last executing test programs: 3.811284761s ago: executing program 1 (id=1039): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2b, 0x80801, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x3, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2120, 0x280, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100037040021d15426db9f80e9ba575a", @ANYRES32, @ANYBLOB="83040500320400000000000000000100767863616e00000018000280140001000000", @ANYRES32, @ANYBLOB="2008020000000200"], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 3.155718611s ago: executing program 2 (id=1046): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000020)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xe1c}}, 0x0) (fail_nth: 6) 3.154796113s ago: executing program 3 (id=1048): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$btrfs_control(0xffffff9c, 0x0, 0x108400, 0x0) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0xe000, 0x4, &(0x7f0000ff1000/0xe000)=nil) getsockname$packet(r6, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x63, 0x1, 0x1, 0xe0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x60880, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000004060108000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) 3.088763772s ago: executing program 2 (id=1049): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$btrfs_control(0xffffff9c, 0x0, 0x108400, 0x0) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0xe000, 0x4, &(0x7f0000ff1000/0xe000)=nil) getsockname$packet(r6, 0x0, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x60880, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000406010800000000000000060a0000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) 2.847921337s ago: executing program 1 (id=1051): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) (fail_nth: 6) 2.50095467s ago: executing program 0 (id=1054): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@fallback=r0, r0, 0x2f}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@fallback=r0, r1, 0x2f, 0x2030, 0x4, @void, @void, @value=r2}, 0x20) 2.498917952s ago: executing program 0 (id=1055): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000005c0)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x8001) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000180)={0x1, 0x0, [{0x861, 0x0, 0x2}]}) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) io_setup(0xfffffff9, &(0x7f0000000040)=0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000cc0)={0x394, 0x26, 0x1, 0x0, 0x4, "", [@nested={0x384, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xffffffffffffffff}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0x360, 0x53, 0x0, 0x1, [@nested={0x153, 0xa1, 0x0, 0x1, [@typed={0x8, 0x37, 0x0, 0x0, @fd}, @nested={0x4, 0x8}, @typed={0xc, 0x105, 0x0, 0x0, @u64=0x1}, @nested={0x4, 0x3a}, @generic="fc5043a0a36c5159202932748e8e035970d331a25cfd4652e385a1564becc72900cb58235836176154967f4a7f6f7cc63d64af918c4052fc5239e50509aed2deb4d9c73350c66bd3c12a9a620385ea406be654303fbb35d42162fb44017cf778067fddc1a7d830e9ebb844209f76256c1df734f92cfd5d4243b5af3416724157ee3dbb810e57ec533ed96737d9d9d9b81d498d77d4f070636a81e59c2b7879b80ec7a090349e649a3131ce3e81d4510bfa66dfcffcfb0378a5d1e8bb82c0c41f907a93c28ac2d56cbaef76bbb9e1e6f533bb12f4d021d874aed32dc19472249f", @typed={0x8, 0x97, 0x0, 0x0, @u32}, @typed={0x8, 0x32, 0x0, 0x0, @ipv4=@empty}, @generic="370b65d6d7f93521dc70e1ba5f7f551ed7e5e182a2e4d948a5aaaa84e1a29a1eadd8da0734b1e16c74c56a0f928a9ea2120b73e4bcd5ee4a4da90100da6a83", @nested={0x4, 0xde}]}, @generic="d8a8f50b13e191de5f49eba9fb5063180a46a5fb943291af0a8c76fbe3b7a499ca5fa16861cd261aeadf6f79ad05197e06f69d6459", @generic="945eb642165dad354411766ba3d151f55d0c3d3cc1d763ceb65581106964b5012cc0501cf61bfd7fd0ebf82fd29cc13f5c0b335a2db1738caea2be0655769ca3823c13fcd91c5ca6fe7f3f1bc49d554a44645686b5533a38bd4f83", @nested={0x178, 0xb9, 0x0, 0x1, [@generic="3e317a10dc241d1198fd43759ba64dd1177ad912ffe80617b880c1c33d60419dce1cc496de634e7ed103b97e392d9cea220ef1f2ad9b416afa181915c56fbab8cf6be63dfe66f031fff7a950b7135f029e3f232e94b53ee97a668181b38edf50cd6009dbf02f075b7c0e0a1c0941e847921b973cefac9a71a9e6e6b65b329bd398beaacbb4f76ef26a9a1a816964155c346d9eaa4c5ae970cd9761d68c1ab4a3ece6f3eda8fac6e5aded7fdf748beb3b389e81499d462e4e3cb0f0c2dd17225095e0564c688dbcec198d15e69c409a6dfb96295cde64280291583d6d", @generic, @generic="9d7b38729520c6bdcf9ec1564000bee62170f76e48c137c294c5eee4ff2833f0bcdd4acbd55b6b3105e348c8c1af5f554acb6ca907a746fd126638c3f07c004f19837c3dd5e25a90e0453482e459e5b65fbca7a0f774616cca66ee4d54638c598251f8a4c0c4e42da9952b2f248d982759ec1341302d97", @typed={0xc, 0xe8, 0x0, 0x0, @u64=0x6}, @generic="0216c77976a8f67cb427f0c553c2f81ce9bb023916"]}]}]}]}, 0x394}], 0x1}, 0x0) r6 = eventfd(0x0) r7 = openat$hwrng(0xffffff9c, &(0x7f00000003c0), 0x100, 0x0) r8 = eventfd(0xfffffff7) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) writev(r9, &(0x7f0000000540)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) io_submit(r4, 0x6, &(0x7f0000000540)=[0xfffffffffffffffe, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xffff, r0, &(0x7f0000000100)="322808650e3d73da07bc6bde836fb8593a0be6287a72a11bcf69161de5b567af82ca82500e44d0d1960a24da92f9e5318324b1e253fd4cb03750651e49f4e54d4a9d63e1b43d0bc29c281866304cff0c90a64fb9d65ac0438c2400e27969666e8efd07984f6a531bb0fcb1fbccc8309f0b64c408a1b99ee7def352cd33936d3392115d94c7f2dcb439d16f5361ceecef2373622e415b77849e8b8da2a36983bcd52eef18", 0xa4, 0x5, 0x0, 0x1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000200)="b20e0437d502b1128837a5b840b7738dec6dc1de780e4ea6bcd37d9d75e7af1a4d44079c7d5b4738e0ad70a19a5bae2fb139c782c77e4e2b9de7432f16238f735767eab78c1a1eb54ebf5c0afe19bfc2bb3189f6f146dd658213c905068fbec77f6835a7afbba69f63a48d6eed8b789fd510c97df18f5ae88ab3605d1f336a68f4f082ab59f9", 0x86, 0x7, 0x0, 0x1, r6}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x5, r0, &(0x7f0000000300)="3517f4353630d6b392c2dd18cafa1ffd30f8031f590b427d44105e08a5b81777ccfaa5520ee1037cd30f335525a464cfca92ac18518dd7601055e86d1947293d1fd72e361cc51868dde232a3c91e54b3496c6148c91c1c524cc75234844a4a756640132104ea7fa5111af48d0354c2ef30a938e41baa906d3d2ace910a4328400cfa5c20fcce6cfd857ef5f1e5d9836f7149dc1c83b04cd8c3f60862cb26e215870cf05bd2", 0xa5, 0x9, 0x0, 0x0, r7}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x9, r0, &(0x7f0000000440)="cd76", 0x2, 0xe3d3, 0x0, 0x3, r8}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x400, r9, &(0x7f00000004c0)="4d13471cdd7dd7a8539d71a6b2774524c9918af01e3d626f9b05095ac59cea02a2563b", 0x23, 0x5, 0x0, 0x1}]) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) read$FUSE(r10, &(0x7f0000000380)={0x2020}, 0x2020) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x44}]}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) ioctl$FITHAW(r7, 0xc0045878) 2.270121536s ago: executing program 3 (id=1056): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = epoll_create1(0x80000) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='10', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) dup3(r1, r1, 0x80000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200), 0x0, 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r5) sendmsg$NFC_CMD_DISABLE_SE(r5, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fddbdf255200000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000018) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000000440)={0xa0000001}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)="80e60037bbfa9ba1ce5256c4c4e0355aa0c6532139390f2f7c94854e11408dbd381d63c39d6f82c506c0df35ca5a4c6654db1ba2f1b33038f86aa9f8a48e26df274fe937f30c501f318c7840bf921d03e1a5fcab635317b37573ac2ea8a2", 0x5e, 0x0, 0x0, 0x0) 2.188816204s ago: executing program 3 (id=1057): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x4480) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0], 0x8) 2.130301144s ago: executing program 3 (id=1058): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r3, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r3, 0x407, 0x7000000) fcntl$setpipe(r3, 0x407, 0x1000000000100002) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000040000000000000013ff00972500007400", @ANYRES32=r1, @ANYBLOB="800c0000075005001c0012800b00010062726964676500000c00028005002c0009000000"], 0x3c}}, 0x0) 2.129402434s ago: executing program 2 (id=1059): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x24, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x24}}, 0x0) 2.111204906s ago: executing program 2 (id=1060): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2b, 0x80801, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x3, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2120, 0x280, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100037040021d15426db9f80e9ba575a", @ANYRES32, @ANYBLOB="83040500320400000000000000000100767863616e000000180002801400010000", @ANYRES32, @ANYBLOB="2008020000000200"], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1.920165323s ago: executing program 1 (id=1061): socket$pppoe(0x18, 0x1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000000e0a01020000000000000000010000000000000000000100000a7fc2e4bb7a3f8d67bf5609d58197f9eba851a450478a728e"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) userfaultfd(0x80001) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x801) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xd19e, 0x30}, &(0x7f0000000140)=0xc) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="89d56a6fc2ff6a07", 0x8, 0x10, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 1.074712338s ago: executing program 0 (id=1062): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="581400002d00010000000000ffdbdf2503"], 0x1458}, 0x1, 0x0, 0x0, 0xc000}, 0x40084) write(r0, &(0x7f0000000100)="6523411b2efebd45ac17df69b487095c512d123e523e1c5a6cd558c72087c5aa047f837cfb5ae558bacc5a4b8da6c31b3c610ee2b2bc483030babf6089de298c0ac65c862192b3fd069d7fb9b6c97aabe9daa736bcbebc0f1e630bfd2fcd7d7e1de0fac2f5173e5d0c7123da0c", 0x6d) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x400, 0x40) writev(r1, &(0x7f0000000c40)=[{&(0x7f00000005c0)="c2", 0x1}, {0x0, 0x500}], 0x2) io_uring_register$IORING_UNREGISTER_PBUF_RING(r1, 0x17, &(0x7f0000000680)={&(0x7f0000001000)={[{&(0x7f0000000080)="ed4518e142cc06366803fb56a4f81d93ea62d683995b91a6d2eff84f0e839bb3ce7d46b0fcec5e48afd65cbcb12bc9516c7c8ab64a1fab8ec5fb0d801c548011c64c600d2b57957bb9c72fb1cf8d02f576a6eb453fa17a935453691bc8", 0x5d}, {&(0x7f00000001c0)="3da456a861777db45ec642b3ad6486a60ece954b80466c1e22d1a9545bf848ccf0651e832d08eceebe57f558e0910311a77ba4ae418d521929b4533a4f0a4f5906cef372bead15946a10c8a07302d655758de1c59630446c259c2bd86e2243dbec8506159ed4775427886f7f842ab6f1a0433e94975104b43f93510bc6247ba22617c8282c920baee3b580ccdbb0338f804617936939daa6b499c520fc10a720dd4e95caa1571c0a68174273d885dcd42954532c5c05ac37a85036c3f7253209781ee79cca8d2721c5f3e798712d970b25f7063fb6b0c9f5c650a6eb4e92999495df79ca00a07133aba6dd", 0xeb, 0x3}, {&(0x7f00000002c0)="4938a1f7c31b8f8b8c852cadd2eb1c9d3cb6563430bf2af4456a210b682666517d72f3e55eb16af75d7f72925a264d07d12dc554d2295992c8cbe31e8681b134439d651167739922708ce67033c1c0a3c551f4117625e95051e08a63536b", 0x5e}, {&(0x7f0000000340)="f5373dc2f07d0ebc3c79c7ed4a627af77bf01360061e84ce2f6ebe5faefd66b61884679d8f3a0324b17c23944ae37dcb0fbc06a3dde64711c8e392364228fdde2eb43228cad7028c75091304bfe82c59ebe15540b3756e97e7af506edfe4b3a9ab9f8251dda83e84464827a06bd87e158f409645ffba942d26f5de46cf7f11020eef3d036dbfca785086e71b9220abf8864811e353e19503bbc43ae8d19198ebf56481076bd232b92db4ee31bf8aae7d660f25e1bd54a4db14ec4a39", 0xbc, 0x3}, {&(0x7f0000000400)="fcc20e2f9dbd37cb2df5ada89f1e2020225a87ed81466598", 0x18, 0x2}, {&(0x7f0000000440)="e0e6122b6706de198467b02d600488142abf8e9c4add816d96ecb4ccc707aa13b001625b490c15506959bde4d1bf12593c82e5e6101c0ccf537439df516b3c08fc375aad1d05f3be", 0x48, 0x3}, {&(0x7f00000004c0)="3cbdfe37b71a1a0b5faaabdabad076f927a053f19e52308b879e58b8c723a54d80295c1405c70e24302d387b8336bb27a4956853322ed55574f121e6d21b984cdbdffe2a8adcb4bb386b1782bd59b9018c2985ffdddebf23cc84b4d75de289608dd02be5cbf497ef32c1a1775fa413e04551e8d30cc37b415630bf265f16326026d910c172748b412f59dc3b40a5a2146cffe5cf97ad9f3c4d7c775a57b273d724640dddb77c88473c34fd9aea22faf9202cec431cb5f40390ec2dcb9e9119870aef829669a60a945e004c202551", 0xce, 0x1}, {&(0x7f00000005c0)="34ee6efb9022f548bafb770caee8cc4f3ff70c192a694839b83a759e971e575766d21d714c9a9c6c14919e152f2490f8ac06cb8277b733dfb3e3e78808fba56fb315fa649f77613ff93d0fe7d58ff37c04ac14f440eb9398e2a45490f6db6f2a4eb106abf1f51ad6a2fb1f6cb79673e5aef546984e3f2c97bf5cc93a47e357981fb3284ba1ebef43b527632e9210e7eda486404c66f68d1f76fd84d1ad4ad7a2a730395e0ff481c02904927fab46cc1efe6e446ca83dd3ccff582551b20bd0", 0xbf, 0x2}]}, 0x8, 0x2, 0x1}, 0x1) write$P9_RREADDIR(r1, &(0x7f00000006c0)={0x11c, 0x29, 0x2, {0x3, [{{0x8, 0x0, 0x4}, 0x3, 0x2, 0x7, './file0'}, {{0x2, 0x3, 0x3}, 0x7fffffffffffffff, 0x2, 0x7, './file0'}, {{0x40, 0x3, 0x3}, 0xffffffffffffff7f, 0x10, 0x7, './file0'}, {{0x2, 0x3, 0x6}, 0x9846, 0x4, 0x1, '.'}, {{0x20, 0x1, 0x4}, 0x5, 0x3, 0x7, './file0'}, {{0x10, 0x3, 0x2}, 0x6, 0x7f, 0x7, './file0'}, {{0x80, 0x1, 0x2}, 0x7fffffffffffffff, 0x1, 0x7, './file0'}, {{0x4, 0x6, 0x3}, 0xe73a, 0x6, 0x7, './file0'}, {{0x10, 0x2, 0x4}, 0x8, 0x1, 0x7, './file0'}]}}, 0x11c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vxcan0\x00', 0x0}) r4 = dup2(r1, r1) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@o_path={&(0x7f0000000a40)='./file0\x00', 0x0, 0x8, r2}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x13, 0x2, &(0x7f0000000800)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3ff}], &(0x7f0000000840)='syzkaller\x00', 0x9, 0xb3, &(0x7f0000000900)=""/179, 0x0, 0x5, '\x00', r3, @fallback=0xf, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x4, 0x5, 0xfffff800}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=[r1, r2, r2, r1, r1, r5], 0x0, 0x10, 0x81}, 0x94) 980.710809ms ago: executing program 1 (id=1063): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@fallback=r0, r0, 0x2f}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@fallback=r0, r1, 0x2f, 0x2030, 0x4, @void, @void, @value=r2}, 0x20) 980.228541ms ago: executing program 0 (id=1064): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c910"], 0x27) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0x1, 0x40, 0x4, 0x8, 0xd6a, 0xffffffff, 0x10000}]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x49323de44ee88a26, 0x0, 0x49, 0x1, 0x7, 0x4, 0xe, 0x0, 0x0, 0xb2, 0x2}, {0xf000, 0xdddd0000, 0x4, 0x5, 0xbb, 0x5, 0x38, 0x8, 0x7, 0xfd, 0xd9, 0x2}, {0xeeef0000, 0x26000, 0xd, 0xe4, 0x3, 0xd, 0x6, 0x9, 0x0, 0x5, 0x42, 0xa}, {0x0, 0x8000000, 0xc, 0x9, 0x44, 0xcb, 0x5, 0x9, 0x40, 0x9, 0x1, 0x5}, {0xffff1000, 0x2000, 0xb, 0x7, 0xe, 0x2, 0x6, 0x8f, 0x1, 0xd, 0x5, 0x1}, {0x80a0001, 0x80a0000, 0xb, 0x5, 0x61, 0x18, 0x7, 0xfc, 0xc, 0x9, 0x6, 0x4}, {0x7002, 0xeeee0000, 0xd, 0xff, 0xbc, 0x80, 0x1, 0x4, 0x5, 0x0, 0xbf, 0x9}, {0x8000000, 0x2000, 0xf, 0x3, 0x4, 0x6, 0x9, 0xfa, 0x7, 0xc6, 0x0, 0x81}, {0xf000, 0x3}, {0x15000, 0x8}, 0x14, 0x0, 0xeeee8000, 0x40020, 0x0, 0x1101, 0x2000, [0x9, 0x1ff, 0x86d, 0x8001]}) r3 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000640)}, 0x1c) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x24, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5580}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r6, 0x2000000, 0x69, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e65000000001400028006001800000000000500010004000000"], 0x44}}, 0x0) ioctl$MEMISLOCKED(r3, 0x80084d17, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@cgroup=r8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r11, &(0x7f0000000040)="8616166b1df11937d43613675b", 0xd) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x4f) r13 = accept4(r12, 0x0, 0x0, 0x800) splice(r10, 0x0, r13, 0x0, 0x1e8640, 0x0) openat(r9, &(0x7f0000000040)='./file0\x00', 0x80000, 0x1) 975.576107ms ago: executing program 2 (id=1065): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$btrfs_control(0xffffff9c, 0x0, 0x108400, 0x0) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0xe000, 0x4, &(0x7f0000ff1000/0xe000)=nil) getsockname$packet(r6, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x63, 0x1, 0x1, 0xe0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x60880, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000406010800000000000000060a00000505"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) 910.842814ms ago: executing program 1 (id=1066): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = epoll_create1(0x80000) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='10', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) dup3(r1, r1, 0x80000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200), 0x0, 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r5) sendmsg$NFC_CMD_DISABLE_SE(r5, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fddbdf255200000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000018) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000000440)={0xa0000001}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)="80e60037bbfa9ba1ce5256c4c4e0355aa0c6532139390f2f7c94854e11408dbd381d63c39d6f82c506c0df35ca5a4c6654db1ba2f1b33038f86aa9f8a48e26df274fe937f30c501f318c7840bf921d03e1a5fcab635317b37573ac2ea8a2", 0x5e, 0x0, 0x0, 0x0) 841.041428ms ago: executing program 3 (id=1067): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x4480) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0], 0x8) 840.749351ms ago: executing program 3 (id=1068): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$btrfs_control(0xffffff9c, 0x0, 0x108400, 0x0) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0xe000, 0x4, &(0x7f0000ff1000/0xe000)=nil) getsockname$packet(r6, 0x0, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x60880, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000406010800000000000000060a0000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) 816.784268ms ago: executing program 1 (id=1069): socket$inet(0x2, 0x3, 0xdb) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0xffffffffffffffff, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000000000000000050006"], 0x44}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket(0x2b, 0x1, 0x8000001) r2 = socket$netlink(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x2}, &(0x7f0000000380)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) migrate_pages(0x0, 0xe8, 0x0, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r7, 0x407, 