last executing test programs: 4m53.418110389s ago: executing program 1 (id=42): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) r4 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10, 0x80800) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f0000000140)={'TPROXY\x00'}, &(0x7f0000000180)=0x1e) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r5}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080)={r5}) close(0x3) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbef, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000894}, 0x884) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x8) 4m53.289658344s ago: executing program 1 (id=43): mount$overlay(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x81) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000140)) openat$dir(0xffffff9c, &(0x7f00000001c0)='./file0\x00', 0x501000, 0x60) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) mount_setattr(r1, &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000180)={0x4, 0xf8, 0x0, {r2}}, 0x20) syz_pidfd_open(r0, 0x0) r3 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r3, 0x0) connect$unix(r3, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) syz_open_procfs$userns(r0, &(0x7f0000000000)) 4m52.920817806s ago: executing program 1 (id=47): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x76) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x5, @void}, 0x10) r5 = socket(0x2, 0x80805, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)="da95d6274535827e8a475834023a617735ebb40bc642a3c0657128c63aeb86152ef6b93facadb929af2d5844717acace590b32cb67df555a9a05598e17b400ea7abfb374c6a77e21544c", 0x4a}, {&(0x7f0000000580)="a51f3fe51b6a04a16c487ef777e64a1db1d19e16526d9f62749e061988348bbaeb6434b78fedae16cf6f2cd77b99438f628c267c7c1e5152859ed2ef803cfe1981434867ff136fad", 0x48}, {&(0x7f0000000640)="a9d85d3006b5d98b9691b2714133e14b3ac26aa302d8e5660331b425ec86323b9126d51f5860cbc32b103b453c0e4ac1783f01b0945d7cc513197f75ecd5dcb0bf3dbd386e13708e23e4cdfa28c9ce49a2df386b04a28db40838e2e20a7a1174e914c6697f21aa9b4c8a1ddcce02a022aacb9f792b4fd4a9547214064a5ea53d6450006c42ef39d47e5cc9a0323107e8e0cf0fdff69bbdc6", 0x98}, {&(0x7f0000000700)="9c98d021d4e928a7bbf627b7a8fc6a8d2e9e68f18df718963e3a96b3abf2b5857f4530b54a124f43173ef3c646d7426a0814b449cef978d1d5db5a417db383eb78f083f004c2a9b6f347df603e5eaf11d4fdfd1c6651e6526a332b9891f1877559e1e12e39de7a534ebe68a9f87116c374b8f7b0cb89c1164f", 0x79}], 0x4}, 0x11) sendmmsg$inet(r5, &(0x7f0000000600)=[{{&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000001c0)='C', 0x1}], 0x1}}], 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r8) getsockname$packet(r8, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x4c, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r9}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x33}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r10, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) syz_open_dev$usbmon(&(0x7f0000000280), 0x7ffffffe, 0x2e2900) 4m52.618688464s ago: executing program 1 (id=49): r0 = socket$inet6(0xa, 0x80002, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='1', 0x1) (async) r5 = socket$inet_udp(0x2, 0x2, 0x11) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) unshare(0x22020600) (async) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) (async) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x11, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x1, 'rr\x00', 0x0, 0x0, 0x1}, 0x2c) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r8, &(0x7f0000000300)="0303ec58000000004500001c0000000040110000ac14140b7f0000014e214e24", 0xffeb, 0x0, &(0x7f0000000400)={0x2, 0x0, @dev}, 0x10) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000006b0003055dce29aa72ce863b292f68d1bc4258d384f784a015f10dcd264ed6b3f4911af979a438642eda7dc84228b95b133e8e63f9678184c29f6dd57070b6cf01bcc21781cccf34ac2fd8336584796936977292cde010f45da18296575a55b38b37", @ANYRES32=r0, @ANYRESDEC, @ANYRESHEX, @ANYRES64=r2], 0x4c}, 0x1, 0x0, 0x0, 0x40190}, 0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r9, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0xfffffff5, 0x5, 0x28001}}) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4(r10, 0x0, 0x0, 0x800) (async) r11 = fsopen(&(0x7f0000000300)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f00000001c0)='sec\x00', &(0x7f0000000200)='krb5i\x00', 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x6}]}, 0x8) 4m52.507977643s ago: executing program 1 (id=50): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000400)=0xe9, 0x4) syz_open_dev$sndctrl(&(0x7f0000000000), 0x8a01, 0xc00) 4m51.95089177s ago: executing program 1 (id=52): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x61) write$cgroup_int(r0, &(0x7f0000000200)=0xfffffffffffffffe, 0xf) 4m51.880368441s ago: executing program 32 (id=52): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x61) write$cgroup_int(r0, &(0x7f0000000200)=0xfffffffffffffffe, 0xf) 4m35.898051124s ago: executing program 2 (id=154): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x2, 0x1, 0x0, 0x46a, @vifc_lcl_ifindex, @empty}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x80000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x4000, 0x1}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r8) (async) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f00000002c0)={0x0, 0xfb87, 0x800, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10080700, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x125, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0) (async) syz_ublk_setup_queues(r9, r7, &(0x7f00000002c0)={0x0, 0xfb87, 0x800, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10080700, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x125, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="c8ed0ec2aff22b790000000000000000", 0x10) ioctl$SIOCGETMIFCNT_IN6(r9, 0x89e0, &(0x7f00000000c0)) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) 4m34.984488696s ago: executing program 4 (id=163): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) r3 = inotify_init() close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc01c586a, &(0x7f0000000300)={r4, &(0x7f0000000200)='\x00', 0x824400, &(0x7f0000000240)={@align, {0x4, 0x7, 0x80000001}}, 0x0, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x3}) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000340)={{{@in=@initdev, @in6=@mcast2}}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe4) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x7, 0x0}) 4m34.97344865s ago: executing program 4 (id=164): r0 = msgget(0x0, 0x7ba) msgrcv(r0, 0x0, 0x0, 0x2, 0x2000) (async) msgsnd(r0, &(0x7f0000003d40)={0x3}, 0x8, 0x800) (async) r1 = syz_open_dev$media(&(0x7f0000000580), 0x3, 0x20400) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f0000000080)={r1, 0xe, 0x791, 0x1}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_setup(0xffffff52, &(0x7f00000000c0)=0x0) (async) r4 = syz_io_uring_setup(0x41ac, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x1, 0x783}, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000080)) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) (async) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) (async) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io(r6, &(0x7f0000000080)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0x0}) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400a59500000000000000000a6842c8", @ANYRES32, @ANYBLOB="100002"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) connect$pppl2tp(r8, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) (async) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f00000051c0)={0x0, 0x1000}, 0x4) sendmmsg(r8, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r11, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @local, 0xb}, 0x1c) (async) io_uring_enter(r4, 0x2000, 0xfffffffa, 0x9, 0x0, 0x0) (async) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) 4m33.969841728s ago: executing program 0 (id=170): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe12}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r2, r8, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000, 0x0, r3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x1, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200, 0x0, 0x69, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x4, 0x10000, 0xea}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x2000, 0x3, 0x0, 0x0, r2}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r7, '\x00', {0x100, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r9, 0x4) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x6, 0x1, &(0x7f0000001540)=@raw=[@jmp={0x5, 0x0, 0x2, 0xb, 0x9, 0xfffffffffffffff0, 0x10}], &(0x7f0000001580)='GPL\x00', 0x6, 0xf8, &(0x7f00000015c0)=""/248, 0x41000, 0x35, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000016c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001700)={0x5, 0x5, 0x0, 0xffff}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001740)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000001780)=[{0x0, 0x1, 0xc, 0x1}, {0x1, 0x3, 0x2, 0x1}, {0x4, 0x2, 0x6, 0x2}, {0x1, 0x2, 0x6, 0xc}, {0x3, 0x3, 0xd, 0x1}, {0x4, 0x1, 0x5, 0xc}, {0x5, 0x1, 0x8, 0x9}, {0x5, 0x4, 0xf, 0x2}, {0x5, 0x3, 0x9, 0x4}], 0x10, 0xa5bb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0xd, 0xf, &(0x7f00000001c0)=@raw=[@generic={0x1, 0x5, 0x2, 0x1000, 0x3}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_fd={0x18, 0x2, 0x1, 0x0, r1}], &(0x7f0000000240)='syzkaller\x00', 0x10, 0x1000, &(0x7f0000000500)=""/4096, 0x41000, 0x20, '\x00', 0x0, @fallback=0x16, r2, 0x8, &(0x7f0000001500)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, r9, r10, 0xa, 0x0, &(0x7f0000001900)=[{0x3, 0x2, 0xb, 0xd}, {0x3, 0x2, 0x1, 0x8}, {0x3, 0x1, 0xa, 0x4}, {0x4, 0x5, 0x5, 0x1}, {0x0, 0x1, 0x6, 0xb}, {0x2, 0x2, 0x3, 0xa}, {0x3, 0x2, 0xf, 0x7}, {0x5, 0x3, 0xb, 0x9}, {0x5, 0x1, 0xf, 0xd}, {0x1, 0x5, 0xa, 0x5}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYBLOB="00000000000000ffe500020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48}, 0x94) 4m33.349898333s ago: executing program 4 (id=172): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x9, 0xb, 0x0, 0x2, 0x3}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x9000) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="6c6f636b20696f2b6d656d00d890c4c508df7c4972"], 0xc) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) close(0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a3000000000140000"], 0x118}}, 0x0) 4m33.221785425s ago: executing program 3 (id=173): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000240)="cd742d85ea", 0x0}, 0x50) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x4c, r6, 0x20, 0x1, 0x0, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x42}}}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x1d, 0x5b, "9212aafc2be381c21b1bcc9c0f5b6496d9f07159ddf948b924"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0xd0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8, 0x0, 0x1f}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4m33.121225093s ago: executing program 4 (id=174): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0xff, 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x0, @vifc_lcl_ifindex, @local}, 0x10) prctl$PR_SET_IO_FLUSHER(0x4e, 0x2) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000340)=""/110, 0x6e}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/118, 0x76}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000001c0)=""/17, 0x11}], 0x6, &(0x7f0000001fc0)=""/191, 0xbf}}], 0x1, 0x44, &(0x7f0000003700)={0x77359400}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x8082}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r4 = socket$kcm(0x23, 0x5, 0x0) listen(r4, 0x800) r5 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r5, &(0x7f0000000880)={&(0x7f0000000540)=@caif=@dgm, 0x80, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/232, 0xe8}], 0x1, &(0x7f00000007c0)=""/177, 0xb1}, 0x40002060) sendmsg$inet(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r7 = accept4(r4, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7) write(r3, &(0x7f0000000000)='3', 0x4e) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) 4m32.978116401s ago: executing program 0 (id=175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYBLOB="e04f00000a000200aaaaaaaaaa0c"], 0x28}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x71, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x41, 0x1}}}]}, 0x24}}, 0x0) 4m32.711367377s ago: executing program 2 (id=176): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x12) tkill(r0, 0x1) tkill(r0, 0x14) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000080)="040000000000", 0x6) fstatfs(r1, &(0x7f00000000c0)=""/77) 4m32.697394032s ago: executing program 0 (id=177): syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xf, 0xf, 0x8, 0x80, 0x4, 0x3, 0x80000000, 0x20000006, 0x4d, 0x5, 0x5d, 0xa, 0x5, 0xffff2d38, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x7, 0x0, 0x7, 0x23c5b, 0x1, 0xf, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x6, 0xdb63, 0x4000008c, 0x6, 0x5, 0x0, 0x4, 0x0, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x6, 0x3, 0x1, 0xf], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x2, 0x9, 0x7f, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x78, 0xe, 0xfffffffe, 0x6, 0x7, 0x7fff, 0x5, 0x400, 0x3fe, 0x7, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0x8, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x1009, 0x800, 0x47, 0x8000, 0xc25, 0xfe000000, 0xffff, 0x0, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x94f, 0x48c93690, 0x42, 0x3], [0x82, 0x408, 0x7, 0x5, 0xfffffffe, 0x6, 0x2, 0x9, 0x5, 0x8002, 0x4, 0x5, 0xb, 0x2, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x13, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x3ff, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x7b04, 0x7, 0x3, 0x3, 0x5, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x5, 0x2, 0xfffffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x2, 0x3, 0x0, 0x10000, 0xb8, 0x3, 0x28, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x20a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x8, 0x9, 0xfffffff9, 0xfffff000, 0x10000, 0x10001, 0x7e, 0x100, 0x9606, 0x7, 0xaf, 0x5, 0xfffffff9, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) r1 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="55000000200009afb72d13b2a4a2719302000000030b43026c26236925000400fe7f00000000000000003942cfd8880f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509a9a1f8baeb1898000000000100005a", 0x55}], 0x1}, 0x4000) write(r1, &(0x7f0000000040)="1c00000021002551071c0165ff00fc0202000000fe100f000ee1000c", 0x1c) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 4m32.553352962s ago: executing program 2 (id=178): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) openat$vicodec1(0xffffff9c, 0x0, 0x2, 0x0) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'xfrm0\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000015c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c1002, 0x92) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x40, 0x180) r6 = syz_clone3(&(0x7f0000000480)={0x10100, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300), {0x17}, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0xffffffffffffffff], 0x1, {r2}}, 0x58) setpgid(0x0, r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1002, 0x2c3) sendfile(r7, r5, 0x0, 0x40003) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x5}) write(r4, &(0x7f0000000a00)="c7", 0x1) sendfile(r4, r3, 0x0, 0x3ffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x18, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x9}, [@nested={0x4, 0xae}]}, 0x18}}, 0x0) recvmsg(r9, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1400) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 4m32.418011826s ago: executing program 4 (id=179): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x4f9f) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff040140861246200001010203010902200001010080fa0904000002ff04010007058102000200070501020002"], 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) syz_usb_ep_read(r2, 0x1, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001200)={0x1c, r4, 0x1, 0x70bd25, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r8 = openat$null(0xffffff9c, &(0x7f0000000000), 0x420000, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f0000000080)={0x200, 0x7}) 4m32.20326233s ago: executing program 0 (id=180): ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40246608, &(0x7f0000000080)={0x8, 0x7, 0x0, 0x7, 0x6836, 0x721e}) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x67, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x1, 'nq\x00', 0x1f, 0xfffffff8, 0x6f}, {@multicast1, 0x4e22, 0x2, 0x0, 0x80, 0x1ff}}, 0x44) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0xfca4, 0x0, 0x0, &(0x7f0000000440)=[@sndrcv={0x2c, 0x84, 0x1, {0x4, 0xfff, 0x200, 0x494655, 0x75f2, 0x3, 0x0, 0x4}}], 0x2c, 0x2400e044}, 0x20001080) 4m32.165574316s ago: executing program 3 (id=181): io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000000)={0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing\x00', 0xfb) mount(0x0, &(0x7f0000000140)='./tracing/file0\x00', &(0x7f0000000080)='tracefs\x00', 0x40008, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40880, 0x0) r1 = dup(r0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000100)=""/60, 0x3c}], 0x1) 4m32.159896158s ago: executing program 3 (id=182): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="00000100420001000100000000", 0xd, 0x1be) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)="27050200340f3c0006000b2fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600", 0x41}, {&(0x7f0000000680)="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", 0xf50}], 0x2}, 0x9cdc2384056f0939) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000ea00)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000440)="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", 0xfd}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000010000000100e7ff", @ANYRES32=r0, @ANYRES32=r1], 0x14, 0x1}}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f00000005c0)="1744670b9b3307ddc38146012379a405362e7cfdb515a7fc03831a9286b7f2d4069a76eb3e0517db63098b463e6aaf0a739f989a0672a6d2c22a5dc33e747b4cf6f8703f49a091f38afe87fddd17b7e28619d33d1246192e8c3b85344658552bd4389b11c433846ffe6bef84fd8fd5d84fbd95ca520bb11255eeb18f2f", 0x7d}, {&(0x7f0000001600)="dba4802363973138f87f8b3eb61fed40be13a5f43d49ade2140a9685c205112456bd7c438b80fcd2bea1adadcecf22dc6e6315cf1c4bb31911166429f6f28c24c0e62e8494bd35a63ed918290218179b54934b3e120e9ce387f9d6fabec515bd846d3e537fa6338888e35f5600363e0d2627a53ac6fa7661e335a0169f7d2b1ee3b0f70a5a77f03f546f3a7ade", 0x8d}, {&(0x7f00000016c0)="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", 0x1000}, {&(0x7f00000026c0)="b418b02d11eff36551883ce721ab8a2f7e6e856d7022a3f0e6c2d0a24a05a21fbffd0a539c4e26c71a0c29ae2df26c74c38064c9d0868eddb121bd7d0745e35688d31846b4dc82c95dbb49f080bbcb19375bc30ec9f58de8b398445de23437060b94bb011cd320cc80f6629d5eab176b5e12f7ddf11902b9f26df0442cc47e431ba2ba4a32867a42382b01cbbb10dd20607c2327ba30ce1553eedac9ae0340a80444e1ca86c9dc08e26a56083941bfd09f529d0240acde6156a7f1877c93e6d02da84b297ce72b", 0xc7}, {&(0x7f00000027c0)="4edb06f8b829cebbd4f2b90a25e3d13f99fea5745944ebc40818404113c2cd2764c7759caa42", 0x26}, {&(0x7f0000002800)="8a5f8ca839c51c593b738dcf08a3c4b9df0e8c51f9bf003cefb3cfcd249932a93388288e888250e948a1047094597c6c54db36bd08a567847c99580a541308b1e8b10e2cd2de5a762d44bf09aac2aeff074f6cd5678e02a672d44a4d426c2c69cb55c4fbda321aca56cf83e4d9354c98d19929b539402fc5b865b1b9a7c95bbe68b56af508ff5cb8fa3d4906f334a95175b146b87b119b187610c9fa32bc62c4884ef19627da9f114435690c811836a38d811e8eb219fa175b0af3f7bef793800d8ec8bc838bc0e123643b8a79770c17547ded808b463910", 0xd8}], 0x6, 0x0, 0x0, 0x40040}}, {{&(0x7f0000002940)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003f00)=[{&(0x7f00000029c0)="5f70f4e80a632d0a4741e118f60a6488ba71a2e389f98fa6e974f82557e16279e0e8845e58fd5045c4d83e6f698dcaee4b38d49fb08a16586ef02dfb5c468822fe8d23cde610244586501142c8badc3f8b5da0e404e8eb1608ed8b21ff45cd58e772b6b934b79cd9be53a115b64505599db32492fbc67d12025b1d597bba482a4d626e01eb025ab36348bbb908f33d1a9cfc10d110be07d179a4d3ae5ab7db310f14290ae6ecaabeca73997322", 0xad}, {&(0x7f0000002a80)="699cce1820bcf3208305d4a97865d0baf3e2238f9100018343dcdb456d830e06424a5d58", 0x24}, {&(0x7f0000002ac0)="fa0252b2959de0af953c79ee5e40ce7ca6e88b6fe9086d7fa773f9367e3cb439071b82dfb0b221ae4d8d9eccc498982f4f9da502e6c4bcb032004d4bbd970da3d50f", 0x42}, {&(0x7f0000002b40)="9ebfe66c6a24c8aa1ccab860463b12fb6604bfc3cf88da0cdaebe420726d2368ec50b946ce7187afa6a9433f2629c51fb5666b6cf33e2621735b6969314b5929820ace9f0cb3c26859a1922dc340c515818ced071e04cbf12dc286a57d820c81244296ff199ef01445cb93a2ac340450e2a348d1ac9d4cb7a2ef73ee0de0b410943fb145c004808d6a68c85ce58156bb5f68e3ae106a8b564fa5f654807873a0c28fd1a7b26c4341ed6a0a36", 0xac}, {&(0x7f0000002c00)="9ffe3d61abed0dac7a5f15e4dab89074adde96394846710f16beab4ae9c45d101b4b07d5b7959831e99c89d46fdb92dde59b4f25fbb80e11ad8e06ae6bc47e4668ffa3b7d5282cb011f901a5b067d4488f67e34a634bfb64a7c88a0461cca30c2f3a677c69f82b06eb0f575532d752", 0x6f}, {&(0x7f0000002c80)="53844b090998c9c79eecc445d8ecbd9cf7a52d11c74e0f01d5e56d1de4335102d214cadce8263084a066b1ab13634f33e6928811ae964b61e8487ca1bb661df6e305ceefa36224ee7d084b7dbcf2750eee31e138ed3da19f5b230192d92f60976ac6475ecf6b33c7c735f93f1e227dca717e3da360e88575", 0x78}, {&(0x7f0000002d00)="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", 0x1000}, {&(0x7f0000003d00)="6bf1427feadcebb953d865e070259c5ce541cf723bf776c165e638040010", 0x1e}, {&(0x7f0000004180)="36bfeb9387e930f2cef25f7b6f657fa3033aaa074ac7cf7a6c8091df2e45a9d58be2fd4a7e32f07551a0253584ff11f1d29b4432076c249f89cac4b434764fd3a3cd887d476b0e97a9b922f4ebcbe61aa69151f33420b57ba616e4be624608e91c8de0e886653445f2482a29b91337894475d764558a863f31fd3426cbb01da3df7c1db8d7fa9473f5517cd973bcb60cba02a10a4069857204ffe8ab465a71cf4c6a", 0xa2}, {&(0x7f0000003e00)="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", 0xfe}], 