last executing test programs: 3m38.146818377s ago: executing program 1 (id=996): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) fstat(r1, &(0x7f0000000480)) 3m35.07855175s ago: executing program 1 (id=1025): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x9, 0x4, 0x24b5, 0x4}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8242, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000012300)={0x0, 0x12c, @ioapic={0x70000, 0xc8f, 0xfffff5ab, 0x7fffffff, 0x0, [{0x8, 0x81, 0xfd, '\x00', 0x7}, {0x0, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0xa, '\x00', 0x2}, {0xd, 0x1, 0xe9, '\x00', 0x3}, {0xff, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x1, '\x00', 0x6f}, {0x45, 0x51, 0x3}, {0x10, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x9a, '\x00', 0x4b}, {0x5, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0x9, 0x0, 0xca, '\x00', 0x7}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0x3, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x5, '\x00', 0x6}, {0x9, 0x0, 0x1, '\x00', 0x2}, {0x87, 0x21, 0x7, '\x00', 0x7}, {0x1, 0x9, 0x0, '\x00', 0x46}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$MAP_UPDATE_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 3m34.978645011s ago: executing program 1 (id=1026): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) close(0x3) (async, rerun: 32) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x2) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) (async) unshare(0x40000000) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[], 0x1408}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setns(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8) writev(r3, &(0x7f0000000040)=[{&(0x7f0000001340)='c', 0x1}], 0x1) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) (rerun: 32) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x8, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$FIONREAD(r4, 0x541b, 0x0) (async) fallocate(r2, 0x0, 0x0, 0x10fff9) lseek(r2, 0x0, 0x3) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000000)={@desc={0x1, 0x0, @desc1}}) 3m33.748294737s ago: executing program 1 (id=1036): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) r0 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000400)=0x80, 0x80800) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000980)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000480)={0x4bc, 0x1, 0x5, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [{{0x254, 0x1, {{0x0, 0x7fffffff}, 0x2, 0x31, 0x1, 0x1, 0x6, 'syz0\x00', "3f3dc8de89a0fdd75584f7853c2ccba43675a00469b4e9ce561e2a5f6ee7842b", "ffbe46cc321af43e4f5809f086de62956e094a46b9b2c217b30674e842755360", [{0x167c, 0x0, {0x2, 0x6}}, {0xfffd, 0x100, {0x3, 0x8001}}, {0x8000, 0xe6d5, {0x3, 0x9}}, {0x32a1, 0x1, {0x1, 0xb}}, {0x7, 0x1000, {0x3, 0xfffffff9}}, {0x4, 0x81, {0x3, 0x5}}, {0x7ff, 0xf, {0x2, 0x8}}, {0x401, 0xe229, {0x0, 0x483}}, {0x1, 0x9, {0x2, 0x2}}, {0x401, 0xfffb, {0x3, 0x8}}, {0x1000, 0x24}, {0x8, 0x7, {0x2, 0x3}}, {0xb, 0x0, {0x2, 0x8000}}, {0x3ff, 0x7, {0x3, 0xa91}}, {0x28, 0x2, {0x0, 0x78d}}, {0x4, 0xa, {0x0, 0xa5}}, {0x5, 0x9, {0x0, 0xb7}}, {0x3, 0x1ff, {0x1, 0x401}}, {0x3, 0x2, {0x1, 0x5}}, {0xce27, 0x8}, {0x4, 0x9, {0x2, 0xfffffffc}}, {0x5c00, 0x2, {0x3, 0x4}}, {0x1000, 0x76f, {0x1, 0x81}}, {0x9, 0x401, {0x0, 0x5}}, {0x3, 0xa, {0x1, 0x2}}, {0xfff9, 0xfe78, {0x3, 0x1dde}}, {0x2b8, 0x4, {0x1, 0xcf}}, {0x8, 0x2, {0x1, 0x411}}, {0x6, 0xc, {0x2, 0x9}}, {0x3, 0x5, {0x0, 0x10000}}, {0x6, 0x6, {0x3, 0xb83}}, {0x6, 0x9, {0x2, 0x9}}, {0xef8e, 0xfffb, {0x1, 0xffff}}, {0x6, 0xd519, {0x3}}, {0x1, 0x8, {0x1, 0x4}}, {0x2, 0x6, {0x0, 0x80}}, {0x5, 0x1, {0x1, 0x969}}, {0x7, 0x9, {0x3, 0x4}}, {0xf, 0xe0b, {0x0, 0x8b}}, {0x5, 0xaa3c, {0x0, 0x2}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0x3, 0x9, 0x4, 0x8, 0x27, 'syz0\x00', "2cbd8ff7ee1f79bc8e4e947da3c620ffca3cd9c6c84193d0327c360a6fc86a45", "ecb24079b306a40d31f6c009bd7b2576fbfd36c5a259952ac1e5f28f414cef29", [{0x4, 0x2, {0x0, 0x2}}, {0x7ff, 0x5, {0x0, 0x66}}, {0x8, 0x9, {0x1, 0x6}}, {0x2, 0x8001, {0x1, 0x1}}, {0x53, 0x9, {0x3, 0x7f}}, {0x238, 0x8, {0x3, 0x5}}, {0x8, 0x9, {0x0, 0x5}}, {0xffff, 0x7fff, {0x0, 0x2}}, {0x50c, 0xfcd, {0x2, 0xffffff33}}, {0x1, 0x4, {0x3, 0x7}}, {0xf01, 0x0, {0x0, 0x9}}, {0x1, 0x1, {0x3, 0x9}}, {0x2, 0x81, {0x3}}, {0x9, 0x6e, {0x2, 0x6}}, {0x80, 0x1, {0x2, 0x7}}, {0xf, 0x1, {0x2, 0x6}}, {0x4, 0x4, {0x2, 0x5}}, {0xfff9, 0x9, {0x3, 0x1}}, {0x5d21, 0x1e88, {0x2, 0x3}}, {0xbc15, 0x6, {0x3, 0xfffffffc}}, {0x3d04, 0x8, {0x3, 0x8000}}, {0x14, 0x40, {0x0, 0x48}}, {0xed8, 0xc, {0x0, 0x8}}, {0xfffb, 0x7}, {0x6, 0x3ff, {0x1, 0x6}}, {0x3, 0x7, {0x3, 0xfffffffc}}, {0x1, 0x0, {0x3, 0x62b728b2}}, {0x2, 0x4, {0x3, 0x71fe}}, {0x8, 0x7, {0x1, 0xe814}}, {0x8, 0x4, {0x1, 0x8e}}, {0x6, 0x2, {0x1, 0x7fff}}, {0x0, 0x200, {0x1, 0xffff0000}}, {0xfffa, 0x0, {0x3, 0x858}}, {0x9, 0x8001, {0x1, 0x7}}, {0x0, 0x3, {0x1, 0x7}}, {0x9, 0xcfb, {0x3, 0x3341ce0a}}, {0x6, 0x73, {0x0, 0xf}}, {0x79, 0x482, {0x3, 0xe1c}}, {0x4, 0x5, {0x0, 0x3}}, {0x24, 0x5, {0x3, 0x6}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x880}, 0x20004085) (async) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000980)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000480)={0x4bc, 0x1, 0x5, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [{{0x254, 0x1, {{0x0, 0x7fffffff}, 0x2, 0x31, 0x1, 0x1, 0x6, 'syz0\x00', "3f3dc8de89a0fdd75584f7853c2ccba43675a00469b4e9ce561e2a5f6ee7842b", "ffbe46cc321af43e4f5809f086de62956e094a46b9b2c217b30674e842755360", [{0x167c, 0x0, {0x2, 0x6}}, {0xfffd, 0x100, {0x3, 0x8001}}, {0x8000, 0xe6d5, {0x3, 0x9}}, {0x32a1, 0x1, {0x1, 0xb}}, {0x7, 0x1000, {0x3, 0xfffffff9}}, {0x4, 0x81, {0x3, 0x5}}, {0x7ff, 0xf, {0x2, 0x8}}, {0x401, 0xe229, {0x0, 0x483}}, {0x1, 0x9, {0x2, 0x2}}, {0x401, 0xfffb, {0x3, 0x8}}, {0x1000, 0x24}, {0x8, 0x7, {0x2, 0x3}}, {0xb, 0x0, {0x2, 0x8000}}, {0x3ff, 0x7, {0x3, 0xa91}}, {0x28, 0x2, {0x0, 0x78d}}, {0x4, 0xa, {0x0, 0xa5}}, {0x5, 0x9, {0x0, 0xb7}}, {0x3, 0x1ff, {0x1, 0x401}}, {0x3, 0x2, {0x1, 0x5}}, {0xce27, 0x8}, {0x4, 0x9, {0x2, 0xfffffffc}}, {0x5c00, 0x2, {0x3, 0x4}}, {0x1000, 0x76f, {0x1, 0x81}}, {0x9, 0x401, {0x0, 0x5}}, {0x3, 0xa, {0x1, 0x2}}, {0xfff9, 0xfe78, {0x3, 0x1dde}}, {0x2b8, 0x4, {0x1, 0xcf}}, {0x8, 0x2, {0x1, 0x411}}, {0x6, 0xc, {0x2, 0x9}}, {0x3, 0x5, {0x0, 0x10000}}, {0x6, 0x6, {0x3, 0xb83}}, {0x6, 0x9, {0x2, 0x9}}, {0xef8e, 0xfffb, {0x1, 0xffff}}, {0x6, 0xd519, {0x3}}, {0x1, 0x8, {0x1, 0x4}}, {0x2, 0x6, {0x0, 0x80}}, {0x5, 0x1, {0x1, 0x969}}, {0x7, 0x9, {0x3, 0x4}}, {0xf, 0xe0b, {0x0, 0x8b}}, {0x5, 0xaa3c, {0x0, 0x2}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0x3, 0x9, 0x4, 0x8, 0x27, 'syz0\x00', "2cbd8ff7ee1f79bc8e4e947da3c620ffca3cd9c6c84193d0327c360a6fc86a45", "ecb24079b306a40d31f6c009bd7b2576fbfd36c5a259952ac1e5f28f414cef29", [{0x4, 0x2, {0x0, 0x2}}, {0x7ff, 0x5, {0x0, 0x66}}, {0x8, 0x9, {0x1, 0x6}}, {0x2, 0x8001, {0x1, 0x1}}, {0x53, 0x9, {0x3, 0x7f}}, {0x238, 0x8, {0x3, 0x5}}, {0x8, 0x9, {0x0, 0x5}}, {0xffff, 0x7fff, {0x0, 0x2}}, {0x50c, 0xfcd, {0x2, 0xffffff33}}, {0x1, 0x4, {0x3, 0x7}}, {0xf01, 0x0, {0x0, 0x9}}, {0x1, 0x1, {0x3, 0x9}}, {0x2, 0x81, {0x3}}, {0x9, 0x6e, {0x2, 0x6}}, {0x80, 0x1, {0x2, 0x7}}, {0xf, 0x1, {0x2, 0x6}}, {0x4, 0x4, {0x2, 0x5}}, {0xfff9, 0x9, {0x3, 0x1}}, {0x5d21, 0x1e88, {0x2, 0x3}}, {0xbc15, 0x6, {0x3, 0xfffffffc}}, {0x3d04, 0x8, {0x3, 0x8000}}, {0x14, 0x40, {0x0, 0x48}}, {0xed8, 0xc, {0x0, 0x8}}, {0xfffb, 0x7}, {0x6, 0x3ff, {0x1, 0x6}}, {0x3, 0x7, {0x3, 0xfffffffc}}, {0x1, 0x0, {0x3, 0x62b728b2}}, {0x2, 0x4, {0x3, 0x71fe}}, {0x8, 0x7, {0x1, 0xe814}}, {0x8, 0x4, {0x1, 0x8e}}, {0x6, 0x2, {0x1, 0x7fff}}, {0x0, 0x200, {0x1, 0xffff0000}}, {0xfffa, 0x0, {0x3, 0x858}}, {0x9, 0x8001, {0x1, 0x7}}, {0x0, 0x3, {0x1, 0x7}}, {0x9, 0xcfb, {0x3, 0x3341ce0a}}, {0x6, 0x73, {0x0, 0xf}}, {0x79, 0x482, {0x3, 0xe1c}}, {0x4, 0x5, {0x0, 0x3}}, {0x24, 0x5, {0x3, 0x6}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x880}, 0x20004085) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x58, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xa6}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1000}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xf2b}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_MODE={0xa, 0x2, {0x7ff, 0x2}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9b141d1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) (async) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') (async) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000001c0)) syz_emit_ethernet(0x4a, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0\x00') mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2acd0da, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') read$FUSE(r4, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5}, 0x50) (async) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5}, 0x50) epoll_create1(0x0) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000001c0)={0xe0000009}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c7132fd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f03722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107aa8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bed64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82235fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff36c5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a00", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0xfffffffffffffffe, 0x6, {0x4, 0x1, 0xfffffeffffffffff, 0x0, 0x1, 0x0, {0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, 0x2000000, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m33.515129433s ago: executing program 1 (id=1038): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xf1, 0x800, &(0x7f0000006680)) getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) fstat(r1, &(0x7f0000000480)) getpid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) flock(r0, 0x5) 3m33.063760278s ago: executing program 1 (id=1041): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) (async) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x24, 0x64, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}}, 0x20000044) 3m31.749790251s ago: executing program 32 (id=1041): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) (async) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x24, 0x64, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}}, 0x20000044) 2m36.4384108s ago: executing program 4 (id=1436): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0dffff994b0600000080e6110000000000000031980935cad21c800038ae259958f623c7ed2b63d25888279145a6de73274a9e363c403483270d9fc2ebedaf916d78ff1586dc2bc5da840520b27735b4ce154f91b7ea8693f82ec1b2828671eeb5", @ANYRES32=r0, @ANYBLOB="000000000000000085000000020000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x497, &(0x7f00000003c0)={0x0, 0x4885, 0x100, 0x0, 0x1d}, &(0x7f0000000340), &(0x7f0000000600), &(0x7f0000000000)) getpid() r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) writev(r2, &(0x7f0000001480)=[{&(0x7f0000000180)="a5", 0xfdef}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000003b80), 0x1, 0x4008094) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3, &(0x7f00000003c0)=0x0) io_getevents(r6, 0x4, 0x26, &(0x7f00000019c0), 0x0) io_submit(r6, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x400, r5, 0x0, 0x0, 0x8000000004}]) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r4, @ANYBLOB="0800000000000000000000000000000000000000e4c748c4d1fbf3379d25475ab0cd271ed9671dba2b3b3a80881263d5f5ff", @ANYRES32=r7, @ANYRES32=r5, @ANYBLOB="04000000030000000300"/28], 0x50) ioctl$KVM_GET_CLOCK(r5, 0x8030ae7c, &(0x7f0000000200)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$sg(&(0x7f0000000380), 0x6, 0x0) 2m36.387646958s ago: executing program 4 (id=1437): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf61000000000000070100000400000085000000a0000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m36.325692444s ago: executing program 4 (id=1438): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) 2m33.278579167s ago: executing program 4 (id=1441): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x25) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff) (async) mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/trace_options\x00', 0x2, 0x0) read(r0, &(0x7f0000000200)=""/150, 0x96) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') (async) unlink(&(0x7f00000002c0)='./file0\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x801, 0x70bd2c, 0x25dfdb00, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x801, 0x70bd2c, 0x25dfdb00, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) ioctl$RTC_WKALM_SET(r1, 0x541b, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c00, 0x0) request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='@\x00', 0xfffffffffffffffb) (async) request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='@\x00', 0xfffffffffffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) statfs(&(0x7f0000000040)='./proc/thread-self/fail-nth\x00', &(0x7f0000000180)=""/178) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)='3', 0x4e) memfd_create(0x0, 0x1) (async) memfd_create(0x0, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) 2m31.774850396s ago: executing program 4 (id=1445): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x21c, 0x14, 0x1, 0x70bd2d, 0x0, "", [@nested={0x20a, 0x0, 0x0, 0x1, [@generic="77273e417b3009a815e9d9a2bc8304087c763196bcec6ba4b0ab37e633a24712050000d3d736", @generic="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", @typed={0x8, 0x48, 0x0, 0x0, @pid}, @generic="c6f7c5b183f7d0af47c5916b9f7e9017db195533c508ee7ad2c777e1eaf08d4b92281ead73ccbf53c3d41fb4d13dfa94f7c6ff516316f6170e9739a40ec3ac4b628c875b5b611834dad89811b2b747c3d36c2a0a3a30d908bd13fdd53ed8869babfb5cb1d290684d2cec34c5e7d358893ab00aa53800f024a51999d48f1f7c01b9d46406b900a0037a91a2393784ff82194712f19dd145bce5a08a827ecdca9eccc2d28f9f8f3976d16bd15cea091f358d2f63bededc8669"]}]}, 0x21c}], 0x1}, 0x0) close(r1) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x1ac, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x17c, 0x2, [@TCA_BASIC_ACT={0x70, 0x3, [@m_connmark={0x6c, 0x1, 0x0, 0x0, {{0xd}, {0x400, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffc700, 0x3, 0x6, 0xf16, 0x3}, 0x3f82}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x3, 0x4, 0x40}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x9}}, @TCA_BASIC_ACT={0x100, 0x3, [@m_sample={0x40, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x12, 0x6, "09dc9faff8587ce77b2e04278809"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x90, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x400, 0x3, 0x2, 0xaa73}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xff, 0x4, 0x5, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x2c, 0x20, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) listen(r5, 0x8) 2m31.156659379s ago: executing program 4 (id=1451): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', '', [{0x20, '\xc0z\xa6\xd3\xdb\b\xeb\xa7\x80\xd9\xaf\xb4\xfc\b\t'}]}, 0x14) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m31.090266077s ago: executing program 33 (id=1451): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', '', [{0x20, '\xc0z\xa6\xd3\xdb\b\xeb\xa7\x80\xd9\xaf\xb4\xfc\b\t'}]}, 0x14) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 4.01785895s ago: executing program 0 (id=2351): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000560001000008000000000000bd008200fdff006be384b4989cb1a4b910950ac8e8da7a1b558c4d9f2b10ca8a571750bd72ebc94f15d2af2adb9cada4cac72c83e86340a900b006000000b072f19d9aac8e4cb2a56ffc7cfc74f15b3566226dad6ee6df524511abd3d31ca5ad71898939c2980ab982c592ff90778386d39cde43fbebf5d6e136a862938b6fa982e37c1b51616a004dcb08608d13acc4adffc32bdbc7655ace4663f211ada7c9f9a88c9b127f8821aa39d1cd94d5d35238"], 0xd0}], 0x1, 0x0, 0x0, 0x88bb}, 0x80) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) mmap(&(0x7f00009a8000/0x4000)=nil, 0x4000, 0x2, 0x40010, 0xffffffffffffffff, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x200005, 0xd, 0x80000}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000040100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="008000"/28], 0x50) syz_emit_vhci(0x0, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed8, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000040)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x180, 0x0) 4.017469074s ago: executing program 3 (id=2352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x70, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PORT={0x5, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x15}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040844}, 0x0) 3.931271014s ago: executing program 3 (id=2355): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) read(r1, &(0x7f0000000080)=""/45, 0x2d) (fail_nth: 2) 3.879302848s ago: executing program 3 (id=2356): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(r3, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'vlan0\x00'}) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000019180)="97a1606ab58e71aafe5bbd52e840795961f2e9bf92796ccfdcc9d98f213a79f8ae9e01ffe3f8244b35cf18d01b8c6e180c3b4ea4621ea6b4c9288ef3adacdb4ab3164b48327ce7f5cd1500675135b589d0e2aee950702e249496924544e16375ed49effa0d77130827b59112bb1a75f51bf79b85d72479b725ea9ebc7cf8092aab09d83ec9ad5a1afaa8c319af9b98fb6db1acd8a1b2170fdbe041c9803d69426f4a5e803ec8d96f5c295c264ed29d47927ae4438cf7defb2e3536e4075b691cc208f41516c4a6212f4149ccb4") r4 = socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000190c0)={'macvlan0\x00', 0x1000}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000019080)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xd19}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0) 2.989586263s ago: executing program 2 (id=2357): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x50) write(r0, &(0x7f0000000500)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) getpid() openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x4, 0x0, "37bb54f0"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000100)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x2000) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000740)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc040564a, &(0x7f00000000c0)) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) write(r1, &(0x7f0000001400)='2\n', 0x2) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r5, &(0x7f0000000700)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000002400)='./config/nullb/nullb2/zoned\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002600)='./config/nullb/nullb2/power\x00', 0xa02, 0x0) 2.989357906s ago: executing program 0 (id=2358): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.858324496s ago: executing program 0 (id=2359): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000140), 0x101000, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x32, @multicast1, 0x4e22, 0x1, 'nq\x00', 0x21, 0x4, 0x65}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) socket(0xa, 0x3, 0x3a) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r6) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) 2.235182726s ago: executing program 2 (id=2361): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='ns\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000000280)='GPL\x00') r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, 0x0}}], 0x2, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) getpriority(0x0, r0) r4 = syz_open_dev$video(&(0x7f0000000080), 0x8003, 0x105580) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000100)={0xe000003, 0x52424752, 0x3, 0x870, 0x2, @discrete={0x2, 0x9}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) getsockopt$inet6_tcp_buf(r5, 0x11a, 0x1f, 0x0, &(0x7f00000001c0)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) r7 = syz_clone3(&(0x7f0000000080)={0x2a694b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) ptrace$setregset(0x4205, r7, 0x2, &(0x7f0000000540)={&(0x7f0000000440)="4f4722b53bf8ade65c28b39203fc48c3fb6634b900aa21fa63b263c574cf268cc54b743a6bf6dace2e70d0f9b61021c7ba4e577833f6790f3dbc9a3863f68c483b6ebbe0a8b0343d9e237e6d0c1662babb327036a291a0415f4ab26478ecc8958686a6210d2711c59626164438c04f4f115cd5f9140e73c34fbc81a5c37050513e10c604e93cdc340924c62cd230fb7fee68101bca0d0f22386bf37d5890a785dc09ef331f41c739f2145b01df73fbd195bfd9bf6c59e86efadd5fe261c5f7c8b287ddf85d46f7edd109ab610cb78c2cfc36d039d6a4eebf1a887106633c0d8305aa5c4e0f545009", 0xe8}) 1.861146987s ago: executing program 5 (id=2363): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x70, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PORT={0x5, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x15}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040844}, 0x0) (fail_nth: 2) 1.781550765s ago: executing program 5 (id=2365): ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000800)={0x8, {0x8, 0x0, 0xe, 0x9}}) 1.691738764s ago: executing program 5 (id=2366): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) 1.691333934s ago: executing program 0 (id=2367): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) unshare(0x22020600) (async) unshare(0x22020600) socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x10000000) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() (async) r1 = getpid() r2 = openat$ptp0(0xffffff9c, &(0x7f00000001c0), 0x20000, 0x0) sendfile(r2, r2, 0x0, 0x5) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) (async) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0xc0) recvmmsg(r3, &(0x7f0000000340), 0x0, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f0000000340), 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x80002, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300776c616e30000000000000000000000012e0531f7ad3f42c20e32eb771db8200a8a19e6053163f3d4262"], 0x38}}, 0x4000080) socket$nl_rdma(0x10, 0x3, 0x14) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000041401000000000002000000080001000000000008000300"], 0x20}}, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 1.606192132s ago: executing program 0 (id=2368): socket$inet6(0xa, 0xa, 0x7ff) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@gettaction={0xa4, 0x32, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc3}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x746}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x33, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40850}, 0x4c004) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x486e, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), 0x0, &(0x7f00000003c0)) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="070000000400000018000000429065a0"], 0x50) r1 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000640)="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", 0x2000, 0x0) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r1, 0x24, &(0x7f0000000400), 0x0) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100", 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x80000001, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_NOTIFY_RESEND(r2, &(0x7f00000001c0)={0x14}, 0x14) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) 1.468917103s ago: executing program 3 (id=2369): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb0}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3fd}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x4000000) (fail_nth: 2) 1.44732518s ago: executing program 3 (id=2370): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}]}]}]}]}, 0x4c}}, 0x0) (fail_nth: 2) 1.341009314s ago: executing program 3 (id=2371): unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4b291000) (async, rerun: 64) r0 = getpid() (rerun: 64) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) move_pages(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000ffe000/0x2000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x101000, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0x11) (async) openat$cachefiles(0xffffff9c, &(0x7f0000000080), 0x101002, 0x0) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0xa, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async, rerun: 64) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 64) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x39}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async, rerun: 64) unshare(0x2c050100) (rerun: 64) unshare(0x14000000) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_usb_connect(0x2, 0x0, 0x0, 0x0) (rerun: 32) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000"], 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x80, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @random="d0e71c9ef82f"}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xffff}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x810}, 0x20040000) 1.314247401s ago: executing program 2 (id=2372): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d55906000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9ccd5788029901e5a79d8b9990ace8f74087f25ad50c4608800"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x2a, 0x0, &(0x7f0000000380)="0b00000000000000556c36000033f90b15a865fb2b9722333313e6586226ee64c67107a08d36c7d3515b", 0x0, 0x7fefffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 693.844335ms ago: executing program 0 (id=2373): listen(0xffffffffffffffff, 0x800) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r1 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x40045532, &(0x7f0000003f80)=""/4086) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x44, r7, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r7, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x6000) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0xd00) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r8, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r9 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r9, 0x1, 0x5, &(0x7f0000000180)=0x400005, 0x4) sendmmsg$inet(r9, &(0x7f0000000ec0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x4800) r10 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) connect$phonet_pipe(r10, 0x0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r10, 0x12, 0x3, &(0x7f0000000000)=0x4, 0x4) dup(r0) 693.734072ms ago: executing program 5 (id=2374): ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000800)={0x8, {0x8, 0x0, 0xe, 0x9}}) 693.668256ms ago: executing program 2 (id=2375): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/zram0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) pwrite64(r0, &(0x7f0000000700)="19", 0x1, 0x3fc) close(r0) 671.266586ms ago: executing program 2 (id=2376): r0 = socket(0x1d, 0x2, 0x6) r1 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000040)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x33f81def, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f00000000c0)) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_delete(0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r0, 0x0, 0x40084) 620.611867ms ago: executing program 5 (id=2377): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x22826, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000000)={0xda, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000240)=@arm64) r3 = creat(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145) symlinkat(&(0x7f00000001c0)='./file1\x00', r3, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000bfd2b357620012", 0x32}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0xfffff9, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, 0x0}, 0x108) r7 = eventfd(0x5f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4010, r3, 0xa6d9d000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001240)=ANY=[@ANYBLOB="bc0000001900010000000000fedbdf25640101010000000000000000000000002001000000000000000000000000000100000005000000000a0000105c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fcdfffffffffffffa9000000000000000300000000000000fcffffffffffffff10f3fffffffff9ffffffffffffffffff0010000000000000c774a71d00000000ff07000000000000ff090000000000000600000200000000000000040000000803000000000000000001000108001f0004000000"], 0xbc}, 0x1, 0x0, 0x0, 0x40887}, 0x4000800) sendmsg$nl_xfrm(r1, 0x0, 0x10) madvise(&(0x7f0000dc5000/0x3000)=nil, 0x3000, 0xe) ioctl$XFS_IOC_PATH_TO_HANDLE(r8, 0xc0385869, &(0x7f00000002c0)={r5, &(0x7f0000000140)='%\xb8', 0x0, &(0x7f0000000180)={@align=0x7fffffffffffffff, {0x6, 0x8e70, 0x9, 0x4}}, 0x2c, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000280)=0x3}) ioctl$TIOCSETD(r9, 0x5423, 0x0) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) ioctl$KVM_IOEVENTFD(r5, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r7}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000000)={0x0, 0x300000, 0x8}) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') 462.30365ms ago: executing program 5 (id=2378): syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ffbe"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000004e40)={0x1c, 0x6, 0xefff, 0x7, "b6511e00000049500000008000000000f82a1d73f20000000000000000fbf29c"}) 0s ago: executing program 2 (id=2379): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000180)="a5", 0xfdef}], 0x1) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010800000000000000000500000305000400000000000900020073797a32000000000500040000b755f025000300686173683a69702c6d61726b0000000016000300686173683a6e65742c706f72742c6e657400000004000780"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000e) r2 = socket(0x2b, 0x80801, 0x1) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @rand_addr=0x64010101}, {0x306, @random="89565009bbe5"}, 0x2, {0x2, 0x4e21, @remote}, 'veth0_to_bridge\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='tunl0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) creat(&(0x7f0000000380)='./file2\x00', 0x22) ptrace$setregs(0xd, r9, 0x0, 0x0) sendmsg$AUDIT_SET(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x3c, 0x3e9, 0x200, 0x70bd2d, 0x25dfdbfb, {0x68, 0x0, 0x2, r9, 0x10, 0xa, 0x9, 0x6426d96, 0x0, 0xfffffff7, 0x56c0}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x6}, 0x4000) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x4000000) kernel console output (not intermixed with test programs): [T11765] Call Trace: [ 336.444474][T11765] [ 336.444483][T11765] dump_stack_lvl+0x100/0x190 [ 336.444508][T11765] should_fail_ex.cold+0x5/0xa [ 336.444524][T11765] _copy_from_user+0x2e/0xd0 [ 336.444537][T11765] get_old_timespec32+0x82/0x130 [ 336.444553][T11765] ? __pfx_get_old_timespec32+0x10/0x10 [ 336.444569][T11765] ? count_memcg_events_mm.constprop.0+0x109/0x2a0 [ 336.444585][T11765] __ia32_sys_clock_nanosleep_time32+0x1ce/0x480 [ 336.444602][T11765] ? __pfx___ia32_sys_clock_nanosleep_time32+0x10/0x10 [ 336.444621][T11765] do_int80_emulation+0x166/0x650 [ 336.444640][T11765] asm_int80_emulation+0x1a/0x20 [ 336.444651][T11765] RIP: 0023:0xf71e75ab [ 336.444661][T11765] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 336.444672][T11765] RSP: 002b:00000000f54a63bc EFLAGS: 00000246 ORIG_RAX: 000000000000010b [ 336.444683][T11765] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 336.444691][T11765] RDX: 00000000f54a6454 RSI: 00000000f54a644c RDI: 0000000000000000 [ 336.444698][T11765] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 336.444704][T11765] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 336.444711][T11765] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 336.444725][T11765] [ 336.445281][T11762] netlink: 'syz.0.1873': attribute type 39 has an invalid length. [ 336.446135][T11762] macvlan1: entered promiscuous mode [ 336.446155][T11762] macvlan1: entered allmulticast mode [ 336.648770][ T5822] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 336.808778][ T5822] usb 7-1: Using ep0 maxpacket: 32 [ 336.809537][ T5822] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 336.810550][ T5822] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 336.810563][ T5822] usb 7-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 336.812349][ T5822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.812361][ T5822] usb 7-1: Product: syz [ 336.812369][ T5822] usb 7-1: Manufacturer: syz [ 336.812377][ T5822] usb 7-1: SerialNumber: syz [ 336.853273][T11780] x_tables: duplicate underflow at hook 3 [ 337.018251][T11783] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 337.037686][ T5822] usb 7-1: USB disconnect, device number 16 [ 337.434350][T11792] FAULT_INJECTION: forcing a failure. [ 337.434350][T11792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.434421][T11792] CPU: 0 UID: 0 PID: 11792 Comm: syz.0.1885 Tainted: G L syzkaller #0 PREEMPT(full) [ 337.434461][T11792] Tainted: [L]=SOFTLOCKUP [ 337.434470][T11792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 337.434482][T11792] Call Trace: [ 337.434489][T11792] [ 337.434497][T11792] dump_stack_lvl+0x100/0x190 [ 337.434526][T11792] should_fail_ex.cold+0x5/0xa [ 337.434564][T11792] _copy_to_user+0x32/0xd0 [ 337.434588][T11792] simple_read_from_buffer+0xcb/0x170 [ 337.434612][T11792] proc_fail_nth_read+0x1af/0x230 [ 337.434643][T11792] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 337.434675][T11792] ? rw_verify_area+0xce/0x6d0 [ 337.434702][T11792] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 337.434733][T11792] vfs_read+0x1e4/0xb40 [ 337.434751][T11792] ? lock_acquire+0x1d1/0x380 [ 337.434775][T11792] ? __fget_files+0x34/0x3d0 [ 337.434796][T11792] ? __pfx_vfs_read+0x10/0x10 [ 337.434812][T11792] ? find_held_lock+0x2b/0x80 [ 337.434832][T11792] ? __fget_files+0x215/0x3d0 [ 337.434856][T11792] ? __fget_files+0x21f/0x3d0 [ 337.434882][T11792] ksys_read+0x12a/0x250 [ 337.434901][T11792] ? __pfx_ksys_read+0x10/0x10 [ 337.434953][T11792] do_int80_emulation+0x166/0x650 [ 337.435006][T11792] asm_int80_emulation+0x1a/0x20 [ 337.435025][T11792] RIP: 0023:0xf71475ab [ 337.435041][T11792] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 337.435060][T11792] RSP: 002b:00000000f53fd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 337.435080][T11792] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53fd5d0 [ 337.435092][T11792] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 337.435104][T11792] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 337.435115][T11792] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 337.435147][T11792] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 337.435174][T11792] [ 337.500367][ T44] audit: type=1800 audit(1788580783.254:292): pid=11795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1886" name="zoned" dev="configfs" ino=36362 res=0 errno=0 [ 337.506076][ T44] audit: type=1800 audit(1788580783.254:293): pid=11795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1886" name="zone_nr_conv" dev="configfs" ino=36363 res=0 errno=0 [ 337.511564][ T44] audit: type=1326 audit(1788580783.264:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.0.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 337.511748][ T44] audit: type=1326 audit(1788580783.264:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.0.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 337.518097][ T44] audit: type=1326 audit(1788580783.264:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.0.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf700efec code=0x7ffc0000 [ 337.518125][ T44] audit: type=1326 audit(1788580783.264:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.0.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 337.518145][ T44] audit: type=1326 audit(1788580783.264:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.0.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 337.519834][ T44] audit: type=1326 audit(1788580783.264:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.0.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf700efec code=0x7ffc0000 [ 337.520224][ T44] audit: type=1326 audit(1788580783.274:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.0.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 337.528041][ T44] audit: type=1326 audit(1788580783.274:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.0.