0x0) write$FUSE_INIT(r7, &(0x7f0000000180)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0x2, 0x0, 0x3, 0x2, 0x8, 0x9, 0x0, 0x0, 0x2, 0x8}}, 0x50) vmsplice(r7, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000003c0), 0x20000, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="5232534e64f63b268e849ba13e6150d0f4a51af197dcf182bbd8f5ddd37c97d1c062c528a748134bd86bd4aebddb9b38afb06696bf72a7c207f7c1fae4387460191f7ece1bda4bba12a4e0772fd70321948d2ed2d6ebe317e8cd3a76799d0a148b762730444cb02041753b0e8d40f52c271fc8a3d68a774a9d5eadcb489ec3124133512555", @ANYRESHEX=r6, @ANYBLOB=',posixacl,cache=loose,cache=mmap,smackfshat=,*],\x00']) fcntl$setpipe(r4, 0x407, 0x2000000) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040), 0x4) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r5, 0x7a4, &(0x7f0000000540)={{@any, 0x2}, 0x0, 0x800000009, 0xffffff01, 0x40}) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r3], 0xa) openat$cgroup_ro(r7, &(0x7f0000000240)='blkio.bfq.time\x00', 0x0, 0x0) 777.392076ms ago: executing program 0 (id=1070): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000005c0)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x8001) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000180)={0x1, 0x0, [{0x861, 0x0, 0x2}]}) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) io_setup(0xfffffff9, &(0x7f0000000040)=0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000cc0)={0x394, 0x26, 0x1, 0x0, 0x4, "", [@nested={0x384, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xffffffffffffffff}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0x360, 0x53, 0x0, 0x1, [@nested={0x153, 0xa1, 0x0, 0x1, [@typed={0x8, 0x37, 0x0, 0x0, @fd}, @nested={0x4, 0x8}, @typed={0xc, 0x105, 0x0, 0x0, @u64=0x1}, @nested={0x4, 0x3a}, @generic="fc5043a0a36c5159202932748e8e035970d331a25cfd4652e385a1564becc72900cb58235836176154967f4a7f6f7cc63d64af918c4052fc5239e50509aed2deb4d9c73350c66bd3c12a9a620385ea406be654303fbb35d42162fb44017cf778067fddc1a7d830e9ebb844209f76256c1df734f92cfd5d4243b5af3416724157ee3dbb810e57ec533ed96737d9d9d9b81d498d77d4f070636a81e59c2b7879b80ec7a090349e649a3131ce3e81d4510bfa66dfcffcfb0378a5d1e8bb82c0c41f907a93c28ac2d56cbaef76bbb9e1e6f533bb12f4d021d874aed32dc19472249f", @typed={0x8, 0x97, 0x0, 0x0, @u32}, @typed={0x8, 0x32, 0x0, 0x0, @ipv4=@empty}, @generic="370b65d6d7f93521dc70e1ba5f7f551ed7e5e182a2e4d948a5aaaa84e1a29a1eadd8da0734b1e16c74c56a0f928a9ea2120b73e4bcd5ee4a4da90100da6a83", @nested={0x4, 0xde}]}, @generic="d8a8f50b13e191de5f49eba9fb5063180a46a5fb943291af0a8c76fbe3b7a499ca5fa16861cd261aeadf6f79ad05197e06f69d6459", @generic="945eb642165dad354411766ba3d151f55d0c3d3cc1d763ceb65581106964b5012cc0501cf61bfd7fd0ebf82fd29cc13f5c0b335a2db1738caea2be0655769ca3823c13fcd91c5ca6fe7f3f1bc49d554a44645686b5533a38bd4f83", @nested={0x178, 0xb9, 0x0, 0x1, [@generic="3e317a10dc241d1198fd43759ba64dd1177ad912ffe80617b880c1c33d60419dce1cc496de634e7ed103b97e392d9cea220ef1f2ad9b416afa181915c56fbab8cf6be63dfe66f031fff7a950b7135f029e3f232e94b53ee97a668181b38edf50cd6009dbf02f075b7c0e0a1c0941e847921b973cefac9a71a9e6e6b65b329bd398beaacbb4f76ef26a9a1a816964155c346d9eaa4c5ae970cd9761d68c1ab4a3ece6f3eda8fac6e5aded7fdf748beb3b389e81499d462e4e3cb0f0c2dd17225095e0564c688dbcec198d15e69c409a6dfb96295cde64280291583d6d", @generic, @generic="9d7b38729520c6bdcf9ec1564000bee62170f76e48c137c294c5eee4ff2833f0bcdd4acbd55b6b3105e348c8c1af5f554acb6ca907a746fd126638c3f07c004f19837c3dd5e25a90e0453482e459e5b65fbca7a0f774616cca66ee4d54638c598251f8a4c0c4e42da9952b2f248d982759ec1341302d97", @typed={0xc, 0xe8, 0x0, 0x0, @u64=0x6}, @generic="0216c77976a8f67cb427f0c553c2f81ce9bb023916"]}]}]}]}, 0x394}], 0x1}, 0x0) r6 = eventfd(0x0) r7 = openat$hwrng(0xffffff9c, &(0x7f00000003c0), 0x100, 0x0) r8 = eventfd(0xfffffff7) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) writev(r9, &(0x7f0000000540)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) io_submit(r4, 0x6, &(0x7f0000000540)=[0xfffffffffffffffe, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xffff, r0, &(0x7f0000000100)="322808650e3d73da07bc6bde836fb8593a0be6287a72a11bcf69161de5b567af82ca82500e44d0d1960a24da92f9e5318324b1e253fd4cb03750651e49f4e54d4a9d63e1b43d0bc29c281866304cff0c90a64fb9d65ac0438c2400e27969666e8efd07984f6a531bb0fcb1fbccc8309f0b64c408a1b99ee7def352cd33936d3392115d94c7f2dcb439d16f5361ceecef2373622e415b77849e8b8da2a36983bcd52eef18", 0xa4, 0x5, 0x0, 0x1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000200)="b20e0437d502b1128837a5b840b7738dec6dc1de780e4ea6bcd37d9d75e7af1a4d44079c7d5b4738e0ad70a19a5bae2fb139c782c77e4e2b9de7432f16238f735767eab78c1a1eb54ebf5c0afe19bfc2bb3189f6f146dd658213c905068fbec77f6835a7afbba69f63a48d6eed8b789fd510c97df18f5ae88ab3605d1f336a68f4f082ab59f9", 0x86, 0x7, 0x0, 0x1, r6}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x5, r0, &(0x7f0000000300)="3517f4353630d6b392c2dd18cafa1ffd30f8031f590b427d44105e08a5b81777ccfaa5520ee1037cd30f335525a464cfca92ac18518dd7601055e86d1947293d1fd72e361cc51868dde232a3c91e54b3496c6148c91c1c524cc75234844a4a756640132104ea7fa5111af48d0354c2ef30a938e41baa906d3d2ace910a4328400cfa5c20fcce6cfd857ef5f1e5d9836f7149dc1c83b04cd8c3f60862cb26e215870cf05bd2", 0xa5, 0x9, 0x0, 0x0, r7}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x9, r0, &(0x7f0000000440)="cd76", 0x2, 0xe3d3, 0x0, 0x3, r8}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x400, r9, &(0x7f00000004c0)="4d13471cdd7dd7a8539d71a6b2774524c9918af01e3d626f9b05095ac59cea02a2563b", 0x23, 0x5, 0x0, 0x1}]) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) read$FUSE(r10, &(0x7f0000000380)={0x2020}, 0x2020) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x44}]}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) ioctl$FITHAW(r7, 0xc0045878) 414.811µs ago: executing program 2 (id=1071): socket$pppoe(0x18, 0x1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000000e0a01020000000000000000010000000000000000000100000a7fc2e4bb7a3f8d67bf5609d58197f9eba851a450478a728e"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) userfaultfd(0x80001) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x801) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xd19e, 0x30}, &(0x7f0000000140)=0xc) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="89d56a6fc2ff6a07", 0x8, 0x10, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 0s ago: executing program 0 (id=1072): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\x00', 0x1) (fail_nth: 4) kernel console output (not intermixed with test programs): .373106][ T6527] ? __pfx_vfs_write+0x10/0x10 [ 77.373115][ T6527] ? find_held_lock+0x2b/0x80 [ 77.373128][ T6527] ? __fget_files+0x215/0x3d0 [ 77.373141][ T6527] ? __fget_files+0x21f/0x3d0 [ 77.373155][ T6527] ksys_write+0x12a/0x250 [ 77.373165][ T6527] ? __pfx_ksys_write+0x10/0x10 [ 77.373174][ T6527] ? ksys_write+0x1ac/0x250 [ 77.373184][ T6527] ? __pfx_ksys_write+0x10/0x10 [ 77.373197][ T6527] __do_fast_syscall_32+0xe7/0x970 [ 77.373211][ T6527] ? lockdep_hardirqs_on+0x78/0x100 [ 77.373225][ T6527] do_fast_syscall_32+0x32/0x70 [ 77.373239][ T6527] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.373253][ T6527] RIP: 0023:0xf6feefec [ 77.373268][ T6527] Code: Unable to access opcode bytes at 0xf6feefc2. [ 77.373272][ T6527] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 77.373282][ T6527] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 77.373288][ T6527] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.373294][ T6527] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.373300][ T6527] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 77.373305][ T6527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.373319][ T6527] [ 77.825575][ T6546] loop5: detected capacity change from 0 to 7 [ 77.836312][ C3] blk_print_req_error: 25 callbacks suppressed [ 77.836331][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.842689][ C3] buffer_io_error: 25 callbacks suppressed [ 77.842704][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 77.850557][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.854379][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 77.859959][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.863004][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 77.865670][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.868754][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 77.874905][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.878181][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 77.880927][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.884083][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 77.886730][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.889887][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 77.892458][ T6546] ldm_validate_partition_table(): Disk read failed. [ 77.894749][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.897901][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 77.900641][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.903666][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 77.906234][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.909350][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 77.912112][ T6546] Dev loop5: unable to read RDB block 0 [ 77.914428][ T6546] loop5: unable to read partition table [ 77.916363][ T6546] loop5: partition table beyond EOD, truncated [ 77.920258][ T6546] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 78.132786][ T6554] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 78.135717][ T6554] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 78.143339][ T6554] vhci_hcd vhci_hcd.0: Device attached [ 78.164091][ T6555] vhci_hcd: connection closed [ 78.167881][ T5781] vhci_hcd vhci_hcd.1: stop threads [ 78.171736][ T5781] vhci_hcd vhci_hcd.1: release socket [ 78.174037][ T5781] vhci_hcd vhci_hcd.1: disconnect device [ 78.643510][ T6574] No such timeout policy "syz1" [ 78.949979][ T6587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.197972][ T29] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 79.348444][ T29] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 79.352306][ T29] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 79.355201][ T29] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 79.358670][ T29] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 79.361513][ T29] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 79.364949][ T29] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 79.369741][ T29] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 79.372355][ T29] usb 8-1: Product: syz [ 79.373669][ T29] usb 8-1: Manufacturer: syz [ 79.382184][ T29] cdc_wdm 8-1:1.0: skipping garbage [ 79.383921][ T29] cdc_wdm 8-1:1.0: skipping garbage [ 79.386545][ T29] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 79.388526][ T29] cdc_wdm 8-1:1.0: Unknown control protocol [ 79.489450][ T6593] input: syz0 as /devices/virtual/input/input13 [ 79.580162][ T6597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 80.051141][ T6606] xt_CT: No such helper "pptp" [ 80.394343][ T6606] tmpfs: Unknown parameter 'grpquotaq.io_wait_time_recursive' [ 81.148039][ T6079] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 81.199357][ T852] cfg80211: failed to load regulatory.db [ 81.302147][ T6079] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 81.306191][ T6079] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 81.310689][ T6079] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.316249][ T6079] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 81.321904][ T6079] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.330321][ T6079] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 81.337927][ T6079] usb 7-1: Product: syz [ 81.339309][ T6079] usb 7-1: Manufacturer: syz [ 81.352359][ T6079] cdc_wdm 7-1:1.0: skipping garbage [ 81.355043][ T6079] cdc_wdm 7-1:1.0: skipping garbage [ 81.370719][ T6079] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 81.372785][ T6079] cdc_wdm 7-1:1.0: Unknown control protocol [ 81.546526][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.201'. [ 81.550380][ T852] usb 7-1: USB disconnect, device number 4 [ 81.958598][ T5522] usb 8-1: USB disconnect, device number 3 [ 81.997836][ T852] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 82.148289][ T852] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 82.152858][ T852] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 82.155694][ T852] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.158909][ T852] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 82.161718][ T852] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.161923][ T6644] xt_CT: You must specify a L4 protocol and not use inversions on it [ 82.166423][ T852] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 82.170437][ T852] usb 7-1: Product: syz [ 82.171801][ T852] usb 7-1: Manufacturer: syz [ 82.181450][ T852] cdc_wdm 7-1:1.0: skipping garbage [ 82.184848][ T852] cdc_wdm 7-1:1.0: skipping garbage [ 82.192551][ T852] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 82.194568][ T852] cdc_wdm 7-1:1.0: Unknown control protocol [ 82.366276][ T6653] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20004 [ 82.376082][ T6653] netlink: 'syz.0.209': attribute type 11 has an invalid length. [ 82.427047][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 82.430183][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.209'. [ 82.435864][ T6653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.441591][ T6653] bond1: (slave bond0): making interface the new active one [ 82.446405][ T6653] bond1: (slave bond0): Enslaving as an active interface with an up link [ 82.451820][ T6653] netlink: 'syz.0.209': attribute type 4 has an invalid length. [ 82.456535][ T6653] netlink: 152 bytes leftover after parsing attributes in process `syz.0.209'. [ 82.483355][ T6653] .`: renamed from bond0 (while UP) [ 82.513511][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 83.285858][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 83.288643][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -EPIPE [ 83.619431][ T6693] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.048925][ T6709] FAULT_INJECTION: forcing a failure. [ 84.048925][ T6709] name failslab, interval 1, probability 0, space 0, times 0 [ 84.052953][ T6709] CPU: 1 UID: 0 PID: 6709 Comm: syz.1.228 Not tainted syzkaller #0 PREEMPT(full) [ 84.052969][ T6709] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.052975][ T6709] Call Trace: [ 84.052980][ T6709] [ 84.052985][ T6709] dump_stack_lvl+0x100/0x190 [ 84.053003][ T6709] should_fail_ex.cold+0x5/0xa [ 84.053016][ T6709] should_failslab+0xc2/0x120 [ 84.053032][ T6709] __kmalloc_node_noprof+0x101/0x830 [ 84.053045][ T6709] ? __get_vm_area_node+0x1dc/0x330 [ 84.053060][ T6709] ? __get_vm_area_node+0x208/0x330 [ 84.053074][ T6709] ? __vmalloc_node_range_noprof+0x409/0x1630 [ 84.053094][ T6709] __vmalloc_node_range_noprof+0x409/0x1630 [ 84.053115][ T6709] ? kernel_clone+0x176/0x9d0 [ 84.053131][ T6709] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 84.053149][ T6709] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 84.053168][ T6709] ? trace_kmem_cache_alloc+0xdd/0x100 [ 84.053185][ T6709] ? kernel_clone+0x176/0x9d0 [ 84.053198][ T6709] __vmalloc_node_noprof+0xad/0xf0 [ 84.053213][ T6709] ? kernel_clone+0x176/0x9d0 [ 84.053232][ T6709] copy_process+0x7fb/0x8030 [ 84.053247][ T6709] ? __lock_acquire+0x49f/0x1a40 [ 84.053261][ T6709] ? __pfx_copy_process+0x10/0x10 [ 84.053276][ T6709] ? get_pid_task+0xfc/0x250 [ 84.053289][ T6709] ? get_pid_task+0xfc/0x250 [ 84.053304][ T6709] kernel_clone+0x176/0x9d0 [ 84.053317][ T6709] ? proc_fail_nth_write+0x9f/0x220 [ 84.053333][ T6709] ? __pfx_kernel_clone+0x10/0x10 [ 84.053348][ T6709] ? find_held_lock+0x2b/0x80 [ 84.053361][ T6709] ? ksys_write+0x190/0x250 [ 84.053371][ T6709] ? ksys_write+0x190/0x250 [ 84.053383][ T6709] __do_compat_sys_ia32_clone+0xd4/0x120 [ 84.053396][ T6709] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 84.053413][ T6709] ? fput+0x79/0x100 [ 84.053425][ T6709] ? ksys_write+0x1ac/0x250 [ 84.053435][ T6709] ? __pfx_ksys_write+0x10/0x10 [ 84.053447][ T6709] __do_fast_syscall_32+0xe7/0x970 [ 84.053462][ T6709] ? lockdep_hardirqs_on+0x78/0x100 [ 84.053476][ T6709] do_fast_syscall_32+0x32/0x70 [ 84.053490][ T6709] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.053503][ T6709] RIP: 0023:0xf7f62fec [ 84.053518][ T6709] Code: Unable to access opcode bytes at 0xf7f62fc2. [ 84.053522][ T6709] RSP: 002b:00000000f54264bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 84.053533][ T6709] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 84.053539][ T6709] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.053545][ T6709] RBP: 00000000f7424f80 R08: 0000000000000000 R09: 0000000000000000 [ 84.053551][ T6709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.053556][ T6709] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.053569][ T6709] [ 84.053990][ T6709] syz.1.228: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 84.147180][ T6709] CPU: 1 UID: 0 PID: 6709 Comm: syz.1.228 Not tainted syzkaller #0 PREEMPT(full) [ 84.147194][ T6709] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.147201][ T6709] Call Trace: [ 84.147205][ T6709] [ 84.147210][ T6709] dump_stack_lvl+0x100/0x190 [ 84.147246][ T6709] warn_alloc.cold+0x94/0xa8 [ 84.147258][ T6709] ? __pfx_warn_alloc+0x10/0x10 [ 84.147272][ T6709] ? rcu_is_watching+0x12/0xc0 [ 84.147286][ T6709] ? __kasan_kmalloc+0x8a/0xb0 [ 84.147300][ T6709] ? __kmalloc_node_noprof+0x357/0x830 [ 84.147313][ T6709] ? __get_vm_area_node+0x1dc/0x330 [ 84.147328][ T6709] ? __get_vm_area_node+0x208/0x330 [ 84.147342][ T6709] ? __vmalloc_node_range_noprof+0x409/0x1630 [ 84.147361][ T6709] __vmalloc_node_range_noprof+0x1394/0x1630 [ 84.147385][ T6709] ? kernel_clone+0x176/0x9d0 [ 84.147407][ T6709] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 84.147432][ T6709] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 84.147455][ T6709] ? trace_kmem_cache_alloc+0xdd/0x100 [ 84.147472][ T6709] ? kernel_clone+0x176/0x9d0 [ 84.147484][ T6709] __vmalloc_node_noprof+0xad/0xf0 [ 84.147500][ T6709] ? kernel_clone+0x176/0x9d0 [ 84.147513][ T6709] copy_process+0x7fb/0x8030 [ 84.147528][ T6709] ? __lock_acquire+0x49f/0x1a40 [ 84.147542][ T6709] ? __pfx_copy_process+0x10/0x10 [ 84.147557][ T6709] ? get_pid_task+0xfc/0x250 [ 84.147570][ T6709] ? get_pid_task+0xfc/0x250 [ 84.147586][ T6709] kernel_clone+0x176/0x9d0 [ 84.147598][ T6709] ? proc_fail_nth_write+0x9f/0x220 [ 84.147615][ T6709] ? __pfx_kernel_clone+0x10/0x10 [ 84.147630][ T6709] ? find_held_lock+0x2b/0x80 [ 84.147643][ T6709] ? ksys_write+0x190/0x250 [ 84.147653][ T6709] ? ksys_write+0x190/0x250 [ 84.147665][ T6709] __do_compat_sys_ia32_clone+0xd4/0x120 [ 84.147678][ T6709] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 84.147696][ T6709] ? fput+0x79/0x100 [ 84.147708][ T6709] ? ksys_write+0x1ac/0x250 [ 84.147731][ T6709] ? __pfx_ksys_write+0x10/0x10 [ 84.147745][ T6709] __do_fast_syscall_32+0xe7/0x970 [ 84.147760][ T6709] ? lockdep_hardirqs_on+0x78/0x100 [ 84.147774][ T6709] do_fast_syscall_32+0x32/0x70 [ 84.147788][ T6709] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.147802][ T6709] RIP: 0023:0xf7f62fec [ 84.147814][ T6709] Code: Unable to access opcode bytes at 0xf7f62fc2. [ 84.147819][ T6709] RSP: 002b:00000000f54264bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 84.147830][ T6709] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 84.147836][ T6709] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.147841][ T6709] RBP: 00000000f7424f80 R08: 0000000000000000 R09: 0000000000000000 [ 84.147847][ T6709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.147853][ T6709] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.147866][ T6709] [ 84.238194][ T6709] Mem-Info: [ 84.239311][ T6709] active_anon:6069 inactive_anon:90 isolated_anon:0 [ 84.239311][ T6709] active_file:0 inactive_file:26202 isolated_file:0 [ 84.239311][ T6709] unevictable:999 dirty:57 writeback:25 [ 84.239311][ T6709] slab_reclaimable:9189 slab_unreclaimable:52846 [ 84.239311][ T6709] mapped:25327 shmem:1307 pagetables:1122 [ 84.239311][ T6709] sec_pagetables:299 bounce:0 [ 84.239311][ T6709] kernel_misc_reclaimable:0 [ 84.239311][ T6709] free:64673 free_pcp:16197 free_cma:0 [ 84.253911][ T6709] Node 0 active_anon:0kB inactive_anon:12kB active_file:0kB inactive_file:12kB unevictable:1996kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:12kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8000kB pagetables:1204kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 84.264549][ T6709] Node 1 active_anon:24276kB inactive_anon:348kB active_file:0kB inactive_file:104796kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:101280kB dirty:216kB writeback:100kB shmem:3228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5492kB pagetables:3284kB sec_pagetables:84kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 84.275512][ T6709] Node 0 DMA free:2264kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:412kB local_pcp:148kB free_cma:0kB [ 84.285163][ T6709] lowmem_reserve[]: 0 280 280 280 280 [ 84.287135][ T6709] Node 0 DMA32 free:13724kB boost:0kB min:12772kB low:15964kB high:19156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:12kB active_file:0kB inactive_file:12kB unevictable:1996kB writepending:12kB zspages:0kB present:1032196kB managed:286892kB mlocked:0kB bounce:0kB free_pcp:12548kB local_pcp:3852kB free_cma:0kB [ 84.297919][ T6709] lowmem_reserve[]: 0 0 0 0 0 [ 84.299456][ T6709] Node 1 DMA32 free:242704kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24276kB inactive_anon:348kB active_file:0kB inactive_file:104796kB unevictable:2000kB writepending:316kB zspages:1984kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:52444kB local_pcp:12756kB free_cma:0kB [ 84.309548][ T6709] lowmem_reserve[]: 0 0 0 0 0 [ 84.311112][ T6709] Node 0 DMA: 86*4kB (UM) 10*8kB (UM) 5*16kB (U) 11*32kB (UM) 8*64kB (UM) 1*128kB (U) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2264kB [ 84.315802][ T6709] Node 0 DMA32: 5*4kB (E) 29*8kB (UE) 40*16kB (UME) 103*32kB (UME) 15*64kB (UE) 5*128kB (UE) 9*256kB (UME) 7*512kB (UME) 2*1024kB (M) 0*2048kB 0*4096kB = 13724kB [ 84.321150][ T6709] Node 1 DMA32: 14*4kB (UE) 7*8kB (UME) 13*16kB (E) 36*32kB (ME) 95*64kB (UME) 27*128kB (UME) 33*256kB (UM) 30*512kB (UM) 21*1024kB (UM) 7*2048kB (UM) 42*4096kB (UME) = 242688kB [ 84.326683][ T6709] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 84.329912][ T6709] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 84.333116][ T6709] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 84.336120][ T6709] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 84.339151][ T6709] 27645 total pagecache pages [ 84.340682][ T6709] 139 pages in swap cache [ 84.342123][ T6709] Free swap = 121196kB [ 84.343589][ T6709] Total swap = 124996kB [ 84.344912][ T6709] 524155 pages RAM [ 84.346128][ T6709] 0 pages HighMem/MovableOnly [ 84.347649][ T6709] 211539 pages reserved [ 84.349072][ T6709] 0 pages cma reserved [ 84.520360][ T29] usb 7-1: USB disconnect, device number 5 [ 84.563768][ T6720] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.636716][ T6722] netlink: 64 bytes leftover after parsing attributes in process `syz.2.232'. [ 84.988889][ T6732] gadgetfs: bound to dummy_udc driver [ 85.217784][ T6740] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.399014][ T6746] netlink: 64 bytes leftover after parsing attributes in process `syz.3.242'. [ 85.400249][ T6742] FAULT_INJECTION: forcing a failure. [ 85.400249][ T6742] name failslab, interval 1, probability 0, space 0, times 0 [ 85.409097][ T6742] CPU: 0 UID: 0 PID: 6742 Comm: syz.1.241 Not tainted syzkaller #0 PREEMPT(full) [ 85.409113][ T6742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.409120][ T6742] Call Trace: [ 85.409139][ T6742] [ 85.409155][ T6742] dump_stack_lvl+0x100/0x190 [ 85.409173][ T6742] should_fail_ex.cold+0x5/0xa [ 85.409186][ T6742] should_failslab+0xc2/0x120 [ 85.409202][ T6742] __kmalloc_cache_noprof+0x91/0x6c0 [ 85.409214][ T6742] ? alloc_pipe_info+0x10e/0x590 [ 85.409228][ T6742] alloc_pipe_info+0x10e/0x590 [ 85.409241][ T6742] splice_direct_to_actor+0x78f/0xa30 [ 85.409255][ T6742] ? __pfx_direct_splice_actor+0x10/0x10 [ 85.409267][ T6742] ? __pfx_aa_file_perm+0x10/0x10 [ 85.409284][ T6742] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 85.409300][ T6742] do_splice_direct+0x174/0x240 [ 85.409312][ T6742] ? __pfx_do_splice_direct+0x10/0x10 [ 85.409324][ T6742] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 85.409335][ T6742] ? bpf_lsm_file_permission+0x9/0x10 [ 85.409345][ T6742] ? security_file_permission+0x76/0x210 [ 85.409361][ T6742] ? rw_verify_area+0xce/0x6d0 [ 85.409378][ T6742] do_sendfile+0xadc/0xe20 [ 85.409397][ T6742] ? __pfx_do_sendfile+0x10/0x10 [ 85.409413][ T6742] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 85.409429][ T6742] ? __fget_files+0x21f/0x3d0 [ 85.409442][ T6742] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 85.409455][ T6742] ? fput+0x79/0x100 [ 85.409466][ T6742] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 85.409478][ T6742] ? ksys_write+0x1ac/0x250 [ 85.409488][ T6742] ? __pfx_ksys_write+0x10/0x10 [ 85.409501][ T6742] __do_fast_syscall_32+0xe7/0x970 [ 85.409515][ T6742] ? lockdep_hardirqs_on+0x78/0x100 [ 85.409529][ T6742] do_fast_syscall_32+0x32/0x70 [ 85.409543][ T6742] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.409556][ T6742] RIP: 0023:0xf7f62fec [ 85.409571][ T6742] Code: Unable to access opcode bytes at 0xf7f62fc2. [ 85.409575][ T6742] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 85.409586][ T6742] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000006 [ 85.409593][ T6742] RDX: 0000000000000000 RSI: 0000000002000009 RDI: 0000000000000000 [ 85.409598][ T6742] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.409604][ T6742] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 85.409610][ T6742] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.409623][ T6742] [ 86.253969][ T6780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.414715][ T6778] jffs2: notice: (6778) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 87.160107][ T6799] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20004 [ 87.163118][ T6799] netlink: 'syz.2.257': attribute type 11 has an invalid length. [ 87.241725][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 87.244716][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.257'. [ 87.255030][ T6799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.258468][ T6799] bond1: (slave bond0): making interface the new active one [ 87.261458][ T6799] bond1: (slave bond0): Enslaving as an active interface with an up link [ 87.273604][ T6799] netlink: 'syz.2.257': attribute type 4 has an invalid length. [ 87.276072][ T6799] netlink: 152 bytes leftover after parsing attributes in process `syz.2.257'. [ 87.280906][ T6799] .`: renamed from bond0 (while UP) [ 87.292903][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 87.546411][ T6803] jffs2: notice: (6803) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 87.868911][ T6821] random: crng reseeded on system resumption [ 88.363992][ T6834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.527667][ T6831] pci_bus 0000:01: busn_res: [bus 01] is released [ 88.682477][ T6832] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 88.702602][ T6832] pci 0000:00:04.0: PCI bridge to [bus 01] [ 88.715422][ T6832] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 88.724605][ T6832] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 88.737425][ T6832] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 88.748585][ T6832] pci 0000:00:04.0: enabling Extended Tags [ 88.771542][ T6832] pci 0000:00:04.0: Adding to iommu group 4 [ 88.793406][ T6832] pci 0000:00:04.0: PCI bridge to [bus 01] [ 88.812514][ T6832] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 88.823444][ T6832] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 88.827295][ T6832] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff]: assigned [ 88.830133][ T6832] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 88.833247][ T6832] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 88.835880][ T6832] pci 0000:00:04.0: PCI bridge to [bus 01] [ 88.838095][ T6832] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 88.842809][ T6832] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 88.846736][ T6832] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 88.960782][ T6832] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 88.982641][ T6832] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 89.622912][ T6849] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20004 [ 89.628664][ T6849] netlink: 'syz.1.268': attribute type 11 has an invalid length. [ 89.640211][ T6850] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.716678][ T6849] __nla_validate_parse: 1 callbacks suppressed [ 89.716699][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 89.728074][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'. [ 89.732390][ T6849] netlink: 'syz.1.268': attribute type 4 has an invalid length. [ 89.735110][ T6849] netlink: 152 bytes leftover after parsing attributes in process `syz.1.268'. [ 89.739717][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 89.808278][ T6854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.270'. [ 91.067387][ T6881] jffs2: notice: (6881) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 91.602890][ T6898] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.663890][ T6948] random: crng reseeded on system resumption [ 95.041801][ T6951] jffs2: notice: (6951) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 95.066243][ T6951] openvswitch: netlink: EtherType 300 is less than min 600 [ 96.071814][ T6988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.097847][ T6989] random: crng reseeded on system resumption [ 96.601003][ T6993] netlink: 32 bytes leftover after parsing attributes in process `syz.1.309'. [ 96.827710][ T6993] jffs2: notice: (6993) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 97.045600][ T7002] random: crng reseeded on system resumption [ 98.185254][ T7022] random: crng reseeded on system resumption [ 99.045031][ T7039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.107075][ T7037] pci_bus 0000:01: busn_res: [bus 01] is released [ 99.178002][ T7043] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 99.200643][ T7043] pci 0000:00:04.0: PCI bridge to [bus 01] [ 99.205977][ T7043] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 99.215675][ T7043] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 99.224947][ T7043] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 99.234202][ T7043] pci 0000:00:04.0: enabling Extended Tags [ 99.259849][ T7043] pci 0000:00:04.0: Adding to iommu group 4 [ 99.284389][ T7043] pci 0000:00:04.0: PCI bridge to [bus 01] [ 99.290641][ T7043] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 99.295864][ T7043] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 99.301103][ T7043] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff]: assigned [ 99.304866][ T7043] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 99.308589][ T7043] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 99.311932][ T7043] pci 0000:00:04.0: PCI bridge to [bus 01] [ 99.314042][ T7043] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 99.318386][ T7043] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 99.322278][ T7043] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 99.343452][ T7041] jffs2: notice: (7041) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 99.413851][ T7043] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 99.423643][ T7043] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 99.532291][ T7049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.332292][ T7064] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.506124][ T7067] random: crng reseeded on system resumption [ 101.351698][ T7096] netlink: 'syz.3.342': attribute type 1 has an invalid length. [ 101.354488][ T7096] netlink: 244 bytes leftover after parsing attributes in process `syz.3.342'. [ 101.359598][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.342'. [ 101.367583][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.342'. [ 101.391061][ T7098] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.078565][ T7116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.299602][ T7118] jffs2: notice: (7118) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 102.528307][ T7123] random: crng reseeded on system resumption [ 102.823996][ T5808] tipc: Subscription rejected, illegal request [ 103.277798][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 103.381984][ T7139] fuse: Bad value for 'fd' [ 103.435358][ T7142] FAULT_INJECTION: forcing a failure. [ 103.435358][ T7142] name failslab, interval 1, probability 0, space 0, times 0 [ 103.440711][ T7142] CPU: 1 UID: 0 PID: 7142 Comm: syz.3.354 Not tainted syzkaller #0 PREEMPT(full) [ 103.440753][ T7142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.440763][ T7142] Call Trace: [ 103.440769][ T7142] [ 103.440775][ T7142] dump_stack_lvl+0x100/0x190 [ 103.440801][ T7142] should_fail_ex.cold+0x5/0xa [ 103.440820][ T7142] should_failslab+0xc2/0x120 [ 103.440842][ T7142] __kmalloc_node_noprof+0x101/0x830 [ 103.440861][ T7142] ? __get_vm_area_node+0x1dc/0x330 [ 103.440883][ T7142] ? __get_vm_area_node+0x208/0x330 [ 103.440903][ T7142] ? __vmalloc_node_range_noprof+0x409/0x1630 [ 103.440931][ T7142] __vmalloc_node_range_noprof+0x409/0x1630 [ 103.440956][ T7142] ? stack_trace_save+0x8e/0xc0 [ 103.440978][ T7142] ? __pfx_stack_trace_save+0x10/0x10 [ 103.441001][ T7142] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 103.441026][ T7142] ? do_seccomp+0x7ae/0x2740 [ 103.441042][ T7142] ? __do_fast_syscall_32+0xe7/0x970 [ 103.441067][ T7142] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 103.441099][ T7142] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 103.441119][ T7142] __vmalloc_node_noprof+0xad/0xf0 [ 103.441141][ T7142] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 103.441163][ T7142] __vmalloc_noprof+0xa3/0x120 [ 103.441191][ T7142] ? __pfx___vmalloc_noprof+0x10/0x10 [ 103.441220][ T7142] bpf_prog_alloc_no_stats+0x58/0x640 [ 103.441244][ T7142] bpf_prog_alloc+0x3b/0x200 [ 103.441266][ T7142] bpf_prog_create_from_user+0xb4/0x2f0 [ 103.441285][ T7142] ? __pfx_seccomp_check_filter+0x10/0x10 [ 103.441304][ T7142] do_seccomp+0x7f7/0x2740 [ 103.441322][ T7142] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 103.441343][ T7142] ? __fget_files+0x21f/0x3d0 [ 103.441358][ T7142] ? __pfx_do_seccomp+0x10/0x10 [ 103.441377][ T7142] ? fput+0x79/0x100 [ 103.441396][ T7142] ? ksys_write+0x1ac/0x250 [ 103.441411][ T7142] ? __pfx_ksys_write+0x10/0x10 [ 103.441430][ T7142] __do_fast_syscall_32+0xe7/0x970 [ 103.441449][ T7142] ? lockdep_hardirqs_on+0x78/0x100 [ 103.441469][ T7142] do_fast_syscall_32+0x32/0x70 [ 103.441489][ T7142] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.441508][ T7142] RIP: 0023:0xf7fd5fec [ 103.441528][ T7142] Code: Unable to access opcode bytes at 0xf7fd5fc2. [ 103.441535][ T7142] RSP: 002b:00000000f545450c EFLAGS: 00000292 ORIG_RAX: 0000000000000162 [ 103.441551][ T7142] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000000000c [ 103.441560][ T7142] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.441569][ T7142] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.441578][ T7142] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 103.441586][ T7142] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.441606][ T7142] [ 103.441647][ T7142] syz.3.354: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 103.551179][ T7142] CPU: 1 UID: 0 PID: 7142 Comm: syz.3.354 Not tainted syzkaller #0 PREEMPT(full) [ 103.551200][ T7142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.551207][ T7142] Call Trace: [ 103.551211][ T7142] [ 103.551215][ T7142] dump_stack_lvl+0x100/0x190 [ 103.551232][ T7142] warn_alloc.cold+0x94/0xa8 [ 103.551244][ T7142] ? __pfx_warn_alloc+0x10/0x10 [ 103.551255][ T7142] ? dump_stack_lvl+0x17c/0x190 [ 103.551267][ T7142] ? rcu_is_watching+0x12/0xc0 [ 103.551295][ T7142] ? __kasan_kmalloc+0x8a/0xb0 [ 103.551310][ T7142] ? __kmalloc_node_noprof+0x357/0x830 [ 103.551323][ T7142] ? __get_vm_area_node+0x1dc/0x330 [ 103.551342][ T7142] ? __get_vm_area_node+0x208/0x330 [ 103.551357][ T7142] ? __vmalloc_node_range_noprof+0x409/0x1630 [ 103.551376][ T7142] __vmalloc_node_range_noprof+0x1394/0x1630 [ 103.551394][ T7142] ? stack_trace_save+0x8e/0xc0 [ 103.551409][ T7142] ? __pfx_stack_trace_save+0x10/0x10 [ 103.551425][ T7142] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 103.551443][ T7142] ? do_seccomp+0x7ae/0x2740 [ 103.551454][ T7142] ? __do_fast_syscall_32+0xe7/0x970 [ 103.551469][ T7142] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 