ 237.416685][ T58] usb 6-1: config 0 has no interfaces? [ 237.422397][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.422421][ T58] usb 6-1: Product: syz [ 237.422434][ T58] usb 6-1: Manufacturer: syz [ 237.422448][ T58] usb 6-1: SerialNumber: syz [ 237.437808][T12597] device-mapper: table: 248:3: zero-length target [ 237.437817][T12597] device-mapper: ioctl: error adding target to table [ 237.476305][ T58] usb 6-1: config 0 descriptor?? [ 237.682343][ T5875] usb 6-1: USB disconnect, device number 64 [ 237.704603][T12616] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 237.784792][T12621] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2463'. [ 237.865923][ T5888] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 237.958762][ T5819] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 238.029053][ T5888] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 238.108869][ T5819] usb 5-1: Using ep0 maxpacket: 16 [ 238.109419][ T5819] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 238.110291][ T5819] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 238.110307][ T5819] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 238.110319][ T5819] usb 5-1: config 0 interface 0 has no altsetting 0 [ 238.111923][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.111936][ T5819] usb 5-1: Product: syz [ 238.111944][ T5819] usb 5-1: Manufacturer: syz [ 238.111953][ T5819] usb 5-1: SerialNumber: syz [ 238.113359][ T5819] usb 5-1: config 0 descriptor?? [ 238.185023][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2470'. [ 238.185048][T12637] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2470'. [ 238.249241][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 238.319768][ T5819] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 238.319812][ T5819] imon 5-1:0.0: unable to initialize intf0, err -90 [ 238.319820][ T5819] imon:imon_probe: failed to initialize context! [ 238.319827][ T5819] imon 5-1:0.0: unable to register, err -19 [ 238.323989][ T5819] usb 5-1: USB disconnect, device number 85 [ 238.329081][ T5875] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 238.445161][T12649] xt_policy: output policy not valid in PREROUTING and INPUT [ 238.445637][T12649] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2476'. [ 238.478782][ T5875] usb 6-1: device descriptor read/64, error -71 [ 238.486559][T12653] netlink: 'syz.4.2477': attribute type 1 has an invalid length. [ 238.486572][T12653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2477'. [ 238.486728][T12653] 8021q: VLANs not supported on tunl0 [ 238.488607][T12649] openvswitch: netlink: IP tunnel dst address not specified [ 238.518503][T12655] device-mapper: table: 248:3: multipath: not enough path parameters (-EINVAL) [ 238.518519][T12655] device-mapper: ioctl: error adding target to table [ 238.533770][T12657] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 238.548166][T12659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2480'. [ 238.602731][T12663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2482'. [ 238.627979][T12665] netlink: 8752 bytes leftover after parsing attributes in process `syz.4.2483'. [ 238.693495][ T43] audit: type=1400 audit(1791816602.856:1996): avc: denied { connect } for pid=12666 comm="syz.4.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 238.719245][ T5875] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 238.751044][ T43] audit: type=1400 audit(1791816602.916:1997): avc: denied { write } for pid=12668 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.768744][ T5819] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 238.797192][ T43] audit: type=1400 audit(1791816602.956:1998): avc: denied { write } for pid=12672 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.848778][ T5875] usb 6-1: device descriptor read/64, error -71 [ 238.866746][ T43] audit: type=1400 audit(1791816603.026:1999): avc: denied { write } for pid=12674 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.909459][ T43] audit: type=1400 audit(1791816603.076:2000): avc: denied { write } for pid=12677 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.929487][ T5819] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 238.930504][ T5819] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 238.930526][ T5819] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 238.930538][ T5819] usb 5-1: config 0 interface 0 has no altsetting 0 [ 238.932412][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.932426][ T5819] usb 5-1: Product: syz [ 238.932434][ T5819] usb 5-1: Manufacturer: syz [ 238.932442][ T5819] usb 5-1: SerialNumber: syz [ 238.933945][ T5819] usb 5-1: config 0 descriptor?? [ 238.965732][ T5875] usb usb6-port1: attempt power cycle [ 238.997498][ T43] audit: type=1400 audit(1791816603.156:2001): avc: denied { write } for pid=12679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.056692][ T43] audit: type=1400 audit(1791816603.216:2002): avc: denied { write } for pid=12682 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.088303][T12685] FAULT_INJECTION: forcing a failure. [ 239.088303][T12685] name