0xa, &(0x7f0000004040)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="28000000010000000100908f3bea35962d68473fa3bb53116d0000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRESHEX=r1, @ANYBLOB="2c0000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="300000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xfc, 0x1}}, {{&(0x7f0000006200)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f000000e700)=[{&(0x7f000000c280)="4991406ad7b1ae98c269d3872ca6b923d2aacdc5c86725e56d4f173a5e884123e1535288fc06566febaf90d51b5184d969806765a7cf32c43ce384bb0bd602e4f722655d13f24eafc4859eeb08acb7267279f2f253fb85f21a6e772db936300210428482bb2844", 0x67}, {&(0x7f000000c300)="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", 0x1000}, {&(0x7f000000d300)="16a1e6a70c06ccc7c53738b286064c9ef3075cfa079e3b3243b01b12b2bebf22e9cb3d62ddf89681f38ea7b7e050c13208f3b11bb376954b1cad1297a2df07ee6229271f4c4cb4190ceca056525593b2a186a176e46c1a39b9423c7521bb", 0x5e}, {&(0x7f000000d380)="5e6591f74723ea72feff28feeb32dddab64f78539f29145f2841a3e0d8d50748ba4627a8c07e7dd33e08e064a4c3c5b0e911872045b10acf946e987133f94d86bb77352f77a86177e1ae5233d69bdc11ff2e35ea78b065ac77012f958b2d7661ad14c2787f3bc5b2d24f196edf3b1e59c55cd6d0b5518068b7807d8f60680bcc0ccc78db00d76fe90f0adbb05f7a11da57393b58ec840ca19d26258312aa6f1b9a3ed99142878ce7885c263cad", 0xad}, {&(0x7f000000d440)="722d5425c91f0a00f489e577e19896274a2cb39e1dc11707fb5112da38828895a066bcd4a5c29f060d2598f8023d37b4fdb866a97818b90854bce3459e886c7ff8cfa0021e9e46f630441a4a743d40ab6fdc8799f3a210e6176f935b79492c399fe9cfcdb948afa8c257b9a8a52610b6dd4d14068bdfeca36df39e276981e6017a311f11d97ed562e60d93244f0248f0ca16849cef1d4c1b3a85a77f0ef3b2761e9f718e22994d63ceadf455834d25393bcd417883dd60dd7d6958de683951", 0xbf}, {&(0x7f000000d500)="4e4207688a481aa0c60c32420512591101c057f5fa1c09bc1ce1547769e39832b523e2e26ed0655268d02f1eb42a1a6c9efb640209704e1c90b59fb985a4001dab4e66ba349f93b8ff7e8d649f092bb88e9e3aa9a5c8fdc7aa69474fdde42e28e72221e31f04a63d0c4c247d96a515610ae9592976d87e54ef05bef23c9ae187884b45b3cf6b01c205c323fd9e0e659fdba6ce", 0x93}, {&(0x7f000000d5c0)="2fe2cb2097123148086ae325d525e5c1022a21511b9b32f87601c6c8643b3c3e507938096ad82e0367f8018a9cd7fb99b604957d2e57e30f289a7e6bc5f38bc2033c5fe8b801a4ce9140fbf0b729d68f58b0a762d2c9a111dcb096b9b20d0b4c62f7ace0886027db89b320e0a1973c891e214a30b370810b7c8e3c0fc084", 0x7e}, {&(0x7f000000d640)="fa046acff8f3ef24e032477262c58f8ba12e50daa2fd255ace622dcc435a507eb8853f6c0b2fb3594f5617acc9af81717db11be2161b33b9c2952a8a2b6d07efac27dfb9abbe6466028944f0ba115c49", 0x50}, {&(0x7f000000d6c0)="d1521ceab1a704e8f990", 0xa}, {&(0x7f000000d700)="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", 0x1000}], 0xa, 0x0, 0x0, 0x4004}}, {{&(0x7f000000e780)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f000000e900)=[{&(0x7f000000e800)="4e896bf9c367741c17fceaf278a2da6cdb9a5b78be64fa4c58f7a40dc2050903e4c33a72640a81877c815d6600f766b66222c5c69ad03a2920e5db95e00aa5221a2a149ccf83d9faf5cc32d5527c3b62642013d0aadcd65757f70814c238afe64e8cec460f1122c0a3bb04259429f7577acfad6b20f807eeba7d9afc67d84635dd98b053efb6cdd262aa95decd5e03872ad669624f66fc027c561c54019e1ddc6190ba1a5d235de8f6721093ee876dbccd9add7081c708ca4fad5e2e113cbefb16fdc2d79da0e2057a85beb1de183df7b8c07bb43db39e2d997b764a858a", 0xde}], 0x1, &(0x7f0000003f80)=ANY=[@ANYBLOB="100000000100000001000000", @ANYRES32, @ANYBLOB="1400000001000000010000006cf12b689cd8dbb49dd92b1cf3f6e0d6e91a5e56b805ce1c1260ea229ef442205a795ed12dbf1e69d29158daf5cf4a67c1354cf780af3d6debdfe600c66fed6cfd4d100ac1eb93392574d4c90fdb7e8be1a5f304091f83153240e04c4e3af3fbca56b19ec7b01dd46867c5237c827bdf474af38adcc60617fbd23b", @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x3c, 0x40002}}], 0x5, 0xc840) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) (async) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r6 = msgget$private(0x0, 0x4a0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r6, 0x2, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0xffffffffffffffff, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xfffffffd, 0x10000, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000002, 0x5], 0x80a0000, 0x80284}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0xffffffffffffffff, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xfffffffd, 0x10000, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000002, 0x5], 0x80a0000, 0x80284}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) (async) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='P', 0x1, 0x1ffe00) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r7, 0x4c00, r0) (async) ioctl$LOOP_SET_FD(r7, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) 4m31.878131773s ago: executing program 0 (id=183): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f00000d9000/0x4000)=nil, 0x4000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'geneve1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x2, 0x0, 0x2, 0x7fff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_REORDER={0xc, 0x3, {0xd9, 0x8000}}]}}}]}, 0x64}}, 0x20000000) sendmmsg$inet(r3, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000002240)}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r10, 0xc048aeca, &(0x7f0000000180)={0x1, 0x0, [{0xb88, 0x0, 0x9}]}) 4m31.715186181s ago: executing program 2 (id=184): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2180, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0x800, 0x0, 0x3, 0x9, 0x8, 0x2000}, 0x20) sendmsg$inet6(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e23, 0x180000, @local, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000"], 0x18}, 0x30000004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r7, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000001a80)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60b8ff0500083afffe8000000000000000000000000000bbff020000000000000000000000009e018000907a00050002"], 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x2, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xffff, 0xa}, {0xffff, 0xb}, {0xe, 0xfff3}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0x14b}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="f2", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000400)="b9", 0x1}], 0x1}}], 0x2, 0x4048000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000380)=0xc) 4m31.560260001s ago: executing program 3 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x40) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000440)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d3031c18f4810fe8c83cfac18e1c86223303030303030303030725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110079, 0xf3a, 0x0, 0x7fc, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0x20000, 0xcb7b, 0x0, {0x5, 0x0, 0x48b, 0xa, 0x400000000000004, 0xd, 0xfff7ffff, 0x6, 0x101, 0x4000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0xf}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x42000, 0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='romfs\x00', 0x200000, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cdg', 0x3) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x640100ff}, 0x10) sendto$inet(r1, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000040)={0x2, @multicast1, 0x4e24, 0x4, 'ovf\x00', 0x3, 0x3, 0xd}, 0x2c) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 4m31.432074841s ago: executing program 3 (id=186): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2, 0xa4) write(r0, &(0x7f0000000000)='3', 0x4e) prctl$PR_SET_SECUREBITS(0x1c, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000092000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) 4m31.431779016s ago: executing program 2 (id=187): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(r0, 0xc138fd0b, &(0x7f0000000000)) 4m30.126619307s ago: executing program 3 (id=188): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x9, 0xb, 0x0, 0x2, 0x3}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x9000) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="6c6f636b20696f2b6d656d00d890c4c508df7c4972"], 0xc) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) 4m19.278067816s ago: executing program 2 (id=189): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(r0, 0xc138fd0b, &(0x7f0000000000)) (fail_nth: 2) 4m19.277619282s ago: executing program 0 (id=190): socket$inet6(0xa, 0x5, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x1}, 0x30, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x221d010, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) r1 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x100, 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x1f, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, &(0x7f0000000200)='1-1\x00', 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f00000002c0)={r4, 0x8, 0x5, 0x1}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xe, 0xffde}, {0xfff2, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x30000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4891) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) r6 = syz_io_uring_setup(0x34b9, &(0x7f0000000340)={0x0, 0x69ee, 0xc00, 0x5, 0x50, 0x0, r5}, &(0x7f00000003c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r6, 0x521c, 0x1, 0x61, 0x0, 0x18) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x17, 0x0, 0xffff, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x7, 0x78, 0xfb, 0xff, 0x30000, [0x2, 0x4]}}) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.origin\x00', &(0x7f0000000280)='/dev/net/tun\x00', 0xd, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) 4m16.652675953s ago: executing program 4 (id=191): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var]}}, 0x0, 0x2a}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x84, 0x7ffc0201}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x200000d) 4m8.017264709s ago: executing program 33 (id=188): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x9, 0xb, 0x0, 0x2, 0x3}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x9000) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="6c6f636b20696f2b6d656d00d890c4c508df7c4972"], 0xc) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) 3m57.679558996s ago: executing program 34 (id=190): socket$inet6(0xa, 0x5, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x1}, 0x30, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x221d010, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) r1 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x100, 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x1f, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, &(0x7f0000000200)='1-1\x00', 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f00000002c0)={r4, 0x8, 0x5, 0x1}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xe, 0xffde}, {0xfff2, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x30000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4891) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) r6 = syz_io_uring_setup(0x34b9, &(0x7f0000000340)={0x0, 0x69ee, 0xc00, 0x5, 0x50, 0x0, r5}, &(0x7f00000003c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r6, 0x521c, 0x1, 0x61, 0x0, 0x18) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x17, 0x0, 0xffff, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x7, 0x78, 0xfb, 0xff, 0x30000, [0x2, 0x4]}}) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.origin\x00', &(0x7f0000000280)='/dev/net/tun\x00', 0xd, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) 3m50.63641857s ago: executing program 35 (id=191): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var]}}, 0x0, 0x2a}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x84, 0x7ffc0201}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x200000d) 3m42.394013339s ago: executing program 36 (id=189): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(r0, 0xc138fd0b, &(0x7f0000000000)) (fail_nth: 2) 15.808370005s ago: executing program 5 (id=1020): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000052c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @loopback, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)="18", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003dc0)=ANY=[], 0x68}}], 0x2, 0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x28242, 0x81) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) openat(0xffffffffffffffff, 0x0, 0x200, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400000203000000092100000001221800090581030053540000c12285682da37053ddd1abb081b78a9d38d67083"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0022190000000501150025ff090491010901a102750896010e09309102c0"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000400)={0x2, 0x100}) 4.827384403s ago: executing program 6 (id=1075): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090) (fail_nth: 6) 4.720074368s ago: executing program 6 (id=1076): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x22, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f000096b000/0x3000)=nil, 0x3000, 0xb635773f04ebbeef, 0x8031, r1, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r5, 0xc0285628, &(0x7f00000002c0)={0x0, 0x9, 0x800, '\x00', 0x0}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x4, 0xfffffffd, 0x7, 0xfffffffc, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x3, &(0x7f0000000280)) connect(r4, &(0x7f0000000300)=@phonet={0x23, 0x5, 0x8, 0x8}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000000104010200000000000000000300000acb1483b4d20a998d702c65bf3d842dae27d50a822563a546c1ec6575cba069fac69d8bf75bff67a0daa39b8081156763a2306212a9e26fbb463fa888d7e4c464f31442f9cb2b529927ab7ed108e1c1aa8dc8aba5a7481cf641556fb38e1015681d56d281eeb9ccd3a80ddf586db753e761ff7f7178c9a1bb2860832fe34eba031ee3d4fcea88e4011c7df0c9b985c5c5cbf4698c696b31f79ef40a81332e46a04711ec2e5de23ca78e519c530996d33767ee0bb968d5bb7045a18380112bbd27546aac1f62d1981e0300f53e388e4bf80f33c242e8efef8c142f3c0bc200000000000000000000000000d8aeab7d8b6436bcf1e9a0c20bf763541e7e918996851903e252182df87593e0ba472b3504b838"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20004880) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@getchain={0x3c, 0x66, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x1ffe4}, {0xfff3, 0xe}, {0xfff1, 0x4}}, [{0x8, 0xb, 0x20}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x44004) recvmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010120) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a8"], 0x21e) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) ioctl$SIOCX25SENDCALLACCPT(r7, 0x89e9) 4.559558493s ago: executing program 6 (id=1078): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0x10, 0xc}}}, 0x24}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x214003, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x3000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) 4.54557067s ago: executing program 7 (id=1079): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xa5, &(0x7f0000000500)={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x1, 0x97, 0x68, 0x0, 0xfe, 0x6, 0x0, @multicast1, @empty, {[@generic={0x94, 0xa, "9b40f51983638a38"}, @ssrr={0x89, 0x17, 0x74, [@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1]}, @lsrr={0x83, 0x3, 0x20}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xf, 0xa, 0x8, 0x0, 0x80, {[@mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0xc, 0x0, 0x80}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @nop, @exp_smc={0xfe, 0x6}]}}, {"3b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x14}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.465999986s ago: executing program 5 (id=1081): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x20000) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000280)) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x448d0009, 0x800) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x1f764) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x81001) unshare(0x22020400) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', r2, 0x0, 0x41) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0xc4, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$ttys(0xc, 0x2, 0x0) 3.814621624s ago: executing program 5 (id=1083): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0xa0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x173) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x28) write(r2, &(0x7f0000000000)='3', 0x4e) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x80d83, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002f010000100001800a000200626f6e643000000014000580"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)={0x38, r4, 0x321, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x3}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}}, 0x4000804) 3.619031706s ago: executing program 7 (id=1087): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002800)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x1, 0x300}, 0x8) 3.5189161s ago: executing program 6 (id=1088): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff0905"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x40045b17, 0x0) 3.518076497s ago: executing program 5 (id=1089): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}, {0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x4}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x13}]}}]}, 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x1c, 0x2d, 0xb, 0xfffffffd, 0x0, {0x4}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x78}]}]}, 0x1c}}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000480)={'bridge_slave_1\x00', 0x7, 0xdfe}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={r1, 0x0, 0xfd, 0x29, &(0x7f0000000240)="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", &(0x7f0000000340)=""/41, 0x0, 0x0, 0x1000, 0xa5, &(0x7f0000000700)="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", &(0x7f0000001700)="daefa054f7cca56eab7fda4044dc35767883a538cc11abdfd1ba998ce2cd2424c35a0785ada3c632c6c0b8febcdb92cedfb91ff0313010328c0878ab00669d2ee5837891ea0a6414fede988ef16c41130599c042a8d26048d92d4978dc8dd94b922b202b5eab7ff2719bc64f28352a82f89dda2258d25ba3963e15284392a1dd23c7d029fab8eb575ad0cf9084aa5e766980a8e48c8be6b65b8ebde75b944cde1eb38bb22e", 0x1, 0x0, 0x2}, 0x4c) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x1, 0x0, @local, @local}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001800dd8d00000000fedbdf2502201000fd00fe020000002008001e000100000010bf12db601d779c15adb760468852785a30c29d76d3b7335c2f736d5b39a8898cfe597adc2b2e4ca54e414b352e20639834e99f701642914400bad687bc29124e20771fb91055800f2af6256d35cd2f7d5cc22ac444ddf200af8a2fc9c6e043aa264421f59cb6a5c8d0c0a4597f94c5f10438eb5b6997d6df26e2bf170aaf77fc0c316aa2740832bd9b38ae7fc174d7e1b5ac7a6cc5e6202774641df35f87c68e08542eb8aad3d7937aafea5abbd623728de3ae23ed60dacd5514238a72b428"], 0x24}, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090) 3.431376593s ago: executing program 5 (id=1090): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000052c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @loopback, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)="18", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003dc0)=ANY=[], 0x68}}], 0x2, 0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x28242, 0x81) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) openat(0xffffffffffffffff, 0x0, 0x200, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400000203000000092100000001221800090581030053540000c12285682da37053ddd1abb081b78a9d38d67083"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0022190000000501150025ff090491010901a102750896010e09309102c0"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000400)={0x2, 0x100}) 2.986623912s ago: executing program 8 (id=1091): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) dup2(r4, r4) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x9000) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="6c6f636b20696f2b6d656d00d890c4c508df7c4972"], 0xc) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) close(0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a3000000000140000"], 0x118}}, 0x0) 2.984168579s ago: executing program 8 (id=1092): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = mq_open(0x0, 0x80, 0x0, 0x0) readv(r0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000200)={r6}) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {r7, r8+60000000}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r9, 0x0) recvmmsg(r9, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 2.287101596s ago: executing program 7 (id=1093): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="5000000010001fff040000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYBLOB="28001280090001"], 0x50}, 0x1, 0x0, 0x0, 0x488c5}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000000010000000000", @ANYRES32=r2, @ANYBLOB="12030000000000000a000100aa"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r9, &(0x7f0000000300)=' /new_domain\nfile read /etc/passwd task.uid=0 task.euid=0\nselect domain= /new_domain\n', 0x65) read(r9, &(0x7f0000000500)=""/10, 0xa) read(r9, &(0x7f0000000080)=""/24, 0x50) read(r9, &(0x7f0000000500)=""/10, 0xa) read(r9, &(0x7f0000000040)=""/18, 0x12) read(r9, &(0x7f0000000500)=""/10, 0xa) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYRESDEC=r4, @ANYRES32=r8], 0x4c}}, 0x884) 1.866810041s ago: executing program 8 (id=1094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = add_key$fscrypt_provisioning(&(0x7f0000003040), &(0x7f0000003080)={'syz', 0x1}, &(0x7f00000030c0)=ANY=[@ANYBLOB="02"], 0x18, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000001c0)='trusted\x00', &(0x7f00000002c0)) (async) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x7, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) (async) r5 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) (async) sendmsg$nl_xfrm(r2, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x2000c110}, 0xa45fed0062aa2040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a986513420048000000030a010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002400000000014000000020a0500000000000000000000000008140000001100010000000000000000000000000a00"/164], 0xa4}}, 0x0) 1.816187469s ago: executing program 7 (id=1095): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0x3) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setreuid(0x0, 0xee00) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfef", 