last executing test programs: 26m33.327495209s ago: executing program 2 (id=2944): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x2d}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf, 0x90, 0x7f, "", [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0x5, 0x10, 0x1, {0x22, 0x34d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x46, 0x2, 0x6}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x310, 0xf7, 0x1, 0x4, 0xff, 0xf4}, 0x16, &(0x7f0000000580)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x8, 0x9, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xc, 0x4, 0xfff9}]}, 0x2, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1404}}]}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x2, 0x3}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000240)={r1, 0x6, 0x2, [0x8, 0x0]}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0xa, 0x3, 0x3a) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/key-users\x00', 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, 0x0) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2284, &(0x7f0000000040)) close_range(r2, 0xffffffffffffffff, 0x0) 26m31.926123627s ago: executing program 2 (id=2951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x30, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r2, 0xff01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0xf) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r5, 0x4b47, 0x0) ioctl$VT_ACTIVATE(r5, 0x5606, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYRES8=r3, @ANYRESHEX=r1, @ANYRES8=0x0, @ANYBLOB="8e6d5be475b4c056a187a475350748b2df175a09fc", @ANYRESHEX=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$alg(0x26, 0x5, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000200)=0xc2) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000280)="0000000000000004ff6943b80000000800000028f2000000008607000000ebb01f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8d0000009c238532dd4c6ee9eddd58a599264432dc88941a476f8674c3b25a20e8d25504d773dd523add126ab51ca15c9d0436b3d0164bda8d9ed4e88158a20d3c55bd06050b964a5503bd0ef4b3a0823ad11bfae501057d95ba3e8d12893e6201c24e96b3031a817db4aa92e708a23ec370714940856977cb6f99f8ddc11996d1d5587f9c325bf5c2f77088d08a05af40a5392711377de42a66c2adee5a0612b9", 0xdc, r7) keyctl$search(0xa, 0x0, &(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000280)={'syz', 0x1}, r7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) preadv(r8, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x1, 0x1) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'rose0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000055c0)={0x0, 0x0, &(0x7f0000005580)={&(0x7f0000005600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14}}, 0x3c}}, 0x34040044) 26m31.097847942s ago: executing program 2 (id=2958): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESHEX], &(0x7f0000000400)='syzkaller\x00', 0xdd, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffce7, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4000007) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x144481, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x200000, 0x20) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0, 0xfffffffc) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) r5 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000280), 0x881, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='^!{.,\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 26m29.798903655s ago: executing program 2 (id=2963): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x3, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @local}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @remote}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xc0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002480)={'wlan0\x00'}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0}) r5 = open$dir(&(0x7f0000000280)='./file0\x00', 0x800, 0x8) unlinkat(r5, &(0x7f00000002c0)='./file0\x00', 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregs(0xc, r6, 0x53af, &(0x7f0000000080)=""/253) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) write$char_usb(r7, &(0x7f0000000240)="6f6cb3bbd7584bd42913fd84561b7e8d2b7466c47025ab219ed9dcfc9348868166da463b716fb7ffc50a26ef3d658214920c46f25a28", 0x36) preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000040)=""/185, 0xb9}], 0x1, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r9, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0xc4, 0x0, 0x0, 0x9) 26m29.41849014s ago: executing program 2 (id=2965): r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000140)={"7c604c6f2b377b4b3f7103e7357d95d9b0815bd4e3101d93a57c561fef4f7e2b", 0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r0, &(0x7f0000000180)=0x1b5d, 0xff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0xb, 0x80000, 0x800000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0xfff3, 0xfff1}}, [@filter_kind_options=@f_flower={{0x9}, {0xc, 0x2, [@TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x49090}, 0xd0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732"], 0xa8}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0205710, &(0x7f0000000100)={0x1, 0x1, 0x0, 0x0, 0x2}) 26m29.216454645s ago: executing program 2 (id=2966): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "87ffff00006dad33", "2607080d7f4f87f6fd4ef2dece6c7ceb", '\x00', "230100"}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000900010073797a3000000000080003400000000808000640000000001400000010000100000000922e81e2b63fc56131f37800000000000084000a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket(0x11, 0xa, 0x2) socket(0x400000000010, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "190037d70600", "b7b6c5b29ca2b838d41ac3fc7ddf972d", '\x00', "3610000000000001"}, 0x28) 26m29.126977148s ago: executing program 32 (id=2966): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "87ffff00006dad33", "2607080d7f4f87f6fd4ef2dece6c7ceb", '\x00', "230100"}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000900010073797a3000000000080003400000000808000640000000001400000010000100000000922e81e2b63fc56131f37800000000000084000a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket(0x11, 0xa, 0x2) socket(0x400000000010, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "190037d70600", "b7b6c5b29ca2b838d41ac3fc7ddf972d", '\x00', "3610000000000001"}, 0x28) 3m34.53808685s ago: executing program 0 (id=7149): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, 0x0, &(0x7f0000000200)) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) unshare(0x22020600) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) syz_io_uring_setup(0x3078, &(0x7f0000000040)={0x0, 0xf90c, 0x4, 0x0, 0xf3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0xf03, &(0x7f0000000240)={0x0, 0x4fbd, 0xc00, 0x0, 0x387}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000008, 0x100010, 0xffffffffffffffff, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r4, r7, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r9 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) 3m33.509104869s ago: executing program 0 (id=7156): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x7e, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000fe67b4080c007000000000000190780a010102ac1414aa05009078000000024500000000000000001100007f000001ac148100440c00010000003ab853446f861930e2004e21000044341501e0000001000000000000000000000000ac14140000000000000000a3b57019070a00"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYRES32, @ANYRES64=r3], 0x50) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x401, r4, 0x0, 0xa002a0}, 0x38) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xc080583d, &(0x7f0000000040)={0x3, 0x3, 0x2, 0x2, 0x1ff, 0x1800, 0x4, 0x7}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r9, 0x2) 3m32.376757068s ago: executing program 0 (id=7160): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @broadcast}]}}}, @IFLA_LINK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008005}, 0x8000002) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffedb, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 3m32.204935995s ago: executing program 0 (id=7170): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @broadcast}]}}}, @IFLA_LINK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008005}, 0x8000002) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xfffffffffffffedb, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 3m32.130473079s ago: executing program 0 (id=7162): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x7e, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000fe67b4080c007000000000000190780a010102ac1414aa05009078000000024500000000000000001100007f000001ac148100440c00010000003ab853446f861930e2004e21000044341501e0000001000000000000000000000000ac14140000000000000000a3b57019070a00"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYRES32, @ANYRES64=r3], 