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 337.764639][T11800] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1887'. [ 337.840080][T11800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1887'. [ 337.905460][T11806] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1889'. [ 338.671904][T11824] x_tables: duplicate underflow at hook 3 [ 338.756806][T11829] rdma_rxe: rxe_newlink: failed to add lo [ 339.027379][T11841] syzkaller0: entered promiscuous mode [ 339.027447][T11841] syzkaller0: entered allmulticast mode [ 339.134921][T11847] jffs2: notice: (11847) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 339.146545][T11847] FAULT_INJECTION: forcing a failure. [ 339.146545][T11847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.146600][T11847] CPU: 1 UID: 0 PID: 11847 Comm: syz.2.1906 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.146628][T11847] Tainted: [L]=SOFTLOCKUP [ 339.146633][T11847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 339.146640][T11847] Call Trace: [ 339.146645][T11847] [ 339.146649][T11847] dump_stack_lvl+0x100/0x190 [ 339.146669][T11847] should_fail_ex.cold+0x5/0xa [ 339.146683][T11847] strncpy_from_user+0x3b/0x2d0 [ 339.146699][T11847] do_getname+0x78/0x390 [ 339.146716][T11847] __ia32_sys_mkdir+0x56/0x90 [ 339.146730][T11847] __do_fast_syscall_32+0x13a/0x8b0 [ 339.146746][T11847] ? lockdep_hardirqs_on+0x7d/0x110 [ 339.146762][T11847] do_fast_syscall_32+0x32/0x70 [ 339.146777][T11847] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 339.146791][T11847] RIP: 0023:0xf705efec [ 339.146810][T11847] Code: Unable to access opcode bytes at 0xf705efc2. [ 339.146816][T11847] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000027 [ 339.146828][T11847] RAX: ffffffffffffffda RBX: 00000000800002c0 RCX: 00000000000000a0 [ 339.146835][T11847] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 339.146841][T11847] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 339.146848][T11847] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 339.146855][T11847] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 339.146868][T11847] [ 339.228221][T11860] jffs2: notice: (11860) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 339.424751][T11877] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1916'. [ 339.425246][T11877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1916'. [ 339.625899][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1918'. [ 339.717953][T11889] x_tables: duplicate underflow at hook 3 [ 339.733077][T11891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1918'. [ 339.820309][T11896] FAULT_INJECTION: forcing a failure. [ 339.820309][T11896] name failslab, interval 1, probability 0, space 0, times 0 [ 339.820371][T11896] CPU: 1 UID: 0 PID: 11896 Comm: syz.3.1921 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.820388][T11896] Tainted: [L]=SOFTLOCKUP [ 339.820392][T11896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 339.820399][T11896] Call Trace: [ 339.820404][T11896] [ 339.820409][T11896] dump_stack_lvl+0x100/0x190 [ 339.820428][T11896] should_fail_ex.cold+0x5/0xa [ 339.820444][T11896] should_failslab+0xc2/0x120 [ 339.820458][T11896] kmem_cache_alloc_noprof+0x92/0x6a0 [ 339.820471][T11896] ? dst_alloc+0x99/0x1a0 [ 339.820486][T11896] dst_alloc+0x99/0x1a0 [ 339.820499][T11896] rt_dst_alloc+0x35/0x3a0 [ 339.820515][T11896] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 339.820561][T11896] ip_route_output_key_hash+0x118/0x2b0 [ 339.820580][T11896] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 339.820601][T11896] ? udp_sendmsg+0x6db/0x2710 [ 339.820615][T11896] ? find_held_lock+0x2b/0x80 [ 339.820629][T11896] ip_route_output_flow+0x27/0x150 [ 339.820648][T11896] udp_sendmsg+0x19c5/0x2710 [ 339.820665][T11896] ? __pfx_udp_sendmsg+0x10/0x10 [ 339.820678][T11896] ? __lock_acquire+0x4c5/0x1ec0 [ 339.820699][T11896] ? release_sock+0x21/0x280 [ 339.820716][T11896] ? inet_autobind+0x145/0x1a0 [ 339.820730][T11896] ? find_held_lock+0x2b/0x80 [ 339.820743][T11896] ? lockdep_hardirqs_on+0x7d/0x110 [ 339.820758][T11896] ? inet_autobind+0x145/0x1a0 [ 339.820771][T11896] ? __local_bh_enable_ip+0xa5/0x120 [ 339.820788][T11896] ? inet_autobind+0x14a/0x1a0 [ 339.820806][T11896] ? __pfx_udp_sendmsg+0x10/0x10 [ 339.820820][T11896] inet_sendmsg+0x105/0x140 [ 339.820836][T11896] __sys_sendto+0x453/0x4e0 [ 339.820847][T11896] ? __pfx_inet_sendmsg+0x10/0x10 [ 339.820863][T11896] ? __pfx___sys_sendto+0x10/0x10 [ 339.820886][T11896] ? fput+0x7c/0x100 [ 339.820899][T11896] ? ksys_write+0x1ac/0x250 [ 339.820911][T11896] __ia32_sys_sendto+0xdd/0x1b0 [ 339.820923][T11896] ? __do_fast_syscall_32+0xb3/0x8b0 [ 339.820939][T11896] ? lockdep_hardirqs_on+0x7d/0x110 [ 339.820953][T11896] __do_fast_syscall_32+0x13a/0x8b0 [ 339.820968][T11896] ? lockdep_hardirqs_on+0x7d/0x110 [ 339.820983][T11896] do_fast_syscall_32+0x32/0x70 [ 339.820999][T11896] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 339.821013][T11896] RIP: 0023:0xf7fe2fec [ 339.821025][T11896] Code: Unable to access opcode bytes at 0xf7fe2fc2. [ 339.821031][T11896] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 339.821042][T11896] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 339.821049][T11896] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080000300 [ 339.821056][T11896] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 339.821062][T11896] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 339.821068][T11896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 339.821082][T11896] [ 340.663040][T11917] FAULT_INJECTION: forcing a failure. [ 340.663040][T11917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.663099][T11917] CPU: 3 UID: 0 PID: 11917 Comm: syz.2.1930 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.663145][T11917] Tainted: [L]=SOFTLOCKUP [ 340.663151][T11917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 340.663158][T11917] Call Trace: [ 340.663163][T11917] [ 340.663168][T11917] dump_stack_lvl+0x100/0x190 [ 340.663187][T11917] should_fail_ex.cold+0x5/0xa [ 340.663203][T11917] _copy_from_user+0x2e/0xd0 [ 340.663216][T11917] get_compat_msghdr+0xb3/0x480 [ 340.663233][T11917] ? __pfx_get_compat_msghdr+0x10/0x10 [ 340.663254][T11917] ___sys_sendmsg+0x1b6/0x1e0 [ 340.663276][T11917] ? __pfx____sys_sendmsg+0x10/0x10 [ 340.663311][T11917] ? find_held_lock+0x2b/0x80 [ 340.663345][T11917] __sys_sendmsg+0x160/0x210 [ 340.663369][T11917] ? __pfx___sys_sendmsg+0x10/0x10 [ 340.663405][T11917] ? __pfx_ksys_write+0x10/0x10 [ 340.663420][T11917] __do_fast_syscall_32+0x13a/0x8b0 [ 340.663436][T11917] ? lockdep_hardirqs_on+0x7d/0x110 [ 340.663452][T11917] do_fast_syscall_32+0x32/0x70 [ 340.663468][T11917] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 340.663483][T11917] RIP: 0023:0xf705efec [ 340.663496][T11917] Code: Unable to access opcode bytes at 0xf705efc2. [ 340.663502][T11917] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 340.663514][T11917] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 340.663521][T11917] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 340.663527][T11917] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 340.663534][T11917] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 340.663541][T11917] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 340.663555][T11917] [ 340.762420][T11923] input: syz1 as /devices/virtual/input/input25 [ 340.861428][T11929] syzkaller0: entered promiscuous mode [ 340.861482][T11929] syzkaller0: entered allmulticast mode [ 340.996192][T11937] jffs2: notice: (11937) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 341.200377][T11954] input: syz1 as /devices/virtual/input/input26 [ 341.358725][ T5806] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 341.485234][T11966] netlink: 'syz.3.1949': attribute type 1 has an invalid length. [ 341.485299][T11966] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1949'. [ 341.508792][ T5806] usb 10-1: Using ep0 maxpacket: 32 [ 341.522764][ T5806] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 341.524796][ T5806] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.526935][ T5806] usb 10-1: config 0 descriptor?? [ 341.605495][ T5806] as10x_usb: device has been detected [ 341.606410][ T5806] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 341.657707][ T5806] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 341.686482][ T5806] as10x_usb: error during firmware upload part1 [ 341.687340][ T5806] Registered device nBox DVB-T Dongle [ 341.730282][ T5806] usb 10-1: USB disconnect, device number 12 [ 341.817784][ T5806] Unregistered device nBox DVB-T Dongle [ 341.819125][ T5806] as10x_usb: device has been disconnected [ 341.871224][T11975] FAULT_INJECTION: forcing a failure. [ 341.871224][T11975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.876012][T11975] CPU: 3 UID: 0 PID: 11975 Comm: syz.3.1950 Tainted: G L syzkaller #0 PREEMPT(full) [ 341.876042][T11975] Tainted: [L]=SOFTLOCKUP [ 341.876048][T11975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 341.876056][T11975] Call Trace: [ 341.876061][T11975] [ 341.876067][T11975] dump_stack_lvl+0x100/0x190 [ 341.876087][T11975] should_fail_ex.cold+0x5/0xa [ 341.876103][T11975] strncpy_from_user+0x3b/0x2d0 [ 341.876120][T11975] do_getname+0x78/0x390 [ 341.876138][T11975] __ia32_sys_unlinkat+0xa0/0x130 [ 341.876154][T11975] __do_fast_syscall_32+0x13a/0x8b0 [ 341.876171][T11975] ? lockdep_hardirqs_on+0x7d/0x110 [ 341.876188][T11975] do_fast_syscall_32+0x32/0x70 [ 341.876205][T11975] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 341.876220][T11975] RIP: 0023:0xf7fe2fec [ 341.876234][T11975] Code: Unable to access opcode bytes at 0xf7fe2fc2. [ 341.876240][T11975] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 000000000000012d [ 341.876252][T11975] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 341.876260][T11975] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 341.876267][T11975] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 341.876274][T11975] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 341.876282][T11975] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 341.876296][T11975] [ 342.090409][T11990] cgroup: Unknown subsys name 'rlimit' [ 342.325265][T11995] tipc: Can't bind to reserved service type 0 [ 342.541412][T12001] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1958'. [ 342.541472][T12001] : renamed from batadv0 [ 342.547307][T12001] 8021q: adding VLAN 0 to HW filter on device  [ 342.834347][T12007] bridge2: entered promiscuous mode [ 342.834426][T12007] bridge2: entered allmulticast mode [ 342.868090][T12007] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1960'. [ 343.252398][T12026] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 343.399157][T12032] Invalid ELF header magic: != ELF [ 343.463640][T12034] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1969'. [ 343.525146][ T1164] IPVS: starting estimator thread 0... [ 343.618894][T12035] IPVS: using max 43 ests per chain, 103200 per kthread [ 344.471607][T12043] FAULT_INJECTION: forcing a failure. [ 344.471607][T12043] name failslab, interval 1, probability 0, space 0, times 0 [ 344.471667][T12043] CPU: 2 UID: 0 PID: 12043 Comm: syz.5.1973 Tainted: G L syzkaller #0 PREEMPT(full) [ 344.471703][T12043] Tainted: [L]=SOFTLOCKUP [ 344.471718][T12043] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 344.471729][T12043] Call Trace: [ 344.471735][T12043] [ 344.471742][T12043] dump_stack_lvl+0x100/0x190 [ 344.471773][T12043] should_fail_ex.cold+0x5/0xa [ 344.471794][T12043] should_failslab+0xc2/0x120 [ 344.471817][T12043] __kmalloc_noprof+0xfc/0x840 [ 344.471829][T12043] ? bpf_test_init.isra.0+0x88/0x100 [ 344.471848][T12043] bpf_test_init.isra.0+0x88/0x100 [ 344.471866][T12043] bpf_prog_test_run_xdp+0x587/0x1670 [ 344.471883][T12043] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 344.471898][T12043] ? fput+0x7c/0x100 [ 344.471912][T12043] ? __bpf_prog_get+0x97/0x290 [ 344.471927][T12043] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 344.471938][T12043] __sys_bpf+0x2265/0x4a30 [ 344.471954][T12043] ? __pfx___sys_bpf+0x10/0x10 [ 344.471963][T12043] ? lock_acquire+0x1d1/0x380 [ 344.471979][T12043] ? get_pid_task+0x2a/0x250 [ 344.471990][T12043] ? find_held_lock+0x2b/0x80 [ 344.472001][T12043] ? get_pid_task+0xfc/0x250 [ 344.472012][T12043] ? get_pid_task+0xfc/0x250 [ 344.472027][T12043] ? proc_fail_nth_write+0x9f/0x220 [ 344.472038][T12043] ? find_held_lock+0x2b/0x80 [ 344.472053][T12043] ? rcu_read_lock_any_held+0x6a/0x90 [ 344.472066][T12043] ? find_held_lock+0x2b/0x80 [ 344.472077][T12043] ? ksys_write+0x190/0x250 [ 344.472087][T12043] ? ksys_write+0x190/0x250 [ 344.472098][T12043] ? lock_acquire+0x1d1/0x380 [ 344.472123][T12043] ? fput+0x7c/0x100 [ 344.472138][T12043] ? __ia32_sys_bpf+0xcc/0x170 [ 344.472149][T12043] __ia32_sys_bpf+0xcc/0x170 [ 344.472161][T12043] ? __do_fast_syscall_32+0xb3/0x8b0 [ 344.472178][T12043] __do_fast_syscall_32+0x13a/0x8b0 [ 344.472194][T12043] ? lockdep_hardirqs_on+0x7d/0x110 [ 344.472211][T12043] do_fast_syscall_32+0x32/0x70 [ 344.472229][T12043] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 344.472244][T12043] RIP: 0023:0xf6ffefec [ 344.472257][T12043] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 344.472263][T12043] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 344.472275][T12043] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000600 [ 344.472282][T12043] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 344.472289][T12043] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 344.472296][T12043] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 344.472303][T12043] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 344.472317][T12043] [ 344.687162][T12054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1977'. [ 344.784316][T12054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1977'. [ 344.838942][ T5818] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 345.009595][ T5818] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 345.013258][ T5818] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.013283][ T5818] usb 10-1: Product: syz [ 345.013295][ T5818] usb 10-1: Manufacturer: syz [ 345.013307][ T5818] usb 10-1: SerialNumber: syz [ 345.258715][ T5806] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 345.448762][ T5818] rtl8150 10-1:1.0: couldn't reset the device [ 345.449071][ T5818] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 345.456008][ T5818] usb 10-1: USB disconnect, device number 13 [ 345.478683][ T5806] usb 7-1: Using ep0 maxpacket: 16 [ 345.501839][ T5806] usb 7-1: unable to get BOS descriptor or descriptor too short [ 345.501901][ T5806] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 345.501940][ T5806] usb 7-1: no configurations [ 345.501948][ T5806] usb 7-1: can't read configurations, error -22 [ 346.107001][T12083] netlink: 'syz.5.1987': attribute type 10 has an invalid length. [ 346.107052][T12083] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1987'. [ 346.107444][T12083] dummy0: entered promiscuous mode [ 346.113464][T12083] bridge0: port 3(dummy0) entered blocking state [ 346.113553][T12083] bridge0: port 3(dummy0) entered disabled state [ 346.113637][T12083] dummy0: entered allmulticast mode [ 346.115044][T12083] bridge0: port 3(dummy0) entered blocking state [ 346.115117][T12083] bridge0: port 3(dummy0) entered forwarding state [ 346.122979][T12083] fuse: Bad value for 'fd' [ 346.339170][ T5806] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 346.488711][ T5806] usb 7-1: Using ep0 maxpacket: 32 [ 346.491653][ T5806] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 346.497452][ T5806] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 346.497666][ T5806] usb 7-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 346.507854][ T5806] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.507897][ T5806] usb 7-1: Product: syz [ 346.507928][ T5806] usb 7-1: Manufacturer: syz [ 346.507952][ T5806] usb 7-1: SerialNumber: syz [ 346.730415][ T5806] usb 7-1: USB disconnect, device number 18 [ 347.271199][ T44] kauditd_printk_skb: 13 callbacks suppressed [ 347.271305][ T44] audit: type=1800 audit(1788580793.024:315): pid=12113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1996" name="file" dev="configfs" ino=37435 res=0 errno=0 [ 347.279022][T12113] mass_storage.0/lun.0: unable to open backing file: f [ 347.348059][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.348116][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.349984][T12120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.503169][T12120] XFS (nullb0): Invalid superblock magic number [ 347.654749][T12138] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 348.089277][T12145] netlink: 'syz.0.2005': attribute type 10 has an invalid length. [ 348.094410][T12145] FAULT_INJECTION: forcing a failure. [ 348.094410][T12145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.100349][T12145] CPU: 1 UID: 0 PID: 12145 Comm: syz.0.2005 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.100399][T12145] Tainted: [L]=SOFTLOCKUP [ 348.100407][T12145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 348.100421][T12145] Call Trace: [ 348.100429][T12145] [ 348.100437][T12145] dump_stack_lvl+0x100/0x190 [ 348.100470][T12145] should_fail_ex.cold+0x5/0xa [ 348.100497][T12145] _copy_from_iter+0x1f4/0x1690 [ 348.100527][T12145] ? __pfx__copy_from_iter+0x10/0x10 [ 348.100550][T12145] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 348.100580][T12145] ? lock_acquire+0x1d1/0x380 [ 348.100613][T12145] copy_page_from_iter+0x238/0x300 [ 348.100639][T12145] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 348.100675][T12145] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 348.100704][T12145] ? __lock_acquire+0x4c5/0x1ec0 [ 348.100748][T12145] ? aa_file_perm+0x197/0x14d0 [ 348.100771][T12145] ? find_held_lock+0x2b/0x80 [ 348.100795][T12145] tun_get_user+0x1674/0x3cc0 [ 348.100830][T12145] ? __lock_acquire+0x4c5/0x1ec0 [ 348.100857][T12145] ? __pfx_tun_get_user+0x10/0x10 [ 348.100882][T12145] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 348.100922][T12145] ? find_held_lock+0x2b/0x80 [ 348.100944][T12145] ? tun_get+0x191/0x370 [ 348.100971][T12145] ? tun_get+0x191/0x370 [ 348.101004][T12145] tun_chr_write_iter+0xdc/0x200 [ 348.101030][T12145] vfs_write+0x6af/0x1050 [ 348.101051][T12145] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 348.101076][T12145] ? __pfx_vfs_write+0x10/0x10 [ 348.101093][T12145] ? find_held_lock+0x2b/0x80 [ 348.101130][T12145] ksys_write+0x12a/0x250 [ 348.101149][T12145] ? __pfx_ksys_write+0x10/0x10 [ 348.101176][T12145] do_int80_emulation+0x166/0x650 [ 348.101205][T12145] asm_int80_emulation+0x1a/0x20 [ 348.101225][T12145] RIP: 0023:0xf71475ab [ 348.101242][T12145] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 348.101260][T12145] RSP: 002b:00000000f53fd44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 348.101282][T12145] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000300 [ 348.101296][T12145] RDX: 000000000000003a RSI: 0000000000000000 RDI: 0000000000000000 [ 348.101308][T12145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 348.101319][T12145] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 348.101331][T12145] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 348.101358][T12145] [ 348.448691][ T5104] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 348.601994][ T5104] usb 5-1: Using ep0 maxpacket: 32 [ 348.602597][ T5104] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 348.603998][ T5104] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 348.604019][ T5104] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 348.606050][ T5104] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.606071][ T5104] usb 5-1: Product: syz [ 348.606083][ T5104] usb 5-1: Manufacturer: syz [ 348.606096][ T5104] usb 5-1: SerialNumber: syz [ 348.833919][ T5104] usb 5-1: USB disconnect, device number 29 [ 348.872992][T12163] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 348.911400][T12166] netlink: 'syz.5.2012': attribute type 10 has an invalid length. [ 348.914555][T12166] syz_tun: entered promiscuous mode [ 348.922631][T12166] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 348.973768][ T44] audit: type=1800 audit(1788580794.724:316): pid=12170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2013" name="nodeid" dev="configfs" ino=37525 res=0 errno=0 [ 348.976310][T12170] FAULT_INJECTION: forcing a failure. [ 348.976310][T12170] name failslab, interval 1, probability 0, space 0, times 0 [ 348.976362][T12170] CPU: 1 UID: 0 PID: 12170 Comm: syz.3.2013 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.976394][T12170] Tainted: [L]=SOFTLOCKUP [ 348.976401][T12170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 348.976408][T12170] Call Trace: [ 348.976414][T12170] [ 348.976421][T12170] dump_stack_lvl+0x100/0x190 [ 348.976443][T12170] should_fail_ex.cold+0x5/0xa [ 348.976460][T12170] should_failslab+0xc2/0x120 [ 348.976477][T12170] kmem_cache_alloc_noprof+0x92/0x6a0 [ 348.976492][T12170] ? __asan_memcpy+0x3c/0x60 [ 348.976504][T12170] ? __kernfs_new_node+0xd2/0xa10 [ 348.976523][T12170] __kernfs_new_node+0xd2/0xa10 [ 348.976541][T12170] ? __pfx___kernfs_new_node+0x10/0x10 [ 348.976558][T12170] ? lock_acquire+0x1d1/0x380 [ 348.976576][T12170] ? kernfs_root+0x23/0x2a0 [ 348.976591][T12170] ? find_held_lock+0x2b/0x80 [ 348.976617][T12170] ? kernfs_root+0xee/0x2a0 [ 348.976632][T12170] ? kernfs_root+0xee/0x2a0 [ 348.976649][T12170] kernfs_new_node+0x117/0x150 [ 348.976668][T12170] kernfs_create_link+0xcc/0x240 [ 348.976688][T12170] sysfs_do_create_link_sd+0x90/0x140 [ 348.976703][T12170] sysfs_create_link+0x61/0xc0 [ 348.976717][T12170] driver_sysfs_add+0x91/0x2d0 [ 348.976734][T12170] really_probe+0x146/0xa60 [ 348.976757][T12170] __driver_probe_device+0x210/0x460 [ 348.976785][T12170] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 348.976810][T12170] driver_probe_device+0x4a/0x140 [ 348.976835][T12170] __driver_attach+0x21f/0x5b0 [ 348.976854][T12170] ? __pfx___driver_attach+0x10/0x10 [ 348.976871][T12170] bus_for_each_dev+0x13e/0x1d0 [ 348.976892][T12170] ? __pfx_bus_for_each_dev+0x10/0x10 [ 348.976911][T12170] ? bus_add_driver+0x2b5/0x5b0 [ 348.976928][T12170] bus_add_driver+0x305/0x5b0 [ 348.976942][T12170] driver_register+0x1e2/0x360 [ 348.976958][T12170] ? rcu_is_watching+0x13/0xc0 [ 348.976972][T12170] usb_gadget_register_driver_owner+0x132/0x210 [ 348.976988][T12170] raw_ioctl+0x1a85/0x2b80 [ 348.977004][T12170] ? __pfx_raw_ioctl+0x10/0x10 [ 348.977018][T12170] ? __pfx_raw_ioctl+0x10/0x10 [ 348.977030][T12170] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 348.977052][T12170] __do_fast_syscall_32+0x13a/0x8b0 [ 348.977072][T12170] do_fast_syscall_32+0x32/0x70 [ 348.977089][T12170] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 348.977104][T12170] RIP: 0023:0xf7fe2fec [ 348.977119][T12170] Code: Unable to access opcode bytes at 0xf7fe2fc2. [ 348.977124][T12170] RSP: 002b:00000000f54a4424 EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 348.977137][T12170] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000005501 [ 348.977145][T12170] RDX: 0000000000000000 RSI: 00000000f7477ff4 RDI: 00000000f54a54c0 [ 348.977152][T12170] RBP: 00000000f7477ff4 R08: 0000000000000000 R09: 0000000000000000 [ 348.977159][T12170] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 348.977167][T12170] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 348.977181][T12170] [ 348.977249][T12170] raw-gadget.0 gadget.3: really_probe: driver_sysfs_add failed [ 348.977557][T12170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.977778][T12170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.032800][T12172] netlink: 'syz.5.2015': attribute type 1 has an invalid length. [ 349.060444][T12172] 8021q: adding VLAN 0 to HW filter on device bond1 [ 349.228638][ T63] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 349.378643][ T63] usb 8-1: Using ep0 maxpacket: 8 [ 349.380823][ T63] usb 8-1: New USB device found, idVendor=ed06, idProduct=4500, bcdDevice= 0.01 [ 349.381890][ T63] usb 8-1: config 2 has an invalid interface number: 146 but max is 2 [ 349.381914][ T63] usb 8-1: config 2 has an invalid interface number: 135 but max is 2 [ 349.381930][ T63] usb 8-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 349.381948][ T63] usb 8-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 349.381967][ T63] usb 8-1: config 2 has an invalid interface number: 66 but max is 2 [ 349.381986][ T63] usb 8-1: config 2 has no interface number 0 [ 349.381999][ T63] usb 8-1: config 2 has no interface number 1 [ 349.382010][ T63] usb 8-1: config 2 has no interface number 2 [ 349.382043][ T63] usb 8-1: config 2 interface 146 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 349.382059][ T63] usb 8-1: config 2 interface 146 altsetting 9 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 349.382074][ T63] usb 8-1: config 2 interface 146 altsetting 9 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 349.382089][ T63] usb 8-1: config 2 interface 146 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 349.382108][ T63] usb 8-1: config 2 interface 135 altsetting 255 bulk endpoint 0xD has invalid maxpacket 8 [ 349.382121][ T63] usb 8-1: config 2 interface 135 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 349.382135][ T63] usb 8-1: config 2 interface 135 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 349.382149][ T63] usb 8-1: config 2 interface 135 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 349.382163][ T63] usb 8-1: config 2 interface 135 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 349.382176][ T63] usb 8-1: config 2 interface 135 altsetting 255 has a duplicate endpoint with address 0x89, skipping [ 349.382223][ T63] usb 8-1: config 2 interface 135 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 349.382238][ T63] usb 8-1: config 2 interface 135 altsetting 255 has a duplicate endpoint with address 0xD, skipping [ 349.382252][ T63] usb 8-1: config 2 interface 135 altsetting 255 has a duplicate endpoint with address 0xD, skipping [ 349.382265][ T63] usb 8-1: config 2 interface 135 altsetting 255 has a duplicate endpoint with address 0x2, skipping [ 349.382278][ T63] usb 8-1: config 2 interface 135 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 349.382296][ T63] usb 8-1: config 2 interface 66 altsetting 14 has a duplicate endpoint with address 0xF, skipping [ 349.382309][ T63] usb 8-1: config 2 interface 66 altsetting 14 has a duplicate endpoint with address 0x7, skipping [ 349.382322][ T63] usb 8-1: config 2 interface 66 altsetting 14 has a duplicate endpoint with address 0x7, skipping [ 349.382338][ T63] usb 8-1: config 2 interface 66 altsetting 14 has a duplicate endpoint with address 0xE, skipping [ 349.382352][ T63] usb 8-1: config 2 interface 66 altsetting 14 has a duplicate endpoint with address 0x1, skipping [ 349.382365][ T63] usb 8-1: config 2 interface 66 altsetting 14 has a duplicate endpoint with address 0x8, skipping [ 349.382378][ T63] usb 8-1: config 2 interface 66 altsetting 14 has a duplicate endpoint with address 0xE, skipping [ 349.382391][ T63] usb 8-1: config 2 interface 66 altsetting 14 has a duplicate endpoint with address 0xF, skipping [ 349.382402][ T63] usb 8-1: config 2 interface 66 altsetting 14 has a duplicate endpoint with address 0x7, skipping [ 349.382413][ T63] usb 8-1: config 2 interface 146 has no altsetting 0 [ 349.382422][ T63] usb 8-1: config 2 interface 135 has no altsetting 0 [ 349.382431][ T63] usb 8-1: config 2 interface 66 has no altsetting 0 [ 349.385099][ T63] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.385113][ T63] usb 8-1: Manufacturer: и [ 349.385121][ T63] usb 8-1: SerialNumber: â ‰ [ 349.390124][T12170] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 349.595884][T12170] dlm: no local IP address has been set [ 349.595931][T12170] dlm: cannot start dlm midcomms -107 [ 349.601905][ T63] usb-storage 8-1:2.146: USB Mass Storage device detected [ 349.622094][ T63] usb-storage 8-1:2.146: Quirks match for vid ed06 pid 4500: 1000 [ 349.709936][ T63] usb-storage 8-1:2.135: USB Mass Storage device detected [ 349.715486][ T63] usb-storage 8-1:2.135: Quirks match for vid ed06 pid 4500: 1000 [ 349.781378][ T63] usb-storage 8-1:2.66: USB Mass Storage device detected [ 349.791041][ T63] usb-storage 8-1:2.66: Quirks match for vid ed06 pid 4500: 1000 [ 349.839140][ T63] usb 8-1: USB disconnect, device number 19 [ 350.015267][T12199] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 350.540599][T12213] FAULT_INJECTION: forcing a failure. [ 350.540599][T12213] name failslab, interval 1, probability 0, space 0, times 0 [ 350.540673][T12213] CPU: 0 UID: 0 PID: 12213 Comm: syz.3.2027 Tainted: G L syzkaller #0 PREEMPT(full) [ 350.540700][T12213] Tainted: [L]=SOFTLOCKUP [ 350.540706][T12213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 350.540713][T12213] Call Trace: [ 350.540718][T12213] [ 350.540723][T12213] dump_stack_lvl+0x100/0x190 [ 350.540742][T12213] should_fail_ex.cold+0x5/0xa [ 350.540757][T12213] should_failslab+0xc2/0x120 [ 350.540780][T12213] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 350.540793][T12213] ? __alloc_skb+0x5b7/0x710 [ 350.540805][T12213] ? __alloc_skb+0x140/0x710 [ 350.540820][T12213] __alloc_skb+0x140/0x710 [ 350.540831][T12213] ? __alloc_skb+0x5b7/0x710 [ 350.540843][T12213] ? __pfx___alloc_skb+0x10/0x10 [ 350.540859][T12213] netlink_alloc_large_skb+0x69/0x150 [ 350.540873][T12213] netlink_sendmsg+0x680/0xda0 [ 350.540887][T12213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.540900][T12213] ? apparmor_socket_sendmsg+0x165/0x280 [ 350.540916][T12213] ____sys_sendmsg+0xa4d/0xbe0 [ 350.540932][T12213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.540944][T12213] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.540967][T12213] ___sys_sendmsg+0x190/0x1e0 [ 350.540985][T12213] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.541008][T12213] ? find_held_lock+0x2b/0x80 [ 350.541029][T12213] __sys_sendmsg+0x160/0x210 [ 350.541043][T12213] ? __pfx___sys_sendmsg+0x10/0x10 [ 350.541060][T12213] ? __pfx_ksys_write+0x10/0x10 [ 350.541074][T12213] __do_fast_syscall_32+0x13a/0x8b0 [ 350.541090][T12213] ? lockdep_hardirqs_on+0x7d/0x110 [ 350.541107][T12213] do_fast_syscall_32+0x32/0x70 [ 350.541122][T12213] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 350.541137][T12213] RIP: 0023:0xf7fe2fec [ 350.541150][T12213] Code: Unable to access opcode bytes at 0xf7fe2fc2. [ 350.541156][T12213] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 350.541168][T12213] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 350.541175][T12213] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 350.541183][T12213] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.541190][T12213] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 350.541197][T12213] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 350.541212][T12213] [ 350.738643][ T853] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 350.898631][ T853] usb 7-1: Using ep0 maxpacket: 32 [ 350.901181][ T853] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 350.905528][ T853] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 350.905572][ T853] usb 7-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 350.913724][ T853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.913760][ T853] usb 7-1: Product: syz [ 350.913785][ T853] usb 7-1: Manufacturer: syz [ 350.913806][ T853] usb 7-1: SerialNumber: syz [ 351.131280][ T853] usb 7-1: USB disconnect, device number 19 [ 351.140848][ T5728] udevd[5728]: setting owner of /dev/bus/usb/007/019 to uid=0, gid=0 failed: No such file or directory [ 352.232841][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 352.233136][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 352.248494][T12240] ceph: No mds server is up or the cluster is laggy [ 352.491552][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 352.494835][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 352.580283][ T44] audit: type=1800 audit(1788580798.334:317): pid=12252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2038" name="zoned" dev="configfs" ino=36826 res=0 errno=0 [ 352.591367][ T44] audit: type=1800 audit(1788580798.344:318): pid=12252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2038" name="zone_nr_conv" dev="configfs" ino=36827 res=0 errno=0 [ 352.601081][ T44] audit: type=1326 audit(1788580798.354:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12251 comm="syz.5.2038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 352.603553][ T44] audit: type=1326 audit(1788580798.354:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12251 comm="syz.5.2038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 352.605170][ T44] audit: type=1326 audit(1788580798.354:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12251 comm="syz.5.2038" exe="/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 352.605196][ T44] audit: type=1326 audit(1788580798.354:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12251 comm="syz.5.2038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 352.605216][ T44] audit: type=1326 audit(1788580798.354:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12251 comm="syz.5.2038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 352.605380][ T44] audit: type=1326 audit(1788580798.354:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12251 comm="syz.5.2038" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 352.606879][ T44] audit: type=1326 audit(1788580798.354:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12251 comm="syz.5.2038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 352.606982][ T44] audit: type=1326 audit(1788580798.354:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12251 comm="syz.5.2038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 353.114906][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 353.122028][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 353.798791][ T5806] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 353.958868][ T5806] usb 5-1: Using ep0 maxpacket: 32 [ 354.117785][ T5806] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 354.118715][ T5806] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 354.118752][ T5806] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 354.120413][ T5806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.120440][ T5806] usb 5-1: Product: syz [ 354.120468][ T5806] usb 5-1: Manufacturer: syz [ 354.120490][ T5806] usb 5-1: SerialNumber: syz [ 354.347093][ T5806] usb 5-1: USB disconnect, device number 30 [ 355.790365][T12294] x_tables: duplicate underflow at hook 3 [ 356.918950][ T43] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 356.950306][T12319] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 357.078769][ T43] usb 10-1: Using ep0 maxpacket: 16 [ 357.083021][ T43] usb 10-1: unable to get BOS descriptor or descriptor too short [ 357.083139][ T43] usb 10-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 357.084053][ T43] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.084071][ T43] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.087062][ T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.087079][ T43] usb 10-1: Product: syz [ 357.087088][ T43] usb 10-1: Manufacturer: syz [ 357.087098][ T43] usb 10-1: SerialNumber: syz [ 357.467206][T12314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.467438][T12314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.491457][T12314] lo speed is unknown, defaulting to 1000 [ 357.636906][ T43] usb 10-1: unit 0 not found! [ 357.646055][ T43] usb 10-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 357.653870][ T43] usb 10-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 357.759935][ T43] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 357.767604][ T43] usb 10-1: USB disconnect, device number 14 [ 357.778191][T12340] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 357.824281][ T5728] udevd[5728]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.078276][T12352] x_tables: duplicate underflow at hook 3 [ 358.513730][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2071'. [ 358.808644][ T976] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 358.867745][ T9506] IPVS: starting estimator thread 0... [ 358.910207][T12381] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2075'. [ 358.958715][T12382] IPVS: using max 43 ests per chain, 103200 per kthread [ 358.968670][ T976] usb 5-1: Using ep0 maxpacket: 32 [ 358.969541][ T976] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 358.970538][ T976] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 358.970573][ T976] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 358.972652][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.972672][ T976] usb 5-1: Product: syz [ 358.972683][ T976] usb 5-1: Manufacturer: syz [ 358.972695][ T976] usb 5-1: SerialNumber: syz [ 359.259345][ T976] usb 5-1: USB disconnect, device number 31 [ 359.912935][T12394] FAULT_INJECTION: forcing a failure. [ 359.912935][T12394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.912991][T12394] CPU: 1 UID: 0 PID: 12394 Comm: syz.3.2079 Tainted: G L syzkaller #0 PREEMPT(full) [ 359.913018][T12394] Tainted: [L]=SOFTLOCKUP [ 359.913024][T12394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 359.913033][T12394] Call Trace: [ 359.913038][T12394] [ 359.913043][T12394] dump_stack_lvl+0x100/0x190 [ 359.913064][T12394] should_fail_ex.cold+0x5/0xa [ 359.913079][T12394] _copy_from_user+0x2e/0xd0 [ 359.913092][T12394] move_addr_to_kernel+0x65/0x170 [ 359.913111][T12394] get_compat_msghdr+0x3c7/0x480 [ 359.913129][T12394] ? __pfx_get_compat_msghdr+0x10/0x10 [ 359.913151][T12394] ___sys_sendmsg+0x1b6/0x1e0 [ 359.913169][T12394] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.913193][T12394] ? find_held_lock+0x2b/0x80 [ 359.913214][T12394] __sys_sendmsg+0x160/0x210 [ 359.913229][T12394] ? __pfx___sys_sendmsg+0x10/0x10 [ 359.913246][T12394] ? __pfx_ksys_write+0x10/0x10 [ 359.913260][T12394] __do_fast_syscall_32+0x13a/0x8b0 [ 359.913276][T12394] ? lockdep_hardirqs_on+0x7d/0x110 [ 359.913291][T12394] do_fast_syscall_32+0x32/0x70 [ 359.913307][T12394] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 359.913322][T12394] RIP: 0023:0xf7fe2fec [ 359.913335][T12394] Code: Unable to access opcode bytes at 0xf7fe2fc2. [ 359.913341][T12394] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 359.913352][T12394] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001180 [ 359.913359][T12394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 359.913366][T12394] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 359.913373][T12394] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 359.913379][T12394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 359.913393][T12394] [ 360.022106][T12392] syz_tun: entered allmulticast mode [ 361.159539][ T5806] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 361.183264][ T44] kauditd_printk_skb: 63 callbacks suppressed [ 361.183478][ T44] audit: type=1800 audit(1788580806.934:390): pid=12419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2087" name="zoned" dev="configfs" ino=38675 res=0 errno=0 [ 361.194747][ T44] audit: type=1800 audit(1788580806.944:391): pid=12419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2087" name="zone_nr_conv" dev="configfs" ino=38676 res=0 errno=0 [ 361.205409][ T44] audit: type=1326 audit(1788580806.954:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12418 comm="syz.0.2087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 361.212427][ T44] audit: type=1326 audit(1788580806.954:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12418 comm="syz.0.2087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 361.219381][ T44] audit: type=1326 audit(1788580806.964:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12418 comm="syz.0.2087" exe="/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf700efec code=0x7ffc0000 [ 361.219457][ T44] audit: type=1326 audit(1788580806.964:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12418 comm="syz.0.2087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 361.219492][ T44] audit: type=1326 audit(1788580806.964:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12418 comm="syz.0.2087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 361.219527][ T44] audit: type=1326 audit(1788580806.964:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12418 comm="syz.0.2087" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf700efec code=0x7ffc0000 [ 361.251860][ T44] audit: type=1326 