0x4}], 0x1}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) 1.759445209s ago: executing program 7 (id=1096): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000340)={0x2, 0x4, 0x5, 0x5, 0xc, 0x1000, 0x8000, 0x684}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x14}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TTL={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) 1.659843569s ago: executing program 5 (id=1097): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xa0000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRESOCT=r5, @ANYRESHEX=r5, @ANYRES32=r2, @ANYRES32=0x0, @ANYRES16=r1], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000000, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x6, 0x3f, &(0x7f0000000ac0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x6, 0x0, 0x7, 0x7fff8000}, {0xd, 0x4, 0x2, 0x9}, {0x5, 0x8c, 0xaa, 0x8}]}) 797.082194ms ago: executing program 8 (id=1098): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0xa0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x173) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x28) write(r2, &(0x7f0000000000)='3', 0x4e) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x80d83, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002f010000100001800a000200626f6e643000000014000580"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)={0x38, r4, 0x321, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x3}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}}, 0x4000804) 709.82666ms ago: executing program 8 (id=1099): mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x1000004, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=virtio,afid=0x0000000000004875,msize=0x0000000000008000,posixacl']) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f00000054c0)={0x2020}, 0x2020) (fail_nth: 6) 640.072751ms ago: executing program 8 (id=1100): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000f00050801"], 0x50}, 0x1, 0xf00, 0x0, 0x80}, 0x4) 607.23246ms ago: executing program 7 (id=1101): socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./config\x00', 0x0, 0x0, 0x0) syz_usbip_server_init(0x3) r0 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x26) write(r1, &(0x7f0000000000)='7', 0x1) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/n\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/n/attr_allow_any_host\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001500010000e3fffffbffffff100000000800020008"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20048080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000100003042bbd7000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="2110000000000000180012800b00010067656e657665000008000280040010"], 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x814) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x600) write(r2, &(0x7f00000002c0)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='rdma\n', 0x5) close(r5) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 419.795545ms ago: executing program 6 (id=1102): mq_open(&(0x7f00000003c0)='\x9b<\xf2{', 0x40, 0x103, &(0x7f0000000340)={0x5, 0x40002, 0x3, 0xa}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fb, &(0x7f0000000340)={'bond0\x00', @random="00009e0c1100"}) 0s ago: executing program 6 (id=1103): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000000)=0x81, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xd, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x80000000}) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r3, 0x80286f4e, &(0x7f0000000140)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x20140, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) creat(0x0, 0x2b) acct(&(0x7f0000000100)='./file0\x00') mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket(0x10, 0x803, 0x0) kernel console output (not intermixed with test programs): 0x9/0x10 [ 300.363048][ T9217] ? down_write+0x146/0x1f0 [ 300.363062][ T9217] __key_link_begin+0xf5/0x260 [ 300.363075][ T9217] key_link+0x103/0x390 [ 300.363088][ T9217] ? __pfx_key_link+0x10/0x10 [ 300.363100][ T9217] ? keyring_alloc+0x8e/0xc0 [ 300.363112][ T9217] call_sbin_request_key+0x3dd/0xd90 [ 300.363131][ T9217] ? __pfx_call_sbin_request_key+0x10/0x10 [ 300.363146][ T9217] ? key_instantiate_and_link+0x39d/0x4b0 [ 300.363162][ T9217] ? key_alloc+0xbb4/0x1310 [ 300.363178][ T9217] ? __pfx_key_instantiate_and_link+0x10/0x10 [ 300.363204][ T9217] ? request_key_auth_new+0x6b9/0xa00 [ 300.363221][ T9217] ? __pfx_request_key_auth_new+0x10/0x10 [ 300.363242][ T9217] ? __pfx_call_sbin_request_key+0x10/0x10 [ 300.363257][ T9217] request_key_and_link+0x1115/0x1330 [ 300.363275][ T9217] ? __pfx_request_key_and_link+0x10/0x10 [ 300.363290][ T9217] ? __pfx___might_resched+0x10/0x10 [ 300.363306][ T9217] ? __pfx_asymmetric_key_cmp_partial+0x10/0x10 [ 300.363325][ T9217] ? __pfx_keyring_search_iterator+0x10/0x10 [ 300.363337][ T9217] ? _copy_from_user+0x59/0xd0 [ 300.363352][ T9217] __do_sys_request_key+0x2a2/0x3c0 [ 300.363366][ T9217] ? __pfx___do_sys_request_key+0x10/0x10 [ 300.363384][ T9217] __do_fast_syscall_32+0x13a/0x8b0 [ 300.363414][ T9217] do_fast_syscall_32+0x32/0x70 [ 300.363432][ T9217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 300.363448][ T9217] RIP: 0023:0xf7fc8fec [ 300.363464][ T9217] Code: Unable to access opcode bytes at 0xf7fc8fc2. [ 300.363469][ T9217] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 000000000000011f [ 300.363482][ T9217] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080001ffb [ 300.363489][ T9217] RDX: 0000000080001fee RSI: 00000000fffffffe RDI: 0000000000000000 [ 300.363496][ T9217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 300.363503][ T9217] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 300.363510][ T9217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 300.363525][ T9217] [ 300.668581][ T9222] FAULT_INJECTION: forcing a failure. [ 300.668581][ T9222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.668604][ T9222] CPU: 3 UID: 0 PID: 9222 Comm: syz.6.858 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.668620][ T9222] Tainted: [L]=SOFTLOCKUP [ 300.668624][ T9222] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 300.668631][ T9222] Call Trace: [ 300.668635][ T9222] [ 300.668639][ T9222] dump_stack_lvl+0x100/0x190 [ 300.668657][ T9222] should_fail_ex.cold+0x5/0xa [ 300.668672][ T9222] _copy_from_user+0x2e/0xd0 [ 300.668686][ T9222] get_compat_msghdr+0xb3/0x480 [ 300.668710][ T9222] ? __pfx_get_compat_msghdr+0x10/0x10 [ 300.668729][ T9222] ? rcu_is_watching+0x13/0xc0 [ 300.668739][ T9222] ? ___sys_recvmsg+0x177/0x1a0 [ 300.668750][ T9222] ? kfree+0x1e5/0x6d0 [ 300.668768][ T9222] ___sys_recvmsg+0x193/0x1a0 [ 300.668779][ T9222] ? __pfx____sys_recvmsg+0x10/0x10 [ 300.668790][ T9222] ? lock_acquire+0x1d1/0x380 [ 300.668811][ T9222] ? __pfx___might_resched+0x10/0x10 [ 300.668828][ T9222] do_recvmmsg+0x54d/0x740 [ 300.668841][ T9222] ? __pfx_do_recvmmsg+0x10/0x10 [ 300.668854][ T9222] ? find_held_lock+0x2b/0x80 [ 300.668865][ T9222] ? ksys_write+0x190/0x250 [ 300.668875][ T9222] ? ksys_write+0x190/0x250 [ 300.668891][ T9222] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 300.668910][ T9222] __sys_recvmmsg+0x21f/0x270 [ 300.668926][ T9222] ? __pfx___sys_recvmmsg+0x10/0x10 [ 300.668942][ T9222] ? ksys_write+0x1ac/0x250 [ 300.668955][ T9222] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 300.668966][ T9222] ? __do_fast_syscall_32+0xb3/0x8b0 [ 300.668983][ T9222] ? lockdep_hardirqs_on+0x7d/0x110 [ 300.668999][ T9222] __do_fast_syscall_32+0x13a/0x8b0 [ 300.669016][ T9222] ? lockdep_hardirqs_on+0x7d/0x110 [ 300.669033][ T9222] do_fast_syscall_32+0x32/0x70 [ 300.669050][ T9222] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 300.669064][ T9222] RIP: 0023:0xf7fc8fec [ 300.669077][ T9222] Code: Unable to access opcode bytes at 0xf7fc8fc2. [ 300.669083][ T9222] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 300.669094][ T9222] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800055c0 [ 300.669101][ T9222] RDX: 000000000400023c RSI: 0000000000000300 RDI: 0000000000000000 [ 300.669108][ T9222] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 300.669114][ T9222] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 300.669121][ T9222] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 300.669134][ T9222] [ 300.671317][ T5746] Bluetooth: hci1: command 0x2016 tx timeout [ 300.779995][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.6.859'. [ 300.846511][ T9225] ptrace attach of "/syz-executor exec"[6703] was attempted by "/syz-executor exec"[9225] [ 300.847952][ T9225] netlink: 'syz.6.859': attribute type 29 has an invalid length. [ 301.428656][ T9224] FAULT_INJECTION: forcing a failure. [ 301.428656][ T9224] name fail_futex, interval 1, probability 0, space 0, times 0 [ 301.428689][ T9224] CPU: 1 UID: 0 PID: 9224 Comm: syz.6.859 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.428710][ T9224] Tainted: [L]=SOFTLOCKUP [ 301.428716][ T9224] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 301.428726][ T9224] Call Trace: [ 301.428733][ T9224] [ 301.428742][ T9224] dump_stack_lvl+0x100/0x190 [ 301.428768][ T9224] should_fail_ex.cold+0x5/0xa [ 301.428794][ T9224] get_futex_key+0x1d0/0x14f0 [ 301.428824][ T9224] ? __pfx_get_futex_key+0x10/0x10 [ 301.428849][ T9224] ? __mutex_unlock_slowpath+0x35d/0x930 [ 301.428869][ T9224] futex_wake+0xf4/0x5e0 [ 301.428884][ T9224] ? __pfx_futex_wake+0x10/0x10 [ 301.428900][ T9224] ? detach_task_ctx_data+0x83/0x490 [ 301.428919][ T9224] do_futex+0x2b2/0x440 [ 301.428930][ T9224] ? __pfx_do_futex+0x10/0x10 [ 301.428940][ T9224] ? __might_fault+0xc5/0x140 [ 301.428961][ T9224] mm_exit_exec_release+0x256/0x2f0 [ 301.428980][ T9224] do_exit+0x707/0x2ae0 [ 301.428993][ T9224] ? __pfx_do_exit+0x10/0x10 [ 301.429005][ T9224] ? do_raw_spin_lock+0x1e0/0x260 [ 301.429022][ T9224] ? find_held_lock+0x2b/0x80 [ 301.429034][ T9224] ? get_signal+0x7e0/0x21e0 [ 301.429051][ T9224] do_group_exit+0xd5/0x2a0 [ 301.429065][ T9224] get_signal+0x1ec7/0x21e0 [ 301.429084][ T9224] ? find_held_lock+0x2b/0x80 [ 301.429096][ T9224] ? __pfx_get_signal+0x10/0x10 [ 301.429114][ T9224] ? do_futex+0x190/0x440 [ 301.429126][ T9224] arch_do_signal_or_restart+0x91/0x7a0 [ 301.429142][ T9224] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 301.429166][ T9224] ? xfd_validate_state+0x129/0x190 [ 301.429185][ T9224] exit_to_user_mode_loop+0x139/0x700 [ 301.429201][ T9224] ? rcu_is_watching+0x13/0xc0 [ 301.429214][ T9224] __do_fast_syscall_32+0x59f/0x8b0 [ 301.429231][ T9224] ? lockdep_hardirqs_on+0x7d/0x110 [ 301.429248][ T9224] do_fast_syscall_32+0x32/0x70 [ 301.429265][ T9224] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 301.429280][ T9224] RIP: 0023:0xf7fc8fec [ 301.429294][ T9224] Code: Unable to access opcode bytes at 0xf7fc8fc2. [ 301.429299][ T9224] RSP: 002b:00000000f54865bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 301.429310][ T9224] RAX: fffffffffffffe00 RBX: 00000000f7484f88 RCX: 0000000000000080 [ 301.429317][ T9224] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7484f8c [ 301.429324][ T9224] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 301.429332][ T9224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.429339][ T9224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 301.429353][ T9224] [ 301.441401][ T5809] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.441446][ T5809] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.441479][ T5809] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.441512][ T5809] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.473644][ T9229] netlink: 'syz.6.860': attribute type 12 has an invalid length. [ 301.473659][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.6.860'. [ 301.668647][ T9236] FAULT_INJECTION: forcing a failure. [ 301.668647][ T9236] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 301.668690][ T9236] CPU: 0 UID: 0 PID: 9236 Comm: syz.7.862 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.668717][ T9236] Tainted: [L]=SOFTLOCKUP [ 301.668724][ T9236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 301.668735][ T9236] Call Trace: [ 301.668744][ T9236] [ 301.668751][ T9236] dump_stack_lvl+0x100/0x190 [ 301.668798][ T9236] should_fail_ex.cold+0x5/0xa [ 301.668820][ T9236] ? prepare_alloc_pages+0x16d/0x5b0 [ 301.668848][ T9236] should_fail_alloc_page+0xeb/0x140 [ 301.668876][ T9236] prepare_alloc_pages+0x1f0/0x5b0 [ 301.668906][ T9236] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 301.668927][ T9236] ? __pfx_get_page_from_freelist+0x10/0x10 [ 301.668948][ T9236] ? prepare_alloc_pages+0x438/0x5b0 [ 301.668972][ T9236] ? is_bpf_text_address+0x94/0x1a0 [ 301.669002][ T9236] ? rcu_is_watching+0x13/0xc0 [ 301.669021][ T9236] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 301.669045][ T9236] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 301.669071][ T9236] ? stack_trace_save+0x8e/0xc0 [ 301.669095][ T9236] ? __pfx_stack_trace_save+0x10/0x10 [ 301.669117][ T9236] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 301.669141][ T9236] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 301.669159][ T9236] ? is_bpf_text_address+0x94/0x1a0 [ 301.669191][ T9236] ? kasan_save_track+0x14/0x30 [ 301.669213][ T9236] ? __kasan_slab_alloc+0x89/0x90 [ 301.669235][ T9236] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 301.669256][ T9236] ? alloc_vmap_area+0x640/0x2bb0 [ 301.669278][ T9236] ? __get_vm_area_node+0x1ed/0x350 [ 301.669299][ T9236] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 301.669324][ T9236] ? __vmalloc_node_noprof+0xad/0xf0 [ 301.669348][ T9236] ? __vmalloc_noprof+0xa3/0x120 [ 301.669371][ T9236] ? __vcalloc_noprof+0x4d/0x80 [ 301.669388][ T9236] ? kvm_arch_prepare_memory_region+0x35c/0x8d0 [ 301.669411][ T9236] ? kvm_set_memslot+0x139/0x1740 [ 301.669434][ T9236] ? kvm_set_memory_region+0xe78/0x15e0 [ 301.669456][ T9236] ? kvm_vm_ioctl+0x1f21/0x42d0 [ 301.669472][ T9236] ? kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 301.669490][ T9236] ? __ia32_compat_sys_ioctl+0x2cf/0x360 [ 301.669527][ T9236] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 301.669553][ T9236] ? policy_nodemask+0xed/0x4f0 [ 301.669581][ T9236] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 301.669634][ T9236] __kasan_populate_vmalloc+0xf0/0x210 [ 301.669668][ T9236] alloc_vmap_area+0x95d/0x2bb0 [ 301.669701][ T9236] ? kasan_save_track+0x14/0x30 [ 301.669721][ T9236] ? __kasan_kmalloc+0xaa/0xb0 [ 301.669743][ T9236] ? __pfx_alloc_vmap_area+0x10/0x10 [ 301.669767][ T9236] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 301.669792][ T9236] ? __get_vm_area_node+0x124/0x350 [ 301.669819][ T9236] __get_vm_area_node+0x1ed/0x350 [ 301.669849][ T9236] __vmalloc_node_range_noprof+0x268/0x1420 [ 301.669876][ T9236] ? __vcalloc_noprof+0x4d/0x80 [ 301.669901][ T9236] ? __lock_acquire+0x5c0/0x1f40 [ 301.669928][ T9236] ? __vcalloc_noprof+0x4d/0x80 [ 301.669953][ T9236] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 301.669980][ T9236] ? lock_acquire+0x1d1/0x380 [ 301.670012][ T9236] ? __vcalloc_noprof+0x4d/0x80 [ 301.670030][ T9236] __vmalloc_node_noprof+0xad/0xf0 [ 301.670055][ T9236] ? __vcalloc_noprof+0x4d/0x80 [ 301.670078][ T9236] __vmalloc_noprof+0xa3/0x120 [ 301.670103][ T9236] ? __pfx___vmalloc_noprof+0x10/0x10 [ 301.670130][ T9236] ? __pfx___mutex_lock+0x10/0x10 [ 301.670163][ T9236] __vcalloc_noprof+0x4d/0x80 [ 301.670184][ T9236] kvm_arch_prepare_memory_region+0x35c/0x8d0 [ 301.670217][ T9236] kvm_set_memslot+0x139/0x1740 [ 301.670240][ T9236] ? kvm_set_memory_region+0xc43/0x15e0 [ 301.670267][ T9236] kvm_set_memory_region+0xe78/0x15e0 [ 301.670302][ T9236] kvm_vm_ioctl+0x1f21/0x42d0 [ 301.670326][ T9236] ? tomoyo_path_number_perm+0x46d/0x580 [ 301.670355][ T9236] ? stack_trace_save+0x8e/0xc0 [ 301.670378][ T9236] ? __pfx_stack_trace_save+0x10/0x10 [ 301.670401][ T9236] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 301.670419][ T9236] ? __lock_acquire+0x5c0/0x1f40 [ 301.670459][ T9236] ? tomoyo_path_number_perm+0x46d/0x580 [ 301.670486][ T9236] ? kasan_save_stack+0x3f/0x50 [ 301.670505][ T9236] ? kasan_save_stack+0x30/0x50 [ 301.670526][ T9236] ? kasan_save_track+0x14/0x30 [ 301.670547][ T9236] ? kasan_save_free_info+0x3b/0x70 [ 301.670574][ T9236] ? __kasan_slab_free+0x5f/0x80 [ 301.670596][ T9236] ? kfree+0x22b/0x6d0 [ 301.670621][ T9236] ? tomoyo_path_number_perm+0x46d/0x580 [ 301.670645][ T9236] ? security_file_ioctl_compat+0xd3/0x230 [ 301.670677][ T9236] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 301.670704][ T9236] ? __do_fast_syscall_32+0x13a/0x8b0 [ 301.670732][ T9236] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 301.670761][ T9236] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 301.670813][ T9236] ? kasan_quarantine_put+0x104/0x240 [ 301.670834][ T9236] ? lockdep_hardirqs_on+0x7d/0x110 [ 301.670862][ T9236] ? find_held_lock+0x2b/0x80 [ 301.670882][ T9236] ? tomoyo_path_number_perm+0x28f/0x580 [ 301.670944][ T9236] ? get_pid_task+0x106/0x250 [ 301.670974][ T9236] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 301.671000][ T9236] ? do_vfs_ioctl+0x226/0x13e0 [ 301.671030][ T9236] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 301.671061][ T9236] kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 301.671080][ T9236] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 301.671099][ T9236] ? __fget_files+0x34/0x3d0 [ 301.671121][ T9236] ? find_held_lock+0x2b/0x80 [ 301.671139][ T9236] ? __fget_files+0x215/0x3d0 [ 301.671158][ T9236] ? hook_file_ioctl_common+0x140/0x440 [ 301.671191][ T9236] ? __fget_files+0x21f/0x3d0 [ 301.671216][ T9236] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 301.671236][ T9236] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 301.671267][ T9236] __do_fast_syscall_32+0x13a/0x8b0 [ 301.671294][ T9236] ? lockdep_hardirqs_on+0x7d/0x110 [ 301.671321][ T9236] do_fast_syscall_32+0x32/0x70 [ 301.671349][ T9236] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 301.671372][ T9236] RIP: 0023:0xf7f63fec [ 301.671393][ T9236] Code: Unable to access opcode bytes at 0xf7f63fc2. [ 301.671402][ T9236] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 301.671421][ T9236] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000040a0ae49 [ 301.671433][ T9236] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 301.671443][ T9236] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 301.671455][ T9236] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 301.671465][ T9236] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 301.671490][ T9236] [ 301.721915][ T9236] syz.7.862: vmalloc error: size 65540, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz7,mems_allowed=0-1 [ 301.743618][ T9236] CPU: 0 UID: 0 PID: 9236 Comm: syz.7.862 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.743656][ T9236] Tainted: [L]=SOFTLOCKUP [ 301.743663][ T9236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 301.743689][ T9236] Call Trace: [ 301.743697][ T9236] [ 301.743705][ T9236] dump_stack_lvl+0x100/0x190 [ 301.743733][ T9236] warn_alloc.cold+0x9e/0xb2 [ 301.743755][ T9236] ? __pfx_warn_alloc+0x10/0x10 [ 301.743771][ T9236] ? lockdep_hardirqs_on+0x7d/0x110 [ 301.743799][ T9236] ? __get_vm_area_node+0x2f0/0x350 [ 301.743829][ T9236] ? __get_vm_area_node+0x22b/0x350 [ 301.743857][ T9236] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 301.743901][ T9236] ? __lock_acquire+0x5c0/0x1f40 [ 301.743928][ T9236] ? __vcalloc_noprof+0x4d/0x80 [ 301.743955][ T9236] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 301.743981][ T9236] ? lock_acquire+0x1d1/0x380 [ 301.744010][ T9236] ? __vcalloc_noprof+0x4d/0x80 [ 301.744029][ T9236] __vmalloc_node_noprof+0xad/0xf0 [ 301.744052][ T9236] ? __vcalloc_noprof+0x4d/0x80 [ 301.744073][ T9236] __vmalloc_noprof+0xa3/0x120 [ 301.744097][ T9236] ? __pfx___vmalloc_noprof+0x10/0x10 [ 301.744122][ T9236] ? __pfx___mutex_lock+0x10/0x10 [ 301.744153][ T9236] __vcalloc_noprof+0x4d/0x80 [ 301.744172][ T9236] kvm_arch_prepare_memory_region+0x35c/0x8d0 [ 301.744205][ T9236] kvm_set_memslot+0x139/0x1740 [ 301.744227][ T9236] ? kvm_set_memory_region+0xc43/0x15e0 [ 301.744254][ T9236] kvm_set_memory_region+0xe78/0x15e0 [ 301.744287][ T9236] kvm_vm_ioctl+0x1f21/0x42d0 [ 301.744309][ T9236] ? tomoyo_path_number_perm+0x46d/0x580 [ 301.744336][ T9236] ? stack_trace_save+0x8e/0xc0 [ 301.744359][ T9236] ? __pfx_stack_trace_save+0x10/0x10 [ 301.744381][ T9236] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 301.744398][ T9236] ? __lock_acquire+0x5c0/0x1f40 [ 301.744423][ T9236] ? tomoyo_path_number_perm+0x46d/0x580 [ 301.744448][ T9236] ? kasan_save_stack+0x3f/0x50 [ 301.744476][ T9236] ? kasan_save_stack+0x30/0x50 [ 301.744496][ T9236] ? kasan_save_track+0x14/0x30 [ 301.744515][ T9236] ? kasan_save_free_info+0x3b/0x70 [ 301.744539][ T9236] ? __kasan_slab_free+0x5f/0x80 [ 301.744560][ T9236] ? kfree+0x22b/0x6d0 [ 301.744584][ T9236] ? tomoyo_path_number_perm+0x46d/0x580 [ 301.744608][ T9236] ? security_file_ioctl_compat+0xd3/0x230 [ 301.744633][ T9236] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 301.744660][ T9236] ? __do_fast_syscall_32+0x13a/0x8b0 [ 301.744686][ T9236] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 301.744714][ T9236] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 301.744764][ T9236] ? kasan_quarantine_put+0x104/0x240 [ 301.744785][ T9236] ? lockdep_hardirqs_on+0x7d/0x110 [ 301.744811][ T9236] ? find_held_lock+0x2b/0x80 [ 301.744830][ T9236] ? tomoyo_path_number_perm+0x28f/0x580 [ 301.744866][ T9236] ? get_pid_task+0x106/0x250 [ 301.744892][ T9236] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 301.744918][ T9236] ? do_vfs_ioctl+0x226/0x13e0 [ 301.744946][ T9236] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 301.744975][ T9236] kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 301.744995][ T9236] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 301.745011][ T9236] ? __fget_files+0x34/0x3d0 [ 301.745032][ T9236] ? find_held_lock+0x2b/0x80 [ 301.745051][ T9236] ? __fget_files+0x215/0x3d0 [ 301.745069][ T9236] ? hook_file_ioctl_common+0x140/0x440 [ 301.745100][ T9236] ? __fget_files+0x21f/0x3d0 [ 301.745124][ T9236] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 301.745144][ T9236] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 301.745177][ T9236] __do_fast_syscall_32+0x13a/0x8b0 [ 301.745203][ T9236] ? lockdep_hardirqs_on+0x7d/0x110 [ 301.745230][ T9236] do_fast_syscall_32+0x32/0x70 [ 301.745257][ T9236] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 301.745279][ T9236] RIP: 0023:0xf7f63fec [ 301.745299][ T9236] Code: Unable to access opcode bytes at 0xf7f63fc2. [ 301.745308][ T9236] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 301.745324][ T9236] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000040a0ae49 [ 301.745337][ T9236] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 301.745347][ T9236] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 301.745358][ T9236] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 301.745369][ T9236] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 301.745393][ T9236] [ 301.783685][ T9236] Mem-Info: [ 301.807075][ T9236] active_anon:7082 inactive_anon:560 isolated_anon:0 [ 301.807075][ T9236] active_file:3244 inactive_file:4239 isolated_file:0 [ 301.807075][ T9236] unevictable:0 dirty:319 writeback:0 [ 301.807075][ T9236] slab_reclaimable:7804 slab_unreclaimable:63139 [ 301.807075][ T9236] mapped:24120 shmem:504 pagetables:1535 [ 301.807075][ T9236] sec_pagetables:302 bounce:0 [ 301.807075][ T9236] kernel_misc_reclaimable:0 [ 301.807075][ T9236] free:57680 free_pcp:12958 free_cma:0 [ 301.823880][ T9236] Node 0 active_anon:668kB inactive_anon:32kB active_file:8kB inactive_file:132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1060kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9120kB pagetables:1676kB sec_pagetables:1148kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 301.823949][ T9236] Node 1 active_anon:27660kB inactive_anon:2208kB active_file:12968kB inactive_file:16824kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:95420kB dirty:1268kB writeback:0kB shmem:2016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7716kB pagetables:4464kB sec_pagetables:60kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 301.824211][ T9236] Node 0 DMA free:2816kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:0kB free_cma:0kB [ 301.824366][ T9236] lowmem_reserve[]: 0 277 277 277 277 [ 301.839389][ T9236] Node 0 DMA32 free:27508kB boost:12288kB min:24916kB low:28072kB high:31228kB reserved_highatomic:0kB free_highatomic:0kB active_anon:664kB inactive_anon:32kB active_file:8kB inactive_file:132kB unevictable:0kB writepending:8kB zspages:20kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:6844kB local_pcp:936kB free_cma:0kB [ 301.839529][ T9236] lowmem_reserve[]: 0 0 0 0 0 [ 301.882285][ T9236] Node 1 DMA32 free:200396kB boost:2048kB min:49192kB low:60976kB high:72760kB reserved_highatomic:0kB free_highatomic:0kB active_anon:27660kB inactive_anon:2208kB active_file:12968kB inactive_file:16824kB unevictable:0kB writepending:1268kB zspages:1876kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:44760kB local_pcp:8632kB free_cma:0kB [ 301.905735][ T9236] lowmem_reserve[]: 0 0 0 0 0 [ 301.912868][ T9236] Node 0 DMA: 72*4kB (U) 26*8kB (U) 15*16kB (U) 15*32kB (U) 9*64kB (U) 4*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2816kB [ 302.008371][ T9236] Node 0 DMA32: 53*4kB (UM) 80*8kB (UE) 118*16kB (UME) 194*32kB (UME) 102*64kB (UE) 40*128kB (UME) 11*256kB (UM) 6*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 27508kB [ 302.009020][ T9236] Node 1 DMA32: 27*4kB (UM) 602*8kB (UM) 1658*16kB (UM) 515*32kB (UM) 511*64kB (UM) 242*128kB (UME) 108*256kB (UM) 73*512kB (UM) 16*1024kB (UME) 4*2048kB (M) 0*4096kB = 201212kB [ 302.009752][ T9236] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 302.009768][ T9236] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 302.012802][ T9236] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 302.012910][ T9236] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 302.012961][ T9236] 8401 total pagecache pages [ 302.012970][ T9236] 418 pages in swap cache [ 302.013010][ T9236] Free swap = 120768kB [ 302.013018][ T9236] Total swap = 124996kB [ 302.013028][ T9236] 524155 pages RAM [ 302.013235][ T9236] 0 pages HighMem/MovableOnly [ 302.013243][ T9236] 212121 pages reserved [ 302.013454][ T9236] 0 pages cma reserved [ 302.565166][ T9244] FAULT_INJECTION: forcing a failure. [ 302.565166][ T9244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.565196][ T9244] CPU: 3 UID: 0 PID: 9244 Comm: syz.6.865 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.565220][ T9244] Tainted: [L]=SOFTLOCKUP [ 302.565227][ T9244] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 302.565236][ T9244] Call Trace: [ 302.565243][ T9244] [ 302.565250][ T9244] dump_stack_lvl+0x100/0x190 [ 302.565276][ T9244] should_fail_ex.cold+0x5/0xa [ 302.565299][ T9244] _copy_from_user+0x2e/0xd0 [ 302.565321][ T9244] get_compat_msghdr+0xb3/0x480 [ 302.565350][ T9244] ? __pfx_get_compat_msghdr+0x10/0x10 [ 302.565377][ T9244] ? rcu_is_watching+0x13/0xc0 [ 302.565395][ T9244] ? ___sys_recvmsg+0x177/0x1a0 [ 302.565410][ T9244] ? kfree+0x1e5/0x6d0 [ 302.565440][ T9244] ___sys_recvmsg+0x193/0x1a0 [ 302.565458][ T9244] ? __pfx____sys_recvmsg+0x10/0x10 [ 302.565477][ T9244] ? lock_acquire+0x1d1/0x380 [ 302.565512][ T9244] ? __pfx___might_resched+0x10/0x10 [ 302.565539][ T9244] do_recvmmsg+0x54d/0x740 [ 302.565560][ T9244] ? __pfx_do_recvmmsg+0x10/0x10 [ 302.565581][ T9244] ? find_held_lock+0x2b/0x80 [ 302.565601][ T9244] ? ksys_write+0x190/0x250 [ 302.565618][ T9244] ? ksys_write+0x190/0x250 [ 302.565644][ T9244] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 302.565675][ T9244] __sys_recvmmsg+0x21f/0x270 [ 302.565703][ T9244] ? __pfx___sys_recvmmsg+0x10/0x10 [ 302.565730][ T9244] ? ksys_write+0x1ac/0x250 [ 302.565752][ T9244] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 302.565769][ T9244] ? __do_fast_syscall_32+0xb3/0x8b0 [ 302.565796][ T9244] ? lockdep_hardirqs_on+0x7d/0x110 [ 302.565820][ T9244] __do_fast_syscall_32+0x13a/0x8b0 [ 302.565846][ T9244] ? lockdep_hardirqs_on+0x7d/0x110 [ 302.565871][ T9244] do_fast_syscall_32+0x32/0x70 [ 302.565897][ T9244] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 302.565920][ T9244] RIP: 0023:0xf7fc8fec [ 302.565940][ T9244] Code: Unable to access opcode bytes at 0xf7fc8fc2. [ 302.565948][ T9244] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 302.565966][ T9244] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000800055c0 [ 302.565977][ T9244] RDX: 000000000400023c RSI: 0000000000000300 RDI: 0000000000000000 [ 302.565989][ T9244] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 302.566000][ T9244] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 302.566010][ T9244] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 302.566033][ T9244] [ 302.663233][ T9248] openvswitch: netlink: Flow actions attr not present in new flow. [ 302.862281][ T9242] netlink: 36 bytes leftover after parsing attributes in process `syz.5.864'. [ 303.006961][ T9268] netlink: 72 bytes leftover after parsing attributes in process `syz.5.876'. [ 303.300808][ T1041] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 303.360417][ T9275] 9pnet_fd: Insufficient options for proto=fd [ 303.365633][ T5809] netdevsim netdevsim10 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.369159][ T9275] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2.1.3), cmd(8) [ 303.956354][ T9279] openvswitch: netlink: Flow actions attr not present in new flow. [ 303.982068][ T1041] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 303.982513][ T1041] usb 11-1: config 0 has no interfaces? [ 303.984044][ T1041] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.984057][ T1041] usb 11-1: Product: syz [ 303.984064][ T1041] usb 11-1: Manufacturer: syz [ 303.984072][ T1041] usb 11-1: SerialNumber: syz [ 303.985870][ T1041] usb 11-1: config 0 descriptor?? [ 304.168788][ T9294] FAULT_INJECTION: forcing a failure. [ 304.168788][ T9294] name failslab, interval 1, probability 0, space 0, times 0 [ 304.168824][ T9294] CPU: 0 UID: 0 PID: 9294 Comm: syz.5.882 Tainted: G L syzkaller #0 PREEMPT(full) [ 304.168850][ T9294] Tainted: [L]=SOFTLOCKUP [ 304.168858][ T9294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 304.168870][ T9294] Call Trace: [ 304.168877][ T9294] [ 304.168885][ T9294] dump_stack_lvl+0x100/0x190 [ 304.168916][ T9294] should_fail_ex.cold+0x5/0xa [ 304.168942][ T9294] should_failslab+0xc2/0x120 [ 304.168969][ T9294] __kmalloc_noprof+0xfc/0x840 [ 304.168991][ T9294] ? lsm_blob_alloc+0x68/0x90 [ 304.169025][ T9294] lsm_blob_alloc+0x68/0x90 [ 304.169047][ T9294] security_sb_alloc+0x25/0x240 [ 304.169072][ T9294] sget_fc+0x3ca/0x1f20 [ 304.169096][ T9294] ? __pfx_super_s_dev_test+0x10/0x10 [ 304.169125][ T9294] ? __pfx_super_s_dev_set+0x10/0x10 [ 304.169154][ T9294] ? __pfx_sget_fc+0x10/0x10 [ 304.169171][ T9294] ? mntput+0x70/0xa0 [ 304.169192][ T9294] ? lookup_bdev+0x16b/0x2a0 [ 304.169212][ T9294] ? __pfx_lookup_bdev+0x10/0x10 [ 304.169233][ T9294] ? rcu_is_watching+0x13/0xc0 [ 304.169253][ T9294] ? vfs_parse_fs_qstr+0x144/0x1c0 [ 304.169278][ T9294] ? kfree+0x1e5/0x6d0 [ 304.169310][ T9294] get_tree_bdev_flags+0x1ba/0x620 [ 304.169329][ T9294] ? __pfx_udf_fill_super+0x10/0x10 [ 304.169349][ T9294] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 304.169375][ T9294] ? bpf_lsm_capable+0x9/0x10 [ 304.169402][ T9294] ? security_capable+0x80/0x260 [ 304.169428][ T9294] vfs_get_tree+0x92/0x320 [ 304.169457][ T9294] path_mount+0x7d0/0x24c0 [ 304.169486][ T9294] ? __pfx_path_mount+0x10/0x10 [ 304.169510][ T9294] ? lockdep_hardirqs_on+0x7d/0x110 [ 304.169542][ T9294] ? putname+0xb1/0x110 [ 304.169565][ T9294] ? kmem_cache_free+0x127/0x6c0 [ 304.169603][ T9294] ? __ia32_sys_mount+0x292/0x310 [ 304.169629][ T9294] __ia32_sys_mount+0x292/0x310 [ 304.169656][ T9294] ? __pfx___ia32_sys_mount+0x10/0x10 [ 304.169680][ T9294] ? ksys_write+0x1ac/0x250 [ 304.169699][ T9294] ? __pfx_ksys_write+0x10/0x10 [ 304.169725][ T9294] __do_fast_syscall_32+0x13a/0x8b0 [ 304.169753][ T9294] ? lockdep_hardirqs_on+0x7d/0x110 [ 304.169783][ T9294] do_fast_syscall_32+0x32/0x70 [ 304.169811][ T9294] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 304.169835][ T9294] RIP: 0023:0xf7f66fec [ 304.169855][ T9294] Code: Unable to access opcode bytes at 0xf7f66fc2. [ 304.169864][ T9294] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 304.169884][ T9294] RAX: ffffffffffffffda RBX: 0000000080000400 RCX: 0000000080000100 [ 304.169897][ T9294] RDX: 00000000800001c0 RSI: 0000000000008000 RDI: 0000000000000000 [ 304.169908][ T9294] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 304.169920][ T9294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.169932][ T9294] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 304.169959][ T9294] [ 304.218467][ T3263] usb 11-1: USB disconnect, device number 12 [ 304.636121][ T9309] v: renamed from veth0_vlan [ 304.791319][ T9320] openvswitch: netlink: Flow actions attr not present in new flow. [ 304.822286][ T5448] v: left promiscuous mode [ 304.825760][ T5824] v: entered promiscuous mode [ 304.888038][ T9324] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input62 [ 304.909107][ T9325] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 305.056914][ T9324] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 305.329511][ T9338] FAULT_INJECTION: forcing a failure. [ 305.329511][ T9338] name failslab, interval 1, probability 0, space 0, times 0 [ 305.329543][ T9338] CPU: 3 UID: 0 PID: 9338 Comm: syz.6.891 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.329566][ T9338] Tainted: [L]=SOFTLOCKUP [ 305.329573][ T9338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 305.329583][ T9338] Call Trace: [ 305.329589][ T9338] [ 305.329596][ T9338] dump_stack_lvl+0x100/0x190 [ 305.329623][ T9338] should_fail_ex.cold+0x5/0xa [ 305.329645][ T9338] should_failslab+0xc2/0x120 [ 305.329668][ T9338] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 305.329687][ T9338] ? __alloc_skb+0x5b7/0x710 [ 305.329708][ T9338] ? __alloc_skb+0x140/0x710 [ 305.329731][ T9338] __alloc_skb+0x140/0x710 [ 305.329750][ T9338] ? __alloc_skb+0x5b7/0x710 [ 305.329769][ T9338] ? __pfx___alloc_skb+0x10/0x10 [ 305.329796][ T9338] netlink_ack+0x117/0xb80 [ 305.329817][ T9338] ? __lock_acquire+0x5c0/0x1f40 [ 305.329844][ T9338] netlink_rcv_skb+0x333/0x420 [ 305.329863][ T9338] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 305.329888][ T9338] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 305.329918][ T9338] ? ns_capable+0xd2/0xf0 [ 305.329943][ T9338] nfnetlink_rcv+0x1b3/0x440 [ 305.329966][ T9338] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 305.329989][ T9338] ? netlink_deliver_tap+0x1ae/0xcc0 [ 305.330012][ T9338] netlink_unicast+0x585/0x850 [ 305.330035][ T9338] ? __pfx_netlink_unicast+0x10/0x10 [ 305.330053][ T9338] ? aa_sk_perm+0x389/0xab0 [ 305.330089][ T9338] netlink_sendmsg+0x8b0/0xda0 [ 305.330113][ T9338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.330136][ T9338] ? apparmor_socket_sendmsg+0x165/0x280 [ 305.330161][ T9338] ____sys_sendmsg+0xa4d/0xbe0 [ 305.330177][ T9338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.330199][ T9338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 305.330226][ T9338] ___sys_sendmsg+0x190/0x1e0 [ 305.330246][ T9338] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.330274][ T9338] ? find_held_lock+0x2b/0x80 [ 305.330305][ T9338] __sys_sendmsg+0x160/0x210 [ 305.330328][ T9338] ? __pfx___sys_sendmsg+0x10/0x10 [ 305.330356][ T9338] ? __pfx_ksys_write+0x10/0x10 [ 305.330378][ T9338] __do_fast_syscall_32+0x13a/0x8b0 [ 305.330404][ T9338] ? lockdep_hardirqs_on+0x7d/0x110 [ 305.330429][ T9338] do_fast_syscall_32+0x32/0x70 [ 305.330466][ T9338] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 305.330487][ T9338] RIP: 0023:0xf7fc8fec [ 305.330506][ T9338] Code: Unable to access opcode bytes at 0xf7fc8fc2. [ 305.330514][ T9338] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 305.330532][ T9338] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 305.330543][ T9338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 305.330553][ T9338] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 305.330562][ T9338] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 305.330572][ T9338] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 305.330595][ T9338] [ 305.492055][ T5746] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 305.556289][ T9347] netlink: 'syz.8.895': attribute type 1 has an invalid length. [ 305.556315][ T9347] netlink: 232 bytes leftover after parsing attributes in process `syz.8.895'. [ 305.605684][ T9349] netlink: 24 bytes leftover after parsing attributes in process `syz.7.896'. [ 305.680873][ T9353] openvswitch: netlink: Flow actions attr not present in new flow. [ 305.697086][ T9355] netlink: 16 bytes leftover after parsing attributes in process `syz.5.900'. [ 305.785981][ T9359] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input63 [ 305.809065][ T9360] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 305.855316][ T9359] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 306.102275][ T9365] FAULT_INJECTION: forcing a failure. [ 306.102275][ T9365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.103302][ T9365] CPU: 0 UID: 0 PID: 9365 Comm: syz.6.902 Tainted: G L syzkaller #0 PREEMPT(full) [ 306.103351][ T9365] Tainted: [L]=SOFTLOCKUP [ 306.103359][ T9365] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 306.103372][ T9365] Call Trace: [ 306.103380][ T9365] [ 306.103389][ T9365] dump_stack_lvl+0x100/0x190 [ 306.103421][ T9365] should_fail_ex.cold+0x5/0xa [ 306.103441][ T9365] _copy_from_user+0x2e/0xd0 [ 306.103458][ T9365] get_compat_msghdr+0xb3/0x480 [ 306.103494][ T9365] ? __pfx_get_compat_msghdr+0x10/0x10 [ 306.103526][ T9365] ? rcu_is_watching+0x13/0xc0 [ 306.103547][ T9365] ? ___sys_recvmsg+0x177/0x1a0 [ 306.103566][ T9365] ? kfree+0x1e5/0x6d0 [ 306.103600][ T9365] ___sys_recvmsg+0x193/0x1a0 [ 306.103622][ T9365] ? __pfx____sys_recvmsg+0x10/0x10 [ 306.103641][ T9365] ? lock_acquire+0x1d1/0x380 [ 306.103681][ T9365] ? __pfx___might_resched+0x10/0x10 [ 306.103711][ T9365] do_recvmmsg+0x54d/0x740 [ 306.103737][ T9365] ? __pfx_do_recvmmsg+0x10/0x10 [ 306.103755][ T9365] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 306.103787][ T9365] ? trace_sched_exit_tp+0x120/0x160 [ 306.103819][ T9365] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 306.103852][ T9365] __sys_recvmmsg+0x21f/0x270 [ 306.103881][ T9365] ? __pfx___sys_recvmmsg+0x10/0x10 [ 306.103911][ T9365] ? exit_to_user_mode_loop+0x166/0x700 [ 306.103944][ T9365] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 306.103966][ T9365] ? __do_fast_syscall_32+0xb3/0x8b0 [ 306.103997][ T9365] ? lockdep_hardirqs_on+0x7d/0x110 [ 306.104032][ T9365] __do_fast_syscall_32+0x13a/0x8b0 [ 306.104062][ T9365] ? lockdep_hardirqs_on+0x7d/0x110 [ 306.104090][ T9365] do_fast_syscall_32+0x32/0x70 [ 306.104118][ T9365] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 306.104144][ T9365] RIP: 0023:0xf7fc8fec [ 306.104166][ T9365] Code: Unable to access opcode bytes at 0xf7fc8fc2. [ 306.104176][ T9365] RSP: 002b:00000000f546550c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 306.104197][ T9365] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800055c0 [ 306.104209][ T9365] RDX: 000000000400023c RSI: 0000000000000300 RDI: 0000000000000000 [ 306.104222][ T9365] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 306.104236][ T9365] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 306.104247][ T9365] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 306.104273][ T9365] [ 307.297799][ T9380] FAULT_INJECTION: forcing a failure. [ 307.297799][ T9380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.297835][ T9380] CPU: 2 UID: 0 PID: 9380 Comm: syz.5.908 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.297860][ T9380] Tainted: [L]=SOFTLOCKUP [ 307.297867][ T9380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 307.297879][ T9380] Call Trace: [ 307.297886][ T9380] [ 307.297893][ T9380] dump_stack_lvl+0x100/0x190 [ 307.297923][ T9380] should_fail_ex.cold+0x5/0xa [ 307.297947][ T9380] _copy_from_user+0x2e/0xd0 [ 307.297970][ T9380] generic_map_update_batch+0x534/0x890 [ 307.297997][ T9380] ? __pfx_generic_map_update_batch+0x10/0x10 [ 307.298022][ T9380] ? __pfx_generic_map_update_batch+0x10/0x10 [ 307.298041][ T9380] bpf_map_do_batch+0x66f/0x6d0 [ 307.298069][ T9380] __sys_bpf+0x4ce/0x4a30 [ 307.298094][ T9380] ? __pfx___sys_bpf+0x10/0x10 [ 307.298111][ T9380] ? lock_acquire+0x1d1/0x380 [ 307.298135][ T9380] ? get_pid_task+0x2a/0x250 [ 307.298154][ T9380] ? find_held_lock+0x2b/0x80 [ 307.298172][ T9380] ? get_pid_task+0xfc/0x250 [ 307.298189][ T9380] ? get_pid_task+0xfc/0x250 [ 307.298214][ T9380] ? proc_fail_nth_write+0x9f/0x220 [ 307.298234][ T9380] ? find_held_lock+0x2b/0x80 [ 307.298259][ T9380] ? rcu_read_lock_any_held+0x6a/0x90 [ 307.298280][ T9380] ? find_held_lock+0x2b/0x80 [ 307.298298][ T9380] ? ksys_write+0x190/0x250 [ 307.298317][ T9380] ? ksys_write+0x190/0x250 [ 307.298335][ T9380] ? lock_acquire+0x1d1/0x380 [ 307.298374][ T9380] ? fput+0x7c/0x100 [ 307.298398][ T9380] ? __ia32_sys_bpf+0xcc/0x170 [ 307.298417][ T9380] __ia32_sys_bpf+0xcc/0x170 [ 307.298436][ T9380] ? __do_fast_syscall_32+0xb3/0x8b0 [ 307.298468][ T9380] __do_fast_syscall_32+0x13a/0x8b0 [ 307.298493][ T9380] ? lockdep_hardirqs_on+0x7d/0x110 [ 307.298521][ T9380] do_fast_syscall_32+0x32/0x70 [ 307.298548][ T9380] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 307.298571][ T9380] RIP: 0023:0xf7f66fec [ 307.298590][ T9380] Code: Unable to access opcode bytes at 0xf7f66fc2. [ 307.298598][ T9380] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 307.298617][ T9380] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000080000300 [ 307.298629][ T9380] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.298639][ T9380] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 307.298650][ T9380] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 307.298660][ T9380] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 307.298689][ T9380] [ 307.367744][ T9382] netlink: 'syz.7.907': attribute type 1 has an invalid length. [ 307.384751][ T9382] bond1: entered promiscuous mode [ 307.384773][ T9382] bond1: entered allmulticast mode [ 307.385058][ T9382] 8021q: adding VLAN 0 to HW filter on device bond1 [ 307.427050][ T9382] erspan1: entered allmulticast mode [ 307.430995][ T9382] bond1: (slave erspan1): making interface the new active one [ 307.431017][ T9382] erspan1: entered promiscuous mode [ 307.439220][ T9382] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 307.447209][ T9384] openvswitch: netlink: Flow actions attr not present in new flow. [ 307.891675][ T43] audit: type=1326 audit(1789798156.875:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9389 comm="syz.6.911" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 307.894268][ T43] audit: type=1326 audit(1789798156.885:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9389 comm="syz.6.911" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 307.894383][ T43] audit: type=1326 audit(1789798156.885:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9389 comm="syz.6.911" exe="/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 307.894559][ T43] audit: type=1326 audit(1789798156.885:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9389 comm="syz.6.911" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 307.894691][ T43] audit: type=1326 audit(1789798156.885:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9389 comm="syz.6.911" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 307.894917][ T43] audit: type=1326 audit(1789798156.885:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9389 comm="syz.6.911" exe="/syz-executor" sig=0 arch=40000003 syscall=433 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 307.895076][ T43] audit: type=1326 audit(1789798156.885:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9389 comm="syz.6.911" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 307.895227][ T43] audit: type=1326 audit(1789798156.885:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9389 comm="syz.6.911" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 307.895465][ T43] audit: type=1326 audit(1789798156.885:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9389 