0x50) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x401, r4, 0x0, 0xa002a0}, 0x38) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$XFS_IOC_AG_GEOMETRY(r7, 0xc080583d, &(0x7f0000000040)={0x3, 0x3, 0x2, 0x2, 0x1ff, 0x1800, 0x4, 0x7}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r8, 0x2) 3m31.099358659s ago: executing program 0 (id=7165): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000051}, 0x4008090) 3m16.101876195s ago: executing program 33 (id=7165): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000051}, 0x4008090) 7.361562738s ago: executing program 1 (id=7795): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8003) write$sndseq(0xffffffffffffffff, 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) 7.041786657s ago: executing program 5 (id=7796): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) (async) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) syz_open_dev$audion(&(0x7f0000000180), 0x100, 0x200482) (async) r5 = syz_open_dev$audion(&(0x7f0000000180), 0x100, 0x200482) write$snddsp(r5, &(0x7f0000000240)="b38ce3b3c6a3b9a8c5f68fb9debb7a6901eab0ea32a34ee685e7d830110d1dc8adcd7430739caca40edb0a1bbc", 0x2d) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="ff0b090000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 6.807574669s ago: executing program 5 (id=7798): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x7e, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000fe67b4080c007000000000000190780a010102ac1414aa05009078000000024500000000000000001100007f000001ac148100440c00010000003ab853446f861930e2004e21000044341501e0000001000000000000000000000000ac14140000000000000000a3b57019070a00"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYRES32, @ANYRES64=r2], 0x50) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x401, r3, 0x0, 0xa002a0}, 0x38) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$XFS_IOC_AG_GEOMETRY(r7, 0xc080583d, &(0x7f0000000040)={0x3, 0x3, 0x2, 0x2, 0x1ff, 0x1800, 0x4, 0x7}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r8, 0x2) 5.810086106s ago: executing program 1 (id=7802): openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000050000000090a010400000000000000000700fffd08000a4000b6b8000900020073797a31000000000900010073797a300000000008000540000000071400"], 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x8040480) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r2, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) close(r4) 5.72760249s ago: executing program 1 (id=7803): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() syz_emit_ethernet(0x7e, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000fe67b4080c007000000000000190780a010102ac1414aa05009078000000024500000000000000001100007f000001ac148100440c00010000003ab853446f861930e2004e21000044341501e0000001000000000000000000000000ac14140000000000000000a3b57019070a00"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYRES32, @ANYRES64=r3], 0x50) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x401, r4, 0x0, 0xa002a0}, 0x38) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$XFS_IOC_AG_GEOMETRY(r8, 0xc080583d, &(0x7f0000000040)={0x3, 0x3, 0x2, 0x2, 0x1ff, 0x1800, 0x4, 0x7}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r9, 0x2) 5.359826535s ago: executing program 5 (id=7805): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (fail_nth: 3) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000193000/0x1000)=nil, &(0x7f00002da000/0x3000)=nil, 0x1000}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 5.008861703s ago: executing program 4 (id=7809): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) unshare(0x40000080) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1400) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) 4.936141918s ago: executing program 5 (id=7810): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() syz_emit_ethernet(0x7e, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000fe67b4080c007000000000000190780a010102ac1414aa05009078000000024500000000000000001100007f000001ac148100440c00010000003ab853446f861930e2004e21000044341501e0000001000000000000000000000000ac14140000000000000000a3b57019070a00"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYRES32, @ANYRES64=r3], 0x50) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x401, r4, 0x0, 0xa002a0}, 0x38) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$XFS_IOC_AG_GEOMETRY(r8, 0xc080583d, &(0x7f0000000040)={0x3, 0x3, 0x2, 0x2, 0x1ff, 0x1800, 0x4, 0x7}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r9, 0x2) 4.316231578s ago: executing program 1 (id=7811): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r0, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x0, 0x200000, "82b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf700"/48}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) membarrier(0x1, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000634000/0x3000)=nil, 0x3000}, 0x4}) 4.18013008s ago: executing program 3 (id=7813): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x7e, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000fe67b4080c007000000000000190780a010102ac1414aa05009078000000024500000000000000001100007f000001ac148100440c00010000003ab853446f861930e2004e21000044341501e0000001000000000000000000000000ac14140000000000000000a3b57019070a00"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYRES32, @ANYRES64=r2], 0x50) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x401, r3, 0x0, 0xa002a0}, 0x38) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$XFS_IOC_AG_GEOMETRY(r7, 0xc080583d, &(0x7f0000000040)={0x3, 0x3, 0x2, 0x2, 0x1ff, 0x1800, 0x4, 0x7}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r8, 0x2) 3.96971866s ago: executing program 4 (id=7814): r0 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x8) mmap$panthor(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10, r0, 0x3) (async) openat$ptp1(0xffffff9c, &(0x7f0000000040), 0x401, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0/file0', [{0x20, '$'}, {0x20, '(&\')'}, {0x20, '/dev/ptp1\x00'}], 0xa, "5682dc688ed7590d555b0e4f1fbb3b2f9e7f39817c9c05211dd8c9ba22e467514bb82d42f4e9622a8b0b97489cc3e95db5571e803114636e6a29d5ae36059ce63e6922b87d15e255c4ce38e6556c0c806c2856e31e5d198b68010ba9e2881d73fb5ff23f0a"}, 0x88) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) utimensat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{r1, r2/1000+60000}, {0x77359400}}, 0x100) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x140, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xd8, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x140}, 0x1, 0x0, 0x0, 0x4}, 0x20009010) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x2, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4002}, 0x20000000) (async) rmdir(&(0x7f0000000540)='./file0/file0\x00') (async) getuid() getxattr(&(0x7f0000000580)='./file0/file0\x00', &(0x7f00000005c0)=@random={'security.', 'hsr0\x00'}, &(0x7f0000000600)=""/147, 0x93) connect$unix(r0, &(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) r4 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) r5 = open$dir(&(0x7f0000000780)='./file0\x00', 0x80400, 0x8) sendfile(r0, r5, &(0x7f00000007c0)=0xff, 0xfffffff3) (async) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x9000) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r6) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x48, r7, 0x700, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008004}, 0x8004) (async) recvmmsg$unix(r0, &(0x7f0000000d40)=[{{&(0x7f00000009c0)=@abs, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000a40)=""/130, 0x82}, {&(0x7f0000000b00)=""/104, 0x68}, {&(0x7f0000000b80)=""/141, 0x8d}, {&(0x7f0000000c40)=""/6, 0x6}], 0x4, &(0x7f0000000cc0)=[@cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}], 0x1, 0x40000001, 0x0) (async) close(r4) syz_open_dev$tty1(0xc, 0x4, 0x2) r11 = socket$kcm(0x29, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000e00)={'ip_vti0\x00', &(0x7f0000000d80)={'syztnl0\x00', 0x0, 0x80, 0x7800, 0x10001, 0x2, {{0x11, 0x4, 0x0, 0x12, 0x44, 0x66, 0x0, 0x37, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @noop, @end, @rr={0x7, 0x27, 0x86, [@broadcast, @broadcast, @remote, @empty, @multicast1, @broadcast, @local, @loopback, @multicast1]}]}}}}}) sendmsg$kcm(r11, &(0x7f0000000fc0)={&(0x7f0000000e40)=@ll={0x11, 0x1a, r12, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000ec0)="274711b450e556f1a417ed34407924339f6a375cf3a97ebb122a3a741462e9c94ff30b0c04550fb8b1399d539ede28cfa47a52f6053f665efc55e3580141a322063d3836f68a63709a2a3f708a5168605c7ce1a06c388ae4561df009e396dd8a30cff53502c9cf4401a8998b0f88f0bab639cc30c654686349e9327820aeddb68955d6fca4cd475deda63e9007e45f7a7cfdd00ed67ebb8a207b812d17513bf42f6e7aaf102993817ae67d7beb499c17699f4e0cd45a4bc18dfffd622068", 