failslab, interval 1, probability 0, space 0, times 0 [ 239.088326][T12685] CPU: 2 UID: 0 PID: 12685 Comm: syz.5.2485 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.088342][T12685] Tainted: [L]=SOFTLOCKUP [ 239.088347][T12685] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.088354][T12685] Call Trace: [ 239.088358][T12685] [ 239.088364][T12685] dump_stack_lvl+0x100/0x190 [ 239.088384][T12685] should_fail_ex.cold+0x5/0xa [ 239.088401][T12685] should_failslab+0xc2/0x120 [ 239.088432][T12685] __kvmalloc_node_noprof+0x113/0x9b0 [ 239.088448][T12685] ? seq_read_iter+0x819/0x1270 [ 239.088467][T12685] seq_read_iter+0x819/0x1270 [ 239.088481][T12685] ? lock_acquire+0x1d1/0x380 [ 239.088495][T12685] ? fdget_pos+0x2aa/0x380 [ 239.088510][T12685] kernfs_fop_read_iter+0x46c/0x610 [ 239.088526][T12685] ? rw_verify_area+0xce/0x6d0 [ 239.088539][T12685] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 239.088555][T12685] vfs_read+0x82e/0xb40 [ 239.088571][T12685] ? __pfx_vfs_read+0x10/0x10 [ 239.088583][T12685] ? find_held_lock+0x2b/0x80 [ 239.088608][T12685] ksys_read+0x12a/0x250 [ 239.088626][T12685] ? __pfx_ksys_read+0x10/0x10 [ 239.088644][T12685] do_syscall_64+0x123/0x790 [ 239.088662][T12685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.088674][T12685] RIP: 0033:0x7f5dc699e1d9 [ 239.088685][T12685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.088695][T12685] RSP: 002b:00007f5dc77d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 239.088707][T12685] RAX: ffffffffffffffda RBX: 00007f5dc6c25fa0 RCX: 00007f5dc699e1d9 [ 239.088714][T12685] RDX: 0000000000000038 RSI: 00002000000001c0 RDI: 0000000000000006 [ 239.088721][T12685] RBP: 00007f5dc77d0090 R08: 0000000000000000 R09: 0000000000000000 [ 239.088727][T12685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.088734][T12685] R13: 00007f5dc6c26038 R14: 00007f5dc6c25fa0 R15: 00007ffcabacb6a8 [ 239.088749][T12685] [ 239.089140][T12685] netlink: 8752 bytes leftover after parsing attributes in process `syz.5.2485'. [ 239.142985][ T5819] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 239.143059][ T5819] imon 5-1:0.0: unable to initialize intf0, err -90 [ 239.143074][ T5819] imon:imon_probe: failed to initialize context! [ 239.143084][ T5819] imon 5-1:0.0: unable to register, err -19 [ 239.155545][ T43] audit: type=1400 audit(1791816603.316:2003): avc: denied { write } for pid=12686 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.159119][T12688] netlink: 8752 bytes leftover after parsing attributes in process `syz.5.2486'. [ 239.230379][ T43] audit: type=1400 audit(1791816603.396:2004): avc: denied { write } for pid=12691 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.256320][ T43] audit: type=1400 audit(1791816603.416:2005): avc: denied { listen } for pid=12693 comm="syz.5.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 239.318934][ T5875] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 239.342628][ T5875] usb 6-1: device descriptor read/8, error -71 [ 239.491847][T12667] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 239.491864][T12667] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 239.544501][T12667] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 239.544516][T12667] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 239.582121][T12667] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 239.582142][T12667] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 239.586626][T12708] sch_fq: defrate 0 ignored. [ 239.598899][ T5875] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 239.611441][ T5875] usb 6-1: device descriptor read/8, error -71 [ 239.632124][T12667] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 239.632138][T12667] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 239.684287][T12716] PKCS7: Unsupported SignerInfo version [ 239.709892][T12722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.719111][ T5875] usb usb6-port1: unable to enumerate USB device [ 240.123386][T12760] openvswitch: netlink: IP tunnel dst address not specified [ 240.127713][T12760] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 240.129688][T12767] openvswitch: netlink: IP tunnel dst address not specified [ 240.162382][T12769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2500'. [ 240.328899][ T9] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 240.479477][ T9] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 240.480651][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.480694][ T9] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 240.480707][ T9] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.481847][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 240.481860][ T9] usb 10-1: Product: syz [ 240.481867][ T9] usb 10-1: Manufacturer: syz [ 240.483726][T12762] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 240.484772][ T9] garmin_gps 10-1:1.0: Garmin GPS usb/tty converter detected [ 240.492969][ T9] usb 10-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 240.539259][ T5876] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 240.688473][ T9] usb 10-1: USB disconnect, device