103.551492][ T7142] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 103.551506][ T7142] __vmalloc_node_noprof+0xad/0xf0 [ 103.551522][ T7142] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 103.551538][ T7142] __vmalloc_noprof+0xa3/0x120 [ 103.551553][ T7142] ? __pfx___vmalloc_noprof+0x10/0x10 [ 103.551574][ T7142] bpf_prog_alloc_no_stats+0x58/0x640 [ 103.551591][ T7142] bpf_prog_alloc+0x3b/0x200 [ 103.551606][ T7142] bpf_prog_create_from_user+0xb4/0x2f0 [ 103.551618][ T7142] ? __pfx_seccomp_check_filter+0x10/0x10 [ 103.551631][ T7142] do_seccomp+0x7f7/0x2740 [ 103.551644][ T7142] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 103.551658][ T7142] ? __fget_files+0x21f/0x3d0 [ 103.551669][ T7142] ? __pfx_do_seccomp+0x10/0x10 [ 103.551682][ T7142] ? fput+0x79/0x100 [ 103.551694][ T7142] ? ksys_write+0x1ac/0x250 [ 103.551704][ T7142] ? __pfx_ksys_write+0x10/0x10 [ 103.551717][ T7142] __do_fast_syscall_32+0xe7/0x970 [ 103.551730][ T7142] ? lockdep_hardirqs_on+0x78/0x100 [ 103.551744][ T7142] do_fast_syscall_32+0x32/0x70 [ 103.551757][ T7142] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.551771][ T7142] RIP: 0023:0xf7fd5fec [ 103.551786][ T7142] Code: Unable to access opcode bytes at 0xf7fd5fc2. [ 103.551790][ T7142] RSP: 002b:00000000f545450c EFLAGS: 00000292 ORIG_RAX: 0000000000000162 [ 103.551800][ T7142] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000000000c [ 103.551807][ T7142] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.551813][ T7142] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.551818][ T7142] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 103.551824][ T7142] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.551839][ T7142] [ 103.552027][ T7142] Mem-Info: [ 103.647310][ T7142] active_anon:11866 inactive_anon:97 isolated_anon:0 [ 103.647310][ T7142] active_file:1 inactive_file:25807 isolated_file:0 [ 103.647310][ T7142] unevictable:1000 dirty:483 writeback:0 [ 103.647310][ T7142] slab_reclaimable:9240 slab_unreclaimable:54647 [ 103.647310][ T7142] mapped:31062 shmem:7007 pagetables:1100 [ 103.647310][ T7142] sec_pagetables:299 bounce:0 [ 103.647310][ T7142] kernel_misc_reclaimable:0 [ 103.647310][ T7142] free:63647 free_pcp:10177 free_cma:0 [ 103.661176][ T7142] Node 0 active_anon:0kB inactive_anon:12kB active_file:0kB inactive_file:12kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7968kB pagetables:1204kB sec_pagetables:1108kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 103.671731][ T7142] Node 1 active_anon:47464kB inactive_anon:376kB active_file:4kB inactive_file:103216kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:124220kB dirty:1932kB writeback:0kB shmem:26028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5516kB pagetables:3196kB sec_pagetables:88kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 103.682153][ T7142] Node 0 DMA free:2436kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:396kB local_pcp:108kB free_cma:0kB [ 103.691596][ T7142] lowmem_reserve[]: 0 280 280 280 280 [ 103.693269][ T7142] Node 0 DMA32 free:15912kB boost:0kB min:12772kB low:15964kB high:19156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:12kB active_file:0kB inactive_file:12kB unevictable:2000kB writepending:0kB zspages:0kB present:1032196kB managed:286892kB mlocked:0kB bounce:0kB free_pcp:11084kB local_pcp:3896kB free_cma:0kB [ 103.702941][ T7142] lowmem_reserve[]: 0 0 0 0 0 [ 103.704485][ T7142] Node 1 DMA32 free:236240kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47664kB inactive_anon:376kB active_file:4kB inactive_file:103216kB unevictable:2000kB writepending:1932kB zspages:1952kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:29076kB local_pcp:280kB free_cma:0kB [ 103.714588][ T7142] lowmem_reserve[]: 0 0 0 0 0 [ 103.716100][ T7142] Node 0 DMA: 87*4kB (UM) 15*8kB (UM) 5*16kB (UM) 13*32kB (UM) 9*64kB (UM) 1*128kB (U) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2436kB [ 103.720962][ T7142] Node 0 DMA32: 6*4kB (UE) 8*8kB (UE) 9*16kB (UME) 118*32kB (UME) 20*64kB (UE) 5*128kB (UE) 9*256kB (UME) 7*512kB (UME) 2*1024kB (M) 1*2048kB (M) 0*4096kB = 15912kB [ 103.727065][ T7142] Node 1 DMA32: 14*4kB (UME) 67*8kB (UM) 91*16kB (UM) 49*32kB (UE) 48*64kB (UE) 8*128kB (UME) 2*256kB (U) 33*512kB (UM) 20*1024kB (UM) 9*2048kB (UM) 42*4096kB (UME) = 236064kB [ 103.733920][ T7142] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 103.736916][ T7142] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 103.740142][ T7142] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 103.743063][ T7142] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 103.745582][ T7142] 32957 total pagecache pages [ 103.746926][ T7142] 145 pages in swap cache [ 103.748431][ T7142] Free swap = 121196kB [ 103.749670][ T7142] Total swap = 124996kB [ 103.750891][ T7142] 524155 pages RAM [ 103.752009][ T7142] 0 pages HighMem/MovableOnly [ 103.753414][ T7142] 211539 pages reserved [ 103.754751][ T7142] 0 pages cma reserved [ 103.860329][ T7156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.259907][ T7164] random: crng reseeded on system resumption [ 104.745953][ T7172] fuse: Bad value for 'fd' [ 104.823996][ T7170] jffs2: notice: (7170) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 104.876371][ T7177] warning: `syz.3.368' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.001117][ T7203] fuse: Bad value for 'fd' [ 106.312027][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.377'. [ 106.432462][ T7213] random: crng reseeded on system resumption [ 107.502796][ T7222] random: crng reseeded on system resumption [ 107.549162][ T7220] jffs2: notice: (7220) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 108.861932][ T7242] netlink: 68 bytes leftover after parsing attributes in process `syz.3.384'. [ 109.003456][ T7248] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.243066][ T7251] random: crng reseeded on system resumption [ 110.341511][ T7267] netlink: 'syz.0.392': attribute type 4 has an invalid length. [ 110.351978][ T7267] netlink: 'syz.0.392': attribute type 4 has an invalid length. [ 110.371963][ T7267] syzkaller0: entered promiscuous mode [ 110.374334][ T7267] syzkaller0: entered allmulticast mode [ 110.682501][ T7272] netlink: 68 bytes leftover after parsing attributes in process `syz.0.393'. [ 111.831399][ T7282] xt_CT: You must specify a L4 protocol and not use inversions on it [ 112.339479][ T7297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.867791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 113.033596][ T7308] netlink: 68 bytes leftover after parsing attributes in process `syz.1.402'. [ 113.187771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.197794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 114.109782][ T7327] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.148544][ T7328] random: crng reseeded on system resumption [ 115.666644][ T7351] FAULT_INJECTION: forcing a failure. [ 115.666644][ T7351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.670888][ T7351] CPU: 0 UID: 0 PID: 7351 Comm: syz.0.411 Not tainted syzkaller #0 PREEMPT(full) [ 115.670922][ T7351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.670934][ T7351] Call Trace: [ 115.670941][ T7351] [ 115.670947][ T7351] dump_stack_lvl+0x100/0x190 [ 115.670974][ T7351] should_fail_ex.cold+0x5/0xa [ 115.671004][ T7351] _copy_to_user+0x32/0xd0 [ 115.671026][ T7351] simple_read_from_buffer+0xcb/0x170 [ 115.671045][ T7351] proc_fail_nth_read+0x1af/0x230 [ 115.671063][ T7351] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.671079][ T7351] ? rw_verify_area+0xce/0x6d0 [ 115.671095][ T7351] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.671110][ T7351] vfs_read+0x1e4/0xb40 [ 115.671122][ T7351] ? __pfx_vfs_read+0x10/0x10 [ 115.671131][ T7351] ? find_held_lock+0x2b/0x80 [ 115.671145][ T7351] ? __fget_files+0x215/0x3d0 [ 115.671159][ T7351] ? __fget_files+0x21f/0x3d0 [ 115.671172][ T7351] ksys_read+0x12a/0x250 [ 115.671182][ T7351] ? __pfx_ksys_read+0x10/0x10 [ 115.671200][ T7351] do_int80_emulation+0x14b/0x720 [ 115.671219][ T7351] asm_int80_emulation+0x1a/0x20 [ 115.671230][ T7351] RIP: 0023:0xf71274eb [ 115.671240][ T7351] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 115.671251][ T7351] RSP: 002b:00000000f539b4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 115.671262][ T7351] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f539b5d0 [ 115.671269][ T7351] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 115.671275][ T7351] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 115.671281][ T7351] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 115.671287][ T7351] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 115.671300][ T7351] [ 115.782627][ T7354] netlink: 68 bytes leftover after parsing attributes in process `syz.2.413'. [ 116.277773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.297885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 116.971520][ T7380] netlink: 68 bytes leftover after parsing attributes in process `syz.0.423'. [ 117.047100][ T7384] random: crng reseeded on system resumption [ 117.758062][ T7394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.426'. [ 117.838373][ T7398] FAULT_INJECTION: forcing a failure. [ 117.838373][ T7398] name failslab, interval 1, probability 0, space 0, times 0 [ 117.842730][ T7398] CPU: 0 UID: 0 PID: 7398 Comm: syz.0.428 Not tainted syzkaller #0 PREEMPT(full) [ 117.842771][ T7398] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.842778][ T7398] Call Trace: [ 117.842783][ T7398] [ 117.842788][ T7398] dump_stack_lvl+0x100/0x190 [ 117.842818][ T7398] should_fail_ex.cold+0x5/0xa [ 117.842832][ T7398] should_failslab+0xc2/0x120 [ 117.842848][ T7398] kmem_cache_alloc_noprof+0x91/0x6a0 [ 117.842863][ T7398] ? do_getname+0x35/0x390 [ 117.842879][ T7398] do_getname+0x35/0x390 [ 117.842910][ T7398] do_sys_openat2+0xc7/0x1e0 [ 117.842928][ T7398] ? __pfx_do_sys_openat2+0x10/0x10 [ 117.842944][ T7398] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 117.842962][ T7398] __ia32_compat_sys_openat+0x12d/0x210 [ 117.842978][ T7398] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 117.842993][ T7398] ? fput+0x79/0x100 [ 117.843006][ T7398] ? ksys_write+0x1ac/0x250 [ 117.843015][ T7398] ? __pfx_ksys_write+0x10/0x10 [ 117.843028][ T7398] __do_fast_syscall_32+0xe7/0x970 [ 117.843042][ T7398] ? lockdep_hardirqs_on+0x78/0x100 [ 117.843056][ T7398] do_fast_syscall_32+0x32/0x70 [ 117.843070][ T7398] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.843084][ T7398] RIP: 0023:0xf6feefec [ 117.843100][ T7398] Code: Unable to access opcode bytes at 0xf6feefc2. [ 117.843105][ T7398] RSP: 002b:00000000f53bc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 117.843116][ T7398] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000180 [ 117.843122][ T7398] RDX: 0000000000088882 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.843128][ T7398] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.843134][ T7398] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 117.843140][ T7398] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.843153][ T7398] [ 118.848492][ T7407] xt_CT: You must specify a L4 protocol and not use inversions on it [ 119.116474][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'. [ 119.968119][ T7426] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 120.119931][ T7436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.780357][ T7450] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.958586][ T7444] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 120.960698][ T7444] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 120.963535][ T7444] vhci_hcd vhci_hcd.0: Device attached [ 120.979974][ T7456] vhci_hcd: connection closed [ 120.984102][ T5808] vhci_hcd vhci_hcd.1: stop threads [ 120.990265][ T5808] vhci_hcd vhci_hcd.1: release socket [ 120.993069][ T5808] vhci_hcd vhci_hcd.1: disconnect device [ 121.059869][ T7462] netlink: 'syz.0.446': attribute type 1 has an invalid length. [ 121.062706][ T7462] netlink: 244 bytes leftover after parsing attributes in process `syz.0.446'. [ 121.148176][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.446'. [ 121.153815][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.446'. [ 121.252984][ T7470] FAULT_INJECTION: forcing a failure. [ 121.252984][ T7470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.261051][ T7470] CPU: 2 UID: 0 PID: 7470 Comm: syz.3.447 Not tainted syzkaller #0 PREEMPT(full) [ 121.261073][ T7470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.261082][ T7470] Call Trace: [ 121.261090][ T7470] [ 121.261097][ T7470] dump_stack_lvl+0x100/0x190 [ 121.261126][ T7470] should_fail_ex.cold+0x5/0xa [ 121.261148][ T7470] _copy_to_user+0x32/0xd0 [ 121.261177][ T7470] simple_read_from_buffer+0xcb/0x170 [ 121.261206][ T7470] proc_fail_nth_read+0x1af/0x230 [ 121.261232][ T7470] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 121.261277][ T7470] ? rw_verify_area+0xce/0x6d0 [ 121.261305][ T7470] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 121.261330][ T7470] vfs_read+0x1e4/0xb40 [ 121.261351][ T7470] ? __pfx_vfs_read+0x10/0x10 [ 121.261366][ T7470] ? find_held_lock+0x2b/0x80 [ 121.261389][ T7470] ? __fget_files+0x215/0x3d0 [ 121.261411][ T7470] ? __fget_files+0x21f/0x3d0 [ 121.261434][ T7470] ksys_read+0x12a/0x250 [ 121.261452][ T7470] ? __pfx_ksys_read+0x10/0x10 [ 121.261476][ T7470] do_int80_emulation+0x14b/0x720 [ 121.261504][ T7470] asm_int80_emulation+0x1a/0x20 [ 121.261522][ T7470] RIP: 0023:0xf71d74eb [ 121.261537][ T7470] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 121.261555][ T7470] RSP: 002b:00000000f54544bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 121.261574][ T7470] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f54545d0 [ 121.261586][ T7470] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 121.261595][ T7470] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 121.261606][ T7470] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 121.261616][ T7470] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 121.261640][ T7470] [ 121.613547][ T7478] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.768633][ T7484] 9p: Bad value for 'rfdno' [ 122.007776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 122.236355][ T7492] xt_CT: You must specify a L4 protocol and not use inversions on it [ 122.412469][ T7484] Console: switching to colour dummy device 80x25 [ 123.066808][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'. [ 123.072247][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'. [ 123.237617][ T7512] can0: slcan on ptm0. [ 123.348026][ T7518] loop2: detected capacity change from 0 to 7 [ 123.357165][ T7518] Dev loop2: unable to read RDB block 7 [ 123.361752][ T7518] loop2: unable to read partition table [ 123.364147][ T7518] loop2: partition table beyond EOD, truncated [ 123.366651][ T7518] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 123.380124][ T7518] Bluetooth: MGMT ver 1.23 [ 123.609120][ T7528] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.190965][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'. [ 124.194989][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 124.229773][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'. [ 124.233820][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'. [ 124.332803][ T7507] can0 (unregistered): slcan off ptm0. [ 125.736595][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.474'. [ 125.772446][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'. [ 126.023495][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'. [ 126.044047][ T7593] FAULT_INJECTION: forcing a failure. [ 126.044047][ T7593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.047471][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'. [ 126.065325][ T7593] CPU: 0 UID: 0 PID: 7593 Comm: syz.3.480 Not tainted syzkaller #0 PREEMPT(full) [ 126.065343][ T7593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.065350][ T7593] Call Trace: [ 126.065354][ T7593] [ 126.065359][ T7593] dump_stack_lvl+0x100/0x190 [ 126.065389][ T7593] should_fail_ex.cold+0x5/0xa [ 126.065403][ T7593] _copy_from_user+0x2e/0xd0 [ 126.065422][ T7593] get_compat_msghdr+0xb3/0x480 [ 126.065436][ T7593] ? __pfx_get_compat_msghdr+0x10/0x10 [ 126.065451][ T7593] ___sys_sendmsg+0x1b6/0x1e0 [ 126.065465][ T7593] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.065484][ T7593] ? find_held_lock+0x2b/0x80 [ 126.065507][ T7593] __sys_sendmsg+0x160/0x210 [ 126.065522][ T7593] ? __pfx___sys_sendmsg+0x10/0x10 [ 126.065542][ T7593] ? __pfx_ksys_write+0x10/0x10 [ 126.065555][ T7593] __do_fast_syscall_32+0xe7/0x970 [ 126.065571][ T7593] ? lockdep_hardirqs_on+0x78/0x100 [ 126.065585][ T7593] do_fast_syscall_32+0x32/0x70 [ 126.065599][ T7593] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 126.065613][ T7593] RIP: 0023:0xf7fd5fec [ 126.065626][ T7593] Code: Unable to access opcode bytes at 0xf7fd5fc2. [ 126.065631][ T7593] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 126.065642][ T7593] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800003c0 [ 126.065649][ T7593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 126.065655][ T7593] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 126.065661][ T7593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.065667][ T7593] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 126.065680][ T7593] [ 126.066070][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.480'. [ 126.172833][ T7595] veth0_virt_wifi: entered allmulticast mode [ 126.196260][ T7594] veth0_virt_wifi: left allmulticast mode [ 126.303882][ T7606] No control pipe specified [ 127.335078][ T7623] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.367596][ T7625] FAULT_INJECTION: forcing a failure. [ 127.367596][ T7625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.374559][ T7625] CPU: 1 UID: 0 PID: 7625 Comm: syz.0.489 Not tainted syzkaller #0 PREEMPT(full) [ 127.374576][ T7625] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.374583][ T7625] Call Trace: [ 127.374588][ T7625] [ 127.374594][ T7625] dump_stack_lvl+0x100/0x190 [ 127.374612][ T7625] should_fail_ex.cold+0x5/0xa [ 127.374626][ T7625] _copy_to_user+0x32/0xd0 [ 127.374644][ T7625] simple_read_from_buffer+0xcb/0x170 [ 127.374663][ T7625] proc_fail_nth_read+0x1af/0x230 [ 127.374680][ T7625] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.374697][ T7625] ? rw_verify_area+0xce/0x6d0 [ 127.374712][ T7625] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.374727][ T7625] vfs_read+0x1e4/0xb40 [ 127.374739][ T7625] ? __pfx_vfs_read+0x10/0x10 [ 127.374750][ T7625] ? find_held_lock+0x2b/0x80 [ 127.374764][ T7625] ? __fget_files+0x215/0x3d0 [ 127.374777][ T7625] ? __fget_files+0x21f/0x3d0 [ 127.374791][ T7625] ksys_read+0x12a/0x250 [ 127.374800][ T7625] ? __pfx_ksys_read+0x10/0x10 [ 127.374814][ T7625] do_int80_emulation+0x14b/0x720 [ 127.374832][ T7625] asm_int80_emulation+0x1a/0x20 [ 127.374843][ T7625] RIP: 0023:0xf71274eb [ 127.374870][ T7625] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 127.374882][ T7625] RSP: 002b:00000000f53dd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 127.374893][ T7625] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53dd5d0 [ 127.374900][ T7625] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 127.374906][ T7625] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.374914][ T7625] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 127.374920][ T7625] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.374933][ T7625] [ 127.405260][ T7627] netlink: 'syz.1.490': attribute type 1 has an invalid length. [ 127.448286][ T7627] netlink: 244 bytes leftover after parsing attributes in process `syz.1.490'. [ 128.307847][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 128.497775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.866616][ T7666] FAULT_INJECTION: forcing a failure. [ 128.866616][ T7666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.873348][ T7666] CPU: 3 UID: 0 PID: 7666 Comm: syz.3.500 Not tainted syzkaller #0 PREEMPT(full) [ 128.873375][ T7666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.873386][ T7666] Call Trace: [ 128.873392][ T7666] [ 128.873401][ T7666] dump_stack_lvl+0x100/0x190 [ 128.873428][ T7666] should_fail_ex.cold+0x5/0xa [ 128.873449][ T7666] _copy_from_user+0x2e/0xd0 [ 128.873477][ T7666] get_compat_msghdr+0xb3/0x480 [ 128.873495][ T7666] ? __pfx_get_compat_msghdr+0x10/0x10 [ 128.873520][ T7666] ___sys_sendmsg+0x1b6/0x1e0 [ 128.873542][ T7666] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.873571][ T7666] ? find_held_lock+0x2b/0x80 [ 128.873605][ T7666] __sys_sendmsg+0x160/0x210 [ 128.873628][ T7666] ? __pfx___sys_sendmsg+0x10/0x10 [ 128.873658][ T7666] ? __pfx_ksys_write+0x10/0x10 [ 128.873678][ T7666] __do_fast_syscall_32+0xe7/0x970 [ 128.873708][ T7666] ? lockdep_hardirqs_on+0x78/0x100 [ 128.873730][ T7666] do_fast_syscall_32+0x32/0x70 [ 128.873753][ T7666] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 128.873774][ T7666] RIP: 0023:0xf7fd5fec [ 128.873793][ T7666] Code: Unable to access opcode bytes at 0xf7fd5fc2. [ 128.873799][ T7666] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 128.873814][ T7666] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 128.873823][ T7666] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.873831][ T7666] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 128.873839][ T7666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.873848][ T7666] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 128.873865][ T7666] [ 129.303087][ T7678] netlink: 'syz.0.504': attribute type 1 has an invalid length. [ 129.305896][ T7678] __nla_validate_parse: 3 callbacks suppressed [ 129.305906][ T7678] netlink: 244 bytes leftover after parsing attributes in process `syz.0.504'. [ 129.315259][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.504'. [ 129.320529][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.504'. [ 129.561601][ T7685] netlink: 'syz.2.514': attribute type 1 has an invalid length. [ 129.564124][ T7685] netlink: 244 bytes leftover after parsing attributes in process `syz.2.514'. [ 129.567705][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.514'. [ 129.573757][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.514'. [ 130.166522][ T7702] random: crng reseeded on system resumption [ 131.121921][ T7716] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 131.123328][ T7721] xt_l2tp: invalid flags combination: 0 [ 131.160324][ T7725] netlink: 'syz.1.518': attribute type 1 has an invalid length. [ 131.162821][ T7725] netlink: 244 bytes leftover after parsing attributes in process `syz.1.518'. [ 131.166255][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.518'. [ 131.170548][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.518'. [ 131.349460][ T7736] FAULT_INJECTION: forcing a failure. [ 131.349460][ T7736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.354701][ T7736] CPU: 3 UID: 0 PID: 7736 Comm: syz.1.522 Not tainted syzkaller #0 PREEMPT(full) [ 131.354723][ T7736] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.354733][ T7736] Call Trace: [ 131.354740][ T7736] [ 131.354747][ T7736] dump_stack_lvl+0x100/0x190 [ 131.354773][ T7736] should_fail_ex.cold+0x5/0xa [ 131.354793][ T7736] _copy_from_user+0x2e/0xd0 [ 131.354819][ T7736] get_compat_msghdr+0xb3/0x480 [ 131.354858][ T7736] ? __pfx_get_compat_msghdr+0x10/0x10 [ 131.354884][ T7736] ___sys_sendmsg+0x1b6/0x1e0 [ 131.354906][ T7736] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.354935][ T7736] ? find_held_lock+0x2b/0x80 [ 131.354970][ T7736] __sys_sendmsg+0x160/0x210 [ 131.354994][ T7736] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.355023][ T7736] ? __pfx_ksys_write+0x10/0x10 [ 131.355044][ T7736] __do_fast_syscall_32+0xe7/0x970 [ 131.355066][ T7736] ? lockdep_hardirqs_on+0x78/0x100 [ 131.355087][ T7736] do_fast_syscall_32+0x32/0x70 [ 131.355108][ T7736] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 131.355128][ T7736] RIP: 0023:0xf7f62fec [ 131.355150][ T7736] Code: Unable to access opcode bytes at 0xf7f62fc2. [ 131.355156][ T7736] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 131.355172][ T7736] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000340 [ 131.355182][ T7736] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.355192][ T7736] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 131.355201][ T7736] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 131.355211][ T7736] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 131.355232][ T7736] [ 131.532394][ T7739] loop6: detected capacity change from 0 to 524288000 [ 131.989325][ T7743] netlink: 68 bytes leftover after parsing attributes in process `syz.1.534'. [ 132.078172][ T7748] random: crng reseeded on system resumption [ 132.822028][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.824436][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.324111][ T7759] netlink: 'syz.1.530': attribute type 1 has an invalid length. [ 133.409270][ T7763] loop2: detected capacity change from 0 to 7 [ 133.418250][ T7763] Dev loop2: unable to read RDB block 7 [ 133.419954][ T7763] loop2: unable to read partition table [ 133.422260][ T7763] loop2: partition table beyond EOD, truncated [ 133.424316][ T7763] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 133.660885][ T7772] netlink: 'syz.2.536': attribute type 1 has an invalid length. [ 133.792433][ T7776] /dev/nullb0: Can't open blockdev [ 134.222177][ T7789] netlink: 'syz.3.544': attribute type 1 has an invalid length. [ 134.353318][ T7792] random: crng reseeded on system resumption [ 134.838858][ T7805] __nla_validate_parse: 12 callbacks suppressed [ 134.838872][ T7805] netlink: 68 bytes leftover after parsing attributes in process `syz.3.548'. [ 135.393349][ T42] audit: type=1800 audit(1786816040.956:7): pid=7820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.552" name="memory_backed" dev="configfs" ino=20890 res=0 errno=0 [ 135.405809][ T42] audit: type=1800 audit(1786816040.966:8): pid=7820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.552" name="zoned" dev="configfs" ino=20105 res=0 errno=0 [ 135.406215][ T7820] netlink: 'syz.1.552': attribute type 1 has an invalid length. [ 135.418274][ T7820] netlink: 84 bytes leftover after parsing attributes in process `syz.1.552'. [ 135.421145][ T7820] netlink: 'syz.1.552': attribute type 2 has an invalid length. [ 135.423561][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.552'. [ 135.478407][ T7824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.949506][ T7829] netlink: 'syz.3.556': attribute type 1 has an invalid length. [ 135.951872][ T7829] netlink: 244 bytes leftover after parsing attributes in process `syz.3.556'. [ 135.955718][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.556'. [ 135.959632][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.556'. [ 136.239921][ T7839] input: syz0 as /devices/virtual/input/input40 [ 136.355898][ T7843] SET target dimension over the limit! [ 137.012183][ T7845] loop5: detected capacity change from 0 to 7 [ 137.017122][ T7845] Dev loop5: unable to read RDB block 7 [ 137.020816][ T7845] loop5: AHDI p1 p2 p3 [ 137.022730][ T7845] loop5: partition table partially beyond EOD, truncated [ 137.029661][ T7845] loop5: p1 start 1818582900 is beyond EOD, truncated [ 137.032706][ T7845] loop5: p3 start 335544320 is beyond EOD, truncated [ 137.164520][ T7848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.196649][ T7862] random: crng reseeded on system resumption [ 138.328683][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'. [ 138.399477][ T7869] lo speed is unknown, defaulting to 1000 [ 138.402876][ T7869] lo speed is unknown, defaulting to 1000 [ 138.406948][ T7869] lo speed is unknown, defaulting to 1000 [ 138.412249][ T7869] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 138.418711][ T7869] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 138.423869][ T7869] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 138.432601][ T7869] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 138.444342][ T7869] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 138.494363][ T7869] lo speed is unknown, defaulting to 1000 [ 138.497570][ T7869] lo speed is unknown, defaulting to 1000 [ 138.501239][ T7869] lo speed is unknown, defaulting to 1000 [ 138.503905][ T7869] lo speed is unknown, defaulting to 1000 [ 138.506452][ T7869] lo speed is unknown, defaulting to 1000 [ 138.674787][ T7874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.164027][ T7881] xt_CT: You must specify a L4 protocol and not use inversions on it [ 139.260142][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.573'. [ 139.282909][ T7885] FAULT_INJECTION: forcing a failure. [ 139.282909][ T7885] name failslab, interval 1, probability 0, space 0, times 0 [ 139.287985][ T7883] lo speed is unknown, defaulting to 1000 [ 139.291272][ T7885] CPU: 1 UID: 0 PID: 7885 Comm: syz.2.574 Not tainted syzkaller #0 PREEMPT(full) [ 139.291296][ T7885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.291310][ T7885] Call Trace: [ 139.291316][ T7885] [ 139.291325][ T7885] dump_stack_lvl+0x100/0x190 [ 139.291358][ T7885] should_fail_ex.cold+0x5/0xa [ 139.291381][ T7885] should_failslab+0xc2/0x120 [ 139.291410][ T7885] __kmalloc_cache_noprof+0x91/0x6c0 [ 139.291433][ T7885] ? nf_tables_newtable+0xd0a/0x1a90 [ 139.291468][ T7885] nf_tables_newtable+0xd0a/0x1a90 [ 139.291500][ T7885] ? __pfx_nf_tables_newtable+0x10/0x10 [ 139.291533][ T7885] ? __nla_parse+0x40/0x60 [ 139.291560][ T7885] nfnetlink_rcv_batch+0x1410/0x2880 [ 139.291609][ T7885] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 139.291642][ T7885] ? kasan_save_stack+0x30/0x50 [ 139.291665][ T7885] ? kasan_save_track+0x14/0x30 [ 139.291687][ T7885] ? __kasan_slab_alloc+0x89/0x90 [ 139.291711][ T7885] ? kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 139.291734][ T7885] ? kmalloc_reserve+0x148/0x350 [ 139.291790][ T7885] ? __nla_parse+0x40/0x60 [ 139.291815][ T7885] nfnetlink_rcv+0x3bd/0x440 [ 139.291842][ T7885] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 139.291876][ T7885] netlink_unicast+0x585/0x850 [ 139.291904][ T7885] ? __pfx_netlink_unicast+0x10/0x10 [ 139.291934][ T7885] netlink_sendmsg+0x8b0/0xda0 [ 139.291961][ T7885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.291987][ T7885] ? apparmor_socket_sendmsg+0x15b/0x270 [ 139.292014][ T7885] ____sys_sendmsg+0xa4d/0xbe0 [ 139.292033][ T7885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.292058][ T7885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.292090][ T7885] ___sys_sendmsg+0x190/0x1e0 [ 139.292114][ T7885] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.292148][ T7885] ? find_held_lock+0x2b/0x80 [ 139.292188][ T7885] __sys_sendmsg+0x160/0x210 [ 139.292217][ T7885] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.292251][ T7885] ? __pfx_ksys_write+0x10/0x10 [ 139.292275][ T7885] __do_fast_syscall_32+0xe7/0x970 [ 139.292299][ T7885] ? lockdep_hardirqs_on+0x78/0x100 [ 139.292324][ T7885] do_fast_syscall_32+0x32/0x70 [ 139.292349][ T7885] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.292373][ T7885] RIP: 0023:0xf703efec [ 139.292398][ T7885] Code: Unable to access opcode bytes at 0xf703efc2. [ 139.292407][ T7885] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 139.292426][ T7885] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 139.292438][ T7885] RDX: 0000000020004004 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.292449][ T7885] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.292459][ T7885] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 139.292470][ T7885] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.292494][ T7885] [ 139.307839][ T5880] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 139.363449][ T7887] siw: device registration error -23 [ 139.520293][ T5880] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 139.524385][ T5880] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 139.527608][ T5880] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 139.532063][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.540398][ T5880] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 139.554470][ T5880] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 139.639509][ T7896] FAULT_INJECTION: forcing a failure. [ 139.639509][ T7896] name failslab, interval 1, probability 0, space 0, times 0 [ 139.644672][ T7896] CPU: 2 UID: 0 PID: 7896 Comm: syz.0.577 Not tainted syzkaller #0 PREEMPT(full) [ 139.644695][ T7896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.644704][ T7896] Call Trace: [ 139.644710][ T7896] [ 139.644716][ T7896] dump_stack_lvl+0x100/0x190 [ 139.644740][ T7896] should_fail_ex.cold+0x5/0xa [ 139.644757][ T7896] should_failslab+0xc2/0x120 [ 139.644779][ T7896] __kmalloc_noprof+0xfc/0x820 [ 139.644795][ T7896] ? __kasan_kmalloc+0xaa/0xb0 [ 139.644813][ T7896] ? nla_strdup+0xc3/0x150 [ 139.644831][ T7896] nla_strdup+0xc3/0x150 [ 139.644847][ T7896] nf_tables_newtable+0xd9c/0x1a90 [ 139.644873][ T7896] ? __pfx_nf_tables_newtable+0x10/0x10 [ 139.644898][ T7896] ? __nla_parse+0x40/0x60 [ 139.644915][ T7896] nfnetlink_rcv_batch+0x1410/0x2880 [ 139.644947][ T7896] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 139.644972][ T7896] ? kasan_save_stack+0x30/0x50 [ 139.644989][ T7896] ? kasan_save_track+0x14/0x30 [ 139.645005][ T7896] ? __kasan_slab_alloc+0x89/0x90 [ 139.645022][ T7896] ? kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 139.645039][ T7896] ? kmalloc_reserve+0x148/0x350 [ 139.645082][ T7896] ? __nla_parse+0x40/0x60 [ 139.645101][ T7896] nfnetlink_rcv+0x3bd/0x440 [ 139.645121][ T7896] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 139.645251][ T7896] netlink_unicast+0x585/0x850 [ 139.645271][ T7896] ? __pfx_netlink_unicast+0x10/0x10 [ 139.645293][ T7896] netlink_sendmsg+0x8b0/0xda0 [ 139.645314][ T7896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.645332][ T7896] ? apparmor_socket_sendmsg+0x15b/0x270 [ 139.645352][ T7896] ____sys_sendmsg+0xa4d/0xbe0 [ 139.645368][ T7896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.645386][ T7896] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.645409][ T7896] ___sys_sendmsg+0x190/0x1e0 [ 139.645427][ T7896] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.645453][ T7896] ? find_held_lock+0x2b/0x80 [ 139.645489][ T7896] __sys_sendmsg+0x160/0x210 [ 139.645510][ T7896] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.645535][ T7896] ? __pfx_ksys_write+0x10/0x10 [ 139.645553][ T7896] __do_fast_syscall_32+0xe7/0x970 [ 139.645573][ T7896] ? lockdep_hardirqs_on+0x78/0x100 [ 139.645591][ T7896] do_fast_syscall_32+0x32/0x70 [ 139.645609][ T7896] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.645628][ T7896] RIP: 0023:0xf6feefec [ 139.645649][ T7896] Code: Unable to access opcode bytes at 0xf6feefc2. [ 139.645655][ T7896] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 139.645671][ T7896] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 139.645680][ T7896] RDX: 0000000020004004 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.645688][ T7896] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.645711][ T7896] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 139.645719][ T7896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.645737][ T7896] [ 139.776105][ T7879] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 139.863895][ T7902] xt_CT: You must specify a L4 protocol and not use inversions on it [ 139.892457][ T7903] random: crng reseeded on system resumption [ 140.069640][ T7907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.288928][ T7904] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 140.295942][ T7904] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 140.304019][ T7904] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 140.483120][ T7878] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 140.491482][ T149] usb 6-1: USB disconnect, device number 6 [ 140.516165][ T149] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 140.521479][ T149] spcp8x5 6-1:1.0: device disconnected [ 140.649732][ T7911] netlink: 'syz.0.582': attribute type 1 has an invalid length. [ 140.652280][ T7911] netlink: 244 bytes leftover after parsing attributes in process `syz.0.582'. [ 140.656079][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.582'. [ 140.661347][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.582'. [ 140.737101][ T7913] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.111569][ T7923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.127781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 141.249609][ T7926] netlink: 27 bytes leftover after parsing attributes in process `syz.2.587'. [ 141.955809][ T7939] lo speed is unknown, defaulting to 1000 [ 142.118269][ T7944] random: crng reseeded on system resumption [ 142.352968][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'. [ 