0xbe}], 0x1}, 0x4004100) (async) ioctl$RTC_WIE_ON(r10, 0x700f) (async) ioctl$USBDEVFS_IOCTL(r9, 0xc00c5512, &(0x7f0000001000)=@usbdevfs_disconnect={0x1e}) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x10, 0x3fb, 0x400, 0x70bd2d, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x480c4) (async) mkdir(&(0x7f0000001140)='./file0/file0\x00', 0x100) ioctl$HIDIOCGUSAGE(r8, 0xc018480b, &(0x7f0000001180)={0x2, 0x1, 0x3, 0x7, 0x1}) 3.689614589s ago: executing program 4 (id=7815): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r1, 0x3e}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e105000000884800001144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x24004080) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000200)={@rand_addr, 0x0}, &(0x7f0000000240)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x8, 0x0, 0xa, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x8000, 0x1, 0x20000, 0x9}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000e40)="0b032200e0ff25000200475400f6a13bb10000a88800080048032df95496263a5f64aea7be8c5842052e1cf4307db4d02235887f32d1c7182f96701afddb2c3ed3e8e2b1267c5918c9dbd4e91647067fa24d9515213229467e8684f796666e1ab974d4dc6046ab917d87f8760de46698", 0x70, 0x20000040, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @private, @loopback}, &(0x7f0000000440)=0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x4) r9 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r9, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x40, 0x70e, 0x3, 0x4, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x68, 0x0, 0x7, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000600)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0], 0x0, 0xd3, &(0x7f00000006c0)=[{}], 0x8, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x65, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a40)={'syztnl2\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x7800, 0x700, 0x2, 0x1, {{0x30, 0x4, 0x0, 0x9, 0xc0, 0x68, 0x0, 0xe0, 0x4, 0x0, @loopback, @multicast2, {[@ssrr={0x89, 0x3, 0xc}, @generic={0x44, 0xc, "1edabe537253dbf7929d"}, @lsrr={0x83, 0x13, 0x26, [@empty, @initdev={0xac, 0x1e, 0x6, 0x0}, @dev={0xac, 0x14, 0x14, 0x2e}, @empty]}, @end, @cipso={0x86, 0x4b, 0x2, [{0xd385ce937fd667c5, 0x12, "9f7d3f21936f4e48660c3af2895edc3a"}, {0x1, 0x9, "b8e93ca761e268"}, {0x0, 0xf, "1582e265a2bc7df5310c2e65b1"}, {0x6, 0xd, "b2a1f90e307540e1e09614"}, {0x5, 0xe, "427d1e32a2e9024a6e18bb76"}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0x37, 0x3, 0x9, [{@remote, 0x8001}, {@multicast1, 0x100}, {@private=0xa010100, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @rr={0x7, 0x13, 0x9f, [@multicast1, @remote, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2e}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'syztnl1\x00', 0x0, 0x29, 0xe, 0x0, 0xffffffff, 0x41, @mcast2, @mcast1, 0x8, 0x10, 0xd68a, 0x36c}}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="4c020000", @ANYRES16=0x0, @ANYBLOB="20002dbd7000fddbdf25170000003c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020076657468305f6d616376746170000000140002006d616376746170300000000000000000580001801400020076657468315f746f5f7465616d00000008000100", @ANYRES8=r12, @ANYBLOB="08000300020000001400020076657468315f746f5f62617461647600140002007465616d5f736c6176655f310000000008000100", @ANYRES32=r1, @ANYBLOB="78000180080003000300000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="1400020070696d67158a390000000000000000001400020070696d72656730000000000000000000140002007665746830000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYRES16=r1, @ANYRES32=r7, @ANYBLOB="0800feff5f7a757a4c00018008000100", @ANYRES32=r8, @ANYBLOB="08000300000000001400020069703665727370616e300000000000001400020076657468305f766c616e000000000000080003000200000008000300020000005c000180080003000300000008000100", @ANYRES32=r10, @ANYBLOB="080003000200000008000100", @ANYRES32=r11, @ANYBLOB="140002006272696467655f736c6176655f31000008000100", @ANYRES32=r12, @ANYBLOB="08000300030000001400020070696d367265673000000000000000001c000180080003000100000008000100", @ANYRES32=r13, @ANYBLOB="00000100", @ANYRES32=r14, @ANYBLOB="68000180140002006d6163766c616e30000000000000000008000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200766972745f77696669300000000000000800030002000000140002006272696467655f736c6176655f310000080003000300000008000100", @ANYRES32=r16, @ANYBLOB], 0x24c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000193000/0x1000)=nil, &(0x7f00002da000/0x3000)=nil, 0x1000}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 3.577707669s ago: executing program 4 (id=7816): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x68c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00000e5000/0x2000)=nil, 0x400000, 0x1, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000193000/0x1000)=nil, &(0x7f00002da000/0x3000)=nil, 0x1000}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 3.462757s ago: executing program 4 (id=7817): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x63b3, &(0x7f0000000000)) sigaltstack(0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x8100}, @void, @eth={@broadcast, @local, @val={@void, {0x8100, 0x7, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0xe000, 0x6, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x41}}, {0xa001, 0x880b, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}}, 0x36) 3.443326008s ago: executing program 1 (id=7818): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) unshare(0x40000080) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1400) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) 3.378627872s ago: executing program 5 (id=7819): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, &(0x7f0000000400)='usrquota') 3.240066401s ago: executing program 4 (id=7820): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, &(0x7f0000000400)='usrquota') 729.710038ms ago: executing program 3 (id=7821): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private0, @in=@broadcast}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_x_sec_ctx={0x1, 0x18, 0x2, 0x3f}]}, 0xa8}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, r3, 0x5, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x20000080) close_range(r0, r2, 0x0) 728.304805ms ago: executing program 3 (id=7822): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) (fail_nth: 3) 349.713767ms ago: executing program 3 (id=7823): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (fail_nth: 3) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2b, 'rdma'}]}, 0x6) 345.375921ms ago: executing program 5 (id=7824): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2b, 'rdma'}]}, 0x6) 249.539931ms ago: executing program 1 (id=7825): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) listen(r0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpriority(0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r1, &(0x7f0000001e80), 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000400)=[0xe758, 0xf8de], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x6a040000) mmap(&(0x7f00005f7000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) socket$netlink(0x10, 0x3, 0x0) pwrite64(r4, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) ioctl$BLKRRPART(r4, 0x125f, 0x1f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x840, 0x0) 247.390048ms ago: executing program 3 (id=7826): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) r0 = syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x8, r0) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0xb) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x4, 0x2003) r1 = syz_pidfd_open(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r2, 0x5) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c2000000080047870048006800000d0690780a010100ac146462b1728c35482b00000000000000000000000000000000000300004e2100004e4c000000010000000100000001000000060000000091c4bcc4f7c86dcb1226cbc15fa76b0dbfa8052bf72abc2571885f0deff4acb80522e7491b045bca34df335789b13ee185947d22924c68ee65b9e8948583511eee12e5b46d071a357a720453aa4263395b046b0ec9a838f625878b1a37c2429cf66c9ab1decc"], 0x0) process_mrelease(r1, 0x700000000000000) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/196, 0xc4}, {&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f0000000040)=""/24, 0x18}], 0x3, &(0x7f0000001780)=[{&(0x7f0000001600)=""/163, 0xa3}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) (async) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x8, r0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0xb) (async) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x4, 0x2003) (async) syz_pidfd_open(r0, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) listen(r2, 