number 17 [ 240.692528][ T5876] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.692565][ T5876] usb 9-1: too many configurations: 13, using maximum allowed: 8 [ 240.693405][ T5876] usb 9-1: config 0 has no interfaces? [ 240.694139][ T5876] usb 9-1: config 0 has no interfaces? [ 240.694674][ T5876] usb 9-1: config 0 has no interfaces? [ 240.695816][ T5876] usb 9-1: config 0 has no interfaces? [ 240.697111][ T5876] usb 9-1: config 0 has no interfaces? [ 240.698035][ T5876] usb 9-1: config 0 has no interfaces? [ 240.698593][ T5876] usb 9-1: config 0 has no interfaces? [ 240.699421][ T5876] usb 9-1: config 0 has no interfaces? [ 240.704686][ T5876] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.704705][ T5876] usb 9-1: Product: syz [ 240.704717][ T5876] usb 9-1: Manufacturer: syz [ 240.704729][ T5876] usb 9-1: SerialNumber: syz [ 240.708978][ T5876] usb 9-1: config 0 descriptor?? [ 240.714112][ T9] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 240.717806][ T9] garmin_gps 10-1:1.0: device disconnected [ 240.913202][ T5885] usb 9-1: USB disconnect, device number 26 [ 241.028732][ T5888] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 241.178780][ T5888] usb 6-1: Using ep0 maxpacket: 16 [ 241.179247][ T5888] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 241.180046][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.180062][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.180074][ T5888] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.180095][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.181561][ T5888] usb 6-1: config 0 descriptor?? [ 241.188087][ T5888] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input90 [ 241.213340][ T5124] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 241.214428][ T5124] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 241.217519][ T5124] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 241.218062][ T5124] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 241.235044][ T5124] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 241.242946][ T5886] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 241.251247][ T5124] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 241.254366][ T5124] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 241.387757][T12796] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 241.388972][ T5875] usb 6-1: USB disconnect, device number 69 [ 241.418533][ T5885] usb 5-1: USB disconnect, device number 86 [ 241.537576][T12804] device-mapper: table: 248:3: multipath: invalid number of feature args (-EINVAL) [ 241.537591][T12804] device-mapper: ioctl: error adding target to table [ 241.579595][ T5888] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 241.719093][ T5888] usb 9-1: device descriptor read/64, error -71 [ 241.925871][T12815] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 241.942711][T12817] xt_hashlimit: max too large, truncated to 1048576 [ 241.942825][T12817] xt_hashlimit: Unknown mode mask 300, kernel too old? [ 241.978849][ T5888] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 242.013781][T12822] program syz.0.2517 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.128865][ T5888] usb 9-1: device descriptor read/64, error -71 [ 242.238794][ T5885] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 242.249079][ T5888] usb usb9-port1: attempt power cycle [ 242.388770][ T5885] usb 6-1: Using ep0 maxpacket: 16 [ 242.389492][ T5885] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 242.390435][ T5885] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 242.390460][ T5885] usb 6-1: config 0 interface 0 has no altsetting 0 [ 242.392220][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.392239][ T5885] usb 6-1: Product: syz [ 242.392253][ T5885] usb 6-1: Manufacturer: syz [ 242.392266][ T5885] usb 6-1: SerialNumber: syz [ 242.394370][ T5885] usb 6-1: config 0 descriptor?? [ 242.588828][ T5888] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 242.600287][ C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 242.603206][ T5885] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input91 [ 242.605480][ T5885] imon:send_packet: packet tx failed (-71) [ 242.609446][ T5888] usb 9-1: device descriptor read/8, error -71 [ 242.628729][ T5885] imon 6-1:0.0: panel buttons/knobs setup failed [ 242.678774][ T5885] rc_core: IR keymap rc-imon-pad not found [ 242.678793][ T5885] Registered IR keymap rc-empty [ 242.678856][ T5885] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 242.678907][ T5885] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 242.679169][ T5885] imon:send_packet: packet tx failed (-71) [ 242.699855][ T5885] imon 6-1:0.0: remote input dev register failed [ 242.699954][ T5885] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 242.707615][ T5885] imon 6-1:0.0: unable to initialize intf0, err 0 [ 242.707634][ T5885] imon:imon_probe: failed to initialize context! [ 242.707644][ T5885] imon 6-1:0.0: unable to register, err -19 [ 242.711257][ T5885] usb 6-1: USB disconnect, device number 70 [ 242.808616][T12834] netlink: 'syz.5.2522': attribute type 21 has