audit(1788580807.004:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12418 comm="syz.0.2087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 361.251935][ T44] audit: type=1326 audit(1788580807.004:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12418 comm="syz.0.2087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 361.308652][ T5806] usb 8-1: Using ep0 maxpacket: 32 [ 361.309240][ T5806] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 361.310280][ T5806] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 361.310297][ T5806] usb 8-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 361.311923][ T5806] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.311940][ T5806] usb 8-1: Product: syz [ 361.311948][ T5806] usb 8-1: Manufacturer: syz [ 361.311956][ T5806] usb 8-1: SerialNumber: syz [ 361.520000][T12427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2089'. [ 361.536544][ T5806] usb 8-1: USB disconnect, device number 20 [ 362.021793][T12433] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 362.203661][T12436] jffs2: notice: (12436) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 362.352280][T12436] overlayfs: upper fs does not support tmpfile. [ 362.369163][T12436] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 363.109910][T12461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2099'. [ 363.398768][ T853] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 363.568629][ T853] usb 8-1: Using ep0 maxpacket: 32 [ 363.569095][ T853] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 363.570299][ T853] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 363.572341][ T853] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 363.572361][ T853] usb 8-1: Product: syz [ 363.572370][ T853] usb 8-1: Manufacturer: syz [ 363.572380][ T853] usb 8-1: SerialNumber: syz [ 363.579052][ T853] usb 8-1: config 0 descriptor?? [ 363.579986][T12461] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 363.617098][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 363.705798][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 363.717563][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 363.774929][T12471] ceph: No mds server is up or the cluster is laggy [ 363.828905][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 363.837374][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 363.856413][ T10] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 363.863762][ T10] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 363.900002][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.904067][ T10] usb 5-1: Product: syz [ 363.911780][ T10] usb 5-1: Manufacturer: syz [ 363.915692][ T10] usb 5-1: SerialNumber: syz [ 364.205925][ T10] usb 5-1: USB disconnect, device number 32 [ 364.542838][ T5838] usb 8-1: USB disconnect, device number 21 [ 364.625255][T12484] syz_tun: entered allmulticast mode [ 366.373317][ T5822] libceph: connect (1)[c::]:6789 error -101 [ 366.374362][ T5822] libceph: mon0 (1)[c::]:6789 connect error [ 366.376505][T12515] ceph: No mds server is up or the cluster is laggy [ 366.635168][T12526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2117'. [ 366.773546][T12531] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 366.928784][ T5838] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 367.088767][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 367.089274][ T5838] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 367.090171][ T5838] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 367.092017][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 367.092053][ T5838] usb 5-1: Product: syz [ 367.092075][ T5838] usb 5-1: Manufacturer: syz [ 367.092096][ T5838] usb 5-1: SerialNumber: syz [ 367.093347][ T5838] usb 5-1: config 0 descriptor?? [ 367.093841][T12526] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 367.417318][ T5838] usb 5-1: USB disconnect, device number 33 [ 368.078825][ T5806] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 368.242685][ T5806] usb 7-1: unable to get BOS descriptor or descriptor too short [ 368.242799][ T5806] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 368.244451][ T5806] usb 7-1: config 12 has an invalid interface number: 99 but max is 0 [ 368.244477][ T5806] usb 7-1: config 12 has no interface number 0 [ 368.244515][ T5806] usb 7-1: config 12 interface 99 altsetting 14 endpoint 0xD has invalid maxpacket 552, setting to 64 [ 368.244542][ T5806] usb 7-1: config 12 interface 99 has no altsetting 0 [ 368.247609][ T5806] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.247630][ T5806] usb 7-1: Product: syz [ 368.247643][ T5806] usb 7-1: Manufacturer: syz [ 368.247656][ T5806] usb 7-1: SerialNumber: syz [ 368.402724][T12565] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 368.520878][ T5806] usb 7-1: no audio or video endpoints found [ 368.528830][ T5806] usb 7-1: USB disconnect, device number 20 [ 369.585245][ T44] kauditd_printk_skb: 13 callbacks suppressed [ 369.585294][ T44] audit: type=1800 audit(1788581327.330:413): pid=12589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2133" name="zoned" dev="configfs" ino=38788 res=0 errno=0 [ 369.595667][ T44] audit: type=1800 audit(1788581327.340:414): pid=12589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2133" name="zone_nr_conv" dev="configfs" ino=38789 res=0 errno=0 [ 369.602493][ T44] audit: type=1326 audit(1788581327.340:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.3.2133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 369.602527][ T44] audit: type=1326 audit(1788581327.340:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.3.2133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 369.602548][ T44] audit: type=1326 audit(1788581327.340:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.3.2133" exe="/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 369.602572][ T44] audit: type=1326 audit(1788581327.340:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.3.2133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 369.602592][ T44] audit: type=1326 audit(1788581327.340:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.3.2133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 369.602613][ T44] audit: type=1326 audit(1788581327.340:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.3.2133" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 369.610235][ T44] audit: type=1326 audit(1788581327.350:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.3.2133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 369.610290][ T44] audit: type=1326 audit(1788581327.350:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.3.2133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2fec code=0x7ffc0000 [ 369.928950][T12594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2134'. [ 370.188430][ T5818] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 370.348286][ T5818] usb 7-1: Using ep0 maxpacket: 32 [ 370.352627][ T5818] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 370.354832][ T5818] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 370.359567][ T5818] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 370.359591][ T5818] usb 7-1: Product: syz [ 370.359606][ T5818] usb 7-1: Manufacturer: syz [ 370.359620][ T5818] usb 7-1: SerialNumber: syz [ 370.370237][ T5818] usb 7-1: config 0 descriptor?? [ 370.371008][T12594] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 370.961379][ T43] usb 7-1: USB disconnect, device number 21 [ 373.620812][T12640] syzkaller0: entered promiscuous mode [ 373.622725][T12640] syzkaller0: entered allmulticast mode [ 374.058832][T12646] input: syz0 as /devices/virtual/input/input27 [ 374.079161][T12646] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 374.713761][T12655] FAULT_INJECTION: forcing a failure. [ 374.713761][T12655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.713833][T12655] CPU: 1 UID: 0 PID: 12655 Comm: syz.5.2151 Tainted: G L syzkaller #0 PREEMPT(full) [ 374.713867][T12655] Tainted: [L]=SOFTLOCKUP [ 374.713875][T12655] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 374.713883][T12655] Call Trace: [ 374.713889][T12655] [ 374.713895][T12655] dump_stack_lvl+0x100/0x190 [ 374.713917][T12655] should_fail_ex.cold+0x5/0xa [ 374.713936][T12655] strncpy_from_user+0x3b/0x2d0 [ 374.713956][T12655] do_getname+0x78/0x390 [ 374.713977][T12655] __ia32_sys_symlinkat+0x7b/0xe0 [ 374.714001][T12655] __do_fast_syscall_32+0x13a/0x8b0 [ 374.714029][T12655] ? lockdep_hardirqs_on+0x7d/0x110 [ 374.714062][T12655] do_fast_syscall_32+0x32/0x70 [ 374.714095][T12655] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 374.714124][T12655] RIP: 0023:0xf6ffefec [ 374.714152][T12655] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 374.714163][T12655] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 374.714189][T12655] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 00000000ffffff9c [ 374.714204][T12655] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 374.714230][T12655] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 374.714240][T12655] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 374.714249][T12655] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 374.714267][T12655] [ 374.795825][T12657] fuse: Bad value for 'group_id' [ 374.795867][T12657] fuse: Bad value for 'group_id' [ 376.026992][T12686] FAULT_INJECTION: forcing a failure. [ 376.026992][T12686] name failslab, interval 1, probability 0, space 0, times 0 [ 376.027070][T12686] CPU: 1 UID: 0 PID: 12686 Comm: syz.5.2161 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.027122][T12686] Tainted: [L]=SOFTLOCKUP [ 376.027131][T12686] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 376.027142][T12686] Call Trace: [ 376.027149][T12686] [ 376.027157][T12686] dump_stack_lvl+0x100/0x190 [ 376.027185][T12686] should_fail_ex.cold+0x5/0xa [ 376.027208][T12686] should_failslab+0xc2/0x120 [ 376.027230][T12686] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 376.027250][T12686] ? __alloc_skb+0x140/0x710 [ 376.027275][T12686] __alloc_skb+0x140/0x710 [ 376.027292][T12686] ? __alloc_skb+0x5b7/0x710 [ 376.027310][T12686] ? __pfx___alloc_skb+0x10/0x10 [ 376.027335][T12686] mroute_netlink_event+0x9d/0x160 [ 376.027357][T12686] ipmr_mfc_add+0xd31/0x2dc0 [ 376.027381][T12686] ? __pfx___mutex_lock+0x10/0x10 [ 376.027408][T12686] ? __pfx_ipmr_mfc_add+0x10/0x10 [ 376.027439][T12686] ? ip_mroute_setsockopt+0xd11/0x12b0 [ 376.027459][T12686] ip_mroute_setsockopt+0xd11/0x12b0 [ 376.027485][T12686] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 376.027508][T12686] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 376.027536][T12686] ? get_pid_task+0xfc/0x250 [ 376.027554][T12686] ? get_pid_task+0xfc/0x250 [ 376.027575][T12686] do_ip_setsockopt+0x382/0x3200 [ 376.027610][T12686] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 376.027642][T12686] ? lock_acquire+0x1d1/0x380 [ 376.027665][T12686] ? __fget_files+0x34/0x3d0 [ 376.027688][T12686] ip_setsockopt+0x5a/0xf0 [ 376.027716][T12686] raw_setsockopt+0x60/0x1b0 [ 376.027741][T12686] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 376.027767][T12686] do_sock_setsockopt+0xf3/0x1d0 [ 376.027795][T12686] __sys_setsockopt+0x119/0x190 [ 376.027820][T12686] __ia32_sys_setsockopt+0xbc/0x160 [ 376.027840][T12686] ? __do_fast_syscall_32+0xb3/0x8b0 [ 376.027865][T12686] ? lockdep_hardirqs_on+0x7d/0x110 [ 376.027886][T12686] __do_fast_syscall_32+0x13a/0x8b0 [ 376.027909][T12686] ? lockdep_hardirqs_on+0x7d/0x110 [ 376.027933][T12686] do_fast_syscall_32+0x32/0x70 [ 376.027958][T12686] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 376.027978][T12686] RIP: 0023:0xf6ffefec [ 376.027998][T12686] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 376.028007][T12686] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 376.028025][T12686] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 376.028037][T12686] RDX: 00000000000000d2 RSI: 0000000080000200 RDI: 000000000000003c [ 376.028049][T12686] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 376.028060][T12686] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 376.028071][T12686] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 376.028095][T12686] [ 376.283853][T12694] FAULT_INJECTION: forcing a failure. [ 376.283853][T12694] name failslab, interval 1, probability 0, space 0, times 0 [ 376.283909][T12694] CPU: 1 UID: 0 PID: 12694 Comm: syz.3.2165 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.283936][T12694] Tainted: [L]=SOFTLOCKUP [ 376.283941][T12694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 376.283950][T12694] Call Trace: [ 376.283954][T12694] [ 376.283959][T12694] dump_stack_lvl+0x100/0x190 [ 376.283978][T12694] should_fail_ex.cold+0x5/0xa [ 376.283993][T12694] should_failslab+0xc2/0x120 [ 376.284008][T12694] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 376.284020][T12694] ? __alloc_skb+0x5b7/0x710 [ 376.284033][T12694] ? __alloc_skb+0x140/0x710 [ 376.284047][T12694] __alloc_skb+0x140/0x710 [ 376.284058][T12694] ? __alloc_skb+0x5b7/0x710 [ 376.284070][T12694] ? __pfx___alloc_skb+0x10/0x10 [ 376.284089][T12694] netlink_alloc_large_skb+0x69/0x150 [ 376.284102][T12694] netlink_sendmsg+0x680/0xda0 [ 376.284116][T12694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.284129][T12694] ? apparmor_socket_sendmsg+0x165/0x280 [ 376.284145][T12694] ____sys_sendmsg+0xa4d/0xbe0 [ 376.284160][T12694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.284173][T12694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.284195][T12694] ___sys_sendmsg+0x190/0x1e0 [ 376.284213][T12694] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.284237][T12694] ? find_held_lock+0x2b/0x80 [ 376.284257][T12694] __sys_sendmsg+0x160/0x210 [ 376.284272][T12694] ? __pfx___sys_sendmsg+0x10/0x10 [ 376.284288][T12694] ? __pfx_ksys_write+0x10/0x10 [ 376.284303][T12694] __do_fast_syscall_32+0x13a/0x8b0 [ 376.284319][T12694] ? lockdep_hardirqs_on+0x7d/0x110 [ 376.284335][T12694] do_fast_syscall_32+0x32/0x70 [ 376.284350][T12694] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 376.284365][T12694] RIP: 0023:0xf7fe2fec [ 376.284378][T12694] Code: Unable to access opcode bytes at 0xf7fe2fc2. [ 376.284383][T12694] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 376.284395][T12694] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 376.284402][T12694] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 376.284408][T12694] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 376.284415][T12694] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 376.284422][T12694] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 376.284436][T12694] [ 376.777229][ T44] kauditd_printk_skb: 80 callbacks suppressed [ 376.777331][ T44] audit: type=1800 audit(1788581334.511:503): pid=12706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2169" name="zoned" dev="configfs" ino=39695 res=0 errno=0 [ 376.795255][ T44] audit: type=1800 audit(1788581334.541:504): pid=12706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2169" name="zone_nr_conv" dev="configfs" ino=40582 res=0 errno=0 [ 376.803373][ T44] audit: type=1326 audit(1788581334.551:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12704 comm="syz.5.2169" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 376.820053][ T44] audit: type=1326 audit(1788581334.571:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12704 comm="syz.5.2169" exe="/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 376.820173][ T44] audit: type=1326 audit(1788581334.571:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12704 comm="syz.5.2169" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 376.820229][ T44] audit: type=1326 audit(1788581334.571:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12704 comm="syz.5.2169" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 376.825013][ T44] audit: type=1326 audit(1788581334.571:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12704 comm="syz.5.2169" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 376.825060][ T44] audit: type=1326 audit(1788581334.571:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12704 comm="syz.5.2169" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 376.825099][ T44] audit: type=1326 audit(1788581334.571:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12704 comm="syz.5.2169" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 376.826418][ T44] audit: type=1326 audit(1788581334.571:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12704 comm="syz.5.2169" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 377.323379][T12724] FAULT_INJECTION: forcing a failure. [ 377.323379][T12724] name failslab, interval 1, probability 0, space 0, times 0 [ 377.323435][T12724] CPU: 3 UID: 0 PID: 12724 Comm: syz.2.2174 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.323462][T12724] Tainted: [L]=SOFTLOCKUP [ 377.323468][T12724] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 377.323475][T12724] Call Trace: [ 377.323480][T12724] [ 377.323485][T12724] dump_stack_lvl+0x100/0x190 [ 377.323509][T12724] should_fail_ex.cold+0x5/0xa [ 377.323523][T12724] should_failslab+0xc2/0x120 [ 377.323538][T12724] __kmalloc_noprof+0xfc/0x840 [ 377.323550][T12724] ? is_bpf_text_address+0x8a/0x1a0 [ 377.323566][T12724] ? bpf_test_init.isra.0+0x88/0x100 [ 377.323585][T12724] bpf_test_init.isra.0+0x88/0x100 [ 377.323603][T12724] bpf_prog_test_run_skb+0x48e/0x3530 [ 377.323617][T12724] ? lock_acquire+0x1d1/0x380 [ 377.323632][T12724] ? __fget_files+0x34/0x3d0 [ 377.323645][T12724] ? find_held_lock+0x2b/0x80 [ 377.323657][T12724] ? __fget_files+0x171/0x3d0 [ 377.323671][T12724] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 377.323685][T12724] ? fput+0x7c/0x100 [ 377.323699][T12724] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 377.323710][T12724] __sys_bpf+0x2265/0x4a30 [ 377.323725][T12724] ? __pfx___sys_bpf+0x10/0x10 [ 377.323735][T12724] ? lock_acquire+0x1d1/0x380 [ 377.323749][T12724] ? get_pid_task+0x2a/0x250 [ 377.323760][T12724] ? find_held_lock+0x2b/0x80 [ 377.323771][T12724] ? get_pid_task+0xfc/0x250 [ 377.323781][T12724] ? get_pid_task+0xfc/0x250 [ 377.323796][T12724] ? proc_fail_nth_write+0x9f/0x220 [ 377.323807][T12724] ? find_held_lock+0x2b/0x80 [ 377.323821][T12724] ? rcu_read_lock_any_held+0x6a/0x90 [ 377.323834][T12724] ? find_held_lock+0x2b/0x80 [ 377.323844][T12724] ? ksys_write+0x190/0x250 [ 377.323855][T12724] ? ksys_write+0x190/0x250 [ 377.323865][T12724] ? lock_acquire+0x1d1/0x380 [ 377.323889][T12724] ? fput+0x7c/0x100 [ 377.323903][T12724] ? __ia32_sys_bpf+0xcc/0x170 [ 377.323914][T12724] __ia32_sys_bpf+0xcc/0x170 [ 377.323925][T12724] ? __do_fast_syscall_32+0xb3/0x8b0 [ 377.323943][T12724] __do_fast_syscall_32+0x13a/0x8b0 [ 377.323958][T12724] ? lockdep_hardirqs_on+0x7d/0x110 [ 377.323974][T12724] do_fast_syscall_32+0x32/0x70 [ 377.323990][T12724] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 377.324005][T12724] RIP: 0023:0xf705efec [ 377.324018][T12724] Code: Unable to access opcode bytes at 0xf705efc2. [ 377.324024][T12724] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 377.324035][T12724] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000940 [ 377.324043][T12724] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 