comm="syz.6.911" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71c75ab code=0x7ffc0000 [ 307.895975][ T43] audit: type=1326 audit(1789798156.885:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9389 comm="syz.6.911" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fc8fec code=0x7ffc0000 qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 308.310837][ T9404] nvme_fcloop: unknown parameter or missing value 'wwn' [ 308.462357][ T9411] openvswitch: netlink: Flow actions attr not present in new flow. [ 308.548220][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz.7.920'. [ 308.554992][ T9417] hsr_slave_1 (unregistering): left promiscuous mode [ 308.711412][ T6888] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 308.878022][ T6888] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 308.884818][ T6888] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 84, changing to 10 [ 308.885324][ T6888] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17152, setting to 1024 [ 308.885633][ T6888] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.886104][ T6888] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.953328][ T6888] usb 11-1: config 0 descriptor?? [ 309.414875][ T6888] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 309.427684][ T9430] serio: Serial port ttynull [ 310.150859][ T9446] netlink: 726 bytes leftover after parsing attributes in process `syz.8.935'. [ 310.202226][ T9449] FAULT_INJECTION: forcing a failure. [ 310.202226][ T9449] name failslab, interval 1, probability 0, space 0, times 0 [ 310.202259][ T9449] CPU: 1 UID: 0 PID: 9449 Comm: syz.8.929 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.202284][ T9449] Tainted: [L]=SOFTLOCKUP [ 310.202290][ T9449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 310.202301][ T9449] Call Trace: [ 310.202305][ T9449] [ 310.202310][ T9449] dump_stack_lvl+0x100/0x190 [ 310.202329][ T9449] should_fail_ex.cold+0x5/0xa [ 310.202350][ T9449] should_failslab+0xc2/0x120 [ 310.202373][ T9449] kmem_cache_alloc_noprof+0x92/0x6a0 [ 310.202392][ T9449] ? rcu_is_watching+0x13/0xc0 [ 310.202409][ T9449] ? skb_clone+0x190/0x400 [ 310.202443][ T9449] skb_clone+0x190/0x400 [ 310.202465][ T9449] can_send+0x714/0xbd0 [ 310.202488][ T9449] ? __pfx_can_send+0x10/0x10 [ 310.202513][ T9449] bcm_can_tx+0x4b3/0x9e0 [ 310.202529][ T9449] ? __pfx_bcm_can_tx+0x10/0x10 [ 310.202559][ T9449] bcm_sendmsg+0x3535/0x4af0 [ 310.202583][ T9449] ? __pfx_bcm_sendmsg+0x10/0x10 [ 310.202606][ T9449] ? apparmor_socket_sendmsg+0x165/0x280 [ 310.202629][ T9449] ____sys_sendmsg+0xa4d/0xbe0 [ 310.202644][ T9449] ? __pfx_bcm_sendmsg+0x10/0x10 [ 310.202663][ T9449] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.202685][ T9449] ? _kstrtoull+0x144/0x200 [ 310.202707][ T9449] ? __pfx__kstrtoull+0x10/0x10 [ 310.202730][ T9449] ___sys_sendmsg+0x190/0x1e0 [ 310.202749][ T9449] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.202767][ T9449] ? __lock_acquire+0x5c0/0x1f40 [ 310.202797][ T9449] ? __fget_files+0x34/0x3d0 [ 310.202830][ T9449] __sys_sendmmsg+0x309/0x440 [ 310.202856][ T9449] ? __pfx___sys_sendmmsg+0x10/0x10 [ 310.202878][ T9449] ? find_held_lock+0x2b/0x80 [ 310.202929][ T9449] ? __mutex_unlock_slowpath+0x35d/0x930 [ 310.202967][ T9449] ? fput+0x7c/0x100 [ 310.203002][ T9449] ? ksys_write+0x1ac/0x250 [ 310.203021][ T9449] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 310.203039][ T9449] ? lockdep_hardirqs_on+0x7d/0x110 [ 310.203062][ T9449] __do_fast_syscall_32+0x13a/0x8b0 [ 310.203087][ T9449] ? lockdep_hardirqs_on+0x7d/0x110 [ 310.203109][ T9449] do_fast_syscall_32+0x32/0x70 [ 310.203133][ T9449] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 310.203154][ T9449] RIP: 0023:0xf706efec [ 310.203173][ T9449] Code: Unable to access opcode bytes at 0xf706efc2. [ 310.203181][ T9449] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 310.203198][ T9449] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001000 [ 310.203209][ T9449] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 310.203220][ T9449] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 310.203229][ T9449] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 310.203236][ T9449] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 310.203258][ T9449] [ 310.574568][ T9463] netlink: 36 bytes leftover after parsing attributes in process `syz.7.928'. [ 311.217740][ T5746] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 311.339822][ T9473] netlink: 726 bytes leftover after parsing attributes in process `syz.5.938'. [ 311.405408][ T857] usb 11-1: USB disconnect, device number 13 [ 311.526201][ T9480] kvm_intel: kvm [9479]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3ff [ 311.796082][ T9491] netlink: 4 bytes leftover after parsing attributes in process `syz.5.943'. [ 313.011538][ T30] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 313.040394][ T9512] FAULT_INJECTION: forcing a failure. [ 313.040394][ T9512] name failslab, interval 1, probability 0, space 0, times 0 [ 313.040418][ T9512] CPU: 1 UID: 0 PID: 9512 Comm: syz.7.952 Tainted: G L syzkaller #0 PREEMPT(full) [ 313.040434][ T9512] Tainted: [L]=SOFTLOCKUP [ 313.040438][ T9512] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 313.040445][ T9512] Call Trace: [ 313.040449][ T9512] [ 313.040454][ T9512] dump_stack_lvl+0x100/0x190 [ 313.040474][ T9512] should_fail_ex.cold+0x5/0xa [ 313.040490][ T9512] ? __pfx_autofs_fill_super+0x10/0x10 [ 313.040503][ T9512] should_failslab+0xc2/0x120 [ 313.040519][ T9512] ? __pfx_autofs_fill_super+0x10/0x10 [ 313.040532][ T9512] __kmalloc_cache_noprof+0x91/0x6d0 [ 313.040549][ T9512] ? __pfx_set_anon_super_fc+0x10/0x10 [ 313.040567][ T9512] ? autofs_new_ino+0x45/0x240 [ 313.040583][ T9512] ? __pfx_autofs_fill_super+0x10/0x10 [ 313.040595][ T9512] autofs_new_ino+0x45/0x240 [ 313.040608][ T9512] autofs_fill_super+0x183/0x8e0 [ 313.040622][ T9512] ? rcu_is_watching+0x13/0xc0 [ 313.040636][ T9512] ? __pfx_autofs_fill_super+0x10/0x10 [ 313.040649][ T9512] get_tree_nodev+0xdd/0x190 [ 313.040666][ T9512] autofs_get_tree+0x1b9/0x2b0 [ 313.040684][ T9512] vfs_get_tree+0x92/0x320 [ 313.040708][ T9512] vfs_cmd_create+0xd7/0x2a0 [ 313.040735][ T9512] __do_sys_fsconfig+0x55a/0xcb0 [ 313.040763][ T9512] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 313.040795][ T9512] ? ksys_write+0x1ac/0x250 [ 313.040813][ T9512] ? __pfx_ksys_write+0x10/0x10 [ 313.040838][ T9512] __do_fast_syscall_32+0x13a/0x8b0 [ 313.040866][ T9512] ? lockdep_hardirqs_on+0x7d/0x110 [ 313.040893][ T9512] do_fast_syscall_32+0x32/0x70 [ 313.040920][ T9512] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 313.040944][ T9512] RIP: 0023:0xf7f63fec [ 313.040964][ T9512] Code: Unable to access opcode bytes at 0xf7f63fc2. [ 313.040973][ T9512] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 313.040991][ T9512] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000006 [ 313.041003][ T9512] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.041014][ T9512] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 313.041025][ T9512] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 313.041036][ T9512] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 313.041062][ T9512] [ 313.183832][ T30] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 313.185148][ T30] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 84, changing to 10 [ 313.185176][ T30] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17152, setting to 1024 [ 313.185198][ T30] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.185230][ T30] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.190656][ T30] usb 11-1: config 0 descriptor?? [ 314.234785][ T30] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 315.604846][ T9549] lo speed is unknown, defaulting to 1000 [ 315.668258][ T9549] netlink: 1335 bytes leftover after parsing attributes in process `syz.7.965'. [ 315.694642][ T9547] block nbd5: NBD_DISCONNECT [ 315.742462][ T1041] usb 11-1: USB disconnect, device number 14 [ 315.807238][ T9557] netlink: 726 bytes leftover after parsing attributes in process `syz.6.966'. [ 316.481634][ T3263] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 316.651304][ T3263] usb 13-1: Using ep0 maxpacket: 8 [ 316.651328][ T5824] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 316.651818][ T3263] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 316.652672][ T3263] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 316.652696][ T3263] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 316.652707][ T3263] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 316.652719][ T3263] usb 13-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 316.652730][ T3263] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 316.652750][ T3263] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.657715][ T3263] usbtmc 13-1:16.0: bulk endpoints not found [ 316.701362][ T30] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 316.747023][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.822283][ T5824] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 316.823269][ T5824] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 84, changing to 10 [ 316.823289][ T5824] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17152, setting to 1024 [ 316.823304][ T5824] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 316.823327][ T5824] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.825652][ T5824] usb 10-1: config 0 descriptor?? [ 316.861413][ T30] usb 11-1: Using ep0 maxpacket: 16 [ 316.862176][ T30] usb 11-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 316.863272][ T30] usb 11-1: config 0 has an invalid interface number: 8 but max is 0 [ 316.863291][ T30] usb 11-1: config 0 has no interface number 0 [ 316.863319][ T30] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 316.865099][ T30] usb 11-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 316.865120][ T30] usb 11-1: Product: syz [ 316.865132][ T30] usb 11-1: SerialNumber: syz [ 316.867623][ T30] usb 11-1: config 0 descriptor?? [ 316.872834][ T30] cm109 11-1:0.8: invalid payload size 208, expected 4 [ 316.875399][ T30] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.8/input/input68 [ 317.082217][ C1] cm109 11-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 317.082278][ T3263] usb 11-1: USB disconnect, device number 15 [ 317.085933][ C1] cm109 11-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 317.085966][ C1] cm109 11-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 317.111091][ T3263] cm109 11-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 317.244887][ T5824] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 317.434771][ T9591] 9p: Bad value for 'wfdno' [ 317.797777][ T9601] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0018 instead [ 317.797853][ T9601] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0003 instead [ 317.797872][ T9601] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0300 instead [ 317.797889][ T9601] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0002 instead [ 317.797905][ T9601] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x0013 instead [ 317.797921][ T9601] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x0010 instead [ 317.797936][ T9601] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000028: 0x0100 instead [ 317.797952][ T9601] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000034: 0x0001 instead [ 317.798081][ T9601] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 317.798091][ T9601] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 318.560106][ T9603] LUN: removable file: (no medium) [ 319.182144][ T5746] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 319.397806][ T9620] netlink: 'syz.7.985': attribute type 21 has an invalid length. [ 320.162461][ T6703] cgroup: fork rejected by pids controller in /syz6 [ 320.396840][ T5809] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.500643][ T5809] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.551533][ T9629] FAULT_INJECTION: forcing a failure. [ 320.551533][ T9629] name failslab, interval 1, probability 0, space 0, times 0 [ 320.551574][ T9629] CPU: 1 UID: 0 PID: 9629 Comm: syz.7.990 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.551605][ T9629] Tainted: [L]=SOFTLOCKUP [ 320.551615][ T9629] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 320.551644][ T9629] Call Trace: [ 320.551653][ T9629] [ 320.551662][ T9629] dump_stack_lvl+0x100/0x190 [ 320.551697][ T9629] should_fail_ex.cold+0x5/0xa [ 320.551727][ T9629] should_failslab+0xc2/0x120 [ 320.551758][ T9629] __kmalloc_node_noprof+0xff/0x880 [ 320.551782][ T9629] ? __get_vm_area_node+0x1ff/0x350 [ 320.551808][ T9629] ? __get_vm_area_node+0x22b/0x350 [ 320.551834][ T9629] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 320.551870][ T9629] __vmalloc_node_range_noprof+0x3d4/0x1420 [ 320.551901][ T9629] ? rcu_is_watching+0x13/0xc0 [ 320.551924][ T9629] ? __schedule+0x126b/0x6920 [ 320.551951][ T9629] ? bpf_prog_calc_tag+0x63/0x340 [ 320.551983][ T9629] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 320.552016][ T9629] ? __pfx___schedule+0x10/0x10 [ 320.552049][ T9629] ? bpf_prog_calc_tag+0x63/0x340 [ 320.552073][ T9629] __vmalloc_node_noprof+0xad/0xf0 [ 320.552098][ T9629] ? bpf_prog_calc_tag+0x63/0x340 [ 320.552125][ T9629] __vmalloc_noprof+0xa3/0x120 [ 320.552151][ T9629] ? __pfx___vmalloc_noprof+0x10/0x10 [ 320.552175][ T9629] ? sort+0x97/0xd0 [ 320.552195][ T9629] ? __pfx_sort+0x10/0x10 [ 320.552215][ T9629] ? __pfx_cmp_subprogs+0x10/0x10 [ 320.552242][ T9629] bpf_prog_calc_tag+0x63/0x340 [ 320.552272][ T9629] bpf_check+0x5f2a/0xa980 [ 320.552299][ T9629] ? __css_rstat_updated+0x1ce/0x590 [ 320.552325][ T9629] ? __lock_acquire+0x5c0/0x1f40 [ 320.552352][ T9629] ? __pfx___css_rstat_updated+0x10/0x10 [ 320.552394][ T9629] ? __pfx_bpf_check+0x10/0x10 [ 320.552422][ T9629] ? lock_acquire+0x1d1/0x380 [ 320.552446][ T9629] ? bpf_prog_load+0x1a09/0x2a80 [ 320.552473][ T9629] ? find_held_lock+0x2b/0x80 [ 320.552493][ T9629] ? bpf_prog_load+0x1a09/0x2a80 [ 320.552522][ T9629] ? __asan_memset+0x23/0x50 [ 320.552546][ T9629] ? bpf_prog_load+0x1ac3/0x2a80 [ 320.552571][ T9629] bpf_prog_load+0x1ac3/0x2a80 [ 320.552603][ T9629] ? __pfx_bpf_prog_load+0x10/0x10 [ 320.552650][ T9629] __sys_bpf+0x1f46/0x4a30 [ 320.552678][ T9629] ? __pfx___sys_bpf+0x10/0x10 [ 320.552696][ T9629] ? lock_acquire+0x1d1/0x380 [ 320.552721][ T9629] ? get_pid_task+0x2a/0x250 [ 320.552743][ T9629] ? find_held_lock+0x2b/0x80 [ 320.552763][ T9629] ? get_pid_task+0xfc/0x250 [ 320.552782][ T9629] ? get_pid_task+0xfc/0x250 [ 320.552808][ T9629] ? proc_fail_nth_write+0x9f/0x220 [ 320.552830][ T9629] ? find_held_lock+0x2b/0x80 [ 320.552855][ T9629] ? rcu_read_lock_any_held+0x6a/0x90 [ 320.552877][ T9629] ? find_held_lock+0x2b/0x80 [ 320.552896][ T9629] ? ksys_write+0x190/0x250 [ 320.552914][ T9629] ? ksys_write+0x190/0x250 [ 320.552935][ T9629] ? lock_acquire+0x1d1/0x380 [ 320.552977][ T9629] ? fput+0x7c/0x100 [ 320.553003][ T9629] ? __ia32_sys_bpf+0xcc/0x170 [ 320.553023][ T9629] __ia32_sys_bpf+0xcc/0x170 [ 320.553051][ T9629] ? __do_fast_syscall_32+0xb3/0x8b0 [ 320.553081][ T9629] __do_fast_syscall_32+0x13a/0x8b0 [ 320.553108][ T9629] ? lockdep_hardirqs_on+0x7d/0x110 [ 320.553134][ T9629] do_fast_syscall_32+0x32/0x70 [ 320.553162][ T9629] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.553184][ T9629] RIP: 0023:0xf7f63fec [ 320.553205][ T9629] Code: Unable to access opcode bytes at 0xf7f63fc2. [ 320.553213][ T9629] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 320.553231][ T9629] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000340 [ 320.553243][ T9629] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 320.553254][ T9629] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 320.553264][ T9629] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 320.553274][ T9629] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.553298][ T9629] [ 320.553374][ T9629] syz.7.990: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=syz7,mems_allowed=0-1 [ 320.553435][ T9629] CPU: 1 UID: 0 PID: 9629 Comm: syz.7.990 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.553461][ T9629] Tainted: [L]=SOFTLOCKUP [ 320.553469][ T9629] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 320.553479][ T9629] Call Trace: [ 320.553502][ T9629] [ 320.553511][ T9629] dump_stack_lvl+0x100/0x190 [ 320.553537][ T9629] warn_alloc.cold+0x9e/0xb2 [ 320.553559][ T9629] ? __pfx_warn_alloc+0x10/0x10 [ 320.553579][ T9629] ? dump_stack_lvl+0x17c/0x190 [ 320.553604][ T9629] ? rcu_is_watching+0x13/0xc0 [ 320.553626][ T9629] ? __kasan_kmalloc+0x8a/0xb0 [ 320.553650][ T9629] ? __kmalloc_node_noprof+0x360/0x880 [ 320.553671][ T9629] ? __get_vm_area_node+0x1ff/0x350 [ 320.553695][ T9629] ? __get_vm_area_node+0x22b/0x350 [ 320.553719][ T9629] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 320.553750][ T9629] __vmalloc_node_range_noprof+0x10f4/0x1420 [ 320.553779][ T9629] ? rcu_is_watching+0x13/0xc0 [ 320.553804][ T9629] ? bpf_prog_calc_tag+0x63/0x340 [ 320.553835][ T9629] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 320.553866][ T9629] ? __pfx___schedule+0x10/0x10 [ 320.553893][ T9629] ? bpf_prog_calc_tag+0x63/0x340 [ 320.553918][ T9629] __vmalloc_node_noprof+0xad/0xf0 [ 320.553944][ T9629] ? bpf_prog_calc_tag+0x63/0x340 [ 320.553972][ T9629] __vmalloc_noprof+0xa3/0x120 [ 320.553998][ T9629] ? __pfx___vmalloc_noprof+0x10/0x10 [ 320.554022][ T9629] ? sort+0x97/0xd0 [ 320.554049][ T9629] ? __pfx_sort+0x10/0x10 [ 320.554069][ T9629] ? __pfx_cmp_subprogs+0x10/0x10 [ 320.554095][ T9629] bpf_prog_calc_tag+0x63/0x340 [ 320.554125][ T9629] bpf_check+0x5f2a/0xa980 [ 320.554151][ T9629] ? __css_rstat_updated+0x1ce/0x590 [ 320.554178][ T9629] ? __lock_acquire+0x5c0/0x1f40 [ 320.554204][ T9629] ? __pfx___css_rstat_updated+0x10/0x10 [ 320.554247][ T9629] ? __pfx_bpf_check+0x10/0x10 [ 320.554274][ T9629] ? lock_acquire+0x1d1/0x380 [ 320.554298][ T9629] ? bpf_prog_load+0x1a09/0x2a80 [ 320.554324][ T9629] ? find_held_lock+0x2b/0x80 [ 320.554343][ T9629] ? bpf_prog_load+0x1a09/0x2a80 [ 320.554372][ T9629] ? __asan_memset+0x23/0x50 [ 320.554396][ T9629] ? bpf_prog_load+0x1ac3/0x2a80 [ 320.554421][ T9629] bpf_prog_load+0x1ac3/0x2a80 [ 320.554453][ T9629] ? __pfx_bpf_prog_load+0x10/0x10 [ 320.554501][ T9629] __sys_bpf+0x1f46/0x4a30 [ 320.554527][ T9629] ? __pfx___sys_bpf+0x10/0x10 [ 320.554546][ T9629] ? lock_acquire+0x1d1/0x380 [ 320.554570][ T9629] ? get_pid_task+0x2a/0x250 [ 320.554590][ T9629] ? find_held_lock+0x2b/0x80 [ 320.554610][ T9629] ? get_pid_task+0xfc/0x250 [ 320.554627][ T9629] ? get_pid_task+0xfc/0x250 [ 320.554653][ T9629] ? proc_fail_nth_write+0x9f/0x220 [ 320.554675][ T9629] ? find_held_lock+0x2b/0x80 [ 320.554703][ T9629] ? rcu_read_lock_any_held+0x6a/0x90 [ 320.554724][ T9629] ? find_held_lock+0x2b/0x80 [ 320.554744][ T9629] ? ksys_write+0x190/0x250 [ 320.554763][ T9629] ? ksys_write+0x190/0x250 [ 320.554783][ T9629] ? lock_acquire+0x1d1/0x380 [ 320.554825][ T9629] ? fput+0x7c/0x100 [ 320.554873][ T9629] ? __ia32_sys_bpf+0xcc/0x170 [ 320.554894][ T9629] __ia32_sys_bpf+0xcc/0x170 [ 320.554916][ T9629] ? __do_fast_syscall_32+0xb3/0x8b0 [ 320.554947][ T9629] __do_fast_syscall_32+0x13a/0x8b0 [ 320.554975][ T9629] ? lockdep_hardirqs_on+0x7d/0x110 [ 320.555003][ T9629] do_fast_syscall_32+0x32/0x70 [ 320.555037][ T9629] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.555061][ T9629] RIP: 0023:0xf7f63fec [ 320.555078][ T9629] Code: Unable to access opcode bytes at 0xf7f63fc2. [ 320.555085][ T9629] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 320.555101][ T9629] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000340 [ 320.555113][ T9629] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 320.555125][ T9629] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 320.555137][ T9629] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 320.555148][ T9629] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.555174][ T9629] [ 320.555243][ T9629] Mem-Info: [ 320.555254][ T9629] active_anon:6310 inactive_anon:11613 isolated_anon:0 [ 320.555254][ T9629] active_file:3862 inactive_file:15719 isolated_file:0 [ 320.555254][ T9629] unevictable:0 dirty:404 writeback:0 [ 320.555254][ T9629] slab_reclaimable:7836 slab_unreclaimable:63614 [ 320.555254][ T9629] mapped:25123 shmem:10756 pagetables:1547 [ 320.555254][ T9629] sec_pagetables:302 bounce:0 [ 320.555254][ T9629] kernel_misc_reclaimable:0 [ 320.555254][ T9629] free:43146 free_pcp:4025 free_cma:0 [ 320.555297][ T9629] Node 0 active_anon:404kB inactive_anon:336kB active_file:8kB inactive_file:3724kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9088kB pagetables:1576kB sec_pagetables:1148kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 320.555343][ T9629] Node 1 active_anon:24836kB inactive_anon:46116kB active_file:15440kB inactive_file:59152kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100456kB dirty:1608kB writeback:0kB shmem:43024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7584kB pagetables:4612kB sec_pagetables:60kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 320.555450][ T9629] Node 0 DMA free:2836kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 320.555501][ T9629] lowmem_reserve[]: 0 277 277 277 277 [ 320.555533][ T9629] Node 0 DMA32 free:27964kB boost:12288kB min:24916kB low:28072kB high:31228kB reserved_highatomic:0kB free_highatomic:0kB active_anon:404kB inactive_anon:332kB active_file:8kB inactive_file:3724kB unevictable:0kB writepending:8kB zspages:20kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:5848kB local_pcp:80kB free_cma:0kB [ 320.555641][ T9629] lowmem_reserve[]: 0 0 0 0 0 [ 320.555674][ T9629] Node 1 DMA32 free:141784kB boost:8192kB min:55336kB low:67120kB high:78904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24836kB inactive_anon:46116kB active_file:15440kB inactive_file:59152kB unevictable:0kB writepending:1608kB zspages:1860kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:10248kB local_pcp:548kB free_cma:0kB [ 320.555726][ T9629] lowmem_reserve[]: 0 0 0 0 0 [ 320.555815][ T9629] Node 0 DMA: 73*4kB (U) 28*8kB (U) 15*16kB (U) 15*32kB (U) 9*64kB (U) 4*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2836kB [ 320.556006][ T9629] Node 0 DMA32: 294*4kB (UME) 118*8kB (UME) 118*16kB (UME) 203*32kB (UE) 101*64kB (UE) 37*128kB (UME) 10*256kB (UM) 3*512kB (U) 2*1024kB (UM) 0*2048kB 0*4096kB = 27848kB [ 320.556206][ T9629] Node 1 DMA32: 687*4kB (UME) 1214*8kB (UME) 1699*16kB (UME) 436*32kB (UME) 432*64kB (UME) 168*128kB (UME) 74*256kB (UM) 37*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 141660kB [ 320.556404][ T9629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 320.556421][ T9629] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 320.556434][ T9629] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 320.556509][ T9629] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 320.556525][ T9629] 30779 total pagecache pages [ 320.556532][ T9629] 431 pages in swap cache [ 320.556538][ T9629] Free swap = 120784kB [ 320.556544][ T9629] Total swap = 124996kB [ 320.556553][ T9629] 524155 pages RAM [ 320.556559][ T9629] 0 pages HighMem/MovableOnly [ 320.556564][ T9629] 212121 pages reserved [ 320.556572][ T9629] 0 pages cma reserved [ 320.597587][ T5093] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 320.605291][ T5809] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.607994][ T5093] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 320.611827][ T5093] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 320.613854][ T5093] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 320.614942][ T5093] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 320.815647][ T5809] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.027569][ T9630] lo speed is unknown, defaulting to 1000 [ 321.268871][ T5809] bridge_slave_1: left allmulticast mode [ 321.268889][ T5809] bridge_slave_1: left promiscuous mode [ 321.269053][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.276767][ T5809] bridge_slave_0: left allmulticast mode [ 321.276827][ T5809] bridge_slave_0: left promiscuous mode [ 321.276956][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.449147][ T5809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.451475][ T5809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.460172][ T5809] bond0 (unregistering): Released all slaves [ 321.642753][ T5448] 8021q: adding VLAN 0 to HW filter on device eth18 [ 321.645320][ T5809] tipc: Left network mode [ 321.713798][ T9630] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.713942][ T9630] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.714041][ T9630] bridge_slave_0: entered allmulticast mode [ 321.715344][ T9630] bridge_slave_0: entered promiscuous mode [ 321.719699][ T9630] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.719780][ T9630] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.719879][ T9630] bridge_slave_1: entered allmulticast mode [ 321.721770][ T9630] bridge_slave_1: entered promiscuous mode [ 321.769451][ T9630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.794245][ T9630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.813718][ T9630] team0: Port device team_slave_0 added [ 321.815456][ T9630] team0: Port device team_slave_1 added [ 321.865162][ T9630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.865173][ T9630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.865187][ T9630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.866074][ T9630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.866082][ T9630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.866095][ T9630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.914440][ T5809] hsr_slave_0: left promiscuous mode [ 321.914940][ T5809] hsr_slave_1: left promiscuous mode [ 321.915322][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.916329][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.075226][ T5809] team0 (unregistering): Port device team_slave_1 removed [ 322.087808][ T5809] team0 (unregistering): Port device team_slave_0 removed [ 322.147997][ T5448] 8021q: adding VLAN 0 to HW filter on device eth19 [ 322.175465][ T9630] hsr_slave_0: entered promiscuous mode [ 322.179694][ T9630] hsr_slave_1: entered promiscuous mode [ 322.180257][ T9630] debugfs: 'hsr0' already exists in 'hsr' [ 322.180278][ T9630] Cannot create hsr debugfs directory [ 322.415092][ T5448] 8021q: adding VLAN 0 to HW filter on device eth20 [ 322.673865][ T5746] Bluetooth: hci1: command tx timeout [ 322.757003][ T9630] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 322.759276][ T9630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 322.759895][ T9630] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 322.763256][ T9630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 322.763726][ T9630] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 322.772911][ T9630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 322.773366][ T9630] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 322.783645][ T9630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 322.827116][ T9630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.834176][ T9630] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.838252][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.838300][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.842990][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.843034][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.081908][ T9630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.223971][ T9630] veth0_vlan: entered promiscuous mode [ 323.229786][ T9630] veth1_vlan: entered promiscuous mode [ 323.245466][ T9630] veth0_macvtap: entered promiscuous mode [ 323.247564][ T9630] veth1_macvtap: entered promiscuous mode [ 323.255261][ T9630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.260639][ T9630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.303855][ T6838] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.304029][ T6838] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.304224][ T6838] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.304242][ T6838] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.369719][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.369733][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.385207][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.385225][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.462666][ T9727] Bluetooth: ISO socket layer initialized [ 324.751429][ T5746] Bluetooth: hci1: command tx timeout [ 324.947034][ T6838] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.033875][ T6838] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.102504][ T6838] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.203596][ T6838] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.221068][ T5746] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 325.356488][ T6838] bridge_slave_1: left allmulticast mode [ 325.356506][ T6838] bridge_slave_1: left promiscuous mode [ 325.356608][ T6838] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.360013][ T6838] bridge_slave_0: left allmulticast mode [ 325.360028][ T6838] bridge_slave_0: left promiscuous mode [ 325.360123][ T6838] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.479717][ T6838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.487235][ T6838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.489113][ T6838] bond0 (unregistering): Released all slaves [ 325.684644][ T5448] 8021q: adding VLAN 0 to HW filter on device eth18 [ 325.748000][ T6838] hsr_slave_0: left promiscuous mode [ 325.748764][ T6838] hsr_slave_1: left promiscuous mode [ 325.749435][ T6838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.749451][ T6838] batadv0: mtu less than device minimum [ 325.750606][ T6838] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.754469][ T6838] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.755693][ T6838] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.756788][ T6838] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.758066][ T6838] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.759063][ T6838] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.760008][ T6838] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.761005][ T6838] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.762070][ T6838] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.779584][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.791668][ T6838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.815154][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.815979][ T6838] batman_adv: batadv0: Interface deactivated: dummy0 [ 325.815995][ T6838] batman_adv: batadv0: Removing interface: dummy0 [ 325.829241][ T6838] veth1_macvtap: left promiscuous mode [ 325.829278][ T6838] veth0_macvtap: left promiscuous mode [ 325.829347][ T6838] veth1_vlan: left promiscuous mode [ 325.829412][ T6838] veth0_vlan: left promiscuous mode [ 325.838437][ T9752] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1002'. [ 326.099510][ T6838] team0 (unregistering): Port device team_slave_1 removed [ 326.111057][ T6838] team0 (unregistering): Port device team_slave_0 removed [ 326.304137][ T5448] 8021q: adding VLAN 0 to HW filter on device eth20 [ 326.305625][ T9753] syzkaller1: entered promiscuous mode [ 326.305639][ T9753] syzkaller1: entered allmulticast mode [ 326.520032][ T9774] FAULT_INJECTION: forcing a failure. [ 326.520032][ T9774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.520064][ T9774] CPU: 3 UID: 0 PID: 9774 Comm: syz.7.1004 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.520089][ T9774] Tainted: [L]=SOFTLOCKUP [ 326.520095][ T9774] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 326.520107][ T9774] Call Trace: [ 326.520114][ T9774] [ 326.520122][ T9774] dump_stack_lvl+0x100/0x190 [ 326.520174][ T9774] should_fail_ex.cold+0x5/0xa [ 326.520197][ T9774] _copy_from_user+0x2e/0xd0 [ 326.520219][ T9774] get_compat_msghdr+0xb3/0x480 [ 326.520245][ T9774] ? __pfx_get_compat_msghdr+0x10/0x10 [ 326.520272][ T9774] ? rcu_is_watching+0x13/0xc0 [ 326.520292][ T9774] ? ___sys_recvmsg+0x177/0x1a0 [ 326.520313][ T9774] ? kfree+0x1e5/0x6d0 [ 326.520352][ T9774] ___sys_recvmsg+0x193/0x1a0 [ 326.520372][ T9774] ? __pfx____sys_recvmsg+0x10/0x10 [ 326.520391][ T9774] ? lock_acquire+0x1d1/0x380 [ 326.520429][ T9774] ? __pfx___might_resched+0x10/0x10 [ 326.520457][ T9774] do_recvmmsg+0x54d/0x740 [ 326.520478][ T9774] ? __pfx_do_recvmmsg+0x10/0x10 [ 326.520499][ T9774] ? find_held_lock+0x2b/0x80 [ 326.520515][ T9774] ? ksys_write+0x190/0x250 [ 326.520537][ T9774] ? ksys_write+0x190/0x250 [ 326.520566][ T9774] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 326.520605][ T9774] __sys_recvmmsg+0x21f/0x270 [ 326.520638][ T9774] ? __pfx___sys_recvmmsg+0x10/0x10 [ 326.520675][ T9774] ? ksys_write+0x1ac/0x250 [ 326.520697][ T9774] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 326.520717][ T9774] ? __do_fast_syscall_32+0xb3/0x8b0 [ 326.520745][ T9774] ? lockdep_hardirqs_on+0x7d/0x110 [ 326.520771][ T9774] __do_fast_syscall_32+0x13a/0x8b0 [ 326.520801][ T9774] ? lockdep_hardirqs_on+0x7d/0x110 [ 326.520832][ T9774] do_fast_syscall_32+0x32/0x70 [ 326.520863][ T9774] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.520886][ T9774] RIP: 0023:0xf7f63fec [ 326.520905][ T9774] Code: Unable to access opcode bytes at 0xf7f63fc2. [ 326.520914][ T9774] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 326.520932][ T9774] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080003700 [ 326.520945][ T9774] RDX: 0000000000000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.520956][ T9774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 326.520967][ T9774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.520978][ T9774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 326.521003][ T9774] [ 326.533591][ T5448] 8021q: adding VLAN 0 to HW filter on device eth19 [ 326.687840][ T5448] 8021q: adding VLAN 0 to HW filter on device eth21 [ 326.821778][ T5746] Bluetooth: hci1: command tx timeout [ 327.640375][ T6917] usb 10-1: USB disconnect, device number 18 [ 327.659741][ T5841] usb 13-1: USB disconnect, device number 12 [ 327.919238][ T9821] netlink: 'syz.5.1015': attribute type 10 has an invalid length. [ 328.248519][ T5746] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 328.462025][ T6917] usb 13-1: new high-speed USB device number 13 using dummy_hcd [ 328.622239][ T6917] usb 13-1: Using ep0 maxpacket: 8 [ 328.622704][ T6917] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 328.639524][ T6917] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 328.639554][ T6917] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 328.639565][ T6917] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 328.639577][ T6917] usb 13-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 328.639587][ T6917] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 328.639607][ T6917] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.649989][ T6917] usbtmc 13-1:16.0: bulk endpoints not found [ 328.792762][ T5746] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 328.861436][ T7349] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 328.901418][ T5746] Bluetooth: hci1: command tx timeout [ 329.011831][ T7349] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 329.012760][ T7349] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 84, changing to 10 [ 329.012778][ T7349] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17152, setting to 1024 [ 329.012791][ T7349] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 329.012813][ T7349] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.015535][ T7349] usb 10-1: config 0 descriptor?? [ 329.377556][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.377570][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.387638][ T6580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.387674][ T6580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.427924][ T7349] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 330.651453][ T7349] usb 11-1: new full-speed USB device number 16 using dummy_hcd [ 330.822013][ T7349] usb 11-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 330.823087][ T7349] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.823129][ T7349] usb 11-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.823146][ T7349] usb 11-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 330.824950][ T7349] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.824968][ T7349] usb 11-1: Product: syz [ 330.824979][ T7349] usb 11-1: Manufacturer: syz [ 330.824991][ T7349] usb 11-1: SerialNumber: syz [ 331.038900][ T7349] snd-usb-caiaq 11-1:1.0: invalid EPs [ 331.038915][ T7349] usb 11-1: unable to init card! (ret=-22) [ 331.039107][ T7349] snd-usb-caiaq 11-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 331.238181][ T6861] usb 11-1: USB disconnect, device number 16 [ 331.411378][ T1041] usb 12-1: new high-speed USB device number 22 using dummy_hcd [ 331.561353][ T1041] usb 12-1: Using ep0 maxpacket: 32 [ 331.561877][ T1041] usb 12-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 331.562767][ T1041] usb 12-1: config 2 has an invalid interface number: 88 but max is 0 [ 331.562802][ T1041] usb 12-1: config 2 has no interface number 0 [ 331.562829][ T1041] usb 12-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 331.562846][ T1041] usb 12-1: config 2 interface 88 has no altsetting 0 [ 331.564517][ T1041] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 331.564530][ T1041] usb 12-1: Product: syz [ 331.564537][ T1041] usb 12-1: Manufacturer: syz [ 331.564544][ T1041] usb 12-1: SerialNumber: syz [ 331.566288][ T9884] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 331.826840][ T9886] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1036'. [ 331.953133][ T9892] CacheFiles: No cache directory specified [ 332.014331][ T9891] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 332.108885][ T6808] bridge_slave_1: left allmulticast mode [ 332.108903][ T6808] bridge_slave_1: left promiscuous mode [ 332.109054][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.110882][ T6808] bridge_slave_0: left allmulticast mode [ 332.110894][ T6808] bridge_slave_0: left promiscuous mode [ 332.111022][ T6808] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.123812][ T9894] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 332.189453][ T9896] FAULT_INJECTION: forcing a failure. [ 332.189453][ T9896] name failslab, interval 1, probability 0, space 0, times 0 [ 332.189477][ T9896] CPU: 0 UID: 0 PID: 9896 Comm: syz.6.1038 Tainted: G L syzkaller #0 PREEMPT(full) [ 332.189493][ T9896] Tainted: [L]=SOFTLOCKUP [ 332.189497][ T9896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 332.189504][ T9896] Call Trace: [ 332.189508][ T9896] [ 332.189513][ T9896] dump_stack_lvl+0x100/0x190 [ 332.189537][ T9896] should_fail_ex.cold+0x5/0xa [ 332.189558][ T9896] should_failslab+0xc2/0x120 [ 332.189584][ T9896] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 332.189606][ T9896] ? __kasan_kmalloc+0xaa/0xb0 [ 332.189629][ T9896] ? __request_module+0x2d5/0x6a0 [ 332.189650][ T9896] kstrdup+0x51/0xe0 [ 332.189662][ T9896] __request_module+0x2d5/0x6a0 [ 332.189673][ T9896] ? __pfx___request_module+0x10/0x10 [ 332.189682][ T9896] ? tomoyo_path_number_perm+0x46d/0x580 [ 332.189699][ T9896] ? stack_trace_save+0x8e/0xc0 [ 332.189715][ T9896] ? rcu_is_watching+0x13/0xc0 [ 332.189727][ T9896] ? apparmor_capable+0x1d7/0x4d0 [ 332.189746][ T9896] dev_load+0x204/0x240 [ 332.189761][ T9896] devinet_ioctl+0x124/0x1f10 [ 332.189776][ T9896] ? __might_fault+0xc5/0x140 [ 332.189794][ T9896] ? __pfx_devinet_ioctl+0x10/0x10 [ 332.189810][ T9896] ? _copy_from_user+0x59/0xd0 [ 332.189832][ T9896] inet_ioctl+0x3aa/0x3f0 [ 332.189848][ T9896] ? __pfx_inet_ioctl+0x10/0x10 [ 332.189866][ T9896] ? kasan_quarantine_put+0x104/0x240 [ 332.189884][ T9896] ? tomoyo_path_number_perm+0x188/0x580 [ 332.189903][ T9896] sock_do_ioctl+0x118/0x280 [ 332.189920][ T9896] ? __pfx_sock_do_ioctl+0x10/0x10 [ 332.189939][ T9896] ? do_vfs_ioctl+0x226/0x13e0 [ 332.189958][ T9896] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 332.189977][ T9896] compat_sock_ioctl+0x568/0x760 [ 332.189990][ T9896] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 332.190002][ T9896] ? hook_file_ioctl_common+0x140/0x440 [ 332.190023][ T9896] ? __fget_files+0x21f/0x3d0 [ 332.190037][ T9896] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 332.190050][ T9896] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 332.190069][ T9896] __do_fast_syscall_32+0x13a/0x8b0 [ 332.190087][ T9896] ? lockdep_hardirqs_on+0x7d/0x110 [ 332.190104][ T9896] do_fast_syscall_32+0x32/0x70 [ 332.190122][ T9896] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 332.190136][ T9896] RIP: 0023:0xf7fb6fec [ 332.190150][ T9896] Code: Unable to access opcode bytes at 0xf7fb6fc2. [ 332.190155][ T9896] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 332.190167][ T9896] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008914 [ 332.190174][ T9896] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 332.190181][ T9896] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 332.190188][ T9896] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 332.190194][ T9896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 332.190208][ T9896] [ 332.259767][ T6808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.273853][ T6808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.284541][ T6808] bond0 (unregistering): Released all slaves [ 332.507576][ T9894] Could not find key with description: [syz] [ 332.507589][ T9894] process_request_key_err: No key [ 332.507595][ T9894] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 332.507603][ T9894] One or more global auth toks could not properly register; rc = [-2] [ 332.507626][ T9894] Error validating options; rc = [-2] [ 332.613291][ T6808] hsr_slave_0: left promiscuous mode [ 332.614860][ T6808] hsr_slave_1: left promiscuous mode [ 332.615375][ T6808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.615387][ T6808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.616996][ T6808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.617006][ T6808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.644333][ T6808] veth1_macvtap: left promiscuous mode [ 332.644506][ T6808] veth0_macvtap: left promiscuous mode [ 332.644614][ T6808] veth1_vlan: left promiscuous mode [ 332.644664][ T6808] veth0_vlan: left promiscuous mode [ 332.811093][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1042'. [ 333.206741][ T6808] IPVS: stop unused estimator thread 0... [ 333.941283][ C3] net_ratelimit: 31 callbacks suppressed [ 334.191355][ T1041] asix 12-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 334.191524][ T1041] asix 12-1:2.88: probe with driver asix failed with error -71 [ 334.196642][ T1041] usb 12-1: USB disconnect, device number 22 [ 336.356729][ T9949] netlink: 'syz.6.1049': attribute type 5 has an invalid length. [ 336.683481][ T9949] ip6erspan0: entered promiscuous mode [ 337.196854][ T9964] FAULT_INJECTION: forcing a failure. [ 337.196854][ T9964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.196876][ T9964] CPU: 0 UID: 0 PID: 9964 Comm: syz.7.1052 Tainted: G L syzkaller #0 PREEMPT(full) [ 337.196891][ T9964] Tainted: [L]=SOFTLOCKUP [ 337.196896][ T9964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 337.196902][ T9964] Call Trace: [ 337.196907][ T9964] [ 337.196912][ T9964] dump_stack_lvl+0x100/0x190 [ 337.196930][ T9964] should_fail_ex.cold+0x5/0xa [ 337.196946][ T9964] _copy_from_user+0x2e/0xd0 [ 337.196960][ T9964] kstrtouint_from_user+0xd6/0x1d0 [ 337.196978][ T9964] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 337.196998][ T9964] ? lock_acquire+0x1d1/0x380 [ 337.197016][ T9964] proc_fail_nth_write+0x83/0x220 [ 337.197028][ T9964] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 337.197044][ T9964] vfs_write+0x2aa/0x1050 [ 337.197057][ T9964] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 337.197069][ T9964] ? lock_acquire+0x1d1/0x380 [ 337.197083][ T9964] ? __fget_files+0x34/0x3d0 [ 337.197096][ T9964] ? __pfx_vfs_write+0x10/0x10 [ 337.197106][ T9964] ? find_held_lock+0x2b/0x80 [ 337.197118][ T9964] ? __fget_files+0x215/0x3d0 [ 337.197132][ T9964] ? __fget_files+0x21f/0x3d0 [ 337.197149][ T9964] ksys_write+0x12a/0x250 [ 337.197160][ T9964] ? __pfx_ksys_write+0x10/0x10 [ 337.197175][ T9964] do_int80_emulation+0x166/0x650 [ 337.197195][ T9964] asm_int80_emulation+0x1a/0x20 [ 337.197206][ T9964] RIP: 0023:0xf71675ab [ 337.197216][ T9964] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 337.197227][ T9964] RSP: 002b:00000000f54264bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 337.197239][ T9964] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54265d0 [ 337.197246][ T9964] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 337.197252][ T9964] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 337.197258][ T9964] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 337.197265][ T9964] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 337.197279][ T9964] [ 337.448771][ T9982] FAULT_INJECTION: forcing a failure. [ 337.448771][ T9982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.448796][ T9982] CPU: 2 UID: 0 PID: 9982 Comm: syz.7.1057 Tainted: G L syzkaller #0 PREEMPT(full) [ 337.448813][ T9982] Tainted: [L]=SOFTLOCKUP [ 337.448817][ T9982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 337.448825][ T9982] Call Trace: [ 337.448829][ T9982] [ 337.448834][ T9982] dump_stack_lvl+0x100/0x190 [ 337.448870][ T9982] should_fail_ex.cold+0x5/0xa [ 337.448887][ T9982] _copy_from_user+0x2e/0xd0 [ 337.448904][ T9982] get_compat_msghdr+0xb3/0x480 [ 337.448923][ T9982] ? __pfx_get_compat_msghdr+0x10/0x10 [ 337.448948][ T9982] ___sys_sendmsg+0x1b6/0x1e0 [ 337.448962][ T9982] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.448982][ T9982] ? find_held_lock+0x2b/0x80 [ 337.449004][ T9982] __sys_sendmsg+0x160/0x210 [ 337.449021][ T9982] ? __pfx___sys_sendmsg+0x10/0x10 [ 337.449041][ T9982] ? __pfx_ksys_write+0x10/0x10 [ 337.449057][ T9982] __do_fast_syscall_32+0x13a/0x8b0 [ 337.449076][ T9982] ? lockdep_hardirqs_on+0x7d/0x110 [ 337.449095][ T9982] do_fast_syscall_32+0x32/0x70 [ 337.449114][ T9982] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 337.449129][ T9982] RIP: 0023:0xf7f63fec [ 337.449143][ T9982] Code: Unable to access opcode bytes at 0xf7f63fc2. [ 337.449149][ T9982] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 337.449161][ T9982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 337.449169][ T9982] RDX: 0000000020008010 RSI: 0000000000000000 RDI: 0000000000000000 [ 337.449176][ T9982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 337.449183][ T9982] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 337.449190][ T9982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 337.449205][ T9982] [ 337.753120][ T9991] fuse: Invalid rootmode [ 337.799716][ T9986] syz.7.1059 (9986): drop_caches: 2 [ 337.993424][ T9996] lo: entered promiscuous mode [ 337.993800][ T9996] 0ªî{X¹¦: entered promiscuous mode [ 337.994792][ T9996] vcan0: entered promiscuous mode [ 337.994916][ T9996] bond0: entered promiscuous mode [ 337.994936][ T9996] bond_slave_0: entered promiscuous mode [ 337.995108][ T9996] bond_slave_1: entered promiscuous mode [ 337.995344][ T9996] team0: entered promiscuous mode [ 337.995358][ T9996] team_slave_0: entered promiscuous mode [ 337.995502][ T9996] team_slave_1: entered promiscuous mode [ 337.995753][ T9996] dummy0: entered promiscuous mode [ 337.995886][ T9996] nlmon0: entered promiscuous mode [ 337.995998][ T9996] batadv0: entered promiscuous mode [ 337.996129][ T9996] vxcan0: entered promiscuous mode [ 337.996248][ T9996] vxcan1: entered promiscuous mode [ 337.996374][ T9996] veth0: entered promiscuous mode [ 337.996491][ T9996] veth1: entered promiscuous mode [ 337.996606][ T9996] wg0: entered promiscuous mode [ 337.996730][ T9996] wg1: entered promiscuous mode [ 337.996855][ T9996] wg2: entered promiscuous mode [ 337.996988][ T9996] veth0_to_bridge: entered promiscuous mode [ 337.997207][ T9996] veth1_to_bridge: entered promiscuous mode [ 337.997423][ T9996] veth0_to_bond: entered promiscuous mode [ 337.997659][ T9996] veth1_to_bond: entered promiscuous mode [ 337.997897][ T9996] veth0_to_team: entered promiscuous mode [ 337.998136][ T9996] veth1_to_team: entered promiscuous mode [ 337.998364][ T9996] veth0_to_batadv: entered promiscuous mode [ 337.998492][ T9996] batadv_slave_0: entered promiscuous mode [ 337.998621][ T9996] veth1_to_batadv: entered promiscuous mode [ 337.998744][ T9996] batadv_slave_1: entered promiscuous mode [ 337.998905][ T9996] xfrm0: entered promiscuous mode [ 337.999032][ T9996] veth0_to_hsr: entered promiscuous mode [ 337.999296][ T9996] hsr0: entered promiscuous mode [ 337.999430][ T9996] veth1_virt_wifi: entered promiscuous mode [ 337.999579][ T9996] veth0_virt_wifi: entered promiscuous mode [ 338.000032][ T9996] virt_wifi0: entered promiscuous mode [ 338.007486][ T9996] vlan0: entered promiscuous mode [ 338.010826][ T9996] vlan1: entered promiscuous mode [ 338.019205][ T9996] macvlan0: entered promiscuous mode [ 338.019482][ T9996] macvlan1: entered promiscuous mode [ 338.019619][ T9996] ipvlan0: entered promiscuous mode [ 338.019795][ T9996] ipvlan1: entered promiscuous mode [ 338.020192][ T9996] macvtap0: entered promiscuous mode [ 338.020323][ T9996] macsec0: entered promiscuous mode [ 338.020429][ T9996] geneve0: entered promiscuous mode [ 338.020566][ T9996] geneve1: entered promiscuous mode [ 338.038387][ T9996] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 338.106466][ T9996] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode [ 338.108491][ T9996] netdevsim netdevsim7 eth0: entered promiscuous mode [ 338.108648][ T9996] netdevsim netdevsim7 eth1: entered promiscuous mode [ 338.108915][ T9996] netdevsim netdevsim7 eth2: entered promiscuous mode [ 338.109049][ T9996] netdevsim netdevsim7 eth3: entered promiscuous mode [ 338.109180][ T9996] erspan0.1: entered promiscuous mode [ 338.109425][ T9996] gtp0: entered promiscuous mode [ 338.109653][ T9996] gtp1: entered promiscuous mode [ 338.119631][ T9996] veth2: entered promiscuous mode [ 338.119874][ T9996] veth3: entered promiscuous mode [ 338.129379][ T9996] vxlan0: entered promiscuous mode [ 338.129502][ T9996] gtp2: entered promiscuous mode [ 338.213242][T10008] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1067'. [ 338.213257][T10008] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1067'. [ 338.817314][T10021] FAULT_INJECTION: forcing a failure. [ 338.817314][T10021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.817342][T10021] CPU: 2 UID: 0 PID: 10021 Comm: syz.7.1069 Tainted: G L syzkaller #0 PREEMPT(full) [ 338.817359][T10021] Tainted: [L]=SOFTLOCKUP [ 338.817364][T10021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.817371][T10021] Call Trace: [ 338.817376][T10021] [ 338.817381][T10021] dump_stack_lvl+0x100/0x190 [ 338.817403][T10021] should_fail_ex.cold+0x5/0xa [ 338.817420][T10021] _copy_to_user+0x32/0xd0 [ 338.817451][T10021] simple_read_from_buffer+0xcb/0x170 [ 338.817469][T10021] proc_fail_nth_read+0x1af/0x230 [ 338.817482][T10021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 338.817495][T10021] ? rw_verify_area+0xce/0x6d0 [ 338.817513][T10021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 338.817525][T10021] vfs_read+0x1e4/0xb40 [ 338.817537][T10021] ? lock_acquire+0x1d1/0x380 [ 338.817553][T10021] ? __fget_files+0x34/0x3d0 [ 338.817565][T10021] ? __pfx_vfs_read+0x10/0x10 [ 338.817575][T10021] ? find_held_lock+0x2b/0x80 [ 338.817587][T10021] ? __fget_files+0x215/0x3d0 [ 338.817602][T10021] ? __fget_files+0x21f/0x3d0 [ 338.817618][T10021] ksys_read+0x12a/0x250 [ 338.817629][T10021] ? __pfx_ksys_read+0x10/0x10 [ 338.817644][T10021] do_int80_emulation+0x166/0x650 [ 338.817676][T10021] asm_int80_emulation+0x1a/0x20 [ 338.817689][T10021] RIP: 0023:0xf71675ab [ 338.817699][T10021] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 338.817711][T10021] RSP: 002b:00000000f54264bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 338.817723][T10021] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54265d0 [ 338.817730][T10021] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 338.817736][T10021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 338.817743][T10021] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 338.817750][T10021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 338.817764][T10021] [ 338.981363][ C1] net_ratelimit: 236 callbacks suppressed [ 339.092659][T10026] netlink: 'syz.6.1072': attribute type 1 has an invalid length. [ 339.117511][T10026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 339.133769][T10028] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1071'. [ 339.162665][T10026] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1072'. [ 339.175153][T10026] bond1: (slave veth0_to_bond): making interface the new active one [ 339.181706][T10026] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 339.243120][T10026] bond1: entered promiscuous mode [ 339.243192][T10026] veth0_to_bond: entered promiscuous mode [ 339.243364][T10026] bond1: entered allmulticast mode [ 339.243378][T10026] veth0_to_bond: entered allmulticast mode [ 339.267194][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1072'. [ 339.314549][T10026] macvlan2: entered promiscuous mode [ 339.314566][T10026] macvlan2: entered allmulticast mode [ 339.515373][T10044] FAULT_INJECTION: forcing a failure. [ 339.515373][T10044] name failslab, interval 1, probability 0, space 0, times 0 [ 339.515391][T10044] CPU: 0 UID: 0 PID: 10044 Comm: syz.6.1075 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.515407][T10044] Tainted: [L]=SOFTLOCKUP [ 339.515412][T10044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 339.515418][T10044] Call Trace: [ 339.515423][T10044] [ 339.515428][T10044] dump_stack_lvl+0x100/0x190 [ 339.515447][T10044] should_fail_ex.cold+0x5/0xa [ 339.515463][T10044] should_failslab+0xc2/0x120 [ 339.515478][T10044] __kmalloc_noprof+0xfc/0x840 [ 339.515490][T10044] ? lockdep_hardirqs_on+0x7d/0x110 [ 339.515507][T10044] ? fib_trie_table+0xf3/0x2a0 [ 339.515524][T10044] fib_trie_table+0xf3/0x2a0 [ 339.515538][T10044] fib_new_table+0x1bf/0x5d0 [ 339.515557][T10044] inet_rtm_newroute+0x154/0x210 [ 339.515574][T10044] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 339.515609][T10044] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 339.515626][T10044] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 339.515642][T10044] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 339.515659][T10044] rtnetlink_rcv_msg+0x95e/0xe90 [ 339.515677][T10044] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 339.515698][T10044] ? ref_tracker_free+0x37e/0x6c0 [ 339.515717][T10044] netlink_rcv_skb+0x159/0x420 [ 339.515731][T10044] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 339.515748][T10044] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 339.515767][T10044] ? netlink_deliver_tap+0x1ae/0xcc0 [ 339.515782][T10044] netlink_unicast+0x585/0x850 [ 339.515797][T10044] ? __pfx_netlink_unicast+0x10/0x10 [ 339.515814][T10044] netlink_sendmsg+0x8b0/0xda0 [ 339.515829][T10044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.515844][T10044] ? apparmor_socket_sendmsg+0x165/0x280 [ 339.515861][T10044] ____sys_sendmsg+0xa4d/0xbe0 [ 339.515872][T10044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.515886][T10044] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.515903][T10044] ___sys_sendmsg+0x190/0x1e0 [ 339.515916][T10044] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.515935][T10044] ? find_held_lock+0x2b/0x80 [ 339.515956][T10044] __sys_sendmsg+0x160/0x210 [ 339.515972][T10044] ? __pfx___sys_sendmsg+0x10/0x10 [ 339.515990][T10044] ? __pfx_ksys_write+0x10/0x10 [ 339.516007][T10044] __do_fast_syscall_32+0x13a/0x8b0 [ 339.516024][T10044] ? lockdep_hardirqs_on+0x7d/0x110 [ 339.516041][T10044] do_fast_syscall_32+0x32/0x70 [ 339.516059][T10044] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 339.516073][T10044] RIP: 0023:0xf7fb6fec [ 339.516087][T10044] Code: Unable to access opcode bytes at 0xf7fb6fc2. [ 339.516092][T10044] RSP: 002b:00000000f547650c EFLAGS: 00000292 [ 339.516099][T10044] ORIG_RAX: 0000000000000172 [ 339.516104][T10044] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000040 [ 339.516111][T10044] RDX: 0000000020004090 RSI: 0000000000000000 RDI: 0000000000000000 [ 339.516118][T10044] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 339.516124][T10044] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 339.516131][T10044] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 339.516145][T10044] [ 339.803293][ T25] usb 13-1: USB disconnect, device number 13 [ 339.832747][ T6861] usb 10-1: USB disconnect, device number 19 [ 340.590146][T10069] FAULT_INJECTION: forcing a failure. [ 340.590146][T10069] name failslab, interval 1, probability 0, space 0, times 0 [ 340.590170][T10069] CPU: 0 UID: 0 PID: 10069 Comm: syz.8.1085 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.590185][T10069] Tainted: [L]=SOFTLOCKUP [ 340.590189][T10069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 340.590196][T10069] Call Trace: [ 340.590200][T10069] [ 340.590205][T10069] dump_stack_lvl+0x100/0x190 [ 340.590223][T10069] should_fail_ex.cold+0x5/0xa [ 340.590238][T10069] should_failslab+0xc2/0x120 [ 340.590253][T10069] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 340.590283][T10069] ? __alloc_skb+0x140/0x710 [ 340.590301][T10069] __alloc_skb+0x140/0x710 [ 340.590314][T10069] ? __alloc_skb+0x5b7/0x710 [ 340.590327][T10069] ? __pfx___alloc_skb+0x10/0x10 [ 340.590341][T10069] ? trace_contention_end+0x126/0x160 [ 340.590357][T10069] ? __mutex_lock+0x26c/0x1bd0 [ 340.590375][T10069] netlink_dump+0x194/0xd00 [ 340.590389][T10069] ? __pfx_netlink_dump+0x10/0x10 [ 340.590400][T10069] ? __netlink_lookup+0x65c/0x900 [ 340.590426][T10069] __netlink_dump_start+0x6d6/0x990 [ 340.590440][T10069] rdma_nl_rcv_msg+0x568/0x6f0 [ 340.590455][T10069] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 340.590467][T10069] ? __pfx_iwpm_mapping_error_cb+0x10/0x10 [ 340.590481][T10069] ? __lock_acquire+0x5c0/0x1f40 [ 340.590497][T10069] ? __netlink_lookup+0xa9/0x900 [ 340.590510][T10069] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 340.590526][T10069] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 340.590545][T10069] ? netlink_deliver_tap+0x1ae/0xcc0 [ 340.590560][T10069] netlink_unicast+0x585/0x850 [ 340.590576][T10069] ? __pfx_netlink_unicast+0x10/0x10 [ 340.590593][T10069] netlink_sendmsg+0x8b0/0xda0 [ 340.590609][T10069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.590623][T10069] ? apparmor_socket_sendmsg+0x165/0x280 [ 340.590641][T10069] ____sys_sendmsg+0xa4d/0xbe0 [ 340.590651][T10069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.590665][T10069] ? __pfx_____sys_sendmsg+0x10/0x10 [ 340.590688][T10069] ___sys_sendmsg+0x190/0x1e0 [ 340.590706][T10069] ? __pfx____sys_sendmsg+0x10/0x10 [ 340.590731][T10069] ? find_held_lock+0x2b/0x80 [ 340.590781][T10069] __sys_sendmsg+0x160/0x210 [ 340.590798][T10069] ? __pfx___sys_sendmsg+0x10/0x10 [ 340.590817][T10069] ? __pfx_ksys_write+0x10/0x10 [ 340.590832][T10069] __do_fast_syscall_32+0x13a/0x8b0 [ 340.590849][T10069] ? lockdep_hardirqs_on+0x7d/0x110 [ 340.590866][T10069] do_fast_syscall_32+0x32/0x70 [ 340.590883][T10069] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 340.590897][T10069] RIP: 0023:0xf706efec [ 340.590911][T10069] Code: Unable to access opcode bytes at 0xf706efc2. [ 340.590916][T10069] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 340.590927][T10069] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 340.590934][T10069] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 340.590941][T10069] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 340.590947][T10069] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 340.590954][T10069] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 340.590968][T10069] [ 340.777713][T10074] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1083'. [ 341.040485][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1086'. [ 341.071358][ T7349] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 341.131303][ T6088] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 341.231388][ T7349] usb 11-1: Using ep0 maxpacket: 8 [ 341.232123][ T7349] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 341.233344][ T7349] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 341.233401][ T7349] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 341.233413][ T7349] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 341.233425][ T7349] usb 11-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 341.233435][ T7349] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.233465][ T7349] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.240249][ T7349] usbtmc 11-1:16.0: bulk endpoints not found [ 341.281709][ T6088] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 341.282526][ T6088] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 84, changing to 10 [ 341.282540][ T6088] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17152, setting to 1024 [ 341.282553][ T6088] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.282581][ T6088] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.284103][ T6088] usb 10-1: config 0 descriptor?? [ 342.004448][T10093] netlink: 'syz.7.1093': attribute type 1 has an invalid length. [ 342.057030][T10095] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1093'. [ 342.119509][ T6088] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 342.223878][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1093'. [ 342.255594][ T6088] usb 10-1: USB disconnect, device number 20 [ 342.299679][T10093] 8021q: adding VLAN 0 to HW filter on device bond2 [ 342.300253][T10096] veth0_to_bond: left promiscuous mode [ 342.316853][T10096] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 342.333823][T10097] bond2: entered promiscuous mode [ 342.333838][T10097] bond2: entered allmulticast mode [ 342.348365][T10099] macvlan2: entered promiscuous mode [ 342.348375][T10099] macvlan2: entered allmulticast mode [ 342.386447][T10101] fido_id[10101]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb10/10-1/report_descriptor': No such file or directory [ 342.510664][T10110] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 342.539713][T10112] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1096'. [ 343.012068][ T857] usb 10-1: new low-speed USB device number 21 using dummy_hcd [ 343.165428][ T857] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 343.167974][ T857] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.168126][ T857] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 343.168425][ T857] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 343.168904][ T857] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.253659][T10120] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 343.298210][ T857] hub 10-1:1.0: bad descriptor, ignoring hub [ 343.298220][ T857] hub 10-1:1.0: probe with driver hub failed with error -5 [ 343.313727][ T857] cdc_wdm 10-1:1.0: skipping garbage [ 343.313772][ T857] cdc_wdm 10-1:1.0: skipping garbage [ 343.396943][ T857] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 343.397049][ T857] cdc_wdm 10-1:1.0: Unknown control protocol [ 343.548619][T10122] __nla_validate_parse: 2 callbacks suppressed [ 343.548640][T10122] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1098'. [ 343.632430][T10124] FAULT_INJECTION: forcing a failure. [ 343.632430][T10124] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 343.632449][T10124] CPU: 0 UID: 0 PID: 10124 Comm: syz.8.1099 Tainted: G L syzkaller #0 PREEMPT(full) [ 343.632465][T10124] Tainted: [L]=SOFTLOCKUP [ 343.632470][T10124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 343.632476][T10124] Call Trace: [ 343.632481][T10124] [ 343.632486][T10124] dump_stack_lvl+0x100/0x190 [ 343.632506][T10124] should_fail_ex.cold+0x5/0xa [ 343.632520][T10124] ? prepare_alloc_pages+0x16d/0x5b0 [ 343.632537][T10124] should_fail_alloc_page+0xeb/0x140 [ 343.632554][T10124] prepare_alloc_pages+0x1f0/0x5b0 [ 343.632572][T10124] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 343.632588][T10124] ? lock_acquire+0x1d1/0x380 [ 343.632604][T10124] ? is_bpf_text_address+0x25/0x1a0 [ 343.632621][T10124] ? find_held_lock+0x2b/0x80 [ 343.632633][T10124] ? is_bpf_text_address+0x8a/0x1a0 [ 343.632648][T10124] ? is_bpf_text_address+0x8a/0x1a0 [ 343.632663][T10124] ? bpf_ksym_find+0x124/0x1c0 [ 343.632690][T10124] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 343.632702][T10124] ? is_bpf_text_address+0x94/0x1a0 [ 343.632717][T10124] ? kernel_text_address+0x8d/0x100 [ 343.632732][T10124] ? __kernel_text_address+0xd/0x30 [ 343.632745][T10124] ? unwind_get_return_address+0x59/0xa0 [ 343.632761][T10124] ? __lock_acquire+0x5c0/0x1f40 [ 343.632781][T10124] ? look_up_lock_class+0x64/0x120 [ 343.632799][T10124] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 343.632816][T10124] ? policy_nodemask+0xed/0x4f0 [ 343.632832][T10124] alloc_pages_mpol+0x201/0x550 [ 343.632849][T10124] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 343.632865][T10124] ? lock_acquire+0x1d1/0x380 [ 343.632879][T10124] ? unwind_next_frame+0xbd/0x2090 [ 343.632894][T10124] folio_alloc_mpol_noprof+0x36/0x260 [ 343.632912][T10124] vma_alloc_folio_noprof+0xed/0x1d0 [ 343.632929][T10124] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 343.632947][T10124] ? is_bpf_text_address+0x8a/0x1a0 [ 343.632965][T10124] do_anonymous_page+0xac9/0x2050 [ 343.632986][T10124] ? __pfx_do_anonymous_page+0x10/0x10 [ 343.633002][T10124] ? rcu_read_unlock+0x2d/0xb0 [ 343.633018][T10124] ? rcu_read_unlock+0x2d/0xb0 [ 343.633034][T10124] ? __pte_offset_map+0x179/0x310 [ 343.633048][T10124] __handle_mm_fault+0x1ff3/0x2f60 [ 343.633068][T10124] ? __pfx___handle_mm_fault+0x10/0x10 [ 343.633084][T10124] ? __pfx_mt_find+0x10/0x10 [ 343.633102][T10124] ? find_vma+0xbf/0x140 [ 343.633115][T10124] ? __pfx_find_vma+0x10/0x10 [ 343.633128][T10124] handle_mm_fault+0x363/0xa20 [ 343.633147][T10124] do_user_addr_fault+0x745/0x12f0 [ 343.633164][T10124] exc_page_fault+0x6f/0xd0 [ 343.633180][T10124] asm_exc_page_fault+0x26/0x30 [ 343.633191][T10124] RIP: 0010:_copy_to_iter+0x38c/0x1720 [ 343.633205][T10124] Code: 00 00 00 00 e9 4d ff ff ff e8 c0 3c e5 fc 4c 8b 74 24 18 44 89 fe 4c 89 f7 e8 f0 82 57 fd 0f 01 cb 4c 89 f9 48 89 df 4c 89 f6 a4 0f 1f 00 48 89 cb 0f 01 ca 4c 89 f8 48 29 c8 48 89 44 24 08 [ 343.633216][T10124] RSP: 