an invalid length. [ 242.858847][ T5888] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 242.879582][ T5888] usb 9-1: device descriptor read/8, error -71 [ 242.989048][ T5888] usb usb9-port1: unable to enumerate USB device [ 243.089561][T12838] hid-generic 0003:0627:0001.0001: pid 12838 passed too short report [ 243.128644][T12841] SELinux: security_context_str_to_sid () failed with errno=-22 [ 243.210045][T12846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=12846 comm=syz.0.2526 [ 243.397854][T12858] ip_tables: iptables: counters copy to user failed while replacing table [ 243.413643][T12860] dlm: Unknown command passed to DLM device : 3 [ 243.413643][T12860] [ 243.534575][T12875] openvswitch: netlink: Key 32 has unexpected len 12 expected 2 [ 243.537546][T12873] __nla_validate_parse: 4 callbacks suppressed [ 243.537558][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2539'. [ 243.575344][T12878] FAULT_INJECTION: forcing a failure. [ 243.575344][T12878] name failslab, interval 1, probability 0, space 0, times 0 [ 243.575377][T12878] CPU: 3 UID: 0 PID: 12878 Comm: syz.0.2541 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.575403][T12878] Tainted: [L]=SOFTLOCKUP [ 243.575412][T12878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 243.575425][T12878] Call Trace: [ 243.575433][T12878] [ 243.575449][T12878] dump_stack_lvl+0x100/0x190 [ 243.575483][T12878] should_fail_ex.cold+0x5/0xa [ 243.575513][T12878] should_failslab+0xc2/0x120 [ 243.575563][T12878] __kmalloc_noprof+0xfc/0x840 [ 243.575589][T12878] ? ___neigh_create+0x1532/0x2940 [ 243.575621][T12878] ___neigh_create+0x1532/0x2940 [ 243.575654][T12878] ? neigh_lookup+0x40f/0x6d0 [ 243.575678][T12878] ? __pfx_neigh_lookup+0x10/0x10 [ 243.575701][T12878] ? __pfx____neigh_create+0x10/0x10 [ 243.575731][T12878] ndisc_recv_ns+0x1269/0x1730 [ 243.575761][T12878] ? __pfx_ndisc_recv_ns+0x10/0x10 [ 243.575784][T12878] ? ip6t_do_table+0xbed/0x1c90 [ 243.575803][T12878] ? __local_bh_enable_ip+0xa5/0x120 [ 243.575827][T12878] ? ip6t_do_table+0xc1d/0x1c90 [ 243.575860][T12878] ? skb_checksum+0x7f4/0x950 [ 243.575896][T12878] ndisc_rcv+0x64a/0x7a0 [ 243.575922][T12878] icmpv6_rcv+0x15ac/0x1ae0 [ 243.575945][T12878] ? __pfx_icmpv6_rcv+0x10/0x10 [ 243.575966][T12878] ip6_protocol_deliver_rcu+0x1021/0x15b0 [ 243.576005][T12878] ip6_input_finish+0x1e4/0x4a0 [ 243.576032][T12878] ip6_input+0x105/0x2f0 [ 243.576057][T12878] ip6_mc_input+0x513/0x1050 [ 243.576083][T12878] ? __pfx_ip6_mc_input+0x10/0x10 [ 243.576109][T12878] ? ip6_rcv_finish_core.isra.0+0x113/0x1260 [ 243.576137][T12878] ? __pfx_ip6_mc_input+0x10/0x10 [ 243.576162][T12878] ipv6_rcv+0x34c/0x3d0 [ 243.576187][T12878] ? __pfx_ipv6_rcv+0x10/0x10 [ 243.576208][T12878] __netif_receive_skb_one_core+0x12d/0x1e0 [ 243.576237][T12878] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 243.576267][T12878] ? lock_acquire+0x1d1/0x380 [ 243.576296][T12878] __netif_receive_skb+0x1f/0x120 [ 243.576325][T12878] netif_receive_skb+0x139/0x7d0 [ 243.576353][T12878] ? __pfx_netif_receive_skb+0x10/0x10 [ 243.576390][T12878] tun_rx_batched.isra.0+0x3f6/0x750 [ 243.576422][T12878] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 243.576462][T12878] ? tun_get_user+0x1dc9/0x3da0 [ 243.576497][T12878] tun_get_user+0x1f05/0x3da0 [ 243.576538][T12878] ? __lock_acquire+0x5c0/0x1f40 [ 243.576561][T12878] ? __pfx_tun_get_user+0x10/0x10 [ 243.576590][T12878] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 243.576619][T12878] ? find_held_lock+0x2b/0x80 [ 243.576648][T12878] ? tun_get+0x191/0x370 [ 243.576676][T12878] ? tun_get+0x191/0x370 [ 243.576707][T12878] tun_chr_write_iter+0xdc/0x200 [ 243.576740][T12878] vfs_write+0x6af/0x1050 [ 243.576765][T12878] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 243.576797][T12878] ? __pfx_vfs_write+0x10/0x10 [ 243.576818][T12878] ? find_held_lock+0x2b/0x80 [ 243.576863][T12878] ksys_write+0x12a/0x250 [ 243.576886][T12878] ? __pfx_ksys_write+0x10/0x10 [ 243.576917][T12878] do_syscall_64+0x123/0x790 usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 243.576945][T12878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.576966][T12878] RIP: 0033:0x7f7269d5ea0e [ 243.576982][T12878] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 243.577001][T12878] RSP: 002b:00007f726abf1fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 243.577020][T12878] RAX: ffffffffffffffda RBX: 00007f726abf26c0 RCX: 00007f7269d5ea0e [ 243.577032][T12878] RDX: 0000000000000066 RSI: 00002000000002c0 RDI: 00000000000000c8 [ 243.577045][T12878] RBP: 00007f7269e35888 R08: 0000000000000000 R09: 0000000000000000 [ 243.577057][T12878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.577070][T12878] R13: 00007f726a026038 R14: 00007f726a025fa0 R15: 00007ffed030b598 [ 243.577098][T12878] [ 243.580494][ T5885] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 243.708883][ T35] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 243.728868][ T5885] usb 6-1: Using ep0 maxpacket: 16 [ 243.729482][ T5885] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 243.730522][ T5885] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.730543][ T5885] usb 6-1: config 0 has no interfaces? [ 243.732695][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.732718][ T5885] usb 6-1: Product: syz [ 243.732732][ T5885] usb 6-1: Manufacturer: syz [ 243.732747][ T5885] usb 6-1: SerialNumber: syz [ 243.736198][ T5885] usb 6-1: config 0 descriptor?? [ 243.738386][ T43] kauditd_printk_skb: 29 callbacks suppressed [ 243.738400][ T43] audit: type=1400 audit(1791816607.896:2035): avc: denied { read } for pid=12887 comm="syz.0.