377.324049][T12724] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 377.324056][T12724] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 377.324062][T12724] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 377.324077][T12724] [ 378.117372][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 378.122653][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.369131][T12754] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10000 [ 379.369223][T12754] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 379.369284][T12754] raw: 00fff00000002000 ffffea0000400008 ffffea0000400008 0000000000000000 [ 379.369307][T12754] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 379.369319][T12754] page dumped because: unmovable page [ 379.369328][T12754] page_owner info is not present (never set?) [ 379.533868][T12778] 9p: Bad value for 'rfdno' [ 379.931345][ T9504] nvmet: connect request for invalid subsystem testsubsys! [ 379.939438][T12786] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 380.253007][T12797] FAULT_INJECTION: forcing a failure. [ 380.253007][T12797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.253071][T12797] CPU: 2 UID: 0 PID: 12797 Comm: syz.0.2200 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.253115][T12797] Tainted: [L]=SOFTLOCKUP [ 380.253124][T12797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 380.253136][T12797] Call Trace: [ 380.253143][T12797] [ 380.253151][T12797] dump_stack_lvl+0x100/0x190 [ 380.253183][T12797] should_fail_ex.cold+0x5/0xa [ 380.253209][T12797] _copy_from_iter+0x1f4/0x1690 [ 380.253239][T12797] ? __pfx__copy_from_iter+0x10/0x10 [ 380.253261][T12797] ? kasan_save_track+0x14/0x30 [ 380.253284][T12797] ? __kasan_kmalloc+0xaa/0xb0 [ 380.253307][T12797] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 380.253338][T12797] ? configfs_write_iter+0x388/0x4e0 [ 380.253370][T12797] configfs_write_iter+0xb3/0x4e0 [ 380.253400][T12797] vfs_write+0x6af/0x1050 [ 380.253420][T12797] ? __pfx_configfs_write_iter+0x10/0x10 [ 380.253449][T12797] ? __pfx_vfs_write+0x10/0x10 [ 380.253466][T12797] ? find_held_lock+0x2b/0x80 [ 380.253507][T12797] ksys_write+0x12a/0x250 [ 380.253526][T12797] ? __pfx_ksys_write+0x10/0x10 [ 380.253544][T12797] ? ksys_write+0x1ac/0x250 [ 380.253570][T12797] ? __pfx_ksys_write+0x10/0x10 [ 380.253596][T12797] __do_fast_syscall_32+0x13a/0x8b0 [ 380.253628][T12797] ? lockdep_hardirqs_on+0x7d/0x110 [ 380.253657][T12797] do_fast_syscall_32+0x32/0x70 [ 380.253685][T12797] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 380.253711][T12797] RIP: 0023:0xf700efec [ 380.253732][T12797] Code: Unable to access opcode bytes at 0xf700efc2. [ 380.253741][T12797] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 380.253761][T12797] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000800 [ 380.253774][T12797] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 380.253786][T12797] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 380.253797][T12797] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 380.253809][T12797] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 380.253837][T12797] [ 380.368492][T12799] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2201'. [ 380.676979][T12818] mac80211_hwsim hwsim2 syzkaller1: entered promiscuous mode [ 380.677119][T12818] mac80211_hwsim hwsim2 syzkaller1: entered allmulticast mode [ 380.680092][T12818] FAULT_INJECTION: forcing a failure. [ 380.680092][T12818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.680146][T12818] CPU: 1 UID: 0 PID: 12818 Comm: syz.3.2207 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.680175][T12818] Tainted: [L]=SOFTLOCKUP [ 380.680179][T12818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 380.680186][T12818] Call Trace: [ 380.680191][T12818] [ 380.680196][T12818] dump_stack_lvl+0x100/0x190 [ 380.680214][T12818] should_fail_ex.cold+0x5/0xa [ 380.680229][T12818] _copy_from_user+0x2e/0xd0 [ 380.680243][T12818] kstrtouint_from_user+0xd6/0x1d0 [ 380.680259][T12818] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 380.680277][T12818] ? lock_acquire+0x1d1/0x380 [ 380.680296][T12818] proc_fail_nth_write+0x83/0x220 [ 380.680308][T12818] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 380.680324][T12818] vfs_write+0x2aa/0x1050 [ 380.680335][T12818] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 380.680346][T12818] ? lock_acquire+0x1d1/0x380 [ 380.680360][T12818] ? __fget_files+0x34/0x3d0 [ 380.680372][T12818] ? __pfx_vfs_write+0x10/0x10 [ 380.680382][T12818] ? find_held_lock+0x2b/0x80 [ 380.680394][T12818] ? __fget_files+0x215/0x3d0 [ 380.680408][T12818] ? __fget_files+0x21f/0x3d0 [ 380.680423][T12818] ksys_write+0x12a/0x250 [ 380.680434][T12818] ? __pfx_ksys_write+0x10/0x10 [ 380.680450][T12818] do_int80_emulation+0x166/0x650 [ 380.680467][T12818] asm_int80_emulation+0x1a/0x20 [ 380.680479][T12818] RIP: 0023:0xf71e75ab [ 380.680488][T12818] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 380.680500][T12818] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 380.680512][T12818] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54a65d0 [ 380.680519][T12818] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 380.680526][T12818] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 380.680532][T12818] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 380.680539][T12818] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 380.680553][T12818] [ 380.843313][T12822] FAULT_INJECTION: forcing a failure. [ 380.843313][T12822] name failslab, interval 1, probability 0, space 0, times 0 [ 380.843387][T12822] CPU: 0 UID: 0 PID: 12822 Comm: syz.0.2208 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.843416][T12822] Tainted: [L]=SOFTLOCKUP [ 380.843422][T12822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 380.843429][T12822] Call Trace: [ 380.843433][T12822] [ 380.843438][T12822] dump_stack_lvl+0x100/0x190 [ 380.843458][T12822] should_fail_ex.cold+0x5/0xa [ 380.843473][T12822] should_failslab+0xc2/0x120 [ 380.843488][T12822] __kmalloc_noprof+0xfc/0x840 [ 380.843501][T12822] ? bpf_test_init.isra.0+0x88/0x100 [ 380.843521][T12822] bpf_test_init.isra.0+0x88/0x100 [ 380.843539][T12822] bpf_prog_test_run_xdp+0x587/0x1670 [ 380.843557][T12822] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 380.843573][T12822] ? fput+0x7c/0x100 [ 380.843587][T12822] ? __bpf_prog_get+0x97/0x290 [ 380.843603][T12822] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 380.843614][T12822] __sys_bpf+0x2265/0x4a30 [ 380.843629][T12822] ? __pfx___sys_bpf+0x10/0x10 [ 380.843639][T12822] ? lock_acquire+0x1d1/0x380 [ 380.843655][T12822] ? get_pid_task+0x2a/0x250 [ 380.843669][T12822] ? find_held_lock+0x2b/0x80 [ 380.843681][T12822] ? get_pid_task+0xfc/0x250 [ 380.843691][T12822] ? get_pid_task+0xfc/0x250 [ 380.843706][T12822] ? proc_fail_nth_write+0x9f/0x220 [ 380.843718][T12822] ? find_held_lock+0x2b/0x80 [ 380.843733][T12822] ? rcu_read_lock_any_held+0x6a/0x90 [ 380.843746][T12822] ? find_held_lock+0x2b/0x80 [ 380.843757][T12822] ? ksys_write+0x190/0x250 [ 380.843768][T12822] ? ksys_write+0x190/0x250 [ 380.843779][T12822] ? lock_acquire+0x1d1/0x380 [ 380.843803][T12822] ? fput+0x7c/0x100 [ 380.843818][T12822] ? __ia32_sys_bpf+0xcc/0x170 [ 380.843829][T12822] __ia32_sys_bpf+0xcc/0x170 [ 380.843841][T12822] ? __do_fast_syscall_32+0xb3/0x8b0 [ 380.843859][T12822] __do_fast_syscall_32+0x13a/0x8b0 [ 380.843875][T12822] ? lockdep_hardirqs_on+0x7d/0x110 [ 380.843906][T12822] do_fast_syscall_32+0x32/0x70 [ 380.843923][T12822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 380.843938][T12822] RIP: 0023:0xf700efec [ 380.843952][T12822] Code: Unable to access opcode bytes at 0xf700efc2. [ 380.843958][T12822] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 380.843970][T12822] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000340 [ 380.843977][T12822] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 380.843984][T12822] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 380.843991][T12822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.843997][T12822] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 380.844012][T12822] [ 381.232452][T12827] Driver unsupported XDP return value 0 on prog (id 285) dev N/A, expect packet loss! [ 381.264492][T12831] syzkaller1: entered promiscuous mode [ 381.264563][T12831] syzkaller1: entered allmulticast mode [ 381.301015][T12829] x_tables: duplicate underflow at hook 3 [ 381.851856][T12847] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 381.851897][T12847] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 381.852002][T12847] vhci_hcd vhci_hcd.0: Device attached [ 381.942706][T12854] overlayfs: failed to resolve './file1': -2 [ 381.947851][T12847] /dev/sr0: Can't open blockdev [ 382.089690][T12858] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 382.089740][T12858] CIFS mount error: No usable UNC path provided in device string! [ 382.089740][T12858] [ 382.089924][T12858] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 382.115681][T12858] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2219'. [ 382.120627][ T853] usb 42-1: SetAddress Request (2) to port 0 [ 382.120681][ T853] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 382.141328][T12858] hsr_slave_1 (unregistering): left promiscuous mode [ 382.564402][T12850] vhci_hcd: connection reset by peer [ 382.566952][ T12] vhci_hcd vhci_hcd.2: stop threads [ 382.566978][ T12] vhci_hcd vhci_hcd.2: release socket [ 382.568042][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 382.921754][T12871] FAULT_INJECTION: forcing a failure. [ 382.921754][T12871] name failslab, interval 1, probability 0, space 0, times 0 [ 382.921877][T12871] CPU: 1 UID: 0 PID: 12871 Comm: syz.5.2222 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.921907][T12871] Tainted: [L]=SOFTLOCKUP [ 382.921911][T12871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 382.921919][T12871] Call Trace: [ 382.921923][T12871] [ 382.921928][T12871] dump_stack_lvl+0x100/0x190 [ 382.921947][T12871] should_fail_ex.cold+0x5/0xa [ 382.921963][T12871] should_failslab+0xc2/0x120 [ 382.921977][T12871] __kmalloc_cache_noprof+0x91/0x6d0 [ 382.921995][T12871] ? proc_thread_self_get_link+0x1a6/0x210 [ 382.922012][T12871] proc_thread_self_get_link+0x1a6/0x210 [ 382.922026][T12871] pick_link+0xac2/0x13c0 [ 382.922043][T12871] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 382.922059][T12871] step_into_slowpath+0x9ba/0xf90 [ 382.922079][T12871] ? __pfx_step_into_slowpath+0x10/0x10 [ 382.922110][T12871] ? lookup_fast+0x2da/0x600 [ 382.922213][T12871] ? inode_permission+0x374/0x620 [ 382.922231][T12871] link_path_walk+0xf28/0x1cc0 [ 382.922254][T12871] path_openat+0x1ac/0x2440 [ 382.922268][T12871] ? __pfx_path_openat+0x10/0x10 [ 382.922285][T12871] do_file_open+0x20e/0x430 [ 382.922299][T12871] ? __pfx_do_file_open+0x10/0x10 [ 382.922321][T12871] ? _raw_spin_unlock+0x28/0x50 [ 382.922334][T12871] ? alloc_fd+0x471/0x7a0 [ 382.922351][T12871] do_sys_openat2+0x10f/0x1e0 [ 382.922366][T12871] ? __pfx_do_sys_openat2+0x10/0x10 [ 382.922383][T12871] ? irqentry_exit+0x24d/0xa10 [ 382.922397][T12871] ? lockdep_hardirqs_on+0x7d/0x110 [ 382.922413][T12871] __ia32_compat_sys_openat+0x12d/0x210 [ 382.922429][T12871] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 382.922451][T12871] do_int80_emulation+0x166/0x650 [ 382.922474][T12871] asm_int80_emulation+0x1a/0x20 [ 382.922486][T12871] RIP: 0023:0xf71375ab [ 382.922495][T12871] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 382.922507][T12871] RSP: 002b:00000000f53ed4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 382.922519][T12871] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7201b2e [ 382.922526][T12871] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 382.922532][T12871] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 382.922539][T12871] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 382.922545][T12871] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 382.922559][T12871] [ 383.481119][ T44] kauditd_printk_skb: 35 callbacks suppressed [ 383.481201][ T44] audit: type=1800 audit(1788581341.232:548): pid=12888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2228" name="zoned" dev="configfs" ino=40870 res=0 errno=0 [ 383.492096][ T44] audit: type=1800 audit(1788581341.232:549): pid=12888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2228" name="zone_nr_conv" dev="configfs" ino=41533 res=0 errno=0 [ 383.492136][ T44] audit: type=1326 audit(1788581341.232:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.5.2228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 383.492159][ T44] audit: type=1326 audit(1788581341.232:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.5.2228" exe="/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 383.492180][ T44] audit: type=1326 audit(1788581341.232:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.5.2228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 383.492202][ T44] audit: type=1326 audit(1788581341.232:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.5.2228" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 383.512436][ T44] audit: type=1326 audit(1788581341.252:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.5.2228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 383.512473][ T44] audit: type=1326 audit(1788581341.252:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.5.2228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 383.534612][ T44] audit: type=1326 audit(1788581341.282:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.5.2228" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 383.534644][ T44] audit: type=1326 audit(1788581341.282:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.5.2228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 384.262045][T12904] FAULT_INJECTION: forcing a failure. [ 384.262045][T12904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.262095][T12904] CPU: 3 UID: 0 PID: 12904 Comm: syz.0.2232 Tainted: G L syzkaller #0 PREEMPT(full) [ 384.262123][T12904] Tainted: [L]=SOFTLOCKUP [ 384.262129][T12904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 384.262138][T12904] Call Trace: [ 384.262143][T12904] [ 384.262149][T12904] dump_stack_lvl+0x100/0x190 [ 384.262169][T12904] should_fail_ex.cold+0x5/0xa [ 384.262185][T12904] _copy_from_iter+0x1f4/0x1690 [ 384.262201][T12904] ? rcu_is_watching+0x13/0xc0 [ 384.262213][T12904] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 384.262230][T12904] ? lockdep_hardirqs_on+0x7d/0x110 [ 384.262250][T12904] ? __pfx__copy_from_iter+0x10/0x10 [ 384.262265][T12904] ? rcu_is_watching+0x13/0xc0 [ 384.262276][T12904] ? trace_sched_exit_tp+0x120/0x160 [ 384.262291][T12904] bcm_sendmsg+0x15d/0x4af0 [ 384.262311][T12904] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 384.262330][T12904] ? __pfx_bcm_sendmsg+0x10/0x10 [ 384.262350][T12904] ? apparmor_socket_sendmsg+0x165/0x280 [ 384.262374][T12904] ____sys_sendmsg+0xa4d/0xbe0 [ 384.262398][T12904] ? __pfx_bcm_sendmsg+0x10/0x10 [ 384.262422][T12904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.262466][T12904] ___sys_sendmsg+0x190/0x1e0 [ 384.262496][T12904] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.262527][T12904] ? futex_wait+0x11e/0x370 [ 384.262553][T12904] ? find_held_lock+0x2b/0x80 [ 384.262574][T12904] __sys_sendmsg+0x160/0x210 [ 384.262589][T12904] ? __pfx___sys_sendmsg+0x10/0x10 [ 384.262611][T12904] __do_fast_syscall_32+0x13a/0x8b0 [ 384.262629][T12904] do_fast_syscall_32+0x32/0x70 [ 384.262645][T12904] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 384.262660][T12904] RIP: 0023:0xf700efec [ 384.262673][T12904] Code: Unable to access opcode bytes at 0xf700efc2. [ 384.262678][T12904] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 384.262691][T12904] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280 [ 384.262698][T12904] RDX: 0000000020040051 RSI: 0000000000000000 RDI: 0000000000000000 [ 384.262705][T12904] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 384.262711][T12904] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 384.262718][T12904] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 384.262732][T12904] [ 384.663251][T12918] mac80211_hwsim hwsim2 syzkaller1: left promiscuous mode [ 384.663326][T12918] mac80211_hwsim hwsim2 syzkaller1: left allmulticast mode [ 386.572865][T12978] FAULT_INJECTION: forcing a failure. [ 386.572865][T12978] name failslab, interval 1, probability 0, space 0, times 0 [ 386.572969][T12978] CPU: 1 UID: 0 PID: 12978 Comm: syz.3.2258 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.573012][T12978] Tainted: [L]=SOFTLOCKUP [ 386.573024][T12978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 386.573038][T12978] Call Trace: [ 386.573045][T12978] [ 386.573054][T12978] dump_stack_lvl+0x100/0x190 [ 386.573086][T12978] should_fail_ex.cold+0x5/0xa [ 386.573114][T12978] should_failslab+0xc2/0x120 [ 386.573143][T12978] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 386.573167][T12978] ? __alloc_skb+0x5b7/0x710 [ 386.573192][T12978] ? __alloc_skb+0x140/0x710 [ 386.573220][T12978] __alloc_skb+0x140/0x710 [ 386.573244][T12978] ? __alloc_skb+0x5b7/0x710 [ 386.573269][T12978] ? __pfx___alloc_skb+0x10/0x10 [ 386.573319][T12978] netlink_alloc_large_skb+0x69/0x150 [ 386.573350][T12978] netlink_sendmsg+0x680/0xda0 [ 386.573377][T12978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.573405][T12978] ? apparmor_socket_sendmsg+0x165/0x280 [ 386.573438][T12978] ____sys_sendmsg+0xa4d/0xbe0 [ 386.573469][T12978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.573496][T12978] ? __pfx_____sys_sendmsg+0x10/0x10 [ 386.573542][T12978] ___sys_sendmsg+0x190/0x1e0 [ 386.573585][T12978] ? __pfx____sys_sendmsg+0x10/0x10 [ 386.573633][T12978] ? find_held_lock+0x2b/0x80 [ 386.573677][T12978] __sys_sendmsg+0x160/0x210 [ 386.573705][T12978] ? __pfx___sys_sendmsg+0x10/0x10 [ 386.573739][T12978] ? __pfx_ksys_write+0x10/0x10 [ 386.573769][T12978] __do_fast_syscall_32+0x13a/0x8b0 [ 386.573800][T12978] ? lockdep_hardirqs_on+0x7d/0x110 [ 386.573831][T12978] do_fast_syscall_32+0x32/0x70 [ 386.573863][T12978] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 386.573890][T12978] RIP: 0023:0xf7fe2fec [ 386.573915][T12978] Code: Unable to access opcode bytes at 0xf7fe2fc2. [ 386.573925][T12978] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 386.573948][T12978] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 386.573962][T12978] RDX: 0000000020004804 RSI: 0000000000000000 RDI: 0000000000000000 [ 386.573975][T12978] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 386.573988][T12978] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 386.574001][T12978] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 386.574030][T12978] [ 387.166326][ T853] usb 42-1: device descriptor read/8, error -110 [ 387.275044][T12998] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 387.558167][T13010] netlink: 'syz.3.2267': attribute type 4 has an invalid length. [ 387.572969][ T853] usb usb42-port1: attempt power cycle [ 387.875824][T13021] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 388.077295][T13035] FAULT_INJECTION: forcing a failure. [ 