0018:ffffc90005c0fb30 EFLAGS: 00050246 [ 343.633226][T10124] RAX: 0000000000000001 RBX: 00000000800054c0 RCX: 0000000000000599 [ 343.633233][T10124] RDX: 0000000000000001 RSI: ffff888029dee000 RDI: 00000000800054c0 [ 343.633240][T10124] RBP: ffffc90005c0fd68 R08: 0000000000000000 R09: ffffed10053bdcb3 [ 343.633246][T10124] R10: ffff888029dee598 R11: 0000000000000000 R12: 0000000080005a59 [ 343.633253][T10124] R13: 00007ffffffff000 R14: ffff888029dee000 R15: 0000000000000599 [ 343.633276][T10124] ? __pfx__copy_to_iter+0x10/0x10 [ 343.633289][T10124] ? __up_read+0x333/0x980 [ 343.633306][T10124] ? __pfx___up_read+0x10/0x10 [ 343.633322][T10124] ? seq_read_iter+0xd33/0x1270 [ 343.633336][T10124] ? seq_read_iter+0xd33/0x1270 [ 343.633350][T10124] seq_read_iter+0xdab/0x1270 [ 343.633366][T10124] ? __pfx_seq_read_iter+0x10/0x10 [ 343.633378][T10124] vfs_read+0x82e/0xb40 [ 343.633391][T10124] ? __pfx_vfs_read+0x10/0x10 [ 343.633401][T10124] ? find_held_lock+0x2b/0x80 [ 343.633422][T10124] ksys_read+0x12a/0x250 [ 343.633433][T10124] ? __pfx_ksys_read+0x10/0x10 [ 343.633443][T10124] ? ksys_write+0x1ac/0x250 [ 343.633454][T10124] ? __pfx_ksys_write+0x10/0x10 [ 343.633468][T10124] __do_fast_syscall_32+0x13a/0x8b0 [ 343.633485][T10124] ? lockdep_hardirqs_on+0x7d/0x110 [ 343.633502][T10124] do_fast_syscall_32+0x32/0x70 [ 343.633520][T10124] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 343.633534][T10124] RIP: 0023:0xf706efec [ 343.633546][T10124] Code: Unable to access opcode bytes at 0xf706efc2. [ 343.633551][T10124] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 343.633561][T10124] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800054c0 [ 343.633568][T10124] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 343.633575][T10124] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 343.633581][T10124] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 343.633588][T10124] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 343.633602][T10124] [ 343.644311][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 343.644367][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 343.644605][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 343.644614][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 343.644834][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 343.644843][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 343.645100][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 343.645110][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 343.645366][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 343.645375][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 343.645575][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 343.645584][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 343.645778][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 343.645787][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 343.645982][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 343.645992][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 343.646238][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 343.646249][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 343.646482][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 343.646491][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 343.647205][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 343.842037][ T7349] usb 11-1: USB disconnect, device number 17 [ 343.918559][T10126] FAULT_INJECTION: forcing a failure. [ 343.918559][T10126] name failslab, interval 1, probability 0, space 0, times 0 [ 343.918593][T10126] CPU: 0 UID: 0 PID: 10126 Comm: syz.7.1101 Tainted: G L syzkaller #0 PREEMPT(full) [ 343.918620][T10126] Tainted: [L]=SOFTLOCKUP [ 343.918632][T10126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 343.918644][T10126] Call Trace: [ 343.918650][T10126] [ 343.918658][T10126] dump_stack_lvl+0x100/0x190 [ 343.918692][T10126] should_fail_ex.cold+0x5/0xa [ 343.918719][T10126] should_failslab+0xc2/0x120 [ 343.918776][T10126] kmem_cache_alloc_noprof+0x92/0x6a0 [ 343.918810][T10126] ? skb_clone+0x190/0x400 [ 343.918843][T10126] skb_clone+0x190/0x400 [ 343.918872][T10126] pfkey_promisc+0x16a/0x3a0 [ 343.918906][T10126] ? __pfx_pfkey_promisc+0x10/0x10 [ 343.918937][T10126] pfkey_process+0x5c3/0x810 [ 343.918968][T10126] ? trace_contention_end+0x126/0x160 [ 343.918999][T10126] ? __pfx_pfkey_process+0x10/0x10 [ 343.919027][T10126] ? pfkey_sendmsg+0x41a/0x840 [ 343.919072][T10126] ? __pfx___alloc_skb+0x10/0x10 [ 343.919104][T10126] pfkey_sendmsg+0x428/0x840 [ 343.919139][T10126] ____sys_sendmsg+0xa4d/0xbe0 [ 343.919158][T10126] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 343.919278][T10126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.919313][T10126] ? plist_check_list+0x1b8/0x280 [ 343.919342][T10126] ? plist_del+0x308/0x510 [ 343.919369][T10126] ___sys_sendmsg+0x190/0x1e0 [ 343.919392][T10126] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.919409][T10126] ? futex_wake+0x220/0x5e0 [ 343.919441][T10126] ? find_held_lock+0x2b/0x80 [ 343.919477][T10126] __sys_sendmsg+0x160/0x210 [ 343.919504][T10126] ? __pfx___sys_sendmsg+0x10/0x10 [ 343.919549][T10126] __do_fast_syscall_32+0x13a/0x8b0 [ 343.919583][T10126] do_fast_syscall_32+0x32/0x70 [ 343.919614][T10126] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 343.919641][T10126] RIP: 0023:0xf7f63fec [ 343.919667][T10126] Code: Unable to access opcode bytes at 0xf7f63fc2. [ 343.919725][T10126] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 343.919750][T10126] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000180 [ 343.919765][T10126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 343.919778][T10126] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 343.919792][T10126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.919814][T10126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 343.919844][T10126] [ 343.975599][T10128] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 343.975624][T10128] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 343.975692][T10128] vhci_hcd vhci_hcd.0: Device attached [ 343.977117][T10126] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(9) [ 343.977141][T10126] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 343.977182][T10126] vhci_hcd vhci_hcd.0: Device attached [ 343.996119][T10128] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(6) [ 343.996142][T10128] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 343.997468][T10128] vhci_hcd vhci_hcd.0: Device attached [ 344.009455][T10126] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(12) [ 344.009478][T10126] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 344.009512][T10126] vhci_hcd vhci_hcd.0: Device attached [ 344.031178][T10126] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(14) [ 344.031204][T10126] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 344.033661][T10126] vhci_hcd vhci_hcd.0: Device attached [ 344.045330][T10126] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(16) [ 344.045359][T10126] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 344.045400][T10126] vhci_hcd vhci_hcd.0: Device attached [ 344.048720][T10126] vhci_hcd vhci_hcd.0: pdev(7) rhport(6) sockfd(18) [ 344.048746][T10126] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 344.048788][T10126] vhci_hcd vhci_hcd.0: Device attached [ 344.050897][T10126] vhci_hcd vhci_hcd.0: pdev(7) rhport(7) sockfd(20) [ 344.050921][T10126] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 344.051111][T10126] vhci_hcd vhci_hcd.0: Device attached [ 344.079858][T10143] vhci_hcd: connection closed [ 344.080389][T10133] vhci_hcd: connection closed [ 344.084031][ T6838] vhci_hcd vhci_hcd.7: stop threads [ 344.084053][ T6838] vhci_hcd vhci_hcd.7: release socket [ 344.084071][ T6838] vhci_hcd vhci_hcd.7: disconnect device [ 344.084152][T10135] vhci_hcd: connection closed [ 344.084332][T10141] vhci_hcd: connection closed [ 344.085549][T10139] vhci_hcd: connection closed [ 344.085741][T10137] vhci_hcd: connection closed [ 344.085903][T10130] vhci_hcd: connection closed [ 344.086865][ T6838] vhci_hcd vhci_hcd.7: stop threads [ 344.086883][ T6838] vhci_hcd vhci_hcd.7: release socket [ 344.086902][ T6838] vhci_hcd vhci_hcd.7: disconnect device [ 344.087379][ T6838] vhci_hcd vhci_hcd.7: stop threads [ 344.087393][ T6838] vhci_hcd vhci_hcd.7: release socket [ 344.087409][ T6838] vhci_hcd vhci_hcd.7: disconnect device [ 344.087476][T10129] vhci_hcd: connection closed [ 344.087772][ T6838] vhci_hcd vhci_hcd.7: stop threads [ 344.087787][ T6838] vhci_hcd vhci_hcd.7: release socket [ 344.087804][ T6838] vhci_hcd vhci_hcd.7: disconnect device [ 344.088005][ T6838] vhci_hcd vhci_hcd.7: stop threads [ 344.088020][ T6838] vhci_hcd vhci_hcd.7: release socket [ 344.088037][ T6838] vhci_hcd vhci_hcd.7: disconnect device [ 344.088240][ T6838] vhci_hcd vhci_hcd.7: stop threads [ 344.088254][ T6838] vhci_hcd vhci_hcd.7: release socket [ 344.088271][ T6838] vhci_hcd vhci_hcd.7: disconnect device [ 344.088368][ T6838] vhci_hcd vhci_hcd.7: stop threads [ 344.088383][ T6838] vhci_hcd vhci_hcd.7: release socket [ 344.088399][ T6838] vhci_hcd vhci_hcd.7: disconnect device [ 344.088712][ T6838] vhci_hcd vhci_hcd.7: stop threads [ 344.088726][ T6838] vhci_hcd vhci_hcd.7: release socket [ 344.088743][ T6838] vhci_hcd vhci_hcd.7: disconnect device [ 344.088778][ T6838] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.088820][ T6838] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.088853][ T6838] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.088887][ T6838] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.183341][ C1] net_ratelimit: 91 callbacks suppressed [ 344.332089][T10150] ================================================================== [ 344.332097][T10150] BUG: KASAN: slab-out-of-bounds in try_module_get+0x4c/0xd0 [ 344.332118][T10150] Write of size 4 at addr ffff88802a62d300 by task syz.6.1103/10150 [ 344.332129][T10150] [ 344.332138][T10150] CPU: 1 UID: 0 PID: 10150 Comm: syz.6.1103 Tainted: G L syzkaller #0 PREEMPT(full) [ 344.332158][T10150] Tainted: [L]=SOFTLOCKUP [ 344.332163][T10150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 344.332171][T10150] Call Trace: [ 344.332176][T10150] [ 344.332181][T10150] dump_stack_lvl+0x100/0x190 [ 344.332197][T10150] print_report+0x13d/0x4b0 [ 344.332216][T10150] ? __virt_addr_valid+0x239/0x430 [ 344.332234][T10150] ? try_module_get+0x4c/0xd0 [ 344.332247][T10150] kasan_report+0xdf/0x1c0 [ 344.332265][T10150] ? try_module_get+0x4c/0xd0 [ 344.332281][T10150] kasan_check_range+0x10f/0x1e0 [ 344.332299][T10150] try_module_get+0x4c/0xd0 [ 344.332313][T10150] dvb_device_open+0x124/0x3b0 [ 344.332327][T10150] ? __pfx_dvb_device_open+0x10/0x10 [ 344.332349][T10150] chrdev_open+0x234/0x6a0 [ 344.332364][T10150] ? __pfx_apparmor_file_open+0x10/0x10 [ 344.332386][T10150] ? __pfx_chrdev_open+0x10/0x10 [ 344.332402][T10150] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 344.332421][T10150] do_dentry_open+0x6ab/0x14d0 [ 344.332436][T10150] ? __pfx_chrdev_open+0x10/0x10 [ 344.332453][T10150] vfs_open+0x82/0x3f0 [ 344.332469][T10150] path_openat+0x19fa/0x2440 [ 344.332484][T10150] ? __pfx_path_openat+0x10/0x10 [ 344.332501][T10150] do_file_open+0x20e/0x430 [ 344.332520][T10150] ? __pfx_do_file_open+0x10/0x10 [ 344.332539][T10150] ? _raw_spin_unlock+0x28/0x50 [ 344.332553][T10150] ? alloc_fd+0x471/0x7a0 [ 344.332568][T10150] do_sys_openat2+0x10f/0x1e0 [ 344.332583][T10150] ? __pfx_do_sys_openat2+0x10/0x10 [ 344.332599][T10150] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 344.332613][T10150] __ia32_compat_sys_openat+0x12d/0x210 [ 344.332630][T10150] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 344.332650][T10150] do_int80_emulation+0x166/0x650 [ 344.332670][T10150] asm_int80_emulation+0x1a/0x20 [ 344.332685][T10150] RIP: 0023:0xf71b75ab [ 344.332697][T10150] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 344.332712][T10150] RSP: 002b:00000000f547603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 344.332729][T10150] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5476100 [ 344.332740][T10150] RDX: 0000000000040002 RSI: 0000000000000000 RDI: 0000000000000000 [ 344.332751][T10150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 344.332761][T10150] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 344.332773][T10150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 344.332789][T10150] [ 344.332795][T10150] [ 344.332800][T10150] Allocated by task 1: [ 344.332807][T10150] kasan_save_stack+0x30/0x50 [ 344.332820][T10150] kasan_save_track+0x14/0x30 [ 344.332833][T10150] __kasan_kmalloc+0xaa/0xb0 [ 344.332846][T10150] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 344.332862][T10150] bus_add_driver+0x92/0x5b0 [ 344.332874][T10150] driver_register+0x1e2/0x360 [ 344.332888][T10150] i2c_register_driver+0xd9/0x1f0 [ 344.332899][T10150] do_one_initcall+0x11c/0x6f0 [ 344.332915][T10150] kernel_init_freeable+0x6ea/0x7b0 [ 344.332931][T10150] kernel_init+0x21/0x1e0 [ 344.332942][T10150] ret_from_fork+0x730/0xd60 [ 344.332958][T10150] ret_from_fork_asm+0x1a/0x30 [ 344.332967][T10150] [ 344.332970][T10150] The buggy address belongs to the object at ffff88802a62d200 [ 344.332970][T10150] which belongs to the cache kmalloc-256 of size 256 [ 344.332979][T10150] The buggy address is located 48 bytes to the right of [ 344.332979][T10150] allocated 208-byte region [ffff88802a62d200, ffff88802a62d2d0) [ 344.332990][T10150] [ 344.332993][T10150] The buggy address belongs to the physical page: [ 344.332998][T10150] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a62c [ 344.333009][T10150] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 344.333019][T10150] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 344.333029][T10150] page_type: f5(slab) [ 344.333040][T10150] raw: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 344.333050][T10150] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 344.333060][T10150] head: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 344.333069][T10150] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 344.333079][T10150] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 344.333088][T10150] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 344.333094][T10150] page dumped because: kasan: bad access detected [ 344.333100][T10150] page_owner tracks the page as allocated [ 344.333104][T10150] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8045131034 [ 344.333122][T10150] post_alloc_hook+0xfd/0x120 [ 344.333138][T10150] get_page_from_freelist+0x110d/0x35d0 [ 344.333148][T10150] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 344.333158][T10150] new_slab+0xa9/0x6e0 [ 344.333166][T10150] refill_objects+0xe3/0x410 [ 344.333176][T10150] __pcs_replace_empty_main+0x35e/0x650 [ 344.333192][T10150] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 344.333208][T10150] bus_add_driver+0x92/0x5b0 [ 344.333219][T10150] driver_register+0x1e2/0x360 [ 344.333233][T10150] usb_register_driver+0x21c/0x3e0 [ 344.333250][T10150] do_one_initcall+0x11c/0x6f0 [ 344.333266][T10150] kernel_init_freeable+0x6ea/0x7b0 [ 344.333300][T10150] kernel_init+0x21/0x1e0 [ 344.333313][T10150] ret_from_fork+0x730/0xd60 [ 344.333330][T10150] ret_from_fork_asm+0x1a/0x30 [ 344.333344][T10150] page_owner free stack trace missing [ 344.333348][T10150] [ 344.333351][T10150] Memory state around the buggy address: [ 344.333357][T10150] ffff88802a62d200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 344.333366][T10150] ffff88802a62d280: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 344.333375][T10150] >ffff88802a62d300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 344.333381][T10150] ^ [ 344.333387][T10150] ffff88802a62d380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 344.333396][T10150] ffff88802a62d400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 344.333403][T10150] ================================================================== [ 344.333437][T10150] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 344.542564][T10150] CPU: 1 UID: 0 PID: 10150 Comm: syz.6.1103 Tainted: G L syzkaller #0 PREEMPT(full) [ 344.546086][T10150] Tainted: [L]=SOFTLOCKUP [ 344.547401][T10150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 344.550393][T10150] Call Trace: [ 344.551399][T10150] [ 344.552433][T10150] dump_stack_lvl+0x100/0x190 [ 344.554353][T10150] vpanic+0x553/0x970 [ 344.556196][T10150] ? __pfx_vpanic+0x10/0x10 [ 344.558146][T10150] ? mark_held_locks+0x40/0x70 [ 344.560150][T10150] ? irqentry_exit+0x24d/0xa10 [ 344.562164][T10150] ? try_module_get+0x4c/0xd0 [ 344.564112][T10150] panic+0xd1/0xe0 [ 344.565674][T10150] ? __pfx_panic+0x10/0x10 [ 344.567524][T10150] check_panic_on_warn.cold+0x19/0x34 [ 344.569707][T10150] end_report.part.0+0x3a/0x90 [ 344.571721][T10150] kasan_report.cold+0xe/0x18 [ 344.573664][T10150] ? try_module_get+0x4c/0xd0 [ 344.575630][T10150] kasan_check_range+0x10f/0x1e0 [ 344.577703][T10150] try_module_get+0x4c/0xd0 [ 344.579591][T10150] dvb_device_open+0x124/0x3b0 [ 344.581511][T10150] ? __pfx_dvb_device_open+0x10/0x10 [ 344.583595][T10150] chrdev_open+0x234/0x6a0 [ 344.585375][T10150] ? __pfx_apparmor_file_open+0x10/0x10 [ 344.587652][T10150] ? __pfx_chrdev_open+0x10/0x10 [ 344.589700][T10150] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 344.592298][T10150] do_dentry_open+0x6ab/0x14d0 [ 344.594258][T10150] ? __pfx_chrdev_open+0x10/0x10 [ 344.596303][T10150] vfs_open+0x82/0x3f0 [ 344.597986][T10150] path_openat+0x19fa/0x2440 [ 344.599896][T10150] ? __pfx_path_openat+0x10/0x10 [ 344.601926][T10150] do_file_open+0x20e/0x430 [ 344.603799][T10150] ? __pfx_do_file_open+0x10/0x10 [ 344.605868][T10150] ? _raw_spin_unlock+0x28/0x50 [ 344.607889][T10150] ? alloc_fd+0x471/0x7a0 [ 344.609701][T10150] do_sys_openat2+0x10f/0x1e0 [ 344.611809][T10150] ? __pfx_do_sys_openat2+0x10/0x10 [ 344.614083][T10150] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 344.616629][T10150] __ia32_compat_sys_openat+0x12d/0x210 [ 344.619243][T10150] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 344.621854][T10150] do_int80_emulation+0x166/0x650 [ 344.623933][T10150] asm_int80_emulation+0x1a/0x20 [ 344.625989][T10150] RIP: 0023:0xf71b75ab [ 344.627681][T10150] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 344.636295][T10150] RSP: 002b:00000000f547603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 344.639982][T10150] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5476100 [ 344.643274][T10150] RDX: 0000000000040002 RSI: 0000000000000000 RDI: 0000000000000000 [ 344.646444][T10150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 344.649644][T10150] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 344.652873][T10150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 344.656063][T10150] [ 344.658152][T10150] Kernel Offset: disabled [ 344.659888][T10150] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:09:55 Registers: info registers vcpu 0 CPU#0 RAX=00000000003abe31 RBX=ffffffff8ea91540 RCX=ffffffff8bce7185 RDX=0000000000000001 RSI=ffffffff8e3f18bd RDI=ffffffff8c622c80 RBP=fffffbfff1d522a8 RSP=ffffffff8ea07cf0 R8 =0000000000000001 R9 =ffffed10056467bd R10=ffff88802b233deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d40fa2 R15=dffffc0000000000 RIP=ffffffff8bce56bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096960000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7476288 CR3=00000000467a4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85aeb445 RDI=ffffffff9bc571e0 RBP=ffffffff9bc571a0 RSP=ffffc90005fd70b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666657 R12=0000000000000000 R13=000000000000000a R14=0000000000000009 R15=ffffc90005fd73c8 RIP=ffffffff85aeb46f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096a60000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2c002b CR3=000000004ce37000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000003c0615 RBX=ffff88801cf0a580 RCX=ffffffff8bce7185 RDX=0000000000000001 RSI=ffffffff8e3f18bd RDI=ffffffff8c622c80 RBP=ffffed10039e14b0 RSP=ffffc9000048fe00 R8 =0000000000000001 R9 =ffffed10056867bd R10=ffff88802b433deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000 RIP=ffffffff8bce56bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055ec6e7af000 CR3=000000006f2a1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000457 0000001800000000 0000000000000000 0000000000000017 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03048c0800020800 140800060174ae1a 000001cc00000006 0000000100000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000806060104 9c0e080001980301 0800019003000800 0188034e04000180 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030008000a08004e 0800060077da2408 000e800201080006 010180e6000ca400 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0e80030004000280 80840800000201c7 080008014ca807fe 080001800201c708 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000601448600317a 79732f70756f7267 632f2e01ffffffff ffffffffe3080180 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 108008001c800201 0000020806060154 ce00040000080018 800201c708000802 ZMM25=2cfe5c392cfe5c39 2cfe5c392cfe5c39 2cfe5c392cfe5c39 2cfe5c392cfe5c39 2cfe5c392cfe5c39 2cfe5c392cfe5c39 2cfe5c392cfe5c39 2cfe5c392cfe5c39 ZMM26=31bfc21431bfc214 31bfc21431bfc214 31bfc21431bfc214 31bfc21431bfc214 31bfc21431bfc214 31bfc21431bfc214 31bfc21431bfc214 31bfc21431bfc214 ZMM27=0423feda0423feda 0423feda0423feda 0423feda0423feda 0423feda0423feda 0423feda0423feda 0423feda0423feda 0423feda0423feda 0423feda0423feda ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=c8080000c8080000 c8080000c8080000 c8080000c8080000 c8080000c8080000 c8080000c8080000 c8080000c8080000 c8080000c8080000 c8080000c8080000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff88802b43c088 RCX=0000000000000100 RDX=0000000000000001 RSI=0000000000000003 RDI=ffffffff8e6b9930 RBP=dffffc0000000000 RSP=ffffc9000049f990 R8 =ffffed10056a7a09 R9 =ffffed1005687811 R10=ffff88802b43c08b R11=0000000000000000 R12=00000000000077e6 R13=ffffed1005687811 R14=ffff88802b53d040 R15=0000000000000000 RIP=ffffffff8bd172e4 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3af49f CR3=000000006f2a1000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000