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 243.794766][T12889] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2545'. [ 243.803786][ T43] audit: type=1400 audit(1791816607.966:2036): avc: denied { append } for pid=12887 comm="syz.0.2545" name="demux0" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 243.810069][T12889] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2545'. [ 243.879250][ T35] usb 9-1: Using ep0 maxpacket: 16 [ 243.881054][ T35] usb 9-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 243.881898][ T35] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 243.881914][ T35] usb 9-1: config 0 interface 0 has no altsetting 0 [ 243.883570][ T35] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.883582][ T35] usb 9-1: Product: syz [ 243.883589][ T35] usb 9-1: Manufacturer: syz [ 243.883597][ T35] usb 9-1: SerialNumber: syz [ 243.884988][ T35] usb 9-1: config 0 descriptor?? [ 243.941693][ T5885] usb 6-1: USB disconnect, device number 71 [ 244.063889][T12898] ieee802154 phy1 wpan1: encryption failed: -22 [ 244.064755][ T43] audit: type=1400 audit(1791816608.226:2037): avc: denied { read append } for pid=12897 comm="syz.5.2549" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 244.065046][ T43] audit: type=1400 audit(1791816608.226:2038): avc: denied { open } for pid=12897 comm="syz.5.2549" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 244.095772][ C3] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 244.098157][ T35] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input93 [ 244.102812][ T35] imon:send_packet: packet tx failed (-71) [ 244.128864][ T35] imon 9-1:0.0: panel buttons/knobs setup failed [ 244.188735][ T35] rc_core: IR keymap rc-imon-pad not found [ 244.188752][ T35] Registered IR keymap rc-empty [ 244.189376][ T35] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 244.189392][ T35] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 244.189673][ T35] imon:send_packet: packet tx failed (-71) [ 244.212854][ T35] imon 9-1:0.0: remote input dev register failed [ 244.212982][ T35] imon 9-1:0.0: imon_init_intf0: rc device setup failed [ 244.223559][ T35] imon 9-1:0.0: unable to initialize intf0, err 0 [ 244.223576][ T35] imon:imon_probe: failed to initialize context! [ 244.223586][ T35] imon 9-1:0.0: unable to register, err -19 [ 244.226408][ T35] usb 9-1: USB disconnect, device number 31 [ 244.284330][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2551'. [ 244.284351][T12909] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2551'. [ 244.388779][ T5885] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 244.539135][ T5885] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 244.539908][ T5885] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.539922][ T5885] usb 6-1: config 0 has no interfaces? [ 244.541366][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.541380][ T5885] usb 6-1: Product: syz [ 244.541388][ T5885] usb 6-1: Manufacturer: syz [ 244.541396][ T5885] usb 6-1: SerialNumber: syz [ 244.542887][ T5885] usb 6-1: config 0 descriptor?? [ 244.629886][T12916] netlink: 'syz.0.2553': attribute type 1 has an invalid length. [ 244.645759][T12916] bond1: (slave veth0_to_bond): making interface the new active one [ 244.647107][T12916] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 244.655288][T12916] macvlan2: entered promiscuous mode [ 244.655305][T12916] macvlan2: entered allmulticast mode [ 244.655730][T12916] bond1: entered promiscuous mode [ 244.655744][T12916] veth0_to_bond: entered promiscuous mode [ 244.656390][T12916] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 244.656894][T12916] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 244.656937][T12916] bond1: left promiscuous mode [ 244.656944][T12916] veth0_to_bond: left promiscuous mode [ 244.815699][T12921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2555'. [ 244.815734][T12921] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2555'. [ 244.892520][T12925] e1000 0000:00:06.0 eth0: checksum_partial proto=b! [ 244.940545][T12930] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 245.073078][T12938] ipt_REJECT: ECHOREPLY no longer supported. [ 245.192014][T12945] usbip-vudc usbip-vudc.0: gadget not bound [ 245.226067][T12947] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.33554432.63), cmd(3) [ 245.283696][T12949] block device autoloading is deprecated and will be removed. [ 245.368912][ T71] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 245.470507][ T43] audit: type=1400 audit(1791816609.636:2039): avc: denied { checkpoint_restore } for pid=12957 