142.530811][ T7949] siw: device registration error -23 [ 142.804285][ T7946] lo speed is unknown, defaulting to 1000 [ 143.124331][ T7961] X25: received unknown 00 with LCI 000 [ 144.029316][ T7990] netlink: 'syz.3.601': attribute type 1 has an invalid length. [ 144.032551][ T7990] netlink: 244 bytes leftover after parsing attributes in process `syz.3.601'. [ 144.040000][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.601'. [ 144.045065][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.601'. [ 144.410450][ T8002] jffs2: notice: (8002) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 144.495104][ T7997] jffs2: notice: (7997) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 144.562005][ T8009] netlink: 'syz.3.608': attribute type 1 has an invalid length. [ 144.572678][ T8009] netlink: 244 bytes leftover after parsing attributes in process `syz.3.608'. [ 144.590461][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.608'. [ 145.321034][ T8035] netlink: 'syz.2.619': attribute type 1 has an invalid length. [ 145.549909][ T8044] xt_CT: You must specify a L4 protocol and not use inversions on it [ 145.668027][ T8048] __nla_validate_parse: 5 callbacks suppressed [ 145.668046][ T8048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 145.675518][ T8048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 145.791393][ T8052] lo speed is unknown, defaulting to 1000 [ 145.899825][ T8055] lo speed is unknown, defaulting to 1000 [ 146.053505][ T8067] random: crng reseeded on system resumption [ 146.430808][ T8071] netlink: 'syz.0.631': attribute type 1 has an invalid length. [ 146.445614][ T8071] netlink: 244 bytes leftover after parsing attributes in process `syz.0.631'. [ 146.463421][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.631'. [ 147.075403][ T8076] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.184067][ T8078] netlink: 292 bytes leftover after parsing attributes in process `syz.2.634'. [ 147.187695][ T8078] netlink: 292 bytes leftover after parsing attributes in process `syz.2.634'. [ 147.276464][ T8080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.635'. [ 147.301198][ T8082] netlink: 88 bytes leftover after parsing attributes in process `syz.0.637'. [ 147.445405][ T8090] netlink: 60 bytes leftover after parsing attributes in process `syz.1.640'. [ 147.499353][ T8091] random: crng reseeded on system resumption [ 148.772072][ T8108] lo speed is unknown, defaulting to 1000 [ 148.830794][ T8113] netlink: 68 bytes leftover after parsing attributes in process `syz.0.652'. [ 148.922715][ T8114] random: crng reseeded on system resumption [ 149.306813][ T8117] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.858335][ T8134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.279784][ T8154] Illegal XDP return value 1372043509 on prog (id 76) dev N/A, expect packet loss! [ 151.288716][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 151.412710][ T8156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.651220][ T8160] lo speed is unknown, defaulting to 1000 [ 151.657895][ T8162] netlink: 'syz.1.658': attribute type 1 has an invalid length. [ 151.668415][ T8162] netlink: 244 bytes leftover after parsing attributes in process `syz.1.658'. [ 151.856107][ T8173] random: crng reseeded on system resumption [ 152.123182][ T8178] jffs2: notice: (8178) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 152.443531][ T8187] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.480241][ T8191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.509948][ T8208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.671'. [ 153.513663][ T8208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.671'. [ 153.920989][ T8221] xt_CT: You must specify a L4 protocol and not use inversions on it [ 154.591208][ T8246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.683'. [ 154.595285][ T8246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.683'. [ 155.720645][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.687'. [ 155.823647][ T8269] netlink: 68 bytes leftover after parsing attributes in process `syz.0.689'. [ 156.031076][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.692'. [ 156.034466][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.692'. [ 156.073835][ T8276] xt_CT: You must specify a L4 protocol and not use inversions on it [ 156.334966][ T8296] xt_CT: You must specify a L4 protocol and not use inversions on it [ 156.501765][ T8299] random: crng reseeded on system resumption [ 157.452951][ T8316] pim6reg: entered allmulticast mode [ 157.468058][ T8316] pim6reg: left allmulticast mode [ 157.903845][ T8319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.248321][ T8322] __nla_validate_parse: 1 callbacks suppressed [ 158.248341][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 158.255621][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 158.547951][ T8330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.710'. [ 159.526961][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.718'. [ 159.535447][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.718'. [ 160.251005][ T8373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.826376][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.729'. [ 160.835337][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.729'. [ 161.006291][ T8399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.254351][ T8405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.416706][ T8415] FAULT_INJECTION: forcing a failure. [ 161.416706][ T8415] name failslab, interval 1, probability 0, space 0, times 0 [ 161.422459][ T8415] CPU: 1 UID: 0 PID: 8415 Comm: syz.0.737 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.422477][ T8415] Tainted: [L]=SOFTLOCKUP [ 161.422481][ T8415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 161.422493][ T8415] Call Trace: [ 161.422497][ T8415] [ 161.422502][ T8415] dump_stack_lvl+0x100/0x190 [ 161.422573][ T8415] should_fail_ex.cold+0x5/0xa [ 161.422593][ T8415] should_failslab+0xc2/0x120 [ 161.422615][ T8415] __kmalloc_cache_noprof+0x91/0x6c0 [ 161.422627][ T8415] ? genl_start+0x1e8/0x970 [ 161.422687][ T8415] genl_start+0x1e8/0x970 [ 161.422725][ T8415] __netlink_dump_start+0x60e/0x990 [ 161.422740][ T8415] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 161.422756][ T8415] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 161.422774][ T8415] ? rcu_is_watching+0x12/0xc0 [ 161.422795][ T8415] ? __pfx_genl_start+0x10/0x10 [ 161.422808][ T8415] ? __pfx_genl_dumpit+0x10/0x10 [ 161.422821][ T8415] ? __pfx_genl_done+0x10/0x10 [ 161.422835][ T8415] ? bpf_lsm_capable+0x9/0x10 [ 161.422847][ T8415] ? security_capable+0x80/0x260 [ 161.422876][ T8415] genl_rcv_msg+0x471/0x800 [ 161.422892][ T8415] ? __pfx_genl_rcv_msg+0x10/0x10 [ 161.422907][ T8415] ? __pfx_nl802154_dump_llsec_devkey+0x10/0x10 [ 161.422978][ T8415] ? __lock_acquire+0x49f/0x1a40 [ 161.422998][ T8415] netlink_rcv_skb+0x159/0x420 [ 161.423017][ T8415] ? __pfx_genl_rcv_msg+0x10/0x10 [ 161.423044][ T8415] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 161.423075][ T8415] ? netlink_deliver_tap+0x1ae/0xcc0 [ 161.423096][ T8415] genl_rcv+0x28/0x40 [ 161.423108][ T8415] netlink_unicast+0x585/0x850 [ 161.423123][ T8415] ? __pfx_netlink_unicast+0x10/0x10 [ 161.423140][ T8415] netlink_sendmsg+0x8b0/0xda0 [ 161.423154][ T8415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.423169][ T8415] ? apparmor_socket_sendmsg+0x15b/0x270 [ 161.423191][ T8415] ____sys_sendmsg+0xa4d/0xbe0 [ 161.423210][ T8415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.423224][ T8415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.423242][ T8415] ___sys_sendmsg+0x190/0x1e0 [ 161.423255][ T8415] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.423273][ T8415] ? find_held_lock+0x2b/0x80 [ 161.423295][ T8415] __sys_sendmsg+0x160/0x210 [ 161.423311][ T8415] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.423330][ T8415] ? __pfx_ksys_write+0x10/0x10 [ 161.423344][ T8415] __do_fast_syscall_32+0xe7/0x970 [ 161.423367][ T8415] ? lockdep_hardirqs_on+0x78/0x100 [ 161.423381][ T8415] do_fast_syscall_32+0x32/0x70 [ 161.423395][ T8415] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.423409][ T8415] RIP: 0023:0xf6feefec [ 161.423428][ T8415] Code: Unable to access opcode bytes at 0xf6feefc2. [ 161.423433][ T8415] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 161.423445][ T8415] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000b40 [ 161.423451][ T8415] RDX: 000000000000005c RSI: 0000000000000000 RDI: 0000000000000000 [ 161.423458][ T8415] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.423464][ T8415] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 161.423469][ T8415] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.423483][ T8415] [ 161.603648][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.739'. [ 161.611276][ T8423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.619080][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.739'. [ 162.383910][ T8438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.398912][ T8438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.498417][ T8438] kvm: apic: phys broadcast and lowest prio [ 162.544345][ T8438] e1000e 0000:00:02.0 eth1: removed PHC [ 162.601762][ T5735] Bluetooth: hci1: Malformed LE Event: 0x1b [ 162.750283][ T8448] syz.1.748 (8448): /proc/8448/oom_adj is deprecated, please use /proc/8448/oom_score_adj instead. [ 162.860758][ T8457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.733027][ T8494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.853270][ T8499] netlink: 'syz.0.762': attribute type 64 has an invalid length. [ 163.856050][ T8499] netlink: 5 bytes leftover after parsing attributes in process `syz.0.762'. [ 163.958893][ T8500] pim6reg: entered allmulticast mode [ 163.976105][ T8500] pim6reg: left allmulticast mode [ 164.265702][ T8500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.270744][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.647820][ T8515] /dev/nullb0: Can't open blockdev [ 164.682901][ T8519] FAULT_INJECTION: forcing a failure. [ 164.682901][ T8519] name failslab, interval 1, probability 0, space 0, times 0 [ 164.687059][ T8519] CPU: 0 UID: 0 PID: 8519 Comm: syz.0.771 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.687077][ T8519] Tainted: [L]=SOFTLOCKUP [ 164.687081][ T8519] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.687087][ T8519] Call Trace: [ 164.687092][ T8519] [ 164.687096][ T8519] dump_stack_lvl+0x100/0x190 [ 164.687129][ T8519] should_fail_ex.cold+0x5/0xa [ 164.687143][ T8519] should_failslab+0xc2/0x120 [ 164.687159][ T8519] __kmalloc_noprof+0xfc/0x820 [ 164.687174][ T8519] ? ethnl_default_set_doit+0x178/0x1050 [ 164.687190][ T8519] ethnl_default_set_doit+0x178/0x1050 [ 164.687205][ T8519] genl_family_rcv_msg_doit+0x214/0x300 [ 164.687222][ T8519] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 164.687236][ T8519] ? genl_get_cmd+0x3e7/0x760 [ 164.687253][ T8519] ? bpf_lsm_capable+0x9/0x10 [ 164.687265][ T8519] ? security_capable+0x80/0x260 [ 164.687278][ T8519] ? ns_capable+0xd2/0xf0 [ 164.687291][ T8519] genl_rcv_msg+0x560/0x800 [ 164.687307][ T8519] ? __pfx_genl_rcv_msg+0x10/0x10 [ 164.687321][ T8519] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 164.687336][ T8519] ? __lock_acquire+0x49f/0x1a40 [ 164.687348][ T8519] netlink_rcv_skb+0x159/0x420 [ 164.687361][ T8519] ? __pfx_genl_rcv_msg+0x10/0x10 [ 164.687377][ T8519] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 164.687396][ T8519] ? netlink_deliver_tap+0x1ae/0xcc0 [ 164.687410][ T8519] genl_rcv+0x28/0x40 [ 164.687422][ T8519] netlink_unicast+0x585/0x850 [ 164.687437][ T8519] ? __pfx_netlink_unicast+0x10/0x10 [ 164.687462][ T8519] netlink_sendmsg+0x8b0/0xda0 [ 164.687485][ T8519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.687501][ T8519] ? apparmor_socket_sendmsg+0x15b/0x270 [ 164.687516][ T8519] ____sys_sendmsg+0xa4d/0xbe0 [ 164.687527][ T8519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.687541][ T8519] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.687559][ T8519] ___sys_sendmsg+0x190/0x1e0 [ 164.687573][ T8519] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.687592][ T8519] ? find_held_lock+0x2b/0x80 [ 164.687614][ T8519] __sys_sendmsg+0x160/0x210 [ 164.687630][ T8519] ? __pfx___sys_sendmsg+0x10/0x10 [ 164.687650][ T8519] ? __pfx_ksys_write+0x10/0x10 [ 164.687663][ T8519] __do_fast_syscall_32+0xe7/0x970 [ 164.687679][ T8519] ? lockdep_hardirqs_on+0x78/0x100 [ 164.687693][ T8519] do_fast_syscall_32+0x32/0x70 [ 164.687707][ T8519] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 164.687721][ T8519] RIP: 0023:0xf6feefec [ 164.687734][ T8519] Code: Unable to access opcode bytes at 0xf6feefc2. [ 164.687739][ T8519] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 164.687750][ T8519] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 164.687756][ T8519] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.687762][ T8519] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 164.687768][ T8519] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 164.687774][ T8519] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 164.687788][ T8519] [ 165.820144][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.785'. [ 165.830562][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.785'. [ 166.049083][ T8545] pim6reg: entered allmulticast mode [ 166.061475][ T8545] pim6reg: left allmulticast mode [ 166.963661][ T8556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.109796][ T8564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.335660][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.781'. [ 168.345326][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.781'. [ 168.574121][ T8574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.943079][ T8609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.146291][ T8618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.307879][ T5735] Bluetooth: hci1: command 0x0406 tx timeout [ 170.310541][ T5743] Bluetooth: hci0: command 0x0406 tx timeout [ 170.318758][ T5735] Bluetooth: hci2: command 0x0406 tx timeout [ 170.321384][ T5743] Bluetooth: hci3: command 0x0406 tx timeout [ 171.259724][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.803'. [ 171.270360][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.803'. [ 171.628031][ T8634] misc userio: No port type given on /dev/userio [ 172.051954][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.807'. [ 172.055840][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.807'. [ 172.083571][ T8646] xt_CT: You must specify a L4 protocol and not use inversions on it [ 172.121875][ T8654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.582985][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.822'. [ 173.586673][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.822'. [ 173.596923][ T8684] xt_CT: You must specify a L4 protocol and not use inversions on it [ 173.681685][ T8688] block nbd1: NBD_DISCONNECT [ 173.690594][ T8687] block nbd1: Disconnected due to user request. [ 173.698093][ T8687] block nbd1: shutting down sockets [ 173.703849][ T8693] bond1: (slave .`): Releasing backup interface [ 173.716148][ T8693] bridge_slave_0: left allmulticast mode [ 173.718948][ T8693] bridge_slave_0: left promiscuous mode [ 173.720983][ T8693] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.729794][ T8693] bridge_slave_1: left allmulticast mode [ 173.732336][ T8693] bridge_slave_1: left promiscuous mode [ 173.734923][ T8693] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.751721][ T8693] .`: (slave bond_slave_0): Releasing backup interface [ 173.769480][ T8693] .`: (slave bond_slave_1): Releasing backup interface [ 173.782164][ T8693] team0: Port device team_slave_0 removed [ 173.790687][ T8693] team0: Port device team_slave_1 removed [ 173.792904][ T8693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.797095][ T8693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.800782][ T8693] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 173.821162][ T8700] pim6reg: entered allmulticast mode [ 173.848726][ T8700] pim6reg: left allmulticast mode [ 174.018065][ T5809] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 174.197819][ T5809] usb 7-1: Using ep0 maxpacket: 32 [ 174.205577][ T5809] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 174.218070][ T5809] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.222211][ T5809] usb 7-1: config 0 has no interface number 0 [ 174.240796][ T5809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.244814][ T5809] usb 7-1: Product: syz [ 174.247023][ T5809] usb 7-1: Manufacturer: syz [ 174.253577][ T5809] usb 7-1: SerialNumber: syz [ 174.309957][ T5809] usb 7-1: config 0 descriptor?? [ 174.364109][ T5809] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 174.371459][ T5809] usb 7-1: selecting invalid altsetting 1 [ 174.377019][ T5809] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 174.622552][ T50] lo speed is unknown, defaulting to 1000 [ 174.685612][ T8712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.741593][ T5809] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 174.768263][ T5809] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 174.802884][ T5809] usb 7-1: media controller created [ 174.992824][ T8695] kvm: apic: phys broadcast and lowest prio [ 175.071877][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.149614][ T5809] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 175.152131][ T5809] zl10353_read_register: readreg error (reg=127, ret==-71) [ 175.156125][ T5809] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 175.191445][ T8720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.195868][ T5809] usb 7-1: USB disconnect, device number 6 [ 176.103034][ T8742] pim6reg: entered allmulticast mode [ 176.115706][ T8742] pim6reg: left allmulticast mode [ 177.439030][ T5809] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 177.627854][ T5809] usb 8-1: Using ep0 maxpacket: 32 [ 177.636459][ T5809] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 177.660643][ T5809] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 177.668424][ T5809] usb 8-1: config 0 has no interface number 0 [ 177.675380][ T5809] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.688341][ T5809] usb 8-1: Product: syz [ 177.690039][ T5809] usb 8-1: Manufacturer: syz [ 177.691590][ T5809] usb 8-1: SerialNumber: syz [ 177.695021][ T5809] usb 8-1: config 0 descriptor?? [ 177.716007][ T5809] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 177.718982][ T5809] usb 8-1: selecting invalid altsetting 1 [ 177.720841][ T5809] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 177.728308][ T5809] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 177.731799][ T5809] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 177.734442][ T5809] usb 8-1: media controller created [ 177.744318][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.761233][ T8782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.766834][ T8782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.770250][ T8782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.773127][ T8782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.777554][ T8782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.784105][ T8781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.030500][ T8790] kvm: apic: phys broadcast and lowest prio [ 178.868105][ T5809] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 178.874514][ T5809] zl10353_read_register: readreg error (reg=127, ret==-110) [ 178.966041][ T5809] usb 8-1: USB disconnect, device number 4 [ 179.112217][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.860'. [ 179.119704][ T8810] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 179.413811][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.864'. [ 179.418779][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.864'. [ 180.543052][ T8847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.547074][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.584791][ T8844] netlink: 24 bytes leftover after parsing attributes in process `syz.3.872'. [ 182.471424][ T8890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.508344][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.891'. [ 182.512480][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.891'. [ 182.882571][ T8903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.885871][ T8903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.889190][ T8903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.892173][ T8903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.894990][ T8903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.901615][ T8902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.933219][ T8905] ieee802154 phy0 wpan0: encryption failed: -22 [ 182.937154][ T42] audit: type=1326 audit(1786816091.492:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8904 comm="syz.2.895" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x0 [ 183.014094][ T8906] mmap: syz.2.895 (8906) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 183.981963][ T8941] FAULT_INJECTION: forcing a failure. [ 183.981963][ T8941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.984334][ T8938] loop4: detected capacity change from 0 to 7 [ 183.987044][ T8941] CPU: 1 UID: 0 PID: 8941 Comm: syz.3.908 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.987064][ T8941] Tainted: [L]=SOFTLOCKUP [ 183.987068][ T8941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.987075][ T8941] Call Trace: [ 183.987079][ T8941] [ 183.987084][ T8941] dump_stack_lvl+0x100/0x190 [ 183.987101][ T8941] should_fail_ex.cold+0x5/0xa [ 183.987114][ T8941] _copy_from_iter+0x1f4/0x1690 [ 183.987154][ T8941] ? __asan_memset+0x23/0x50 [ 183.987166][ T8941] ? __pfx__copy_from_iter+0x10/0x10 [ 183.987189][ T8941] ? __pfx___alloc_skb+0x10/0x10 [ 183.987223][ T8941] netlink_sendmsg+0x808/0xda0 [ 183.987248][ T8941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.987271][ T8941] ? apparmor_socket_sendmsg+0x15b/0x270 [ 183.987293][ T8941] ____sys_sendmsg+0xa4d/0xbe0 [ 183.987310][ T8941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.987331][ T8941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.987359][ T8941] ___sys_sendmsg+0x190/0x1e0 [ 183.987380][ T8941] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.987409][ T8941] ? find_held_lock+0x2b/0x80 [ 183.987445][ T8941] __sys_sendmsg+0x160/0x210 [ 183.987468][ T8941] ? __pfx___sys_sendmsg+0x10/0x10 [ 183.987498][ T8941] ? __pfx_ksys_write+0x10/0x10 [ 183.987519][ T8941] __do_fast_syscall_32+0xe7/0x970 [ 183.987541][ T8941] ? lockdep_hardirqs_on+0x78/0x100 [ 183.987562][ T8941] do_fast_syscall_32+0x32/0x70 [ 183.987584][ T8941] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.987604][ T8941] RIP: 0023:0xf7fd5fec [ 183.987626][ T8941] Code: Unable to access opcode bytes at 0xf7fd5fc2. [ 183.987633][ T8941] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 183.987650][ T8941] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000700 [ 183.987660][ T8941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.987686][ T8941] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.987696][ T8941] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 183.987705][ T8941] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.987727][ T8941] [ 184.074905][ T8946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.078700][ T8938] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 184.080438][ T8938] loop4: partition table partially beyond EOD, truncated [ 184.090902][ T8938] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 184.782184][ T8949] ieee80211 phy54: Failed to add default virtual iface [ 184.875045][ T8967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.883963][ T8967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.894540][ T8967] netlink: 36 bytes leftover after parsing attributes in process `syz.0.918'. [ 185.633886][ T8985] FAULT_INJECTION: forcing a failure. [ 185.633886][ T8985] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 185.638484][ T8985] CPU: 3 UID: 0 PID: 8985 Comm: syz.3.921 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.638504][ T8985] Tainted: [L]=SOFTLOCKUP [ 185.638508][ T8985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.638515][ T8985] Call Trace: [ 185.638519][ T8985] [ 185.638524][ T8985] dump_stack_lvl+0x100/0x190 [ 185.638542][ T8985] should_fail_ex.cold+0x5/0xa [ 185.638553][ T8985] ? prepare_alloc_pages+0x16d/0x5f0 [ 185.638571][ T8985] should_fail_alloc_page+0xeb/0x140 [ 185.638615][ T8985] prepare_alloc_pages+0x1f0/0x5f0 [ 185.638644][ T8985] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 185.638659][ T8985] ? __lock_acquire+0x49f/0x1a40 [ 185.638670][ T8985] ? is_bpf_text_address+0x94/0x1a0 [ 185.638686][ T8985] ? kernel_text_address+0x8d/0x100 [ 185.638702][ T8985] ? aio_write+0x3ba/0x920 [ 185.638732][ T8985] ? __kernel_text_address+0xd/0x30 [ 185.638750][ T8985] ? do_raw_spin_lock+0x128/0x260 [ 185.638762][ T8985] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 185.638777][ T8985] ? mark_held_locks+0x40/0x70 [ 185.638793][ T8985] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 185.638806][ T8985] ? lockdep_hardirqs_on+0x78/0x100 [ 185.638820][ T8985] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 185.638832][ T8985] ? stack_depot_save_flags+0x479/0x9d0 [ 185.638859][ T8985] ? kasan_save_stack+0x3f/0x50 [ 185.638872][ T8985] ? kasan_save_track+0x14/0x30 [ 185.638887][ T8985] ? __lock_acquire+0x49f/0x1a40 [ 185.638896][ T8985] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 185.638913][ T8985] ? policy_nodemask+0xed/0x4f0 [ 185.638934][ T8985] alloc_pages_mpol+0x1fb/0x540 [ 185.638950][ T8985] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 185.638966][ T8985] ? filemap_get_entry+0x22d/0x450 [ 185.638978][ T8985] ? filemap_get_entry+0x22d/0x450 [ 185.638991][ T8985] folio_alloc_noprof+0x22/0x250 [ 185.639002][ T8985] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 185.639026][ T8985] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 185.639041][ T8985] ? rcu_is_watching+0x12/0xc0 [ 185.639054][ T8985] ? trace_kmalloc+0xeb/0x110 [ 185.639071][ T8985] __filemap_get_folio_mpol+0x653/0x1320 [ 185.639086][ T8985] fuse_perform_write+0x497/0x1c50 [ 185.639122][ T8985] ? __pfx_fuse_perform_write+0x10/0x10 [ 185.639147][ T8985] ? __pfx_generic_write_checks+0x10/0x10 [ 185.639164][ T8985] ? file_update_time_flags+0x373/0x500 [ 185.639180][ T8985] fuse_file_write_iter+0x3d5/0x960 [ 185.639197][ T8985] aio_write+0x3ba/0x920 [ 185.639209][ T8985] ? __pfx_aio_write+0x10/0x10 [ 185.639220][ T8985] ? __lock_acquire+0x49f/0x1a40 [ 185.639238][ T8985] ? __might_fault+0xc5/0x140 [ 185.639253][ T8985] ? io_submit_one+0x1142/0x1fb0 [ 185.639264][ T8985] io_submit_one+0x1142/0x1fb0 [ 185.639278][ T8985] ? __lock_acquire+0x49f/0x1a40 [ 185.639289][ T8985] ? __pfx_io_submit_one+0x10/0x10 [ 185.639306][ T8985] ? __might_fault+0xc5/0x140 [ 185.639320][ T8985] ? __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 185.639334][ T8985] __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 185.639347][ T8985] ? __fget_files+0x21f/0x3d0 [ 185.639358][ T8985] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 185.639373][ T8985] ? ksys_write+0x1ac/0x250 [ 185.639383][ T8985] ? __pfx_ksys_write+0x10/0x10 [ 185.639396][ T8985] __do_fast_syscall_32+0xe7/0x970 [ 185.639410][ T8985] ? lockdep_hardirqs_on+0x78/0x100 [ 185.639424][ T8985] do_fast_syscall_32+0x32/0x70 [ 185.639440][ T8985] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 185.639454][ T8985] RIP: 0023:0xf7fd5fec [ 185.639468][ T8985] Code: Unable to access opcode bytes at 0xf7fd5fc2. [ 185.639473][ T8985] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 00000000000000f8 [ 185.639484][ T8985] RAX: ffffffffffffffda RBX: 00000000f544c000 RCX: 0000000000000001 [ 185.639491][ T8985] RDX: 0000000080000700 RSI: 0000000000000000 RDI: 0000000000000000 [ 185.639497][ T8985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.639503][ T8985] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 185.639521][ T8985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 185.639536][ T8985] [ 185.893701][ T5781] syzkaller0: tun_net_xmit 76 [ 185.904404][ T8990] syzkaller0: create flow: hash 43540152 index 1 [ 185.926315][ T50] syzkaller0: tun_net_xmit 76 [ 185.932672][ T5781] syzkaller0: tun_net_xmit 48 [ 186.123222][ T9003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'. [ 186.128445][ T9003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'. [ 186.193885][ T8989] syzkaller0: delete flow: hash 43540152 index 1 [ 186.337174][ T9007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'. [ 186.341429][ T9007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'. [ 186.908428][ T29] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 187.061828][ T29] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 187.065628][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.070932][ T29] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.075870][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 187.080039][ T29] usb 7-1: SerialNumber: syz [ 187.403204][ T9011] netlink: 36 bytes leftover after parsing attributes in process `syz.2.929'. [ 187.884386][ T9019] vivid-001: disconnect [ 187.887224][ T9017] vivid-001: reconnect [ 187.928702][ T9023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.936'. [ 187.932825][ T9023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.936'. [ 187.946601][ T29] usb 7-1: USB disconnect, device number 7 [ 187.951396][ T9025] net_ratelimit: 5 callbacks suppressed [ 187.951422][ T9025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.738197][ T9042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.741116][ T9042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.744356][ T9042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.747114][ T9042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.754517][ T9042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.760987][ T9041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.048284][ T9050] FAULT_INJECTION: forcing a failure. [ 189.048284][ T9050] name failslab, interval 1, probability 0, space 0, times 0 [ 189.052310][ T9050] CPU: 1 UID: 0 PID: 9050 Comm: syz.0.944 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.052329][ T9050] Tainted: [L]=SOFTLOCKUP [ 189.052333][ T9050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.052339][ T9050] Call Trace: [ 189.052344][ T9050] [ 189.052348][ T9050] dump_stack_lvl+0x100/0x190 [ 189.052370][ T9050] should_fail_ex.cold+0x5/0xa [ 189.052384][ T9050] should_failslab+0xc2/0x120 [ 189.052399][ T9050] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 189.052415][ T9050] ? __kasan_kmalloc+0xaa/0xb0 [ 189.052428][ T9050] ? page_pool_create_percpu+0x7a/0xd50 [ 189.052447][ T9050] page_pool_create_percpu+0x7a/0xd50 [ 189.052463][ T9050] bpf_test_run_xdp_live+0x192/0x760 [ 189.052476][ T9050] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 189.052489][ T9050] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 189.052503][ T9050] ? find_held_lock+0x2b/0x80 [ 189.052520][ T9050] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 189.052539][ T9050] ? 0xffffffffa0206200 [ 189.052549][ T9050] ? 0xffffffffa0206200 [ 189.052557][ T9050] ? 0xffffffffa0206200 [ 189.052564][ T9050] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 189.052581][ T9050] bpf_prog_test_run_xdp+0xd7d/0x1670 [ 189.052598][ T9050] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 189.052615][ T9050] ? fput+0x79/0x100 [ 189.052628][ T9050] ? __bpf_prog_get+0x97/0x2a0 [ 189.052643][ T9050] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 189.052655][ T9050] __sys_bpf+0x2a12/0x4e80 [ 189.052671][ T9050] ? __pfx___sys_bpf+0x10/0x10 [ 189.052683][ T9050] ? find_held_lock+0x2b/0x80 [ 189.052695][ T9050] ? get_pid_task+0xfc/0x250 [ 189.052709][ T9050] ? get_pid_task+0xfc/0x250 [ 189.052726][ T9050] ? proc_fail_nth_write+0x9f/0x220 [ 189.052753][ T9050] ? find_held_lock+0x2b/0x80 [ 189.052769][ T9050] ? rcu_read_lock_any_held+0x6a/0xa0 [ 189.052783][ T9050] ? find_held_lock+0x2b/0x80 [ 189.052796][ T9050] ? ksys_write+0x190/0x250 [ 189.052806][ T9050] ? ksys_write+0x190/0x250 [ 189.052825][ T9050] ? fput+0x79/0x100 [ 189.052839][ T9050] ? __ia32_sys_bpf+0xcc/0x170 [ 189.052853][ T9050] __ia32_sys_bpf+0xcc/0x170 [ 189.052871][ T9050] ? __do_fast_syscall_32+0x98/0x970 [ 189.052893][ T9050] __do_fast_syscall_32+0xe7/0x970 [ 189.052907][ T9050] ? lockdep_hardirqs_on+0x78/0x100 [ 189.052921][ T9050] do_fast_syscall_32+0x32/0x70 [ 189.052935][ T9050] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.052949][ T9050] RIP: 0023:0xf6feefec [ 189.052962][ T9050] Code: Unable to access opcode bytes at 0xf6feefc2. [ 189.052967][ T9050] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 189.052978][ T9050] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000280 [ 189.052984][ T9050] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.052990][ T9050] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.052996][ T9050] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 189.053003][ T9050] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.053016][ T9050] [ 189.098925][ T9054] netlink: 'syz.0.947': attribute type 1 has an invalid length. [ 189.098941][ T9054] netlink: 248 bytes leftover after parsing attributes in process `syz.0.947'. [ 189.099998][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.947'. [ 190.089708][ T9088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.445113][ T9092] netlink: 'syz.3.957': attribute type 1 has an invalid length. [ 190.453402][ T9092] __nla_validate_parse: 1 callbacks suppressed [ 190.453417][ T9092] netlink: 248 bytes leftover after parsing attributes in process `syz.3.957'. [ 190.491387][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.957'. [ 190.498153][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.957'. [ 190.550509][ T9094] FAULT_INJECTION: forcing a failure. [ 190.550509][ T9094] name failslab, interval 1, probability 0, space 0, times 0 [ 190.555794][ T9094] CPU: 2 UID: 0 PID: 9094 Comm: syz.0.958 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.555824][ T9094] Tainted: [L]=SOFTLOCKUP [ 190.555831][ T9094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 190.555842][ T9094] Call Trace: [ 190.555849][ T9094] [ 190.555856][ T9094] dump_stack_lvl+0x100/0x190 [ 190.555885][ T9094] should_fail_ex.cold+0x5/0xa [ 190.555908][ T9094] should_failslab+0xc2/0x120 [ 190.555936][ T9094] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 190.555961][ T9094] ? __alloc_skb+0x140/0x710 [ 190.555991][ T9094] __alloc_skb+0x140/0x710 [ 190.556014][ T9094] ? __alloc_skb+0x5b7/0x710 [ 190.556038][ T9094] ? __pfx___alloc_skb+0x10/0x10 [ 190.556061][ T9094] ? genl_rcv_msg+0x4be/0x800 [ 190.556093][ T9094] netlink_ack+0x117/0xb80 [ 190.556116][ T9094] ? __lock_acquire+0x49f/0x1a40 [ 190.556139][ T9094] netlink_rcv_skb+0x333/0x420 [ 190.556160][ T9094] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.556186][ T9094] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 190.556217][ T9094] ? netlink_deliver_tap+0x1ae/0xcc0 [ 190.556241][ T9094] genl_rcv+0x28/0x40 [ 190.556262][ T9094] netlink_unicast+0x585/0x850 [ 190.556287][ T9094] ? __pfx_netlink_unicast+0x10/0x10 [ 190.556317][ T9094] netlink_sendmsg+0x8b0/0xda0 [ 190.556343][ T9094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.556367][ T9094] ? apparmor_socket_sendmsg+0x15b/0x270 [ 190.556390][ T9094] ____sys_sendmsg+0xa4d/0xbe0 [ 190.556407][ T9094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.556427][ T9094] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.556454][ T9094] ___sys_sendmsg+0x190/0x1e0 [ 190.556488][ T9094] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.556520][ T9094] ? find_held_lock+0x2b/0x80 [ 190.556560][ T9094] __sys_sendmsg+0x160/0x210 [ 190.556588][ T9094] ? __pfx___sys_sendmsg+0x10/0x10 [ 190.556621][ T9094] ? __pfx_ksys_write+0x10/0x10 [ 190.556645][ T9094] __do_fast_syscall_32+0xe7/0x970 [ 190.556669][ T9094] ? lockdep_hardirqs_on+0x78/0x100 [ 190.556694][ T9094] do_fast_syscall_32+0x32/0x70 [ 190.556717][ T9094] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 190.556745][ T9094] RIP: 0023:0xf6feefec [ 190.556768][ T9094] Code: Unable to access opcode bytes at 0xf6feefc2. [ 190.556777][ T9094] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 190.556796][ T9094] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000500 [ 190.556807][ T9094] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 190.556817][ T9094] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 190.556827][ T9094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.556837][ T9094] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 190.556861][ T9094] [ 