last executing test programs: 7.689783417s ago: executing program 0 (id=1044): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f000009f580), 0xffffffffffffffff) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="2d5a8bfaec0503d4ee82255ccc79459d336c02f6846ffa083727a27fef8e41f33ff61428dc81376619b5746876cab40bea6b76e7a18d9f0f45c5f33c3f3e548879927a89cca1b9829ff887d45cae3a0012b8eec038b982c41410eb0cffe4204a0387ae9ad2d2eb6f904feaea4325a355611cfdb7ac6c3495a4bcfa6a2c3285bf50ca4a25c77f383bdb14c2f038ba311fefcbe3d334550fb18a5f462cec0e41bf00e3ef37c78bb0086cbdc72b561eb2e285a15002dbb8b7a858d33bdfef916ce90eca18739db369eb9aa302efdba714da8bbd0baaeb55eb585585542cdfe62755b7dd303c01c44de59f83de2b9edf1e60279b16bc7ee4c277e23701b7d58fdad36e8d91c111be46581f230b4cbbe8b9ad764cd3e067d7b7c5e1082a55c86f7cbc77e049085b2749b2ead86b176e4c8d2498a331f1118c5ed72ab0fc4228c8214e0e48fd1f265ccfd3311eff1f9548d1217c02de43ebc6c896afbf6065592ce3bafbc138524c4ffa429c33265cc8ebfc69e1adf360f97ec2edbab35cdc965dfadfa522a591734e25f91a44023ceeaac091534ec097d7a6f9a8efe84829719e41c101ee103c7b8c6d7fb630da2ffdd692d13e9212539b8484ea7fbccc74ecd6b44e08852505badf79984da7ffd06e78b05b453e89bbeb44fb0e72d527ee63aee52eebf2e4049705c41ead90017d7a512146287226941b20b4a603d1f5d9e6c559d55c5f6de7e9159e121dbbabdcdae8f359f66c218fb24d20c3b56ca3b4a2639b4b54e0775f29c731a3fd33331a76c280df2bea7fb0778648bc55257c42cb1a4ae173a21e33a782943d733e570595aea49f391ced7df117548032f44d611d1fcafe7c08fcca48ef9bb719d41c2cde9eca1727feb7bcc14757316a3fb315eb0adf3b60f5d6cfe231e4dca32f1cd2a74a68e44b1c09471f135d6abf0d7d417a42323923ced88d39902998a177bda4d7ac9e5479f0ae49f5fe51818fa13dd9131d219658ed2de42587f415396aa610998f2b166a053cd272ef751e5447122c03f33800268f63503a237fd62235c65fa995ced4facfc61959a7b64f7ef4bced8cbc10222a18aaee1fcc282163cafc4bf899a7de76ac61499fa1bdf6e6599a9b6e46d202230ee0be421b38ba66b85c7e5cb73e26085f8b62b4141f8728515f12019e1738bc5b278074c56be74033511b21e97a727c8a5f9c186af9777574f52d957082122dcadefe3c376f73a33e41094ad7cd404b50e963a200b57cbf4329e59c5b5a42f8700613e30af94109d5562262792e77df91e7e75c40080f8ca071449bc999762d483c30a4eee68e89be2d138a4b64af3c0211c3540227d85801dc16d1bb669a16b243fa98ef40edb5b5fe05c50f8702434c4d2663e874aec996463c6d946fd1391096b02198e88f5e568300d6c4848b4fe7273af633cc6fbf6a5e37feea56cfc20a0b42a5c6266c805823bac41f8d4eb43c6c4673a4b6a8dd303fe922ade7af649cb21c2919390a9ee62a08131ea21840adc9cc023e2aab908ea6bf2d41e52918ed6423677933cd1729cfda6423e540aae3f043a1296b6eb9350d38e07abed7d1ea7249b1b67d17322050d01589c9787f4e5a904c5cfb25e047f3e46de5222121c2af122bd3a3b2b0f35ea0a81d3a862d77217e992cc74f678617223cad5ba21afdc58e6af17e7b4ee3a506f34069d2931ac62d47f86f1983d7204a32544ae0b738cd5ab3efb940ad752ebbb59cd28d98cd6e0441f020ab2d68cbe90fa44be7f7191c2f5748c418dde668ee87d579baed4358b5c47e03a89ddb98fd4209fda85a277460ca20cc6de67c0f35e39d3fcfc070530140f648b50dbd3236d8e5b5e63be12191cd67b9ef128440d8794dc452b5a16f250c9e378d52b1132efc4b1ec8a7a3fd04ef82154de056ee5054fb15dff8df06bdca1dc8b1c1d4175c967445105954d10f0fc94acf39b68105d188593584333312eb6fad6371cdbbbf16e88bed86600d9dac851661dd3cc64f9bac0b2b81ad2564274b5bcc040f065f3fc055f7e254f8954304140782b9a2390bb61fd82d7a99ddf96468f3ef43113b767552969d71190265b76c1358c4e16a21ff959631a19c6f5a686b7884d75aca2810decbfd9fe0520f3b322a80838a2e633e1c2a79df01786f605750b84e2b04b7204ca6022973fca4ab0c8c67caee2349a6b839aa6bebc862f2f8246fc293e0f14a375581036becf081e4fd6b0cc2f7465fe7f932890884794215838558c0ae6de81efd624c5290bdf52e95e4d5b1eaf280d76eb0ceddf438bcf1d4b83e8eec3aaacbd7ea0421ac84f08a480ae48edb7c23c3f94dc59a44b3c5712800789fa3b2b938bed137505d2b247a4c4a9bd5ceddb900cb9a502d10dbd620a7ef84fbf49081d52419e5d08ddd5a1873f6d3ea6a822400ffdad29899bfaf73ce3d8ff182b3ca8ef1c39fc34b93767b9a13401427c440edd2e5f801655e60dc4c5b4ba84e504421b758e0b4c743fd1a1b6be27702e751960b431f1d7a7fd68a9ab198a5c6dbbee137283e6d6c69eedba5345e551e4421f3dfc1c957bbf413c48f64871521789487707278c69eb71c33a6999d7e497dc3d7d022f008addc112c116637f6d29c9247de134eb860cd3e5af369ee474883e7a20c40ba02160ec19dcb717cd3f4f3f0293195242fa814042ad751c774728a797a8c483e0562a2cca698053c1b66c0310affdb6e5767ab6db583ac415119f1760bed5f405c5cfb63b2ccfd5dc9d119fc82a86f98551d92f02410fdddd450f0a661ce041fa39aaba50cda470d3080dec7345a54abe2a7630a7fac84bf95c30a0dff1225f7b1aebb41daec68ceff2b0f502e7433f395aeea75c1ba88229b44fa5c6fa2647e44db139eca1f2b7142b6c23d4879603bb5617e94de0d5353d1b17dfb960eb1c11c67d0d1e1cae94699cc9397b79150dacbbc7361261d5445f237210d2ab8120fe721072394b77df46894595b8fd56f034318e90e3cad94f1655911b9bcc0bd15c628c0248e134295f3ff69cf8ea536b4b7a6c11b4e04955f9f1d9bac2ad39d81ec929b0d29999ae5a865bcc2cffc8fb42af6e486ca12a4c83461c6a72b3c88e4f3d1a9c1f13adc6defbf0110746e39b1d01a5129f996a2af48bc52f06a32764d8d8dd984c5dc4e8bca0ffbbc7e4cd226cc278b35ed16bed6e8aca4a1c18120eef0966dd5327f252462477d43cbd1497654ddd3358d24883d9ddde40f1bc8c5610370841b1cb13e84162cc6d0818987350c22362b12c0f315dbc5dbc33c224bf8d57410f2621b9c45d6857b0bed5aae750db0dd4c6cf50bfd6d5e0c816a9d8951402a1c50ad8169fd94427b42c58399c6d72b1f213e009af4f650e5ef67d2f48c7dc3ef74a8ee453ab84118f2f0e4ff2b8130169ccac37198b337205cae506e8d70acba86aab28caa8117b1231d9c4b631fa3aeceb3c236182e25299392f1ed986106071097314a9b9bd0f30d853e8b4044c00f04b45b2923b572a6a41cb5293cc8dfdbeff56a1375a33bac7b220056a6f6a292035b17a3c3fd55897548c68ad7886ef432cef353da3da8deaea09df078569c042258dfc0763d54be89302b11a6d24f4086028b82520fb6d967b78b611a7e9661a92b1a8f12d407d2289e85a82bd0b7c742055acd2396ba8d101e91ce2e9f387e909fe6da3109e1937b1e12515f23c8f1b739d4c40a287cae3bf59e901fff2ba0de0a36a304428e9febe42a01dea2eacae9416a72ddabb98d2e69c70ea9edfc57cd81fc4217ec353caf01a1a61b925102f866b4090b6447cfd8eeff2a3a49e30fe0a4fff77fe1a225dbdb2fac338526c7438631b69ead8781b86801f530b04b1544be2c22aff4ac89b0ce4353526905e59e18f7f01c221e42354a5269e0e28afa29f38bcab3923fe8d64fbf81433991b0bb9df6fc4c28ba175871d87bb5ce6cf5bf4572bb873c044f0aeb2981e34a005df55d354db0353f6433f76adde2c124793a1da43aca0e62a744992ed8efa8571a26857aa65a21cfc3507471ab75525cedb559c430b5d03a5c4e923f7fbec50d0eb10fc40b3d7986245f4c6888a53df7fe7fdcc11261e70d8cca04baff938f8446bd9048baba31085f20746c5f0e00d816dca934804ea2877cca51b5c0e31dfeefb9e91e41189d67412a09af16b4cb709e6fee71b2766a71c8397578516b656633bb620dfc8bc15de4ea5f75f6845ea44805442125adef9377e98b5d8e73f3a0bfbd330467daf10d9f7a95cd6fd4827fa1b062898fa454437bf185b9e0d98c9d10a5db80364bca446205739b23a1e7e860647ed30e2b72524da94a5f70dcbcd67d8df08f0d57583011d5487669c5a45905125186590322dbe481e820a6a6c29c136fa4301ade06baddca45f0d5ce913b5b763d293da4afaa450b17ff4933e4478fbba9ad9e6e5eafe9fdeb82b7d65bc92f6690d03a49923810558b5e0f5bf47e7d000a5e132217c174445565d57d29f02e71d7205b8ec10330fea51d972fc5c81b1b36775816082f979b5b1fe3601c9c8e8fa0c3504bfa30e3603d5a0f3a7cbd27d744b27cdbf318acbed70697519605453df106123e1a6148c9146154986e288d8a70b6fed1667cc1e0b199067c704a6d41ba751b53102ebca01b3ce90226847808646c95f3eb231b6af0b0f329bd997db5a4d3ff18edf0203e351fcfa8c8ae2be6953472bbb3f40bb6ab3f8f2128d11a3bba133f0204e2e0df189cc8d2cb8af81d0941a37c2165112ed452008930bcc607fa6fe3ad1def902d89c7330e6042f6f86c3a75665ec603b6e392b417a0d907d42e6534db72adbad4266c6601d7b8bf8d9cde807088f76b07c06840d0806eb89aa545292284bf050e732e547ed54417b3ec7e7a7c5e8454a56f5092ea8cb27e74e0672c2951647e29dadbdea86d2a4d9e53ab01c9d21e902fc9c6ff4c317b3c0398561364e880e2b079d79a27d6dcc3d586abc043477981bd36746f5570840536bef104a158e2461296717d247b6004565ffb8eb9bb5258c65032f0b472c4f3667a17e3ff65b45c91e2411b5990f054e0c2a05fc175d2db7fb32ca32e4c11b46f08bae1614e2add96133ab383c1e78f4e3f21ed3010a35c76ad88714b526d3a5ba799e6f7bf9d5696e7b42c8c264162a28831baaef180f40489ad681af6c0a674cc7b65e8b8ab704d15546f70ed1e67f7643bbc8d0b8482024b8f320b5bdccb1014f5e1a34c6c795428660f026d93dd5dcabf2330dc62894bfe48fde6b931ba55dc2a222a27a3906ba5b98476321b6d27217fd58ad93b616aac91b139729d91de6f8ef49402e2741b8dd821f4ac782b255dc438164e54c417044e9bf5e13a8247777726dacea4341d8ba03bad17070dd0f07da13179d29ac00aefa41aaf4688e99eb395205f6d6d71999b3718f7f2d618117334977a92b15ed52e45e7d5df7a22be9cf0e008c41257d99b2426068c48de100b8e3019b624ce2f2849c35b74fe5ecc4478b2968a97cfcb759fc73c8cd21bda084646dadee926a4f606768749a89e11be2a23985631c922a73ba93f3619dcc4621c8da57697420859210aa43ec06feb649b9f1362fe9553f9d552b77203085d9a4da629f03fbf339bd8ccae6c411f6d8f131232575d28af2a2690529080f02a5a74fe59d1255039f09b8d565a4838930f88d6129389f2312a2ebcf0fe7d8b6dea3484cea9a1628349218b8ccefdea2b6c37676acc2a082fb73b19705e98079c1de7776cb830e79c0081a2da4059714f19587d10223fc50ea8434f1c7919a77acd7c5b20ac9fe8ad9d348e2c5bdb57fac1ec0c31a1688e22aab4f1a81826f3a47bd364505d35975c105a152aa8e42b2422a100ad3d3184d286884552143051b79294aba34bfc5cc332f0b6aa3bf186776ceb8861336ed97b85b9a7d548bf7b7a907256c7c6a2427d92aff68ba18544b95a75564029387fd2569943f8d54e64cc621123105eb56bcfaea06e38af31a05ef38302d2b6178121d52309865c5ec1147159c07b4d4e1ece24f6a1f63a492c617870c96dcabf43b73055d749e465cdbb965b18091eee65bd423f249d934ae904c2129b93d116353fe014e1afbcab5f74766a806451855bc28494653b9a863b9707c2a0fce3eb4b55c4220078651a94d3b9c6e92f4995dd56ec17d144b07bfb1b951b33d73a60f6b96cddbda0962b2a609e6bca56a109847bc13798be711d3779d5a8c6541bd247fe3b7477a1378cdafece044db3f31810bc95f8fb4ae7a8815303faac03651a13924308c06c8e86506b7d186a717a1bda1d7cdea2b8b682d37f954f488a8e0d65f868a81b1af4b8f7331ba84414a7ada82e81e06e76ddfa0aca0ca9a53a5de0bcdcbb77284bab522ffb6f803e95f116ac1670c50acd36d80f170e8e7e05163f050dc89dd93bf9160a545174472376e1fcbb945e9294f796a09ca78452683b8bd39049d118acc24ef0dc18ef88899dd7c27a3585e914e6f6bc8bb1950c061c722134243cf151785bc19dada45b90d97cb83bc60885a908d0c13be9e54f1929fe1f76fb9886808caf0442aca4539a42078bfee82418d611f4c432fcbc5242c35a396c17c1b93b98b277a9c8ef0143643e120c0de4b7c6beb0a582789b81a9d3a0b8f96a332c89764283d84ec5e6b8350683a2b4eebcb214a7ad430ff9ebcfc1d850717a8d38b8e35e67fea4b8f14938cc3eeacbee30616c09e848ebae3cefb8f2a904f2b3d1252019ec914278942d9b914f95574031cf21f412aa7500f3955db7b9ef9403750058d75e53d16803d4463f7884df1e361d34ce646e20b3427a45cd307283f1ff00cca6c841fb9b06543bf1a254b21ff421331facb2f08a484904ea25e049597c8b0a2140e8ed2906d574e73165ec5591c89b5dc08e5943ff7399f76b1df90947a9479b1aab40abf8ebadfa1455b6dcac672f495a64b6230fd3fe948ce6c16cb87e11ac7affc9047ef33fa64585c1dce3bab4fecc0c7d81b5ea73aed3ef63fafc880b6e2ba09d0df6d626e817075d5f330d91cec4bcf4829c20192bc0ef7f728f52dd3e074bafda4f8cd8465311a9124baad61bd73ca76a0d0d1b80cb7a5e429067ed4707b64d38613008c8af3ffcedfeb8cda26def8bef7cf947af23939d18adbf56715f90c2df716eb037d536cd36bc2b832c57f4a319f392e1ab37e02dfb392bd52b02801665c8ea28edfcb153f267dcfbd671d4eaa0d56335f7ce5eccda6b9f74621a1b322f1f3a60b00196a65327b36419394e776b2e1c1479f5f902c5918adfa5b112bfaf786eeea1abae7c8c9d3e3fe737c23092143376808b5e26cf896fb5202572533facacaac10ec26cab819f74cd372c95d50a9b6560da69c1b22d5c15759b7ab1d8118e672bea9af7e8a30458ccaa1586ed2720d5465e139fe3dfc0bc95107061471cdf28a42aa8149848a147a1710407021d13e611b36ad3624de35c4dc5a02ba8ae724b2d8cd85f15094e1893c98052cee135d0c1c11a73297775fb517abbb471a8b100cb51d8815acac16703b56f8aadae334601a84fc306efa08aeb2afbad94632b5f209603cf5e5ca634bd74ed2e525580ddd2f2ee65241788f5e867b44d7ecd71f5858d269ffda98d93860d8f1c26c47df1199f95991b54808bc26c0ab67b40745b8dfed41838e2c5594413d2c6022abe3c1f132e9f7c8c69e50729325d37e7502519d53d7e1bf0bc8f62d216fc9c88b197cfa1571ce8368cc1b4b625559cab7e8397c60e000000c8b9d604f4bdb04cab86d349e4a33f92eaa07378eac07ed8d51aea9c15ef4c4b0e0a16f9c794701a1b74b58beb15cc165a4dc1a13a0886f55cba2b977447b61c01e1295a4221e19321201f1df0d25c9e14bc4433678e48a5081de7c81f79a6370843bf0d6e3e5192c1ddc0bad14a11ada8006e4f6549da3a877a991351610eb0c5bb6228d266baa27eab2b9bf4455fc54aed3c74c12590835e498c11efdc63dde52a62d8f3a3c978152018182b3e4cbd00fff317d06f8e9475b4c7506dcc5547d8ace2b71024aa0e2220936d2bd05163b8f15bc429378fec52ac39d167200758884056dc14d3329b1d47f477a217eabb651fa97e05451cd6e861996648ab439c9aa6fa032e9083b8c0f87890c88c50dd5a6e6be8c4a4361f3b4c3181c570407dd1d2d835a87dd4b24f55a649c3e478bc002f30894d06411dc4dd8277f796976b8b2884ed371013225bbd95955827741331777da30b1b3370fb4d0bb914d97660f7e06759ba54b5697a4f7cfb67035867f39e53306eb55b31ba660769ce6993b2f44a7173576766ed20992d04e6b4aff20c138102537a142ceeac3804fb0a4eaddeddb6bcc69007c5531f0ba6851854d8d836a51e8d644c7b79e071f19986090d2404b562a17e1ec1da775c171373bcf5d2c3d7dd64a587d66e42b6963d892df898766648f37c8d10ca249e28368c388f4e70a80b2992a0a390a2d51a17a0c1774fec2d399a2b0a99c802012fff6300c4275d1305b9a9d0f8144df64da9016f16369e813dafc7cff55c5a60602141fcaa62d9fc0b93df6524d8692be3c7ded5354b63014686e98ef2b5947eda93e0cd232d3fdea943d3bc92a6f2835c55aca33dcd087b7260bc68def6ce96ef5d536b61006a595219382d8b8365eb92eab44e677109971bc4dfd077a56ff1f27e9b80edffb5ecac7bde5dc2a74c30a24b9cd1b0d4356ec424350e364d0dc929d657a8626a22111d4a0f360fe33be72a1f2c4f5c1b9843145ddff70d583a9b433cab33b10d93531aab7bb8a53c738aae79222481b135eca9441f47068299deabdc9c4f77e5d4ea286e8300eb5956368d0499691dbab1499baef30bb6c4a9bb0159635dc1774203fda828bf804e8f526ffb55abd8700915232964b7f219a7bb221efa6428089263ab753eb421a1952bc780289a85ebb9b510dec67a826ccce1cdfbb29a3a55f4e1068ca2c077544efac686d77c67c927430c3ac78c7c8b1f834be9a689fdab38f1401797dba32a284f5c5f9ed13d34d8a001cfeeeb7de12aaeae7706004f96a293e52106fd945428e7e98915070b1584a323bd8f00b9803ce189c9c0af032752d979df57a5098458c7de034db79f43d27bcb720078b05e5f364f2d789343fb6fc8b2cab810b1745fa36aaccf5d27fc7f06ab821268d83e697870632814319533373f24584b35b2ba9dd9b52a4a2e559c90b1b87549530a64fdbba5587242535fd0d600fa6e8497369a5587627182c62da4a47bc6ea99f7aaa765e3b74b7d9c48e779c8b13a2535d03ef8ac4bf3fc9e6eda5628034e7e453fbd6153b8b8e9f693c5dfa37f6a0a2542e6f86ebd2ae926822d7b31963c8879557dfa2a869ba3c5dc2dfcb60bc0a0c9816c2c4c58bdc09c2d76a007e68c38fd8b88709e5c49341630e333e13413c3e60c0d768d4c98bcb297e819ceb0f8b229d3037ac95639344bf42ee7f77922a6ac039837356dfd7c0ba3c5393548369bd71b4824326eaeb80a9c249504a08bfc164af220047cdf054d928a8d929a2fb621665122062dbd5cdde82b8289e0d510246e0bc30d34d8e96703f75c75328f99437be474315d8cb55066badbc0ee852c8ef28e1de7f5b58dda97742db5f708c6be3279d700ba147f1519485020336c260d825920870739fdb288f22b980fb7bcbf147b1a95fcc3d8d1899749d928eea8d47cccc1fbbdd5729a3f2f73d2ae352eb3e043405bcb7fa12b2a80d6a3f0178a18cbc5794fd65f0caddaff57616dfed94884a48b27b181c55200d9ecdfbb082dcd2952089938e134eecb40c2f95cb7808fc7da09282787edb1939e75bc8e284c01239a895246be025c8e0168ae83f5adc62f4f81ddbf6ba9b5fce3ddd111eb61c42777a8c303abe291aa9ef383ef1d6c26c4f8698375cc76a7e078ac948f2e84de084fdb380d38d2e1810ce8118999554c06f8d583bd37003b407dd7b41a3b14f10a5ae7c2e8fdd087cc322ddc399fe38cc542bc957b38b0fda34a3ee5c6a97d25629d26a75de211fe1cc4ca63880caa8f85f3bd489c39cf30eac81784e4456a775dee3045df2a1875623a4fbf227cf90cd237721a6dff29d26a16306e4033cc644e35cba3cc4e45cfd0cefc9c8d8a0f35bf31a8319b54fb549554c7089b9334a9867d51d71aae1f342d5602ef2d394e6c8a8aa6c15121d8c8b3abe3416367dcc276c048c65311ad70df0ecf0cf817a1a27e1dc50fedea83de8a8bb7746e23be2f335c9cda9a7f08d72b9debc35d49e9ec4c9815040c38c11375dd7f2897b20479343b86b51c317e0e90f9465d8c425857e1831931714284c60f68036134304558e53d2d42813a42a3017ab21feab6132f3a2f8c5670a1076dab6136cd6836b52d7ee54639758085438831dcd8157ccae47784a35364babff9299e4eaa389931199b4901f12185a0d228473d4a147d88e55bd11f8ed2957b7f2f3efb3e444f0aec9bef1f68cffbdac04698cc277706f2ffdd263586b84c645f1721ee3008b398918fdfb9b06b98078447c0edd7c058524825a1124e9af37fa9cb77302aded60eca394c866397c3bc18f8277d9277921abd06b61b1445f43cd7f0b5b2c023832f6d67f86d9b6ff9985edee1ec2572486b43d3be834d5b60d208b1187ca7cc8b17133f55314ee640268d5337d7dcdf1742cb543d63ae3c09e312ac05b5d585d9437bf16bd560ef739f12c878178757e1f675a8671becae2bf03f87de4bc40b4b7a3aa6e2f28f015332b10b9fe426ebd45d7a26e769bb05eb2866bb34c56b079a5bd23352bcb08c379b400512b0d8438ee5371171ccbf2921c1e150fffb5885286f933f4393088ba21c47b15d1a35de27dbd02e58859aa080f87d0a857e92d0f52c549c04cd9368c94a8024e184773cb3431d854c2855e93ac9f24d5e45d11c2acfb03755e7f279b368e2e31b3653a7d7e2e102ac67f363c195272e2896bec544f669f2d25ae8638ac30da6ed52404b32b8ee9f0f2909ef6b4e2db3a6ea88b8a6f2f2c025959efb7b94005eb307aae01af8a19ee6178270be09d93837793b43bcdab98b9c04b6bfea7ac2217c11aeec277bc199b67ac24b7352299e7fec85aa151029d14441b56bb6031cdc72a1a90ef537c6d2bce7ffc7c366a88f8bc87cd8ef4e91b5ad9d85ed84f9b85f029252ad5ff13d564d842ef310feaba90974e40889e7cb753eb44ef96bc4c25b021fe50e9957a9c3cc9904aa920fc8a8e82a826b945559b57591fa1a26c380afe65d930f9bd9a3d93f57324d28c2741e728cbd106dccdf66863e49db8a0df1398ba8594fa5102b8157e4b987f4339820df5a7aa2b1c47ed0211437ee3d81dcbffa500dc4b743d49028581234c7e9db2e951d5bf3e3c448ce58bf94a2f7ef95eda07daae00bef1794d27330927b2460778fdee580efe431ee244aae452cd60100b6c9f0cd5e79e170a7b149abfcc26b77d33c35311c95e3ba0752eabce3d1310a8aa45ecd1659e4e855919d153ebeb434581a6d352508771b030acd3fee51badf6767a7931bbba2cf195bd98fd096a6be14d7172cf1dbe3a82bae73a29223c623c090cbc5fffe8f329100", 0x2000, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x58000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 6.580039503s ago: executing program 3 (id=1050): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = socket(0x15, 0x5, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 6.219278221s ago: executing program 2 (id=1052): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendto(r0, &(0x7f00000006c0)='<', 0x1, 0x4000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000e00)=[{&(0x7f0000000dc0)='?', 0x1}], 0x1) recvfrom(r0, &(0x7f0000001040)=""/230, 0xe6, 0x10000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 6.202991194s ago: executing program 0 (id=1053): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000005c0)=[{&(0x7f0000000880)=""/139, 0x8b}], 0x1, 0x86a, 0x0, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000c80)={&(0x7f0000000a00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a80)=""/115, 0x73}, {&(0x7f0000000b00)=""/52, 0x34}, {&(0x7f0000000b40)=""/115, 0x73}], 0x3, &(0x7f0000000c00)=""/85, 0x55}, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) 5.766851236s ago: executing program 2 (id=1054): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r0, 0x0, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendto(r0, &(0x7f00000006c0)='<', 0x1, 0x4000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000e00)=[{&(0x7f0000000dc0)='?', 0x1}], 0x1) recvfrom(r0, &(0x7f0000001040)=""/230, 0xe6, 0x10000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 5.699393377s ago: executing program 1 (id=1055): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendto(r0, &(0x7f00000006c0)='<', 0x1, 0x4000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000e00)=[{&(0x7f0000000dc0)='?', 0x1}], 0x1) recvfrom(r0, &(0x7f0000001040)=""/230, 0xe6, 0x10000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 4.402798861s ago: executing program 0 (id=1056): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x80186803, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 4.396703446s ago: executing program 1 (id=1057): syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) 4.393307723s ago: executing program 2 (id=1058): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) add_key(0x0, &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./trace\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./trace/current_tracer\x00', 0x1, 0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, 0x0, 0x4001) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) close(r0) 3.609126595s ago: executing program 3 (id=1059): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x122) fcntl$notify(r2, 0x402, 0x8000003d) mknod(0x0, 0x8001420, 0x0) open$dir(0x0, 0x1, 0x27) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0x8, 0x0, 0x180, 0x0, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffa, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.280319297s ago: executing program 1 (id=1060): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000005c0)=[{&(0x7f0000000880)=""/139, 0x8b}], 0x1, 0x86a, 0x0, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000c80)={&(0x7f0000000a00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a80)=""/115, 0x73}, {&(0x7f0000000b00)=""/52, 0x34}, {&(0x7f0000000b40)=""/115, 0x73}], 0x3, &(0x7f0000000c00)=""/85, 0x55}, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) 3.227446804s ago: executing program 3 (id=1061): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000005c0)=[{&(0x7f0000000880)=""/139, 0x8b}], 0x1, 0x86a, 0x0, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000c80)={&(0x7f0000000a00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a80)=""/115, 0x73}, {&(0x7f0000000b00)=""/52, 0x34}, {&(0x7f0000000b40)=""/115, 0x73}], 0x3, &(0x7f0000000c00)=""/85, 0x55}, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) 2.679636096s ago: executing program 0 (id=1062): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000440)={0x20071026}, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, &(0x7f00000007c0)) write$rfkill(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x1, 0x0) r2 = syz_open_dev$video(&(0x7f0000000800), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000840)={0x1, 0x2, 0x2}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000880)=0x2) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f00000008c0)={0x1}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40010) shutdown(r1, 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)) dup(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 2.673500916s ago: executing program 2 (id=1063): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$video(0x0, 0xa7, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) symlinkat(0x0, 0xffffffffffffff9c, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x18e) close(0xffffffffffffffff) r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000280)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000364000/0x1000)=nil, 0x400000, 0x2, 0x2}) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) open_tree(r1, &(0x7f0000000080)='./proc/net/afs/rootcell\x00', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r2, 0x0, 0x0) 2.365292841s ago: executing program 0 (id=1064): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000005c0)=[{&(0x7f0000000880)=""/139, 0x8b}], 0x1, 0x86a, 0x0, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000c80)={&(0x7f0000000a00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a80)=""/115, 0x73}, {&(0x7f0000000b00)=""/52, 0x34}, {&(0x7f0000000b40)=""/115, 0x73}], 0x3, &(0x7f0000000c00)=""/85, 0x55}, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) 2.27891975s ago: executing program 2 (id=1065): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendto(r0, &(0x7f00000006c0)='<', 0x1, 0x4000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000e00)=[{&(0x7f0000000dc0)='?', 0x1}], 0x1) recvfrom(r0, &(0x7f0000001040)=""/230, 0xe6, 0x10000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1.928031741s ago: executing program 1 (id=1066): socket(0x15, 0x5, 0x0) getsockopt(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=""/84, &(0x7f0000000440)=0x54) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/uts\x00') r0 = socket$packet(0x11, 0x3, 0x300) fcntl$setstatus(r0, 0x4, 0x40400) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000480), 0x4) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6c}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x200, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev, 0x0, 0x32}, 0x0, @in6=@private2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000}}, 0xe4) connect$pppl2tp(r2, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x5, @mcast2, 0x17fff}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000ffffff06000000140008"], 0x34}}, 0x0) 1.927695755s ago: executing program 3 (id=1067): mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./proc\x00', 0x1df) mount(0x0, 0x0, 0x0, 0x202001, 0x0) mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000c00)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./proc\x00', 0x0, 0x0) read(r0, &(0x7f0000000c80), 0xfa0) syz_clone3(&(0x7f0000000cc0)={0x4284000, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000d40), 0x0, {r0}}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000d80)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000dc0)='./config\x00', &(0x7f0000000e00)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e40)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x87) write(r1, &(0x7f0000000f00)='Mid', 0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='myproc\x00', 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001080)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000001140)='dummy_udc.0', 0xb) 1.848464403s ago: executing program 2 (id=1068): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xa2, &(0x7f0000000140)=""/186, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000001000/0x4000)=nil) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000006c0), 0x2000005, r3}, 0x38) 1.674325073s ago: executing program 1 (id=1069): syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) 762.041052ms ago: executing program 3 (id=1070): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{0x0}], 0x1}, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendto(r0, &(0x7f00000006c0)='<', 0x1, 0x4000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000e00)=[{&(0x7f0000000dc0)='?', 0x1}], 0x1) recvfrom(r0, &(0x7f0000001040)=""/230, 0xe6, 0x10000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 694.987132ms ago: executing program 1 (id=1071): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x80186803, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 398.621662ms ago: executing program 3 (id=1072): syz_ublk_setup_io_uring(0x4a10, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001d6000/0x1000)=nil, 0x1000, 0x17) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, 0x0, 0x0) mkdir(0x0, 0x81) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xffff, 0x0, 0x113, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = syz_open_dev$radio(0x0, 0x2, 0x2) readv(r1, 0x0, 0x0) readv(r1, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/rfkill/rfkill0/soft\x00', 0x1, 0x0) write(r2, &(0x7f00000005c0)='1', 0x1) 0s ago: executing program 0 (id=1073): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) futex_waitv(&(0x7f0000000000)=[{0x7fff, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x9657b55f7dd6eeac) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) syz_clone3(0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) recvfrom(r0, &(0x7f00000032c0)=""/4074, 0xfea, 0x40010021, 0x0, 0x0) kernel console output (not intermixed with test programs): 8] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.869499][ T7361] profile_transition: unconfined exec no attachment [ 134.907188][ T7362] profile_transition: unconfined exec no attachment [ 134.962453][ T7363] FAULT_INJECTION: forcing a failure. [ 134.962453][ T7363] name failslab, interval 1, probability 0, space 0, times 0 [ 134.962484][ T7363] CPU: 2 UID: 0 PID: 7363 Comm: syz.2.435 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.962508][ T7363] Tainted: [L]=SOFTLOCKUP [ 134.962514][ T7363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.962524][ T7363] Call Trace: [ 134.962531][ T7363] [ 134.962538][ T7363] dump_stack_lvl+0x100/0x190 [ 134.962573][ T7363] should_fail_ex.cold+0x5/0xa [ 134.962602][ T7363] should_failslab+0xc2/0x120 [ 134.962624][ T7363] __kvmalloc_node_noprof+0x113/0x9b0 [ 134.962641][ T7363] ? __kmalloc_cache_noprof+0x241/0x6d0 [ 134.962667][ T7363] ? percpu_ref_init+0xec/0x3f0 [ 134.962688][ T7363] ? io_alloc_cache_init+0x38/0x170 [ 134.962713][ T7363] io_alloc_cache_init+0x38/0x170 [ 134.962735][ T7363] io_uring_setup.cold+0x4aa/0x1c0e [ 134.962757][ T7363] ? find_held_lock+0x2b/0x80 [ 134.962784][ T7363] ? __pfx_io_uring_setup+0x10/0x10 [ 134.962813][ T7363] ? __lock_acquire+0x5c0/0x1f40 [ 134.962849][ T7363] ? find_held_lock+0x2b/0x80 [ 134.962870][ T7363] ? __might_fault+0xc5/0x140 [ 134.962888][ T7363] ? __might_fault+0xc5/0x140 [ 134.962913][ T7363] __ia32_sys_io_uring_setup+0xc2/0x170 [ 134.962940][ T7363] __do_fast_syscall_32+0x14b/0x8c0 [ 134.962969][ T7363] do_fast_syscall_32+0x32/0x70 [ 134.962994][ T7363] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.963016][ T7363] RIP: 0023:0xf7ff7fbc [ 134.963031][ T7363] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 134.963047][ T7363] RSP: 002b:00000000f54854bc EFLAGS: 00000282 ORIG_RAX: 00000000000001a9 [ 134.963065][ T7363] RAX: ffffffffffffffda RBX: 0000000000007042 RCX: 0000000080000e00 [ 134.963077][ T7363] RDX: 00000000f7211997 RSI: 0000000000000001 RDI: 00000000f548553c [ 134.963090][ T7363] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 134.963101][ T7363] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 134.963112][ T7363] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 134.963135][ T7363] [ 135.035550][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.435'. [ 135.087589][ T7359] bridge1: entered promiscuous mode [ 135.087620][ T7359] bridge1: entered allmulticast mode [ 135.267323][ T3306] sony 0005:054C:03D5.0005: UNIQ does not contain a MAC address; duplicate check skipped [ 135.281106][ T3306] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.0005/input/input10 [ 135.294770][ T3306] sony 0005:054C:03D5.0005: input,hidraw1: BLUETOOTH HID v0.00 Joystick [syz0] on syz0 [ 135.306914][ T7375] profile_transition: unconfined exec no attachment [ 135.334643][ T6629] udevd[6629]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 135.339918][ T7375] fido_id[7375]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 135.452962][ T7379] profile_transition: unconfined exec no attachment [ 135.886459][ T7387] fuse: Bad value for 'fd' [ 136.207156][ T7389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.572445][ T7396] process 'syz.3.446' launched '/dev/fd/3' with NULL argv: empty string added [ 136.572634][ T7396] profile_transition: name lookup ix on error [ 136.743638][ T7398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.768823][ T7398] bond0: (slave ip6gretap1): making interface the new active one [ 136.769752][ T7398] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 136.913623][ T7401] FAULT_INJECTION: forcing a failure. [ 136.913623][ T7401] name failslab, interval 1, probability 0, space 0, times 0 [ 136.913647][ T7401] CPU: 1 UID: 0 PID: 7401 Comm: syz.0.447 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.913664][ T7401] Tainted: [L]=SOFTLOCKUP [ 136.913668][ T7401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.913673][ T7401] Call Trace: [ 136.913677][ T7401] [ 136.913681][ T7401] dump_stack_lvl+0x100/0x190 [ 136.913701][ T7401] should_fail_ex.cold+0x5/0xa [ 136.913717][ T7401] should_failslab+0xc2/0x120 [ 136.913730][ T7401] __kvmalloc_node_noprof+0x113/0x9b0 [ 136.913740][ T7401] ? __kmalloc_cache_noprof+0x241/0x6d0 [ 136.913755][ T7401] ? percpu_ref_init+0xec/0x3f0 [ 136.913767][ T7401] ? io_alloc_cache_init+0x38/0x170 [ 136.913781][ T7401] io_alloc_cache_init+0x38/0x170 [ 136.913827][ T7401] io_uring_setup.cold+0x4aa/0x1c0e [ 136.913840][ T7401] ? find_held_lock+0x2b/0x80 [ 136.913855][ T7401] ? __pfx_io_uring_setup+0x10/0x10 [ 136.913872][ T7401] ? __lock_acquire+0x5c0/0x1f40 [ 136.913890][ T7401] ? find_held_lock+0x2b/0x80 [ 136.913917][ T7401] ? __might_fault+0xc5/0x140 [ 136.913930][ T7401] ? __might_fault+0xc5/0x140 [ 136.913945][ T7401] __ia32_sys_io_uring_setup+0xc2/0x170 [ 136.913960][ T7401] __do_fast_syscall_32+0x14b/0x8c0 [ 136.913977][ T7401] do_fast_syscall_32+0x32/0x70 [ 136.913991][ T7401] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.914004][ T7401] RIP: 0023:0xf748efbc [ 136.914013][ T7401] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 136.914023][ T7401] RSP: 002b:00000000f54a64bc EFLAGS: 00000282 ORIG_RAX: 00000000000001a9 [ 136.914034][ T7401] RAX: ffffffffffffffda RBX: 0000000000007042 RCX: 0000000080000e00 [ 136.914044][ T7401] RDX: 00000000f7211997 RSI: 0000000000000001 RDI: 00000000f54a653c [ 136.914050][ T7401] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.914055][ T7401] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 136.914064][ T7401] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.914078][ T7401] [ 136.927030][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'. [ 136.967657][ T7398] bond0: (slave vlan2): the slave hw address is in use by the bond; giving it the hw address of ip6gretap1 [ 137.061121][ T7401] bridge1: entered promiscuous mode [ 137.061135][ T7401] bridge1: entered allmulticast mode [ 137.236952][ T7410] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 137.259574][ T7410] pci 0000:00:00.0: Adding to iommu group 0 [ 137.270881][ T7410] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 137.288070][ T7410] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 137.288174][ T7410] pci 0000:00:01.0: BAR 2 [mem 0xfeaf6000-0xfeaf6fff] [ 137.288356][ T7410] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 137.288978][ T7410] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 137.305645][ T7410] pci 0000:00:01.0: Adding to iommu group 1 [ 137.313378][ T7410] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 137.313391][ T7410] pci 0000:00:01.0: vgaarb: bridge control possible [ 137.313398][ T7410] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 137.331250][ T7410] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 137.338480][ T7410] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 137.348704][ T7410] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 137.359442][ T7410] [drm] Found bochs VGA, ID 0xb0c5. [ 137.359455][ T7410] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 137.391814][ T7410] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 137.529737][ T7410] Console: switching to colour frame buffer device 160x50 [ 137.555713][ T7410] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 138.081309][ T7421] binfmt_misc: register: failed to install interpreter ./file0 [ 138.140370][ T7426] syzkaller0: entered promiscuous mode [ 138.140383][ T7426] syzkaller0: entered allmulticast mode [ 138.143143][ T7426] 0: reclassify loop, rule prio 0, protocol 700 [ 138.266557][ T7430] FAULT_INJECTION: forcing a failure. [ 138.266557][ T7430] name failslab, interval 1, probability 0, space 0, times 0 [ 138.266590][ T7430] CPU: 1 UID: 0 PID: 7430 Comm: syz.1.459 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.266617][ T7430] Tainted: [L]=SOFTLOCKUP [ 138.266624][ T7430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.266636][ T7430] Call Trace: [ 138.266642][ T7430] [ 138.266650][ T7430] dump_stack_lvl+0x100/0x190 [ 138.266773][ T7430] should_fail_ex.cold+0x5/0xa [ 138.266811][ T7430] should_failslab+0xc2/0x120 [ 138.266866][ T7430] __kvmalloc_node_noprof+0x113/0x9b0 [ 138.266884][ T7430] ? __kmalloc_cache_noprof+0x241/0x6d0 [ 138.266910][ T7430] ? percpu_ref_init+0xec/0x3f0 [ 138.266931][ T7430] ? io_alloc_cache_init+0x38/0x170 [ 138.266956][ T7430] io_alloc_cache_init+0x38/0x170 [ 138.266979][ T7430] io_uring_setup.cold+0x4aa/0x1c0e [ 138.267000][ T7430] ? find_held_lock+0x2b/0x80 [ 138.267039][ T7430] ? __pfx_io_uring_setup+0x10/0x10 [ 138.267070][ T7430] ? __lock_acquire+0x5c0/0x1f40 [ 138.267103][ T7430] ? find_held_lock+0x2b/0x80 [ 138.267127][ T7430] ? __might_fault+0xc5/0x140 [ 138.267148][ T7430] ? __might_fault+0xc5/0x140 [ 138.267175][ T7430] __ia32_sys_io_uring_setup+0xc2/0x170 [ 138.267203][ T7430] __do_fast_syscall_32+0x14b/0x8c0 [ 138.267257][ T7430] do_fast_syscall_32+0x32/0x70 [ 138.267283][ T7430] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 138.267307][ T7430] RIP: 0023:0xf748efbc [ 138.267322][ T7430] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 138.267339][ T7430] RSP: 002b:00000000f54a64bc EFLAGS: 00000282 ORIG_RAX: 00000000000001a9 [ 138.267377][ T7430] RAX: ffffffffffffffda RBX: 0000000000007042 RCX: 0000000080000e00 [ 138.267390][ T7430] RDX: 00000000f7211997 RSI: 0000000000000001 RDI: 00000000f54a653c [ 138.267417][ T7430] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 138.267428][ T7430] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 138.267440][ T7430] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 138.267465][ T7430] [ 138.311020][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.459'. [ 138.356671][ T7430] bridge1: entered promiscuous mode [ 138.356849][ T7430] bridge1: entered allmulticast mode [ 138.600263][ T7443] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.600278][ T7443] nci: nci_start_poll: failed to set local general bytes [ 140.543336][ T7459] syzkaller0: entered promiscuous mode [ 140.543359][ T7459] syzkaller0: entered allmulticast mode [ 140.567917][ T7459] tipc: Enabled bearer , priority 0 [ 140.570839][ T7457] tipc: Resetting bearer [ 140.642581][ T7457] tipc: Disabling bearer [ 141.014053][ T5855] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 141.184813][ T5855] usb 8-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 141.185923][ T5855] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.185977][ T5855] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.193624][ T5855] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 141.219087][ T5855] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 141.219138][ T5855] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 141.221119][ T5855] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 141.221174][ T5855] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 141.222755][ T5855] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 141.239489][ T5855] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 141.239548][ T5855] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 141.240764][ T5855] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 141.406903][ T7434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 141.591629][ T7473] fuse: Bad value for 'fd' [ 143.841599][ T62] usb 8-1: USB disconnect, device number 3 [ 143.846759][ T62] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 143.849293][ T62] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 143.849830][ T62] keyspan 8-1:1.0: device disconnected [ 144.796724][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.473'. [ 146.051670][ T7502] syzkaller0: entered promiscuous mode [ 146.051684][ T7502] syzkaller0: entered allmulticast mode [ 146.053243][ T7502] tipc: Started in network mode [ 146.053257][ T7502] tipc: Node identity a2021dafde09, cluster identity 4711 [ 146.053391][ T7502] tipc: Enabled bearer , priority 0 [ 146.062662][ T7502] tipc: Resetting bearer [ 146.065410][ T7501] tipc: Resetting bearer [ 146.077506][ T7501] tipc: Disabling bearer [ 146.094702][ T7504] rxe_eth0 speed is unknown, defaulting to 1000 [ 146.206478][ T7503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.621489][ T7536] profile_transition: 1 callbacks suppressed [ 147.621508][ T7536] profile_transition: unconfined exec no attachment [ 147.647511][ T7537] profile_transition: unconfined exec no attachment [ 148.055680][ T7523] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 148.055977][ T7523] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 148.056982][ T7523] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 148.059365][ T7523] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 148.158223][ T42] kauditd_printk_skb: 160 callbacks suppressed [ 148.158240][ T42] audit: type=1326 audit(1793805596.784:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7547 comm="syz.1.497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 148.158444][ T42] audit: type=1326 audit(1793805596.784:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7547 comm="syz.1.497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 148.160097][ T42] audit: type=1326 audit(1793805596.784:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7547 comm="syz.1.497" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 148.160137][ T42] audit: type=1326 audit(1793805596.784:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7547 comm="syz.1.497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 148.160173][ T42] audit: type=1326 audit(1793805596.784:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7547 comm="syz.1.497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 148.162940][ T42] audit: type=1326 audit(1793805596.784:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7547 comm="syz.1.497" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 148.162983][ T42] audit: type=1326 audit(1793805596.784:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7547 comm="syz.1.497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 148.163020][ T42] audit: type=1326 audit(1793805596.784:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7547 comm="syz.1.497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 148.167986][ T42] audit: type=1326 audit(1793805596.794:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7547 comm="syz.1.497" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 148.168168][ T42] audit: type=1326 audit(1793805596.794:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7547 comm="syz.1.497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 148.469483][ T7562] profile_transition: unconfined exec no attachment [ 148.725056][ T5855] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 148.877585][ T5855] usb 8-1: Using ep0 maxpacket: 32 [ 148.879207][ T5855] usb 8-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 148.891687][ T5855] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 148.891702][ T5855] usb 8-1: config 0 has no interface number 0 [ 148.891719][ T5855] usb 8-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 148.891729][ T5855] usb 8-1: config 0 interface 1 has no altsetting 0 [ 148.896077][ T5855] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.896099][ T5855] usb 8-1: Product: syz [ 148.896112][ T5855] usb 8-1: Manufacturer: syz [ 148.896123][ T5855] usb 8-1: SerialNumber: syz [ 148.897682][ T5855] usb 8-1: config 0 descriptor?? [ 149.273214][ T7574] profile_transition: unconfined exec no attachment [ 149.289780][ T7577] profile_transition: unconfined exec no attachment [ 149.454738][ T7583] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 149.462402][ T7583] pci 0000:00:00.0: Adding to iommu group 0 [ 150.115992][ T7576] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 150.117361][ T7576] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 150.117471][ T7576] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 150.435229][ T7555] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 150.441994][ T5855] cx231xx 8-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 150.442018][ T5855] cx231xx 8-1:0.1: Not found matching IAD interface [ 150.446894][ T5855] usb 8-1: USB disconnect, device number 4 [ 150.449550][ T5794] udevd[5794]: setting mode of /dev/bus/usb/008/004 to 020664 failed: No such file or directory [ 150.449653][ T5794] udevd[5794]: setting owner of /dev/bus/usb/008/004 to uid=0, gid=0 failed: No such file or directory [ 151.404419][ T5799] Bluetooth: hci1: command 0x0c1a tx timeout [ 152.204604][ T5799] Bluetooth: hci3: command 0x0c1a tx timeout [ 152.204626][ T5791] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.786357][ T42] kauditd_printk_skb: 31 callbacks suppressed [ 153.786373][ T42] audit: type=1326 audit(1793805602.414:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7635 comm="syz.0.525" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 153.786414][ T42] audit: type=1326 audit(1793805602.414:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7635 comm="syz.0.525" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 153.787144][ T42] audit: type=1326 audit(1793805602.414:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7635 comm="syz.0.525" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 153.789876][ T42] audit: type=1326 audit(1793805602.414:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7635 comm="syz.0.525" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 153.827715][ T42] audit: type=1326 audit(1793805602.464:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7635 comm="syz.0.525" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 153.827756][ T42] audit: type=1326 audit(1793805602.464:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7635 comm="syz.0.525" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 153.827787][ T42] audit: type=1326 audit(1793805602.464:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7635 comm="syz.0.525" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 153.828653][ T42] audit: type=1326 audit(1793805602.464:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7635 comm="syz.0.525" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 153.829211][ T42] audit: type=1326 audit(1793805602.464:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7635 comm="syz.0.525" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 153.829565][ T42] audit: type=1326 audit(1793805602.464:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7635 comm="syz.0.525" exe="/syz-executor" sig=0 arch=40000003 syscall=238 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 154.128983][ T7645] device-mapper: table: 248:2: snapshot: COW device cannot be the same as origin device (-EINVAL) [ 154.129260][ T7645] device-mapper: ioctl: error adding target to table [ 154.298452][ T7648] netlink: 16 bytes leftover after parsing attributes in process `syz.2.519'. [ 155.185170][ T7651] xt_l2tp: missing protocol rule (udp|l2tpip) [ 156.220527][ T7674] capability: warning: `syz.3.526' uses deprecated v2 capabilities in a way that may be insecure [ 156.245278][ T7674] FAULT_INJECTION: forcing a failure. [ 156.245278][ T7674] name failslab, interval 1, probability 0, space 0, times 0 [ 156.245298][ T7674] CPU: 0 UID: 0 PID: 7674 Comm: syz.3.526 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.245324][ T7674] Tainted: [L]=SOFTLOCKUP [ 156.245330][ T7674] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.245336][ T7674] Call Trace: [ 156.245340][ T7674] [ 156.245344][ T7674] dump_stack_lvl+0x100/0x190 [ 156.245365][ T7674] should_fail_ex.cold+0x5/0xa [ 156.245380][ T7674] should_failslab+0xc2/0x120 [ 156.245394][ T7674] kmem_cache_alloc_noprof+0x92/0x6a0 [ 156.245410][ T7674] ? __pfx_acct_collect+0x10/0x10 [ 156.245422][ T7674] ? taskstats_exit+0x6dc/0xcb0 [ 156.245438][ T7674] taskstats_exit+0x6dc/0xcb0 [ 156.245450][ T7674] ? find_held_lock+0x2b/0x80 [ 156.245465][ T7674] ? __pfx_taskstats_exit+0x10/0x10 [ 156.245478][ T7674] ? rcu_is_watching+0x13/0xc0 [ 156.245492][ T7674] ? _raw_spin_unlock_irq+0x23/0x50 [ 156.245504][ T7674] ? lockdep_hardirqs_on+0x7d/0x110 [ 156.245519][ T7674] do_exit+0x62d/0x2a00 [ 156.245531][ T7674] ? __pfx_futex_wake_mark+0x10/0x10 [ 156.245544][ T7674] ? __pfx_do_exit+0x10/0x10 [ 156.245556][ T7674] ? do_raw_spin_lock+0x128/0x260 [ 156.245569][ T7674] ? find_held_lock+0x2b/0x80 [ 156.245583][ T7674] ? get_signal+0xa28/0x22e0 [ 156.245595][ T7674] do_group_exit+0xd5/0x2a0 [ 156.245609][ T7674] get_signal+0x1f58/0x22e0 [ 156.245618][ T7674] ? __pfx_futex_wait+0x10/0x10 [ 156.245632][ T7674] ? kmem_cache_free+0x127/0x6c0 [ 156.245647][ T7674] ? __pfx_get_signal+0x10/0x10 [ 156.245658][ T7674] ? do_futex+0x190/0x440 [ 156.245675][ T7674] arch_do_signal_or_restart+0x91/0x7a0 [ 156.245712][ T7674] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 156.245738][ T7674] exit_to_user_mode_loop+0x139/0x700 [ 156.245753][ T7674] ? rcu_is_watching+0x13/0xc0 [ 156.245769][ T7674] __do_fast_syscall_32+0x5b0/0x8c0 [ 156.245784][ T7674] do_fast_syscall_32+0x32/0x70 [ 156.245798][ T7674] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 156.245812][ T7674] RIP: 0023:0xf743efbc [ 156.245821][ T7674] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 156.245831][ T7674] RSP: 002b:00000000f54565bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 156.245842][ T7674] RAX: fffffffffffffe00 RBX: 00000000f7464f88 RCX: 0000000000000080 [ 156.245848][ T7674] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7464f8c [ 156.245854][ T7674] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 156.245860][ T7674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.245866][ T7674] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 156.245880][ T7674] [ 157.228310][ T7687] profile_transition: unconfined exec no attachment [ 158.362967][ T7718] syz.1.537: attempt to access beyond end of device [ 158.362967][ T7718] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 158.363014][ T7718] gfs2: error -5 reading superblock [ 159.295938][ T7737] fuse: Bad value for 'fd' [ 159.341736][ T7739] syzkaller0: entered promiscuous mode [ 159.341758][ T7739] syzkaller0: entered allmulticast mode [ 159.351051][ T7739] tipc: Enabled bearer , priority 0 [ 159.353666][ T7739] tipc: Resetting bearer [ 159.360824][ T7738] tipc: Resetting bearer [ 159.370999][ T7738] tipc: Disabling bearer [ 159.781725][ T7745] loop0: detected capacity change from 0 to 4096 [ 159.850748][ T7745] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 159.851594][ T7745] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 159.852596][ T7745] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 159.852605][ T7745] ldm_validate_privheads(): Cannot find PRIVHEAD 3. [ 159.852949][ T7745] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 159.852960][ T7745] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 159.852968][ T7745] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 159.852976][ T7745] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 159.852983][ T7745] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 159.853007][ T7745] loop0: [ 159.892443][ T42] kauditd_printk_skb: 59 callbacks suppressed [ 159.892454][ T42] audit: type=1326 audit(1793805608.514:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7750 comm="syz.0.552" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 159.892489][ T42] audit: type=1326 audit(1793805608.514:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7750 comm="syz.0.552" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 159.892510][ T42] audit: type=1326 audit(1793805608.514:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7750 comm="syz.0.552" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 159.892530][ T42] audit: type=1326 audit(1793805608.514:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7750 comm="syz.0.552" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 159.892551][ T42] audit: type=1326 audit(1793805608.514:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7750 comm="syz.0.552" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 159.892571][ T42] audit: type=1326 audit(1793805608.514:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7750 comm="syz.0.552" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 159.892591][ T42] audit: type=1326 audit(1793805608.514:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7750 comm="syz.0.552" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 159.892611][ T42] audit: type=1326 audit(1793805608.514:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7750 comm="syz.0.552" exe="/syz-executor" sig=0 arch=40000003 syscall=238 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 159.892639][ T42] audit: type=1326 audit(1793805608.514:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7750 comm="syz.0.552" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 159.892701][ T42] audit: type=1326 audit(1793805608.514:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7750 comm="syz.0.552" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 160.014047][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 160.174856][ T9] usb 6-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 160.178244][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 160.178275][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.399864][ T9] qmi_wwan 6-1:1.0: cdc-wdm0: USB WDM device [ 160.415939][ T9] wwan wwan0: port wwan0qmi0 attached [ 160.609901][ T9] qmi_wwan 6-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 6a:5f:8d:9b:68:85 [ 160.630574][ T7753] profile_transition: unconfined exec no attachment [ 160.650902][ T7754] profile_transition: unconfined exec no attachment [ 160.681427][ T7756] profile_transition: unconfined exec no attachment [ 160.712182][ T7757] profile_transition: unconfined exec no attachment [ 160.748966][ T7758] profile_transition: unconfined exec no attachment [ 160.800655][ T7759] profile_transition: unconfined exec no attachment [ 160.823280][ T6779] usb 6-1: USB disconnect, device number 5 [ 160.829372][ T6779] qmi_wwan 6-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 160.836858][ T7744] capability: warning: `syz.1.550' uses 32-bit capabilities (legacy support in use) [ 160.881513][ T7760] profile_transition: unconfined exec no attachment [ 160.901100][ T7761] profile_transition: unconfined exec no attachment [ 160.937915][ T7763] profile_transition: unconfined exec no attachment [ 160.950948][ T6779] wwan wwan0: port wwan0qmi0 disconnected [ 162.458126][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 162.654006][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 162.656176][ T9] usb 7-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 162.661486][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 162.661529][ T9] usb 7-1: config 0 has no interface number 0 [ 162.661646][ T9] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 162.661717][ T9] usb 7-1: config 0 interface 1 has no altsetting 0 [ 162.669359][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.669400][ T9] usb 7-1: Product: syz [ 162.669408][ T9] usb 7-1: Manufacturer: syz [ 162.669443][ T9] usb 7-1: SerialNumber: syz [ 162.862552][ T9] usb 7-1: config 0 descriptor?? [ 163.389552][ T9] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 163.389610][ T9] cx231xx 7-1:0.1: Not found matching IAD interface [ 163.507802][ T9] usb 7-1: USB disconnect, device number 5 [ 163.779954][ T7798] netlink: 'syz.1.559': attribute type 4 has an invalid length. [ 163.779969][ T7798] netlink: 17 bytes leftover after parsing attributes in process `syz.1.559'. [ 163.780481][ T7798] FAULT_INJECTION: forcing a failure. [ 163.780481][ T7798] name failslab, interval 1, probability 0, space 0, times 0 [ 163.780497][ T7798] CPU: 0 UID: 0 PID: 7798 Comm: syz.1.559 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.780511][ T7798] Tainted: [L]=SOFTLOCKUP [ 163.780515][ T7798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.780521][ T7798] Call Trace: [ 163.780525][ T7798] [ 163.780529][ T7798] dump_stack_lvl+0x100/0x190 [ 163.780550][ T7798] should_fail_ex.cold+0x5/0xa [ 163.780567][ T7798] should_failslab+0xc2/0x120 [ 163.780581][ T7798] kmem_cache_alloc_noprof+0x92/0x6a0 [ 163.780599][ T7798] ? fib_insert_alias+0x43e/0xe30 [ 163.780656][ T7798] fib_insert_alias+0x43e/0xe30 [ 163.780668][ T7798] ? lockdep_rtnl_is_held+0x26/0x40 [ 163.780685][ T7798] ? fib_find_node+0x209/0x280 [ 163.780697][ T7798] fib_trie_unmerge+0x2af/0xc00 [ 163.780714][ T7798] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 163.780731][ T7798] ? lock_acquire+0x1d1/0x380 [ 163.780745][ T7798] fib_unmerge+0xee/0x510 [ 163.780757][ T7798] ? fib_nl2rule_locked+0x3ef/0x740 [ 163.780773][ T7798] fib4_rule_configure+0xaba/0x1160 [ 163.780789][ T7798] ? fib_nl2rule_locked+0x3fe/0x740 [ 163.780803][ T7798] fib_newrule+0x3c3/0x1e50 [ 163.780820][ T7798] ? __pfx_fib_newrule+0x10/0x10 [ 163.780848][ T7798] ? kfree_skbmem+0x19a/0x210 [ 163.780859][ T7798] ? kmem_cache_free+0xa0/0x6c0 [ 163.780873][ T7798] ? skb_release_data+0x69d/0x860 [ 163.780898][ T7798] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 163.780909][ T7798] ? find_held_lock+0x2b/0x80 [ 163.780923][ T7798] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 163.780934][ T7798] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 163.780947][ T7798] ? __pfx_fib_nl_newrule+0x10/0x10 [ 163.780961][ T7798] rtnetlink_rcv_msg+0x95e/0xe90 [ 163.780975][ T7798] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 163.780994][ T7798] netlink_rcv_skb+0x159/0x420 [ 163.781010][ T7798] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 163.781021][ T7798] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 163.781042][ T7798] ? netlink_deliver_tap+0x1ae/0xb50 [ 163.781059][ T7798] netlink_unicast+0x668/0x950 [ 163.781076][ T7798] ? __pfx_netlink_unicast+0x10/0x10 [ 163.781096][ T7798] netlink_sendmsg+0x9ac/0x10c0 [ 163.781114][ T7798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.781133][ T7798] ? apparmor_socket_sendmsg+0x165/0x280 [ 163.781149][ T7798] ? ____sys_sendmsg+0xa99/0xc30 [ 163.781159][ T7798] ____sys_sendmsg+0xa99/0xc30 [ 163.781170][ T7798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.781186][ T7798] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.781212][ T7798] ___sys_sendmsg+0x190/0x1e0 [ 163.781226][ T7798] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.781239][ T7798] ? futex_wait+0x11e/0x370 [ 163.781257][ T7798] ? find_held_lock+0x2b/0x80 [ 163.781282][ T7798] __sys_sendmsg+0x160/0x210 [ 163.781299][ T7798] ? __pfx___sys_sendmsg+0x10/0x10 [ 163.781324][ T7798] __do_fast_syscall_32+0x14b/0x8c0 [ 163.781338][ T7798] ? lockdep_hardirqs_on+0x7d/0x110 [ 163.781353][ T7798] do_fast_syscall_32+0x32/0x70 [ 163.781367][ T7798] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.781381][ T7798] RIP: 0023:0xf748efbc [ 163.781390][ T7798] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 163.781401][ T7798] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 163.781412][ T7798] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001c00 [ 163.781419][ T7798] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.781425][ T7798] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.781430][ T7798] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 163.781436][ T7798] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.781451][ T7798] [ 163.791091][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 163.811176][ T7798] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.812241][ T7798] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.634774][ T3306] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 164.814734][ T3306] usb 7-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 164.815530][ T3306] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 164.815551][ T3306] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.027984][ T3306] qmi_wwan 7-1:1.0: cdc-wdm0: USB WDM device [ 165.032962][ T3306] wwan wwan0: port wwan0qmi0 attached [ 165.197249][ T7832] input: syz0 as /devices/virtual/input/input11 [ 165.241415][ T3306] qmi_wwan 7-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 72:c2:4a:8b:b9:42 [ 165.528207][ T3306] usb 7-1: USB disconnect, device number 6 [ 165.574993][ T3306] qmi_wwan 7-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 165.793751][ T7847] profile_transition: 11 callbacks suppressed [ 165.793767][ T7847] profile_transition: unconfined exec no attachment [ 165.838770][ T3306] wwan wwan0: port wwan0qmi0 disconnected [ 165.840995][ T7849] profile_transition: unconfined exec no attachment [ 165.895346][ T7851] profile_transition: unconfined exec no attachment [ 165.922708][ T7852] profile_transition: unconfined exec no attachment [ 165.973196][ T7855] profile_transition: unconfined exec no attachment [ 166.021783][ T7856] profile_transition: unconfined exec no attachment [ 166.069737][ T7859] profile_transition: unconfined exec no attachment [ 166.110969][ T7860] profile_transition: unconfined exec no attachment [ 166.137384][ T7861] profile_transition: unconfined exec no attachment [ 169.231653][ T7891] xt_l2tp: missing protocol rule (udp|l2tpip) [ 169.699848][ T7894] comedi comedi0: Minor 47 could not be opened [ 169.700556][ T7896] overlayfs: failed to resolve './bus': -2 [ 170.763961][ T7922] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 170.764246][ T7922] bridge1: entered promiscuous mode [ 170.764275][ T7922] bridge1: entered allmulticast mode [ 170.974572][ T42] kauditd_printk_skb: 55 callbacks suppressed [ 170.974591][ T42] audit: type=1804 audit(1793805619.554:931): pid=7924 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=invalid_pcr cause=ToMToU comm="syz.2.597" name="/newroot/145/file1" dev="fuse" ino=1 res=1 errno=0 [ 173.028540][ T7949] Invalid ELF header magic: != ELF [ 174.191362][ T7972] vlan2: entered promiscuous mode [ 174.191376][ T7972] hsr0: entered promiscuous mode [ 174.209762][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.613'. [ 174.213456][ T7972] hsr_slave_0: left promiscuous mode [ 174.220370][ T7972] hsr_slave_1: left promiscuous mode [ 174.365470][ T7979] syzkaller0: entered promiscuous mode [ 174.365485][ T7979] syzkaller0: entered allmulticast mode [ 174.371982][ T7979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.475601][ T8003] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 177.475872][ T8003] bridge2: entered promiscuous mode [ 177.475900][ T8003] bridge2: entered allmulticast mode [ 177.668870][ T8019] profile_transition: unconfined exec no attachment [ 177.679434][ T8010] e1000e 0000:00:02.0: Interrupt Throttle Rate off [ 177.686497][ T8021] netlink: 'syz.3.626': attribute type 4 has an invalid length. [ 177.686510][ T8021] netlink: 17 bytes leftover after parsing attributes in process `syz.3.626'. [ 177.692542][ T6779] e1000 0000:00:07.0 eth0: Reset adapter [ 177.715311][ T8024] profile_transition: unconfined exec no attachment [ 177.736009][ T8014] netlink: 40 bytes leftover after parsing attributes in process `syz.0.624'. [ 177.736791][ T8026] profile_transition: unconfined exec no attachment [ 177.757033][ T8028] profile_transition: unconfined exec no attachment [ 177.784561][ T8010] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 177.858048][ T8021] FAULT_INJECTION: forcing a failure. [ 177.858048][ T8021] name failslab, interval 1, probability 0, space 0, times 0 [ 177.858071][ T8021] CPU: 2 UID: 0 PID: 8021 Comm: syz.3.626 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.858087][ T8021] Tainted: [L]=SOFTLOCKUP [ 177.858091][ T8021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.858098][ T8021] Call Trace: [ 177.858102][ T8021] [ 177.858107][ T8021] dump_stack_lvl+0x100/0x190 [ 177.858135][ T8021] should_fail_ex.cold+0x5/0xa [ 177.858153][ T8021] should_failslab+0xc2/0x120 [ 177.858167][ T8021] __kmalloc_noprof+0xfc/0x840 [ 177.858178][ T8021] ? trace_kmem_cache_alloc+0xdd/0x100 [ 177.858190][ T8021] ? tnode_new+0x2f7/0x350 [ 177.858203][ T8021] tnode_new+0x2f7/0x350 [ 177.858214][ T8021] fib_insert_alias+0x6e7/0xe30 [ 177.858225][ T8021] ? lockdep_rtnl_is_held+0x26/0x40 [ 177.858242][ T8021] fib_trie_unmerge+0x2af/0xc00 [ 177.858257][ T8021] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 177.858271][ T8021] ? lock_acquire+0x1d1/0x380 [ 177.858285][ T8021] fib_unmerge+0xee/0x510 [ 177.858297][ T8021] ? fib_nl2rule_locked+0x3ef/0x740 [ 177.858311][ T8021] fib4_rule_configure+0xaba/0x1160 [ 177.858328][ T8021] ? fib_nl2rule_locked+0x3fe/0x740 [ 177.858343][ T8021] fib_newrule+0x3c3/0x1e50 [ 177.858361][ T8021] ? __pfx_fib_newrule+0x10/0x10 [ 177.858374][ T8021] ? kfree_skbmem+0x19a/0x210 [ 177.858385][ T8021] ? kmem_cache_free+0xa0/0x6c0 [ 177.858399][ T8021] ? skb_release_data+0x69d/0x860 [ 177.858424][ T8021] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 177.858435][ T8021] ? find_held_lock+0x2b/0x80 [ 177.858449][ T8021] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 177.858458][ T8021] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 177.858469][ T8021] ? __pfx_fib_nl_newrule+0x10/0x10 [ 177.858482][ T8021] rtnetlink_rcv_msg+0x95e/0xe90 [ 177.858494][ T8021] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 177.858511][ T8021] netlink_rcv_skb+0x159/0x420 [ 177.858526][ T8021] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 177.858538][ T8021] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.858558][ T8021] ? netlink_deliver_tap+0x1ae/0xb50 [ 177.858576][ T8021] netlink_unicast+0x668/0x950 [ 177.858593][ T8021] ? __pfx_netlink_unicast+0x10/0x10 [ 177.858612][ T8021] netlink_sendmsg+0x9ac/0x10c0 [ 177.858630][ T8021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.858648][ T8021] ? apparmor_socket_sendmsg+0x165/0x280 [ 177.858665][ T8021] ? ____sys_sendmsg+0xa99/0xc30 [ 177.858675][ T8021] ____sys_sendmsg+0xa99/0xc30 [ 177.858685][ T8021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.858702][ T8021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.858719][ T8021] ___sys_sendmsg+0x190/0x1e0 [ 177.858732][ T8021] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.858744][ T8021] ? futex_wait+0x11e/0x370 [ 177.858761][ T8021] ? find_held_lock+0x2b/0x80 [ 177.858784][ T8021] __sys_sendmsg+0x160/0x210 [ 177.858799][ T8021] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.858822][ T8021] __do_fast_syscall_32+0x14b/0x8c0 [ 177.858836][ T8021] ? lockdep_hardirqs_on+0x7d/0x110 [ 177.858850][ T8021] do_fast_syscall_32+0x32/0x70 [ 177.858864][ T8021] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.858878][ T8021] RIP: 0023:0xf743efbc [ 177.858888][ T8021] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 177.858898][ T8021] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 177.858909][ T8021] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001c00 [ 177.858915][ T8021] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.858921][ T8021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.858927][ T8021] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 177.858933][ T8021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.858971][ T8021] [ 177.861930][ T8030] profile_transition: unconfined exec no attachment [ 177.916512][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.626'. [ 177.982034][ T8034] profile_transition: unconfined exec no attachment [ 178.004014][ T8037] profile_transition: unconfined exec no attachment [ 178.028740][ T8038] profile_transition: unconfined exec no attachment [ 178.077524][ T8021] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.077781][ T8021] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.094484][ T6779] e1000 0000:00:07.0 eth0: Reset adapter [ 178.095355][ T8040] profile_transition: unconfined exec no attachment [ 178.131164][ T8043] profile_transition: unconfined exec no attachment [ 178.297650][ T24] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 179.588619][ T8066] comedi comedi0: Minor 47 could not be opened [ 180.534290][ T75] e1000 0000:00:07.0 eth0: Reset adapter [ 182.674929][ T75] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 182.681638][ T8080] profile_transition: 15 callbacks suppressed [ 182.681656][ T8080] profile_transition: unconfined exec no attachment [ 185.955715][ T8083] profile_transition: unconfined exec no attachment [ 185.996202][ T8085] profile_transition: unconfined exec no attachment [ 186.029846][ T8086] profile_transition: unconfined exec no attachment [ 186.052173][ T8087] profile_transition: unconfined exec no attachment [ 188.354549][ T8089] profile_transition: unconfined exec no attachment [ 188.388574][ T8091] profile_transition: unconfined exec no attachment [ 188.422453][ T8092] profile_transition: unconfined exec no attachment [ 188.451417][ T8093] profile_transition: unconfined exec no attachment [ 190.766352][ T8095] profile_transition: unconfined exec no attachment [ 190.808177][ T8097] profile_transition: unconfined exec no attachment [ 190.831207][ T8098] profile_transition: unconfined exec no attachment [ 190.865593][ T8099] profile_transition: unconfined exec no attachment [ 193.795656][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.795688][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.280464][ T8102] syzkaller0: entered promiscuous mode [ 200.280478][ T8102] syzkaller0: entered allmulticast mode [ 200.285835][ T8102] tipc: Enabled bearer , priority 0 [ 200.288364][ T8102] tipc: Resetting bearer [ 200.293577][ T8101] tipc: Resetting bearer [ 200.460257][ T8101] tipc: Disabling bearer qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 201.617443][ T8130] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 201.623711][ T8130] exFAT-fs (nbd2): unable to read boot sector [ 201.623802][ T8130] exFAT-fs (nbd2): failed to read boot sector [ 201.623871][ T8130] exFAT-fs (nbd2): failed to recognize exfat type [ 202.042775][ T8139] 0x0000000000ec-0x0000000000f2 : "" [ 202.138928][ T8139] ftl_cs: FTL header corrupt! [ 202.199235][ T8142] profile_transition: unconfined exec no attachment [ 203.399542][ T8154] profile_transition: unconfined exec no attachment [ 203.701758][ T8155] profile_transition: unconfined exec no attachment [ 204.522283][ T8158] profile_transition: unconfined exec no attachment [ 204.539005][ T8159] profile_transition: unconfined exec no attachment [ 204.570927][ T8157] kAFS: unable to lookup cell '.' [ 204.662935][ T8164] profile_transition: unconfined exec no attachment [ 204.679624][ T8165] profile_transition: unconfined exec no attachment [ 204.704876][ T8167] profile_transition: unconfined exec no attachment [ 204.723505][ T8169] profile_transition: unconfined exec no attachment [ 204.740375][ T8170] profile_transition: unconfined exec no attachment [ 205.393539][ T8191] syzkaller0: entered promiscuous mode [ 205.393559][ T8191] syzkaller0: entered allmulticast mode [ 205.405374][ T8191] netlink: 76 bytes leftover after parsing attributes in process `syz.2.652'. [ 205.432658][ T8190] tc action pedit offset 0 out of bounds [ 205.432672][ T8190] tc action pedit offset 0 out of bounds [ 205.432677][ T8190] tc action pedit offset 0 out of bounds [ 205.432681][ T8190] tc action pedit offset 0 out of bounds [ 205.432686][ T8190] tc action pedit offset 0 out of bounds [ 205.432691][ T8190] tc action pedit offset 0 out of bounds [ 205.432695][ T8190] tc action pedit offset 0 out of bounds [ 205.432700][ T8190] tc action pedit offset 0 out of bounds [ 205.432704][ T8190] tc action pedit offset 0 out of bounds [ 205.432709][ T8190] tc action pedit offset 0 out of bounds [ 205.432718][ T8190] 0: reclassify loop, rule prio 0, protocol 800 [ 205.580992][ T8196] rxe_eth0 speed is unknown, defaulting to 1000 [ 205.654891][ T8197] team0: Device xfrm0 is of different type [ 206.093520][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.659'. [ 210.802900][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'. [ 214.088178][ T8264] tc action pedit 'at' offset 5 out of bounds [ 214.088191][ T8264] tc action pedit 'at' offset 5 out of bounds [ 214.088196][ T8264] tc action pedit 'at' offset 5 out of bounds [ 214.088200][ T8264] tc action pedit 'at' offset 5 out of bounds [ 214.088205][ T8264] tc action pedit 'at' offset 5 out of bounds [ 214.088210][ T8264] tc action pedit 'at' offset 5 out of bounds [ 214.088214][ T8264] tc action pedit 'at' offset 5 out of bounds [ 214.088219][ T8264] tc action pedit 'at' offset 5 out of bounds [ 214.088223][ T8264] tc action pedit 'at' offset 5 out of bounds [ 214.088228][ T8264] tc action pedit 'at' offset 5 out of bounds [ 214.088237][ T8264] 0: reclassify loop, rule prio 0, protocol 800 [ 214.265670][ T8269] FAULT_INJECTION: forcing a failure. [ 214.265670][ T8269] name failslab, interval 1, probability 0, space 0, times 0 [ 214.265692][ T8269] CPU: 3 UID: 0 PID: 8269 Comm: syz.0.675 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.265708][ T8269] Tainted: [L]=SOFTLOCKUP [ 214.265712][ T8269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.265719][ T8269] Call Trace: [ 214.265723][ T8269] [ 214.265728][ T8269] dump_stack_lvl+0x100/0x190 [ 214.265750][ T8269] should_fail_ex.cold+0x5/0xa [ 214.265767][ T8269] should_failslab+0xc2/0x120 [ 214.265782][ T8269] kmem_cache_alloc_noprof+0x92/0x6a0 [ 214.265800][ T8269] ? __proc_create+0xc1/0x8f0 [ 214.265809][ T8269] ? __proc_create+0x247/0x8f0 [ 214.265821][ T8269] __proc_create+0x247/0x8f0 [ 214.265831][ T8269] ? __pfx___proc_create+0x10/0x10 [ 214.265843][ T8269] ? _raw_write_unlock+0x28/0x50 [ 214.265856][ T8269] ? proc_register+0x56d/0x910 [ 214.265868][ T8269] proc_create_reg+0x75/0x170 [ 214.265880][ T8269] proc_create_net_data+0x8e/0x1c0 [ 214.265891][ T8269] ? __pfx_proc_create_net_data+0x10/0x10 [ 214.265906][ T8269] ip6mr_net_init+0x394/0x5e0 [ 214.265923][ T8269] ? __pfx_ip6mr_net_init+0x10/0x10 [ 214.265936][ T8269] ? inet6_net_init+0x67c/0xa20 [ 214.265949][ T8269] ? ac6_proc_init+0x5f/0x80 [ 214.265960][ T8269] ? inet6_net_init+0x76d/0xa20 [ 214.265971][ T8269] ? __pfx_ip6mr_net_init+0x10/0x10 [ 214.265986][ T8269] ops_init+0x1e2/0x5f0 [ 214.266004][ T8269] setup_net+0x118/0x3a0 [ 214.266020][ T8269] ? __pfx_setup_net+0x10/0x10 [ 214.266036][ T8269] ? bpf_lsm_namespace_init+0x9/0x10 [ 214.266050][ T8269] copy_net_ns+0x340/0x7a0 [ 214.266062][ T8269] create_new_namespaces+0x3ea/0xac0 [ 214.266078][ T8269] unshare_nsproxy_namespaces+0xf6/0x210 [ 214.266091][ T8269] ksys_unshare+0x44f/0x980 [ 214.266103][ T8269] ? __pfx_ksys_unshare+0x10/0x10 [ 214.266123][ T8269] ? __might_fault+0xc5/0x140 [ 214.266141][ T8269] __ia32_sys_unshare+0x30/0x40 [ 214.266154][ T8269] __do_fast_syscall_32+0x14b/0x8c0 [ 214.266171][ T8269] do_fast_syscall_32+0x32/0x70 [ 214.266187][ T8269] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.266220][ T8269] RIP: 0023:0xf748efbc [ 214.266230][ T8269] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 214.266241][ T8269] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 214.266253][ T8269] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 214.266260][ T8269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 214.266266][ T8269] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 214.266272][ T8269] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 214.266279][ T8269] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.266294][ T8269] [ 215.753194][ T8295] rxe_eth0 speed is unknown, defaulting to 1000 [ 215.837596][ T8297] team0: Device xfrm0 is of different type [ 216.086924][ T8300] syz.3.684 uses obsolete (PF_INET,SOCK_PACKET) [ 218.919523][ T8317] rxe_eth0 speed is unknown, defaulting to 1000 [ 219.692644][ T8315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.463985][ T8338] syzkaller0: entered promiscuous mode [ 220.464006][ T8338] syzkaller0: entered allmulticast mode [ 222.698801][ T8346] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 224.418082][ T8378] profile_transition: 7 callbacks suppressed [ 224.418097][ T8378] profile_transition: unconfined exec no attachment [ 227.096818][ T8410] bridge_slave_0: left allmulticast mode [ 227.096918][ T8410] bridge_slave_0: left promiscuous mode [ 227.099098][ T8410] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.116420][ T8410] bridge_slave_1: left allmulticast mode [ 227.116435][ T8410] bridge_slave_1: left promiscuous mode [ 227.116569][ T8410] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.273576][ T8410] team0: Port device team_slave_0 removed [ 227.284712][ T8410] team0: Port device team_slave_1 removed [ 227.293565][ T8410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.293588][ T8410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.326030][ T8410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.326045][ T8410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.380098][ T8410] bond0: (slave gretap1): Releasing active interface [ 227.457214][ T8411] team0: Port device xfrm0 added [ 227.461328][ T8412] tipc: Enabled bearer , priority 0 [ 229.704275][ T8439] exFAT-fs (nbd3): mounting with "discard" option, but the device does not support discard [ 229.704812][ T8439] exFAT-fs (nbd3): unable to read boot sector [ 229.704824][ T8439] exFAT-fs (nbd3): failed to read boot sector [ 229.704832][ T8439] exFAT-fs (nbd3): failed to recognize exfat type [ 232.426030][ T8445] 9p: Bad value for 'wfdno' [ 232.475929][ T8452] tc action pedit unable to extract header offset for header type (0x4) [ 232.475942][ T8452] tc action pedit unable to extract header offset for header type (0x4) [ 232.475949][ T8452] tc action pedit unable to extract header offset for header type (0x4) [ 232.475954][ T8452] tc action pedit unable to extract header offset for header type (0x4) [ 232.475959][ T8452] tc action pedit unable to extract header offset for header type (0x4) [ 232.475964][ T8452] tc action pedit unable to extract header offset for header type (0x4) [ 232.475970][ T8452] tc action pedit unable to extract header offset for header type (0x4) [ 232.475975][ T8452] tc action pedit unable to extract header offset for header type (0x4) [ 232.475980][ T8452] tc action pedit unable to extract header offset for header type (0x4) [ 232.475985][ T8452] tc action pedit unable to extract header offset for header type (0x4) [ 232.475994][ T8452] 0: reclassify loop, rule