0x5) (async) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c2000000080047870048006800000d0690780a010100ac146462b1728c35482b00000000000000000000000000000000000300004e2100004e4c000000010000000100000001000000060000000091c4bcc4f7c86dcb1226cbc15fa76b0dbfa8052bf72abc2571885f0deff4acb80522e7491b045bca34df335789b13ee185947d22924c68ee65b9e8948583511eee12e5b46d071a357a720453aa4263395b046b0ec9a838f625878b1a37c2429cf66c9ab1decc"], 0x0) (async) process_mrelease(r1, 0x700000000000000) (async) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/196, 0xc4}, {&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f0000000040)=""/24, 0x18}], 0x3, &(0x7f0000001780)=[{&(0x7f0000001600)=""/163, 0xa3}], 0x1, 0x0) (async) 0s ago: executing program 3 (id=7827): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) listen(r0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpriority(0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r1, &(0x7f0000001e80), 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000400)=[0xe758, 0xf8de], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x6a040000) mmap(&(0x7f00005f7000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) socket$netlink(0x10, 0x3, 0x0) pwrite64(r4, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) ioctl$BLKRRPART(r4, 0x125f, 0x1f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x840, 0x0) kernel console output (not intermixed with test programs): ratelimit: 22 callbacks suppressed [ 2294.572014][T22793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2294.575275][T14277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2294.604177][ T5980] usb usb40-port1: attempt power cycle [ 2295.013022][ T1720] netlink: 'syz.1.7536': attribute type 1 has an invalid length. [ 2295.032792][T14417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2295.056706][T25795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2295.172848][ T5980] usb usb40-port1: unable to enumerate USB device [ 2295.611732][ T6027] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 2295.622514][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2295.688146][ T1736] lo speed is unknown, defaulting to 1000 [ 2295.692938][ T1736] vcan0 speed is unknown, defaulting to 1000 [ 2295.761821][ T6027] usb 9-1: Using ep0 maxpacket: 8 [ 2295.766582][ T6027] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2295.773321][ T6027] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2295.777597][ T6027] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2295.780200][ T6027] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2295.784647][ T6027] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2295.794759][ T6027] usb 9-1: config 0 descriptor?? [ 2295.825821][ T1738] Mount JFS Failure: -22 [ 2295.827534][ T1738] jfs_mount failed w/return code = -22 [ 2296.293264][ T6027] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 2296.295895][ T6027] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 2296.298523][ T6027] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 2296.307707][ T5980] kernel read not supported for file /dsp (pid: 5980 comm: kworker/1:3) [ 2296.413579][T10301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2296.549730][T22793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2296.549798][ T6027] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 2296.566687][ T6027] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 2296.614882][ T6027] mcp2221 0003:04D8:00DD.0027: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 2296.698599][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2296.982707][T10301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2297.101908][ T6027] usb 9-1: USB disconnect, device number 91 [ 2297.113503][ T106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2297.178550][ T1748] lo speed is unknown, defaulting to 1000 [ 2297.181990][ T1748] vcan0 speed is unknown, defaulting to 1000 [ 2297.736677][ T1762] Mount JFS Failure: -22 [ 2297.738194][ T1762] jfs_mount failed w/return code = -22 [ 2298.359105][T14277] kernel read not supported for file /dsp (pid: 14277 comm: kworker/1:6) [ 2299.352162][ T1761] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2299.354426][ T1761] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2299.357286][ T1761] vhci_hcd vhci_hcd.0: Device attached [ 2299.655636][ T1757] lo speed is unknown, defaulting to 1000 [ 2299.658382][ T1757] vcan0 speed is unknown, defaulting to 1000 [ 2299.812597][T14277] usb 44-1: SetAddress Request (94) to port 0 [ 2299.814704][T14277] usb 44-1: new SuperSpeed USB device number 94 using vhci_hcd [ 2299.900254][ T1768] vhci_hcd: connection reset by peer [ 2299.902616][ T13] vhci_hcd vhci_hcd.3: stop threads [ 2299.905352][ T13] vhci_hcd vhci_hcd.3: release socket [ 2299.908878][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 2300.034616][T10301] net_ratelimit: 6 callbacks suppressed [ 2300.034632][T10301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2300.038795][ T1779] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7548'. [ 2300.492149][T24214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2300.492220][T32657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2300.574502][ T1784] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2300.576750][ T1784] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2300.582163][ T1784] vhci_hcd vhci_hcd.0: Device attached [ 2300.682901][T24875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2300.861807][T25795] usb 40-1: SetAddress Request (94) to port 0 [ 2300.864414][T25795] usb 40-1: new SuperSpeed USB device number 94 using vhci_hcd [ 2301.119170][ T1794] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7550'. [ 2301.132232][ T1791] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2301.135327][ T1791] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2301.161787][ T1791] vhci_hcd vhci_hcd.0: Device attached [ 2301.182816][ T1785] vhci_hcd: connection reset by peer [ 2301.187980][T24875] vhci_hcd vhci_hcd.1: stop threads [ 2301.189736][T24875] vhci_hcd vhci_hcd.1: release socket [ 2301.194340][T24875] vhci_hcd vhci_hcd.1: disconnect device [ 2301.431767][ T6027] usb 48-1: SetAddress Request (30) to port 0 [ 2301.434413][ T6027] usb 48-1: new SuperSpeed USB device number 30 using vhci_hcd [ 2301.454462][T20392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2301.534048][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2301.539019][T32657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2301.718961][ T1797] vhci_hcd: connection reset by peer [ 2301.721091][ T13] vhci_hcd vhci_hcd.5: stop threads [ 2301.723291][ T13] vhci_hcd vhci_hcd.5: release socket [ 2301.731215][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 2301.861857][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2302.021783][ T1764] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 2302.206220][ T1810] lo speed is unknown, defaulting to 1000 [ 2302.211881][ T1810] vcan0 speed is unknown, defaulting to 1000 [ 2302.582031][ T5304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2302.778193][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2302.936961][ T1810] Mount JFS Failure: -22 [ 2302.938432][ T1810] jfs_mount failed w/return code = -22 [ 2303.061696][ T1764] usb 6-1: Using ep0 maxpacket: 8 [ 2303.065177][ T1764] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2303.068795][ T1764] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2303.071974][ T1764] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2303.074107][ T1764] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2303.076959][ T1764] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2303.080969][ T1764] usb 6-1: config 0 descriptor?? [ 2303.322793][ T1818] FAULT_INJECTION: forcing a failure. [ 2303.322793][ T1818] name failslab, interval 1, probability 0, space 0, times 0 [ 2303.327194][ T1818] CPU: 0 UID: 0 PID: 1818 Comm: syz.5.7557 Tainted: G L syzkaller #0 PREEMPT(full) [ 2303.327217][ T1818] Tainted: [L]=SOFTLOCKUP [ 2303.327222][ T1818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2303.327231][ T1818] Call Trace: [ 2303.327237][ T1818] [ 2303.327244][ T1818] dump_stack_lvl+0x100/0x190 [ 2303.327270][ T1818] should_fail_ex.cold+0x5/0xa [ 2303.327289][ T1818] should_failslab+0xc2/0x120 [ 2303.327305][ T1818] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 2303.327328][ T1818] ? __alloc_skb+0x140/0x710 [ 2303.327353][ T1818] __alloc_skb+0x140/0x710 [ 2303.327374][ T1818] ? __alloc_skb+0x5b7/0x710 [ 2303.327394][ T1818] ? __pfx___alloc_skb+0x10/0x10 [ 2303.327420][ T1818] netlink_alloc_large_skb+0x69/0x150 [ 2303.327437][ T1818] netlink_sendmsg+0x680/0xda0 [ 2303.327455][ T1818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2303.327472][ T1818] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2303.327490][ T1818] ____sys_sendmsg+0x9e1/0xb70 [ 2303.327507][ T1818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2303.327523][ T1818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2303.327548][ T1818] ___sys_sendmsg+0x190/0x1e0 [ 2303.327567][ T1818] ? __pfx____sys_sendmsg+0x10/0x10 [ 2303.327605][ T1818] __sys_sendmsg+0x170/0x220 [ 2303.327619][ T1818] ? __pfx___sys_sendmsg+0x10/0x10 [ 2303.327638][ T1818] ? __pfx_ksys_write+0x10/0x10 [ 2303.327656][ T1818] __do_fast_syscall_32+0xe3/0x8c0 [ 2303.327675][ T1818] do_fast_syscall_32+0x32/0x70 [ 2303.327691][ T1818] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2303.327709][ T1818] RIP: 0023:0xf70aef6c [ 2303.327721][ T1818] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2303.327734][ T1818] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2303.327748][ T1818] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 2303.327757][ T1818] RDX: 000000002400c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2303.327765][ T1818] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2303.327773][ T1818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2303.327781][ T1818] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2303.327797][ T1818] [ 2303.443082][ T1820] lo speed is unknown, defaulting to 1000 [ 2303.447803][ T1820] vcan0 speed is unknown, defaulting to 1000 [ 2304.495882][ T1836] lo speed is unknown, defaulting to 1000 [ 2304.499668][ T1836] vcan0 speed is unknown, defaulting to 1000 [ 2304.894150][T14277] usb 44-1: device descriptor read/8, error -110 [ 2305.231037][ T1814] net_ratelimit: 6 callbacks suppressed [ 2305.231053][ T1814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2305.338082][T24875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2305.420241][T24214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2305.515248][ T1764] mcp2221 0003:04D8:00DD.0028: unknown main item tag 0x0 [ 2305.518622][ T1764] mcp2221 0003:04D8:00DD.0028: unknown main item tag 0x0 [ 2305.531765][T32398] Bluetooth: hci3: command 0x0406 tx timeout [ 2305.776452][ T1764] mcp2221 0003:04D8:00DD.0028: unknown main item tag 0x0 [ 2305.776481][T32657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2305.779025][ T1764] mcp2221 0003:04D8:00DD.0028: unknown main item tag 0x0 [ 2305.784643][ T1764] mcp2221 0003:04D8:00DD.0028: unknown main item tag 0x0 [ 2305.787274][ T1764] mcp2221 0003:04D8:00DD.0028: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 2305.804834][T14277] usb usb44-port1: attempt power cycle [ 2305.874270][ T1764] usb 6-1: USB disconnect, device number 126 [ 2305.931733][T25795] usb 40-1: device descriptor read/8, error -110 [ 2306.021992][ T1456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2306.115866][ T1845] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2306.117943][ T1845] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2306.121195][ T1845] vhci_hcd vhci_hcd.0: Device attached [ 2306.211054][ T1456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2306.313062][ T1860] lo speed is unknown, defaulting to 1000 [ 2306.318159][ T1860] vcan0 speed is unknown, defaulting to 1000 [ 2306.322327][T25795] usb usb40-port1: attempt power cycle [ 2306.491818][ T6027] usb 48-1: device descriptor read/8, error -110 [ 2306.561938][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2306.883421][T25795] usb usb40-port1: unable to enumerate USB device [ 2306.886770][ T6027] usb usb48-port1: attempt power cycle [ 2306.947946][T14277] usb usb44-port1: unable to enumerate USB device [ 2307.012705][ T1860] /dev/nullb0: Can't open blockdev [ 2307.101944][T24214] usb 46-1: SetAddress Request (23) to port 0 [ 2307.187106][T32657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2307.189031][T24214] usb 46-1: new SuperSpeed USB device number 23 using vhci_hcd [ 2307.197998][ T1852] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2307.200541][ T1852] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2307.213190][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2307.217728][ T1859] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2307.220230][ T1859] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2307.251880][ T1859] vhci_hcd vhci_hcd.0: Device attached [ 2307.453801][ T6027] usb usb48-port1: unable to enumerate USB device [ 2307.511829][T25795] usb 40-1: SetAddress Request (98) to port 0 [ 2307.515180][T25795] usb 40-1: new SuperSpeed USB device number 98 using vhci_hcd [ 2307.682689][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2309.348650][ T1851] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 2309.351098][ T13] vhci_hcd vhci_hcd.4: stop threads [ 2309.354756][ T13] vhci_hcd vhci_hcd.4: release socket [ 2309.357223][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 2309.368334][ T1865] vhci_hcd: connection reset by peer [ 2309.371149][ T13] vhci_hcd vhci_hcd.1: stop threads [ 2309.372037][ T1852] vhci_hcd vhci_hcd.0: Device attached [ 2309.373388][ T13] vhci_hcd vhci_hcd.1: release socket [ 2309.378749][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 2309.425099][ T1863] vhci_hcd: connection closed [ 2309.425487][ T13] vhci_hcd vhci_hcd.3: stop threads [ 2309.428848][ T13] vhci_hcd vhci_hcd.3: release socket [ 2309.430586][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 2309.806861][ T1880] netlink: 100 bytes leftover after parsing attributes in process `syz.5.7567'. [ 2309.885499][ T40] audit: type=1326 audit(1775776246.179:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1870 comm="syz.5.7567" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 2309.892554][ T40] audit: type=1326 audit(1775776246.179:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1870 comm="syz.5.7567" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 2309.899404][ T40] audit: type=1326 audit(1775776246.179:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1870 comm="syz.5.7567" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 2309.908985][ T40] audit: type=1326 audit(1775776246.179:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1870 comm="syz.5.7567" exe="/syz-executor" sig=0 arch=40000003 syscall=401 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 2309.915521][ T1884] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2309.918435][ T1884] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2309.921804][ T40] audit: type=1326 audit(1775776246.179:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1870 comm="syz.5.7567" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 2309.929188][ T40] audit: type=1326 audit(1775776246.179:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1870 comm="syz.5.7567" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 2309.935120][ T1884] vhci_hcd vhci_hcd.0: Device attached [ 2309.954572][ T40] audit: type=1326 audit(1775776246.179:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1870 comm="syz.5.7567" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 2309.967881][ T40] audit: type=1326 audit(1775776246.179:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1870 comm="syz.5.7567" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 2309.975404][ T40] audit: type=1326 audit(1775776246.179:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1870 comm="syz.5.7567" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 2309.991402][ T40] audit: type=1326 audit(1775776246.179:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1870 comm="syz.5.7567" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 2310.277843][T32657] net_ratelimit: 6 callbacks suppressed [ 2310.277861][T32657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2310.465831][ T1895] lo speed is unknown, defaulting to 1000 [ 2310.513013][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2310.759578][ T1895] vcan0 speed is unknown, defaulting to 1000 [ 2310.811357][ T1893] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7571'. [ 2311.122657][T14417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2311.140710][ T1885] vhci_hcd: connection closed [ 2311.141105][ T46] vhci_hcd vhci_hcd.1: stop threads [ 2311.146004][ T46] vhci_hcd vhci_hcd.1: release socket [ 2311.148134][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 2311.276911][ T1901] lo speed is unknown, defaulting to 1000 [ 2311.301810][ T1764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2311.312097][T22793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2311.543863][ T1901] vcan0 speed is unknown, defaulting to 1000 [ 2311.557501][T14277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2312.017972][ T1911] Mount JFS Failure: -22 [ 2312.020005][ T1911] jfs_mount failed w/return code = -22 [ 