last executing test programs: 15m48.256920365s ago: executing program 0 (id=83): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000500)={0x1, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0xb, 0x3, 0x0, 0x4}}]}) 15m48.127265388s ago: executing program 0 (id=84): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x10140, 0x0) 15m48.127151258s ago: executing program 0 (id=85): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, 0x0) 15m48.056648007s ago: executing program 0 (id=86): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x10, 0x200, &(0x7f0000000540)="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"}) 15m47.612592251s ago: executing program 0 (id=91): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) prctl$PR_GET_PDEATHSIG(0x2, 0x0) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15m47.610110287s ago: executing program 0 (id=94): openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x6840, 0x0) 15m32.542935639s ago: executing program 32 (id=94): openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x6840, 0x0) 1m38.466370121s ago: executing program 3 (id=7351): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) mount$9p_tcp(&(0x7f0000002480), &(0x7f00000024c0)='./proc\x00', &(0x7f0000002500), 0x10001, &(0x7f0000002540)={'trans=tcp,', {'port', 0x3d, 0x4e23}}) (fail_nth: 1) 1m38.302982932s ago: executing program 3 (id=7352): r0 = msgget(0x0, 0x1ad) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/4096) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000001000)=""/236) r1 = msgget$private(0x0, 0x20) msgsnd(r0, &(0x7f0000001100)={0x0, "f50274d3f0510583f8e41ccf43d65f4b0a7e9807aa85ef7a309ae7c4de6249ab6831c7b79bb70f8008f94230a65f6b32e59ad58c28f9de61a1fdc670eaf26cd147bd7354dd4a4d679d6b633d8cfe806ec29fcf4c5a96e795ede70a81cb49ff2a3d7f79eb8121d0a2f1b45680c0de75983da5aa8d4e699c0f70d0e7a90a6573653f908d764a2a000fe5c97b83ceaad62f9cc4bc4989e25a72b2dc024a7735dc44c32ecde082e384625a"}, 0xad, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001200)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2f30, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000011c0)=@any_dev={0x3, 0x452, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x0, 0x88}}}, &(0x7f0000001280)) ioctl$UBLK_U_CMD_GET_QUEUE_AFFINITY(r2, 0x80207501, &(0x7f0000001300)={0x0, 0xffff, 0x8, &(0x7f00000012c0)}) msgsnd(r1, &(0x7f0000001380)={0x3, "7f0253128b33735efb9f718dee2d1f11a38fbe1cd0bfe4a4500cf63a78429ec793324d3cca74d039bb9e30c28643b5162d7d0bbfbc03d1492ca6bbdc6dac7535a003e2203a322408d1a2458cc0f87c8f7c070772c870517d7315f0e96389eb37bbc782c81507f1fef378aa2c28bdc6fa297776d43a78cfe7416f5eeafa3ecf45be041a536f23d4474c73bde9a3868a8c4561799ecf392e338b52ea222a49f98d952fda8250b28db068c899eab6"}, 0xb1, 0x800) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000001440)={"f3c1f62c", 0x0, 0xc, 0x3, 0x6, 0x7ff, "14624ce12a9752fe2fd12759a91dee", "ed0fb1ae", "37e5fb73", "9c4e2ad4", ["0c562d3803ccebcd9d57e40b", "ee2f5bd78b7861bffd9f4f3a", "0405955bc3c8329cdc3ac3e7", "6ad3ae8f8e82c80a3b9932fd"]}) msgctl$IPC_RMID(r1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000014c0), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001500)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000015c0)={'syztnl2\x00', &(0x7f0000001540)={'ip6gre0\x00', r5, 0x2f, 0xd, 0x8, 0x5, 0x10, @mcast2, @mcast1, 0x8000, 0x8000, 0x5, 0x3}}) sendmsg(r4, &(0x7f0000002b00)={&(0x7f0000001600)=@ethernet={0x306, @broadcast}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001680)="1e7d623d382b096b87972bc9e40b9764d8c424041449c97aecb1da43e36b8f23142980cbcef6c975a398357cc8029e5ea14455d82f76799d6bd8bd3b507c7d812a19b6943521873c81f14620b7c9b920cf357f04796dbcccc68c5bb2c69b61ceda712621f426d7edb33553196e06681982945129ae6fcd52aaca4c8f1f8f45bb1e9f4f1f208692f199063adfc498645d955c13", 0x93}, {&(0x7f0000001740)="78dd4395f542162c2abb51a40691c87e26c3a0a6f9493ab62c668cbd1b4b677ce905210b4ca10adc372fa589af6926c07726f36715726a38a147c5cbba3260099677a232f706c4b5d837d5f346e938eac866e5eae9ce0305ddaa707590f7074e47e6b4e696e90b3c82b0c0c8", 0x6c}, {&(0x7f00000017c0)="77bb4457181c59239af138d9dc827c90a74edeb3d40be9b3879122f01e259da3e482f7ae7804c4650db589b0a9585b4e1ea956260c60cf667ebbca49d6b2ee766fb161db59ee8d4b71e71ee11edaacc15ce5f19b6a536e33b9476f689194e052692e7fc3fe4361fe8575b8c99a85886ed6516f3fb2652540c8b085073495d816bd217c5bdb5c84741b022be397", 0x8d}, {&(0x7f0000001880)="f43d7a116713910cfd9c304863f96a55834ad2d432c5501aa2a58c7b4f4356cb34ad9cc8a53c550c02e8c942c78103cdaef053d8cf9adb23d2e673c9d886704b45c88576d59b66b3351f", 0x4a}, {&(0x7f0000001900)="309b78caef30cd72bc350461f6d9aea8a0f45017e61e5238ea27b7cbca08936ea1426c3b369695252eecdd85cbdee21e2f7151e221f6b20ea6e64ef52a1def281d51e0e340af33740c00c86ece0861d3e447f4b74bf9cb8b92a51824476f5325e8919a44d49c7465eb7494504459c0af8fef31ebdf880ed6928f41b405059c435b12d8cbc76d89c6333779ca1e20338c96a92a1be31b309d4127cd8ea88ae24a66547f374bf507752e2d27de2651c95d0dc54f905b8c541817ad00f19c2d449a2c71c0d231bf6c5888cb5ac51e6b65c86772d8124f105f2fe58bec7b707ffda171387c", 0xe3}], 0x5, &(0x7f0000001a40)=[{0x80, 0x84, 0x348, "9b009a1e255eba6b698d051319f7a6f6dd37618cb1b460fe1793b5db6b54a908f0a733c6c3b4d2622e1c477eb43a697377da87c54b8124dee43157c5aeb908bf564057a2e2c738c815b4716891875531c908145ec880101fef3df0e8a95b7e5b775be2e22a7bd1b6a1a5a4fca7bc1d32bc1e"}, {0x100c, 0x0, 0xcf16, "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"}], 0x108c}, 0x1) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000002b40)=""/23) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002b80)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f0000002c80)=0xe4) r7 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002cc0)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4}}, &(0x7f0000002dc0)=0xe4) r9 = getegid() ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000002e00)=0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000002e40)={'\x00', 0x7, 0x2, 0x5, 0xd699, 0x2, 0x0}) msgctl$IPC_SET(r1, 0x1, &(0x7f0000002e80)={{0x1, r6, r7, r8, r9, 0x42, 0x6}, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x24, 0x7ff, 0x0, 0x101, r10, r11}) openat$dir(0xffffff9c, &(0x7f0000002f00)='./file0\x00', 0x4280, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r12, &(0x7f0000003100)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000030c0)={&(0x7f0000002fc0)={0xdc, r13, 0x600, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x49}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0xc38, 0xefe]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x100}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x82, 0xbe, "bf8c6b00283d4f578fa6fc12bd80285d6571d9d07791c0f3492ddba3a3ce52df2c0ca115ed299c051051d49efb3d58755c9ada11fdd59412c691ac174a1019f53101fd88562442735d5ceb0cd00f22eb97baa1b99e39d63190067935b5b605967c23f659b9e2d546861bf0cd069374af2d09e9ca2eb6d03f60cae34e2368"}]}, 0xdc}, 0x1, 0x0, 0x0, 0x22cfd0d2fb713379}, 0x44880) r14 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) msgrcv(0x0, &(0x7f0000003140)={0x0, ""/41}, 0x2d, 0x0, 0x1800) 1m38.187258753s ago: executing program 3 (id=7354): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000020008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x49011, 0x48801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x40}}, 0x0) sendto$packet(r4, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @local}, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000700)="d80000001a0081044e81f782db4cb904021d08004f1e81f8d8150019001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006dcbd63951f215ce3bb9ad809d5e1cace81017f5b5cef443dc3ed0bffece0b42a9ecbee5de6ccd40dd6e4", 0xd8}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x4}}, 0x9) 1m37.403530168s ago: executing program 3 (id=7365): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800"/20, @ANYRES32, @ANYBLOB="0003cff6b4c3000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000280)=0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000000)=0xf22) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4, 0x7}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@deltfilter={0x100, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0x8}, {0xfff2, 0xffff}, {0xfff1, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xd0, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}, @TCA_FLOWER_KEY_ENC_OPTS={0xac, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x34, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x34, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x2f}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x60}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x5d}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xf7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x7f}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0xa2}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xff000000}]}}]}, 0x100}}, 0x20044800) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$P9_RREADDIR(r10, &(0x7f0000000600)={0xc5, 0x29, 0x2, {0x0, [{{0x80, 0x4, 0x7}, 0x3, 0x1, 0x7, './file0'}, {{0x80, 0x0, 0x2}, 0xfffffffffffffffd, 0xb, 0x7, './file0'}, {{0x80, 0x1, 0x3}, 0x1000, 0x0, 0x7, './file0'}, {{0x2, 0x2, 0x6}, 0xf, 0x5, 0x7, './file0'}, {{0x0, 0x0, 0x2}, 0xffff, 0x4, 0x7, './file0'}, {{0x40, 0x3, 0x1}, 0x6cd, 0x7, 0x7, './file0'}]}}, 0xc5) 1m37.213761562s ago: executing program 3 (id=7368): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000140), 0xa00, 0x0) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000000380)={"b5293ce5975955b1b9ba75a030e5cf254699933de1a35faa3894db5240f3", 0x81, 0x0, 0x1, 0x8, 0x1, 0x3, 0x9, 0x4, [0x3, 0x0, 0x1, 0x3, 0xc, 0x100, 0x10, 0xebb, 0x6dce27db, 0x101, 0x7, 0x3, 0x5, 0x4, 0x7, 0x4, 0x8, 0x45, 0x80000000]}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/config.gz\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r4], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r6, 0x1, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r7 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r8, 0x8004510a, &(0x7f0000000000)) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000000)="01fe000200373a4541062000a59ea940d2cb0b3692f5020000a00000050000000000eb000000a5e5be21c44e", 0x2c, 0xffffffffffffffff) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000440)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x3, 0x2b}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @private0, @remote, @private2={0xfc, 0x2, '\x00', 0x8}}}, 0x42) read(r2, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000180)=ANY=[@ANYBLOB="d094000002000000818d8b7ed6e95fddd85b1b55d536b7f2a8521b9a0f560375c1c552"]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8001, 0x7, &(0x7f0000000000)) shmctl$SHM_LOCK(0x0, 0xb) 1m37.082693143s ago: executing program 3 (id=7370): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat$binderfs(0xffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x800, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r3) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r6) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xd) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) (async) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="94010000", @ANYRES16=r4, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r2, r8, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x10, 0x4, 0x3ac, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x29b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x3e7}}], 0x1, 0x0, 0x0) 1m21.933448228s ago: executing program 33 (id=7370): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat$binderfs(0xffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x800, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r3) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r6) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xd) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) (async) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="94010000", @ANYRES16=r4, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r2, r8, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x10, 0x4, 0x3ac, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x29b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x3e7}}], 0x1, 0x0, 0x0) 43.673806054s ago: executing program 2 (id=7828): r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) lseek(r0, 0x7ffffffffffffffe, 0x1) sendfile(r0, r0, &(0x7f0000000040)=0x7, 0x6) 43.57248686s ago: executing program 2 (id=7830): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r2, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, 0x0, 0x20000000) 43.482140795s ago: executing program 2 (id=7831): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="de6900000d"], 0x0, 0x2a, 0x0, 0x1, 0x3}, 0x28) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) ioctl$KVM_RUN(r0, 0xae80, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f00000001c0)={0x1, 0x18, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x20140, 0x100) write(r4, &(0x7f0000000140)='1\x00', 0x2) socket(0x2d, 0x2, 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1060000, &(0x7f0000000580)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}, {@index_off}], [{@euid_gt}, {@smackfstransmute={'smackfstransmute', 0x3d, ')('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@obj_role={'obj_role', 0x3d, '/dev/cuse\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) 43.360944333s ago: executing program 2 (id=7833): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "51edef7214e4ff93", "42635001e90003a25f49631e467e1074", "6bbc39e1", "e01cf9ab6c03e72d"}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000200)=0xa) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{0x0}], 0x1}}], 0x1, 0x0) 43.241863176s ago: executing program 2 (id=7834): r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) r1 = openat$ttyS3(0xffffff9c, &(0x7f00000001c0), 0x10400, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000200)={0x3, 0x1, 0x3, 0x3, 0x2, "e75b04b5ad7b39982910fd3b61e74ae5cacae3"}) lseek(r0, 0x7ffffffffffffffe, 0x1) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x400, 0x0, 0x25dfdbfc, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) r3 = syz_open_dev$loop(&(0x7f0000000000), 0xe, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x48000, 0x41) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000200ffd, 0x0, 0x0, 0x104, 0x1c, "faf98317e5a1149989fc8dbe2dc3bd3f8bbad0099cebdc25f5ab60c9e6881a7beda9b3adf4f7350b464c516bdd8a418000", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad33000100", [0xfffffffffffffce8, 0xa]}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x10, 0x0, 0xfffffea8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000080000002eb500000000000000001801000000646c2500000000d715ff08ff0700007da47b1a0e000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) sendfile(r0, r0, &(0x7f0000000080)=0x6, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x11) splice(r0, &(0x7f0000000040)=0x81, r2, &(0x7f00000000c0)=0xffffffffffffffff, 0xe4e7, 0x9) r8 = socket(0x2d, 0x2, 0x0) bind$xdp(r8, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) bind$xdp(r8, &(0x7f0000000100)={0x2d, 0x0, 0x0, 0xb}, 0x10) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4) 42.988211265s ago: executing program 2 (id=7836): socket$netlink(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x57, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='1', 0x1) 39.401646229s ago: executing program 1 (id=7852): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0x5, 0x4) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, r1, 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x800002b, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$9p(r3, &(0x7f0000001100)="0f", 0x1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000780)="ea63e78e35de5ae12b9165fcddae983ce11643185a3a3e35b447a5dec5b1aaf2aff5b50a36cda9d6a4fe6634f74dd5a70a3956ed4acf5298ab02e6a755bde3d878b7d9d0a86d9c27e359d92fe34688ec74032be9597f0bf166a839673e9be77c5d1d978bca18c5bb3ca2dbef821b09445e2e944a02f400c727b83b559df2b7d1e85861b4711a040d3d17d30d98ad8feb5d175303ef6bf7", 0x97) sendmsg$SEG6_CMD_SETHMAC(r4, 0x0, 0x80) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r6, 0x40047452, &(0x7f0000000100)) 39.262944412s ago: executing program 1 (id=7854): r0 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000040)=@base={0x6, 0x4, 0x21fb, 0x5e, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000280)={@initdev, @empty, 0x0}, &(0x7f00000002c0)=0xc) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x88802) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@any_dev={0x1, 0x80, 0x0, 0x0, 0x1000, 0x9a, 0xffffffffffffffff, 0x0, 0x1ef}}}, &(0x7f0000000540)=0x0) r5 = openat2(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x2, 0x181, 0x2}, 0x18) r6 = open(&(0x7f0000000680)='./file0\x00', 0x214000, 0x112) r7 = io_uring_setup(0x4133, &(0x7f00000006c0)={0x0, 0x78b8, 0x10, 0x1, 0x117}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x0, 0xb2f6, 0x80000, 0x3, 0x19f}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xde31, 0x4, 0x2, 0xee}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6dd1, 0x80, 0x1, 0x33f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0dd, 0x400, 0x2, 0x2a7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf873, 0x40, 0x2, 0x30a}}], 0x4, &(0x7f0000001a40)={0x2e, 0x41, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x152}, 0x0, 0x0, '\x00', {0x3, 0x30c, 0x0, &(0x7f0000000a40)=@buf_4k="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"}}, &(0x7f0000001ac0)) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r9, &(0x7f00000040c0)={0x2020}, 0x2020) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000001d80)={0x0, 0xf676, 0x200, 0x2, 0xa0}, &(0x7f0000001e00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6daa, 0x1, 0x3, 0xf1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc820, 0x2000, 0x0, 0x19e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcaa7, 0x1, 0x3, 0x1c8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a63, 0x10000, 0x0, 0x353}}], 0x4, &(0x7f0000003780)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xffff}, 0x0, 0x0, '\x00', {0x1, 0xb10, 0x0, &(0x7f0000002780)=@buf_1k="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"}}, &(0x7f0000003800)) syz_ublk_setup_queues(0xffffffffffffffff, r4, &(0x7f0000000600)={0x0, 0x498e, 0xdb35e2056e0c6a0f, 0x1, 0x1c3, 0x0, r5}, &(0x7f0000001b00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x154a, 0x8, 0x0, 0x27b, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x356f, 0x200, 0x3, 0x2b9, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb08a, 0x2, 0x0, 0x2c6, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x79f8, 0x1, 0x1, 0x2c9, 0x0, r9}}], 0x4, &(0x7f0000004840)={0x2e, 0x5, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x3}, 0x0, 0x0, '\x00', {0x2, 0xadc, 0x0, &(0x7f0000003840)=@buf_max_buf="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"}}, &(0x7f00000048c0)) r11 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r11) r12 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r13 = syz_open_procfs(r12, &(0x7f0000000040)='maps\x00') pread64(r13, &(0x7f0000000140)=""/15, 0xf, 0x4) r14 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r14}, 0x2c, {'wfdno', 0x3d, r3}}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x1b, &(0x7f0000000140)=@raw=[@generic={0x9, 0x0, 0x3, 0xfff7, 0x40}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x401}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ldst={0x3, 0x1, 0x3, 0x9, 0xa, 0x2, 0xfffffffffffffff0}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000000240)='syzkaller\x00', 0x101, 0x0, 0x0, 0x41000, 0x4f, '\x00', r2, @sock_ops, r14, 0x8, &(0x7f0000000300)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x3, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000380)=[{0x1, 0x2, 0xa, 0x1}], 0x10, 0x400}, 0x94) 38.938270144s ago: executing program 1 (id=7857): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100039}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xfffffddb, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a9c000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2e00b9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x44, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0xfffffffffffffd55, 0x104, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@loopback={0x1000000000000}}, @typed={0x0, 0x9d, 0x0, 0x0, @uid}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 38.571057515s ago: executing program 1 (id=7858): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="de6900000d"], 0x0, 0x2a, 0x0, 0x1, 0x3}, 0x28) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) ioctl$KVM_RUN(r0, 0xae80, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f00000001c0)={0x1, 0x18, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x20140, 0x100) write(r4, &(0x7f0000000140)='1\x00', 0x2) socket(0x2d, 0x2, 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1060000, &(0x7f0000000580)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}, {@index_off}], [{@euid_gt}, {@smackfstransmute={'smackfstransmute', 0x3d, ')('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@obj_role={'obj_role', 0x3d, '/dev/cuse\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}]}) open(&(0x7f0000000200)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) 38.570583457s ago: executing program 1 (id=7859): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "51edef7214e4ff93", "42635001e90003a25f49631e467e1074", "6bbc39e1", "e01cf9ab6c03e72d"}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000200)=0xa) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)}], 0x1}}], 0x1, 0x0) 38.474010694s ago: executing program 1 (id=7860): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='2', 0x49) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r1 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) ftruncate(0xffffffffffffffff, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b0000000190001002dbd7000ffdbdf2502202000ff020002001a00008a00088043e05b08beb7a54005f83280380b75f051a52d0de09d397ddc266c910c630f9d6539cb7b2da5d7d4e68ab3d65bda8bdc5e242c3aeb8d4e6916611502ee6144cafdee2595cdff1af3089f956ec5ce96c2bdc2cf9cf9ef8392d7b941e207f4c786401b41e36821de2e2a8df5902d400f6bf9d824d3df2d56a4c70858ffa434af7206a2b232543d000008000100ac1414aa"], 0xb0}, 0x1, 0x0, 0x0, 0x40894}, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xd) 27.90273309s ago: executing program 34 (id=7836): socket$netlink(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x57, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='1', 0x1) 27.214804227s ago: executing program 4 (id=7970): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="de6900000d"], 0x0, 0x2a, 0x0, 0x1, 0x3}, 0x28) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) ioctl$KVM_RUN(r0, 0xae80, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f00000001c0)={0x1, 0x18, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x20140, 0x100) write(r4, &(0x7f0000000140)='1\x00', 0x2) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1060000, &(0x7f0000000580)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}, {@index_off}], [{@euid_gt}, {@smackfstransmute={'smackfstransmute', 0x3d, ')('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@obj_role={'obj_role', 0x3d, '/dev/cuse\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000200)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) 27.150515338s ago: executing program 4 (id=7964): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) writev(r1, &(0x7f0000002840)=[{&(0x7f00000001c0)="b4000006004f709b905d6f66b8261f87", 0x10}], 0x1) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="63202a3a2a20720300"], 