prio 0, protocol 800 [ 232.602812][ T8454] syzkaller0: entered promiscuous mode [ 232.602833][ T8454] syzkaller0: entered allmulticast mode [ 234.053446][ T8467] tcf_pedit_act: 7 callbacks suppressed [ 234.053461][ T8467] tc action pedit 'at' offset 5 out of bounds [ 234.053466][ T8467] tc action pedit 'at' offset 5 out of bounds [ 234.053471][ T8467] tc action pedit 'at' offset 5 out of bounds [ 234.053476][ T8467] tc action pedit 'at' offset 5 out of bounds [ 234.053480][ T8467] tc action pedit 'at' offset 5 out of bounds [ 234.053485][ T8467] tc action pedit 'at' offset 5 out of bounds [ 234.053490][ T8467] tc action pedit 'at' offset 5 out of bounds [ 234.053494][ T8467] tc action pedit 'at' offset 5 out of bounds [ 234.053499][ T8467] tc action pedit 'at' offset 5 out of bounds [ 234.053503][ T8467] tc action pedit 'at' offset 5 out of bounds [ 234.053513][ T8467] 0: reclassify loop, rule prio 0, protocol 800 [ 234.195290][ T8470] netlink: 48 bytes leftover after parsing attributes in process `syz.1.732'. [ 234.195328][ T8470] netlink: 48 bytes leftover after parsing attributes in process `syz.1.732'. [ 234.466662][ T8475] FAULT_INJECTION: forcing a failure. [ 234.466662][ T8475] name failslab, interval 1, probability 0, space 0, times 0 [ 234.466683][ T8475] CPU: 0 UID: 0 PID: 8475 Comm: syz.1.732 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.466697][ T8475] Tainted: [L]=SOFTLOCKUP [ 234.466700][ T8475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.466706][ T8475] Call Trace: [ 234.466711][ T8475] [ 234.466716][ T8475] dump_stack_lvl+0x100/0x190 [ 234.466735][ T8475] should_fail_ex.cold+0x5/0xa [ 234.466752][ T8475] should_failslab+0xc2/0x120 [ 234.466766][ T8475] __kmalloc_cache_noprof+0x91/0x6d0 [ 234.466781][ T8475] ? assoc_array_insert+0x10b/0x32c0 [ 234.466795][ T8475] assoc_array_insert+0x10b/0x32c0 [ 234.466805][ T8475] ? __mutex_lock+0x267/0x1c10 [ 234.466819][ T8475] ? __key_link_lock+0x92/0xb0 [ 234.466832][ T8475] ? __pfx___mutex_lock+0x10/0x10 [ 234.466847][ T8475] ? __pfx_assoc_array_insert+0x10/0x10 [ 234.466860][ T8475] ? down_write+0x141/0x1f0 [ 234.466873][ T8475] ? __pfx_down_write+0x10/0x10 [ 234.466890][ T8475] __key_link_begin+0xf5/0x260 [ 234.466900][ T8475] key_instantiate_and_link+0x201/0x4b0 [ 234.466917][ T8475] ? __pfx_key_instantiate_and_link+0x10/0x10 [ 234.466932][ T8475] ? keyctl_get_persistent+0x4b4/0x860 [ 234.466955][ T8475] keyring_alloc+0x7a/0xc0 [ 234.466972][ T8475] keyctl_get_persistent+0x694/0x860 [ 234.466989][ T8475] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 234.467004][ T8475] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 234.467023][ T8475] ? find_held_lock+0x2b/0x80 [ 234.467038][ T8475] ? __might_fault+0xc5/0x140 [ 234.467049][ T8475] ? __might_fault+0xc5/0x140 [ 234.467063][ T8475] __ia32_compat_sys_keyctl+0x38f/0x550 [ 234.467080][ T8475] __do_fast_syscall_32+0x14b/0x8c0 [ 234.467104][ T8475] do_fast_syscall_32+0x32/0x70 [ 234.467118][ T8475] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 234.467132][ T8475] RIP: 0023:0xf748efbc [ 234.467140][ T8475] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 234.467151][ T8475] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 234.467162][ T8475] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000000000 [ 234.467168][ T8475] RDX: 00000000248df007 RSI: 0000000000000000 RDI: 0000000000000000 [ 234.467174][ T8475] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 234.467179][ T8475] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 234.467185][ T8475] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 234.467199][ T8475] [ 234.742704][ T8481] exFAT-fs (nbd1): mounting with "discard" option, but the device does not support discard [ 234.744012][ T8481] exFAT-fs (nbd1): unable to read boot sector [ 234.744021][ T8481] exFAT-fs (nbd1): failed to read boot sector [ 234.744026][ T8481] exFAT-fs (nbd1): failed to recognize exfat type [ 234.898810][ T8483] netlink: 'syz.3.734': attribute type 1 has an invalid length. [ 234.945100][ T8483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.997268][ T12] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 234.998537][ T8483] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 235.001489][ T8483] netlink: 'syz.3.734': attribute type 10 has an invalid length. [ 235.001506][ T8483] netlink: 40 bytes leftover after parsing attributes in process `syz.3.734'. [ 235.001618][ T8483] dummy0: entered promiscuous mode [ 235.021680][ T8483] bond0: (slave dummy0): Removing an active aggregator [ 235.036221][ T8483] bond0: (slave dummy0): Releasing backup interface [ 235.139262][ T8487] tipc: Started in network mode [ 235.139279][ T8487] tipc: Node identity aec6456a2e85, cluster identity 4711 [ 235.139345][ T8487] tipc: Enabled bearer , priority 0 [ 235.139984][ T8487] syzkaller0: entered promiscuous mode [ 235.139994][ T8487] syzkaller0: entered allmulticast mode [ 235.147792][ T8487] tipc: Resetting bearer [ 235.149603][ T8486] tipc: Resetting bearer [ 235.166143][ T8486] tipc: Disabling bearer [ 235.253534][ T8492] 0: reclassify loop, rule prio 0, protocol 800 [ 235.794099][ T5855] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 235.955261][ T5855] usb 8-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 235.956616][ T5855] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.956637][ T5855] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 235.956647][ T5855] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 235.956666][ T5855] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.960541][ T5855] pegasus 8-1:1.0: Missing or invalid endpoints [ 235.970615][ T62] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 236.164286][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.741'. [ 236.165630][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.741'. [ 236.166321][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.741'. [ 236.167023][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.741'. [ 236.167805][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.741'. [ 236.169139][ T3306] usb 8-1: USB disconnect, device number 5 [ 236.303678][ T62] usb 6-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 236.306145][ T62] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.306190][ T62] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 236.308058][ T62] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 236.308101][ T62] usb 6-1: Product: syz [ 236.308132][ T62] usb 6-1: Manufacturer: syz [ 236.655492][ T5855] usb 6-1: USB disconnect, device number 6 [ 239.074203][ T5791] Bluetooth: hci3: command 0x0c1a tx timeout [ 240.120013][ T42] audit: type=1326 audit(1793805688.744:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8537 comm="syz.2.753" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff7fbc code=0x0 [ 240.218949][ T8548] exFAT-fs (nbd0): mounting with "discard" option, but the device does not support discard [ 240.220258][ T8548] exFAT-fs (nbd0): unable to read boot sector [ 240.220298][ T8548] exFAT-fs (nbd0): failed to read boot sector [ 240.220306][ T8548] exFAT-fs (nbd0): failed to recognize exfat type [ 241.218316][ T5791] Bluetooth: hci3: command 0x0c1a tx timeout [ 241.264729][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.757'. [ 241.307818][ T8560] syz_tun: entered allmulticast mode [ 241.321746][ T8560] dvmrp3: entered allmulticast mode [ 241.339758][ T8559] syz_tun: left allmulticast mode [ 241.905834][ T8579] jffs2: notice: (8579) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 241.980543][ T8582] profile_transition: unconfined exec no attachment [ 242.060762][ T8584] 0x000000000000-0x000000010000 : "" [ 242.067684][ T8584] ftl_cs: FTL header not found. [ 242.067943][ T8584] blk-mq: reduced tag depth (2 -> 1) [ 242.077350][ T8585] profile_transition: unconfined exec no attachment [ 242.577395][ T8598] exFAT-fs (nbd1): mounting with "discard" option, but the device does not support discard [ 242.577817][ T8598] exFAT-fs (nbd1): unable to read boot sector [ 242.577850][ T8598] exFAT-fs (nbd1): failed to read boot sector [ 242.577856][ T8598] exFAT-fs (nbd1): failed to recognize exfat type [ 243.281050][ T8607] syzkaller0: entered promiscuous mode [ 243.281064][ T8607] syzkaller0: entered allmulticast mode [ 243.286172][ T8607] tipc: Enabled bearer , priority 0 [ 243.289449][ T8607] tipc: Resetting bearer [ 243.296870][ T8606] tipc: Resetting bearer [ 243.310584][ T8606] tipc: Disabling bearer [ 243.622216][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.773'. [ 244.859795][ T8637] FAULT_INJECTION: forcing a failure. [ 244.859795][ T8637] name failslab, interval 1, probability 0, space 0, times 0 [ 244.859825][ T8637] CPU: 1 UID: 0 PID: 8637 Comm: syz.1.780 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.859850][ T8637] Tainted: [L]=SOFTLOCKUP [ 244.859857][ T8637] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.859868][ T8637] Call Trace: [ 244.859873][ T8637] [ 244.859882][ T8637] dump_stack_lvl+0x100/0x190 [ 244.859911][ T8637] should_fail_ex.cold+0x5/0xa [ 244.859940][ T8637] should_failslab+0xc2/0x120 [ 244.859960][ T8637] __kvmalloc_node_noprof+0x113/0x9b0 [ 244.859979][ T8637] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 244.860005][ T8637] ? ceph_msg_new2+0x370/0x4f0 [ 244.860036][ T8637] ceph_msg_new2+0x370/0x4f0 [ 244.860059][ T8637] msgpool_alloc+0xa8/0x200 [ 244.860081][ T8637] ? __pfx_msgpool_alloc+0x10/0x10 [ 244.860102][ T8637] ? __pfx_msgpool_alloc+0x10/0x10 [ 244.860124][ T8637] mempool_init_node+0x2f7/0x6f0 [ 244.860150][ T8637] ? __pfx_msgpool_free+0x10/0x10 [ 244.860170][ T8637] mempool_create_node_noprof+0xe9/0x1b0 [ 244.860192][ T8637] ? __pfx_msgpool_alloc+0x10/0x10 [ 244.860214][ T8637] ceph_msgpool_init+0xdc/0x1d0 [ 244.860238][ T8637] ceph_osdc_init+0x539/0xa00 [ 244.860260][ T8637] ceph_create_client+0x281/0x370 [ 244.860277][ T8637] ceph_get_tree+0x1a4/0x2020 [ 244.860298][ T8637] ? bpf_lsm_capable+0x9/0x10 [ 244.860315][ T8637] ? security_capable+0x80/0x260 [ 244.860337][ T8637] vfs_get_tree+0x92/0x320 [ 244.860363][ T8637] path_mount+0x7d0/0x2850 [ 244.860391][ T8637] ? __pfx_path_mount+0x10/0x10 [ 244.860412][ T8637] ? lockdep_hardirqs_on+0x7d/0x110 [ 244.860437][ T8637] ? putname+0xb1/0x110 [ 244.860457][ T8637] ? kmem_cache_free+0x127/0x6c0 [ 244.860487][ T8637] ? __ia32_sys_mount+0x292/0x310 [ 244.860510][ T8637] __ia32_sys_mount+0x292/0x310 [ 244.860532][ T8637] ? __pfx___ia32_sys_mount+0x10/0x10 [ 244.860562][ T8637] __do_fast_syscall_32+0x14b/0x8c0 [ 244.860584][ T8637] ? lockdep_hardirqs_on+0x7d/0x110 [ 244.860608][ T8637] do_fast_syscall_32+0x32/0x70 [ 244.860631][ T8637] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.860653][ T8637] RIP: 0023:0xf748efbc [ 244.860668][ T8637] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 244.860685][ T8637] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 244.860702][ T8637] RAX: ffffffffffffffda RBX: 0000000080002840 RCX: 0000000080002880 [ 244.860714][ T8637] RDX: 00000000800028c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 244.860724][ T8637] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.860734][ T8637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.860745][ T8637] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.860787][ T8637] [ 247.050993][ T8669] netlink: 48 bytes leftover after parsing attributes in process `syz.2.786'. [ 247.051027][ T8669] netlink: 48 bytes leftover after parsing attributes in process `syz.2.786'. [ 247.303094][ T8669] FAULT_INJECTION: forcing a failure. [ 247.303094][ T8669] name failslab, interval 1, probability 0, space 0, times 0 [ 247.303114][ T8669] CPU: 3 UID: 0 PID: 8669 Comm: syz.2.786 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.303145][ T8669] Tainted: [L]=SOFTLOCKUP [ 247.303149][ T8669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 247.303156][ T8669] Call Trace: [ 247.303160][ T8669] [ 247.303164][ T8669] dump_stack_lvl+0x100/0x190 [ 247.303185][ T8669] should_fail_ex.cold+0x5/0xa [ 247.303201][ T8669] should_failslab+0xc2/0x120 [ 247.303215][ T8669] __kmalloc_cache_noprof+0x91/0x6d0 [ 247.303232][ T8669] ? assoc_array_insert+0x10b/0x32c0 [ 247.303246][ T8669] assoc_array_insert+0x10b/0x32c0 [ 247.303268][ T8669] ? __mutex_lock+0x267/0x1c10 [ 247.303286][ T8669] ? key_link+0x2bb/0x390 [ 247.303299][ T8669] ? __pfx___mutex_lock+0x10/0x10 [ 247.303317][ T8669] ? __pfx_assoc_array_insert+0x10/0x10 [ 247.303328][ T8669] ? __pfx___might_resched+0x10/0x10 [ 247.303353][ T8669] ? down_write+0x141/0x1f0 [ 247.303367][ T8669] ? __pfx_down_write+0x10/0x10 [ 247.303382][ T8669] __key_link_begin+0xf5/0x260 [ 247.303394][ T8669] key_link+0x103/0x390 [ 247.303403][ T8669] ? keyctl_get_persistent+0x6d1/0x860 [ 247.303422][ T8669] ? keyctl_get_persistent+0x6d1/0x860 [ 247.303437][ T8669] ? __pfx_key_link+0x10/0x10 [ 247.303447][ T8669] ? bpf_lsm_key_permission+0x9/0x10 [ 247.303461][ T8669] ? key_task_permission+0x2c7/0x3c0 [ 247.303477][ T8669] keyctl_get_persistent+0x5bd/0x860 [ 247.303497][ T8669] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 247.303512][ T8669] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 247.303531][ T8669] ? find_held_lock+0x2b/0x80 [ 247.303545][ T8669] ? __might_fault+0xc5/0x140 [ 247.303557][ T8669] ? __might_fault+0xc5/0x140 [ 247.303570][ T8669] __ia32_compat_sys_keyctl+0x38f/0x550 [ 247.303588][ T8669] __do_fast_syscall_32+0x14b/0x8c0 [ 247.303604][ T8669] do_fast_syscall_32+0x32/0x70 [ 247.303618][ T8669] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 247.303631][ T8669] RIP: 0023:0xf7ff7fbc [ 247.303643][ T8669] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 247.303653][ T8669] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 247.303664][ T8669] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000000000 [ 247.303670][ T8669] RDX: 000000001bc90edf RSI: 0000000000000000 RDI: 0000000000000000 [ 247.303676][ T8669] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 247.303682][ T8669] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 247.303688][ T8669] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 247.303702][ T8669] [ 248.852280][ T8682] bridge_slave_0: left allmulticast mode [ 248.852305][ T8682] bridge_slave_0: left promiscuous mode [ 248.854988][ T8682] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.867822][ T8682] bridge_slave_1: left allmulticast mode [ 248.867843][ T8682] bridge_slave_1: left promiscuous mode [ 248.868732][ T8682] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.036477][ T8682] bond0: (slave bond_slave_0): Releasing backup interface [ 249.051170][ T8682] bond0: (slave bond_slave_1): Releasing backup interface [ 249.075905][ T8682] team0: Port device team_slave_0 removed [ 249.175510][ T8682] team0: Port device team_slave_1 removed [ 249.176752][ T8682] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 249.250671][ T8685] team0: Port device xfrm0 added [ 249.252220][ T8686] tipc: Enabled bearer , priority 0 [ 250.001113][ T8695] profile_transition: unconfined exec no attachment [ 250.030280][ T8696] profile_transition: unconfined exec no attachment [ 250.055085][ T8697] profile_transition: name lookup ix on error [ 250.108652][ T8694] netlink: 7 bytes leftover after parsing attributes in process `syz.1.798'. [ 250.252342][ T9] tipc: Node number set to 2081103279 [ 253.074210][ T5791] Bluetooth: hci2: command 0x0c1a tx timeout [ 253.587782][ T8724] Console: switching to colour dummy device 80x25 [ 254.134815][ T8725] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 254.169737][ T8725] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 254.169889][ T8725] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 254.172458][ T8725] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 254.172927][ T8725] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 254.178932][ T8725] pci 0000:00:01.0: Adding to iommu group 1 [ 254.196679][ T8725] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 254.196692][ T8725] pci 0000:00:01.0: vgaarb: bridge control possible [ 254.196700][ T8725] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 254.206339][ T8725] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 254.206462][ T8725] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 254.207949][ T8725] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 254.221732][ T8725] [drm] Found bochs VGA, ID 0xb0c5. [ 254.221759][ T8725] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 254.237412][ T8725] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 254.337068][ T8725] Console: switching to colour frame buffer device 160x50 [ 254.371105][ T8725] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 255.234878][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.234910][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.410804][ T42] audit: type=1326 audit(1793805704.034:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8746 comm="syz.2.813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7fbc code=0x7ffc0000 [ 255.410997][ T42] audit: type=1326 audit(1793805704.034:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8746 comm="syz.2.813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7fbc code=0x7ffc0000 [ 255.411575][ T42] audit: type=1326 audit(1793805704.034:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8746 comm="syz.2.813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7fbc code=0x7ffc0000 [ 255.411820][ T42] audit: type=1326 audit(1793805704.034:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8746 comm="syz.2.813" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff7fbc code=0x7ffc0000 [ 255.411859][ T42] audit: type=1326 audit(1793805704.034:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8746 comm="syz.2.813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7fbc code=0x7ffc0000 [ 255.411896][ T42] audit: type=1326 audit(1793805704.034:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8746 comm="syz.2.813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7fbc code=0x7ffc0000 [ 255.412140][ T42] audit: type=1326 audit(1793805704.034:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8746 comm="syz.2.813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7fbc code=0x7ffc0000 [ 255.412882][ T42] audit: type=1326 audit(1793805704.034:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8746 comm="syz.2.813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7fbc code=0x7ffc0000 [ 255.413118][ T42] audit: type=1326 audit(1793805704.034:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8746 comm="syz.2.813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7fbc code=0x7ffc0000 [ 255.413156][ T42] audit: type=1326 audit(1793805704.034:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8746 comm="syz.2.813" exe="/syz-executor" sig=0 arch=40000003 syscall=238 compat=1 ip=0xf7ff7fbc code=0x7ffc0000 [ 255.433126][ T8748] profile_transition: unconfined exec no attachment [ 255.451400][ T8749] profile_transition: unconfined exec no attachment [ 255.622753][ T8754] FAULT_INJECTION: forcing a failure. [ 255.622753][ T8754] name failslab, interval 1, probability 