190.922686][ T9103] Bluetooth: MGMT ver 1.23 [ 192.315237][ T9126] netlink: 'syz.0.970': attribute type 1 has an invalid length. [ 192.318033][ T9126] netlink: 248 bytes leftover after parsing attributes in process `syz.0.970'. [ 192.323320][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.970'. [ 192.328779][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.970'. [ 192.808965][ T9138] xt_CT: You must specify a L4 protocol and not use inversions on it [ 193.843332][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.845546][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.441329][ T9169] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.048826][ T9185] netlink: 108 bytes leftover after parsing attributes in process `syz.0.988'. [ 195.054930][ T9185] netlink: 72 bytes leftover after parsing attributes in process `syz.0.988'. [ 195.252061][ T9196] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.286638][ T9225] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 196.751020][ T9238] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.958809][ T9244] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 196.961676][ T9244] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 196.967683][ T9244] vhci_hcd vhci_hcd.0: Device attached [ 196.976645][ T9246] vhci_hcd: unknown pdu 2 [ 196.988874][ T5781] vhci_hcd vhci_hcd.2: stop threads [ 196.991828][ T5781] vhci_hcd vhci_hcd.2: release socket [ 196.994629][ T5781] vhci_hcd vhci_hcd.2: disconnect device [ 197.404538][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1013'. [ 197.617964][ T9272] xt_CT: You must specify a L4 protocol and not use inversions on it [ 198.155825][ T9288] hsr0: entered promiscuous mode [ 198.162565][ T9288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'. [ 198.169753][ T9288] hsr_slave_0: left promiscuous mode [ 198.179034][ T9288] hsr_slave_1: left promiscuous mode [ 198.193226][ T9288] hsr0 (unregistering): left promiscuous mode [ 198.421085][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1028'. [ 198.426771][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1028'. [ 199.219910][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'. [ 199.848538][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1040'. [ 199.855495][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1040'. [ 200.261091][ T9350] FAULT_INJECTION: forcing a failure. [ 200.261091][ T9350] name failslab, interval 1, probability 0, space 0, times 0 [ 200.265532][ T9350] CPU: 3 UID: 0 PID: 9350 Comm: syz.2.1046 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.265550][ T9350] Tainted: [L]=SOFTLOCKUP [ 200.265554][ T9350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 200.265562][ T9350] Call Trace: [ 200.265566][ T9350] [ 200.265571][ T9350] dump_stack_lvl+0x100/0x190 [ 200.265588][ T9350] should_fail_ex.cold+0x5/0xa [ 200.265601][ T9350] should_failslab+0xc2/0x120 [ 200.265617][ T9350] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 200.265631][ T9350] ? __alloc_skb+0x5b7/0x710 [ 200.265646][ T9350] ? __alloc_skb+0x140/0x710 [ 200.265663][ T9350] __alloc_skb+0x140/0x710 [ 200.265676][ T9350] ? __alloc_skb+0x5b7/0x710 [ 200.265690][ T9350] ? __pfx___alloc_skb+0x10/0x10 [ 200.265708][ T9350] netlink_ack+0x117/0xb80 [ 200.265722][ T9350] ? __lock_acquire+0x49f/0x1a40 [ 200.265735][ T9350] netlink_rcv_skb+0x333/0x420 [ 200.265748][ T9350] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 200.265765][ T9350] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.265783][ T9350] ? netlink_deliver_tap+0x1ae/0xcc0 [ 200.265797][ T9350] netlink_unicast+0x585/0x850 [ 200.265814][ T9350] ? __pfx_netlink_unicast+0x10/0x10 [ 200.265831][ T9350] netlink_sendmsg+0x8b0/0xda0 [ 200.265845][ T9350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.265860][ T9350] ? apparmor_socket_sendmsg+0x15b/0x270 [ 200.265874][ T9350] ____sys_sendmsg+0xa4d/0xbe0 [ 200.265886][ T9350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.265899][ T9350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.265917][ T9350] ___sys_sendmsg+0x190/0x1e0 [ 200.265930][ T9350] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.265949][ T9350] ? find_held_lock+0x2b/0x80 [ 200.265971][ T9350] __sys_sendmsg+0x160/0x210 [ 200.265987][ T9350] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.266006][ T9350] ? __pfx_ksys_write+0x10/0x10 [ 200.266020][ T9350] __do_fast_syscall_32+0xe7/0x970 [ 200.266035][ T9350] ? lockdep_hardirqs_on+0x78/0x100 [ 200.266049][ T9350] do_fast_syscall_32+0x32/0x70 [ 200.266063][ T9350] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 200.266077][ T9350] RIP: 0023:0xf703efec [ 200.266092][ T9350] Code: Unable to access opcode bytes at 0xf703efc2. [ 200.266097][ T9350] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 200.266109][ T9350] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 200.266116][ T9350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 200.266121][ T9350] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 200.266127][ T9350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.266134][ T9350] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 200.266146][ T9350] [ 200.406025][ T9354] netlink: 'syz.0.1047': attribute type 1 has an invalid length. [ 200.542860][ T9354] bond0: entered promiscuous mode [ 200.550314][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1048'. [ 200.551543][ T9354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.651299][ T9366] xt_CT: You must specify a L4 protocol and not use inversions on it [ 200.813895][ T9374] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1053'. [ 200.818899][ T9374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1053'. [ 202.471466][ T9401] __nla_validate_parse: 1 callbacks suppressed [ 202.471481][ T9401] netlink: 5188 bytes leftover after parsing attributes in process `syz.0.1062'. [ 202.551465][ T5093] Bluetooth: Unexpected continuation frame (len 34) [ 202.699271][ T9418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.525042][ T9430] FAULT_INJECTION: forcing a failure. [ 203.525042][ T9430] name failslab, interval 1, probability 0, space 0, times 0 [ 203.538371][ T9430] CPU: 2 UID: 0 PID: 9430 Comm: syz.0.1072 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.538404][ T9430] Tainted: [L]=SOFTLOCKUP [ 203.538410][ T9430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.538420][ T9430] Call Trace: [ 203.538440][ T9430] [ 203.538448][ T9430] dump_stack_lvl+0x100/0x190 [ 203.538474][ T9430] should_fail_ex.cold+0x5/0xa [ 203.538495][ T9430] should_failslab+0xc2/0x120 [ 203.538560][ T9430] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 203.538587][ T9430] ? kvasprintf_const+0x66/0x1a0 [ 203.538609][ T9430] kvasprintf+0xbc/0x150 [ 203.538625][ T9430] ? __pfx_kvasprintf+0x10/0x10 [ 203.538644][ T9430] ? acpi_dev_for_each_child+0x88/0xc0 [ 203.538701][ T9430] ? find_held_lock+0x2b/0x80 [ 203.538727][ T9430] kvasprintf_const+0x66/0x1a0 [ 203.538745][ T9430] kobject_set_name_vargs+0x5a/0x140 [ 203.538777][ T9430] dev_set_name+0xc7/0x100 [ 203.538817][ T9430] ? __pfx_dev_set_name+0x10/0x10 [ 203.538842][ T9430] ? set_primary_fwnode+0x11a/0x2a0 [ 203.538863][ T9430] ? pci_dev_assign_slot+0x151/0x1b0 [ 203.538892][ T9430] pci_setup_device+0x5f5/0x2500 [ 203.538927][ T9430] ? __pfx_pci_setup_device+0x10/0x10 [ 203.538950][ T9430] ? kasan_save_track+0x14/0x30 [ 203.538972][ T9430] ? __kasan_kmalloc+0xaa/0xb0 [ 203.538994][ T9430] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 203.539014][ T9430] ? lockdep_init_map_type+0x5c/0x250 [ 203.539032][ T9430] ? __raw_spin_lock_init+0x3a/0x110 [ 203.539055][ T9430] pci_scan_single_device+0x1ac/0x240 [ 203.539076][ T9430] ? __pfx_pci_scan_single_device+0x10/0x10 [ 203.539105][ T9430] pci_scan_slot+0x1c9/0x7c0 [ 203.539129][ T9430] ? __pfx_pci_scan_slot+0x10/0x10 [ 203.539150][ T9430] ? rcu_is_watching+0x12/0xc0 [ 203.539176][ T9430] pci_scan_child_bus_extend+0x6b/0x7b0 [ 203.539198][ T9430] ? pci_find_next_bus+0x60/0xb0 [ 203.539226][ T9430] pci_rescan_bus+0x18/0x40 [ 203.539247][ T9430] rescan_store+0xfb/0x130 [ 203.539266][ T9430] ? __pfx_rescan_store+0x10/0x10 [ 203.539284][ T9430] ? sysfs_file_kobj+0xe4/0x290 [ 203.539308][ T9430] ? __pfx_rescan_store+0x10/0x10 [ 203.539328][ T9430] bus_attr_store+0x74/0xb0 [ 203.539348][ T9430] ? __pfx_bus_attr_store+0x10/0x10 [ 203.539367][ T9430] sysfs_kf_write+0xf2/0x150 [ 203.539391][ T9430] kernfs_fop_write_iter+0x3e0/0x5f0 [ 203.539411][ T9430] ? __pfx_sysfs_kf_write+0x10/0x10 [ 203.539438][ T9430] vfs_write+0x6ac/0x1050 [ 203.539457][ T9430] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 203.539483][ T9430] ? __pfx_vfs_write+0x10/0x10 [ 203.539501][ T9430] ? find_held_lock+0x2b/0x80 [ 203.539542][ T9430] ksys_write+0x12a/0x250 [ 203.539559][ T9430] ? __pfx_ksys_write+0x10/0x10 [ 203.539577][ T9430] ? ksys_write+0x1ac/0x250 [ 203.539593][ T9430] ? __pfx_ksys_write+0x10/0x10 [ 203.539616][ T9430] __do_fast_syscall_32+0xe7/0x970 [ 203.539637][ T9430] ? lockdep_hardirqs_on+0x78/0x100 [ 203.539660][ T9430] do_fast_syscall_32+0x32/0x70 [ 203.539686][ T9430] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.539707][ T9430] RIP: 0023:0xf6feefec [ 203.539729][ T9430] Code: Unable to access opcode bytes at 0xf6feefc2. [ 203.539737][ T9430] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 203.539755][ T9430] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 203.539767][ T9430] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 203.539776][ T9430] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 203.539786][ T9430] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 203.539798][ T9430] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 203.539819][ T9430] [ 203.658406][ T9430] pci (null): [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 203.710489][ T9430] pci (null): BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 203.713370][ T9430] pci (null): BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 203.718374][ T9430] pci (null): ROM [mem 0xfeae0000-0xfeaeffff pref] [ 203.721742][ T9430] pci (null): Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 203.726155][ T9430] ------------[ cut here ]------------ [ 203.728383][ T9430] ret < 0 [ 203.728402][ T9430] WARNING: drivers/pci/probe.c:2768 at pci_device_add+0x133b/0x1810, CPU#2: syz.0.1072/9430 [ 203.733578][ T9430] Modules linked in: [ 203.737605][ T9430] CPU: 2 UID: 0 PID: 9430 Comm: syz.0.1072 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.742528][ T9430] Tainted: [L]=SOFTLOCKUP [ 203.744209][ T9430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.749647][ T9430] RIP: 0010:pci_device_add+0x133b/0x1810 [ 203.751913][ T9430] Code: e5 04 83 e0 8f 09 e8 88 83 c8 00 00 00 e9 28 f4 ff ff e8 28 9b b0 fc 90 0f 0b 90 90 0f 0b 90 e9 0e f7 ff ff e8 16 9b b0 fc 90 <0f> 0b 90 e9 7e fa ff ff e8 08 9b b0 fc 90 0f 0b 90 e9 11 fa ff ff [ 203.760428][ T9430] RSP: 0000:ffffc900074f7910 EFLAGS: 00010293 [ 203.762812][ T9430] RAX: 0000000000000000 RBX: 00000000ffffffea RCX: ffffffff85592f49 [ 203.765798][ T9430] RDX: ffff888022494a80 RSI: ffffffff855934ca RDI: ffff888022494a80 [ 203.769715][ T9430] RBP: ffff88801c2e5000 R08: 0000000000000005 R09: 0000000000000000 [ 203.772764][ T9430] R10: 00000000ffffffea R11: 0000000000000000 R12: ffff888021407028 [ 203.775846][ T9430] R13: ffff888021407000 R14: 0000000000000001 R15: ffff8880142d8000 [ 203.779979][ T9430] FS: 0000000000000000(0000) GS:ffff888096de7000(0063) knlGS:00000000f53ddb40 [ 203.783778][ T9430] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 203.786325][ T9430] CR2: 0000000032e21ff8 CR3: 000000006e146000 CR4: 0000000000352ef0 [ 203.789994][ T9430] Call Trace: [ 203.791344][ T9430] [ 203.792488][ T9430] ? __pfx_pci_device_add+0x10/0x10 [ 203.794548][ T9430] ? __raw_spin_lock_init+0x3a/0x110 [ 203.796610][ T9430] pci_scan_single_device+0x1d0/0x240 [ 203.799291][ T9430] ? __pfx_pci_scan_single_device+0x10/0x10 [ 203.801561][ T9430] pci_scan_slot+0x1c9/0x7c0 [ 203.803420][ T9430] ? __pfx_pci_scan_slot+0x10/0x10 [ 203.805477][ T9430] ? rcu_is_watching+0x12/0xc0 [ 203.807379][ T9430] pci_scan_child_bus_extend+0x6b/0x7b0 [ 203.810210][ T9430] ? pci_find_next_bus+0x60/0xb0 [ 203.812142][ T9430] pci_rescan_bus+0x18/0x40 [ 203.813917][ T9430] rescan_store+0xfb/0x130 [ 203.815717][ T9430] ? __pfx_rescan_store+0x10/0x10 [ 203.818206][ T9430] ? sysfs_file_kobj+0xe4/0x290 [ 203.820149][ T9430] ? __pfx_rescan_store+0x10/0x10 [ 203.822142][ T9430] bus_attr_store+0x74/0xb0 [ 203.823969][ T9430] ? __pfx_bus_attr_store+0x10/0x10 [ 203.825990][ T9430] sysfs_kf_write+0xf2/0x150 [ 203.828574][ T9430] kernfs_fop_write_iter+0x3e0/0x5f0 [ 203.830662][ T9430] ? __pfx_sysfs_kf_write+0x10/0x10 [ 203.832662][ T9430] vfs_write+0x6ac/0x1050 [ 203.834347][ T9430] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 203.836581][ T9430] ? __pfx_vfs_write+0x10/0x10 [ 203.839125][ T9430] ? find_held_lock+0x2b/0x80 [ 203.840957][ T9430] ksys_write+0x12a/0x250 [ 203.842627][ T9430] ? __pfx_ksys_write+0x10/0x10 [ 203.844538][ T9430] ? ksys_write+0x1ac/0x250 [ 203.846295][ T9430] ? __pfx_ksys_write+0x10/0x10 [ 203.848297][ T9430] __do_fast_syscall_32+0xe7/0x970 [ 203.853422][ T9430] ? lockdep_hardirqs_on+0x78/0x100 [ 203.855468][ T9430] do_fast_syscall_32+0x32/0x70 [ 203.857387][ T9430] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.860510][ T9430] RIP: 0023:0xf6feefec [ 203.862171][ T9430] Code: Unable to access opcode bytes at 0xf6feefc2. [ 203.864850][ T9430] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 203.868725][ T9430] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 203.871792][ T9430] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 203.874900][ T9430] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 203.878430][ T9430] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 203.881478][ T9430] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 203.884652][ T9430] [ 203.885881][ T9430] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 203.888711][ T9430] CPU: 2 UID: 0 PID: 9430 Comm: syz.0.1072 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.892851][ T9430] Tainted: [L]=SOFTLOCKUP [ 203.894556][ T9430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.898397][ T9430] Call Trace: [ 203.899709][ T9430] [ 203.900876][ T9430] dump_stack_lvl+0x100/0x190 [ 203.902752][ T9430] vpanic+0x552/0x970 [ 203.904342][ T9430] ? __pfx_vpanic+0x10/0x10 [ 203.906132][ T9430] panic+0xd1/0xe0 [ 203.907646][ T9430] ? __pfx_panic+0x10/0x10 [ 203.909393][ T9430] ? check_panic_on_warn+0x1f/0x90 [ 203.911379][ T9430] check_panic_on_warn.cold+0x19/0x34 [ 203.913428][ T9430] ? pci_device_add+0x133b/0x1810 [ 203.915434][ T9430] __warn.cold+0x191/0x318 [ 203.917201][ T9430] __report_bug+0x30f/0x440 [ 203.919046][ T9430] ? pci_device_add+0x133b/0x1810 [ 203.921034][ T9430] ? __pfx___report_bug+0x10/0x10 [ 203.923008][ T9430] ? kasan_quarantine_put+0x104/0x240 [ 203.925100][ T9430] ? lockdep_hardirqs_on+0x78/0x100 [ 203.927129][ T9430] ? device_add+0x350/0x1970 [ 203.928984][ T9430] ? pci_device_add+0x133b/0x1810 [ 203.931136][ T9430] report_bug+0xb2/0x220 [ 203.932776][ T9430] ? pci_device_add+0x133b/0x1810 [ 203.934709][ T9430] handle_bug+0x16a/0x2a0 [ 203.936419][ T9430] exc_invalid_op+0x17/0x50 [ 203.938220][ T9430] asm_exc_invalid_op+0x1a/0x20 [ 203.940119][ T9430] RIP: 0010:pci_device_add+0x133b/0x1810 [ 203.942311][ T9430] Code: e5 04 83 e0 8f 09 e8 88 83 c8 00 00 00 e9 28 f4 ff ff e8 28 9b b0 fc 90 0f 0b 90 90 0f 0b 90 e9 0e f7 ff ff e8 16 9b b0 fc 90 <0f> 0b 90 e9 7e fa ff ff e8 08 9b b0 fc 90 0f 0b 90 e9 11 fa ff ff [ 203.949655][ T9430] RSP: 0000:ffffc900074f7910 EFLAGS: 00010293 [ 203.952015][ T9430] RAX: 0000000000000000 RBX: 00000000ffffffea RCX: ffffffff85592f49 [ 203.955043][ T9430] RDX: ffff888022494a80 RSI: ffffffff855934ca RDI: ffff888022494a80 [ 203.958103][ T9430] RBP: ffff88801c2e5000 R08: 0000000000000005 R09: 0000000000000000 [ 203.961158][ T9430] R10: 00000000ffffffea R11: 0000000000000000 R12: ffff888021407028 [ 203.964203][ T9430] R13: ffff888021407000 R14: 0000000000000001 R15: ffff8880142d8000 [ 203.967264][ T9430] ? pci_device_add+0xdb9/0x1810 [ 203.969188][ T9430] ? pci_device_add+0x133a/0x1810 [ 203.971210][ T9430] ? __pfx_pci_device_add+0x10/0x10 [ 203.973214][ T9430] ? __raw_spin_lock_init+0x3a/0x110 [ 203.975257][ T9430] pci_scan_single_device+0x1d0/0x240 [ 203.977312][ T9430] ? __pfx_pci_scan_single_device+0x10/0x10 [ 203.979663][ T9430] pci_scan_slot+0x1c9/0x7c0 [ 203.981485][ T9430] ? __pfx_pci_scan_slot+0x10/0x10 [ 203.983412][ T9430] ? rcu_is_watching+0x12/0xc0 [ 203.985239][ T9430] pci_scan_child_bus_extend+0x6b/0x7b0 [ 203.987345][ T9430] ? pci_find_next_bus+0x60/0xb0 [ 203.989285][ T9430] pci_rescan_bus+0x18/0x40 [ 203.991084][ T9430] rescan_store+0xfb/0x130 [ 203.992801][ T9430] ? __pfx_rescan_store+0x10/0x10 [ 203.994739][ T9430] ? sysfs_file_kobj+0xe4/0x290 [ 203.996590][ T9430] ? __pfx_rescan_store+0x10/0x10 [ 203.998552][ T9430] bus_attr_store+0x74/0xb0 [ 204.000356][ T9430] ? __pfx_bus_attr_store+0x10/0x10 [ 204.002338][ T9430] sysfs_kf_write+0xf2/0x150 [ 204.004035][ T9430] kernfs_fop_write_iter+0x3e0/0x5f0 [ 204.006108][ T9430] ? __pfx_sysfs_kf_write+0x10/0x10 [ 204.008128][ T9430] vfs_write+0x6ac/0x1050 [ 204.009783][ T9430] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 204.012018][ T9430] ? __pfx_vfs_write+0x10/0x10 [ 204.013893][ T9430] ? find_held_lock+0x2b/0x80 [ 204.015749][ T9430] ksys_write+0x12a/0x250 [ 204.017434][ T9430] ? __pfx_ksys_write+0x10/0x10 [ 204.019320][ T9430] ? ksys_write+0x1ac/0x250 [ 204.021098][ T9430] ? __pfx_ksys_write+0x10/0x10 [ 204.023032][ T9430] __do_fast_syscall_32+0xe7/0x970 [ 204.025019][ T9430] ? lockdep_hardirqs_on+0x78/0x100 [ 204.027061][ T9430] do_fast_syscall_32+0x32/0x70 [ 204.028971][ T9430] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.031490][ T9430] RIP: 0023:0xf6feefec [ 204.033123][ T9430] Code: Unable to access opcode bytes at 0xf6feefc2. [ 204.035670][ T9430] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 204.038907][ T9430] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 204.041933][ T9430] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.044967][ T9430] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.047968][ T9430] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 204.050996][ T9430] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.054030][ T9430] [ 204.055952][ T9430] Kernel Offset: disabled [ 204.057622][ T9430] Rebooting in 86400 seconds..