0x9) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f023}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x6, 0x1, 0x1ff, 0x70}, 0x5, 0x4, 0x0, 0x2, 0x0, 0x1}}) rt_sigtimedwait(&(0x7f0000000080)={[0x4, 0x94ba]}, &(0x7f0000000240), &(0x7f00000002c0)={0x77359400}, 0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x83, &(0x7f00000002c0)="00c8000200000000", 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040)=0x4000, 0x4) 26.575051824s ago: executing program 5 (id=7965): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0x5, 0x4) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, r1, 0x2) r2 = fanotify_init(0x4, 0x1000) fanotify_mark(r2, 0x1, 0x800002b, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$9p(r3, &(0x7f0000001100)="0f", 0x1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000780)="ea63e78e35de5ae12b9165fcddae983ce11643185a3a3e35b447a5dec5b1aaf2aff5b50a36cda9d6a4fe6634f74dd5a70a3956ed4acf5298ab02e6a755bde3d878b7d9d0a86d9c27e359d92fe34688ec74032be9597f0bf166a839673e9be77c5d1d978bca18c5bb3ca2dbef821b09445e2e944a02f400c727b83b559df2b7d1e85861b4711a040d3d17d30d98ad8feb5d175303ef6bf7", 0x97) sendmsg$SEG6_CMD_SETHMAC(r4, 0x0, 0x80) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r6, 0x40047452, &(0x7f0000000100)) 26.531210438s ago: executing program 5 (id=7966): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x40001, 0x113) write(r1, &(0x7f0000000000)='7', 0x1) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) 26.453059052s ago: executing program 5 (id=7967): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="03002cbd70000e0000000100000008000100", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 26.331601346s ago: executing program 5 (id=7968): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x40001, 0x113) write(r1, &(0x7f0000000000)='7', 0x1) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) (fail_nth: 1) 26.240090775s ago: executing program 5 (id=7969): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000020008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x49011, 0x48801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x40}}, 0x0) sendto$packet(r4, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @local}, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000700)="d80000001a0081044e81f782db4cb904021d08004f1e81f8d8150019001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006dcbd63951f215ce3bb9ad809d5e1cace81017f5b5cef443dc3ed0bffece0b42a9ecbee5de6ccd40dd6e4", 0xd8}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x4}}, 0x9) 26.222105521s ago: executing program 4 (id=7971): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0x96) 26.113677995s ago: executing program 4 (id=7972): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000001000)={0x1, 0x0, [{0x839}]}) 26.043193454s ago: executing program 4 (id=7973): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) listns(&(0x7f0000000000)={0x20, 0x0, 0x6, 0x2000000}, 0x0, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r2, 0xc038563b, &(0x7f0000000140)={0x2000000, 0x1000000, {0x1eb, 0xff, 0x9, 0xffff8000}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'syztnl0\x00', 0x0, 0x2f, 0xc, 0x9b, 0xffffff00, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x7, 0x8, 0xff}}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001b80)=@newtfilter={0x1cec, 0x2c, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x10, 0xffff}, {0x0, 0xfff2}, {0xffff, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0xae, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x10001}, @filter_kind_options=@f_cgroup={{0xb}, {0x1c74, 0x2, [@TCA_CGROUP_POLICE={0x41c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x7, 0x4, 0xf, 0x6, 0xe, 0x4, 0x100, 0x401, 0x7, 0xfffffff8, 0x8, 0x1000, 0xffffd853, 0xff, 0x6, 0xfffffffc, 0x9, 0xd, 0xe87, 0x4, 0x9, 0x7, 0x99, 0x8, 0x0, 0xd09, 0x6, 0x2, 0x3, 0x2, 0x9, 0x4, 0x8, 0x6, 0x3, 0x100, 0x2, 0xfffffffd, 0x7a1b, 0x4, 0x8, 0x9, 0x8, 0x5, 0x0, 0x2, 0x4, 0xfffffff8, 0x80, 0x101, 0x9e, 0x5, 0x5, 0x16d35c69, 0x5, 0xfffffffc, 0x4, 0x100, 0x400, 0x7, 0x69d, 0x7f2e, 0x8, 0x54c, 0x4, 0x7, 0x200, 0x7376, 0x1, 0x2, 0x5, 0x6b48, 0xfffffffb, 0x3, 0x7, 0x6, 0x10000, 0x7, 0x0, 0x40, 0x6, 0x9, 0xf812, 0x516, 0x40, 0x3, 0x4, 0x8, 0xc, 0x0, 0x5, 0x8, 0xfff, 0x0, 0xb4, 0x4, 0x4, 0x3b8b, 0x7fffffff, 0x4, 0x3, 0x8000, 0x5, 0x180, 0x0, 0x9, 0x1, 0x8, 0x2, 0x9, 0x3, 0xac35, 0x9, 0x0, 0x10, 0x8, 0xfffffff8, 0xddb, 0x1ff, 0x6, 0x4, 0xc94, 0xfffffff3, 0x23, 0xb, 0x4, 0x3, 0x100, 0x1708, 0xffff9472, 0x3, 0x7fffffff, 0x4, 0x4, 0x8001, 0x4, 0x1, 0x5, 0x2, 0x3, 0x6, 0x1000, 0x9, 0x8, 0x9, 0x40, 0x7, 0x0, 0x7, 0x8a, 0x80000000, 0x6, 0xfffffffd, 0x0, 0x3, 0xc568, 0x2, 0x101, 0xfffffffd, 0x8, 0x8, 0x5, 0x6, 0x3, 0xd995, 0x0, 0x6, 0x1, 0x3, 0x100, 0xff, 0x7, 0x4, 0x2, 0x300000, 0x3, 0x2, 0xfffff9d1, 0x9, 0x5, 0x703f, 0x81, 0x0, 0x6, 0x16, 0x10, 0x60, 0x81, 0x1, 0x15a, 0x8, 0x7f, 0x8, 0x0, 0x8, 0x2f389125, 0x0, 0x81, 0x7b7b, 0xff, 0x401, 0x2, 0x8001, 0x14529ff8, 0x4, 0x3, 0x0, 0x2, 0x2, 0x3ff, 0x468, 0x8001, 0x3, 0x7, 0x7, 0x6, 0x8074, 0xea, 0x80000000, 0x2, 0xfff, 0xfffffffa, 0x6787, 0xfffffff7, 0x1, 0x56a, 0x1, 0xc2e, 0x8, 0x1, 0x800, 0x1, 0xc3, 0x5, 0x7fff, 0x786, 0x1, 0x3, 0x7, 0x2, 0x60, 0x7, 0x9, 0x80, 0x81, 0x7cb1, 0x4, 0xfffffff8, 0x6, 0x1, 0x3, 0x5, 0x5, 0x9, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x40}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}, @TCA_CGROUP_ACT={0x13f8, 0x1, [@m_ctinfo={0xac, 0x16, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x80000000}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x19}]}, {0x65, 0x6, "c4a2f00d7e5600da3aafb2de7b239b5da14f45d84bc3c90ca0f8b6773959a975a4708f21d31c03548b556dbc594063f4e326b3004be349e75b302734765254ed3e7255e045b317b6b535a23b35242e725c654dcd5358f09d2c394372916a386041"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mpls={0x54, 0x18, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xbd1}]}, {0x1d, 0x6, "cd750e0c47c0b63220f42cd691a5dc8acda68b32b9039f9fac"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x11f4, 0x19, 0x0, 0x0, {{0x7}, {0x1184, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x102a, 0x6, {0xb, 'filter\x00', 0x4, 0x7, "28af0a77dcdd4be58daf16b1a83db591753cebdb5a2bfce271c550c12650bff92b1b75323fbedb8cd766a371b653f7b8c164be058a9ae652b344b726dc5df95ef312ff37efcdf6c1f26f3fa55bce63f85eb0cd85637d1b794fb220305815583f4b68d691fe2e2e3539d8baa875f04e99c0b0191e1366c2f7c79268aa19eeb2f068d5d77aa2c5af53f5ab2cb04c6da32e6a06d685806d251cc2f49ba11b31075b4408994c7a7917949117baeba1cc7671136e576554e23158b3f40f1a9f02fc91b9249f81c703657db40297a00ef66c9ccd6c5991c2ae0ec737d9970c2324ec03f5b7ef59ad742349ee88d96091f5ea170f3a1e9728b147b2785568d5dff8ad1e405008c1def7aef8226d4673f33f14af0aed6c77eb5cdf7e911ec637e419224c299b114016ca3cf7d97367c6007a7c1499835b8bbb7e6ab5131dcef2a9576aa252f59f20c92c8af3d1094492608c10d8da16ad5dd93f12cf0cb6384b455385db31b75a4329d30d3c4d6cb674bcae8214988cccca7525e22e811d22a204a61882101205075d85bba23c7aaa1f604f90ee258d034ad708127da74d9bcadc86b015bfd53f37c660e6f707a5e52d321f208ca13b45019d3f63b2bd17d3288d076d866777720758f275d1723516d79a6069c5769758f68be8f28352972e1416bb93fdd9479834b77c113bde2a9930afef6b2c8a2b822a23547440bd6af4d2dc172e36d5340a37659dc054fa390b9bf5d42583b0e62c938e8582e0b1250ce620ba7160c21fa9050067b1a8e4f55302f0942f56808fcb5ba88cdda93b7bd3873478e81846dd9f82d605898bc3c32d10354d9e19094822f76981918b1fbefdde6a7b5a3988e48e8a3a2424a07e2367e188fbe5fb171d93b46e25b57e019e2dddc47ca7ae2f0ebe0c8950b2b995258ed9f6fb5edae6cf1790a143d86fe7f4a1867d5aae830025c4f317cdc905ede6f3f698407e0fc68c5aa2b5e2da35a928d53e428a5e6cf577cc442fcc759d8b78bf4919dba12d378196856d1be93c64dbe030c54c50d19b4e12fbbb3b3ce82e7f477a81bae9fe03b0cd19a1dc99d33079ccb561b74bb0342378fca33ae905587755969f528942a52d9a5f1996f673480953ab9ef265dea85067f397f40237e349c61add8d573fcd1cb16bb30e2ee8817c027627dd97250d70e878d0cbd6cc3115dc657d1f90f7536475c7341eb801e12c980c09e36bdf69120900ee1779b3f86632f01e7e2b6426f45b7ae71aa3b6be445a4cfaab470e96295da97fab1d8ff269642e57409040328b9a7a8bf406c5d763173830609eb1d086efe1bc2b37a9792b8601128d33889aae829d322a9cd5bb253139491e1bafc620cf8376c21e27a2609c92ecc59ff7f8c142426911fbf6baad1bc4ef325eb1403d88f30b28bd26b70efb417f553b765e9e98e903ceb8e336c949240132cfa9d342e7947987d3a17916a6ffd48143edeb7a25163c07eda71d2ba0e29d0dd9f1b91734f3528f6868a95fe1ed0c07b8dc760046f2dc897755ce115dddd6718a3087655068e7c44a0d131bacb166920922518f9a0ccc440c933626e8b87cab55662c5e9bda65f472b23becc88ee12e661cc596a5988671f82bd9054c53ab90deee84d0fa5ce198c288ac12464ae12a01c89d628506365d54590ac5f099a74059d61ed10d707f147fca8904744d85ce79a8f9f27e58634eb75668760af07d6dc7bb6d2838bcc257ca1bf82307ba342e1933cc5ad53ea92c4120c5d03d610e9473cf06b7cecb931bcb911b488611bf4e0c458058cd2937e397a41a5895789b2ed83b9b2392b0b7ccd4a5ca29c0e2647f4195352ee59c7653bd7dc94f55e98a32ed3864b8be54e2b1a4791fdd75b9be3e3b1173509da10e3ccbcc448a90a73a5cd9532b88fb022e1871a5d4168cdf97c06f8de0547ef14480987b86dfd10d69b2433e46c98b3e47b64a640a8cbc870b06eefb94c6bdb5715b67bbbc8e986780460c0f6c2d8a3c8c89a9db74a02029e102d0ab0a353bad6b10814404ae896e2779500e3986da56d20c29856ee72b6eb83838ac3a9398418e371661f722117d30f1aee3ba02f26d70dd02afbc9b67296fa8d1edb0c9a21fd7650d895f527001657c3db05c2a0455eac6bb33892afe95a19ed4a65aa03159bf99e1a3f43381b6715effdccc70398a556e8c10d0a05aa806cfb773ea1ec0c4da54a190cbfc620900802f08b605b25b5f947a60dd66e142ae292ae6faa6fa2866dea75e273aa165eb1df07b4efb43a8cacb6283db3fcb0ffc75d337f2c472fed1e6fca76f1d3a8d11666943d0c8e9f879182212922ddea58fac9f2eb86bdfc846355d6790aa6f5a94e5f7a713c9b91044dac4111a9e7ca46e3823820fb32067c604de78edd27df69a6b3357115a9e2372b61d9460b160f000319ba19dd393a79ade9f60ac569fa71a0e9e640bd66efd3501ea514dbfb0f2ab970d747a609a79df6808dbb409ee13b94e9756bdaa2684b899edb99ca69d512b6645db12e2313ab23f20c6f97ac4a5d6fb75f2776710b06d3f646aa769800785ea06f9ce4ac89dd80cc5f487da90d715cd8b249b22db831ba46f9ab3d2b697381ab4fc628b445b87a0b440301bc7f0d622f9309dc8728d43326fc2a7ad4b60b3f86371d31b257b8c62707cdb70b8673ed5b16f5b84742acba58cc6d12f009e0c53fc9f72b5655f4b3695eb61e71669d87de504e676c0c179eaae7d4406642e99d0f66bf8b06bc84c10a7089baa45b701488c4e0b0bb54e7f37a9b28e7ab114b60af913ac904ce2a40a31a47431bec9a2436fe26a2912da5ee543a9ed68ddaaae0809322bc98ce0599dbca6e0e6273139b7a67aa1049c270288447d7bd433cf1589f9a28cf958919439ddf2682514c4ca7c757e61ed380347dbc48ead24e87cdd0ea8af8610a99fe884a05b8db8e6b1f934cec1fcc1b8387adbbc828fef030080e7bb3cee3d42b2e9292ecfed24d41b1476ca112767e02f2242d33e6b2eb1688eabc853d0ce21312725d563f62964bdbfb3d42fe10da57bea1873401d3518bf36f5489b8d1b484e7e6d3558c23439001f3c5cb2a42410c4f4c6977351432ac5920263dfabe19e26a02049d6b8e56b4f4b894b44663c593593ae94824866ba412cd4807e127d0a86357cdf19d0c807c37b1f4ec9dc9588c5fbc61dc4d153d74e764272284d49f15810bb4dd4545cc3728fa6b01cfce5d9d1ba1daed7445c8a956a5c3ab62dc26b632be100324ff9cbce3b48e10bfc2a1cca47b2ce3ea3c81515f6661d1252f594d3e2e63c70e44ccc038b7c73b386f50edea1d2d5ee1b3dab924906a84821973a97a183b6718b7e02bc4e173d78e614c1fb4bd7e3ca768a7500825a51dcf358a1936e4208ccb82fd48764049e40bbe07f8f718c907ccd7630eaa7c6aca37aa9aa7e88af0dfa1bae0d2e8cc11ae3be689f64f2ee07e92b79cc721ad338bf3ee9809764a907c78e183300e88b3200a81e6ee2580fe3f18304461e48aefa1f608cb7e597042b6ff200cef817dd44db0286a7d52cc243b149d067141677bec07f42f4d4fc90b17eabe8bcafcb5b47589e0e0b6b43bf3992dbb88b5c428611a8cd67ad25e2622649828a138cdef7ab45c2e211eb9bd5938eac000d81d8345c8d9c490dc1d57956436f6291b8596548873c65d0f2b8269029d9c2f77a0b94af9e7c12d5677b5d79b5d4426fe44aef814a4dbebe3d1fe6003246be4e184648baca723fa6563429c94bef8b4f407cf7d8b3c92b5be86f33d1b5f1a1abb2950cb324506480681312e71d35b328291f7687a86432e2255945319de91eae8d1548fe0821011a888e21bdf40dff95e0e8e5e55f261f19a2d938e772f63f81c2abb1df02cfc95096082d73d91ae8c106d21cdedb2d0508a1fe0b4448a50bbf04ee6079d2f64bd52642611a06e582d18650732a63e48f07e99b930303c1d5ad4fb22f3bf33a3d34ab8b8d95f1784608d7e68ecb78e4269c41d476e46eb03dcb40605e75bec2cc6946687aee6457b4c488a126fe3923250e0887f23d289646b007facb8d95d12ebde0ae05fae4869d358721bcb1ab8456e390852a35be125fd8da4084a6ae0cb921ea1e20184f2c118c89602753b6f58e09ee0903676c1405a145a6990a2ba85eff3ecfaba4b502bda4372e09c039195f42213be900035be0467130c7bfa8409fc984a810b6bd1becdbfca553c0e41de3fc666071eb337f8300183a3ac1d8b7c8b287e5e2059fa1cbc7e5c649f19ae34f58c12298aa40504bd369cc7ebf5885d78491510b0560f7b33a4cc60844373b96b0c8144a4b467fb1f4ec5a8932684d65276c92a25b921bf4d696dbe42fe311a8208dba6f7e19f5be655085e0ae2b059c0c344500e5d76f7e35e31ea53978456aa29609ab2c3835bec8da0060e77d7b18fa0b993970e91053f67c6342242ca3dc99019fe798d69d11f9780d32657e12317bc5f2ab73b74826ebb6d1ebc968901da5bcbfb2aec550399365bebdb5f0ff024fdf686046d7cfa5bdfaabee2147907851b7645fd47d78f937b0cbdea73c4cefc6be7fb59ed546cac49061b1110c67fedce96aa843fc7c690422445f1d3224c43a319029bddabfcec37c0f13ee8b0413b021bab697f6414d7d5cf2796e42ff63b86cd30ab5e0f47974f2df5327248b68fdddd682a8ef7ea5414f94c4106538561f3ee9d13e59461592ddd13fe85887660701a4791451d29db78147bae7ffad613f28bb2d499801b7c5376c64bcdb310d3d0b3f8a498be32f822443977730c31a91e4f823b211ba0645194d2ac4cc0c8201959e9c3c32bfbea2a8ab9e355e6ad887258e34d9101ca5e8e006d8ab49a5af73503bd61a23f414674c1446aa8c35fa640d37ae16067914c2348cbcf6d8150e0bd7d1a688dd1e80adb8c63984f2754e5900bd5f445b1aad81596d7c892c932f7f4be8b474b1351ea5051507601ec688e9fb0983f86f0e09f3654a981612c12eb24334f796d1e060146a161a3e97ea035280cc5e6c9ab3e584ac65b2b388a14285f455d40e10c13aeaa5b99efc68c355eca5ee8c40c4db5aa1e7a355a92e4935bc7fb0d405bedc462dcd189318a02039eeede3aa19b51c99827dcb3955cb4f062362c0666e9ae3d52091b62cbc42b3b59f8e1645ea403e1d7c492c87cfb2c673e2a52f436a31c3aff3a0a28093113133ef9337f92f582796547d8ddb8247078a6642940d4dcfcf81f56ec0b404b0e5b2e4b85121ae8aa12af785f24ebfeff7d7906db963e64bc442efc295743972f00f19a4114290993014fc11fbeb6528ce0f4ff8e75535e16c14258f8bd2fb9c5d0ff571f75c6bbdd820d576f1de70f13c6b45a8adb84948a8a16eb122ff881615110d1ba47bce65779d5abf583761ce103cbbb6e0a1dce493eb964f8a0defff77680004a9f4a954db85cb4c57cbab6366a03f574e3189bc2ee07ce547c188cdf283664ca96eafc48ca0c33ce0061f1db4d15aa9a37ba05b029af675f73a7b542f0772f66c7646621358c700e4de5048abb0937511bf3569e57f6d110e3dec0809e6b2cb776d9cb046558dc4df8bd81b783935930d4c4b01f5de189b3875db2fa847b32170dea64f8694b962d27d8f35be23bd24439aad91ba244e3b1d697e820988bc88916b75a1520a5c3ded594046f5f2a5b8414d755057d2bda8b03049d0015634de2dc165518755f42c67371ca14cd05f3148127f60d13f6deabd9b6ba5eba1797d57c4bec35d6bd6fb6e19d89e2421e9dfc12c58ece5255621f9dd2ad71c693c781524fcf791154403cc143982"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0xec, 0x6, {0x6ff9, 'mangle\x00', 0x2a, 0x5, "1d96b4fbc7ca7b86079cfefe819fe146149d98558202518411c387671066b86b363dc56563a07c2c79f77322a658f82cf9556626183d2701689b785ce3d48e402b35cca97488de788a24a7256f8e8fc042eb5db2d46a2ddbebae366e7ac2ed1c45f6ec2debccfc9d385045aaffbd816b727ae486dcb271a69ce6ab504b843278515b6799c9eb7b9034d37cc3b5e06ce702533089b152f69c218ac9c55f387c8a637d7c0f32e03e1083064c2e6b6fa78cc9ad3ec5fa2251c68801e236510c5f05f9e6"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xc17b}]}, {0x49, 0x6, "24da7eff49f67cbfc4a827dd31f84801248e493834d367c60674e95b09c06b1513a5b72d80616311b9eeae45dcbd32c9e4f4a93fd7d7d16a17ab398697b9a5bc74cf618d67"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0x100, 0x12, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xf}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0xa9, 0x6, "5969ace48ede0a898a969ce3abaf789329fd739b7bfe4788c15f6121980f8909a792cb16c98cdf953370a1a6251055cc4bff885645d904e3c9b7ff94eb3905a09d56df628d62891bc5b0ee81bb52f6074897a11d5abf8ae682562f064f1a4b90e5349d8dbe01e30c07f269fd68f156b1bdc585acbe6d33b4182b6a94c856af500cc0e8ecb40f3041819ea4990b44e881986d008bdc83a15a403b900b188255d357c5dc86be"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x45c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x274, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x8}, {0xfc}}}, @TCF_EM_CONTAINER={0xc0, 0x3, 0x0, 0x0, {{0x81, 0x0, 0x3}, "846382b78ff14ad2c8b6bb2a660e13d8e21c17018a97ed428311e7201cefbdeefb6e25f4b38c03d8e5bffa27eb378db454c7d1e6fdf6811924d29c3a8e30a83761479d30226866412fa878ee3488c9ab0b0f18faa78a6ee9e4360b7569700a81b6c478eff4bc2df1a2a8a85ae7107684cc6c31a38ee710d788908e1c44ee38e37ba0e80d6751d7d03f0ad35ef5016e12d4aeb9463477777aa6231e5d2ee93d6355b16c973b2bff99e6c6979ee1528bd995"}}, @TCF_EM_IPT={0x1a0, 0x2, 0x0, 0x0, {{0x7, 0x9, 0xf}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x81}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x5d, 0x5, "2caa19f411ddd42c0160d36445d636ba913041a852f4edb46024caa19cb481fd9dba819fd8fe9fdda8633efd5e08b531da97985aa15a9d5c943d2f69a1012cff6cfa71bd3eb0586ee028acffdb65f9494dfc60a60bd69d795e"}, @TCA_EM_IPT_MATCH_DATA={0x34, 0x5, "0c76c70c289f39bf7d3b491f1d0fb3c1ecdd3914ce18ded558a6eb8ab0861033cc6f7a1b4099f7f28bc9d68c32fde917"}, @TCA_EM_IPT_MATCH_DATA={0xd1, 0x5, "83beeea831b02de97a67952430387a20167826e66e7fd151c2fe4050d78e23a4cdd887a2757c50c1f8f95604e84c8492c20a8b57bbebedea216f5da3d594a31c554ba38c1c4aa0bfbf8dae32ce4928f01246a4e7d865536b39e71e6c95199ad8744585c26a7fa48f8815c9e0521c11496777a566d95412f7760602fdc6854a2f924f978e54a3b67d8d7544f24e613ff777bfd70883f89dd7a39f8da3d63c84201755eeee88ca9822f211d87c5cce7f7779727706c701bbb48f162bdfdb7395ecae3deae0b70638e048ace4dd41"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}]}}]}, @TCA_EMATCH_TREE_LIST={0x1cc, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0x35}, {0x4, 0x8, 0x7, 0x9}}}, @TCF_EM_CONTAINER={0x54, 0x1, 0x0, 0x0, {{0x401, 0x0, 0x800}, "e81561759e2709b2099b707340f465d4765076d6fd45fbcc081250ac73ba6d76f91601c12cf66ea1e5e74d9791c195bffef3fd732cc0248c2bbf51c1b65aff79a2d4c02bc7"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4, 0x1, 0x3}, {0x6, 0x3, 0x7910, 0x3, 0x5}}}, @TCF_EM_IPT={0x12c, 0x2, 0x0, 0x0, {{0x9, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_DATA={0x7a, 0x5, "23e024c6196f455a3a9c1ed0e943d6f9d08572c1da3f4ab31b4b0e17033e141fe9c458ddc10cd85bb188e5ab7c2020b1fbd4f659893b44411c4c8083c5f0db3cc7ccb93e3d29ceb3769b9fb46899453eb850b9db8ce90359e4a1af1a42a6393f8fb2708f2ca14afeebbb12114ab8008849c6f353c323"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_DATA={0x3e, 0x5, "2c1d3c008784552f98778c6ced0db25f02c2ec8df329e0868b1b01e3b15f4553ada624aea0153b8c2250ef893bd77078a088423ffd1860352629"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_DATA={0x29, 0x5, "26ce433c8c922e2b615c24396875792505886d489c6b80499a6c311225d2e6095b43ff17c1"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x19}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3aa, 0x7, 0x1}, {{0x2, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x9c54}, @TCA_CHAIN={0x8, 0xb, 0xa}, @TCA_CHAIN={0x8, 0xb, 0x3ff80}, @TCA_RATE={0x6, 0x5, {0x6, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0xffffffa1}, @TCA_RATE={0x6, 0x5, {0x3, 0xff}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x1cec}, 0x1, 0x0, 0x0, 0x84055}, 0x2400c808) r4 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r5 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000001980)="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", 0x1d8, 0xfffffffffffffffe) keyctl$get_security(0x11, r5, &(0x7f0000000100), 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20050001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) unshare(0x2040400) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000080)={0x2d2}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x20, "5ec800000000000000fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060086dd0000100007007f0000017f0000013a004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r10, 0xc0045405, &(0x7f00000000c0)=0xfa) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 25.945051697s ago: executing program 4 (id=7974): socket$netlink(0x10, 0x3, 0xc) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x57, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='1', 0x1) setns(0xffffffffffffffff, 0x24020000) 25.456939553s ago: executing program 5 (id=7975): socket$netlink(0x10, 0x3, 0xc) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x57, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, &(0x7f0000000100)}) getpid() close_range(r1, 0xffffffffffffffff, 0x0) 23.379246574s ago: executing program 35 (id=7860): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='2', 0x49) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r1 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) ftruncate(0xffffffffffffffff, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b0000000190001002dbd7000ffdbdf2502202000ff020002001a00008a00088043e05b08beb7a54005f83280380b75f051a52d0de09d397ddc266c910c630f9d6539cb7b2da5d7d4e68ab3d65bda8bdc5e242c3aeb8d4e6916611502ee6144cafdee2595cdff1af3089f956ec5ce96c2bdc2cf9cf9ef8392d7b941e207f4c786401b41e36821de2e2a8df5902d400f6bf9d824d3df2d56a4c70858ffa434af7206a2b232543d000008000100ac1414aa"], 0xb0}, 0x1, 0x0, 0x0, 0x40894}, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xd) 22.853694264s ago: executing program 6 (id=7982): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0x5, 0x4) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, r1, 0x2) r2 = fanotify_init(0x4, 0x1000) fanotify_mark(r2, 0x1, 0x800002b, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$9p(r3, &(0x7f0000001100)="0f", 0x1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000780)="ea63e78e35de5ae12b9165fcddae983ce11643185a3a3e35b447a5dec5b1aaf2aff5b50a36cda9d6a4fe6634f74dd5a70a3956ed4acf5298ab02e6a755bde3d878b7d9d0a86d9c27e359d92fe34688ec74032be9597f0bf166a839673e9be77c5d1d978bca18c5bb3ca2dbef821b09445e2e944a02f400c727b83b559df2b7d1e85861b4711a040d3d17d30d98ad8feb5d175303ef6bf7", 0x97) sendmsg$SEG6_CMD_SETHMAC(r4, 0x0, 0x80) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r6, 0x40047452, &(0x7f0000000100)) 22.839803256s ago: executing program 6 (id=7983): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="03002cbd70000e0000000100000008000100", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 22.774061372s ago: executing program 6 (id=7984): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) writev(r1, &(0x7f0000002840)=[{&(0x7f00000001c0)="b4000006004f709b905d6f66b8261f87", 0x10}], 0x1) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="63202a3a2a20720300"], 0x9) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f023}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x6, 0x1, 0x1ff, 0x70}, 0x5, 0x4, 0x0, 0x2, 0x0, 0x1}}) rt_sigtimedwait(&(0x7f0000000080)={[0x4, 0x94ba]}, &(0x7f0000000240), &(0x7f00000002c0)={0x77359400}, 0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x83, &(0x7f00000002c0)="00c8000200000000", 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040)=0x4000, 0x4) 21.926983758s ago: executing program 6 (id=7985): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{}], 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000009200)={0x2020, 0x0, 0x0}, 0x2020) setregid(0xee01, 0x0) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x1, 0x9104, 0x40, 0x3, 0x6, 0x3, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0813", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x207}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r7, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0xb}, 0x1c) r9 = socket$kcm(0x23, 0x5, 0x0) listen(r9, 0x800) listen(r9, 0x10000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="8400000002060108000000000000000000000003050005000a0000009386eb3997c7c7b30500010007000000050004000000000009003927d43d32fcccdeeb3e220de173797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008001240ffffffff110003009b0d000000"], 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x80) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) 21.138138291s ago: executing program 7 (id=7990): r0 