388.077295][T13035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.077370][T13035] CPU: 0 UID: 0 PID: 13035 Comm: syz.3.2278 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.077410][T13035] Tainted: [L]=SOFTLOCKUP [ 388.077419][T13035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 388.077430][T13035] Call Trace: [ 388.077444][T13035] [ 388.077452][T13035] dump_stack_lvl+0x100/0x190 [ 388.077482][T13035] should_fail_ex.cold+0x5/0xa [ 388.077507][T13035] _copy_to_user+0x32/0xd0 [ 388.077529][T13035] simple_read_from_buffer+0xcb/0x170 [ 388.077552][T13035] proc_fail_nth_read+0x1af/0x230 [ 388.077583][T13035] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 388.077614][T13035] ? rw_verify_area+0xce/0x6d0 [ 388.077655][T13035] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 388.077685][T13035] vfs_read+0x1e4/0xb40 [ 388.077704][T13035] ? lock_acquire+0x1d1/0x380 [ 388.077726][T13035] ? __fget_files+0x34/0x3d0 [ 388.077744][T13035] ? __pfx_vfs_read+0x10/0x10 [ 388.077759][T13035] ? find_held_lock+0x2b/0x80 [ 388.077778][T13035] ? __fget_files+0x215/0x3d0 [ 388.077801][T13035] ? __fget_files+0x21f/0x3d0 [ 388.077828][T13035] ksys_read+0x12a/0x250 [ 388.077845][T13035] ? __pfx_ksys_read+0x10/0x10 [ 388.077871][T13035] do_int80_emulation+0x166/0x650 [ 388.077901][T13035] asm_int80_emulation+0x1a/0x20 [ 388.077920][T13035] RIP: 0023:0xf71e75ab [ 388.077936][T13035] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 388.077954][T13035] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 388.077972][T13035] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54a65d0 [ 388.077984][T13035] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 388.077996][T13035] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 388.078008][T13035] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 388.078019][T13035] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 388.078045][T13035] [ 388.149998][ T853] usb usb42-port1: unable to enumerate USB device [ 388.202857][T13043] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 389.032662][T13060] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 389.223386][ T44] kauditd_printk_skb: 40 callbacks suppressed [ 389.223472][ T44] audit: type=1800 audit(1788581602.968:598): pid=13074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2290" name="zoned" dev="configfs" ino=44130 res=0 errno=0 [ 389.229092][ T44] audit: type=1800 audit(1788581602.978:599): pid=13074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2290" name="zone_nr_conv" dev="configfs" ino=44131 res=0 errno=0 [ 389.234774][ T44] audit: type=1326 audit(1788581602.978:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.0.2290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 389.234803][ T44] audit: type=1326 audit(1788581602.978:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.0.2290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 389.243072][ T44] audit: type=1326 audit(1788581602.988:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.0.2290" exe="/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf700efec code=0x7ffc0000 [ 389.243105][ T44] audit: type=1326 audit(1788581602.988:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.0.2290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 389.243181][ T44] audit: type=1326 audit(1788581602.988:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.0.2290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 389.243635][ T44] audit: type=1326 audit(1788581602.988:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.0.2290" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf700efec code=0x7ffc0000 [ 389.266737][ T44] audit: type=1326 audit(1788581603.018:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.0.2290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 389.266774][ T44] audit: type=1326 audit(1788581603.018:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.0.2290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 390.938366][T13133] overlay: Bad value for 'verity' [ 391.807591][T13095] binder: Unknown parameter 'smackfstransmute' [ 391.810094][T13095] binder: Unknown parameter 'smackfstransmute' [ 392.357591][ T5838] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 392.525819][ T5838] usb 8-1: Using ep0 maxpacket: 32 [ 392.530791][ T5838] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 392.535353][ T5838] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 392.540939][ T5838] usb 8-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 392.551441][ T5838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.551482][ T5838] usb 8-1: Product: syz [ 392.551512][ T5838] usb 8-1: Manufacturer: syz [ 392.551535][ T5838] usb 8-1: SerialNumber: syz [ 392.777700][ T5838] usb 8-1: USB disconnect, device number 22 [ 394.603388][T13192] netlink: 'syz.5.2327': attribute type 2 has an invalid length. [ 395.798215][T13231] x_tables: duplicate underflow at hook 3 [ 397.117256][T13254] netlink: 'syz.2.2345': attribute type 2 has an invalid length. [ 397.586601][ T44] kauditd_printk_skb: 82 callbacks suppressed [ 397.586681][ T44] audit: type=1800 audit(1788581611.339:690): pid=13259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2347" name="zoned" dev="configfs" ino=44615 res=0 errno=0 [ 397.587559][ T44] audit: type=1800 audit(1788581611.339:691): pid=13259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2347" name="zone_nr_conv" dev="configfs" ino=44616 res=0 errno=0 [ 397.613268][T13259] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 397.666498][ T44] audit: type=1800 audit(1788581611.419:692): pid=13259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2347" name="zoned" dev="configfs" ino=44620 res=0 errno=0 [ 397.669351][ T44] audit: type=1800 audit(1788581611.419:693): pid=13259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2347" name="power" dev="configfs" ino=44621 res=0 errno=0 [ 398.062641][T13268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2350'. [ 398.189571][T13280] FAULT_INJECTION: forcing a failure. [ 398.189571][T13280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.189623][T13280] CPU: 2 UID: 0 PID: 13280 Comm: syz.3.2355 Tainted: G L syzkaller #0 PREEMPT(full) [ 398.189656][T13280] Tainted: [L]=SOFTLOCKUP [ 398.189675][T13280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 398.189684][T13280] Call Trace: [ 398.189689][T13280] [ 398.189696][T13280] dump_stack_lvl+0x100/0x190 [ 398.189718][T13280] should_fail_ex.cold+0x5/0xa [ 398.189736][T13280] _copy_from_user+0x2e/0xd0 [ 398.189751][T13280] kstrtouint_from_user+0xd6/0x1d0 [ 398.189770][T13280] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 398.189792][T13280] ? lock_acquire+0x1d1/0x380 [ 398.189814][T13280] proc_fail_nth_write+0x83/0x220 [ 398.189829][T13280] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 398.189847][T13280] vfs_write+0x2aa/0x1050 [ 398.189861][T13280] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 398.189874][T13280] ? lock_acquire+0x1d1/0x380 [ 398.189890][T13280] ? __fget_files+0x34/0x3d0 [ 398.189904][T13280] ? __pfx_vfs_write+0x10/0x10 [ 398.189915][T13280] ? find_held_lock+0x2b/0x80 [ 398.189934][T13280] ? __fget_files+0x215/0x3d0 [ 398.189951][T13280] ? __fget_files+0x21f/0x3d0 [ 398.189970][T13280] ksys_write+0x12a/0x250 [ 398.189982][T13280] ? __pfx_ksys_write+0x10/0x10 [ 398.190000][T13280] do_int80_emulation+0x166/0x650 [ 398.190022][T13280] asm_int80_emulation+0x1a/0x20 [ 398.190035][T13280] RIP: 0023:0xf71e75ab [ 398.190046][T13280] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 398.190059][T13280] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 398.190073][T13280] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54a65d0 [ 398.190081][T13280] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 398.190089][T13280] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 398.190097][T13280] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 398.190105][T13280] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 398.190122][T13280] [ 399.132004][ T5821] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 399.275187][ T5821] usb 8-1: Using ep0 maxpacket: 32 [ 399.277179][ T5821] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 399.279813][ T5821] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.279921][ T5821] usb 8-1: config 0 has no interfaces? [ 399.285054][ T5821] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 399.285375][ T5821] usb 8-1: Product: syz [ 399.285787][ T5821] usb 8-1: Manufacturer: syz [ 399.285839][ T5821] usb 8-1: SerialNumber: syz [ 399.366089][T13301] netlink: 'syz.5.2360': attribute type 2 has an invalid length. [ 399.407921][ T5821] usb 8-1: config 0 descriptor?? [ 399.683726][ T44] audit: type=1800 audit(1788581613.429:694): pid=13306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2357" name="zoned" dev="configfs" ino=43773 res=0 errno=0 [ 399.704854][ T44] audit: type=1800 audit(1788581613.449:695): pid=13306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2357" name="zone_nr_conv" dev="configfs" ino=45302 res=0 errno=0 [ 399.719332][T13306] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 399.809433][ T44] audit: type=1800 audit(1788581613.559:696): pid=13306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2357" name="zoned" dev="configfs" ino=45306 res=0 errno=0 [ 399.813804][ T44] audit: type=1800 audit(1788581613.559:697): pid=13306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2357" name="power" dev="configfs" ino=45307 res=0 errno=0 [ 399.930803][ T5821] usb 8-1: USB disconnect, device number 23 [ 400.132588][T13310] Invalid ELF header magic: != ELF [ 400.275894][T13315] FAULT_INJECTION: forcing a failure. [ 400.275894][T13315] name failslab, interval 1, probability 0, space 0, times 0 [ 400.275982][T13315] CPU: 2 UID: 0 PID: 13315 Comm: syz.5.2363 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.276032][T13315] Tainted: [L]=SOFTLOCKUP [ 400.276044][T13315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 400.276057][T13315] Call Trace: [ 400.276065][T13315] [ 400.276076][T13315] dump_stack_lvl+0x100/0x190 [ 400.276113][T13315] should_fail_ex.cold+0x5/0xa [ 400.276144][T13315] should_failslab+0xc2/0x120 [ 400.276175][T13315] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 400.276202][T13315] ? __alloc_skb+0x5b7/0x710 [ 400.276226][T13315] ? __alloc_skb+0x140/0x710 [ 400.276253][T13315] __alloc_skb+0x140/0x710 [ 400.276275][T13315] ? __alloc_skb+0x5b7/0x710 [ 400.276299][T13315] ? __pfx___alloc_skb+0x10/0x10 [ 400.276328][T13315] ? aa_sk_perm+0x389/0xab0 [ 400.276364][T13315] netlink_alloc_large_skb+0x69/0x150 [ 400.276389][T13315] netlink_sendmsg+0x680/0xda0 [ 400.276415][T13315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.276438][T13315] ? apparmor_socket_sendmsg+0x165/0x280 [ 400.276465][T13315] ____sys_sendmsg+0xa4d/0xbe0 [ 400.276492][T13315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.276513][T13315] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.276551][T13315] ___sys_sendmsg+0x190/0x1e0 [ 400.276581][T13315] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.276621][T13315] ? find_held_lock+0x2b/0x80 [ 400.276659][T13315] __sys_sendmsg+0x160/0x210 [ 400.276682][T13315] ? __pfx___sys_sendmsg+0x10/0x10 [ 400.276711][T13315] ? __pfx_ksys_write+0x10/0x10 [ 400.276738][T13315] __do_fast_syscall_32+0x13a/0x8b0 [ 400.276762][T13315] ? lockdep_hardirqs_on+0x7d/0x110 [ 400.276788][T13315] do_fast_syscall_32+0x32/0x70 [ 400.276815][T13315] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 400.276838][T13315] RIP: 0023:0xf6ffefec [ 400.276861][T13315] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 400.276871][T13315] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 400.276895][T13315] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440 [ 400.276909][T13315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 400.276920][T13315] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 400.276930][T13315] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 400.276943][T13315] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 400.276967][T13315] [ 400.627004][T13329] FAULT_INJECTION: forcing a failure. [ 400.627004][T13329] name failslab, interval 1, probability 0, space 0, times 0 [ 400.632007][T13329] CPU: 3 UID: 0 PID: 13329 Comm: syz.3.2369 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.632041][T13329] Tainted: [L]=SOFTLOCKUP [ 400.632048][T13329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 400.632056][T13329] Call Trace: [ 400.632066][T13329] [ 400.632072][T13329] dump_stack_lvl+0x100/0x190 [ 400.632096][T13329] should_fail_ex.cold+0x5/0xa [ 400.632115][T13329] should_failslab+0xc2/0x120 [ 400.632132][T13329] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 400.632147][T13329] ? __alloc_skb+0x5b7/0x710 [ 400.632160][T13329] ? __alloc_skb+0x140/0x710 [ 400.632177][T13329] __alloc_skb+0x140/0x710 [ 400.632190][T13329] ? __alloc_skb+0x5b7/0x710 [ 400.632203][T13329] ? __pfx___alloc_skb+0x10/0x10 [ 400.632221][T13329] netlink_alloc_large_skb+0x69/0x150 [ 400.632238][T13329] netlink_sendmsg+0x680/0xda0 [ 400.632254][T13329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.632269][T13329] ? apparmor_socket_sendmsg+0x165/0x280 [ 400.632288][T13329] ____sys_sendmsg+0xa4d/0xbe0 [ 400.632305][T13329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.632319][T13329] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.632346][T13329] ___sys_sendmsg+0x190/0x1e0 [ 400.632366][T13329] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.632399][T13329] ? find_held_lock+0x2b/0x80 [ 400.632423][T13329] __sys_sendmsg+0x160/0x210 [ 400.632438][T13329] ? __pfx___sys_sendmsg+0x10/0x10 [ 400.632458][T13329] ? __pfx_ksys_write+0x10/0x10 [ 400.632475][T13329] __do_fast_syscall_32+0x13a/0x8b0 [ 400.632492][T13329] ? lockdep_hardirqs_on+0x7d/0x110 [ 400.632511][T13329] do_fast_syscall_32+0x32/0x70 [ 400.632529][T13329] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 400.632545][T13329] RIP: 0023:0xf7fe2fec [ 400.632560][T13329] Code: Unable to access opcode bytes at 0xf7fe2fc2. [ 400.632566][T13329] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 400.632579][T13329] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800002c0 [ 400.632587][T13329] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 400.632595][T13329] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 400.632603][T13329] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 400.632610][T13329] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 400.632624][T13329] [ 400.724225][T13332] FAULT_INJECTION: forcing a failure. [ 400.724225][T13332] name failslab, interval 1, probability 0, space 0, times 0 [ 400.724713][T13332] CPU: 2 UID: 0 PID: 13332 Comm: syz.3.2370 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.724732][T13332] Tainted: [L]=SOFTLOCKUP [ 400.724737][T13332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 400.724743][T13332] Call Trace: [ 400.724749][T13332] [ 400.724754][T13332] dump_stack_lvl+0x100/0x190 [ 400.724778][T13332] should_fail_ex.cold+0x5/0xa [ 400.724794][T13332] should_failslab+0xc2/0x120 [ 400.724809][T13332] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 400.724821][T13332] ? __alloc_skb+0x5b7/0x710 [ 400.724835][T13332] ? __alloc_skb+0x140/0x710 [ 400.724849][T13332] __alloc_skb+0x140/0x710 [ 400.724860][T13332] ? __alloc_skb+0x5b7/0x710 [ 400.724872][T13332] ? __pfx___alloc_skb+0x10/0x10 [ 400.724888][T13332] netlink_alloc_large_skb+0x69/0x150 [ 400.724905][T13332] netlink_sendmsg+0x680/0xda0 [ 400.724919][T13332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.724932][T13332] ? apparmor_socket_sendmsg+0x165/0x280 [ 400.724948][T13332] ____sys_sendmsg+0xa4d/0xbe0 [ 400.724964][T13332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.724976][T13332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.724999][T13332] ___sys_sendmsg+0x190/0x1e0 [ 400.725017][T13332] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.725040][T13332] ? find_held_lock+0x2b/0x80 [ 400.725061][T13332] __sys_sendmsg+0x160/0x210 [ 400.725075][T13332] ? __pfx___sys_sendmsg+0x10/0x10 [ 400.725092][T13332] ? __pfx_ksys_write+0x10/0x10 [ 400.725106][T13332] __do_fast_syscall_32+0x13a/0x8b0 [ 400.725122][T13332] ? lockdep_hardirqs_on+0x7d/0x110 [ 400.725138][T13332] do_fast_syscall_32+0x32/0x70 [ 400.725154][T13332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 400.725168][T13332] RIP: 0023:0xf7fe2fec [ 400.725182][T13332] Code: Unable to access opcode bytes at 0xf7fe2fc2. [ 400.725188][T13332] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 400.725204][T13332] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 400.725217][T13332] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 400.725227][T13332] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 400.725236][T13332] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 400.725246][T13332] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 400.725267][T13332] [ 400.793432][T13334] lo speed is unknown, defaulting to 1000 [ 401.284740][ T8806] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 401.434564][ T8806] usb 8-1: device descriptor read/64, error -71 [ 401.456254][T13364] netlink: 'syz.0.2373': attribute type 2 has an invalid length. [ 401.494904][T13369] netlink: 'syz.5.2377': attribute type 10 has an invalid length. [ 401.508674][T13369] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 401.509697][T13369] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 401.512726][T13369] syz.5.2377: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 401.512785][T13369] CPU: 1 UID: 0 PID: 13369 Comm: syz.5.2377 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.512802][T13369] Tainted: [L]=SOFTLOCKUP [ 401.512807][T13369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 401.512815][T13369] Call Trace: [ 401.512819][T13369] [ 401.512825][T13369] dump_stack_lvl+0x100/0x190 [ 401.512849][T13369] warn_alloc.cold+0x9e/0xb2 [ 401.512864][T13369] ? __pfx_warn_alloc+0x10/0x10 [ 401.512893][T13369] ? __lock_acquire+0x4c5/0x1ec0 [ 401.512915][T13369] __vmalloc_node_range_noprof+0x123b/0x1420 [ 401.512932][T13369] ? __lock_acquire+0x4c5/0x1ec0 [ 401.512950][T13369] ? __lock_acquire+0x4c5/0x1ec0 [ 401.512971][T13369] ? do_replace+0x1c6/0x490 [ 401.512986][T13369] ? do_raw_spin_lock+0x128/0x260 [ 401.513013][T13369] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 401.513032][T13369] ? __lock_acquire+0x4c5/0x1ec0 [ 401.513050][T13369] ? do_raw_spin_unlock+0x145/0x1e0 [ 401.513072][T13369] ? do_replace+0x1c6/0x490 [ 401.513085][T13369] __vmalloc_node_noprof+0xad/0xf0 [ 401.513102][T13369] ? do_replace+0x1c6/0x490 [ 401.513119][T13369] __vmalloc_noprof+0xa3/0x120 [ 401.513136][T13369] ? __pfx___vmalloc_noprof+0x10/0x10 [ 401.513160][T13369] do_replace+0x1c6/0x490 [ 401.513174][T13369] ? __pfx_do_replace+0x10/0x10 [ 401.513195][T13369] ? register_lock_class+0x3f/0x7b0 [ 401.513217][T13369] compat_do_replace+0x589/0x7a0 [ 401.513234][T13369] ? __pfx_compat_do_replace+0x10/0x10 [ 401.513259][T13369] ? bpf_lsm_capable+0x9/0x10 [ 401.513278][T13369] ? security_capable+0x80/0x260 [ 401.513294][T13369] do_ebt_set_ctl+0x3f4/0x4a0 [ 