0, space 0, times 0 [ 255.622773][ T8754] CPU: 1 UID: 0 PID: 8754 Comm: syz.2.816 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.622787][ T8754] Tainted: [L]=SOFTLOCKUP [ 255.622791][ T8754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 255.622797][ T8754] Call Trace: [ 255.622801][ T8754] [ 255.622806][ T8754] dump_stack_lvl+0x100/0x190 [ 255.622903][ T8754] should_fail_ex.cold+0x5/0xa [ 255.622928][ T8754] should_failslab+0xc2/0x120 [ 255.622966][ T8754] __kvmalloc_node_noprof+0x113/0x9b0 [ 255.622980][ T8754] ? do_replace_table+0x1c5/0x750 [ 255.623017][ T8754] do_replace_table+0x1c5/0x750 [ 255.623034][ T8754] xt_register_table+0x384/0x9a0 [ 255.623052][ T8754] ? __pfx_xt_register_table+0x10/0x10 [ 255.623066][ T8754] ? xt_alloc_table_info+0x44/0xa0 [ 255.623080][ T8754] ? __asan_memset+0x23/0x50 [ 255.623097][ T8754] ipt_register_table+0x137/0x2b0 [ 255.623113][ T8754] ? __pfx_ipt_register_table+0x10/0x10 [ 255.623127][ T8754] ? __kmalloc_noprof+0x350/0x840 [ 255.623140][ T8754] ? ipt_alloc_initial_table+0x5b8/0x700 [ 255.623157][ T8754] iptable_nat_table_init+0x4b/0x270 [ 255.623174][ T8754] xt_find_table_lock+0x2db/0x520 [ 255.623190][ T8754] xt_request_find_table_lock+0x28/0xf0 [ 255.623204][ T8754] get_info+0x196/0x5f0 [ 255.623218][ T8754] ? sockopt_release_sock+0x5c/0x70 [ 255.623235][ T8754] ? __pfx_get_info+0x10/0x10 [ 255.623252][ T8754] ? lock_acquire+0x1d1/0x380 [ 255.623271][ T8754] ? nf_sockopt_find.isra.0+0x2a/0x290 [ 255.623282][ T8754] ? hook_capable+0x1bc/0x500 [ 255.623296][ T8754] ? rcu_is_watching+0x13/0xc0 [ 255.623316][ T8754] ? bpf_lsm_capable+0x9/0x10 [ 255.623329][ T8754] ? security_capable+0x80/0x260 [ 255.623343][ T8754] do_ipt_get_ctl+0x209/0xab0 [ 255.623358][ T8754] ? __mutex_unlock_slowpath+0x35d/0x930 [ 255.623395][ T8754] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 255.623411][ T8754] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 255.623427][ T8754] ? lock_acquire+0x1d1/0x380 [ 255.623438][ T8754] ? __might_fault+0xc5/0x140 [ 255.623465][ T8754] ? nf_sockopt_find.isra.0+0x222/0x290 [ 255.623481][ T8754] nf_getsockopt+0x7c/0xe0 [ 255.623493][ T8754] ip_getsockopt+0x192/0x1e0 [ 255.623509][ T8754] ? __pfx_ip_getsockopt+0x10/0x10 [ 255.623525][ T8754] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 255.623545][ T8754] sctp_getsockopt+0x19b/0x70e0 [ 255.623561][ T8754] ? aa_inet_opt_perm+0x307/0x8e0 [ 255.623574][ T8754] ? __pfx_sctp_getsockopt+0x10/0x10 [ 255.623587][ T8754] ? futex_unqueue+0x29/0x2c0 [ 255.623601][ T8754] ? find_held_lock+0x2b/0x80 [ 255.623615][ T8754] ? futex_unqueue+0x133/0x2c0 [ 255.623628][ T8754] ? futex_unqueue+0x133/0x2c0 [ 255.623644][ T8754] ? futex_unqueue+0x13d/0x2c0 [ 255.623658][ T8754] ? __futex_wait+0x2ac/0x360 [ 255.623674][ T8754] ? __pfx_futex_wake_mark+0x10/0x10 [ 255.623687][ T8754] ? find_held_lock+0x2b/0x80 [ 255.623701][ T8754] ? futex_wake+0x4ea/0x5e0 [ 255.623713][ T8754] ? aa_sock_opt_perm+0x114/0x1e0 [ 255.623726][ T8754] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 255.623737][ T8754] do_sock_getsockopt+0x415/0x570 [ 255.623754][ T8754] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 255.623772][ T8754] ? __fget_files+0x34/0x3d0 [ 255.623784][ T8754] ? find_held_lock+0x2b/0x80 [ 255.623802][ T8754] ? __fget_files+0x21f/0x3d0 [ 255.623817][ T8754] __sys_getsockopt+0x133/0x1d0 [ 255.623837][ T8754] ? __might_fault+0xc5/0x140 [ 255.623854][ T8754] ? __ia32_sys_getsockopt+0xbc/0x160 [ 255.623869][ T8754] __ia32_sys_getsockopt+0xbc/0x160 [ 255.623883][ T8754] ? __might_fault+0x111/0x140 [ 255.623898][ T8754] __do_fast_syscall_32+0x14b/0x8c0 [ 255.623916][ T8754] do_fast_syscall_32+0x32/0x70 [ 255.623931][ T8754] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 255.623945][ T8754] RIP: 0023:0xf7ff7fbc [ 255.623954][ T8754] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 255.623964][ T8754] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 255.623975][ T8754] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 255.623981][ T8754] RDX: 0000000000000040 RSI: 0000000080000040 RDI: 00000000800000c0 [ 255.623988][ T8754] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 255.623994][ T8754] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 255.623999][ T8754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 255.624014][ T8754] [ 255.652379][ T8757] profile_transition: unconfined exec no attachment [ 257.234103][ T5791] Bluetooth: hci2: command 0x0c1a tx timeout [ 258.151843][ T8781] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 258.218391][ T8785] syzkaller0: entered promiscuous mode [ 258.218410][ T8785] syzkaller0: entered allmulticast mode [ 258.387345][ T8789] profile_transition: unconfined exec no attachment [ 258.413184][ T8790] profile_transition: unconfined exec no attachment [ 259.502290][ T8802] profile_transition: unconfined exec no attachment [ 259.672470][ T8805] profile_transition: unconfined exec no attachment [ 261.606492][ T8824] null_blk: disk nullb1 created [ 261.617915][ T8824] nvmet: adding nsid 1 to subsystem testsubsys [ 261.626977][ T8827] 0x0000000000ec-0x0000000000f2 : "" [ 261.639841][ T8827] ftl_cs: FTL header corrupt! [ 261.647360][ T8828] profile_transition: unconfined exec no attachment [ 262.455919][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.834'. [ 264.880738][ T8858] input: syz1 as /devices/virtual/input/input12 [ 266.694453][ T8877] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 266.694616][ T8877] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 266.694667][ T8877] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 266.697648][ T8877] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 267.542509][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.852'. [ 268.290420][ T42] kauditd_printk_skb: 77 callbacks suppressed [ 268.290433][ T42] audit: type=1326 audit(1793805716.914:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8902 comm="syz.3.855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 268.290455][ T42] audit: type=1326 audit(1793805716.914:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8902 comm="syz.3.855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 268.290834][ T42] audit: type=1326 audit(1793805716.914:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8902 comm="syz.3.855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 268.290941][ T42] audit: type=1326 audit(1793805716.914:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8902 comm="syz.3.855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 268.291025][ T42] audit: type=1326 audit(1793805716.914:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8902 comm="syz.3.855" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 268.291127][ T42] audit: type=1326 audit(1793805716.914:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8902 comm="syz.3.855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 268.291627][ T42] audit: type=1326 audit(1793805716.914:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8902 comm="syz.3.855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 268.291825][ T42] audit: type=1326 audit(1793805716.914:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8902 comm="syz.3.855" exe="/syz-executor" sig=0 arch=40000003 syscall=238 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 268.291845][ T42] audit: type=1326 audit(1793805716.914:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8902 comm="syz.3.855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 268.291863][ T42] audit: type=1326 audit(1793805716.914:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8902 comm="syz.3.855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 268.754124][ T5791] Bluetooth: hci3: command 0x0c1a tx timeout [ 268.754150][ T5791] Bluetooth: hci2: command 0x0c1a tx timeout [ 268.754164][ T5791] Bluetooth: hci1: command 0x0c1a tx timeout [ 269.434232][ T8922] ip_vti0: left promiscuous mode [ 269.544458][ T8922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 269.546171][ T8922] gretap1: left promiscuous mode [ 269.547535][ T8922] bridge1: left promiscuous mode [ 269.547585][ T8922] bridge1: left allmulticast mode [ 270.844062][ T5799] Bluetooth: hci2: command 0x0c1a tx timeout [ 271.124964][ T8945] netlink: 40 bytes leftover after parsing attributes in process `syz.0.867'. [ 271.330613][ T8953] profile_transition: unconfined exec no attachment [ 271.355246][ T8951] jffs2: notice: (8951) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 271.358473][ T8958] profile_transition: unconfined exec no attachment [ 271.360723][ T8951] Mount JFS Failure: -5 [ 271.360736][ T8951] jfs_mount failed w/return code = -5 [ 271.593204][ T8962] tipc: Resetting bearer [ 271.785759][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.787711][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.787985][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.788003][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.811769][ T8989] 0x000000000000-0x000000010000 : "" [ 273.824671][ T8989] ftl_cs: FTL header not found. [ 273.824776][ T8989] FAULT_INJECTION: forcing a failure. [ 273.824776][ T8989] name failslab, interval 1, probability 0, space 0, times 0 [ 273.824791][ T8989] CPU: 0 UID: 0 PID: 8989 Comm: syz.1.879 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.824807][ T8989] Tainted: [L]=SOFTLOCKUP [ 273.824812][ T8989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 273.824818][ T8989] Call Trace: [ 273.824822][ T8989] [ 273.824827][ T8989] dump_stack_lvl+0x100/0x190 [ 273.824847][ T8989] should_fail_ex.cold+0x5/0xa [ 273.824864][ T8989] should_failslab+0xc2/0x120 [ 273.824878][ T8989] __kmalloc_cache_node_noprof+0x94/0x710 [ 273.824890][ T8989] ? kfree+0x22b/0x6d0 [ 273.824904][ T8989] ? blk_mq_init_tags+0x8c/0x300 [ 273.824917][ T8989] blk_mq_init_tags+0x8c/0x300 [ 273.824929][ T8989] blk_mq_alloc_map_and_rqs+0x244/0xe20 [ 273.824948][ T8989] ? blk_mq_update_queue_map+0x227/0x3a0 [ 273.824961][ T8989] blk_mq_alloc_tag_set+0x7ff/0x1320 [ 273.824982][ T8989] add_mtd_blktrans_dev+0x6a1/0x1520 [ 273.825001][ T8989] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 273.825026][ T8989] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 273.825041][ T8989] ? mtdblock_add_mtd+0x4a/0x270 [ 273.825059][ T8989] mtdblock_add_mtd+0x1cc/0x270 [ 273.825075][ T8989] blktrans_notify_add+0xa2/0xf0 [ 273.825090][ T8989] add_mtd_device+0xb6d/0x1820 [ 273.825104][ T8989] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 273.825120][ T8989] ? __pfx_add_mtd_device+0x10/0x10 [ 273.825136][ T8989] mtd_add_partition+0x376/0x6a0 [ 273.825171][ T8989] ? __pfx_mtd_add_partition+0x10/0x10 [ 273.825187][ T8989] ? __might_fault+0xc5/0x140 [ 273.825201][ T8989] ? __might_fault+0xc5/0x140 [ 273.825222][ T8989] mtdchar_blkpg_ioctl+0x207/0x250 [ 273.825237][ T8989] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 273.825263][ T8989] mtdchar_compat_ioctl+0x3d6/0x440 [ 273.825279][ T8989] ? find_held_lock+0x2b/0x80 [ 273.825294][ T8989] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 273.825315][ T8989] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 273.825333][ T8989] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 273.825358][ T8989] __do_fast_syscall_32+0x14b/0x8c0 [ 273.825377][ T8989] ? lockdep_hardirqs_on+0x7d/0x110 [ 273.825398][ T8989] do_fast_syscall_32+0x32/0x70 [ 273.825422][ T8989] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.825444][ T8989] RIP: 0023:0xf748efbc [ 273.825463][ T8989] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 273.825480][ T8989] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 273.825498][ T8989] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000001269 [ 273.825509][ T8989] RDX: 00000000800009c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.825517][ T8989] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 273.825523][ T8989] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 273.825529][ T8989] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 273.825543][ T8989] [ 273.825611][ T8989] blk-mq: reduced tag depth (2 -> 1) [ 273.825705][ T8991] profile_transition: unconfined exec no attachment [ 274.254035][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 274.404980][ T9] usb 6-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 274.406123][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.406147][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 274.406159][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 274.406169][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 274.406180][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 274.406198][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.410959][ T8995] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 274.411082][ T8995] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 274.411132][ T8995] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 274.419731][ T9] cxacru_cm: 136 callbacks suppressed [ 274.419750][ T9] cxacru 6-1:1.0: send of cm 0x90 failed (-71) [ 274.423338][ T8998] cxacru 6-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 274.684741][ T9000] rxe_eth0 speed is unknown, defaulting to 1000 [ 274.702339][ T29] usb 6-1: USB disconnect, device number 7 [ 275.612579][ T42] audit: type=1326 audit(1793805724.234:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9009 comm="syz.0.883" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 275.612755][ T42] audit: type=1326 audit(1793805724.234:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9009 comm="syz.0.883" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 275.613991][ T42] audit: type=1326 audit(1793805724.234:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9009 comm="syz.0.883" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 275.616913][ T42] audit: type=1326 audit(1793805724.244:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9009 comm="syz.0.883" exe="/syz-executor" sig=0 arch=40000003 syscall=40 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 275.617116][ T42] audit: type=1326 audit(1793805724.244:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9009 comm="syz.0.883" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 275.620425][ T42] audit: type=1326 audit(1793805724.244:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9009 comm="syz.0.883" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 275.622000][ T42] audit: type=1326 audit(1793805724.244:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9009 comm="syz.0.883" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 275.623464][ T42] audit: type=1326 audit(1793805724.244:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9009 comm="syz.0.883" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 275.623500][ T42] audit: type=1326 audit(1793805724.244:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9009 comm="syz.0.883" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71e7f6b code=0x7ffc0000 [ 275.705750][ T9010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.883'. [ 275.707036][ T9010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.883'. [ 275.761197][ T9013] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 275.761233][ T9013] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 275.761271][ T9013] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 275.884975][ T9013] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 276.376391][ T9023] syzkaller0: entered promiscuous mode [ 276.376411][ T9023] syzkaller0: entered allmulticast mode [ 276.416976][ T9028] profile_transition: unconfined exec no attachment [ 276.582786][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.890'. [ 276.583409][ T9031] netlink: 104 bytes leftover after parsing attributes in process `syz.2.890'. [ 276.583419][ T9031] netlink: 104 bytes leftover after parsing attributes in process `syz.2.890'. [ 276.631563][ T9035] tipc: Enabling of bearer rejected, failed to enable media [ 276.885938][ T9036] profile_transition: unconfined exec no attachment [ 276.890040][ T9045] profile_transition: unconfined exec no attachment [ 276.891474][ T9046] profile_transition: unconfined exec no attachment [ 276.910301][ T9048] profile_transition: unconfined exec no attachment [ 276.945024][ T9049] profile_transition: unconfined exec no attachment [ 276.946334][ T9050] profile_transition: unconfined exec no attachment [ 279.095960][ T9070] profile_transition: unconfined exec no attachment [ 280.711357][ T9098] FAULT_INJECTION: forcing a failure. [ 280.711357][ T9098] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 280.711396][ T9098] CPU: 3 UID: 0 PID: 9098 Comm: syz.0.907 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.711424][ T9098] Tainted: [L]=SOFTLOCKUP [ 280.711431][ T9098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 280.711441][ T9098] Call Trace: [ 280.711449][ T9098] [ 280.711457][ T9098] dump_stack_lvl+0x100/0x190 [ 280.711491][ T9098] should_fail_ex.cold+0x5/0xa [ 280.711518][ T9098] should_fail_alloc_page+0xeb/0x140 [ 280.711542][ T9098] prepare_alloc_pages+0x1f0/0x5b0 [ 280.711568][ T9098] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 280.711595][ T9098] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 280.711623][ T9098] ? kvm_kick_cpu+0x15/0xa0 [ 280.711649][ T9098] ? __pv_queued_spin_unlock_slowpath+0x15b/0x2e0 [ 280.711678][ T9098] ? __raw_callee_save___pv_queued_spin_unlock_slowpath+0x15/0x40 [ 280.711729][ T9098] ? __bfs+0x150/0x2a0 [ 280.711763][ T9098] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 280.711789][ T9098] ? check_irq_usage+0xe9/0x8b0 [ 280.711808][ T9098] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 280.711828][ T9098] ? __bfs+0x150/0x2a0 [ 280.711863][ T9098] ? check_noncircular+0x97/0x160 [ 280.711888][ T9098] ? check_prev_add+0xfe/0xe60 [ 280.711905][ T9098] ? check_prev_add+0xfe/0xe60 [ 280.711926][ T9098] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 280.711951][ T9098] ? policy_nodemask+0xed/0x5e0 [ 280.711975][ T9098] alloc_pages_mpol+0x201/0x560 [ 280.711999][ T9098] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 280.712021][ T9098] ? do_raw_spin_lock+0x128/0x260 [ 280.712048][ T9098] ___kmalloc_large_node+0x103/0x170 [ 280.712074][ T9098] __kmalloc_large_node_noprof+0x1c/0x70 [ 280.712093][ T9098] ? __mutex_unlock_slowpath+0x35d/0x930 [ 280.712119][ T9098] __kmalloc_noprof+0x5a3/0x840 [ 280.712138][ T9098] ? __seq_open_private+0x22/0xd0 [ 280.712161][ T9098] __seq_open_private+0x22/0xd0 [ 280.712182][ T9098] __tracing_open+0x99/0xa80 [ 280.712202][ T9098] tracing_open+0x26b/0x460 [ 280.712222][ T9098] do_dentry_open+0x674/0x1470 [ 280.712244][ T9098] ? __pfx_tracing_open+0x10/0x10 [ 280.712265][ T9098] vfs_open_consume+0xcc/0x460 [ 280.712294][ T9098] path_openat+0x1547/0x23f0 [ 280.712321][ T9098] ? __pfx_path_openat+0x10/0x10 [ 280.712348][ T9098] do_file_open+0x20e/0x430 [ 280.712373][ T9098] ? __pfx_do_file_open+0x10/0x10 [ 280.712412][ T9098] ? _raw_spin_unlock+0x28/0x50 [ 280.712433][ T9098] ? alloc_fd+0x471/0x7a0 [ 280.712462][ T9098] do_sys_openat2+0x163/0x1d0 [ 280.712487][ T9098] ? __pfx_do_sys_openat2+0x10/0x10 [ 280.712522][ T9098] __ia32_compat_sys_openat+0x12d/0x210 [ 280.712548][ T9098] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 280.712585][ T9098] __do_fast_syscall_32+0x14b/0x8c0 [ 280.712615][ T9098] do_fast_syscall_32+0x32/0x70 [ 280.712638][ T9098] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 280.712662][ T9098] RIP: 0023:0xf748efbc [ 280.712678][ T9098] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 280.712696][ T9098] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 280.712721][ T9098] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0 [ 280.712734][ T9098] RDX: 0000000000048342 RSI: 00000000000001a1 RDI: 0000000000000000 [ 280.712746][ T9098] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 280.712757][ T9098] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 280.712769][ T9098] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 280.712793][ T9098] [ 283.146692][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.911'. [ 283.404381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 283.821144][ T9116] netlink: 'syz.0.913': attribute type 4 has an invalid length. [ 283.821158][ T9116] netlink: 17 bytes leftover after parsing attributes in process `syz.0.913'. [ 283.821271][ T9116] FAULT_INJECTION: forcing a failure. [ 283.821271][ T9116] name failslab, interval 1, probability 0, space 0, times 0 [ 283.821285][ T9116] CPU: 0 UID: 0 PID: 9116 Comm: syz.0.913 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.821300][ T9116] Tainted: [L]=SOFTLOCKUP [ 283.821304][ T9116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 283.821310][ T9116] Call Trace: [ 283.821314][ T9116] [ 283.821319][ T9116] dump_stack_lvl+0x100/0x190 [ 283.821340][ T9116] should_fail_ex.cold+0x5/0xa [ 283.821356][ T9116] should_failslab+0xc2/0x120 [ 283.821370][ T9116] kmem_cache_alloc_noprof+0x92/0x6a0 [ 283.821388][ T9116] ? fib_trie_unmerge+0x246/0xc00 [ 283.821403][ T9116] fib_trie_unmerge+0x246/0xc00 [ 283.821418][ T9116] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 283.821433][ T9116] ? lock_acquire+0x1d1/0x380 [ 283.821447][ T9116] fib_unmerge+0xee/0x510 [ 283.821459][ T9116] ? fib_nl2rule_locked+0x3ef/0x740 [ 283.821473][ T9116] fib4_rule_configure+0xaba/0x1160 [ 283.821490][ T9116] ? fib_nl2rule_locked+0x3fe/0x740 [ 283.821504][ T9116] fib_newrule+0x3c3/0x1e50 [ 283.821521][ T9116] ? __pfx_fib_newrule+0x10/0x10 [ 283.821546][ T9116] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 283.821557][ T9116] ? find_held_lock+0x2b/0x80 [ 283.821571][ T9116] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 283.821581][ T9116] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 283.821592][ T9116] ? __pfx_fib_nl_newrule+0x10/0x10 [ 283.821618][ T9116] rtnetlink_rcv_msg+0x95e/0xe90 [ 283.821631][ T9116] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 283.821646][ T9116] ? __lock_acquire+0x5c0/0x1f40 [ 283.821661][ T9116] netlink_rcv_skb+0x159/0x420 [ 283.821677][ T9116] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 283.821690][ T9116] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 283.821712][ T9116] ? netlink_deliver_tap+0x1ae/0xb50 [ 283.821731][ T9116] netlink_unicast+0x668/0x950 [ 283.821748][ T9116] ? __pfx_netlink_unicast+0x10/0x10 [ 283.821769][ T9116] netlink_sendmsg+0x9ac/0x10c0 [ 283.821789][ T9116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.821809][ T9116] ? apparmor_socket_sendmsg+0x165/0x280 [ 283.821824][ T9116] ? ____sys_sendmsg+0xa99/0xc30 [ 283.821841][ T9116] ____sys_sendmsg+0xa99/0xc30 [ 283.821852][ T9116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.821869][ T9116] ? __pfx_____sys_sendmsg+0x10/0x10 [ 283.821889][ T9116] ___sys_sendmsg+0x190/0x1e0 [ 283.821902][ T9116] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.821915][ T9116] ? futex_wait+0x11e/0x370 [ 283.821932][ T9116] ? find_held_lock+0x2b/0x80 [ 283.821957][ T9116] __sys_sendmsg+0x160/0x210 [ 283.821973][ T9116] ? __pfx___sys_sendmsg+0x10/0x10 [ 283.821996][ T9116] __do_fast_syscall_32+0x14b/0x8c0 [ 283.822010][ T9116] ? lockdep_hardirqs_on+0x7d/0x110 [ 283.822024][ T9116] do_fast_syscall_32+0x32/0x70 [ 283.822038][ T9116] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.822052][ T9116] RIP: 0023:0xf748efbc [ 283.822061][ T9116] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 283.822071][ T9116] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 283.822082][ T9116] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000180 [ 283.822088][ T9116] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 283.822094][ T9116] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 283.822100][ T9116] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 283.822106][ T9116] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 283.822120][ T9116] [ 284.129913][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.917'. [ 284.129993][ T9130] tipc: Resetting bearer [ 284.156522][ T9130] tipc: Disabling bearer [ 285.295039][ T9138] siw: device registration error -23 [ 285.431432][ T9138] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 287.097746][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.925'. [ 287.118293][ T9163] UBIFS error (pid: 9163): cannot open "ubi:0", error -19 [ 287.196516][ T9166] FAULT_INJECTION: forcing a failure. [ 287.196516][ T9166] name failslab, interval 1, probability 0, space 0, times 0 [ 287.196536][ T9166] CPU: 0 UID: 0 PID: 9166 Comm: syz.1.926 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.196550][ T9166] Tainted: [L]=SOFTLOCKUP [ 287.196554][ T9166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 287.196560][ T9166] Call Trace: [ 287.196563][ T9166] [ 287.196568][ T9166] dump_stack_lvl+0x100/0x190 [ 287.196590][ T9166] should_fail_ex.cold+0x5/0xa [ 287.196607][ T9166] should_failslab+0xc2/0x120 [ 287.196628][ T9166] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 287.196642][ T9166] ? key_alloc+0x423/0x1310 [ 287.196661][ T9166] kmemdup_noprof+0x29/0x60 [ 287.196674][ T9166] key_alloc+0x423/0x1310 [ 287.196694][ T9166] ? __pfx_key_alloc+0x10/0x10 [ 287.196709][ T9166] ? __pfx_keyring_search_iterator+0x10/0x10 [ 287.196728][ T9166] keyring_alloc+0x44/0xc0 [ 287.196744][ T9166] look_up_user_keyrings+0x438/0x760 [ 287.196760][ T9166] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 287.196778][ T9166] ? get_pid_task+0xfc/0x250 [ 287.196804][ T9166] lookup_user_key+0x275/0x14f0 [ 287.196823][ T9166] ? find_held_lock+0x2b/0x80 [ 287.196863][ T9166] ? __pfx_lookup_user_key+0x10/0x10 [ 287.196896][ T9166] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 287.196928][ T9166] ? strncpy_from_user+0x19d/0x2d0 [ 287.196952][ T9166] __do_sys_add_key+0x2a6/0x460 [ 287.196972][ T9166] ? __pfx___do_sys_add_key+0x10/0x10 [ 287.197000][ T9166] __do_fast_syscall_32+0x14b/0x8c0 [ 287.197030][ T9166] do_fast_syscall_32+0x32/0x70 [ 287.197055][ T9166] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 287.197080][ T9166] RIP: 0023:0xf748efbc [ 287.197116][ T9166] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 287.197136][ T9166] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 287.197155][ T9166] RAX: ffffffffffffffda RBX: 0000000080000bc0 RCX: 0000000000000000 [ 287.197168][ T9166] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000fffffffc [ 287.197178][ T9166] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 287.197188][ T9166] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 287.197199][ T9166] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 287.197224][ T9166] [ 288.862028][ T9196] Console: switching to colour dummy device 80x25 [ 289.214620][ T9199] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 289.230158][ T9199] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 289.230407][ T9199] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 289.230983][ T9199] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 289.238562][ T9199] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 289.277913][ T9199] pci 0000:00:01.0: Adding to iommu group 1 [ 289.288419][ T9199] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 289.288437][ T9199] pci 0000:00:01.0: vgaarb: bridge control possible [ 289.288447][ T9199] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 289.307581][ T9199] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 289.307815][ T9199] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 289.334112][ T9199] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 289.362818][ T9199] [drm] Found bochs VGA, ID 0xb0c5. [ 289.362835][ T9199] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 289.417808][ T9199] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 289.726586][ T9199] Console: switching to colour frame buffer device 160x50 [ 289.760111][ T9199] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 292.224263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 292.570603][ T9236] fuse: Bad value for 'fd' [ 293.602637][ T9253] profile_transition: unconfined exec no attachment [ 293.656165][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.947'. [ 293.690811][ T9254] profile_transition: unconfined exec no attachment [ 294.614304][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 294.664289][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 294.744245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 295.198574][ T9275] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 295.314376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 295.774272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 295.904340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 295.974283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 296.907132][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.956'. [ 296.908517][ T9284] netlink: 104 bytes leftover after parsing attributes in process `syz.1.956'. [ 296.908535][ T9284] netlink: 104 bytes leftover after parsing attributes in process `syz.1.956'. [ 297.948642][ T9287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.949376][ T9287] gretap1: left promiscuous mode [ 297.950499][ T9287] bridge1: left promiscuous mode [ 297.950514][ T9287] bridge1: left allmulticast mode [ 299.192141][ T9310] netlink: 'syz.1.964': attribute type 1 has an invalid length. [ 299.205204][ T9310] bond1: entered promiscuous mode [ 299.205407][ T9310] 8021q: adding VLAN 0 to HW filter on device bond1 [ 299.236838][ T9310] bond1: (slave bridge3): making interface the new active one [ 299.236852][ T9310] bridge3: entered promiscuous mode [ 299.237655][ T9310] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 299.262879][ T9310] ipvlan2: entered allmulticast mode [ 299.262891][ T9310] bond1: entered allmulticast mode [ 299.262899][ T9310] bridge3: entered allmulticast mode [ 299.263173][ T9310] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 299.263183][ T9310] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 299.583965][ T859] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 299.733995][ T859] usb 5-1: Using ep0 maxpacket: 32 [ 299.736074][ T859] usb 5-1: unable to get BOS descriptor or descriptor too short [ 299.736122][ T859] usb 5-1: New USB device found: idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 299.737016][ T859] usb 5-1: config 8 has an invalid interface number: 188 but max is 0 [ 299.737057][ T859] usb 5-1: config 8 has no interface number 0 [ 299.737118][ T859] usb 5-1: config 8 interface 188 has no altsetting 0 [ 299.739689][ T859] usb 5-1: string descriptor 0 read error: -22 [ 299.739752][ T859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.746852][ T859] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 299.746896][ T859] dw2102: su3000_power_ctrl: 1, initialized 0 [ 299.749400][ T859] dvb-usb: bulk message failed: -22 (2/0) [ 299.757166][ T859] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 299.758557][ T859] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 299.758601][ T859] usb 5-1: media controller created [ 299.758993][ T859] dvb-usb: bulk message failed: -22 (6/0) [ 299.759002][ T859] dw2102: i2c transfer failed. [ 299.759019][ T859] dvb-usb: bulk message failed: -22 (6/0) [ 299.759025][ T859] dw2102: i2c transfer failed. [ 299.759030][ T859] dvb-usb: bulk message failed: -22 (6/0) [ 299.759036][ T859] dw2102: i2c transfer failed. [ 299.759041][ T859] dvb-usb: bulk message failed: -22 (6/0) [ 299.759047][ T859] dw2102: i2c transfer failed. [ 299.759052][ T859] dvb-usb: bulk message failed: -22 (6/0) [ 299.759058][ T859] dw2102: i2c transfer failed. [ 299.759063][ T859] dvb-usb: bulk message failed: -22 (6/0) [ 299.759069][ T859] dw2102: i2c transfer failed. [ 299.759072][ T859] dvb-usb: MAC address: 02:02:02:02:02:02 [ 299.770768][ T859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 299.785916][ T859] dvb-usb: bulk message failed: -22 (3/0) [ 299.785928][ T859] dw2102: command 0x0e transfer failed. [ 299.785932][ T859] dvb-usb: bulk message failed: -22 (3/0) [ 299.785938][ T859] dw2102: command 0x0e transfer failed. [ 300.031375][ T9316] tps6598x 2-0003: failed to read vendor ID: -11, vid: 0x0 [ 300.033221][ T9316] i2c i2c-2: new_device: Instantiated device tps6598x at 0x03 [ 300.070665][ T42] kauditd_printk_skb: 82 callbacks suppressed [ 300.070687][ T42] audit: type=1804 audit(1793805748.694:1257): pid=9331 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=invalid_pcr cause=open_writers comm="syz.3.968" name="/newroot/241/file0/file0" dev="9p" ino=73662673 res=1 errno=0 [ 300.104051][ T859] dvb-usb: bulk message failed: -22 (3/0) [ 300.104064][ T859] dw2102: command 0x0e transfer failed. [ 300.104068][ T859] dvb-usb: bulk message failed: -22 (3/0) [ 300.104074][ T859] dw2102: command 0x0e transfer failed. [ 300.104078][ T859] dvb-usb: bulk message failed: -22 (1/0) [ 300.104083][ T859] dw2102: command 0x51 transfer failed. [ 300.107006][ T9333] profile_transition: unconfined exec no attachment [ 300.126793][ T859] DVB: Unable to find symbol ds3000_attach() [ 300.126802][ T859] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 300.136702][ T9334] profile_transition: unconfined exec no attachment [ 300.183993][ T859] rc_core: IR keymap rc-su3000 not found [ 300.184013][ T859] Registered IR keymap rc-empty [ 300.187070][ T859] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 300.188904][ T859] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input13 [ 300.201024][ T859] dvb-usb: schedule remote query interval to 150 msecs. [ 300.201070][ T859] dw2102: su3000_power_ctrl: 0, initialized 1 [ 300.201081][ T859] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 300.205248][ T859] usb 5-1: USB disconnect, device number 10 [ 300.281764][ T859] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 300.448299][ T9340] tipc: Resetting bearer [ 301.274422][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.274466][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.274498][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.274528][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.479204][ T9351] syzkaller0: entered promiscuous mode [ 301.479223][ T9351] syzkaller0: entered allmulticast mode [ 301.765322][ T9357] FAULT_INJECTION: forcing a failure. [ 301.765322][ T9357] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 301.765357][ T9357] CPU: 0 UID: 0 PID: 9357 Comm: syz.1.976 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.765384][ T9357] Tainted: [L]=SOFTLOCKUP [ 301.765391][ T9357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 301.765402][ T9357] Call Trace: [ 301.765410][ T9357] [ 301.765417][ T9357] dump_stack_lvl+0x100/0x190 [ 301.765536][ T9357] should_fail_ex.cold+0x5/0xa [ 301.765574][ T9357] should_fail_alloc_page+0xeb/0x140 [ 301.765631][ T9357] prepare_alloc_pages+0x1f0/0x5b0 [ 301.765659][ T9357] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 301.765689][ T9357] ? do_raw_spin_unlock+0x145/0x1e0 [ 301.765728][ T9357] ? lock_acquire+0x1d1/0x380 [ 301.765747][ T9357] ? clockevents_program_event+0x1bf/0x820 [ 301.765792][ T9357] ? find_held_lock+0x2b/0x80 [ 301.765818][ T9357] ? clockevents_program_event+0x1bf/0x820 [ 301.765846][ T9357] ? clockevents_program_event+0x1bf/0x820 [ 301.765876][ T9357] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 301.765904][ T9357] ? ktime_expiry_to_cycles+0xc0/0x2c0 [ 301.765928][ T9357] ? ktime_expiry_to_cycles+0x3c/0x2c0 [ 301.765958][ T9357] ? clockevents_program_event+0x1ef/0x820 [ 301.765994][ T9357] ? find_held_lock+0x2b/0x80 [ 301.766020][ T9357] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 301.766038][ T9357] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 301.766060][ T9357] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 301.766086][ T9357] ? policy_nodemask+0xed/0x5e0 [ 301.766110][ T9357] alloc_pages_mpol+0x201/0x560 [ 301.766139][ T9357] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 301.766169][ T9357] ___kmalloc_large_node+0x103/0x170 [ 301.766194][ T9357] __kmalloc_large_node_noprof+0x1c/0x70 [ 301.766215][ T9357] ? __mutex_unlock_slowpath+0x35d/0x930 [ 301.766264][ T9357] __kmalloc_noprof+0x5a3/0x840 [ 301.766283][ T9357] ? __seq_open_private+0x22/0xd0 [ 301.766307][ T9357] __seq_open_private+0x22/0xd0 [ 301.766327][ T9357] __tracing_open+0x99/0xa80 [ 301.766349][ T9357] tracing_open+0x26b/0x460 [ 301.766370][ T9357] do_dentry_open+0x674/0x1470 [ 301.766391][ T9357] ? __pfx_tracing_open+0x10/0x10 [ 301.766412][ T9357] vfs_open_consume+0xcc/0x460 [ 301.766441][ T9357] path_openat+0x1547/0x23f0 [ 301.766467][ T9357] ? __pfx_path_openat+0x10/0x10 [ 301.766496][ T9357] do_file_open+0x20e/0x430 [ 301.766519][ T9357] ? __pfx_do_file_open+0x10/0x10 [ 301.766559][ T9357] ? _raw_spin_unlock+0x28/0x50 [ 301.766578][ T9357] ? alloc_fd+0x471/0x7a0 [ 301.766606][ T9357] do_sys_openat2+0x163/0x1d0 [ 301.766628][ T9357] ? __pfx_do_sys_openat2+0x10/0x10 [ 301.766659][ T9357] __ia32_compat_sys_openat+0x12d/0x210 [ 301.766683][ T9357] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 301.766715][ T9357] __do_fast_syscall_32+0x14b/0x8c0 [ 301.766743][ T9357] do_fast_syscall_32+0x32/0x70 [ 301.766769][ T9357] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 301.766792][ T9357] RIP: 0023:0xf748efbc [ 301.766807][ T9357] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 301.766825][ T9357] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 301.766843][ T9357] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0 [ 301.766854][ T9357] RDX: 0000000000048342 RSI: 00000000000001a1 RDI: 0000000000000000 [ 301.766866][ T9357] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 301.766877][ T9357] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 301.766889][ T9357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 301.766915][ T9357] [ 304.050928][ T9384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.053258][ T9384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.144020][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.144047][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.144064][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.144081][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.621272][ T9435] syz_tun: entered allmulticast mode [ 311.977990][ T9482] syzkaller0: entered promiscuous mode [ 311.978424][ T9482] syzkaller0: entered allmulticast mode [ 312.052137][ T9483] Console: switching to colour dummy device 80x25 [ 312.922713][ T9484] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 312.949873][ T9484] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 312.949976][ T9484] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 312.950152][ T9484] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 312.950668][ T9484] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 313.002343][ T9484] pci 0000:00:01.0: Adding to iommu group 1 [ 313.089020][ T9484] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 313.089034][ T9484] pci 0000:00:01.0: vgaarb: bridge control possible [ 313.089041][ T9484] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 313.143560][ T9484] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 313.143693][ T9484] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 313.158249][ T9484] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 313.236546][ T9484] [drm] Found bochs VGA, ID 0xb0c5. [ 313.236565][ T9484] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 313.274269][ T9484] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 313.478389][ T9484] Console: switching to colour frame buffer device 160x50 [ 313.533185][ T9484] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 314.562493][ T9525] netlink: 'syz.3.1021': attribute type 1 has an invalid length. [ 314.587969][ T9525] 8021q: adding VLAN 0 to HW filter on device bond1 [ 314.622455][ T9525] bond1: (slave gretap1): making interface the new active one [ 314.623864][ T9525] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 316.677509][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.677747][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.451358][ T9542] lo: entered allmulticast mode [ 317.792438][ T9545] Console: switching to colour dummy device 80x25 [ 318.193814][ T9547] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 318.206491][ T9547] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 318.206703][ T9547] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 318.207097][ T9547] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 318.207825][ T9547] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 318.223661][ T9547] pci 0000:00:01.0: Adding to iommu group 1 [ 318.231048][ T9546] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1034'. [ 318.246372][ T9547] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 318.246385][ T9547] pci 0000:00:01.0: vgaarb: bridge control possible [ 318.246392][ T9547] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 318.259831][ T9547] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 318.259939][ T9547] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 318.267036][ T9547] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 318.293069][ T9547] [drm] Found bochs VGA, ID 0xb0c5. [ 318.293083][ T9547] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 318.321747][ T9547] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 318.556089][ T9547] Console: switching to colour frame buffer device 160x50 [ 318.595517][ T9547] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 319.433005][ T9571] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.433271][ T9571] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.642698][ T9571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.658522][ T9571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.780531][ T9580] profile_transition: unconfined exec no attachment [ 319.821659][ T9581] profile_transition: unconfined exec no attachment [ 320.076552][ T9588] profile_transition: unconfined exec no attachment [ 320.145146][ T9590] profile_transition: unconfined exec no attachment [ 320.252724][ T9593] profile_transition: unconfined exec no attachment [ 320.253943][ T9592] profile_transition: unconfined exec no attachment [ 320.348160][ T9595] profile_transition: unconfined exec no attachment [ 320.632468][ T9596] profile_transition: unconfined exec no attachment [ 321.001713][ T9587] syzkaller0: entered promiscuous mode [ 321.001906][ T9587] syzkaller0: entered allmulticast mode [ 321.057871][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.484635][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.484771][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.484880][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.345770][ T9606] syzkaller0: entered promiscuous mode [ 322.345787][ T9606] syzkaller0: entered allmulticast mode [ 323.203114][ T9622] loop9: detected capacity change from 0 to 7 [ 323.209350][ T9622] Buffer I/O error on dev loop9, logical block 0, async page read [ 323.209378][ T9622] Buffer I/O error on dev loop9, logical block 0, async page read [ 323.209396][ T9622] Buffer I/O error on dev loop9, logical block 0, async page read [ 323.209410][ T9622] Buffer I/O error on dev loop9, logical block 0, async page read [ 323.209436][ T9622] Buffer I/O error on dev loop9, logical block 0, async page read [ 323.209468][ T9622] Buffer I/O error on dev loop9, logical block 0, async page read [ 323.209491][ T9622] Buffer I/O error on dev loop9, logical block 0, async page read [ 323.209505][ T9622] ldm_validate_partition_table(): Disk read failed. [ 323.209528][ T9622] Buffer I/O error on dev loop9, logical block 0, async page read [ 323.209554][ T9622] Buffer I/O error on dev loop9, logical block 0, async page read [ 323.209579][ T9622] Buffer I/O error on dev loop9, logical block 0, async page read [ 323.209603][ T9622] Dev loop9: unable to read RDB block 0 [ 323.209633][ T9622] loop9: unable to read partition table [ 323.209724][ T9622] loop9: partition table beyond EOD, truncated [ 323.209733][ T9622] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 323.209733][ T9622] ) failed (rc=-5) [ 323.881493][ T9633] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 323.954632][ T9633] md: invalid raid superblock magic on ram6 [ 323.954649][ T9633] md: ram6 does not have a valid v0.90 superblock, not importing! [ 324.024255][ T9633] md: invalid raid superblock magic on ram7 [ 324.024268][ T9633] md: ram7 does not have a valid v0.90 superblock, not importing! [ 328.763838][ T9694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1066'. [ 330.104072][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 330.654725][ T24] usb 5-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=7.04 [ 330.655418][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.655439][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 330.655474][ T24] usb 5-1: Dual-Role OTG device on HNP port [ 330.655757][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.661509][ C2] ------------[ cut here ]------------ [ 330.661519][ C2] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 330.661533][ C2] WARNING: drivers/usb/gadget/udc/core.c:124 at usb_ep_enable+0x3e6/0x490, CPU#2: udevd/5200 [ 330.686565][ C2] Modules linked in: [ 330.687931][ C2] CPU: 2 UID: 0 PID: 5200 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 330.691143][ C2] Tainted: [L]=SOFTLOCKUP [ 330.692945][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 330.696663][ C2] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 330.698913][ C2] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d ea b3 86 0a 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 00 b9 fb 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 a0 ab fb 8c [ 330.705530][ C2] RSP: 0018:ffffc90000538a10 EFLAGS: 00010046 [ 330.708060][ C2] RAX: dffffc0000000000 RBX: ffff888024b6c0e0 RCX: ffffffff8cfbf000 [ 330.710791][ C2] RDX: 0000000000000081 RSI: ffffffff8cfbb900 RDI: ffffffff92785cd0 [ 330.713806][ C2] RBP: 0000000000000081 R08: ffffffff8cfbabe0 R09: 0000000000000000 [ 330.716763][ C2] R10: ffffffff926ad95f R11: 0000000000000002 R12: ffffffff8cfbabe0 [ 330.719772][ C2] R13: 0000000000000000 R14: ffff888024b6c0e0 R15: ffff888044ddf8a0 [ 330.722308][ C2] FS: 00007fa26e400880(0000) GS:ffff88809547e000(0000) knlGS:0000000000000000 [ 330.725823][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.728618][ C2] CR2: 00000000f7f955c0 CR3: 00000000230d5000 CR4: 0000000000352ef0 [ 330.731120][ C2] Call Trace: [ 330.732179][ C2] [ 330.733403][ C2] hidg_set_alt+0x190/0xa10 [ 330.735313][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 330.737351][ C2] ? rcu_is_watching+0x13/0xc0 [ 330.738918][ C2] composite_setup+0x2ccf/0x9290 [ 330.740925][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 330.742559][ C2] ? __pfx_composite_setup+0x10/0x10 [ 330.744222][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 330.746154][ C2] ? do_raw_spin_lock+0x128/0x260 [ 330.748074][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 330.749860][ C2] ? configfs_composite_setup+0xfb/0x130 [ 330.751711][ C2] configfs_composite_setup+0xfb/0x130 [ 330.753579][ C2] dummy_timer+0x20a0/0x3840 [ 330.755066][ C2] ? do_raw_spin_lock+0x128/0x260 [ 330.757055][ C2] ? find_held_lock+0x2b/0x80 [ 330.758731][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 330.760523][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 330.762813][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 330.764809][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 330.766988][ C2] ? __pfx_debug_object_deactivate+0x10/0x10 [ 330.769546][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 330.771636][ C2] ? mark_held_locks+0x40/0x70 [ 330.773690][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 330.776167][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 330.778291][ C2] __hrtimer_run_queues+0x448/0x9a0 [ 330.780492][ C2] hrtimer_run_softirq+0x1ca/0x360 [ 330.782641][ C2] handle_softirqs+0x216/0xa20 [ 330.784712][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 330.786921][ C2] ? _raw_spin_unlock+0x28/0x50 [ 330.789005][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 330.791462][ C2] __irq_exit_rcu+0x178/0x220 [ 330.793532][ C2] irq_exit_rcu+0x9/0x30 [ 330.795387][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 330.797755][ C2] [ 330.798996][ C2] [ 330.800307][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 330.802827][ C2] RIP: 0010:__sanitizer_cov_trace_pc+0x10/0x70 [ 330.805409][ C2] Code: 00 00 5b e9 d2 2f 2b 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 05 5c 4b ac 13 48 8b 34 24 <65> 48 8b 15 40 4b ac 13 48 63 c8 a9 00 01 00 ff 74 1e f6 c4 01 74 [ 330.813306][ C2] RSP: 0018:ffffc9002705f950 EFLAGS: 00000246 [ 330.815950][ C2] RAX: 8000000000000000 RBX: ffff88804c6ec818 RCX: 0000000000000000 [ 330.819316][ C2] RDX: 1ffff11008467ba4 RSI: ffffffff84edd7b7 RDI: ffffc9002705faa0 [ 330.822665][ C2] RBP: ffffc9002705faa0 R08: 0000000000000000 R09: 0000000000000001 [ 330.826033][ C2] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88804233dd00 [ 330.829427][ C2] R13: 0000000000000000 R14: ffff88804233dd20 R15: 0000000000000000 [ 330.832736][ C2] ? tomoyo_path_matches_pattern+0x17/0x280 [ 330.835274][ C2] tomoyo_path_matches_pattern+0x17/0x280 [ 330.837650][ C2] tomoyo_check_path_acl+0x182/0x210 [ 330.839835][ C2] tomoyo_check_acl+0x143/0x410 [ 330.841932][ C2] ? __pfx_tomoyo_check_path_acl+0x10/0x10 [ 330.844424][ C2] tomoyo_path_permission+0x1ff/0x3b0 [ 330.846743][ C2] tomoyo_path_perm+0x364/0x460 [ 330.848830][ C2] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 330.851196][ C2] ? filename_lookup+0x3bb/0x590 [ 330.853366][ C2] ? __might_fault+0xc5/0x140 [ 330.855441][ C2] ? find_held_lock+0x2b/0x80 [ 330.857468][ C2] ? __might_fault+0xc5/0x140 [ 330.859504][ C2] ? __might_fault+0xc5/0x140 [ 330.861550][ C2] security_inode_getattr+0x116/0x280 [ 330.863882][ C2] vfs_statx+0x11f/0x3f0 [ 330.865740][ C2] ? __pfx_vfs_statx+0x10/0x10 [ 330.867819][ C2] ? do_getname+0x191/0x390 [ 330.869752][ C2] vfs_fstatat+0x77/0xe0 [ 330.871344][ C2] __do_sys_newfstatat+0x9d/0x120 [ 330.873324][ C2] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 330.875180][ C2] ? ktime_get_ts64+0x306/0x420 [ 330.876729][ C2] do_syscall_64+0x121/0x770 [ 330.878226][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.880055][ C2] RIP: 0033:0x7fa26dd11b0a [ 330.881513][ C2] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 330.887465][ C2] RSP: 002b:00007ffd3751a758 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 330.890125][ C2] RAX: ffffffffffffffda RBX: 00005590bb4d8400 RCX: 00007fa26dd11b0a [ 330.892620][ C2] RDX: 00007ffd3751a760 RSI: 00005590bb4c6296 RDI: 00000000ffffff9c [ 330.895143][ C2] RBP: 00005590bbab1148 R08: 0000000013b3e414 R09: 0000000000000001 [ 330.897722][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.900193][ C2] R13: 00007ffd3751a760 R14: 0000000000000000 R15: 0000000000000000 [ 330.902649][ C2] [ 330.903628][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 330.905896][ C2] CPU: 2 UID: 0 PID: 5200 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 330.909083][ C2] Tainted: [L]=SOFTLOCKUP [ 330.910427][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 330.913542][ C2] Call Trace: [ 330.914671][ C2] [ 330.915574][ C2] dump_stack_lvl+0x100/0x190 [ 330.917044][ C2] vpanic+0x2dc/0x6f8 [ 330.918301][ C2] panic+0xd1/0xe0 [ 330.919483][ C2] ? __pfx_panic+0x10/0x10 [ 330.920880][ C2] check_panic_on_warn.cold+0x19/0x34 [ 330.922577][ C2] ? usb_ep_enable+0x3e6/0x490 [ 330.924067][ C2] __warn.cold+0x191/0x321 [ 330.925483][ C2] __report_bug+0x30f/0x440 [ 330.926904][ C2] ? usb_ep_enable+0x3e6/0x490 [ 330.928393][ C2] ? __pfx___report_bug+0x10/0x10 [ 330.929952][ C2] ? try_to_wake_up+0x158/0x1ca0 [ 330.931517][ C2] report_bug_entry+0xe2/0x290 [ 330.933036][ C2] ? usb_ep_enable+0x3f8/0x490 [ 330.934568][ C2] handle_bug+0x1cd/0x2a0 [ 330.935933][ C2] exc_invalid_op+0x17/0x50 [ 330.937373][ C2] asm_exc_invalid_op+0x1a/0x20 [ 330.938856][ C2] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 330.940537][ C2] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d ea b3 86 0a 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 00 b9 fb 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 a0 ab fb 8c [ 330.946468][ C2] RSP: 0018:ffffc90000538a10 EFLAGS: 00010046 [ 330.948399][ C2] RAX: dffffc0000000000 RBX: ffff888024b6c0e0 RCX: ffffffff8cfbf000 [ 330.950896][ C2] RDX: 0000000000000081 RSI: ffffffff8cfbb900 RDI: ffffffff92785cd0 [ 330.953380][ C2] RBP: 0000000000000081 R08: ffffffff8cfbabe0 R09: 0000000000000000 [ 330.955821][ C2] R10: ffffffff926ad95f R11: 0000000000000002 R12: ffffffff8cfbabe0 [ 330.958264][ C2] R13: 0000000000000000 R14: ffff888024b6c0e0 R15: ffff888044ddf8a0 [ 330.960759][ C2] hidg_set_alt+0x190/0xa10 [ 330.962165][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 330.963780][ C2] ? rcu_is_watching+0x13/0xc0 [ 330.965284][ C2] composite_setup+0x2ccf/0x9290 [ 330.966887][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 330.968465][ C2] ? __pfx_composite_setup+0x10/0x10 [ 330.970149][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 330.971872][ C2] ? do_raw_spin_lock+0x128/0x260 [ 330.973458][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 330.975162][ C2] ? configfs_composite_setup+0xfb/0x130 [ 330.976908][ C2] configfs_composite_setup+0xfb/0x130 [ 330.978607][ C2] dummy_timer+0x20a0/0x3840 [ 330.980070][ C2] ? do_raw_spin_lock+0x128/0x260 [ 330.981696][ C2] ? find_held_lock+0x2b/0x80 [ 330.983177][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 330.985013][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 330.986772][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 330.988587][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 330.990317][ C2] ? __pfx_debug_object_deactivate+0x10/0x10 [ 330.992162][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 330.993746][ C2] ? mark_held_locks+0x40/0x70 [ 330.995246][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 330.997059][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 330.998589][ C2] __hrtimer_run_queues+0x448/0x9a0 [ 331.000213][ C2] hrtimer_run_softirq+0x1ca/0x360 [ 331.001811][ C2] handle_softirqs+0x216/0xa20 [ 331.003296][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 331.004963][ C2] ? _raw_spin_unlock+0x28/0x50 [ 331.006489][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 331.008212][ C2] __irq_exit_rcu+0x178/0x220 [ 331.009708][ C2] irq_exit_rcu+0x9/0x30 [ 331.011082][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 331.012836][ C2] [ 331.013785][ C2] [ 331.014744][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 331.016622][ C2] RIP: 0010:__sanitizer_cov_trace_pc+0x10/0x70 [ 331.018527][ C2] Code: 00 00 5b e9 d2 2f 2b 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 05 5c 4b ac 13 48 8b 34 24 <65> 48 8b 15 40 4b ac 13 48 63 c8 a9 00 01 00 ff 74 1e f6 c4 01 74 [ 331.024410][ C2] RSP: 0018:ffffc9002705f950 EFLAGS: 00000246 [ 331.026319][ C2] RAX: 8000000000000000 RBX: ffff88804c6ec818 RCX: 0000000000000000 [ 331.028749][ C2] RDX: 1ffff11008467ba4 RSI: ffffffff84edd7b7 RDI: ffffc9002705faa0 [ 331.031184][ C2] RBP: ffffc9002705faa0 R08: 0000000000000000 R09: 0000000000000001 [ 331.033621][ C2] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88804233dd00 [ 331.036058][ C2] R13: 0000000000000000 R14: ffff88804233dd20 R15: 0000000000000000 [ 331.038491][ C2] ? tomoyo_path_matches_pattern+0x17/0x280 [ 331.040395][ C2] tomoyo_path_matches_pattern+0x17/0x280 [ 331.042192][ C2] tomoyo_check_path_acl+0x182/0x210 [ 331.043849][ C2] tomoyo_check_acl+0x143/0x410 [ 331.045420][ C2] ? __pfx_tomoyo_check_path_acl+0x10/0x10 [ 331.047223][ C2] tomoyo_path_permission+0x1ff/0x3b0 [ 331.048899][ C2] tomoyo_path_perm+0x364/0x460 [ 331.050414][ C2] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 331.052083][ C2] ? filename_lookup+0x3bb/0x590 [ 331.053663][ C2] ? __might_fault+0xc5/0x140 [ 331.055152][ C2] ? find_held_lock+0x2b/0x80 [ 331.056617][ C2] ? __might_fault+0xc5/0x140 [ 331.058121][ C2] ? __might_fault+0xc5/0x140 [ 331.059585][ C2] security_inode_getattr+0x116/0x280 [ 331.061269][ C2] vfs_statx+0x11f/0x3f0 [ 331.062590][ C2] ? __pfx_vfs_statx+0x10/0x10 [ 331.064077][ C2] ? do_getname+0x191/0x390 [ 331.065518][ C2] vfs_fstatat+0x77/0xe0 [ 331.066849][ C2] __do_sys_newfstatat+0x9d/0x120 [ 331.068440][ C2] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 331.070196][ C2] ? ktime_get_ts64+0x306/0x420 [ 331.071724][ C2] do_syscall_64+0x121/0x770 [ 331.073159][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.075013][ C2] RIP: 0033:0x7fa26dd11b0a [ 331.076464][ C2] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 331.082405][ C2] RSP: 002b:00007ffd3751a758 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 331.084970][ C2] RAX: ffffffffffffffda RBX: 00005590bb4d8400 RCX: 00007fa26dd11b0a [ 331.087377][ C2] RDX: 00007ffd3751a760 RSI: 00005590bb4c6296 RDI: 00000000ffffff9c [ 331.089808][ C2] RBP: 00005590bbab1148 R08: 0000000013b3e414 R09: 0000000000000001 [ 331.092233][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.094675][ C2] R13: 00007ffd3751a760 R14: 0000000000000000 R15: 0000000000000000 [ 331.097092][ C2] [ 331.098774][ C2] Kernel Offset: disabled [ 331.100173][ C2] Rebooting in 86400 seconds..