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r0, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x96) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f00000021c0)={'veth1_to_bridge\x00'}) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x2, 0x5004) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1e) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r0, 0x4068aea3, &(0x7f0000002100)={0xa8, 0x0, 0x1}) connect$inet(r0, &(0x7f0000002180)={0x2, 0x4e22, @empty}, 0x10) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000002080)={0x0, 0x3, 0x4, 0xff, r1}) syz_genetlink_get_family_id$ethtool(&(0x7f00000020c0), r0) prctl$PR_SCHED_CORE(0x3e, 0x2, r1, 0x3, &(0x7f0000000000)) 21.043520707s ago: executing program 7 (id=7991): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="d7e599ada862a2ce97c1419e8610000000040000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000154000181100"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800002b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xff2e) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x80000000}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000480050001"], 0x80}}, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x0, 0x13, "00170000ff000000fe645ea200"}) syz_open_pts(r2, 0x8182) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0xa}, 0x1c) lseek(0xffffffffffffffff, 0x249f0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f00000006c0)="63ec33c9e9b98600000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r7, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r10, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18.699314524s ago: executing program 6 (id=7992): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0x5, 0x4) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, r1, 0x2) r2 = fanotify_init(0x4, 0x1000) fanotify_mark(r2, 0x1, 0x800002b, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$9p(r3, &(0x7f0000001100)="0f", 0x1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000780)="ea63e78e35de5ae12b9165fcddae983ce11643185a3a3e35b447a5dec5b1aaf2aff5b50a36cda9d6a4fe6634f74dd5a70a3956ed4acf5298ab02e6a755bde3d878b7d9d0a86d9c27e359d92fe34688ec74032be9597f0bf166a839673e9be77c5d1d978bca18c5bb3ca2dbef821b09445e2e944a02f400c727b83b559df2b7d1e85861b4711a040d3d17d30d98ad8feb5d175303ef6bf7", 0x97) sendmsg$SEG6_CMD_SETHMAC(r4, 0x0, 0x80) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r6, 0x40047452, &(0x7f0000000100)) 18.641256921s ago: executing program 6 (id=7993): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x57, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9) write(0xffffffffffffffff, &(0x7f00000000c0)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='1', 0x1) 17.954788223s ago: executing program 7 (id=7994): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="03002cbd70000e0000000100000008000100", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 17.945043007s ago: executing program 7 (id=7995): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800"/20, @ANYRES32, @ANYBLOB="0003cff6b4c3000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000000)=0xf22) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x3) 17.762282076s ago: executing program 7 (id=7996): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000140), 0xa00, 0x0) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000000380)={"b5293ce5975955b1b9ba75a030e5cf254699933de1a35faa3894db5240f3", 0x81, 0x0, 0x1, 0x8, 0x1, 0x3, 0x9, 0x4, [0x3, 0x0, 0x1, 0x3, 0xc, 0x100, 0x10, 0xebb, 0x6dce27db, 0x101, 0x7, 0x3, 0x5, 0x4, 0x7, 0x4, 0x8, 0x45, 0x80000000]}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/config.gz\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r4], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r6, 0x1, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r7 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r8, 0x8004510a, &(0x7f0000000000)) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000000)="01fe000200373a4541062000a59ea940d2cb0b3692f5020000a00000050000000000eb000000a5e5be21c44e", 0x2c, 0xffffffffffffffff) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000440)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x3, 0x2b}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @private0, @remote, @private2={0xfc, 0x2, '\x00', 0x8}}}, 0x42) read(r2, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000180)=ANY=[@ANYBLOB="d094000002000000818d8b7ed6e95fddd85b1b55d536b7f2a8521b9a0f560375c1c552"]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8001, 0x7, &(0x7f0000000000)) shmctl$SHM_LOCK(0x0, 0xb) 17.630360662s ago: executing program 7 (id=7997): r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e, 0x0, 0x2}, 0x28) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0x3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000280)=""/86, 0x56}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x9000700, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) socket(0x1e, 0x4, 0x0) 10.729782185s ago: executing program 36 (id=7974): socket$netlink(0x10, 0x3, 0xc) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x57, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='1', 0x1) setns(0xffffffffffffffff, 0x24020000) 10.036870501s ago: executing program 37 (id=7975): socket$netlink(0x10, 0x3, 0xc) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x57, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, &(0x7f0000000100)}) getpid() close_range(r1, 0xffffffffffffffff, 0x0) 5.198133615s ago: executing program 9 (id=7999): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="de6900000d"], 0x0, 0x2a, 0x0, 0x1, 0x3}, 0x28) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) ioctl$KVM_RUN(r0, 0xae80, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f00000001c0)={0x1, 0x18, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x20140, 0x100) socket(0x2d, 0x2, 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1060000, &(0x7f0000000580)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}, {@index_off}], [{@euid_gt}, {@smackfstransmute={'smackfstransmute', 0x3d, ')('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@obj_role={'obj_role', 0x3d, '/dev/cuse\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000200)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) 4.997433029s ago: executing program 8 (id=7998): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, 0x0) 4.214804586s ago: executing program 8 (id=8000): r0 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r0, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x96) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f00000021c0)={'veth1_to_bridge\x00'}) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x2, 0x5004) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1e) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r0, 0x4068aea3, &(0x7f0000002100)={0xa8, 0x0, 0x1}) connect$inet(r0, &(0x7f0000002180)={0x2, 0x4e22, @empty}, 0x10) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000002080)={0x0, 0x3, 0x4, 0xff, r1}) syz_genetlink_get_family_id$ethtool(&(0x7f00000020c0), r0) prctl$PR_SCHED_CORE(0x3e, 0x2, r1, 0x3, &(0x7f0000000000)) 4.144595095s ago: executing program 9 (id=8001): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) writev(r1, &(0x7f0000002840)=[{&(0x7f00000001c0)="b4000006004f709b905d6f66b8261f87", 0x10}], 0x1) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="63202a3a2a20720300"], 0x9) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f023}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r6 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x6, 0x1, 0x1ff, 0x70}, 0x5, 0x4, 0x0, 0x2, 0x0, 0x1}}) rt_sigtimedwait(&(0x7f0000000080)={[0x4, 0x94ba]}, &(0x7f0000000240), &(0x7f00000002c0)={0x77359400}, 0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x83, &(0x7f00000002c0)="00c8000200000000", 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040)=0x4000, 0x4) 4.124909269s ago: executing program 8 (id=8002): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0x5, 0x4) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, r1, 0x2) r2 = fanotify_init(0x4, 0x1000) fanotify_mark(r2, 0x1, 0x800002b, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$9p(r3, &(0x7f0000001100)="0f", 0x1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000780)="ea63e78e35de5ae12b9165fcddae983ce11643185a3a3e35b447a5dec5b1aaf2aff5b50a36cda9d6a4fe6634f74dd5a70a3956ed4acf5298ab02e6a755bde3d878b7d9d0a86d9c27e359d92fe34688ec74032be9597f0bf166a839673e9be77c5d1d978bca18c5bb3ca2dbef821b09445e2e944a02f400c727b83b559df2b7d1e85861b4711a040d3d17d30d98ad8feb5d175303ef6bf7", 0x97) sendmsg$SEG6_CMD_SETHMAC(r4, 0x0, 0x80) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r6, 0x40047452, &(0x7f0000000100)) 3.153208773s ago: executing program 8 (id=8003): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0xffffffffffffffff, 0x3000, {}, 0x0, 0x5}}) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x32, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xf}}, {0x4e20, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "9c25a81de3a2211c1c9e8d76fbc4353c3b368740cab8865b", "aff658c7f4edb9e8038258239716d9af58fdbf6a7e584c67e41c7c4be4c51180"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) listen(r3, 0x5) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=20000,proto=tcp,vers=4.0,timeo=1,retrans=1\x00']) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) 2.97060018s ago: executing program 38 (id=7993): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x57, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9) write(0xffffffffffffffff, &(0x7f00000000c0)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='1', 0x1) 74.354391ms ago: executing program 39 (id=7997): r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e, 0x0, 0x2}, 0x28) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0x3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000280)=""/86, 0x56}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x9000700, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) socket(0x1e, 0x4, 0x0) 0s ago: executing program 9 (id=8006): socket$netlink(0x10, 0x3, 0xc) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x57, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='1', 0x1) setns(0xffffffffffffffff, 0x24020000) kernel console output (not intermixed with test programs): 8 using dummy_hcd [ 941.820569][ T5888] usb 10-1: device descriptor read/8, error -71 [ 941.931897][ T5888] usb usb10-port1: unable to enumerate USB device [ 941.939750][T28274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7694'. [ 942.279841][T28282] FAULT_INJECTION: forcing a failure. [ 942.279841][T28282] name failslab, interval 1, probability 0, space 0, times 0 [ 942.279871][T28282] CPU: 0 UID: 0 PID: 28282 Comm: syz.4.7698 Tainted: G L syzkaller #0 PREEMPT(full) [ 942.279891][T28282] Tainted: [L]=SOFTLOCKUP [ 942.279897][T28282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 942.279906][T28282] Call Trace: [ 942.279912][T28282] [ 942.279919][T28282] dump_stack_lvl+0x100/0x190 [ 942.279943][T28282] should_fail_ex.cold+0x5/0xa [ 942.279963][T28282] should_failslab+0xc2/0x120 [ 942.279983][T28282] __kmalloc_noprof+0xfc/0x840 [ 942.279999][T28282] ? rcu_is_watching+0x13/0xc0 [ 942.280014][T28282] ? tomoyo_realpath_from_path+0xb6/0x690 [ 942.280057][T28282] tomoyo_realpath_from_path+0xb6/0x690 [ 942.280081][T28282] tomoyo_path_number_perm+0x23c/0x580 [ 942.280122][T28282] ? tomoyo_path_number_perm+0x22e/0x580 [ 942.280151][T28282] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 942.280178][T28282] ? get_pid_task+0x106/0x250 [ 942.280205][T28282] ? __lock_acquire+0x5c0/0x1f40 [ 942.280243][T28282] ? __fget_files+0x34/0x3d0 [ 942.280265][T28282] ? find_held_lock+0x2b/0x80 [ 942.280284][T28282] ? __fget_files+0x215/0x3d0 [ 942.280301][T28282] ? hook_file_ioctl_common+0x140/0x440 [ 942.280333][T28282] ? __fget_files+0x215/0x3d0 [ 942.280358][T28282] ? __fget_files+0x21f/0x3d0 [ 942.280383][T28282] security_file_ioctl_compat+0xd3/0x230 [ 942.280413][T28282] __ia32_compat_sys_ioctl+0xc2/0x360 [ 942.280446][T28282] __do_fast_syscall_32+0x13a/0x8b0 [ 942.280474][T28282] ? lockdep_hardirqs_on+0x7d/0x110 [ 942.280501][T28282] do_fast_syscall_32+0x32/0x70 [ 942.280527][T28282] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 942.280550][T28282] RIP: 0023:0xf7f73fec [ 942.280572][T28282] Code: Unable to access opcode bytes at 0xf7f73fc2. [ 942.280580][T28282] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 942.280599][T28282] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004068aea3 [ 942.280611][T28282] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 942.280623][T28282] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 942.280633][T28282] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 942.280644][T28282] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 942.280669][T28282] [ 942.286971][T28282] ERROR: Out of memory at tomoyo_realpath_from_path. [ 942.552015][ C2] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 942.552429][ T10] usb 7-1: USB disconnect, device number 47 [ 942.606792][T28291] NFSD: Failed to start, no listeners configured. [ 942.636784][T28295] FAULT_INJECTION: forcing a failure. [ 942.636784][T28295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 942.636805][T28295] CPU: 0 UID: 0 PID: 28295 Comm: syz.4.7705 Tainted: G L syzkaller #0 PREEMPT(full) [ 942.636823][T28295] Tainted: [L]=SOFTLOCKUP [ 942.636828][T28295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 942.636836][T28295] Call Trace: [ 942.636841][T28295] [ 942.636846][T28295] dump_stack_lvl+0x100/0x190 [ 942.636865][T28295] should_fail_ex.cold+0x5/0xa [ 942.636880][T28295] _copy_from_user+0x2e/0xd0 [ 942.636894][T28295] packet_setsockopt+0x1d41/0x2380 [ 942.636909][T28295] ? __lock_acquire+0x5c0/0x1f40 [ 942.636926][T28295] ? __pfx_packet_setsockopt+0x10/0x10 [ 942.636940][T28295] ? aa_sk_perm+0x389/0xab0 [ 942.636958][T28295] ? __pfx_aa_sk_perm+0x10/0x10 [ 942.636976][T28295] ? find_held_lock+0x2b/0x80 [ 942.636989][T28295] ? aa_sock_opt_perm+0x114/0x1e0 [ 942.637004][T28295] ? __pfx_packet_setsockopt+0x10/0x10 [ 942.637019][T28295] do_sock_setsockopt+0xf3/0x1d0 [ 942.637038][T28295] __sys_setsockopt+0x119/0x190 [ 942.637055][T28295] __ia32_sys_setsockopt+0xbc/0x160 [ 942.637069][T28295] ? __do_fast_syscall_32+0xb3/0x8b0 [ 942.637086][T28295] ? lockdep_hardirqs_on+0x7d/0x110 [ 942.637103][T28295] __do_fast_syscall_32+0x13a/0x8b0 [ 942.637120][T28295] ? lockdep_hardirqs_on+0x7d/0x110 [ 942.637136][T28295] do_fast_syscall_32+0x32/0x70 [ 942.637154][T28295] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 942.637168][T28295] RIP: 0023:0xf7f73fec [ 942.637181][T28295] Code: Unable to access opcode bytes at 0xf7f73fc2. [ 942.637186][T28295] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 942.637198][T28295] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000107 [ 942.637205][T28295] RDX: 000000000000000d RSI: 00000000800001c0 RDI: 000000000000001c [ 942.637212][T28295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 942.637219][T28295] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 942.637225][T28295] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 942.637239][T28295] [ 942.787977][T28301] tls_set_device_offload_rx: netdev not found [ 942.832311][T28303] syz.4.7708: vmalloc error: size 4284481866, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 942.832374][T28303] CPU: 0 UID: 0 PID: 28303 Comm: syz.4.7708 Tainted: G L syzkaller #0 PREEMPT(full) [ 942.832399][T28303] Tainted: [L]=SOFTLOCKUP [ 942.832409][T28303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 942.832421][T28303] Call Trace: [ 942.832427][T28303] [ 942.832438][T28303] dump_stack_lvl+0x100/0x190 [ 942.832467][T28303] warn_alloc.cold+0x9e/0xb2 [ 942.832506][T28303] ? __pfx_warn_alloc+0x10/0x10 [ 942.832528][T28303] ? __lock_acquire+0x5c0/0x1f40 [ 942.832571][T28303] __vmalloc_node_range_noprof+0x123b/0x1420 [ 942.832601][T28303] ? rcu_is_watching+0x13/0xc0 [ 942.832620][T28303] ? trace_contention_end+0x126/0x160 [ 942.832647][T28303] ? __mutex_lock+0x26c/0x1bd0 [ 942.832675][T28303] ? dvb_demux_do_ioctl+0x929/0x1200 [ 942.832698][T28303] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 942.832720][T28303] ? find_held_lock+0x2b/0x80 [ 942.832742][T28303] ? __pfx___mutex_lock+0x10/0x10 [ 942.832767][T28303] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 942.832794][T28303] ? tomoyo_path_number_perm+0x188/0x580 [ 942.832834][T28303] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 942.832858][T28303] __vmalloc_node_noprof+0xad/0xf0 [ 942.832884][T28303] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 942.832911][T28303] dvb_demux_do_ioctl+0x9e0/0x1200 [ 942.832935][T28303] ? do_vfs_ioctl+0x226/0x13e0 [ 942.832970][T28303] dvb_usercopy+0x167/0x340 [ 942.832988][T28303] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 942.833011][T28303] ? __pfx_dvb_usercopy+0x10/0x10 [ 942.833030][T28303] ? __fget_files+0x34/0x3d0 [ 942.833059][T28303] ? __fget_files+0x21f/0x3d0 [ 942.833084][T28303] dvb_demux_ioctl+0x29/0x40 [ 942.833103][T28303] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 942.833123][T28303] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 942.833154][T28303] __do_fast_syscall_32+0x13a/0x8b0 [ 942.833181][T28303] ? lockdep_hardirqs_on+0x7d/0x110 [ 942.833209][T28303] do_fast_syscall_32+0x32/0x70 [ 942.833236][T28303] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 942.833260][T28303] RIP: 0023:0xf7f73fec [ 942.833279][T28303] Code: Unable to access opcode bytes at 0xf7f73fc2. [ 942.833290][T28303] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 942.833307][T28303] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000006f2d [ 942.833320][T28303] RDX: 00000000ff60014a RSI: 0000000000000000 RDI: 0000000000000000 [ 942.833330][T28303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 942.833341][T28303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 942.833353][T28303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 942.833377][T28303] [ 942.833527][T28303] Mem-Info: [ 942.833538][T28303] active_anon:2747 inactive_anon:3606 isolated_anon:0 [ 942.833538][T28303] active_file:4086 inactive_file:19320 isolated_file:0 [ 942.833538][T28303] unevictable:1000 dirty:303 writeback:0 [ 942.833538][T28303] slab_reclaimable:6651 slab_unreclaimable:61831 [ 942.833538][T28303] mapped:23535 shmem:1396 pagetables:1379 [ 942.833538][T28303] sec_pagetables:307 bounce:0 [ 942.833538][T28303] kernel_misc_reclaimable:0 [ 942.833538][T28303] free:40315 free_pcp:16825 free_cma:0 [ 942.833586][T28303] Node 0 active_anon:16kB inactive_anon:72kB active_file:132kB inactive_file:60kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8480kB pagetables:1432kB sec_pagetables:1108kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 942.833636][T28303] Node 1 active_anon:10972kB inactive_anon:14352kB active_file:16212kB inactive_file:77220kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:94112kB dirty:1212kB writeback:0kB shmem:3584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6156kB pagetables:4084kB sec_pagetables:120kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 942.833687][T28303] Node 0 DMA free:2676kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:72kB local_pcp:64kB free_cma:0kB [ 942.833736][T28303] lowmem_reserve[]: 0 277 277 277 277 [ 942.833768][T28303] Node 0 DMA32 free:22556kB boost:22528kB min:35156kB low:38312kB high:41468kB reserved_highatomic:2048kB free_highatomic:260kB active_anon:16kB inactive_anon:72kB active_file:132kB inactive_file:60kB unevictable:2000kB writepending:0kB zspages:0kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:11332kB local_pcp:3600kB free_cma:0kB [ 942.833825][T28303] lowmem_reserve[]: 0 0 0 0 0 [ 942.833859][T28303] Node 1 DMA32 free:136028kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0kB free_highatomic:0kB active_anon:10972kB inactive_anon:14352kB active_file:16212kB inactive_file:77220kB unevictable:2000kB writepending:1212kB zspages:2708kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:55912kB local_pcp:31392kB free_cma:0kB [ 942.833915][T28303] lowmem_reserve[]: 0 0 0 0 0 [ 942.833948][T28303] Node 0 DMA: 35*4kB (U) 23*8kB (U) 15*16kB (U) 14*32kB (U) 2*64kB (U) 0*128kB 0*256kB 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 2676kB [ 942.834069][T28303] Node 0 DMA32: 121*4kB (UMEH) 209*8kB (UMEH) 121*16kB (UMEH) 167*32kB (UMEH) 69*64kB (UME) 28*128kB (UMEH) 6*256kB (UM) 7*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 22556kB [ 942.834194][T28303] Node 1 DMA32: 627*4kB (UME) 318*8kB (UM) 30*16kB (UME) 120*32kB (UME) 125*64kB (UME) 49*128kB (UME) 17*256kB (UME) 5*512kB (UME) 1*1024kB (M) 7*2048kB (UM) 22*4096kB (U) = 136028kB [ 942.834336][T28303] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 942.834349][T28303] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 942.834365][T28303] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 942.834380][T28303] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 942.834394][T28303] 25062 total pagecache pages [ 942.834400][T28303] 262 pages in swap cache [ 942.834407][T28303] Free swap = 119152kB [ 942.834414][T28303] Total swap = 124996kB [ 942.834421][T28303] 524155 pages RAM [ 942.834427][T28303] 0 pages HighMem/MovableOnly [ 942.834434][T28303] 212121 pages reserved [ 942.834440][T28303] 0 pages cma reserved [ 943.120881][T28315] FAULT_INJECTION: forcing a failure. [ 943.120881][T28315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 943.120904][T28315] CPU: 2 UID: 0 PID: 28315 Comm: syz.4.7711 Tainted: G L syzkaller #0 PREEMPT(full) [ 943.120919][T28315] Tainted: [L]=SOFTLOCKUP [ 943.120924][T28315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 943.120930][T28315] Call Trace: [ 943.120934][T28315] [ 943.120939][T28315] dump_stack_lvl+0x100/0x190 [ 943.120959][T28315] should_fail_ex.cold+0x5/0xa [ 943.120974][T28315] _copy_to_user+0x32/0xd0 [ 943.120989][T28315] simple_read_from_buffer+0xcb/0x170 [ 943.121015][T28315] proc_fail_nth_read+0x1af/0x230 [ 943.121030][T28315] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 943.121043][T28315] ? rw_verify_area+0xce/0x6d0 [ 943.121060][T28315] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 943.121071][T28315] vfs_read+0x1e4/0xb40 [ 943.121083][T28315] ? lock_acquire+0x1d1/0x380 [ 943.121098][T28315] ? __fget_files+0x34/0x3d0 [ 943.121110][T28315] ? __pfx_vfs_read+0x10/0x10 [ 943.121120][T28315] ? find_held_lock+0x2b/0x80 [ 943.121133][T28315] ? __fget_files+0x215/0x3d0 [ 943.121147][T28315] ? __fget_files+0x21f/0x3d0 [ 943.121163][T28315] ksys_read+0x12a/0x250 [ 943.121175][T28315] ? __pfx_ksys_read+0x10/0x10 [ 943.121190][T28315] do_int80_emulation+0x166/0x650 [ 943.121210][T28315] asm_int80_emulation+0x1a/0x20 [ 943.121222][T28315] RIP: 0023:0xf71775ab [ 943.121232][T28315] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 943.121243][T28315] RSP: 002b:00000000f54364bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 943.121254][T28315] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54365d0 [ 943.121261][T28315] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 943.121268][T28315] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 943.121274][T28315] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 943.121281][T28315] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 943.121299][T28315] [ 943.229687][T28227] wiimote 0005:057E:0306.000E: Device removed [ 943.302885][T28321] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7715'. [ 943.345134][T28326] tls_set_device_offload_rx: netdev not found [ 943.451906][ T67] Bluetooth: hci3: command 0x0c1a tx timeout [ 943.566179][T28337] FAULT_INJECTION: forcing a failure. [ 943.566179][T28337] name failslab, interval 1, probability 0, space 0, times 0 [ 943.566211][T28337] CPU: 0 UID: 0 PID: 28337 Comm: syz.2.7722 Tainted: G L syzkaller #0 PREEMPT(full) [ 943.566236][T28337] Tainted: [L]=SOFTLOCKUP [ 943.566243][T28337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 943.566254][T28337] Call Trace: [ 943.566260][T28337] [ 943.566268][T28337] dump_stack_lvl+0x100/0x190 [ 943.566297][T28337] should_fail_ex.cold+0x5/0xa [ 943.566321][T28337] should_failslab+0xc2/0x120 [ 943.566344][T28337] kmem_cache_alloc_noprof+0x92/0x6a0 [ 943.566365][T28337] ? __seccomp_filter+0x896/0x1130 [ 943.566396][T28337] ? do_getname+0x35/0x390 [ 943.566425][T28337] do_getname+0x35/0x390 [ 943.566453][T28337] path_listxattrat+0x2db/0x370 [ 943.566474][T28337] ? fput+0x7c/0x100 [ 943.566495][T28337] ? __pfx_path_listxattrat+0x10/0x10 [ 943.566515][T28337] ? ksys_write+0x1ac/0x250 [ 943.566540][T28337] __do_fast_syscall_32+0x13a/0x8b0 [ 943.566567][T28337] ? lockdep_hardirqs_on+0x7d/0x110 [ 943.566596][T28337] do_fast_syscall_32+0x32/0x70 [ 943.566623][T28337] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 943.566646][T28337] RIP: 0023:0xf70cefec [ 943.566666][T28337] Code: Unable to access opcode bytes at 0xf70cefc2. [ 943.566675][T28337] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 00000000000000e9 [ 943.566694][T28337] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000000000000 [ 943.566705][T28337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 943.566715][T28337] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 943.566726][T28337] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 943.566737][T28337] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 943.566760][T28337] [ 943.610326][ T67] Bluetooth: hci4: command 0x0405 tx timeout [ 943.826663][T28347] tls_set_device_offload_rx: netdev not found [ 943.966755][T28351] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7729'. [ 943.970755][ T67] Bluetooth: hci4: unexpected cc 0x0c47 length: 2 > 1 [ 943.970776][ T67] Bluetooth: hci4: unexpected event for opcode 0x0c47 [ 944.005609][T28357] FAULT_INJECTION: forcing a failure. [ 944.005609][T28357] name failslab, interval 1, probability 0, space 0, times 0 [ 944.005683][T28357] CPU: 0 UID: 0 PID: 28357 Comm: syz.1.7732 Tainted: G L syzkaller #0 PREEMPT(full) [ 944.005708][T28357] Tainted: [L]=SOFTLOCKUP [ 944.005715][T28357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 944.005726][T28357] Call Trace: [ 944.005733][T28357] [ 944.005740][T28357] dump_stack_lvl+0x100/0x190 [ 944.005769][T28357] should_fail_ex.cold+0x5/0xa [ 944.005793][T28357] should_failslab+0xc2/0x120 [ 944.005823][T28357] __kmalloc_noprof+0xfc/0x840 [ 944.005841][T28357] ? rcu_is_watching+0x13/0xc0 [ 944.005860][T28357] ? tomoyo_realpath_from_path+0xb6/0x690 [ 944.005884][T28357] tomoyo_realpath_from_path+0xb6/0x690 [ 944.005907][T28357] tomoyo_path_number_perm+0x23c/0x580 [ 944.005932][T28357] ? tomoyo_path_number_perm+0x22e/0x580 [ 944.005959][T28357] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 944.005987][T28357] ? get_pid_task+0x106/0x250 [ 944.006013][T28357] ? __lock_acquire+0x5c0/0x1f40 [ 944.006049][T28357] ? __fget_files+0x34/0x3d0 [ 944.006069][T28357] ? find_held_lock+0x2b/0x80 [ 944.006087][T28357] ? __fget_files+0x215/0x3d0 [ 944.006105][T28357] ? hook_file_ioctl_common+0x140/0x440 [ 944.006131][T28357] ? __fget_files+0x215/0x3d0 [ 944.006154][T28357] ? __fget_files+0x21f/0x3d0 [ 944.006178][T28357] security_file_ioctl_compat+0xd3/0x230 [ 944.006206][T28357] __ia32_compat_sys_ioctl+0xc2/0x360 [ 944.006238][T28357] __do_fast_syscall_32+0x13a/0x8b0 [ 944.006274][T28355] NFSD: Failed to start, no listeners configured. [ 944.006266][T28357] ? lockdep_hardirqs_on+0x7d/0x110 [ 944.006294][T28357] do_fast_syscall_32+0x32/0x70 [ 944.006320][T28357] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 944.006342][T28357] RIP: 0023:0xf70befec [ 944.006361][T28357] Code: Unable to access opcode bytes at 0xf70befc2. [ 944.006369][T28357] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 944.006388][T28357] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004024700a [ 944.006400][T28357] RDX: 0000000080000700 RSI: 0000000000000000 RDI: 0000000000000000 [ 944.006410][T28357] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 944.006421][T28357] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 944.006432][T28357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 944.006457][T28357] [ 944.006465][T28357] ERROR: Out of memory at tomoyo_realpath_from_path. [ 944.255798][T28363] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 944.415293][T28369] tls_set_device_offload_rx: netdev not found [ 944.744082][T28380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7741'. [ 944.744108][T28380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7741'. [ 944.804474][T28383] FAULT_INJECTION: forcing a failure. [ 944.804474][T28383] name failslab, interval 1, probability 0, space 0, times 0 [ 944.804509][T28383] CPU: 0 UID: 0 PID: 28383 Comm: syz.2.7742 Tainted: G L syzkaller #0 PREEMPT(full) [ 944.804534][T28383] Tainted: [L]=SOFTLOCKUP [ 944.804542][T28383] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 944.804553][T28383] Call Trace: [ 944.804560][T28383] [ 944.804568][T28383] dump_stack_lvl+0x100/0x190 [ 944.804598][T28383] should_fail_ex.cold+0x5/0xa [ 944.804623][T28383] should_failslab+0xc2/0x120 [ 944.804647][T28383] __kvmalloc_node_noprof+0x113/0x9b0 [ 944.804672][T28383] ? traverse.part.0.constprop.0+0x397/0x650 [ 944.804699][T28383] traverse.part.0.constprop.0+0x397/0x650 [ 944.804727][T28383] seq_read_iter+0x93f/0x1270 [ 944.804750][T28383] ? __pfx_aa_file_perm+0x10/0x10 [ 944.804777][T28383] seq_read+0x344/0x4d0 [ 944.804796][T28383] ? __pfx_seq_read+0x10/0x10 [ 944.804821][T28383] ? get_pid_task+0xfc/0x250 [ 944.804845][T28383] ? common_file_perm+0x266/0x500 [ 944.804879][T28383] ? rw_verify_area+0xce/0x6d0 [ 944.804907][T28383] ? __pfx_seq_read+0x10/0x10 [ 944.804927][T28383] vfs_read+0x1e4/0xb40 [ 944.804947][T28383] ? lock_acquire+0x1d1/0x380 [ 944.804971][T28383] ? __fget_files+0x34/0x3d0 [ 944.804992][T28383] ? __pfx_vfs_read+0x10/0x10 [ 944.805008][T28383] ? find_held_lock+0x2b/0x80 [ 944.805044][T28383] ? __fget_files+0x215/0x3d0 [ 944.805063][T28383] ? __fget_files+0x215/0x3d0 [ 944.805087][T28383] ? __fget_files+0x21f/0x3d0 [ 944.805115][T28383] ksys_pread64+0x161/0x1a0 [ 944.805136][T28383] ? __pfx_ksys_pread64+0x10/0x10 [ 944.805155][T28383] ? ksys_write+0x1ac/0x250 [ 944.805173][T28383] ? __pfx_ksys_write+0x10/0x10 [ 944.805197][T28383] __do_fast_syscall_32+0x13a/0x8b0 [ 944.805226][T28383] ? lockdep_hardirqs_on+0x7d/0x110 [ 944.805255][T28383] do_fast_syscall_32+0x32/0x70 [ 944.805283][T28383] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 944.805306][T28383] RIP: 0023:0xf70cefec [ 944.805422][T28383] Code: Unable to access opcode bytes at 0xf70cefc2. [ 944.805433][T28383] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 00000000000000b4 [ 944.805453][T28383] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 944.805465][T28383] RDX: 0000000000000090 RSI: 000000000000007d RDI: 0000000000000000 [ 944.805477][T28383] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 944.805544][T28383] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 944.805572][T28383] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 944.805663][T28383] [ 945.009845][T28390] netlink: 'syz.1.7747': attribute type 3 has an invalid length. [ 945.009867][T28390] netlink: 'syz.1.7747': attribute type 1 has an invalid length. [ 945.009879][T28390] netlink: 216 bytes leftover after parsing attributes in process `syz.1.7747'. [ 945.029358][T28392] tls_set_device_offload_rx: netdev not found [ 945.364147][T28403] FAULT_INJECTION: forcing a failure. [ 945.364147][T28403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 945.364179][T28403] CPU: 0 UID: 0 PID: 28403 Comm: syz.4.7750 Tainted: G L syzkaller #0 PREEMPT(full) [ 945.364202][T28403] Tainted: [L]=SOFTLOCKUP [ 945.364208][T28403] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 945.364218][T28403] Call Trace: [ 945.364224][T28403] [ 945.364232][T28403] dump_stack_lvl+0x100/0x190 [ 945.364257][T28403] should_fail_ex.cold+0x5/0xa [ 945.364272][T28403] _copy_from_user+0x2e/0xd0 [ 945.364287][T28403] do_tcp_getsockopt+0x396/0x2e60 [ 945.364304][T28403] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 945.364316][T28403] ? unwind_next_frame+0xbd/0x2090 [ 945.364335][T28403] ? lock_acquire+0x1d1/0x380 [ 945.364356][T28403] ? is_bpf_text_address+0x25/0x1a0 [ 945.364379][T28403] ? find_held_lock+0x2b/0x80 [ 945.364395][T28403] ? is_bpf_text_address+0x8a/0x1a0 [ 945.364431][T28403] ? begin_current_label_crit_section+0x21c/0x980 [ 945.364452][T28403] ? bpf_ksym_find+0x124/0x1c0 [ 945.364464][T28403] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 945.364476][T28403] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 945.364491][T28403] ? is_bpf_text_address+0x94/0x1a0 [ 945.364506][T28403] ? kernel_text_address+0x8d/0x100 [ 945.364522][T28403] ? aa_inet_opt_perm+0x30d/0x970 [ 945.364536][T28403] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 945.364548][T28403] ? __lock_acquire+0x5c0/0x1f40 [ 945.364562][T28403] ? _parse_integer_limit+0x1ac/0x220 [ 945.364581][T28403] ? _kstrtoull+0x144/0x200 [ 945.364597][T28403] ? __pfx__kstrtoull+0x10/0x10 [ 945.364614][T28403] ? lock_acquire+0x1d1/0x380 [ 945.364628][T28403] ? __might_fault+0xc5/0x140 [ 945.364654][T28403] ? lock_acquire+0x1d1/0x380 [ 945.364677][T28403] ? tcp_getsockopt+0xe4/0x110 [ 945.364694][T28403] tcp_getsockopt+0xe4/0x110 [ 945.364720][T28403] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 945.364749][T28403] do_sock_getsockopt+0x50a/0x6e0 [ 945.364782][T28403] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 945.364813][T28403] ? __fget_files+0x34/0x3d0 [ 945.364833][T28403] ? find_held_lock+0x2b/0x80 [ 945.364858][T28403] ? __fget_files+0x21f/0x3d0 [ 945.364885][T28403] __sys_getsockopt+0x133/0x1d0 [ 945.364916][T28403] ? __ia32_sys_getsockopt+0xbc/0x160 [ 945.364939][T28403] __ia32_sys_getsockopt+0xbc/0x160 [ 945.364961][T28403] ? __do_fast_syscall_32+0xb3/0x8b0 [ 945.364990][T28403] ? lockdep_hardirqs_on+0x7d/0x110 [ 945.365015][T28403] __do_fast_syscall_32+0x13a/0x8b0 [ 945.365042][T28403] ? lockdep_hardirqs_on+0x7d/0x110 [ 945.365068][T28403] do_fast_syscall_32+0x32/0x70 [ 945.365096][T28403] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 945.365119][T28403] RIP: 0023:0xf7f73fec [ 945.365140][T28403] Code: Unable to access opcode bytes at 0xf7f73fc2. [ 945.365149][T28403] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 945.365168][T28403] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000006 [ 945.365179][T28403] RDX: 0000000000000023 RSI: 0000000080000240 RDI: 00000000800002c0 [ 945.365191][T28403] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 945.365201][T28403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 945.365211][T28403] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 945.365235][T28403] [ 945.461814][T28407] orangefs_devreq_open: device cannot be opened in blocking mode [ 945.496654][T28408] NFSD: Failed to start, no listeners configured. [ 945.530334][ T67] Bluetooth: hci3: command 0x0c1a tx timeout [ 946.223873][T28422] tls_set_device_offload_rx: netdev not found [ 946.323285][T28428] FAULT_INJECTION: forcing a failure. [ 946.323285][T28428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 946.323308][T28428] CPU: 0 UID: 0 PID: 28428 Comm: syz.1.7761 Tainted: G L syzkaller #0 PREEMPT(full) [ 946.323323][T28428] Tainted: [L]=SOFTLOCKUP [ 946.323328][T28428] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 946.323334][T28428] Call Trace: [ 946.323338][T28428] [ 946.323343][T28428] dump_stack_lvl+0x100/0x190 [ 946.323361][T28428] should_fail_ex.cold+0x5/0xa [ 946.323376][T28428] _copy_from_user+0x2e/0xd0 [ 946.323391][T28428] get_compat_msghdr+0xb3/0x480 [ 946.323409][T28428] ? __pfx_get_compat_msghdr+0x10/0x10 [ 946.323432][T28428] ___sys_sendmsg+0x1b6/0x1e0 [ 946.323445][T28428] ? __pfx____sys_sendmsg+0x10/0x10 [ 946.323463][T28428] ? find_held_lock+0x2b/0x80 [ 946.323483][T28428] __sys_sendmsg+0x160/0x210 [ 946.323499][T28428] ? __pfx___sys_sendmsg+0x10/0x10 [ 946.323518][T28428] ? __pfx_ksys_write+0x10/0x10 [ 946.323547][T28428] __do_fast_syscall_32+0x13a/0x8b0 [ 946.323564][T28428] ? lockdep_hardirqs_on+0x7d/0x110 [ 946.323582][T28428] do_fast_syscall_32+0x32/0x70 [ 946.323599][T28428] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 946.323613][T28428] RIP: 0023:0xf70befec [ 946.323628][T28428] Code: Unable to access opcode bytes at 0xf70befc2. [ 946.323633][T28428] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 946.323644][T28428] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 946.323652][T28428] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 946.323658][T28428] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 946.323664][T28428] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 946.323670][T28428] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 946.323689][T28428] [ 946.525800][T28436] NFSD: Failed to start, no listeners configured. [ 947.225012][T28455] tls_set_device_offload_rx: netdev not found [ 947.320593][T28459] FAULT_INJECTION: forcing a failure. [ 947.320593][T28459] name failslab, interval 1, probability 0, space 0, times 0 [ 947.320626][T28459] CPU: 0 UID: 0 PID: 28459 Comm: syz.4.7770 Tainted: G L syzkaller #0 PREEMPT(full) [ 947.320651][T28459] Tainted: [L]=SOFTLOCKUP [ 947.320658][T28459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 947.320670][T28459] Call Trace: [ 947.320677][T28459] [ 947.320691][T28459] dump_stack_lvl+0x100/0x190 [ 947.320721][T28459] should_fail_ex.cold+0x5/0xa [ 947.320747][T28459] should_failslab+0xc2/0x120 [ 947.320772][T28459] __kvmalloc_node_noprof+0x113/0x9b0 [ 947.320798][T28459] ? seq_read_iter+0x819/0x1270 [ 947.320822][T28459] seq_read_iter+0x819/0x1270 [ 947.320842][T28459] ? aa_file_perm+0x7f3/0x14d0 [ 947.320873][T28459] seq_read+0x344/0x4d0 [ 947.320894][T28459] ? __pfx_seq_read+0x10/0x10 [ 947.320914][T28459] ? copy_compat_iovec_from_user+0x13a/0x180 [ 947.320942][T28459] ? iovec_from_user+0xda/0x140 [ 947.320968][T28459] ? common_file_perm+0x266/0x500 [ 947.321000][T28459] ? __pfx_seq_read+0x10/0x10 [ 947.321020][T28459] proc_reg_read+0x240/0x330 [ 947.321048][T28459] ? __pfx_proc_reg_read+0x10/0x10 [ 947.321071][T28459] vfs_readv+0x5d8/0x8d0 [ 947.321111][T28459] ? __pfx_vfs_readv+0x10/0x10 [ 947.321138][T28459] ? lock_acquire+0x1d1/0x380 [ 947.321162][T28459] ? __fget_files+0x34/0x3d0 [ 947.321192][T28459] ? __fget_files+0x21f/0x3d0 [ 947.321217][T28459] ? do_readv+0x13e/0x340 [ 947.321233][T28459] do_readv+0x13e/0x340 [ 947.321252][T28459] ? __pfx_do_readv+0x10/0x10 [ 947.321268][T28459] ? ksys_write+0x1ac/0x250 [ 947.321288][T28459] ? __pfx_ksys_write+0x10/0x10 [ 947.321314][T28459] __do_fast_syscall_32+0x13a/0x8b0 [ 947.321343][T28459] ? lockdep_hardirqs_on+0x7d/0x110 [ 947.321373][T28459] do_fast_syscall_32+0x32/0x70 [ 947.321403][T28459] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 947.321427][T28459] RIP: 0023:0xf7f73fec [ 947.321448][T28459] Code: Unable to access opcode bytes at 0xf7f73fc2. [ 947.321457][T28459] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000091 [ 947.321476][T28459] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000580 [ 947.321489][T28459] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 947.321500][T28459] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 947.321511][T28459] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 947.321522][T28459] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 947.321549][T28459] [ 947.612277][ T67] Bluetooth: hci3: command 0x0c1a tx timeout [ 947.706933][T28476] tls_set_device_offload_rx: netdev not found [ 947.820197][T27551] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 948.010340][T27551] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 948.012222][T27551] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.031710][T28484] NFSD: Failed to start, no listeners configured. [ 948.240396][T27551] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 948.695264][T10912] usb 7-1: USB disconnect, device number 48 [ 948.785844][T28488] FAULT_INJECTION: forcing a failure. [ 948.785844][T28488] name failslab, interval 1, probability 0, space 0, times 0 [ 948.785876][T28488] CPU: 0 UID: 0 PID: 28488 Comm: syz.1.7782 Tainted: G L syzkaller #0 PREEMPT(full) [ 948.785900][T28488] Tainted: [L]=SOFTLOCKUP [ 948.785908][T28488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 948.785919][T28488] Call Trace: [ 948.785926][T28488] [ 948.785934][T28488] dump_stack_lvl+0x100/0x190 [ 948.785962][T28488] should_fail_ex.cold+0x5/0xa [ 948.785985][T28488] should_failslab+0xc2/0x120 [ 948.786028][T28488] __kmalloc_noprof+0xfc/0x840 [ 948.786045][T28488] ? rcu_is_watching+0x13/0xc0 [ 948.786063][T28488] ? tomoyo_realpath_from_path+0xb6/0x690 [ 948.786087][T28488] tomoyo_realpath_from_path+0xb6/0x690 [ 948.786109][T28488] tomoyo_path_number_perm+0x23c/0x580 [ 948.786145][T28488] ? tomoyo_path_number_perm+0x22e/0x580 [ 948.786173][T28488] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 948.786197][T28488] ? get_pid_task+0x106/0x250 [ 948.786222][T28488] ? __lock_acquire+0x5c0/0x1f40 [ 948.786257][T28488] ? __fget_files+0x34/0x3d0 [ 948.786284][T28488] ? find_held_lock+0x2b/0x80 [ 948.786303][T28488] ? __fget_files+0x215/0x3d0 [ 948.786320][T28488] ? hook_file_ioctl_common+0x140/0x440 [ 948.786346][T28488] ? __fget_files+0x215/0x3d0 [ 948.786371][T28488] ? __fget_files+0x21f/0x3d0 [ 948.786395][T28488] security_file_ioctl_compat+0xd3/0x230 [ 948.786423][T28488] __ia32_compat_sys_ioctl+0xc2/0x360 [ 948.786457][T28488] __do_fast_syscall_32+0x13a/0x8b0 [ 948.786485][T28488] ? lockdep_hardirqs_on+0x7d/0x110 [ 948.786513][T28488] do_fast_syscall_32+0x32/0x70 [ 948.786541][T28488] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 948.786564][T28488] RIP: 0023:0xf70befec [ 948.786584][T28488] Code: Unable to access opcode bytes at 0xf70befc2. [ 948.786593][T28488] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 948.786611][T28488] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 948.786623][T28488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 948.786633][T28488] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 948.786644][T28488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 948.786655][T28488] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 948.786680][T28488] [ 948.786744][T28488] ERROR: Out of memory at tomoyo_realpath_from_path. [ 949.068021][T28503] tls_set_device_offload_rx: netdev not found [ 949.111795][T28507] 9pnet_virtio: no channels available for device syz [ 949.285470][T28498] ip6erspan0: entered allmulticast mode [ 950.080687][T28520] NFSD: Failed to start, no listeners configured. [ 950.243018][T28528] tls_set_device_offload_rx: netdev not found [ 950.405042][T28534] 9p: Bad value for 'rfdno' [ 950.405376][T28534] 9p: Bad value for 'rfdno' [ 950.475299][T28540] FAULT_INJECTION: forcing a failure. [ 950.475299][T28540] name failslab, interval 1, probability 0, space 0, times 0 [ 950.475333][T28540] CPU: 2 UID: 0 PID: 28540 Comm: syz.1.7800 Tainted: G L syzkaller #0 PREEMPT(full) [ 950.475356][T28540] Tainted: [L]=SOFTLOCKUP [ 950.475362][T28540] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 950.475375][T28540] Call Trace: [ 950.475382][T28540] [ 950.475389][T28540] dump_stack_lvl+0x100/0x190 [ 950.475417][T28540] should_fail_ex.cold+0x5/0xa [ 950.475441][T28540] should_failslab+0xc2/0x120 [ 950.475465][T28540] __kmalloc_noprof+0xfc/0x840 [ 950.475483][T28540] ? rcu_is_watching+0x13/0xc0 [ 950.475501][T28540] ? tomoyo_realpath_from_path+0xb6/0x690 [ 950.475525][T28540] tomoyo_realpath_from_path+0xb6/0x690 [ 950.475551][T28540] tomoyo_path_number_perm+0x23c/0x580 [ 950.475575][T28540] ? tomoyo_path_number_perm+0x22e/0x580 [ 950.475602][T28540] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 950.475629][T28540] ? get_pid_task+0x106/0x250 [ 950.475655][T28540] ? __lock_acquire+0x5c0/0x1f40 [ 950.475691][T28540] ? __fget_files+0x34/0x3d0 [ 950.475711][T28540] ? find_held_lock+0x2b/0x80 [ 950.475729][T28540] ? __fget_files+0x215/0x3d0 [ 950.475746][T28540] ? hook_file_ioctl_common+0x140/0x440 [ 950.475771][T28540] ? __fget_files+0x215/0x3d0 [ 950.475795][T28540] ? __fget_files+0x21f/0x3d0 [ 950.475819][T28540] security_file_ioctl_compat+0xd3/0x230 [ 950.475848][T28540] __ia32_compat_sys_ioctl+0xc2/0x360 [ 950.475880][T28540] __do_fast_syscall_32+0x13a/0x8b0 [ 950.475907][T28540] ? lockdep_hardirqs_on+0x7d/0x110 [ 950.475935][T28540] do_fast_syscall_32+0x32/0x70 [ 950.475962][T28540] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 950.475985][T28540] RIP: 0023:0xf70befec [ 950.476005][T28540] Code: Unable to access opcode bytes at 0xf70befc2. [ 950.476015][T28540] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 950.476033][T28540] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004004662b [ 950.476045][T28540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 950.476056][T28540] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 950.476067][T28540] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 950.476078][T28540] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 950.476103][T28540] [ 950.476111][T28540] ERROR: Out of memory at tomoyo_realpath_from_path. [ 950.710833][T28551] random: crng reseeded on system resumption [ 950.772502][T28553] tls_set_device_offload_rx: netdev not found [ 951.408415][ T5753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 951.418590][ T5753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 951.419732][ T5753] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 951.427217][ T5753] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 951.428709][ T5753] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 951.602674][T21766] syz_tun (unregistering): left allmulticast mode [ 951.602702][T21766] syz_tun (unregistering): left promiscuous mode [ 951.602775][T21766] bridge0: port 1(syz_tun) entered disabled state [ 951.813998][T28583] tls_set_device_offload_rx: netdev not found [ 951.995644][T28589] NFSD: Failed to start, no listeners configured. [ 952.012544][T18450] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.012578][T18450] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 952.285196][T18450] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.285219][T18450] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 952.451375][T18450] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.451399][T18450] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 952.471256][T28607] tls_set_device_offload_rx: netdev not found [ 952.659359][T18450] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.659400][T18450] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 952.934529][T28622] FAULT_INJECTION: forcing a failure. [ 952.934529][T28622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 952.934562][T28622] CPU: 2 UID: 0 PID: 28622 Comm: syz.1.7829 Tainted: G L syzkaller #0 PREEMPT(full) [ 952.934586][T28622] Tainted: [L]=SOFTLOCKUP [ 952.934593][T28622] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 952.934604][T28622] Call Trace: [ 952.934611][T28622] [ 952.934618][T28622] dump_stack_lvl+0x100/0x190 [ 952.934647][T28622] should_fail_ex.cold+0x5/0xa [ 952.934670][T28622] _copy_to_user+0x32/0xd0 [ 952.934694][T28622] simple_read_from_buffer+0xcb/0x170 [ 952.934717][T28622] proc_fail_nth_read+0x1af/0x230 [ 952.934737][T28622] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 952.934757][T28622] ? rw_verify_area+0xce/0x6d0 [ 952.934784][T28622] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 952.934803][T28622] vfs_read+0x1e4/0xb40 [ 952.934821][T28622] ? lock_acquire+0x1d1/0x380 [ 952.934846][T28622] ? __fget_files+0x34/0x3d0 [ 952.934867][T28622] ? __pfx_vfs_read+0x10/0x10 [ 952.934883][T28622] ? find_held_lock+0x2b/0x80 [ 952.934902][T28622] ? __fget_files+0x215/0x3d0 [ 952.934926][T28622] ? __fget_files+0x21f/0x3d0 [ 952.934953][T28622] ksys_read+0x12a/0x250 [ 952.934972][T28622] ? __pfx_ksys_read+0x10/0x10 [ 952.934998][T28622] do_int80_emulation+0x166/0x650 [ 952.935029][T28622] asm_int80_emulation+0x1a/0x20 [ 952.935047][T28622] RIP: 0023:0xf71f75ab [ 952.935063][T28622] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 952.935081][T28622] RSP: 002b:00000000f54ad4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 952.935099][T28622] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54ad5d0 [ 952.935136][T28622] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 952.935149][T28622] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 952.935160][T28622] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 952.935171][T28622] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 952.935196][T28622] [ 953.138670][T28630] tls_set_device_offload_rx: netdev not found [ 953.450375][ T67] Bluetooth: hci2: command tx timeout [ 953.724535][T18450] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 953.766049][T28628] netlink: 'syz.1.7832': attribute type 1 has an invalid length. [ 954.246665][T18450] team0: Port device bridge2 removed [ 954.252547][T18450] bond0 (unregistering): Released all slaves [ 954.256654][T18450] bond1 (unregistering): Released all slaves [ 954.278095][T18450] bond2 (unregistering): Released all slaves [ 954.313994][T18450] bond3 (unregistering): Released all slaves [ 954.354412][T18450] bond4 (unregistering): Released all slaves [ 954.365165][T18450] bond5 (unregistering): Released all slaves [ 954.372208][T18450] bond6 (unregistering): Released all slaves [ 954.406961][T28642] syzkaller0: entered promiscuous mode [ 954.406977][T28642] syzkaller0: entered allmulticast mode [ 954.446023][T28565] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.446069][T28565] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.446131][T28565] bridge_slave_0: entered allmulticast mode [ 954.446865][T28565] bridge_slave_0: entered promiscuous mode [ 954.462726][T28565] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.462800][T28565] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.468468][T28565] bridge_slave_1: entered allmulticast mode [ 954.482594][T28565] bridge_slave_1: entered promiscuous mode [ 954.699952][T28565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 954.715998][ T5453] 8021q: adding VLAN 0 to HW filter on device eth6 [ 954.732300][T28565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.732486][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.732551][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.732596][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.733591][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.733637][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.733677][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.733724][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.733764][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.733803][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.733843][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.733883][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.733923][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.750237][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.750282][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.750322][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.750364][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.750405][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.750445][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.750485][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.750525][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.750566][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.750606][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.750649][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.750690][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.750730][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.750771][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.750810][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.750869][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.750935][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.750979][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.751018][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.751081][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.751175][T28658] binder: 28657:28658 ioctl c0306201 800004c0 returned -22 [ 954.752293][T28658] netlink: 'syz.1.7839': attribute type 30 has an invalid length. [ 954.874147][T28565] team0: Port device team_slave_0 added [ 954.875534][T28565] team0: Port device team_slave_1 added [ 954.905269][T28658] netlink: 'syz.1.7839': attribute type 30 has an invalid length. [ 954.933580][T28658] netlink: 'syz.1.7839': attribute type 30 has an invalid length. [ 954.951629][T28658] netlink: 'syz.1.7839': attribute type 30 has an invalid length. [ 954.978752][T28565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 954.978764][T28565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.978777][T28565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.979916][T28565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.979926][T28565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.979938][T28565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 955.009408][T28668] FAULT_INJECTION: forcing a failure. [ 955.009408][T28668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 955.009439][T28668] CPU: 2 UID: 0 PID: 28668 Comm: syz.5.7840 Tainted: G L syzkaller #0 PREEMPT(full) [ 955.009462][T28668] Tainted: [L]=SOFTLOCKUP [ 955.009468][T28668] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 955.009476][T28668] Call Trace: [ 955.009480][T28668] [ 955.009487][T28668] dump_stack_lvl+0x100/0x190 [ 955.009514][T28668] should_fail_ex.cold+0x5/0xa [ 955.009536][T28668] _copy_from_iter+0x1f4/0x1690 [ 955.009559][T28668] ? __lock_acquire+0x5c0/0x1f40 [ 955.009580][T28668] ? __pfx__copy_from_iter+0x10/0x10 [ 955.009604][T28668] ? lock_acquire+0x1d1/0x380 [ 955.009625][T28668] ? aa_file_perm+0x197/0x14d0 [ 955.009662][T28668] ? find_held_lock+0x2b/0x80 [ 955.009684][T28668] tun_get_user+0x265/0x3cc0 [ 955.009716][T28668] ? __lock_acquire+0x5c0/0x1f40 [ 955.009736][T28668] ? __pfx_tun_get_user+0x10/0x10 [ 955.009756][T28668] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 955.009788][T28668] ? find_held_lock+0x2b/0x80 [ 955.009805][T28668] ? tun_get+0x191/0x370 [ 955.009822][T28668] ? tun_get+0x191/0x370 [ 955.009845][T28668] tun_chr_write_iter+0xdc/0x200 [ 955.009869][T28668] vfs_write+0x6af/0x1050 [ 955.009888][T28668] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 955.009909][T28668] ? __pfx_vfs_write+0x10/0x10 [ 955.009923][T28668] ? find_held_lock+0x2b/0x80 [ 955.009956][T28668] ksys_write+0x12a/0x250 [ 955.009973][T28668] ? __pfx_ksys_write+0x10/0x10 [ 955.009989][T28668] ? ksys_write+0x1ac/0x250 [ 955.010001][T28668] ? __pfx_ksys_write+0x10/0x10 [ 955.010022][T28668] __do_fast_syscall_32+0x13a/0x8b0 [ 955.010048][T28668] ? lockdep_hardirqs_on+0x7d/0x110 [ 955.010073][T28668] do_fast_syscall_32+0x32/0x70 [ 955.010091][T28668] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 955.010106][T28668] RIP: 0023:0xf7fc5fec [ 955.010119][T28668] Code: Unable to access opcode bytes at 0xf7fc5fc2. [ 955.010124][T28668] RSP: 002b:00000000f546550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 955.010136][T28668] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 955.010144][T28668] RDX: 000000000000ffdd RSI: 0000000000000000 RDI: 0000000000000000 [ 955.010151][T28668] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 955.010157][T28668] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 955.010163][T28668] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 955.010177][T28668] [ 955.040435][T28666] syzkaller0: entered promiscuous mode [ 955.040457][T28666] syzkaller0: entered allmulticast mode [ 955.042084][T28658] netlink: 'syz.1.7839': attribute type 30 has an invalid length. [ 955.118399][T28658] netlink: 'syz.1.7839': attribute type 30 has an invalid length. [ 955.221922][T28681] tls_set_device_offload_rx: netdev not found [ 955.235983][T28658] netlink: 'syz.1.7839': attribute type 30 has an invalid length. [ 955.263685][T28565] hsr_slave_0: entered promiscuous mode [ 955.264339][T28565] hsr_slave_1: entered promiscuous mode [ 955.264658][T28565] debugfs: 'hsr0' already exists in 'hsr' [ 955.264670][T28565] Cannot create hsr debugfs directory [ 955.265490][ T5453] 8021q: adding VLAN 0 to HW filter on device eth8 [ 955.284175][T28658] netlink: 'syz.1.7839': attribute type 30 has an invalid length. [ 955.310450][T28658] netlink: 'syz.1.7839': attribute type 30 has an invalid length. [ 955.459803][T18450] hsr_slave_0: left promiscuous mode [ 955.466704][T18450] veth1_macvtap: left promiscuous mode [ 955.466744][T18450] veth0_macvtap: left promiscuous mode [ 955.530420][ T67] Bluetooth: hci2: command tx timeout [ 955.674976][T28658] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 955.899338][T18450] IPVS: stop unused estimator thread 0... [ 955.967560][ T5453] 8021q: adding VLAN 0 to HW filter on device eth7 [ 956.129449][T28707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7845'. [ 956.446832][T28726] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7848'. [ 956.966821][T28748] tls_set_device_offload_rx: netdev not found [ 956.986154][T28565] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 956.994001][T28565] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 956.996093][T28565] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 957.003409][T28565] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 957.004114][T28565] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 957.009438][T28750] FAULT_INJECTION: forcing a failure. [ 957.009438][T28750] name failslab, interval 1, probability 0, space 0, times 0 [ 957.009461][T28750] CPU: 2 UID: 0 PID: 28750 Comm: syz.5.7851 Tainted: G L syzkaller #0 PREEMPT(full) [ 957.009479][T28750] Tainted: [L]=SOFTLOCKUP [ 957.009484][T28750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 957.009491][T28750] Call Trace: [ 957.009496][T28750] [ 957.009502][T28750] dump_stack_lvl+0x100/0x190 [ 957.009522][T28750] should_fail_ex.cold+0x5/0xa [ 957.009540][T28750] should_failslab+0xc2/0x120 [ 957.009557][T28750] kmem_cache_alloc_noprof+0x92/0x6a0 [ 957.009573][T28750] ? alloc_empty_file+0x5b/0x1c0 [ 957.009593][T28750] alloc_empty_file+0x5b/0x1c0 [ 957.009611][T28750] dentry_open+0x46/0xd0 [ 957.009628][T28750] __do_sys_fsmount+0x981/0xed0 [ 957.009647][T28750] ? __pfx___do_sys_fsmount+0x10/0x10 [ 957.009669][T28750] __do_fast_syscall_32+0x13a/0x8b0 [ 957.009691][T28750] do_fast_syscall_32+0x32/0x70 [ 957.009711][T28750] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 957.009727][T28750] RIP: 0023:0xf7fc5fec [ 957.009752][T28750] Code: Unable to access opcode bytes at 0xf7fc5fc2. [ 957.009759][T28750] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 00000000000001b0 [ 957.009772][T28750] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 957.009781][T28750] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 957.009789][T28750] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 957.009796][T28750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 957.009804][T28750] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 957.009821][T28750] [ 957.016406][T28565] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 957.017916][T28565] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 957.026256][T28565] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 957.223727][T28764] FAULT_INJECTION: forcing a failure. [ 957.223727][T28764] name failslab, interval 1, probability 0, space 0, times 0 [ 957.223756][T28764] CPU: 2 UID: 0 PID: 28764 Comm: syz.5.7853 Tainted: G L syzkaller #0 PREEMPT(full) [ 957.223773][T28764] Tainted: [L]=SOFTLOCKUP [ 957.223777][T28764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 957.223784][T28764] Call Trace: [ 957.223789][T28764] [ 957.223794][T28764] dump_stack_lvl+0x100/0x190 [ 957.223812][T28764] should_fail_ex.cold+0x5/0xa [ 957.223828][T28764] should_failslab+0xc2/0x120 [ 957.223843][T28764] kmem_cache_alloc_noprof+0x92/0x6a0 [ 957.223857][T28764] ? do_getname+0x35/0x390 [ 957.223876][T28764] do_getname+0x35/0x390 [ 957.223893][T28764] do_sys_openat2+0xc7/0x1e0 [ 957.223909][T28764] ? __pfx_do_sys_openat2+0x10/0x10 [ 957.223927][T28764] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 957.223943][T28764] __ia32_compat_sys_openat+0x12d/0x210 [ 957.223961][T28764] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 957.223983][T28764] do_int80_emulation+0x166/0x650 [ 957.224003][T28764] asm_int80_emulation+0x1a/0x20 [ 957.224015][T28764] RIP: 0023:0xf71c75ab [ 957.224025][T28764] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 957.224036][T28764] RSP: 002b:00000000f54864bc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 957.224048][T28764] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7291b71 [ 957.224056][T28764] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 957.224063][T28764] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 957.224069][T28764] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 957.224076][T28764] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 957.224089][T28764] [ 957.310770][T28565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.319819][T28565] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.336759][T26171] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.336812][T26171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 957.357488][T26171] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.357536][T26171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.625062][ T67] Bluetooth: hci2: command tx timeout [ 957.913810][T28800] tls_set_device_offload_rx: netdev not found [ 957.979516][T28806] FAULT_INJECTION: forcing a failure. [ 957.979516][T28806] name failslab, interval 1, probability 0, space 0, times 0 [ 957.979539][T28806] CPU: 2 UID: 0 PID: 28806 Comm: syz.1.7860 Tainted: G L syzkaller #0 PREEMPT(full) [ 957.979555][T28806] Tainted: [L]=SOFTLOCKUP [ 957.979559][T28806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 957.979567][T28806] Call Trace: [ 957.979572][T28806] [ 957.979577][T28806] dump_stack_lvl+0x100/0x190 [ 957.979597][T28806] should_fail_ex.cold+0x5/0xa [ 957.979611][T28806] should_failslab+0xc2/0x120 [ 957.979627][T28806] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 957.979643][T28806] ? __d_alloc+0x35/0xa50 [ 957.979660][T28806] __d_alloc+0x35/0xa50 [ 957.979675][T28806] d_alloc_pseudo+0x1c/0xc0 [ 957.979708][T28806] alloc_file_pseudo+0x118/0x290 [ 957.979730][T28806] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 957.979745][T28806] ? alloc_fd+0x471/0x7a0 [ 957.979762][T28806] sock_alloc_file+0x50/0x210 [ 957.979779][T28806] __sys_socket+0x1c0/0x260 [ 957.979790][T28806] ? xfd_validate_state+0x129/0x190 [ 957.979809][T28806] ? __pfx___sys_socket+0x10/0x10 [ 957.979824][T28806] __ia32_sys_socket+0x72/0xb0 [ 957.979836][T28806] ? lockdep_hardirqs_on+0x7d/0x110 [ 957.979851][T28806] __do_fast_syscall_32+0x13a/0x8b0 [ 957.979870][T28806] do_fast_syscall_32+0x32/0x70 [ 957.979887][T28806] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 957.979901][T28806] RIP: 0023:0xf70befec [ 957.979914][T28806] Code: Unable to access opcode bytes at 0xf70befc2. [ 957.979919][T28806] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 957.979931][T28806] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 957.979938][T28806] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 957.979944][T28806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 957.979950][T28806] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 957.979957][T28806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 957.979970][T28806] [ 957.984080][T28565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 958.157230][T28565] veth0_vlan: entered promiscuous mode [ 958.168965][T28565] veth1_vlan: entered promiscuous mode [ 958.187599][T28565] veth0_macvtap: entered promiscuous mode [ 958.190527][T28565] veth1_macvtap: entered promiscuous mode [ 958.197710][T28565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 958.202271][T28565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 958.223657][ T5788] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.223683][ T5788] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.223701][ T5788] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.242402][T18450] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.339185][T26174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.339200][T26174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.378111][T26170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.378125][T26170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.465613][T28831] FAULT_INJECTION: forcing a failure. [ 958.465613][T28831] name failslab, interval 1, probability 0, space 0, times 0 [ 958.465635][T28831] CPU: 0 UID: 0 PID: 28831 Comm: syz.4.7810 Tainted: G L syzkaller #0 PREEMPT(full) [ 958.465651][T28831] Tainted: [L]=SOFTLOCKUP [ 958.465656][T28831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 958.465662][T28831] Call Trace: [ 958.465667][T28831] [ 958.465672][T28831] dump_stack_lvl+0x100/0x190 [ 958.465690][T28831] should_fail_ex.cold+0x5/0xa [ 958.465705][T28831] should_failslab+0xc2/0x120 [ 958.465720][T28831] __kmalloc_noprof+0xfc/0x840 [ 958.465732][T28831] ? rcu_is_watching+0x13/0xc0 [ 958.465743][T28831] ? tomoyo_realpath_from_path+0xb6/0x690 [ 958.465758][T28831] tomoyo_realpath_from_path+0xb6/0x690 [ 958.465773][T28831] tomoyo_path_number_perm+0x23c/0x580 [ 958.465788][T28831] ? tomoyo_path_number_perm+0x22e/0x580 [ 958.465805][T28831] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 958.465822][T28831] ? get_pid_task+0x106/0x250 [ 958.465837][T28831] ? __lock_acquire+0x5c0/0x1f40 [ 958.465858][T28831] ? __fget_files+0x34/0x3d0 [ 958.465871][T28831] ? find_held_lock+0x2b/0x80 [ 958.465882][T28831] ? __fget_files+0x215/0x3d0 [ 958.465893][T28831] ? hook_file_ioctl_common+0x140/0x440 [ 958.465909][T28831] ? __fget_files+0x215/0x3d0 [ 958.465924][T28831] ? __fget_files+0x21f/0x3d0 [ 958.465938][T28831] security_file_ioctl_compat+0xd3/0x230 [ 958.465955][T28831] __ia32_compat_sys_ioctl+0xc2/0x360 [ 958.465974][T28831] __do_fast_syscall_32+0x13a/0x8b0 [ 958.465991][T28831] ? lockdep_hardirqs_on+0x7d/0x110 [ 958.466009][T28831] do_fast_syscall_32+0x32/0x70 [ 958.466026][T28831] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 958.466041][T28831] RIP: 0023:0xf7fd5fec [ 958.466054][T28831] Code: Unable to access opcode bytes at 0xf7fd5fc2. [ 958.466059][T28831] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 958.466070][T28831] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 958.466077][T28831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 958.466083][T28831] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 958.466090][T28831] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 958.466096][T28831] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 958.466110][T28831] [ 958.466114][T28831] ERROR: Out of memory at tomoyo_realpath_from_path. [ 958.659604][T28840] FAULT_INJECTION: forcing a failure. [ 958.659604][T28840] name failslab, interval 1, probability 0, space 0, times 0 [ 958.659626][T28840] CPU: 0 UID: 0 PID: 28840 Comm: syz.5.7865 Tainted: G L syzkaller #0 PREEMPT(full) [ 958.659642][T28840] Tainted: [L]=SOFTLOCKUP [ 958.659646][T28840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 958.659653][T28840] Call Trace: [ 958.659657][T28840] [ 958.659663][T28840] dump_stack_lvl+0x100/0x190 [ 958.659686][T28840] should_fail_ex.cold+0x5/0xa [ 958.659701][T28840] should_failslab+0xc2/0x120 [ 958.659718][T28840] __kmalloc_noprof+0xfc/0x840 [ 958.659730][T28840] ? rcu_is_watching+0x13/0xc0 [ 958.659742][T28840] ? tomoyo_realpath_from_path+0xb6/0x690 [ 958.659757][T28840] tomoyo_realpath_from_path+0xb6/0x690 [ 958.659771][T28840] tomoyo_path_number_perm+0x23c/0x580 [ 958.659787][T28840] ? tomoyo_path_number_perm+0x22e/0x580 [ 958.659804][T28840] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 958.659821][T28840] ? get_pid_task+0x106/0x250 [ 958.659837][T28840] ? __lock_acquire+0x5c0/0x1f40 [ 958.659858][T28840] ? __fget_files+0x34/0x3d0 [ 958.659871][T28840] ? find_held_lock+0x2b/0x80 [ 958.659883][T28840] ? __fget_files+0x215/0x3d0 [ 958.659894][T28840] ? hook_file_ioctl_common+0x140/0x440 [ 958.659910][T28840] ? __fget_files+0x215/0x3d0 [ 958.659924][T28840] ? __fget_files+0x21f/0x3d0 [ 958.659939][T28840] security_file_ioctl_compat+0xd3/0x230 [ 958.659956][T28840] __ia32_compat_sys_ioctl+0xc2/0x360 [ 958.659976][T28840] __do_fast_syscall_32+0x13a/0x8b0 [ 958.659993][T28840] ? lockdep_hardirqs_on+0x7d/0x110 [ 958.660022][T28840] do_fast_syscall_32+0x32/0x70 [ 958.660044][T28840] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 958.660059][T28840] RIP: 0023:0xf7fc5fec [ 958.660071][T28840] Code: Unable to access opcode bytes at 0xf7fc5fc2. [ 958.660076][T28840] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 958.660088][T28840] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 958.660095][T28840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 958.660101][T28840] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 958.660108][T28840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 958.660114][T28840] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 958.660128][T28840] [ 958.720430][T28840] ERROR: Out of memory at tomoyo_realpath_from_path. [ 958.837304][T28847] tls_set_device_offload_rx: netdev not found [ 958.966793][ T67] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 959.690299][ T67] Bluetooth: hci2: command tx timeout [ 959.883276][T28865] 0x000000000001-0x000000010001 : "" [ 959.887219][T28867] FAULT_INJECTION: forcing a failure. [ 959.887219][T28867] name failslab, interval 1, probability 0, space 0, times 0 [ 959.887242][T28867] CPU: 0 UID: 0 PID: 28867 Comm: syz.5.7876 Tainted: G L syzkaller #0 PREEMPT(full) [ 959.887258][T28867] Tainted: [L]=SOFTLOCKUP [ 959.887262][T28867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 959.887269][T28867] Call Trace: [ 959.887273][T28867] [ 959.887278][T28867] dump_stack_lvl+0x100/0x190 [ 959.887297][T28867] should_fail_ex.cold+0x5/0xa [ 959.887312][T28867] should_failslab+0xc2/0x120 [ 959.887327][T28867] __kmalloc_noprof+0xfc/0x840 [ 959.887339][T28867] ? rcu_is_watching+0x13/0xc0 [ 959.887351][T28867] ? tomoyo_realpath_from_path+0xb6/0x690 [ 959.887367][T28867] tomoyo_realpath_from_path+0xb6/0x690 [ 959.887381][T28867] tomoyo_path_number_perm+0x23c/0x580 [ 959.887396][T28867] ? tomoyo_path_number_perm+0x22e/0x580 [ 959.887413][T28867] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 959.887430][T28867] ? get_pid_task+0x106/0x250 [ 959.887446][T28867] ? __lock_acquire+0x5c0/0x1f40 [ 959.887467][T28867] ? __fget_files+0x34/0x3d0 [ 959.887480][T28867] ? find_held_lock+0x2b/0x80 [ 959.887492][T28867] ? __fget_files+0x215/0x3d0 [ 959.887503][T28867] ? hook_file_ioctl_common+0x140/0x440 [ 959.887519][T28867] ? __fget_files+0x215/0x3d0 [ 959.887533][T28867] ? __fget_files+0x21f/0x3d0 [ 959.887548][T28867] security_file_ioctl_compat+0xd3/0x230 [ 959.887565][T28867] __ia32_compat_sys_ioctl+0xc2/0x360 [ 959.887586][T28867] __do_fast_syscall_32+0x13a/0x8b0 [ 959.887602][T28867] ? lockdep_hardirqs_on+0x7d/0x110 [ 959.887620][T28867] do_fast_syscall_32+0x32/0x70 [ 959.887637][T28867] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 959.887651][T28867] RIP: 0023:0xf7fc5fec [ 959.887665][T28867] Code: Unable to access opcode bytes at 0xf7fc5fc2. [ 959.887670][T28867] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 959.887681][T28867] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004040ae79 [ 959.887688][T28867] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 959.887695][T28867] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 959.887701][T28867] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 959.887708][T28867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 959.887727][T28867] [ 959.887732][T28867] ERROR: Out of memory at tomoyo_realpath_from_path. [ 959.922569][T28865] ftl_cs: FTL header not found. [ 960.098569][T28874] tls_set_device_offload_rx: netdev not found [ 960.216969][T28881] tls_set_device_offload_rx: netdev not found [ 960.645772][T28894] FAULT_INJECTION: forcing a failure. [ 960.645772][T28894] name failslab, interval 1, probability 0, space 0, times 0 [ 960.645804][T28894] CPU: 0 UID: 0 PID: 28894 Comm: syz.4.7885 Tainted: G L syzkaller #0 PREEMPT(full) [ 960.645827][T28894] Tainted: [L]=SOFTLOCKUP [ 960.645833][T28894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 960.645844][T28894] Call Trace: [ 960.645851][T28894] [ 960.645857][T28894] dump_stack_lvl+0x100/0x190 [ 960.645887][T28894] should_fail_ex.cold+0x5/0xa [ 960.645911][T28894] should_failslab+0xc2/0x120 [ 960.645933][T28894] kmem_cache_alloc_noprof+0x92/0x6a0 [ 960.645954][T28894] ? __mutex_unlock_slowpath+0x35d/0x930 [ 960.645981][T28894] ? do_getname+0x35/0x390 [ 960.646009][T28894] do_getname+0x35/0x390 [ 960.646035][T28894] user_path_at+0x26/0x60 [ 960.646055][T28894] __ia32_sys_umount+0x109/0x190 [ 960.646078][T28894] ? __pfx___ia32_sys_umount+0x10/0x10 [ 960.646106][T28894] __do_fast_syscall_32+0x13a/0x8b0 [ 960.646132][T28894] ? lockdep_hardirqs_on+0x7d/0x110 [ 960.646159][T28894] do_fast_syscall_32+0x32/0x70 [ 960.646184][T28894] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 960.646206][T28894] RIP: 0023:0xf7fd5fec [ 960.646225][T28894] Code: Unable to access opcode bytes at 0xf7fd5fc2. [ 960.646233][T28894] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000034 [ 960.646250][T28894] RAX: ffffffffffffffda RBX: 00000000800002c0 RCX: 0000000000000000 [ 960.646263][T28894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 960.646272][T28894] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 960.646282][T28894] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 960.646294][T28894] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 960.646315][T28894] [ 960.789034][T28901] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 960.837564][T28901] serio: Serial port ptm0 [ 960.846911][T28904] tls_set_device_offload_rx: netdev not found [ 960.890717][T28907] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7889'. [ 961.152552][T28916] FAULT_INJECTION: forcing a failure. [ 961.152552][T28916] name failslab, interval 1, probability 0, space 0, times 0 [ 961.152574][T28916] CPU: 0 UID: 0 PID: 28916 Comm: syz.5.7895 Tainted: G L syzkaller #0 PREEMPT(full) [ 961.152589][T28916] Tainted: [L]=SOFTLOCKUP [ 961.152594][T28916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 961.152601][T28916] Call Trace: [ 961.152605][T28916] [ 961.152610][T28916] dump_stack_lvl+0x100/0x190 [ 961.152628][T28916] should_fail_ex.cold+0x5/0xa [ 961.152644][T28916] should_failslab+0xc2/0x120 [ 961.152659][T28916] __kmalloc_noprof+0xfc/0x840 [ 961.152671][T28916] ? rcu_is_watching+0x13/0xc0 [ 961.152683][T28916] ? tomoyo_realpath_from_path+0xb6/0x690 [ 961.152698][T28916] tomoyo_realpath_from_path+0xb6/0x690 [ 961.152713][T28916] tomoyo_path_number_perm+0x23c/0x580 [ 961.152728][T28916] ? tomoyo_path_number_perm+0x22e/0x580 [ 961.152745][T28916] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 961.152761][T28916] ? get_pid_task+0x106/0x250 [ 961.152777][T28916] ? __lock_acquire+0x5c0/0x1f40 [ 961.152798][T28916] ? __fget_files+0x34/0x3d0 [ 961.152817][T28916] ? find_held_lock+0x2b/0x80 [ 961.152828][T28916] ? __fget_files+0x215/0x3d0 [ 961.152839][T28916] ? hook_file_ioctl_common+0x140/0x440 [ 961.152871][T28916] ? __fget_files+0x215/0x3d0 [ 961.152892][T28916] ? __fget_files+0x21f/0x3d0 [ 961.152908][T28916] security_file_ioctl_compat+0xd3/0x230 [ 961.152925][T28916] __ia32_compat_sys_ioctl+0xc2/0x360 [ 961.152945][T28916] __do_fast_syscall_32+0x13a/0x8b0 [ 961.152963][T28916] ? lockdep_hardirqs_on+0x7d/0x110 [ 961.152980][T28916] do_fast_syscall_32+0x32/0x70 [ 961.152998][T28916] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 961.153012][T28916] RIP: 0023:0xf7fc5fec [ 961.153026][T28916] Code: Unable to access opcode bytes at 0xf7fc5fc2. [ 961.153031][T28916] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 961.153043][T28916] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c00caee0 [ 961.153050][T28916] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 961.153057][T28916] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 961.153064][T28916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 961.153070][T28916] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 961.153084][T28916] [ 961.153157][T28916] ERROR: Out of memory at tomoyo_realpath_from_path. [ 961.383606][T28922] openvswitch: netlink: IP tunnel dst address not specified [ 961.432514][T28927] tls_set_device_offload_rx: netdev not found [ 961.506366][T28929] openvswitch: netlink: IP tunnel dst address not specified [ 961.786028][T28938] FAULT_INJECTION: forcing a failure. [ 961.786028][T28938] name failslab, interval 1, probability 0, space 0, times 0 [ 961.786184][T28938] CPU: 0 UID: 0 PID: 28938 Comm: syz.4.7904 Tainted: G L syzkaller #0 PREEMPT(full) [ 961.786230][T28938] Tainted: [L]=SOFTLOCKUP [ 961.786239][T28938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 961.786250][T28938] Call Trace: [ 961.786257][T28938] [ 961.786265][T28938] dump_stack_lvl+0x100/0x190 [ 961.786303][T28938] should_fail_ex.cold+0x5/0xa [ 961.786331][T28938] should_failslab+0xc2/0x120 [ 961.786357][T28938] __kmalloc_cache_noprof+0x91/0x6d0 [ 961.786386][T28938] ? __do_sys_fanotify_init+0x5c6/0xe30 [ 961.786411][T28938] __do_sys_fanotify_init+0x5c6/0xe30 [ 961.786436][T28938] __do_fast_syscall_32+0x13a/0x8b0 [ 961.786468][T28938] do_fast_syscall_32+0x32/0x70 [ 961.786495][T28938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 961.786519][T28938] RIP: 0023:0xf7fd5fec [ 961.786539][T28938] Code: Unable to access opcode bytes at 0xf7fd5fc2. [ 961.786548][T28938] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000152 [ 961.786570][T28938] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 961.786582][T28938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 961.786593][T28938] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 961.786604][T28938] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 961.786615][T28938] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 961.786638][T28938] [ 961.937707][T28942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7906'. [ 961.986906][T28944] FAULT_INJECTION: forcing a failure. [ 961.986906][T28944] name failslab, interval 1, probability 0, space 0, times 0 [ 961.986943][T28944] CPU: 0 UID: 0 PID: 28944 Comm: syz.4.7907 Tainted: G L syzkaller #0 PREEMPT(full) [ 961.986969][T28944] Tainted: [L]=SOFTLOCKUP [ 961.986976][T28944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 961.986988][T28944] Call Trace: [ 961.986996][T28944] [ 961.987006][T28944] dump_stack_lvl+0x100/0x190 [ 961.987037][T28944] should_fail_ex.cold+0x5/0xa [ 961.987063][T28944] should_failslab+0xc2/0x120 [ 961.987122][T28944] kmem_cache_alloc_noprof+0x92/0x6a0 [ 961.987144][T28944] ? alloc_empty_file+0x5b/0x1c0 [ 961.987174][T28944] alloc_empty_file+0x5b/0x1c0 [ 961.987202][T28944] path_openat+0xdb/0x2440 [ 961.987230][T28944] ? __pfx_path_openat+0x10/0x10 [ 961.987260][T28944] do_file_open+0x20e/0x430 [ 961.987286][T28944] ? __pfx_do_file_open+0x10/0x10 [ 961.987329][T28944] ? _raw_spin_unlock+0x28/0x50 [ 961.987354][T28944] ? alloc_fd+0x471/0x7a0 [ 961.987383][T28944] do_sys_openat2+0x10f/0x1e0 [ 961.987411][T28944] ? __pfx_do_sys_openat2+0x10/0x10 [ 961.987444][T28944] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 961.987471][T28944] __ia32_compat_sys_openat+0x12d/0x210 [ 961.987501][T28944] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 961.987542][T28944] do_int80_emulation+0x166/0x650 [ 961.987574][T28944] asm_int80_emulation+0x1a/0x20 [ 961.987596][T28944] RIP: 0023:0xf71d75ab [ 961.987618][T28944] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 961.987646][T28944] RSP: 002b:00000000f54964bc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 961.987669][T28944] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f72a1b71 [ 961.987683][T28944] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 961.987695][T28944] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 961.987707][T28944] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 961.987720][T28944] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 961.987748][T28944] [ 962.102027][T28946] tls_set_device_offload_rx: netdev not found [ 962.110370][T28948] tmpfs: Unknown parameter 'us[quota_block_hardlimit' [ 962.178533][T28952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7909'. [ 962.367250][T28952] FAULT_INJECTION: forcing a failure. [ 962.367250][T28952] name fail_futex, interval 1, probability 0, space 0, times 0 [ 962.367274][T28952] CPU: 2 UID: 0 PID: 28952 Comm: syz.5.7909 Tainted: G L syzkaller #0 PREEMPT(full) [ 962.367289][T28952] Tainted: [L]=SOFTLOCKUP [ 962.367293][T28952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 962.367300][T28952] Call Trace: [ 962.367304][T28952] [ 962.367309][T28952] dump_stack_lvl+0x100/0x190 [ 962.367328][T28952] should_fail_ex.cold+0x5/0xa [ 962.367343][T28952] get_futex_key+0xf72/0x14f0 [ 962.367362][T28952] ? __pfx_get_futex_key+0x10/0x10 [ 962.367380][T28952] ? __mutex_unlock_slowpath+0x35d/0x930 [ 962.367401][T28952] futex_wake+0xf4/0x5e0 [ 962.367415][T28952] ? __pfx_futex_wake+0x10/0x10 [ 962.367431][T28952] ? detach_task_ctx_data+0x83/0x490 [ 962.367450][T28952] do_futex+0x2b2/0x440 [ 962.367461][T28952] ? __pfx_do_futex+0x10/0x10 [ 962.367471][T28952] ? __might_fault+0xc5/0x140 [ 962.367491][T28952] mm_exit_exec_release+0x256/0x2f0 [ 962.367510][T28952] do_exit+0x707/0x2ae0 [ 962.367524][T28952] ? __pfx_do_exit+0x10/0x10 [ 962.367536][T28952] ? do_raw_spin_lock+0x128/0x260 [ 962.367553][T28952] ? find_held_lock+0x2b/0x80 [ 962.367564][T28952] ? get_signal+0x7e0/0x21e0 [ 962.367582][T28952] do_group_exit+0xd5/0x2a0 [ 962.367596][T28952] get_signal+0x1ec7/0x21e0 [ 962.367616][T28952] ? find_held_lock+0x2b/0x80 [ 962.367628][T28952] ? __pfx_get_signal+0x10/0x10 [ 962.367645][T28952] ? do_futex+0x190/0x440 [ 962.367657][T28952] arch_do_signal_or_restart+0x91/0x7a0 [ 962.367673][T28952] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 962.367692][T28952] ? xfd_validate_state+0x129/0x190 [ 962.367711][T28952] exit_to_user_mode_loop+0x139/0x700 [ 962.367728][T28952] ? rcu_is_watching+0x13/0xc0 [ 962.367748][T28952] __do_fast_syscall_32+0x59f/0x8b0 [ 962.367774][T28952] do_fast_syscall_32+0x32/0x70 [ 962.367798][T28952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 962.367819][T28952] RIP: 0023:0xf7fc5fec [ 962.367855][T28952] Code: Unable to access opcode bytes at 0xf7fc5fc2. [ 962.367864][T28952] RSP: 002b:00000000f538a5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 962.367878][T28952] RAX: fffffffffffffe00 RBX: 00000000f7485020 RCX: 0000000000000080 [ 962.367885][T28952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7485024 [ 962.367892][T28952] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 962.367898][T28952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 962.367905][T28952] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 962.367919][T28952] [ 962.604479][T28967] FAULT_INJECTION: forcing a failure. [ 962.604479][T28967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 962.604502][T28967] CPU: 0 UID: 0 PID: 28967 Comm: syz.4.7915 Tainted: G L syzkaller #0 PREEMPT(full) [ 962.604517][T28967] Tainted: [L]=SOFTLOCKUP [ 962.604522][T28967] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 962.604528][T28967] Call Trace: [ 962.604533][T28967] [ 962.604538][T28967] dump_stack_lvl+0x100/0x190 [ 962.604556][T28967] should_fail_ex.cold+0x5/0xa [ 962.604570][T28967] _copy_from_user+0x2e/0xd0 [ 962.604585][T28967] __sys_bpf+0x2f5/0x4a30 [ 962.604600][T28967] ? __pfx___sys_bpf+0x10/0x10 [ 962.604611][T28967] ? lock_acquire+0x1d1/0x380 [ 962.604625][T28967] ? get_pid_task+0x2a/0x250 [ 962.604641][T28967] ? find_held_lock+0x2b/0x80 [ 962.604653][T28967] ? get_pid_task+0xfc/0x250 [ 962.604663][T28967] ? get_pid_task+0xfc/0x250 [ 962.604678][T28967] ? proc_fail_nth_write+0x9f/0x220 [ 962.604690][T28967] ? find_held_lock+0x2b/0x80 [ 962.604704][T28967] ? rcu_read_lock_any_held+0x6a/0x90 [ 962.604717][T28967] ? find_held_lock+0x2b/0x80 [ 962.604728][T28967] ? ksys_write+0x190/0x250 [ 962.604739][T28967] ? ksys_write+0x190/0x250 [ 962.604750][T28967] ? lock_acquire+0x1d1/0x380 [ 962.604776][T28967] ? fput+0x7c/0x100 [ 962.604791][T28967] ? __ia32_sys_bpf+0xcc/0x170 [ 962.604803][T28967] __ia32_sys_bpf+0xcc/0x170 [ 962.604816][T28967] ? __do_fast_syscall_32+0xb3/0x8b0 [ 962.604834][T28967] __do_fast_syscall_32+0x13a/0x8b0 [ 962.604851][T28967] ? lockdep_hardirqs_on+0x7d/0x110 [ 962.604867][T28967] do_fast_syscall_32+0x32/0x70 [ 962.604885][T28967] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 962.604918][T28967] RIP: 0023:0xf7fd5fec [ 962.604932][T28967] Code: Unable to access opcode bytes at 0xf7fd5fc2. [ 962.604938][T28967] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 962.604949][T28967] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000000 [ 962.604956][T28967] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 962.604963][T28967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 962.604970][T28967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 962.604977][T28967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 962.604990][T28967] [ 962.852830][T28972] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.945483][T28972] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.039860][T28972] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.122586][T28972] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.220188][ T5788] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.244314][ T5788] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.244358][ T5788] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.244387][ T5788] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.818626][T28992] FAULT_INJECTION: forcing a failure. [ 963.818626][T28992] name failslab, interval 1, probability 0, space 0, times 0 [ 963.818661][T28992] CPU: 2 UID: 0 PID: 28992 Comm: syz.4.7923 Tainted: G L syzkaller #0 PREEMPT(full) [ 963.818686][T28992] Tainted: [L]=SOFTLOCKUP [ 963.818693][T28992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 963.818705][T28992] Call Trace: [ 963.818711][T28992] [ 963.818720][T28992] dump_stack_lvl+0x100/0x190 [ 963.818748][T28992] should_fail_ex.cold+0x5/0xa [ 963.818772][T28992] should_failslab+0xc2/0x120 [ 963.818797][T28992] __kmalloc_noprof+0xfc/0x840 [ 963.818818][T28992] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 963.818850][T28992] kernfs_fop_write_iter+0x26a/0x5f0 [ 963.818881][T28992] vfs_write+0x6af/0x1050 [ 963.818901][T28992] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 963.818930][T28992] ? __pfx_vfs_write+0x10/0x10 [ 963.818947][T28992] ? find_held_lock+0x2b/0x80 [ 963.818984][T28992] ksys_write+0x12a/0x250 [ 963.819003][T28992] ? __pfx_ksys_write+0x10/0x10 [ 963.819020][T28992] ? ksys_write+0x1ac/0x250 [ 963.819038][T28992] ? __pfx_ksys_write+0x10/0x10 [ 963.819082][T28992] __do_fast_syscall_32+0x13a/0x8b0 [ 963.819111][T28992] ? lockdep_hardirqs_on+0x7d/0x110 [ 963.819139][T28992] do_fast_syscall_32+0x32/0x70 [ 963.819172][T28992] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 963.819195][T28992] RIP: 0023:0xf7fd5fec [ 963.819216][T28992] Code: Unable to access opcode bytes at 0xf7fd5fc2. [ 963.819225][T28992] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 963.819243][T28992] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 963.819255][T28992] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 963.819266][T28992] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 963.819277][T28992] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 963.819288][T28992] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 963.819314][T28992] [ 964.415936][T29011] FAULT_INJECTION: forcing a failure. [ 964.415936][T29011] name failslab, interval 1, probability 0, space 0, times 0 [ 964.415963][T29011] CPU: 0 UID: 0 PID: 29011 Comm: syz.5.7930 Tainted: G L syzkaller #0 PREEMPT(full) [ 964.415987][T29011] Tainted: [L]=SOFTLOCKUP [ 964.415993][T29011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 964.416002][T29011] Call Trace: [ 964.416007][T29011] [ 964.416014][T29011] dump_stack_lvl+0x100/0x190 [ 964.416041][T29011] should_fail_ex.cold+0x5/0xa [ 964.416065][T29011] should_failslab+0xc2/0x120 [ 964.416087][T29011] __kmalloc_noprof+0xfc/0x840 [ 964.416121][T29011] ? rcu_is_watching+0x13/0xc0 [ 964.416139][T29011] ? tomoyo_realpath_from_path+0xb6/0x690 [ 964.416164][T29011] tomoyo_realpath_from_path+0xb6/0x690 [ 964.416185][T29011] tomoyo_path_number_perm+0x23c/0x580 [ 964.416202][T29011] ? tomoyo_path_number_perm+0x22e/0x580 [ 964.416219][T29011] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 964.416236][T29011] ? get_pid_task+0x106/0x250 [ 964.416251][T29011] ? __lock_acquire+0x5c0/0x1f40 [ 964.416273][T29011] ? __fget_files+0x34/0x3d0 [ 964.416285][T29011] ? find_held_lock+0x2b/0x80 [ 964.416297][T29011] ? __fget_files+0x215/0x3d0 [ 964.416308][T29011] ? hook_file_ioctl_common+0x140/0x440 [ 964.416324][T29011] ? __fget_files+0x215/0x3d0 [ 964.416338][T29011] ? __fget_files+0x21f/0x3d0 [ 964.416352][T29011] security_file_ioctl_compat+0xd3/0x230 [ 964.416370][T29011] __ia32_compat_sys_ioctl+0xc2/0x360 [ 964.416390][T29011] __do_fast_syscall_32+0x13a/0x8b0 [ 964.416407][T29011] ? lockdep_hardirqs_on+0x7d/0x110 [ 964.416425][T29011] do_fast_syscall_32+0x32/0x70 [ 964.416442][T29011] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 964.416457][T29011] RIP: 0023:0xf7fc5fec [ 964.416471][T29011] Code: Unable to access opcode bytes at 0xf7fc5fc2. [ 964.416476][T29011] RSP: 002b:00000000f546550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 964.416488][T29011] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005412 [ 964.416495][T29011] RDX: 0000000080002440 RSI: 0000000000000000 RDI: 0000000000000000 [ 964.416502][T29011] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 964.416521][T29011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 964.416530][T29011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 964.416544][T29011] [ 964.417069][T29011] ERROR: Out of memory at tomoyo_realpath_from_path. [ 965.512955][T29037] FAULT_INJECTION: forcing a failure. [ 965.512955][T29037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 965.512977][T29037] CPU: 2 UID: 0 PID: 29037 Comm: syz.5.7938 Tainted: G L syzkaller #0 PREEMPT(full) [ 965.512992][T29037] Tainted: [L]=SOFTLOCKUP [ 965.512996][T29037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 965.513006][T29037] Call Trace: [ 965.513010][T29037] [ 965.513015][T29037] dump_stack_lvl+0x100/0x190 [ 965.513033][T29037] should_fail_ex.cold+0x5/0xa [ 965.513048][T29037] _copy_from_user+0x2e/0xd0 [ 965.513063][T29037] __sys_bpf+0x2f5/0x4a30 [ 965.513080][T29037] ? __pfx___sys_bpf+0x10/0x10 [ 965.513090][T29037] ? lock_acquire+0x1d1/0x380 [ 965.513105][T29037] ? get_pid_task+0x2a/0x250 [ 965.513117][T29037] ? find_held_lock+0x2b/0x80 [ 965.513133][T29037] ? get_pid_task+0xfc/0x250 [ 965.513144][T29037] ? get_pid_task+0xfc/0x250 [ 965.513158][T29037] ? proc_fail_nth_write+0x9f/0x220 [ 965.513171][T29037] ? find_held_lock+0x2b/0x80 [ 965.513186][T29037] ? rcu_read_lock_any_held+0x6a/0x90 [ 965.513198][T29037] ? find_held_lock+0x2b/0x80 [ 965.513210][T29037] ? ksys_write+0x190/0x250 [ 965.513221][T29037] ? ksys_write+0x190/0x250 [ 965.513232][T29037] ? lock_acquire+0x1d1/0x380 [ 965.513255][T29037] ? fput+0x7c/0x100 [ 965.513271][T29037] ? __ia32_sys_bpf+0xcc/0x170 [ 965.513282][T29037] __ia32_sys_bpf+0xcc/0x170 [ 965.513295][T29037] ? __do_fast_syscall_32+0xb3/0x8b0 [ 965.513314][T29037] __do_fast_syscall_32+0x13a/0x8b0 [ 965.513331][T29037] ? lockdep_hardirqs_on+0x7d/0x110 [ 965.513348][T29037] do_fast_syscall_32+0x32/0x70 [ 965.513365][T29037] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 965.513380][T29037] RIP: 0023:0xf7fc5fec [ 965.513392][T29037] Code: Unable to access opcode bytes at 0xf7fc5fc2. [ 965.513398][T29037] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 965.513409][T29037] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 965.513416][T29037] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 965.513423][T29037] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 965.513430][T29037] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 965.513437][T29037] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 965.513450][T29037] [ 965.583981][T29039] Format for deleting device is "id" (uint). [ 966.570905][ T5753] Bluetooth: hci3: command 0x0c1a tx timeout [ 966.626773][T29061] FAULT_INJECTION: forcing a failure. [ 966.626773][T29061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 966.626795][T29061] CPU: 2 UID: 0 PID: 29061 Comm: syz.5.7945 Tainted: G L syzkaller #0 PREEMPT(full) [ 966.626810][T29061] Tainted: [L]=SOFTLOCKUP [ 966.626814][T29061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 966.626821][T29061] Call Trace: [ 966.626825][T29061] [ 966.626830][T29061] dump_stack_lvl+0x100/0x190 [ 966.626849][T29061] should_fail_ex.cold+0x5/0xa [ 966.626863][T29061] _copy_from_user+0x2e/0xd0 [ 966.626877][T29061] do_tcp_setsockopt+0x73e/0x2b50 [ 966.626892][T29061] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 966.626907][T29061] ? __lock_acquire+0x5c0/0x1f40 [ 966.626927][T29061] ? lock_acquire+0x1d1/0x380 [ 966.626942][T29061] ? __fget_files+0x34/0x3d0 [ 966.626954][T29061] ? find_held_lock+0x2b/0x80 [ 966.626969][T29061] tcp_setsockopt+0xe2/0x100 [ 966.626981][T29061] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 966.627000][T29061] do_sock_setsockopt+0xf3/0x1d0 [ 966.627017][T29061] __sys_setsockopt+0x119/0x190 [ 966.627034][T29061] __ia32_sys_setsockopt+0xbc/0x160 [ 966.627080][T29061] ? __do_fast_syscall_32+0xb3/0x8b0 [ 966.627100][T29061] ? lockdep_hardirqs_on+0x7d/0x110 [ 966.627116][T29061] __do_fast_syscall_32+0x13a/0x8b0 [ 966.627132][T29061] ? lockdep_hardirqs_on+0x7d/0x110 [ 966.627149][T29061] do_fast_syscall_32+0x32/0x70 [ 966.627166][T29061] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 966.627181][T29061] RIP: 0023:0xf7fc5fec [ 966.627193][T29061] Code: Unable to access opcode bytes at 0xf7fc5fc2. [ 