401.513310][T13369] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 401.513326][T13369] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 401.513344][T13369] ? futex_private_hash_put.part.0+0xc/0x180 [ 401.513366][T13369] ? nf_sockopt_find.isra.0+0x222/0x290 [ 401.513384][T13369] nf_setsockopt+0x8d/0xf0 [ 401.513401][T13369] ip_setsockopt+0xcb/0xf0 [ 401.513422][T13369] tcp_setsockopt+0xa7/0x100 [ 401.513437][T13369] smc_setsockopt+0x1b6/0xa40 [ 401.513451][T13369] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 401.513472][T13369] ? __pfx_smc_setsockopt+0x10/0x10 [ 401.513488][T13369] ? aa_sock_opt_perm+0x114/0x1e0 [ 401.513504][T13369] ? __pfx_smc_setsockopt+0x10/0x10 [ 401.513518][T13369] do_sock_setsockopt+0xf3/0x1d0 [ 401.513539][T13369] __sys_setsockopt+0x119/0x190 [ 401.513557][T13369] __ia32_sys_setsockopt+0xbc/0x160 [ 401.513571][T13369] ? __do_fast_syscall_32+0xb3/0x8b0 [ 401.513590][T13369] ? lockdep_hardirqs_on+0x7d/0x110 [ 401.513606][T13369] __do_fast_syscall_32+0x13a/0x8b0 [ 401.513627][T13369] do_fast_syscall_32+0x32/0x70 [ 401.513645][T13369] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 401.513661][T13369] RIP: 0023:0xf6ffefec [ 401.513676][T13369] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 401.513682][T13369] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 401.513695][T13369] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 401.513704][T13369] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108 [ 401.513712][T13369] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 401.513719][T13369] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 401.513727][T13369] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 401.513743][T13369] [ 401.513749][T13369] Mem-Info: [ 401.513755][T13369] active_anon:9862 inactive_anon:1207 isolated_anon:0 [ 401.513755][T13369] active_file:964 inactive_file:7163 isolated_file:0 [ 401.513755][T13369] unevictable:1000 dirty:314 writeback:0 [ 401.513755][T13369] slab_reclaimable:6596 slab_unreclaimable:60590 [ 401.513755][T13369] mapped:22894 shmem:10151 pagetables:1750 [ 401.513755][T13369] sec_pagetables:341 bounce:0 [ 401.513755][T13369] kernel_misc_reclaimable:0 [ 401.513755][T13369] free:28416 free_pcp:3821 free_cma:0 [ 401.513786][T13369] Node 0 active_anon:24kB inactive_anon:80kB active_file:80kB inactive_file:72kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:8kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8352kB pagetables:1180kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 401.513818][T13369] Node 1 active_anon:39424kB inactive_anon:4748kB active_file:3776kB inactive_file:28580kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:91536kB dirty:1248kB writeback:0kB shmem:38604kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6848kB pagetables:5820kB sec_pagetables:232kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 401.513852][T13369] Node 0 DMA free:3236kB boost:2048kB min:2792kB low:2976kB high:3160kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 401.513889][T13369] lowmem_reserve[]: 0 277 277 277 277 [ 401.513913][T13369] Node 0 DMA32 free:22660kB boost:31044kB min:44844kB low:48292kB high:51740kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24kB inactive_anon:80kB active_file:80kB inactive_file:72kB unevictable:2000kB writepending:8kB zspages:3396kB present:1032196kB managed:284624kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 401.513951][T13369] lowmem_reserve[]: 0 0 0 0 0 [ 401.513973][T13369] Node 1 DMA32 free:87768kB boost:0kB min:45984kB low:57480kB high:68976kB reserved_highatomic:2048kB free_highatomic:680kB active_anon:39424kB inactive_anon:4748kB active_file:3776kB inactive_file:28580kB unevictable:2000kB writepending:1248kB zspages:4176kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:15220kB local_pcp:2456kB free_cma:0kB [ 401.514017][T13369] lowmem_reserve[]: 0 0 0 0 0 [ 401.514041][T13369] Node 0 DMA: 143*4kB (U) 41*8kB (U) 8*16kB (U) 15*32kB (U) 11*64kB (U) 2*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 3236kB [ 401.514151][T13369] Node 0 DMA32: 367*4kB (UME) 111*8kB (UME) 73*16kB (UME) 270*32kB (UME) 66*64kB (UM) 11*128kB (UM) 7*256kB (UM) 6*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 22660kB [ 401.514251][T13369] Node 1 DMA32: 74*4kB (UMEH) 583*8kB (UMEH) 725*16kB (MH) 274*32kB (UMEH) 131*64kB (UME) 70*128kB (UME) 49*256kB (UME) 11*512kB (UME) 4*1024kB (UM) 11*2048kB (UM) 0*4096kB = 87472kB [ 401.514356][T13369] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 401.514366][T13369] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 401.514376][T13369] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 401.514386][T13369] Node 1 hugepages_total=6 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB [ 401.514396][T13369] 19586 total pagecache pages [ 401.514400][T13369] 1235 pages in swap cache [ 401.514405][T13369] Free swap = 92444kB [ 401.514410][T13369] Total swap = 124996kB [ 401.514415][T13369] 524155 pages RAM [ 401.514420][T13369] 0 pages HighMem/MovableOnly [ 401.514424][T13369] 212107 pages reserved [ 401.514429][T13369] 0 pages cma reserved [ 401.530505][T13369] mmap: syz.5.2377 (13369) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 401.694593][ T8806] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 401.844497][ T8806] usb 8-1: device descriptor read/64, error -71 [ 401.914679][ T5104] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 401.954727][ T8806] usb usb8-port1: attempt power cycle [ 401.959993][T13338] cgroup: fork rejected by pids controller in /syz3 [ 402.066142][ T5104] usb 10-1: Using ep0 maxpacket: 8 [ 402.077243][ T5104] usb 10-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 402.078264][ T5104] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.078301][ T5104] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 402.078323][ T5104] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 402.080287][ T5104] usb 10-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 402.080308][ T5104] usb 10-1: Product: syz [ 402.080321][ T5104] usb 10-1: Manufacturer: syz [ 402.080334][ T5104] usb 10-1: SerialNumber: syz [ 402.082993][ T5104] usb 10-1: config 0 descriptor?? [ 402.107828][T13390] [U] ¥ [ 402.107860][T13390] [U] [ 402.107877][T13390] [U] [ 402.107904][T13390] [U] [ 402.107922][T13390] [U] [ 402.107938][T13390] [U] [ 402.107955][T13390] [U] [ 402.107970][T13390] [U] [ 402.108406][T13390] [U] [ 402.108436][T13390] [U] [ 402.108452][T13390] [U] [ 402.108468][T13390] [U] [ 402.108482][T13390] [U] [ 402.108497][T13390] [U] [ 402.108512][T13390] [U] [ 402.108527][T13390] [U] [ 402.108566][T13390] [U] [ 402.108592][T13390] [U] [ 402.108609][T13390] [U] [ 402.108624][T13390] [U] [ 402.108640][T13390] [U] [ 402.108654][T13390] [U] [ 402.108671][T13390] [U] [ 402.108688][T13390] [U] [ 402.108722][T13390] [U] [ 402.108749][T13390] [U] [ 402.108766][T13390] [U] [ 402.108781][T13390] [U] [ 402.108797][T13390] [U] [ 402.108812][T13390] [U] [ 402.108827][T13390] [U] [ 402.108842][T13390] [U] [ 402.108873][T13390] [U] [ 402.108890][T13390] [U] [ 402.108904][T13390] [U] [ 402.108919][T13390] [U] [ 402.108934][T13390] [U] [ 402.108948][T13390] [U] [ 402.108963][T13390] [U] [ 402.108978][T13390] [U] [ 402.108998][T13390] [U] [ 402.109013][T13390] [U] [ 402.109028][T13390] [U] [ 402.109049][T13390] [U] [ 4 ** replaying previous printk message ** [ 402.109066][T13390] [U] [ 402.109083][T13390] [U] [ 402.109101][T13390] [U] [ 402.109118][T13390] [U] [ 402.109140][T13390] [U] [ 402.109157][T13390] [U] [ 402.109174][T13390] [U] [ 402.109191][T13390] [U] [ 402.109209][T13390] [U] [ 402.109226][T13390] [U] [ 402.109246][T13390] [U] [ 402.109263][T13390] [U] [ 402.109282][T13390] [U] [ 402.109297][T13390] [U] [ 402.109312][T13390] [U] [ 402.109327][T13390] [U] [ 402.109341][T13390] [U] [ 402.109356][T13390] [U] [ 402.109371][T13390] [U] [ 402.109386][T13390] [U] [ 402.109406][T13390] [U] [ 402.109421][T13390] [U] [ 402.109436][T13390] [U] [ 402.109451][T13390] [U] [ 402.109466][T13390] [U] [ 402.109481][T13390] [U] [ 402.109496][T13390] [U] [ 402.109511][T13390] [U] [ 402.109530][T13390] [U] [ 402.109545][T13390] [U] [ 402.109560][T13390] [U] [ 402.109577][T13390] [U] [ 402.109592][T13390] [U] [ 402.109608][T13390] [U] [ 402.109623][T13390] [U] [ 402.109638][T13390] [U] [ 402.109657][T13390] [U] [ 402.109672][T13390] [U] [ 402.109687][T13390] [U] [ 402.109703][T13390] [U] [ 402.109718][T13390] [U] [ 402.109733][T13390] [U] [ 402.109748][T13390] [U] [ 402.109763][T13390] [U] [ 402.109782][T13390] [U] [ 402.109797][T13390] [U] [ 402.109812][T13390] [U] [ 402.109827][T13390] [U] [ 402.109842][T13390] [U] [ 402.109858][T13390] [U] [ 402.109895][T13390] [U] [ 402.109912][T13390] [U] [ 402.109956][T13390] [U] [ 402.109973][T13390] [U] [ 402.109988][T13390] [U] [ 402.110003][T13390] [U] [ 402.110019][T13390] [U] [ 402.110034][T13390] [U] [ 402.110056][T13390] [U] [ 402.110074][T13390] [U] [ 402.110095][T13390] [U] [ 402.110113][T13390] [U] [ 402.110130][T13390] [U] [ 402.110147][T13390] [U] [ 402.110165][T13390] [U] [ 402.110181][T13390] [U] [ 402.110198][T13390] [U] [ 402.110216][T13390] [U] [ 402.110236][T13390] [U] [ 402.110253][T13390] [U] [ 402.110270][T13390] [U] [ 402.110286][T13390] [U] [ 402.110307][T13390] [U] [ 402.110327][T13390] [U] [ 402.110349][T13390] [U] [ 402.110384][T13390] [U] [ 402.110405][T13390] [U] [ 402.110422][T13390] [U] [ 402.110451][T13390] [U] [ 402.110467][T13390] [U] [ 402.110482][T13390] [U] [ 402.110497][T13390] [U] [ 402.110512][T13390] [U] [ 402.151870][T13390] [ 402.204484][ T5104] rc_core: IR keymap rc-imon-rsc not found [ 402.204530][ T5104] Registered IR keymap rc-empty [ 402.205531][ T5104] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 402.207035][ T5104] input: iMON Station as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input28 [ 402.243625][T13390] ====================================================== [ 402.246122][T13390] WARNING: possible circular locking dependency detected [ 402.248859][T13390] syzkaller #0 Tainted: G L [ 402.251112][T13390] ------------------------------------------------------ [ 402.253343][T13390] syz.2.2379/13390 is trying to acquire lock: [ 402.255285][T13390] ffff888024607710 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: ima_file_truncate+0xe6/0x190 [ 402.258455][T13390] [ 402.258455][T13390] but task is already holding lock: [ 402.260780][T13390] ffff88802af8c460 (sb_writers#5){.+.+}-{0:0}, at: path_openat+0x1a45/0x2440 [ 402.263779][T13390] [ 402.263779][T13390] which lock already depends on the new lock. [ 402.263779][T13390] [ 402.267237][T13390] [ 402.267237][T13390] the existing dependency chain (in reverse order) is: [ 402.270527][T13390] [ 402.270527][T13390] -> #4 (sb_writers#5){.+.+}-{0:0}: [ 402.273168][T13390] lock_acquire+0x1d1/0x380 [ 402.274991][T13390] mnt_want_write+0x6f/0x420 [ 402.276721][T13390] lookup_open+0x150/0x1990 [ 402.278310][T13390] path_openat+0xa2c/0x2440 [ 402.279907][T13390] do_file_open+0x20e/0x430 [ 402.281506][T13390] file_open_name+0x1c3/0x3e0 [ 402.283304][T13390] filp_open+0x2e/0x50 [ 402.284904][T13390] fsg_lun_open+0x6b/0x7b0 [ 402.286465][T13390] fsg_store_file+0x1e7/0x450 [ 402.288115][T13390] configfs_write_iter+0x302/0x4e0 [ 402.289916][T13390] vfs_write+0x6af/0x1050 [ 402.291570][T13390] ksys_write+0x12a/0x250 [ 402.293244][T13390] __do_fast_syscall_32+0x13a/0x8b0 [ 402.295312][T13390] do_fast_syscall_32+0x32/0x70 [ 402.297127][T13390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 402.299346][T13390] [ 402.299346][T13390] -> #3 (&common->filesem){++++}-{4:4}: [ 402.301741][T13390] lock_acquire+0x1d1/0x380 [ 402.303352][T13390] down_read+0x99/0x4c0 [ 402.304864][T13390] fsg_show_file+0x20/0x180 [ 402.306452][T13390] configfs_read_iter+0x426/0x6f0 [ 402.308275][T13390] __kernel_read+0x397/0xad0 [ 402.310043][T13390] integrity_kernel_read+0x7e/0xb0 [ 402.312148][T13390] ima_calc_file_hash_tfm+0x25e/0x350 [ 402.314267][T13390] ima_calc_file_hash+0x1e3/0x380 [ 402.316114][T13390] ima_collect_measurement+0x94f/0xb30 [ 402.317979][T13390] process_measurement+0xdfe/0x2350 [ 402.319769][T13390] ima_file_check+0xcc/0x120 [ 402.321376][T13390] security_file_post_open+0xc4/0x210 [ 402.323392][T13390] path_openat+0x5cd/0x2440 [ 402.325118][T13390] do_file_open+0x20e/0x430 [ 402.326767][T13390] do_sys_openat2+0x10f/0x1e0 [ 402.328524][T13390] __ia32_compat_sys_openat+0x12d/0x210 [ 402.330747][T13390] __do_fast_syscall_32+0x13a/0x8b0 [ 402.332856][T13390] do_fast_syscall_32+0x32/0x70 [ 402.334636][T13390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 402.336780][T13390] [ 402.336780][T13390] -> #2 (&p->frag_sem){.+.+}-{4:4}: [ 402.339084][T13390] lock_acquire+0x1d1/0x380 [ 402.340808][T13390] down_read+0x99/0x4c0 [ 402.342396][T13390] configfs_write_iter+0x218/0x4e0 [ 402.344357][T13390] vfs_write+0x6af/0x1050 [ 402.344469][ T8806] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 402.348827][T13390] ksys_write+0x12a/0x250 [ 402.350487][T13390] __do_fast_syscall_32+0x13a/0x8b0 [ 402.352316][T13390] do_fast_syscall_32+0x32/0x70 [ 402.354035][T13390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 402.356179][T13390] [ 402.356179][T13390] -> #1 (&buffer->mutex#2){+.+.}-{4:4}: [ 402.358579][T13390] lock_acquire+0x1d1/0x380 [ 402.360192][T13390] __mutex_lock+0x1a4/0x1bd0 [ 402.361807][T13390] configfs_read_iter+0x79/0x6f0 [ 402.363554][T13390] __kernel_read+0x397/0xad0 [ 402.365363][T13390] integrity_kernel_read+0x7e/0xb0 [ 402.367306][T13390] ima_calc_file_hash_tfm+0x25e/0x350 [ 402.369528][T13390] ima_calc_file_hash+0x1e3/0x380 [ 402.371523][T13390] ima_collect_measurement+0x94f/0xb30 [ 402.373579][T13390] process_measurement+0xdfe/0x2350 [ 402.375496][T13390] ima_file_check+0xcc/0x120 [ 402.377213][T13390] security_file_post_open+0xc4/0x210 [ 402.379593][T13390] path_openat+0x5cd/0x2440 [ 402.381450][T13390] do_file_open+0x20e/0x430 [ 402.383291][T13390] do_sys_openat2+0x10f/0x1e0 [ 402.384981][T13390] __ia32_compat_sys_openat+0x12d/0x210 [ 402.386916][T13390] __do_fast_syscall_32+0x13a/0x8b0 [ 402.388721][T13390] do_fast_syscall_32+0x32/0x70 [ 402.390496][T13390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 402.392851][T13390] [ 402.392851][T13390] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 402.395122][ T8806] usb 8-1: device descriptor read/8, error -71 [ 402.398106][T13390] check_prev_add+0xeb/0xe60 [ 402.399826][T13390] __lock_acquire+0x1492/0x1ec0 [ 402.401689][T13390] lock_acquire+0x1d1/0x380 [ 402.403527][T13390] __mutex_lock+0x1a4/0x1bd0 [ 402.405444][T13390] ima_file_truncate+0xe6/0x190 [ 402.407356][T13390] security_file_truncate+0x11e/0x1e0 [ 402.409410][T13390] path_openat+0x1d7e/0x2440 [ 402.411210][T13390] do_file_open+0x20e/0x430 [ 402.412948][T13390] do_sys_openat2+0x10f/0x1e0 [ 402.414746][T13390] __ia32_sys_creat+0xcb/0x120 [ 402.416567][T13390] __do_fast_syscall_32+0x13a/0x8b0 [ 402.418421][T13390] do_fast_syscall_32+0x32/0x70 [ 402.420284][T13390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 402.422621][T13390] [ 402.422621][T13390] other info that might help us debug this: [ 402.422621][T13390] [ 402.425799][T13390] Chain exists of: [ 402.425799][T13390] &ima_iint_mutex_key[depth] --> &common->filesem --> sb_writers#5 [ 402.425799][T13390] [ 402.430139][T13390] Possible unsafe locking scenario: [ 402.430139][T13390] [ 402.432898][T13390] CPU0 CPU1 [ 402.435014][T13390] ---- ---- [ 402.436754][T13390] rlock(sb_writers#5); [ 402.438151][T13390] lock(&common->filesem); [ 402.440335][T13390] lock(sb_writers#5); [ 402.442412][T13390] lock(&ima_iint_mutex_key[depth]); [ 402.444127][T13390] [ 402.444127][T13390] *** DEADLOCK *** [ 402.444127][T13390] [ 402.446639][T13390] locks held by syz.2.2379/13390: 1, last CPU#2: [ 402.448669][T13390] #0: ffff88802af8c460 (sb_writers#5){.+.+}-{0:0}, at: path_openat+0x1a45/0x2440 [ 402.452077][T13390] [ 402.452077][T13390] stack backtrace: [ 402.454541][T13390] CPU: 2 UID: 0 PID: 13390 Comm: syz.2.2379 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.458326][T13390] Tainted: [L]=SOFTLOCKUP [ 402.459689][T13390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 402.462845][T13390] Call Trace: [ 402.463938][T13390] [ 402.464895][T13390] dump_stack_lvl+0x100/0x190 [ 402.466384][T13390] print_circular_bug.cold+0x178/0x1be [ 402.468103][T13390] check_noncircular+0x146/0x160 [ 402.469723][T13390] check_prev_add+0xeb/0xe60 [ 402.471473][T13390] __lock_acquire+0x1492/0x1ec0 [ 402.473254][T13390] ? tomoyo_path_perm+0x2db/0x460 [ 402.475016][T13390] lock_acquire+0x1d1/0x380 [ 402.476580][T13390] ? ima_file_truncate+0xe6/0x190 [ 402.478159][T13390] ? __pfx___might_resched+0x10/0x10 [ 402.479818][T13390] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 402.481512][T13390] __mutex_lock+0x1a4/0x1bd0 [ 402.482979][T13390] ? ima_file_truncate+0xe6/0x190 [ 402.484680][T13390] ? ima_file_truncate+0xe6/0x190 [ 402.486447][T13390] ? __pfx___mutex_lock+0x10/0x10 [ 402.488317][T13390] ? make_vfsuid+0xec/0x140 [ 402.489969][T13390] ? __pfx_make_vfsuid+0x10/0x10 [ 402.491576][T13390] ? common_perm+0x10f/0x500 [ 402.493048][T13390] ? apparmor_file_truncate+0x261/0x320 [ 402.494793][T13390] ? __pfx_apparmor_file_truncate+0x10/0x10 [ 402.496653][T13390] ? hook_file_truncate+0xba/0x280 [ 402.498271][T13390] ? ima_file_truncate+0xe6/0x190 [ 402.499867][T13390] ima_file_truncate+0xe6/0x190 [ 402.501452][T13390] security_file_truncate+0x11e/0x1e0 [ 402.503369][T13390] path_openat+0x1d7e/0x2440 [ 402.505173][T13390] ? __pfx_path_openat+0x10/0x10 [ 402.507073][T13390] do_file_open+0x20e/0x430 [ 402.508509][T13390] ? __pfx_do_file_open+0x10/0x10 [ 402.510091][T13390] ? _raw_spin_unlock+0x28/0x50 [ 402.511693][T13390] ? alloc_fd+0x471/0x7a0 [ 402.513060][T13390] do_sys_openat2+0x10f/0x1e0 [ 402.514562][T13390] ? __pfx_do_sys_openat2+0x10/0x10 [ 402.516208][T13390] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 402.517969][T13390] __ia32_sys_creat+0xcb/0x120 [ 402.519493][T13390] ? __pfx___ia32_sys_creat+0x10/0x10 [ 402.521199][T13390] ? __do_fast_syscall_32+0xb3/0x8b0 [ 402.523016][T13390] __do_fast_syscall_32+0x13a/0x8b0 [ 402.524882][T13390] do_fast_syscall_32+0x32/0x70 [ 402.526779][T13390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 402.528929][T13390] RIP: 0023:0xf705efec [ 402.530184][T13390] Code: Unable to access opcode bytes at 0xf705efc2. [ 402.532275][T13390] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000008 [ 402.534909][T13390] RAX: ffffffffffffffda RBX: 0000000080000380 RCX: 0000000000000022 [ 402.537377][T13390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 402.539861][T13390] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 402.542518][T13390] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 402.545398][T13390] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 402.548131][T13390] [ 402.573748][ T5104] usb 10-1: USB disconnect, device number 15 [ 402.600176][T13402] syzkaller1: entered promiscuous mode [ 402.600227][T13402] syzkaller1: entered allmulticast mode [ 402.675941][ T8806] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 402.695108][ T8806] usb 8-1: device descriptor read/8, error -71 [ 402.804600][ T8806] usb usb8-port1: unable to enumerate USB device