comm="syz.5.2571" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 245.517295][T12964] netlink: 'syz.5.2573': attribute type 2 has an invalid length. [ 245.517309][T12964] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2573'. [ 245.528865][ T71] usb 9-1: Using ep0 maxpacket: 16 [ 245.529631][ T71] usb 9-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 245.530808][ T71] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 245.530834][ T71] usb 9-1: config 0 interface 0 has no altsetting 0 [ 245.532662][ T71] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.532681][ T71] usb 9-1: Product: syz [ 245.532693][ T71] usb 9-1: Manufacturer: syz [ 245.532706][ T71] usb 9-1: SerialNumber: syz [ 245.533449][ T1159] ================================================================== [ 245.533462][ T1159] BUG: KASAN: slab-use-after-free in debug_mutex_unlock+0x124/0x140 [ 245.533493][ T1159] Read of size 8 at addr ffff888036f8d418 by task kworker/u33:7/1159 [ 245.533508][ T1159] [ 245.533519][ T1159] CPU: 3 UID: 0 PID: 1159 Comm: kworker/u33:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.533543][ T1159] Tainted: [L]=SOFTLOCKUP [ 245.533550][ T1159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 245.533562][ T1159] Workqueue: ib_addr process_one_req [ 245.533583][ T1159] Call Trace: [ 245.533589][ T1159] [ 245.533597][ T1159] dump_stack_lvl+0x100/0x190 [ 245.533624][ T1159] print_report+0x13d/0x4b0 [ 245.533651][ T1159] ? __virt_addr_valid+0x239/0x430 [ 245.533672][ T1159] ? debug_mutex_unlock+0x124/0x140 [ 245.533696][ T1159] kasan_report+0xdf/0x1c0 [ 245.533723][ T1159] ? debug_mutex_unlock+0x124/0x140 [ 245.533751][ T1159] debug_mutex_unlock+0x124/0x140 [ 245.533777][ T1159] __mutex_unlock_slowpath+0x195/0x930 [ 245.533804][ T1159] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 245.533827][ T1159] ? __wake_up+0x3f/0x60 [ 245.533844][ T1159] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 245.533870][ T1159] ? ucma_event_handler+0xdd/0x940 [ 245.533891][ T1159] ? rcu_is_watching+0x13/0xc0 [ 245.533923][ T1159] addr_handler+0x12d/0x4c0 [ 245.533944][ T1159] ? __pfx_addr_handler+0x10/0x10 [ 245.533965][ T1159] ? __pfx_addr_resolve+0x10/0x10 [ 245.533986][ T1159] ? reacquire_held_locks+0xdd/0x1f0 [ 245.534010][ T1159] process_one_req+0x127/0x680 [ 245.534029][ T1159] ? __pfx_process_one_req+0x10/0x10 [ 245.534046][ T1159] ? process_one_work+0x906/0x1b10 [ 245.534074][ T1159] process_one_work+0xac7/0x1b10 [ 245.534107][ T1159] ? __pfx_process_one_work+0x10/0x10 [ 245.534133][ T1159] ? lock_acquire+0x1d1/0x380 [ 245.534157][ T1159] ? __pfx_process_one_req+0x10/0x10 [ 245.534176][ T1159] worker_thread+0x5ef/0xe50 [ 245.534196][ T1159] ? kthread+0x13a/0x450 [ 245.534221][ T1159] ? __pfx_worker_thread+0x10/0x10 [ 245.534238][ T1159] kthread+0x373/0x450 [ 245.534261][ T1159] ? __pfx_kthread+0x10/0x10 [ 245.534286][ T1159] ret_from_fork+0x730/0xd60 [ 245.534308][ T1159] ? __pfx_ret_from_fork+0x10/0x10 [ 245.534328][ T1159] ? __switch_to+0x800/0x10f0 [ 245.534354][ T1159] ? __pfx_kthread+0x10/0x10 [ 245.534380][ T1159] ret_from_fork_asm+0x1a/0x30 [ 245.534404][ T1159] [ 245.534411][ T1159] [ 245.534415][ T1159] Allocated by task 12963: [ 245.534423][ T1159] kasan_save_stack+0x30/0x50 [ 245.534445][ T1159] kasan_save_track+0x14/0x30 [ 245.534465][ T1159] __kasan_kmalloc+0xaa/0xb0 [ 245.534485][ T1159] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 245.534503][ T1159] __rdma_create_id+0x5b/0x8f0 [ 245.534517][ T1159] rdma_create_user_id+0x7d/0xe0 [ 245.534532][ T1159] ucma_create_id+0x189/0x380 [ 245.534547][ T1159] ucma_write+0x1fb/0x330 [ 245.534569][ T1159] vfs_write+0x2aa/0x1050 [ 245.534588][ T1159] ksys_write+0x1f8/0x250 [ 245.534606][ T1159] do_syscall_64+0x123/0x790 [ 245.534628][ T1159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.534646][ T1159] [ 245.534650][ T1159] Freed by task 12961: [ 245.534658][ T1159] kasan_save_stack+0x30/0x50 [ 245.534678][ T1159] kasan_save_track+0x14/0x30 [ 245.534698][ T1159] kasan_save_free_info+0x3b/0x70 [ 245.534715][ T1159] __kasan_slab_free+0x5f/0x80 [ 245.534736][ T1159] kfree+0x22b/0x6d0 [ 245.534750][ T1159] ucma_destroy_private_ctx+0xb30/0xe90 [ 245.534766][ T1159] ucma_close+0x1aa/0x240 [ 245.534781][ T1159] __fput+0x400/0xb60 [ 245.534804][ T1159] task_work_run+0x150/0x240 [ 245.534828][ T1159] exit_to_user_mode_loop+0x1d8/0x700 [ 245.534869][ T1159] do_syscall_64+0x661/0x790 [ 245.534892][ T1159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.534909][ T1159] [ 245.534913][ T1159] The buggy address belongs to the object at ffff888036f8d000 [ 245.534913][ T1159] which belongs to the cache kmalloc-2k of size 2048 [ 245.534931][ T1159] The buggy address is located 1048 bytes inside of [ 245.534931][ T1159] freed 2048-byte region [ffff888036f8d000, ffff888036f8d800) [ 245.534948][ T1159] [ 245.534952][ T1159] The buggy address belongs to the physical page: [ 245.534960][ T1159] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888036f8b000 pfn:0x36f88 [ 245.534978][ T1159] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 245.534992][ T1159] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 245.535010][ T1159] page_type: f5(slab) [ 245.535025][ T1159] raw: 00fff00000000240 ffff88801d042f00 ffffea000185b210 ffffea0001458810 [ 245.535041][ T1159] raw: ffff888036f8b000 0000000000080005 00000000f5000000 0000000000000000 [ 245.535068][ T1159] head: 00fff00000000240 ffff88801d042f00 ffffea000185b210 ffffea0001458810 [ 245.535084][ T1159] head: ffff888036f8b000 0000000000080005 00000000f5000000 0000000000000000 [ 245.535099][ T1159] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 245.535113][ T1159] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 245.535122][ T1159] page dumped because: kasan: bad access detected [ 245.535130][ T1159] page_owner tracks the page as allocated [ 245.535137][ T1159] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11623, tgid 11623 (syz-executor), ts 213103372263 [ 245.535166][ T71] usb 9-1: config 0 descriptor?? [ 245.535164][ T1159] post_alloc_hook+0xfd/0x120 [ 245.535181][ T1159] get_page_from_freelist+0x110d/0x35d0 [ 245.535199][ T1159] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 245.535218][ T1159] new_slab+0xa9/0x6e0 [ 245.535234][ T1159] refill_objects+0xe3/0x410 [ 245.535250][ T1159] __pcs_replace_empty_main+0x35e/0x650 [ 245.535268][ T1159] __kmalloc_noprof+0x67c/0x840 [ 245.535287][ T1159] sk_prot_alloc+0x10b/0x2a0 [ 245.535307][ T1159] sk_alloc+0x36/0xe80 [ 245.535329][ T1159] __netlink_create+0x5e/0x2c0 [ 245.535349][ T1159] netlink_create+0x29b/0x610 [ 245.535369][ T1159] __sock_create+0x339/0x860 [ 245.535388][ T1159] __sys_socket+0x14d/0x260 [ 245.535409][ T1159] __x64_sys_socket+0x72/0xb0 [ 245.535429][ T1159] do_syscall_64+0x123/0x790 [ 245.535451][ T1159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.535482][ T1159] page last free pid 11688 tgid 11688 ts 212464219133 stack trace: [ 245.535496][ T1159] __free_frozen_pages+0x79f/0x10f0 [ 245.535522][ T1159] qlist_free_all+0x47/0xf0 [ 245.535541][ T1159] kasan_quarantine_reduce+0x1a0/0x1f0 [ 245.535561][ T1159] __kasan_slab_alloc+0x69/0x90 [ 245.535583][ T1159] kmem_cache_alloc_noprof+0x269/0x6a0 [ 245.535603][ T1159] taskstats_exit+0x6d3/0xca0 [ 245.535622][ T1159] do_exit+0x65c/0x2a50 [ 245.535642][ T1159] do_group_exit+0xd5/0x2a0 [ 245.535663][ T1159] __x64_sys_exit_group+0x3e/0x50 [ 245.535683][ T1159] x64_sys_call+0x1567/0x1570 [ 245.535702][ T1159] do_syscall_64+0x123/0x790 [ 245.535724][ T1159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.535742][ T1159] [ 245.535746][ T1159] Memory state around the buggy address: [ 245.535755][ T1159] ffff888036f8d300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 245.535767][ T1159] ffff888036f8d380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 245.535780][ T1159] >ffff888036f8d400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 245.535789][ T1159] ^ [ 245.535798][ T1159] ffff888036f8d480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 245.535810][ T1159] ffff888036f8d500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 245.535820][ T1159] ================================================================== [ 245.535829][ T1159] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 245.834156][ T1159] CPU: 3 UID: 0 PID: 1159 Comm: kworker/u33:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.837588][ T1159] Tainted: [L]=SOFTLOCKUP [ 245.838960][ T1159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 245.842075][ T1159] Workqueue: ib_addr process_one_req [ 245.843755][ T1159] Call Trace: [ 245.844821][ T1159] [ 245.845770][ T1159] dump_stack_lvl+0x100/0x190 [ 245.847271][ T1159] vpanic+0x553/0x970 [ 245.848540][ T1159] ? __pfx_vpanic+0x10/0x10 [ 245.849922][ T1159] ? __pfx_vprintk_emit+0x10/0x10 [ 245.851519][ T1159] ? debug_mutex_unlock+0x124/0x140 [ 245.853084][ T1159] panic+0xd1/0xe0 [ 245.854260][ T1159] ? __pfx_panic+0x10/0x10 [ 245.855677][ T1159] ? end_report.part.0+0x23/0x90 [ 245.857205][ T1159] ? rcu_is_watching+0x13/0xc0 [ 245.858724][ T1159] ? end_report.part.0+0x23/0x90 [ 245.860308][ T1159] check_panic_on_warn.cold+0x19/0x34 [ 245.861990][ T1159] end_report.part.0+0x3a/0x90 [ 245.863512][ T1159] kasan_report.cold+0xe/0x18 [ 245.865006][ T1159] ? debug_mutex_unlock+0x124/0x140 [ 245.866645][ T1159] debug_mutex_unlock+0x124/0x140 [ 245.868277][ T1159] __mutex_unlock_slowpath+0x195/0x930 [ 245.869993][ T1159] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 245.871844][ T1159] ? __wake_up+0x3f/0x60 [ 245.873189][ T1159] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 245.875080][ T1159] ? ucma_event_handler+0xdd/0x940 [ 245.876703][ T1159] ? rcu_is_watching+0x13/0xc0 [ 245.878225][ T1159] addr_handler+0x12d/0x4c0 [ 245.879674][ T1159] ? __pfx_addr_handler+0x10/0x10 [ 245.881265][ T1159] ? __pfx_addr_resolve+0x10/0x10 [ 245.882864][ T1159] ? reacquire_held_locks+0xdd/0x1f0 [ 245.884535][ T1159] process_one_req+0x127/0x680 [ 245.886051][ T1159] ? __pfx_process_one_req+0x10/0x10 [ 245.887725][ T1159] ? process_one_work+0x906/0x1b10 [ 245.889350][ T1159] process_one_work+0xac7/0x1b10 [ 245.890939][ T1159] ? __pfx_process_one_work+0x10/0x10 [ 245.892625][ T1159] ? lock_acquire+0x1d1/0x380 [ 245.894120][ T1159] ? __pfx_process_one_req+0x10/0x10 [ 245.895786][ T1159] worker_thread+0x5ef/0xe50 [ 245.897274][ T1159] ? kthread+0x13a/0x450 [ 245.898620][ T1159] ? __pfx_worker_thread+0x10/0x10 [ 245.900235][ T1159] kthread+0x373/0x450 [ 245.901530][ T1159] ? __pfx_kthread+0x10/0x10 [ 245.903005][ T1159] ret_from_fork+0x730/0xd60 [ 245.904470][ T1159] ? __pfx_ret_from_fork+0x10/0x10 [ 245.906085][ T1159] ? __switch_to+0x800/0x10f0 [ 245.907603][ T1159] ? __pfx_kthread+0x10/0x10 [ 245.909075][ T1159] ret_from_fork_asm+0x1a/0x30 [ 245.910599][ T1159] [ 245.912165][ T1159] Kernel Offset: disabled [ 245.913538][ T1159] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:50:09 Registers: info registers vcpu 0 CPU#0 RAX=000000000036f11b RBX=ffffffff8fa91580 RCX=ffffffff8bd47235 RDX=0000000000000001 RSI=ffffffff8e3e3486 RDI=ffffffff8c625580 RBP=fffffbfff1f522b0 RSP=ffffffff8fa07cf0 R8 =0000000000000001 R9 =ffffed100d4467bd R10=ffff88806a233deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1f40fa2 R15=dffffc0000000000 RIP=ffffffff8bd4576f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4946000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000540 CR3=000000005ce76000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000014 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5dc775d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcabacbb96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcabacbb96 00007ffcabacbb9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5dc6a35e6b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5dc6a35eab ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5dc6a3600f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5dc6a35e9d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5dc6bf4600 00007f5dc6bf45e0 00007f5dc6bf45e8 00007f5dc6bf4618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500060006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5dc6bf45f8 00007f5dc6bf45c8 00007f5dc6bf4600 00007f5dc6bf45e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffffff8fdec5e0 RCX=ffffffff92f9ba01 RDX=0000000000000000 RSI=ffffffff8e4da1a3 RDI=ffffffff8c625580 RBP=0000000000000001 RSP=ffffc9000ee47230 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=0000000000019ac3 R12=ffff88805e39a580 R13=ffffc9000ee47318 R14=0000000000000202 R15=ffffc9000ee4734c RIP=ffffffff8bd479da RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5dc77d06c0 ffffffff 00c00000 GS =0000 ffff8880d4a46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5dc6989340 CR3=000000005ce76000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff80 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcabacbb96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcabacbb96 00007ffcabacbb9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5dc6a35e6b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5dc6a35eab ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5dc6a3600f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5dc6a35e9d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5dc6bf45f8 00007f5dc6bf45c8 00007f5dc6bf4600 00007f5dc6bf45e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000003 RBX=ffff88806a433de8 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff8c625500 RDI=ffffffff8e6af930 RBP=0000000000000002 RSP=ffffc900058c7390 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff888102a19760 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81eff3de RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555566423500 ffffffff 00c00000 GS =0000 ffff8880d4b46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f726ab556c8 CR3=00000000645e9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 726573755f757063 7265705f65676173 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff7525076 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff7525076 00007ffff752507c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb646c35e6b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb646c35eab ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb646c3600f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb646c35e9d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b2baa5 RDI=ffffffff9cc7e660 RBP=ffffffff9cc7e620 RSP=ffffc900060d7098 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000003a555043 R12=0000000000000000 R13=000000000000005b R14=000000000000000e R15=ffffc900060d73b0 RIP=ffffffff85b2bacf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4c46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7269d87800 CR3=00000000645e9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7379735f65676173 752e746363617570 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed030ba86 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed030ba86 00007ffed030ba8c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7269e35e6b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7269e35eab ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7269e3600f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7269e35e9d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000