966.627198][T29061] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 966.627209][T29061] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 966.627216][T29061] RDX: 0000000000000007 RSI: 0000000080000300 RDI: 0000000000000004 [ 966.627223][T29061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 966.627229][T29061] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 966.627235][T29061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 966.627249][T29061] [ 966.715399][T29065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7947'. [ 966.972493][T29068] FAULT_INJECTION: forcing a failure. [ 966.972493][T29068] name failslab, interval 1, probability 0, space 0, times 0 [ 966.972525][T29068] CPU: 2 UID: 0 PID: 29068 Comm: syz.4.7946 Tainted: G L syzkaller #0 PREEMPT(full) [ 966.972550][T29068] Tainted: [L]=SOFTLOCKUP [ 966.972556][T29068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 966.972566][T29068] Call Trace: [ 966.972572][T29068] [ 966.972579][T29068] dump_stack_lvl+0x100/0x190 [ 966.972614][T29068] should_fail_ex.cold+0x5/0xa [ 966.972636][T29068] should_failslab+0xc2/0x120 [ 966.972658][T29068] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 966.972678][T29068] ? __ia32_sys_mount+0x292/0x310 [ 966.972699][T29068] ? __do_fast_syscall_32+0x13a/0x8b0 [ 966.972725][T29068] ? sock_alloc_inode+0x26/0x2c0 [ 966.972754][T29068] ? __pfx_sock_alloc_inode+0x10/0x10 [ 966.972780][T29068] sock_alloc_inode+0x26/0x2c0 [ 966.972804][T29068] ? __pfx_sock_alloc_inode+0x10/0x10 [ 966.972827][T29068] alloc_inode+0x68/0x250 [ 966.972850][T29068] sock_alloc+0x44/0x280 [ 966.972871][T29068] ? security_socket_create+0x7f/0x250 [ 966.972895][T29068] __sock_create+0xc2/0x860 [ 966.972917][T29068] p9_fd_create_unix+0x20a/0x350 [ 966.972941][T29068] ? __pfx_p9_fd_create_unix+0x10/0x10 [ 966.972975][T29068] ? lockdep_init_map_type+0x5c/0x250 [ 966.973002][T29068] p9_client_create+0x563/0xd40 [ 966.973020][T29068] ? __pfx_p9_client_create+0x10/0x10 [ 966.973043][T29068] ? lockdep_init_map_type+0x5c/0x250 [ 966.973067][T29068] ? __raw_spin_lock_init+0x3a/0x110 [ 966.973096][T29068] v9fs_session_init+0x3c/0xdd0 [ 966.973115][T29068] ? v9fs_get_tree+0x9c/0xb50 [ 966.973140][T29068] v9fs_get_tree+0xb8/0xb50 [ 966.973159][T29068] ? rcu_is_watching+0x13/0xc0 [ 966.973176][T29068] ? __pfx_v9fs_get_tree+0x10/0x10 [ 966.973199][T29068] ? bpf_lsm_capable+0x9/0x10 [ 966.973222][T29068] ? security_capable+0x80/0x260 [ 966.973243][T29068] vfs_get_tree+0x92/0x320 [ 966.973267][T29068] path_mount+0x7d0/0x24c0 [ 966.973293][T29068] ? __pfx_path_mount+0x10/0x10 [ 966.973310][T29068] ? lockdep_hardirqs_on+0x7d/0x110 [ 966.973331][T29068] ? putname+0xb1/0x110 [ 966.973347][T29068] ? kmem_cache_free+0x127/0x6c0 [ 966.973373][T29068] ? __ia32_sys_mount+0x292/0x310 [ 966.973391][T29068] __ia32_sys_mount+0x292/0x310 [ 966.973410][T29068] ? __pfx___ia32_sys_mount+0x10/0x10 [ 966.973433][T29068] __do_fast_syscall_32+0x13a/0x8b0 [ 966.973453][T29068] ? lockdep_hardirqs_on+0x7d/0x110 [ 966.973473][T29068] do_fast_syscall_32+0x32/0x70 [ 966.973494][T29068] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 966.973511][T29068] RIP: 0023:0xf7fd5fec [ 966.973531][T29068] Code: Unable to access opcode bytes at 0xf7fd5fc2. [ 966.973538][T29068] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 966.973555][T29068] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080000100 [ 966.973565][T29068] RDX: 0000000080000180 RSI: 0000000000208002 RDI: 0000000080000440 [ 966.973574][T29068] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 966.973582][T29068] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 966.973590][T29068] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 966.973616][T29068] [ 966.973625][T29068] socket: no more sockets [ 966.973631][T29068] 9pnet_fd: p9_fd_create_unix (29068): problem creating socket [ 968.680365][ T5753] Bluetooth: hci3: command 0x0c1a tx timeout [ 968.790483][ T5753] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 968.796766][ T5753] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 968.799807][ T5753] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 968.811235][ T5753] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 968.817031][ T5753] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 968.915942][T29100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7957'. [ 968.944158][T29104] FAULT_INJECTION: forcing a failure. [ 968.944158][T29104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 968.944180][T29104] CPU: 0 UID: 0 PID: 29104 Comm: syz.5.7958 Tainted: G L syzkaller #0 PREEMPT(full) [ 968.944201][T29104] Tainted: [L]=SOFTLOCKUP [ 968.944206][T29104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 968.944213][T29104] Call Trace: [ 968.944217][T29104] [ 968.944222][T29104] dump_stack_lvl+0x100/0x190 [ 968.944241][T29104] should_fail_ex.cold+0x5/0xa [ 968.944255][T29104] _copy_from_user+0x2e/0xd0 [ 968.944270][T29104] get_compat_msghdr+0xb3/0x480 [ 968.944289][T29104] ? __pfx_get_compat_msghdr+0x10/0x10 [ 968.944311][T29104] ___sys_sendmsg+0x1b6/0x1e0 [ 968.944324][T29104] ? __pfx____sys_sendmsg+0x10/0x10 [ 968.944342][T29104] ? find_held_lock+0x2b/0x80 [ 968.944376][T29104] __sys_sendmsg+0x160/0x210 [ 968.944392][T29104] ? __pfx___sys_sendmsg+0x10/0x10 [ 968.944410][T29104] ? __pfx_ksys_write+0x10/0x10 [ 968.944429][T29104] __do_fast_syscall_32+0x13a/0x8b0 [ 968.944447][T29104] ? lockdep_hardirqs_on+0x7d/0x110 [ 968.944465][T29104] do_fast_syscall_32+0x32/0x70 [ 968.944482][T29104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 968.944496][T29104] RIP: 0023:0xf7fc5fec [ 968.944509][T29104] Code: Unable to access opcode bytes at 0xf7fc5fc2. [ 968.944516][T29104] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 968.944529][T29104] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 968.944536][T29104] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 968.944542][T29104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 968.944549][T29104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 968.944556][T29104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 968.944569][T29104] [ 969.061422][T29107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 969.062077][T29107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 969.627898][T29097] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.627972][T29097] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.628032][T29097] bridge_slave_0: entered allmulticast mode [ 969.628759][T29097] bridge_slave_0: entered promiscuous mode [ 969.631404][T29097] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.631560][T29097] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.631912][T29097] bridge_slave_1: entered allmulticast mode [ 969.633084][T29097] bridge_slave_1: entered promiscuous mode [ 969.656761][T29097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.661363][T29097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.676363][T29097] team0: Port device team_slave_0 added [ 969.677902][T29097] team0: Port device team_slave_1 added [ 969.692167][T29097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 969.692180][T29097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 969.692193][T29097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 969.693228][T29097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 969.693236][T29097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 969.693250][T29097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 969.722336][T29097] hsr_slave_0: entered promiscuous mode [ 969.723357][T29097] hsr_slave_1: entered promiscuous mode [ 969.723901][T29097] debugfs: 'hsr0' already exists in 'hsr' [ 969.723918][T29097] Cannot create hsr debugfs directory [ 969.895989][T29097] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 969.897940][T29097] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 969.898491][T29097] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 969.909101][T29097] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 969.909827][T29097] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 969.923643][T29097] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 969.924888][T29097] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 969.926755][T29097] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 969.953063][T29147] FAULT_INJECTION: forcing a failure. [ 969.953063][T29147] name failslab, interval 1, probability 0, space 0, times 0 [ 969.953085][T29147] CPU: 0 UID: 0 PID: 29147 Comm: syz.5.7966 Tainted: G L syzkaller #0 PREEMPT(full) [ 969.953104][T29147] Tainted: [L]=SOFTLOCKUP [ 969.953110][T29147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 969.953117][T29147] Call Trace: [ 969.953123][T29147] [ 969.953128][T29147] dump_stack_lvl+0x100/0x190 [ 969.953148][T29147] should_fail_ex.cold+0x5/0xa [ 969.953163][T29147] ? register_lock_class+0x3f/0x7b0 [ 969.953184][T29147] should_failslab+0xc2/0x120 [ 969.953202][T29147] kmem_cache_alloc_noprof+0x92/0x6a0 [ 969.953216][T29147] ? do_raw_spin_lock+0x128/0x260 [ 969.953235][T29147] ? inet_bind_bucket_create+0x2d/0x280 [ 969.953252][T29147] inet_bind_bucket_create+0x2d/0x280 [ 969.953266][T29147] inet_csk_get_port+0x8d2/0x28e0 [ 969.953285][T29147] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 969.953309][T29147] ? __local_bh_enable_ip+0xa5/0x120 [ 969.953330][T29147] __inet_bind+0x598/0xc60 [ 969.953351][T29147] inet_bind+0xdb/0x120 [ 969.953363][T29147] __sys_bind+0x1a9/0x260 [ 969.953378][T29147] ? __pfx___sys_bind+0x10/0x10 [ 969.953400][T29147] __ia32_sys_bind+0x71/0xb0 [ 969.953413][T29147] ? lockdep_hardirqs_on+0x7d/0x110 [ 969.953432][T29147] __do_fast_syscall_32+0x13a/0x8b0 [ 969.953454][T29147] do_fast_syscall_32+0x32/0x70 [ 969.953475][T29147] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 969.953492][T29147] RIP: 0023:0xf7fc5fec [ 969.953507][T29147] Code: Unable to access opcode bytes at 0xf7fc5fc2. [ 969.953513][T29147] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000169 [ 969.953526][T29147] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 969.953534][T29147] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 969.953542][T29147] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 969.953549][T29147] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 969.953557][T29147] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 969.953573][T29147] [ 969.954295][T29097] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.954353][T29097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.954463][T29097] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.954506][T29097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 970.038849][T29097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.052989][T26172] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.053536][T26172] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.059092][T29097] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.067708][T26172] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.067753][T26172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 970.079602][T26172] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.079649][T26172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 970.084144][T29149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7967'. [ 970.153908][T29152] FAULT_INJECTION: forcing a failure. [ 970.153908][T29152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.153932][T29152] CPU: 0 UID: 0 PID: 29152 Comm: syz.5.7968 Tainted: G L syzkaller #0 PREEMPT(full) [ 970.153949][T29152] Tainted: [L]=SOFTLOCKUP [ 970.153954][T29152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 970.153961][T29152] Call Trace: [ 970.153965][T29152] [ 970.153970][T29152] dump_stack_lvl+0x100/0x190 [ 970.153990][T29152] should_fail_ex.cold+0x5/0xa [ 970.154006][T29152] strncpy_from_user+0x3b/0x2d0 [ 970.154024][T29152] do_getname+0x78/0x390 [ 970.154042][T29152] do_sys_openat2+0xc7/0x1e0 [ 970.154059][T29152] ? __pfx_do_sys_openat2+0x10/0x10 [ 970.154078][T29152] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 970.154094][T29152] __ia32_compat_sys_openat+0x12d/0x210 [ 970.154112][T29152] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 970.154136][T29152] do_int80_emulation+0x166/0x650 [ 970.154156][T29152] asm_int80_emulation+0x1a/0x20 [ 970.154168][T29152] RIP: 0023:0xf71c75ab [ 970.154178][T29152] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 970.154189][T29152] RSP: 002b:00000000f54864bc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 970.154201][T29152] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7291b71 [ 970.154209][T29152] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 970.154215][T29152] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 970.154222][T29152] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 970.154228][T29152] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 970.154242][T29152] [ 970.271651][T29157] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7969'. [ 970.409833][T29167] FAULT_INJECTION: forcing a failure. [ 970.409833][T29167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.409856][T29167] CPU: 0 UID: 0 PID: 29167 Comm: syz.4.7973 Tainted: G L syzkaller #0 PREEMPT(full) [ 970.409872][T29167] Tainted: [L]=SOFTLOCKUP [ 970.409876][T29167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 970.409883][T29167] Call Trace: [ 970.409887][T29167] [ 970.409893][T29167] dump_stack_lvl+0x100/0x190 [ 970.409912][T29167] should_fail_ex.cold+0x5/0xa [ 970.409927][T29167] _copy_from_user+0x2e/0xd0 [ 970.409943][T29167] copy_ns_id_req+0xbc/0x210 [ 970.409961][T29167] __ia32_sys_listns+0x1b0/0x430 [ 970.409973][T29167] ? __pfx___ia32_sys_listns+0x10/0x10 [ 970.409985][T29167] ? xfd_validate_state+0x129/0x190 [ 970.410023][T29167] __do_fast_syscall_32+0x13a/0x8b0 [ 970.410046][T29167] do_fast_syscall_32+0x32/0x70 [ 970.410063][T29167] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 970.410078][T29167] RIP: 0023:0xf7fd5fec [ 970.410092][T29167] Code: Unable to access opcode bytes at 0xf7fd5fc2. [ 970.410098][T29167] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 00000000000001d6 [ 970.410110][T29167] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 970.410121][T29167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 970.410128][T29167] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 970.410134][T29167] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 970.410141][T29167] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 970.410154][T29167] [ 970.415197][ T67] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 970.558438][T29097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 970.707897][T29097] veth0_vlan: entered promiscuous mode [ 970.713904][T29097] veth1_vlan: entered promiscuous mode [ 970.734352][T29097] veth0_macvtap: entered promiscuous mode [ 970.736714][T29097] veth1_macvtap: entered promiscuous mode [ 970.748780][T29097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 970.757154][T29097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 970.786202][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.786601][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.786998][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.787052][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.812781][T26170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.812798][T26170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.858461][ T97] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.858475][ T97] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.901046][ T67] Bluetooth: hci0: command tx timeout [ 971.143306][T29193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7956'. [ 971.143504][T29193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7956'. [ 971.143621][T29193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7956'. [ 971.143723][T29193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7956'. [ 971.143827][T29193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7956'. [ 971.143928][T29193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7956'. [ 971.150100][T29193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7956'. [ 972.970395][ T67] Bluetooth: hci0: command tx timeout [ 973.257727][ T5753] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 973.260527][ T5753] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 973.265369][ T5753] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 973.267229][ T5753] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 973.267614][ T5753] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 973.772495][T29203] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.772573][T29203] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.772633][T29203] bridge_slave_0: entered allmulticast mode [ 973.773364][T29203] bridge_slave_0: entered promiscuous mode [ 973.783288][T29203] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.783401][T29203] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.783461][T29203] bridge_slave_1: entered allmulticast mode [ 973.784210][T29203] bridge_slave_1: entered promiscuous mode [ 973.804891][T29203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 973.806566][T29203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 973.824659][T29203] team0: Port device team_slave_0 added [ 973.825964][T29203] team0: Port device team_slave_1 added [ 973.841256][T29203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 973.841267][T29203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.841280][T29203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.842231][T29203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.842239][T29203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.842252][T29203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.890531][T29203] hsr_slave_0: entered promiscuous mode [ 973.891055][T29203] hsr_slave_1: entered promiscuous mode [ 973.891398][T29203] debugfs: 'hsr0' already exists in 'hsr' [ 973.891412][T29203] Cannot create hsr debugfs directory [ 974.010862][T29203] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 974.012725][T29203] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 974.013357][T29203] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 974.018891][T29203] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 974.019455][T29203] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 974.035368][T29203] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 974.036321][T29203] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 974.039877][T29203] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 974.061721][T29203] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.061770][T29203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 974.061991][T29203] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.062038][T29203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.112398][T29203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.122683][T26175] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.123210][T26175] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.129024][T29203] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.142651][T26172] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.142731][T26172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.145765][T26172] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.145885][T26172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 974.412120][T29203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 974.584942][T29203] veth0_vlan: entered promiscuous mode [ 974.589834][T29203] veth1_vlan: entered promiscuous mode [ 974.608640][T29203] veth0_macvtap: entered promiscuous mode [ 974.614148][T29203] veth1_macvtap: entered promiscuous mode [ 974.625580][T29203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 974.629392][T29203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 974.654027][T18450] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.654221][T18450] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.654240][T18450] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.654257][T18450] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.685788][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.685801][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.732121][T26170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.732137][T26170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.852277][T29257] __nla_validate_parse: 65 callbacks suppressed [ 974.852293][T29257] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7985'. [ 975.022669][T29263] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7986'. [ 975.050679][ T67] Bluetooth: hci0: command tx timeout [ 975.168777][T29267] random: crng reseeded on system resumption [ 975.370365][ T67] Bluetooth: hci5: command tx timeout [ 975.703114][ T25] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 975.862856][ T25] usb 12-1: Using ep0 maxpacket: 8 [ 975.863584][ T25] usb 12-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 975.867839][ T25] usb 12-1: config 0 has an invalid interface number: 55 but max is 0 [ 975.867861][ T25] usb 12-1: config 0 has no interface number 0 [ 975.867890][ T25] usb 12-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 975.867908][ T25] usb 12-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 975.867926][ T25] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 975.867945][ T25] usb 12-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 975.867974][ T25] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.875264][ T25] usb 12-1: config 0 descriptor?? [ 975.919970][ T25] ldusb 12-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 977.139649][ T5753] Bluetooth: hci0: command tx timeout [ 977.450232][ T67] Bluetooth: hci5: command tx timeout [ 978.435024][T10912] usb 12-1: USB disconnect, device number 2 [ 978.444674][T10912] ldusb 12-1:0.55: LD USB Device #0 now disconnected [ 978.477233][T29282] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7994'. [ 978.721822][T29287] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7996'. [ 979.540229][ T67] Bluetooth: hci5: command tx timeout [ 981.620731][ T67] Bluetooth: hci5: command tx timeout [ 986.933531][ T67] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 986.946240][ T67] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 986.951435][ T67] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 986.957426][ T67] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 986.958242][ T67] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 987.965320][ T67] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 987.976549][ T67] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 987.978824][ T67] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 987.991144][ T67] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 987.998001][ T67] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 988.657548][T29291] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.661078][T29291] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.661153][T29291] bridge_slave_0: entered allmulticast mode [ 988.661940][T29291] bridge_slave_0: entered promiscuous mode [ 988.675623][T29291] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.675733][T29291] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.675841][T29291] bridge_slave_1: entered allmulticast mode [ 988.676699][T29291] bridge_slave_1: entered promiscuous mode [ 988.722198][T29291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 988.737056][T29291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 988.787630][T29291] team0: Port device team_slave_0 added [ 988.796329][T29291] team0: Port device team_slave_1 added [ 988.819232][T29297] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.819310][T29297] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.819480][T29297] bridge_slave_0: entered allmulticast mode [ 988.828016][T29297] bridge_slave_0: entered promiscuous mode [ 988.833007][T29291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 988.833018][T29291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.833031][T29291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 988.834697][T29291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 988.834716][T29291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.834736][T29291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.867540][T29297] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.867612][T29297] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.867695][T29297] bridge_slave_1: entered allmulticast mode [ 988.868513][T29297] bridge_slave_1: entered promiscuous mode [ 988.904025][T29297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 988.914933][T29291] hsr_slave_0: entered promiscuous mode [ 988.915478][T29291] hsr_slave_1: entered promiscuous mode [ 988.915793][T29291] debugfs: 'hsr0' already exists in 'hsr' [ 988.915805][T29291] Cannot create hsr debugfs directory [ 988.917041][T29297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 988.950339][T29297] team0: Port device team_slave_0 added [ 988.957347][T29297] team0: Port device team_slave_1 added [ 988.982397][T29297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 988.982409][T29297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.982422][T29297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 988.983446][T29297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 988.983455][T29297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.983468][T29297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 989.053925][T29297] hsr_slave_0: entered promiscuous mode [ 989.054834][T29297] hsr_slave_1: entered promiscuous mode [ 989.055217][T29297] debugfs: 'hsr0' already exists in 'hsr' [ 989.055230][T29297] Cannot create hsr debugfs directory [ 989.060642][ T5753] Bluetooth: hci6: command tx timeout [ 989.385587][T29291] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 989.391378][T29291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 989.391977][T29291] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 989.410519][T29291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 989.411060][T29291] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 989.417479][T29291] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 989.421512][T29291] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 989.428841][T29291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 989.654627][T29297] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 989.671288][T29297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 989.672306][T29297] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 989.678428][T29297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 989.693645][T29297] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 989.705121][T29297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 989.706154][T29297] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 989.717391][T29297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 989.775860][T29291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 989.803490][T29291] 8021q: adding VLAN 0 to HW filter on device team0 [ 989.814599][T26175] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.814644][T26175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 989.820697][T26170] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.820777][T26170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 989.886453][T29297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 989.906073][T29297] 8021q: adding VLAN 0 to HW filter on device team0 [ 989.919077][T26174] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.919143][T26174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 989.922868][T26174] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.922913][T26174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 990.090900][ T5753] Bluetooth: hci7: command tx timeout [ 990.426979][T29297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 990.499402][T29291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 990.676701][T29297] veth0_vlan: entered promiscuous mode [ 990.687164][T29297] veth1_vlan: entered promiscuous mode [ 990.715848][T29297] veth0_macvtap: entered promiscuous mode [ 990.719375][T29297] veth1_macvtap: entered promiscuous mode [ 990.746289][T29297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 990.752763][T29297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 990.755970][T29291] veth0_vlan: entered promiscuous mode [ 990.774530][T29291] veth1_vlan: entered promiscuous mode [ 990.832193][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.832444][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.832618][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.832773][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.846723][T29291] veth0_macvtap: entered promiscuous mode [ 990.889918][T29291] veth1_macvtap: entered promiscuous mode [ 990.893149][T26174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.893162][T26174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.925523][T29291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 990.927936][T26174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.927949][T26174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.931095][T29291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.011095][T18450] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.011126][T18450] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.011146][T18450] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.011164][T18450] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.128464][T26175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.128477][T26175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 991.133143][ T5753] Bluetooth: hci6: command tx timeout [ 991.184162][T26171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.184180][T26171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.180972][ T5753] Bluetooth: hci7: command tx timeout [ 992.502563][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.221962][ T5753] Bluetooth: hci6: command tx timeout [ 994.250505][ T5753] Bluetooth: hci7: command tx timeout [ 995.292509][ T5753] Bluetooth: hci6: command tx timeout [ 995.972318][ T67] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 995.989599][ T67] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 995.993297][ T67] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 995.996486][ T67] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 995.996996][ T67] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 996.350212][ T67] Bluetooth: hci7: command tx timeout [ 996.670217][T29391] ------------[ cut here ]------------ [ 996.670227][T29391] current->flags & PF_MEMALLOC [ 996.670233][T29391] WARNING: mm/page_alloc.c:4816 at __alloc_frozen_pages_noprof+0x1eac/0x3300, CPU#0: modprobe/29391 [ 996.678851][T29391] Modules linked in: [ 996.680396][T29391] CPU: 0 UID: 0 PID: 29391 Comm: modprobe Tainted: G L syzkaller #0 PREEMPT(full) [ 996.683963][T29391] Tainted: [L]=SOFTLOCKUP [ 996.685340][T29391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 996.688475][T29391] RIP: 0010:__alloc_frozen_pages_noprof+0x1eac/0x3300 [ 996.690583][T29391] Code: 38 d0 7c 08 84 d2 0f 85 de 12 00 00 65 48 8b 05 62 56 1c 12 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ba e7 ff ff 90 <0f> 0b 90 e9 b1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 996.696619][T29391] RSP: 0000:ffffc90003ebe7a8 EFLAGS: 00010202 [ 996.698541][T29391] RAX: ffff888028704b00 RBX: 0000000000000000 RCX: 1ffff1100fffad29 [ 996.701177][T29391] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 996.703624][T29391] RBP: ffff888028704b2c R08: 0000000000008000 R09: 0000000000000001 [ 996.705935][T29391] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000048c40 [ 996.708286][T29391] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff920007d7d0f [ 996.710748][T29391] FS: 00007f0919b65c80(0000) GS:ffff888096960000(0000) knlGS:0000000000000000 [ 996.713372][T29391] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 996.715559][T29391] CR2: 00007f0919e062f8 CR3: 000000005a921000 CR4: 0000000000352ef0 [ 996.718115][T29391] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 996.720818][T29391] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 996.723300][T29391] Call Trace: [ 996.724351][T29391] [ 996.725289][T29391] ? mark_held_locks+0x40/0x70 [ 996.726761][T29391] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 996.728541][T29391] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 996.730898][T29391] ? rcu_is_watching+0x13/0xc0 [ 996.732578][T29391] ? trace_sched_exit_tp+0x120/0x160 [ 996.734264][T29391] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 996.736289][T29391] ? __pfx___schedule+0x10/0x10 [ 996.737837][T29391] ? irqentry_exit+0x24d/0xa10 [ 996.739373][T29391] ? lockdep_hardirqs_on+0x7d/0x110 [ 996.741139][T29391] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 996.743089][T29391] ? policy_nodemask+0xed/0x4f0 [ 996.744633][T29391] alloc_pages_mpol+0x201/0x550 [ 996.746200][T29391] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 996.747880][T29391] ? alloc_frozen_pages_noprof+0xb9/0x180 [ 996.749662][T29391] ? alloc_frozen_pages_noprof+0x100/0x180 [ 996.751578][T29391] folio_alloc_noprof+0x22/0x250 [ 996.753144][T29391] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 996.755124][T29391] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 996.757207][T29391] ? lock_acquire+0x1d1/0x380 [ 996.758628][T29391] ? ext4_get_group_info+0x146/0x480 [ 996.760427][T29391] ? find_held_lock+0x2b/0x80 [ 996.761922][T29391] __filemap_get_folio_mpol+0x653/0x1320 [ 996.763733][T29391] ext4_mb_load_buddy_gfp+0x70d/0x1b20 [ 996.765464][T29391] ext4_discard_preallocations+0x584/0x10c0 [ 996.767326][T29391] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 996.769733][T29391] ? __pfx_xa_destroy+0x10/0x10 [ 996.771649][T29391] ? inode_wait_for_writeback+0x171/0x390 [ 996.773480][T29391] ext4_clear_inode+0x6e/0x280 [ 996.775008][T29391] ext4_evict_inode+0x1de/0x17d0 [ 996.776565][T29391] ? evict+0x37e/0xad0 [ 996.777839][T29391] ? __pfx_ext4_evict_inode+0x10/0x10 [ 996.779530][T29391] evict+0x3c2/0xad0 [ 996.780832][T29391] ? _raw_spin_unlock+0x28/0x50 [ 996.782367][T29391] ? __list_lru_walk_one+0x26d/0x550 [ 996.784067][T29391] ? __pfx_evict+0x10/0x10 [ 996.785498][T29391] ? xa_load+0x149/0x2c0 [ 996.786858][T29391] ? xa_load+0x149/0x2c0 [ 996.788212][T29391] dispose_list+0x117/0x1e0 [ 996.789657][T29391] prune_icache_sb+0xea/0x150 [ 996.791257][T29391] ? list_lru_count_one+0x147/0x320 [ 996.792889][T29391] ? __pfx_prune_icache_sb+0x10/0x10 [ 996.794562][T29391] super_cache_scan+0x3ac/0x5c0 [ 996.796132][T29391] do_shrink_slab+0x416/0x1200 [ 996.797658][T29391] shrink_slab+0xa82/0x12e0 [ 996.799106][T29391] ? shrink_slab+0x677/0x12e0 [ 996.803459][T29391] ? __pfx_shrink_slab+0x10/0x10 [ 996.805078][T29391] ? __pfx_get_random_u8+0x10/0x10 [ 996.806712][T29391] ? lock_acquire+0x1d1/0x380 [ 996.808272][T29391] shrink_one+0x398/0x850 [ 996.809633][T29391] ? shrink_node+0x2b00/0x4320 [ 996.811316][T29391] shrink_node+0x2b20/0x4320 [ 996.812768][T29391] ? shrink_node+0x286e/0x4320 [ 996.814362][T29391] ? __pfx_shrink_node+0x10/0x10 [ 996.815997][T29391] ? queue_work_on+0x141/0x1e0 [ 996.817641][T29391] ? do_try_to_free_pages+0x33e/0x16d0 [ 996.819461][T29391] do_try_to_free_pages+0x33e/0x16d0 [ 996.821670][T29391] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 996.824055][T29391] ? __lock_acquire+0x5c0/0x1f40 [ 996.825865][T29391] try_to_free_pages+0x2a0/0x740 [ 996.827438][T29391] ? __pfx_try_to_free_pages+0x10/0x10 [ 996.829163][T29391] ? find_held_lock+0x2b/0x80 [ 996.830753][T29391] ? fs_reclaim_acquire+0x70/0x100 [ 996.832379][T29391] ? fs_reclaim_acquire+0x70/0x100 [ 996.833995][T29391] __alloc_frozen_pages_noprof+0xf8a/0x3300 [ 996.835877][T29391] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 996.837853][T29391] ? kasan_save_stack+0x30/0x50 [ 996.839409][T29391] ? __kasan_slab_alloc+0x89/0x90 [ 996.841054][T29391] ? __anon_vma_prepare+0x340/0x5e0 [ 996.842703][T29391] ? __vmf_anon_prepare+0x11f/0x250 [ 996.844337][T29391] ? do_anonymous_page+0x47d/0x2050 [ 996.845958][T29391] ? __handle_mm_fault+0x1ff3/0x2f60 [ 996.847619][T29391] ? handle_mm_fault+0x363/0xa20 [ 996.849180][T29391] ? do_user_addr_fault+0x59c/0x12f0 [ 996.850934][T29391] ? exc_page_fault+0x6f/0xd0 [ 996.852426][T29391] ? asm_exc_page_fault+0x26/0x30 [ 996.854023][T29391] ? __lock_acquire+0x5c0/0x1f40 [ 996.854758][ T5788] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.858807][T29391] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 996.860740][T29391] ? policy_nodemask+0xed/0x4f0 [ 996.862271][T29391] alloc_pages_mpol+0x201/0x550 [ 996.863830][T29391] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 996.865510][T29391] ? find_held_lock+0x2b/0x80 [ 996.866974][T29391] ? __anon_vma_prepare+0x2d7/0x5e0 [ 996.868542][T29391] ? __anon_vma_prepare+0x2d7/0x5e0 [ 996.870257][T29391] folio_alloc_mpol_noprof+0x36/0x260 [ 996.872398][T29391] vma_alloc_folio_noprof+0xed/0x1d0 [ 996.874057][T29391] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 996.875914][T29391] do_anonymous_page+0xac9/0x2050 [ 996.877722][T29391] ? __pfx_do_anonymous_page+0x10/0x10 [ 996.879407][T29391] ? rcu_read_unlock+0x2d/0xb0 [ 996.880982][T29391] ? rcu_read_unlock+0x2d/0xb0 [ 996.882532][T29391] ? __pte_offset_map+0x179/0x310 [ 996.884155][T29391] __handle_mm_fault+0x1ff3/0x2f60 [ 996.885711][T29391] ? lock_vma_under_rcu+0x11d/0x590 [ 996.887357][T29391] ? __pfx___handle_mm_fault+0x10/0x10 [ 996.889106][T29391] ? lock_vma_under_rcu+0x17c/0x590 [ 996.890948][T29391] handle_mm_fault+0x363/0xa20 [ 996.892564][T29391] do_user_addr_fault+0x59c/0x12f0 [ 996.894135][T29391] exc_page_fault+0x6f/0xd0 [ 996.895573][T29391] asm_exc_page_fault+0x26/0x30 [ 996.897101][T29391] RIP: 0033:0x7f0919cdf9a6 [ 996.898529][T29391] Code: 8b 90 e8 01 00 00 48 81 e2 00 ff ff ff 7e 14 48 89 d1 48 89 15 8b f8 11 00 48 d1 f9 48 89 0d 89 f8 11 00 48 8b 90 f0 01 00 00 <48> 89 15 4b 69 12 00 48 8b 90 f8 01 00 00 48 89 15 35 69 12 00 48 [ 996.905096][T29391] RSP: 002b:00007ffc8048f688 EFLAGS: 00010206 [ 996.907665][T29391] RAX: 00007f0919f0ea80 RBX: 00007f0919c54d80 RCX: 0000000000800000 [ 996.911091][T29391] RDX: 0000000000800000 RSI: 0000000000000000 RDI: 0000000000000000 [ 996.914370][T29391] RBP: 00007ffc8048f7b0 R08: 0000000000000000 R09: 0000000000000000 [ 996.917690][T29391] R10: 00007f0919c37580 R11: 00007f0919c2e000 R12: 00007f0919ed05f0 [ 996.921166][T29391] R13: 00007f0919c552d8 R14: 00007f0919dfd488 R15: 00007f0919c2e000 [ 996.924546][T29391] [ 996.925880][T29391] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 996.928727][T29391] CPU: 0 UID: 0 PID: 29391 Comm: modprobe Tainted: G L syzkaller #0 PREEMPT(full) [ 996.933097][T29391] Tainted: [L]=SOFTLOCKUP [ 996.934927][T29391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 996.939097][T29391] Call Trace: [ 996.940521][T29391] [ 996.941802][T29391] dump_stack_lvl+0x100/0x190 [ 996.943841][T29391] vpanic+0x553/0x970 [ 996.945541][T29391] ? __pfx_vpanic+0x10/0x10 [ 996.947409][T29391] panic+0xd1/0xe0 [ 996.948811][T29391] ? __pfx_panic+0x10/0x10 [ 996.950630][T29391] check_panic_on_warn.cold+0x19/0x34 [ 996.952901][T29391] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 996.955487][T29391] __warn.cold+0x191/0x318 [ 996.957378][T29391] __report_bug+0x30f/0x440 [ 996.959269][T29391] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 996.961556][T29391] ? __pfx___report_bug+0x10/0x10 [ 996.963445][T29391] ? __zone_watermark_ok+0x281/0x500 [ 996.965394][T29391] ? get_page_from_freelist+0x344/0x35d0 [ 996.967436][T29391] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 996.969575][T29391] report_bug+0xb3/0x220 [ 996.971083][T29391] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 996.973439][T29391] handle_bug+0x16a/0x2a0 [ 996.974835][T29391] exc_invalid_op+0x17/0x50 [ 996.976290][T29391] asm_exc_invalid_op+0x1a/0x20 [ 996.977827][T29391] RIP: 0010:__alloc_frozen_pages_noprof+0x1eac/0x3300 [ 996.979933][T29391] Code: 38 d0 7c 08 84 d2 0f 85 de 12 00 00 65 48 8b 05 62 56 1c 12 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ba e7 ff ff 90 <0f> 0b 90 e9 b1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 996.985884][T29391] RSP: 0000:ffffc90003ebe7a8 EFLAGS: 00010202 [ 996.987799][T29391] RAX: ffff888028704b00 RBX: 0000000000000000 RCX: 1ffff1100fffad29 [ 996.990207][T29391] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 996.992704][T29391] RBP: ffff888028704b2c R08: 0000000000008000 R09: 0000000000000001 [ 996.995216][T29391] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000048c40 [ 996.997672][T29391] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff920007d7d0f [ 997.000130][T29391] ? __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 997.002041][T29391] ? mark_held_locks+0x40/0x70 [ 997.003648][T29391] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 997.005495][T29391] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 997.007348][T29391] ? rcu_is_watching+0x13/0xc0 [ 997.008843][T29391] ? trace_sched_exit_tp+0x120/0x160 [ 997.010492][T29391] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 997.012496][T29391] ? __pfx___schedule+0x10/0x10 [ 997.014400][T29391] ? irqentry_exit+0x24d/0xa10 [ 997.016295][T29391] ? lockdep_hardirqs_on+0x7d/0x110 [ 997.018338][T29391] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 997.020596][T29391] ? policy_nodemask+0xed/0x4f0 [ 997.022306][T29391] alloc_pages_mpol+0x201/0x550 [ 997.023878][T29391] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 997.025560][T29391] ? alloc_frozen_pages_noprof+0xb9/0x180 [ 997.027338][T29391] ? alloc_frozen_pages_noprof+0x100/0x180 [ 997.029176][T29391] folio_alloc_noprof+0x22/0x250 [ 997.030732][T29391] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 997.032720][T29391] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 997.034834][T29391] ? lock_acquire+0x1d1/0x380 [ 997.036320][T29391] ? ext4_get_group_info+0x146/0x480 [ 997.037983][T29391] ? find_held_lock+0x2b/0x80 [ 997.039475][T29391] __filemap_get_folio_mpol+0x653/0x1320 [ 997.041257][T29391] ext4_mb_load_buddy_gfp+0x70d/0x1b20 [ 997.042990][T29391] ext4_discard_preallocations+0x584/0x10c0 [ 997.044838][T29391] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 997.046852][T29391] ? __pfx_xa_destroy+0x10/0x10 [ 997.048397][T29391] ? inode_wait_for_writeback+0x171/0x390 [ 997.050173][T29391] ext4_clear_inode+0x6e/0x280 [ 997.051716][T29391] ext4_evict_inode+0x1de/0x17d0 [ 997.053263][T29391] ? evict+0x37e/0xad0 [ 997.054553][T29391] ? __pfx_ext4_evict_inode+0x10/0x10 [ 997.056225][T29391] evict+0x3c2/0xad0 [ 997.057466][T29391] ? _raw_spin_unlock+0x28/0x50 [ 997.059012][T29391] ? __list_lru_walk_one+0x26d/0x550 [ 997.060692][T29391] ? __pfx_evict+0x10/0x10 [ 997.062117][T29391] ? xa_load+0x149/0x2c0 [ 997.063468][T29391] ? xa_load+0x149/0x2c0 [ 997.064803][T29391] dispose_list+0x117/0x1e0 [ 997.066253][T29391] prune_icache_sb+0xea/0x150 [ 997.067736][T29391] ? list_lru_count_one+0x147/0x320 [ 997.069358][T29391] ? __pfx_prune_icache_sb+0x10/0x10 [ 997.071057][T29391] super_cache_scan+0x3ac/0x5c0 [ 997.072587][T29391] do_shrink_slab+0x416/0x1200 [ 997.074080][T29391] shrink_slab+0xa82/0x12e0 [ 997.075517][T29391] ? shrink_slab+0x677/0x12e0 [ 997.076989][T29391] ? __pfx_shrink_slab+0x10/0x10 [ 997.078537][T29391] ? __pfx_get_random_u8+0x10/0x10 [ 997.080141][T29391] ? lock_acquire+0x1d1/0x380 [ 997.081652][T29391] shrink_one+0x398/0x850 [ 997.083039][T29391] ? shrink_node+0x2b00/0x4320 [ 997.084539][T29391] shrink_node+0x2b20/0x4320 [ 997.085999][T29391] ? shrink_node+0x286e/0x4320 [ 997.087525][T29391] ? __pfx_shrink_node+0x10/0x10 [ 997.089087][T29391] ? queue_work_on+0x141/0x1e0 [ 997.090600][T29391] ? do_try_to_free_pages+0x33e/0x16d0 [ 997.092317][T29391] do_try_to_free_pages+0x33e/0x16d0 [ 997.093992][T29391] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 997.095885][T29391] ? __lock_acquire+0x5c0/0x1f40 [ 997.097443][T29391] try_to_free_pages+0x2a0/0x740 [ 997.099020][T29391] ? __pfx_try_to_free_pages+0x10/0x10 [ 997.100735][T29391] ? find_held_lock+0x2b/0x80 [ 997.102235][T29391] ? fs_reclaim_acquire+0x70/0x100 [ 997.103885][T29391] ? fs_reclaim_acquire+0x70/0x100 [ 997.105489][T29391] __alloc_frozen_pages_noprof+0xf8a/0x3300 [ 997.107343][T29391] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 997.109315][T29391] ? kasan_save_stack+0x30/0x50 [ 997.110856][T29391] ? __kasan_slab_alloc+0x89/0x90 [ 997.112442][T29391] ? __anon_vma_prepare+0x340/0x5e0 [ 997.114071][T29391] ? __vmf_anon_prepare+0x11f/0x250 [ 997.115717][T29391] ? do_anonymous_page+0x47d/0x2050 [ 997.117346][T29391] ? __handle_mm_fault+0x1ff3/0x2f60 [ 997.119011][T29391] ? handle_mm_fault+0x363/0xa20 [ 997.120580][T29391] ? do_user_addr_fault+0x59c/0x12f0 [ 997.122255][T29391] ? exc_page_fault+0x6f/0xd0 [ 997.123892][T29391] ? asm_exc_page_fault+0x26/0x30 [ 997.125499][T29391] ? __lock_acquire+0x5c0/0x1f40 [ 997.127079][T29391] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 997.128934][T29391] ? policy_nodemask+0xed/0x4f0 [ 997.130698][T29391] alloc_pages_mpol+0x201/0x550 [ 997.132243][T29391] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 997.133933][T29391] ? find_held_lock+0x2b/0x80 [ 997.135426][T29391] ? __anon_vma_prepare+0x2d7/0x5e0 [ 997.137057][T29391] ? __anon_vma_prepare+0x2d7/0x5e0 [ 997.138701][T29391] folio_alloc_mpol_noprof+0x36/0x260 [ 997.140419][T29391] vma_alloc_folio_noprof+0xed/0x1d0 [ 997.142347][T29391] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 997.144799][T29391] do_anonymous_page+0xac9/0x2050 [ 997.146608][T29391] ? __pfx_do_anonymous_page+0x10/0x10 [ 997.148423][T29391] ? rcu_read_unlock+0x2d/0xb0 [ 997.150405][T29391] ? rcu_read_unlock+0x2d/0xb0 [ 997.152412][T29391] ? __pte_offset_map+0x179/0x310 [ 997.154322][T29391] __handle_mm_fault+0x1ff3/0x2f60 [ 997.156207][T29391] ? lock_vma_under_rcu+0x11d/0x590 [ 997.158093][T29391] ? __pfx___handle_mm_fault+0x10/0x10 [ 997.160104][T29391] ? lock_vma_under_rcu+0x17c/0x590 [ 997.161950][T29391] handle_mm_fault+0x363/0xa20 [ 997.163623][T29391] do_user_addr_fault+0x59c/0x12f0 [ 997.165701][T29391] exc_page_fault+0x6f/0xd0 [ 997.167378][T29391] asm_exc_page_fault+0x26/0x30 [ 997.168910][T29391] RIP: 0033:0x7f0919cdf9a6 [ 997.170729][T29391] Code: 8b 90 e8 01 00 00 48 81 e2 00 ff ff ff 7e 14 48 89 d1 48 89 15 8b f8 11 00 48 d1 f9 48 89 0d 89 f8 11 00 48 8b 90 f0 01 00 00 <48> 89 15 4b 69 12 00 48 8b 90 f8 01 00 00 48 89 15 35 69 12 00 48 [ 997.177698][T29391] RSP: 002b:00007ffc8048f688 EFLAGS: 00010206 [ 997.179936][T29391] RAX: 00007f0919f0ea80 RBX: 00007f0919c54d80 RCX: 0000000000800000 [ 997.182679][T29391] RDX: 0000000000800000 RSI: 0000000000000000 RDI: 0000000000000000 [ 997.185512][T29391] RBP: 00007ffc8048f7b0 R08: 0000000000000000 R09: 0000000000000000 [ 997.188502][T29391] R10: 00007f0919c37580 R11: 00007f0919c2e000 R12: 00007f0919ed05f0 [ 997.191332][T29391] R13: 00007f0919c552d8 R14: 00007f0919dfd488 R15: 00007f0919c2e000 [ 997.194371][T29391] [ 997.196087][T29391] Kernel Offset: disabled [ 997.197468][T29391] Rebooting in 86400 seconds..