2312.272119][T14417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2312.429541][T10301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2312.444055][ T5980] kernel read not supported for file /dsp (pid: 5980 comm: kworker/1:3) [ 2312.605945][T22793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2312.679463][T25795] usb 40-1: device descriptor read/8, error -110 [ 2312.684850][ T1764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2313.082472][T25795] usb usb40-port1: attempt power cycle [ 2313.251489][ T1915] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2313.253757][ T1915] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2313.257205][ T1915] vhci_hcd vhci_hcd.0: Device attached [ 2313.422452][T25795] usb 40-1: SetAddress Request (100) to port 0 [ 2313.425095][T25795] usb 40-1: new SuperSpeed USB device number 100 using vhci_hcd [ 2313.695828][ T1918] vhci_hcd: connection reset by peer [ 2313.697796][ T12] vhci_hcd vhci_hcd.1: stop threads [ 2313.699702][ T12] vhci_hcd vhci_hcd.1: release socket [ 2313.702198][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 2314.261810][ T1930] lo speed is unknown, defaulting to 1000 [ 2314.264962][ T1930] vcan0 speed is unknown, defaulting to 1000 [ 2314.421738][T24214] usb 46-1: device descriptor read/8, error -110 [ 2314.665329][ T1932] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2314.668039][ T1932] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2314.679171][ T1938] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2314.681530][ T1938] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2314.686927][ T1932] vhci_hcd vhci_hcd.0: Device attached [ 2314.719647][ T1938] vhci_hcd vhci_hcd.0: Device attached [ 2314.911881][T24214] usb 46-1: SetAddress Request (24) to port 0 [ 2314.918739][T24214] usb 46-1: new SuperSpeed USB device number 24 using vhci_hcd [ 2314.999069][T10301] usb 44-1: SetAddress Request (98) to port 0 [ 2315.004129][ T1935] vhci_hcd: connection closed [ 2315.004523][ T46] vhci_hcd vhci_hcd.3: stop threads [ 2315.008833][ T46] vhci_hcd vhci_hcd.3: release socket [ 2315.011171][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 2315.012062][T10301] usb 44-1: new SuperSpeed USB device number 98 using vhci_hcd [ 2315.045035][T10301] usb 44-1: enqueue for inactive port 0 [ 2315.461902][ T1456] net_ratelimit: 18 callbacks suppressed [ 2315.461924][ T1456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2315.482239][T10301] usb usb44-port1: attempt power cycle [ 2315.650008][ T1456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2315.691975][T32657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2315.735816][ T1939] vhci_hcd: connection reset by peer [ 2315.748512][ T1145] vhci_hcd vhci_hcd.4: stop threads [ 2315.750585][ T1145] vhci_hcd vhci_hcd.4: release socket [ 2315.754908][ T1145] vhci_hcd vhci_hcd.4: disconnect device [ 2315.760805][ T1952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7582'. [ 2315.771946][ T1952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7582'. [ 2315.775061][ T1952] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7582'. [ 2315.942700][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2316.067428][ T1145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2316.102968][T10301] usb usb44-port1: unable to enumerate USB device [ 2316.633496][ T1965] lo speed is unknown, defaulting to 1000 [ 2316.640419][ T1965] vcan0 speed is unknown, defaulting to 1000 [ 2316.861688][T22793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2317.030379][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2317.272487][ T106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2317.392803][ T1975] lo speed is unknown, defaulting to 1000 [ 2317.398080][ T1975] vcan0 speed is unknown, defaulting to 1000 [ 2317.494702][ T1981] /dev/nullb0: Can't open blockdev [ 2317.990802][ T1991] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2317.993906][ T1991] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2317.998150][ T1991] vhci_hcd vhci_hcd.0: Device attached [ 2318.026238][ T1991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2318.029031][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2318.491766][T25795] usb 40-1: device descriptor read/8, error -110 [ 2318.560495][ T1992] vhci_hcd: connection closed [ 2318.560960][ T106] vhci_hcd vhci_hcd.4: stop threads [ 2318.581810][ T106] vhci_hcd vhci_hcd.4: release socket [ 2318.584371][ T106] vhci_hcd vhci_hcd.4: disconnect device [ 2318.883052][T25795] usb usb40-port1: unable to enumerate USB device [ 2319.196910][ T1996] kernel read not supported for file /cpuacct.usage_percpu (pid: 1996 comm: syz.5.7592) [ 2319.201375][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 2319.201389][ T40] audit: type=1800 audit(1775776255.499:1746): pid=1996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7592" name="cpuacct.usage_percpu" dev="mqueue" ino=195264 res=0 errno=0 [ 2319.713384][ T2006] lo speed is unknown, defaulting to 1000 [ 2319.716177][ T2006] vcan0 speed is unknown, defaulting to 1000 [ 2319.892511][ T2010] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2319.894891][ T2010] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2320.011676][T24214] usb 46-1: device descriptor read/8, error -110 [ 2320.095888][ T2010] vhci_hcd vhci_hcd.0: Device attached [ 2320.138046][T24214] usb usb46-port1: attempt power cycle [ 2320.331917][ T1814] usb 40-1: SetAddress Request (102) to port 0 [ 2320.334614][ T1814] usb 40-1: new SuperSpeed USB device number 102 using vhci_hcd [ 2320.531749][ T2011] vhci_hcd: connection reset by peer [ 2320.534130][ T46] vhci_hcd vhci_hcd.1: stop threads [ 2320.536540][ T46] vhci_hcd vhci_hcd.1: release socket [ 2320.540604][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 2320.573679][T32657] net_ratelimit: 9 callbacks suppressed [ 2320.573724][T32657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2320.623299][ T2024] program syz.4.7598 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2320.652590][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2320.730208][ T2027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2320.733670][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2320.748058][ T2027] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2320.770539][T24214] usb usb46-port1: unable to enumerate USB device [ 2320.775366][ T2027] team0: Mode changed to "broadcast" [ 2320.972427][ T5947] Bluetooth: hci5: command 0x0406 tx timeout [ 2321.197711][ T2035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2321.201083][ T2035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2321.204892][ T2035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2321.363644][ T2035] lo speed is unknown, defaulting to 1000 [ 2321.413382][ T2035] vcan0 speed is unknown, defaulting to 1000 [ 2321.685363][T32657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2322.045060][T25795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2322.856880][ T2035] Mount JFS Failure: -22 [ 2322.859062][ T2035] jfs_mount failed w/return code = -22 [ 2323.222835][ T2040] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2323.298520][ T2043] IPVS: persistence engine module ip_vs_pe_sir not found [ 2323.412214][ T2054] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7607'. [ 2324.792858][ T2068] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7609'. [ 2325.133060][ T2071] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2325.135204][ T2071] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2325.151970][ T2071] vhci_hcd vhci_hcd.0: Device attached [ 2325.377078][ T1814] usb 40-1: device descriptor read/8, error -110 [ 2325.431759][T25795] usb 44-1: SetAddress Request (102) to port 0 [ 2325.434473][T25795] usb 44-1: new SuperSpeed USB device number 102 using vhci_hcd [ 2325.598188][ T2076] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2325.600620][ T2076] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2325.621845][ T2076] vhci_hcd vhci_hcd.0: Device attached [ 2325.763617][ T1814] usb usb40-port1: attempt power cycle [ 2325.768257][ T2072] vhci_hcd: connection reset by peer [ 2325.772448][ T46] vhci_hcd vhci_hcd.3: stop threads [ 2325.775393][ T46] vhci_hcd vhci_hcd.3: release socket [ 2325.777681][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 2325.782006][ T5980] net_ratelimit: 239 callbacks suppressed [ 2325.782019][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2325.862875][ T2087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2325.866274][ T2087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2325.869196][ T2087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2325.913605][ T2087] lo speed is unknown, defaulting to 1000 [ 2325.918977][ T2087] vcan0 speed is unknown, defaulting to 1000 [ 2325.919486][ T2082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7613'. [ 2326.302850][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2326.502903][ T2091] /dev/nullb0: Can't open blockdev [ 2326.514772][T22793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2326.518643][T22793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2326.593559][ T2077] vhci_hcd: connection closed [ 2326.594102][ T1145] vhci_hcd vhci_hcd.5: stop threads [ 2326.601915][ T1145] vhci_hcd vhci_hcd.5: release socket [ 2326.603712][ T1145] vhci_hcd vhci_hcd.5: disconnect device [ 2326.755897][ T2079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2326.758802][ T2079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2326.863474][T24214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2326.877817][ T2094] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 2326.879880][ T2094] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2326.883177][ T2094] vhci_hcd vhci_hcd.0: Device attached [ 2326.934914][ T2096] vhci_hcd: connection closed [ 2326.936239][ T1148] vhci_hcd vhci_hcd.1: stop threads [ 2326.940163][ T1148] vhci_hcd vhci_hcd.1: release socket [ 2326.942701][ T1148] vhci_hcd vhci_hcd.1: disconnect device [ 2327.112594][ T2099] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 2327.114814][ T2099] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2327.118215][ T2099] vhci_hcd vhci_hcd.0: Device attached [ 2327.361781][ T5980] usb 8-1: new low-speed USB device number 111 using dummy_hcd [ 2327.542948][ T5980] usb 8-1: config 0 has no interfaces? [ 2327.545651][ T5980] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2327.549363][ T5980] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2327.574296][ T5980] usb 8-1: config 0 descriptor?? [ 2327.856566][ T2100] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 12 [ 2327.859617][ T1148] vhci_hcd vhci_hcd.3: stop threads [ 2327.871768][ T1148] vhci_hcd vhci_hcd.3: release socket [ 2327.874898][ T1148] vhci_hcd vhci_hcd.3: disconnect device [ 2327.879123][ T5980] usb 8-1: USB disconnect, device number 111 [ 2328.043519][ T2118] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2328.045965][ T2118] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2328.732545][ T2118] vhci_hcd vhci_hcd.0: Device attached [ 2328.801738][ T5980] usb 40-1: SetAddress Request (105) to port 0 [ 2328.804819][ T5980] usb 40-1: new SuperSpeed USB device number 105 using vhci_hcd [ 2328.841522][ T2132] FAULT_INJECTION: forcing a failure. [ 2328.841522][ T2132] name failslab, interval 1, probability 0, space 0, times 0 [ 2328.847099][ T2132] CPU: 1 UID: 0 PID: 2132 Comm: syz.5.7621 Tainted: G L syzkaller #0 PREEMPT(full) [ 2328.847129][ T2132] Tainted: [L]=SOFTLOCKUP [ 2328.847136][ T2132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2328.847147][ T2132] Call Trace: [ 2328.847154][ T2132] [ 2328.847162][ T2132] dump_stack_lvl+0x100/0x190 [ 2328.847211][ T2132] should_fail_ex.cold+0x5/0xa [ 2328.847236][ T2132] should_failslab+0xc2/0x120 [ 2328.847259][ T2132] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 2328.847286][ T2132] ? dst_alloc+0x99/0x1a0 [ 2328.847319][ T2132] dst_alloc+0x99/0x1a0 [ 2328.847344][ T2132] rt_dst_alloc+0x35/0x3a0 [ 2328.847365][ T2132] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 2328.847398][ T2132] ip_route_output_key_hash+0x118/0x2b0 [ 2328.847423][ T2132] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 2328.847445][ T2132] ? __pfx_tomoyo_audit_inet_log+0x10/0x10 [ 2328.847471][ T2132] ? aa_label_sk_perm+0x194/0x5f0 [ 2328.847503][ T2132] tcp_v4_connect+0x86b/0x1b40 [ 2328.847535][ T2132] ? __pfx_tcp_v4_connect+0x10/0x10 [ 2328.847557][ T2132] ? __lock_acquire+0x4a5/0x2630 [ 2328.847581][ T2132] ? __lock_acquire+0x4a5/0x2630 [ 2328.847606][ T2132] __inet_stream_connect+0x208/0xfa0 [ 2328.847635][ T2132] ? __pfx___inet_stream_connect+0x10/0x10 [ 2328.847657][ T2132] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2328.847685][ T2132] ? __pfx_inet_stream_connect+0x10/0x10 [ 2328.847707][ T2132] ? __local_bh_enable_ip+0x9e/0x120 [ 2328.847732][ T2132] ? __pfx_inet_stream_connect+0x10/0x10 [ 2328.847754][ T2132] inet_stream_connect+0x57/0xa0 [ 2328.847777][ T2132] __sys_connect_file+0x141/0x1a0 [ 2328.847806][ T2132] __sys_connect+0x141/0x170 [ 2328.847832][ T2132] ? __pfx___sys_connect+0x10/0x10 [ 2328.847867][ T2132] ? ksys_write+0x1ac/0x250 [ 2328.847885][ T2132] ? __pfx_ksys_write+0x10/0x10 [ 2328.847907][ T2132] __ia32_sys_connect+0x71/0xb0 [ 2328.847931][ T2132] ? lockdep_hardirqs_on+0x78/0x100 [ 2328.847952][ T2132] __do_fast_syscall_32+0xe3/0x8c0 [ 2328.847973][ T2132] do_fast_syscall_32+0x32/0x70 [ 2328.847992][ T2132] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2328.848016][ T2132] RIP: 0023:0xf70aef6c [ 2328.848033][ T2132] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2328.848051][ T2132] RSP: 002b:00000000f545b50c EFLAGS: 00000292 ORIG_RAX: 000000000000016a [ 2328.848070][ T2132] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000180 [ 2328.848081][ T2132] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 2328.848090][ T2132] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2328.848100][ T2132] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2328.848111][ T2132] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2328.848136][ T2132] [ 2329.208612][ T2119] vhci_hcd: connection reset by peer [ 2329.223292][ T46] vhci_hcd vhci_hcd.1: stop threads [ 2329.225163][ T46] vhci_hcd vhci_hcd.1: release socket [ 2329.227081][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 2329.736983][ T2136] lo speed is unknown, defaulting to 1000 [ 2329.740739][ T2136] vcan0 speed is unknown, defaulting to 1000 [ 2330.173016][ T2141] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2330.175203][ T2141] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2330.177866][ T2141] vhci_hcd vhci_hcd.0: Device attached [ 2330.490016][ T2147] lo speed is unknown, defaulting to 1000 [ 2330.494989][ T2147] vcan0 speed is unknown, defaulting to 1000 [ 2331.042062][ T2142] vhci_hcd: connection closed [ 2331.105878][ T2147] Mount JFS Failure: -22 [ 2331.108970][ T2147] jfs_mount failed w/return code = -22 [ 2331.131998][ T1814] net_ratelimit: 261 callbacks suppressed [ 2331.132024][ T1814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2331.138765][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2331.341729][T25795] usb 44-1: device descriptor read/8, error -110 [ 2331.342140][T32657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2331.349828][ T2154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2331.365320][T14417] vhci_hcd vhci_hcd.1: stop threads [ 2331.370883][T14417] vhci_hcd vhci_hcd.1: release socket [ 2331.375026][T14417] vhci_hcd vhci_hcd.1: disconnect device [ 2331.406974][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2331.410987][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2331.542113][ T1456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2331.622174][ T1814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2331.918173][ T972] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 2332.071780][ T972] usb 6-1: Using ep0 maxpacket: 32 [ 2332.074933][ T2165] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2332.077838][ T2165] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2332.081311][ T2165] vhci_hcd vhci_hcd.0: Device attached [ 2332.123210][ T972] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 2332.126318][ T972] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2332.129175][ T972] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2332.141909][T24875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2332.145995][ T972] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 2332.171831][T25795] usb 44-1: SetAddress Request (103) to port 0 [ 2332.174059][T25795] usb 44-1: new SuperSpeed USB device number 103 using vhci_hcd [ 2332.181781][ T972] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2332.185560][ T972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2332.190355][T28313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2332.194973][ T972] usb 6-1: config 0 descriptor?? [ 2332.216588][ T2168] vhci_hcd: connection reset by peer [ 2332.218991][ T46] vhci_hcd vhci_hcd.3: stop threads [ 2332.221024][ T46] vhci_hcd vhci_hcd.3: release socket [ 2332.223835][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 2332.422126][T32657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2332.444692][T10301] usb 6-1: USB disconnect, device number 127 [ 2332.849409][ T2178] FAULT_INJECTION: forcing a failure. [ 2332.849409][ T2178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2332.853410][ T2180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7633'. [ 2332.854072][ T2178] CPU: 0 UID: 0 PID: 2178 Comm: syz.3.7632 Tainted: G L syzkaller #0 PREEMPT(full) [ 2332.854093][ T2178] Tainted: [L]=SOFTLOCKUP [ 2332.854098][ T2178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2332.854105][ T2178] Call Trace: [ 2332.854111][ T2178] [ 2332.854116][ T2178] dump_stack_lvl+0x100/0x190 [ 2332.854142][ T2178] should_fail_ex.cold+0x5/0xa [ 2332.854157][ T2178] _copy_from_user+0x2e/0xd0 [ 2332.854176][ T2178] move_addr_to_kernel+0x65/0x170 [ 2332.854194][ T2178] __sys_sendto+0x1c9/0x4b0 [ 2332.854214][ T2178] ? __pfx___sys_sendto+0x10/0x10 [ 2332.854243][ T2178] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2332.854265][ T2178] ? fput+0x79/0x100 [ 2332.854283][ T2178] ? ksys_write+0x1ac/0x250 [ 2332.854297][ T2178] __ia32_sys_sendto+0xdd/0x1b0 [ 2332.854316][ T2178] ? __do_fast_syscall_32+0x94/0x8c0 [ 2332.854331][ T2178] ? lockdep_hardirqs_on+0x78/0x100 [ 2332.854345][ T2178] __do_fast_syscall_32+0xe3/0x8c0 [ 2332.854361][ T2178] do_fast_syscall_32+0x32/0x70 [ 2332.854375][ T2178] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2332.854391][ T2178] RIP: 0023:0xf707ef6c [ 2332.854402][ T2178] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2332.854414][ T2178] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 2332.854426][ T2178] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 2332.854434][ T2178] RDX: 0000000000000000 RSI: 000000002000073d RDI: 0000000080e68000 [ 2332.854441][ T2178] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 2332.854448][ T2178] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2332.854455][ T2178] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2332.854470][ T2178] [ 2333.058031][ T2191] FAULT_INJECTION: forcing a failure. [ 2333.058031][ T2191] name failslab, interval 1, probability 0, space 0, times 0 [ 2333.062051][ T2191] CPU: 0 UID: 0 PID: 2191 Comm: syz.1.7637 Tainted: G L syzkaller #0 PREEMPT(full) [ 2333.062071][ T2191] Tainted: [L]=SOFTLOCKUP [ 2333.062075][ T2191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2333.062082][ T2191] Call Trace: [ 2333.062087][ T2191] [ 2333.062092][ T2191] dump_stack_lvl+0x100/0x190 [ 2333.062115][ T2191] should_fail_ex.cold+0x5/0xa [ 2333.062130][ T2191] should_failslab+0xc2/0x120 [ 2333.062148][ T2191] __kmalloc_cache_node_noprof+0x7d/0x770 [ 2333.062160][ T2191] ? __get_vm_area_node+0x101/0x330 [ 2333.062176][ T2191] __get_vm_area_node+0x101/0x330 [ 2333.062192][ T2191] __vmalloc_node_range_noprof+0x213/0x1530 [ 2333.062207][ T2191] ? ip_set_sockfn_get+0x18e/0xd20 [ 2333.062226][ T2191] ? lock_acquire+0x1cf/0x380 [ 2333.062242][ T2191] ? ip_set_sockfn_get+0x18e/0xd20 [ 2333.062263][ T2191] ? __lock_acquire+0x4a5/0x2630 [ 2333.062279][ T2191] ? __mutex_lock+0x26a/0x1b90 [ 2333.062292][ T2191] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2333.062307][ T2191] ? find_held_lock+0x2b/0x80 [ 2333.062321][ T2191] ? rcu_is_watching+0x12/0xc0 [ 2333.062341][ T2191] ? ip_set_sockfn_get+0x18e/0xd20 [ 2333.062356][ T2191] __vmalloc_node_noprof+0xad/0xf0 [ 2333.062371][ T2191] ? ip_set_sockfn_get+0x18e/0xd20 [ 2333.062389][ T2191] ip_set_sockfn_get+0x18e/0xd20 [ 2333.062407][ T2191] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 2333.062425][ T2191] ? nf_sockopt_find.isra.0+0x222/0x290 [ 2333.062441][ T2191] nf_getsockopt+0x7c/0xe0 [ 2333.062455][ T2191] ip_getsockopt+0x192/0x1e0 [ 2333.062471][ T2191] ? __pfx_ip_getsockopt+0x10/0x10 [ 2333.062485][ T2191] ? find_held_lock+0x2b/0x80 [ 2333.062500][ T2191] raw_getsockopt+0x4d/0x1f0 [ 2333.062515][ T2191] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 2333.062528][ T2191] do_sock_getsockopt+0x259/0x3d0 [ 2333.062543][ T2191] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2333.062564][ T2191] __sys_getsockopt+0x133/0x1d0 [ 2333.062583][ T2191] ? ksys_write+0x1ac/0x250 [ 2333.062596][ T2191] ? __ia32_sys_getsockopt+0xbc/0x160 [ 2333.062606][ T2191] __ia32_sys_getsockopt+0xbc/0x160 [ 2333.062616][ T2191] ? __do_fast_syscall_32+0x94/0x8c0 [ 2333.062629][ T2191] ? lockdep_hardirqs_on+0x78/0x100 [ 2333.062641][ T2191] __do_fast_syscall_32+0xe3/0x8c0 [ 2333.062655][ T2191] do_fast_syscall_32+0x32/0x70 [ 2333.062668][ T2191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2333.062683][ T2191] RIP: 0023:0xf7fa7f6c [ 2333.062694][ T2191] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2333.062705][ T2191] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 2333.062717][ T2191] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 2333.062723][ T2191] RDX: 0000000000000053 RSI: 0000000080000000 RDI: 0000000080000040 [ 2333.062730][ T2191] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2333.062736][ T2191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2333.062742][ T2191] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2333.062756][ T2191] [ 2333.062934][ T2191] syz.1.7637: vmalloc error: size 40, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2333.173681][ T2191] CPU: 0 UID: 0 PID: 2191 Comm: syz.1.7637 Tainted: G L syzkaller #0 PREEMPT(full) [ 2333.173701][ T2191] Tainted: [L]=SOFTLOCKUP [ 2333.173705][ T2191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2333.173724][ T2191] Call Trace: [ 2333.173730][ T2191] [ 2333.173735][ T2191] dump_stack_lvl+0x100/0x190 [ 2333.173757][ T2191] warn_alloc.cold+0x95/0x1c1 [ 2333.173778][ T2191] ? __pfx_warn_alloc+0x10/0x10 [ 2333.173795][ T2191] ? trace_kmalloc+0x101/0x130 [ 2333.173809][ T2191] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 2333.173822][ T2191] ? __kasan_kmalloc+0x8a/0xb0 [ 2333.173833][ T2191] ? __get_vm_area_node+0x208/0x330 [ 2333.173850][ T2191] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 2333.173867][ T2191] ? lock_acquire+0x1cf/0x380 [ 2333.173883][ T2191] ? ip_set_sockfn_get+0x18e/0xd20 [ 2333.173901][ T2191] ? __lock_acquire+0x4a5/0x2630 [ 2333.173917][ T2191] ? __mutex_lock+0x26a/0x1b90 [ 2333.173931][ T2191] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2333.173946][ T2191] ? find_held_lock+0x2b/0x80 [ 2333.173964][ T2191] ? rcu_is_watching+0x12/0xc0 [ 2333.173984][ T2191] ? ip_set_sockfn_get+0x18e/0xd20 [ 2333.174000][ T2191] __vmalloc_node_noprof+0xad/0xf0 [ 2333.174015][ T2191] ? ip_set_sockfn_get+0x18e/0xd20 [ 2333.174033][ T2191] ip_set_sockfn_get+0x18e/0xd20 [ 2333.174050][ T2191] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 2333.174068][ T2191] ? nf_sockopt_find.isra.0+0x222/0x290 [ 2333.174084][ T2191] nf_getsockopt+0x7c/0xe0 [ 2333.174099][ T2191] ip_getsockopt+0x192/0x1e0 [ 2333.174115][ T2191] ? __pfx_ip_getsockopt+0x10/0x10 [ 2333.174128][ T2191] ? find_held_lock+0x2b/0x80 [ 2333.174144][ T2191] raw_getsockopt+0x4d/0x1f0 [ 2333.174159][ T2191] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 2333.174172][ T2191] do_sock_getsockopt+0x259/0x3d0 [ 2333.174187][ T2191] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2333.174208][ T2191] __sys_getsockopt+0x133/0x1d0 [ 2333.174227][ T2191] ? ksys_write+0x1ac/0x250 [ 2333.174240][ T2191] ? __ia32_sys_getsockopt+0xbc/0x160 [ 2333.174250][ T2191] __ia32_sys_getsockopt+0xbc/0x160 [ 2333.174260][ T2191] ? __do_fast_syscall_32+0x94/0x8c0 [ 2333.174273][ T2191] ? lockdep_hardirqs_on+0x78/0x100 [ 2333.174285][ T2191] __do_fast_syscall_32+0xe3/0x8c0 [ 2333.174300][ T2191] do_fast_syscall_32+0x32/0x70 [ 2333.174314][ T2191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2333.174328][ T2191] RIP: 0023:0xf7fa7f6c [ 2333.174338][ T2191] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2333.174349][ T2191] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 2333.174361][ T2191] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 2333.174368][ T2191] RDX: 0000000000000053 RSI: 0000000080000000 RDI: 0000000080000040 [ 2333.174375][ T2191] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2333.174381][ T2191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2333.174388][ T2191] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2333.174402][ T2191] [ 2333.174421][ T2191] Mem-Info: [ 2333.230534][ T2196] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 2333.232717][ T2189] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2333.234306][ T2196] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2333.236079][ T2189] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2333.237735][ T2188] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6) [ 2333.239260][ T2191] active_anon:6749 inactive_anon:707 isolated_anon:0 [ 2333.239260][ T2191] active_file:5030 inactive_file:10047 isolated_file:0 [ 2333.239260][ T2191] unevictable:1768 dirty:306 writeback:32 [ 2333.239260][ T2191] slab_reclaimable:7605 slab_unreclaimable:81407 [ 2333.239260][ T2191] mapped:33597 shmem:7510 pagetables:1317 [ 2333.239260][ T2191] sec_pagetables:393 bounce:0 [ 2333.239260][ T2191] kernel_misc_reclaimable:0 [ 2333.239260][ T2191] free:33563 free_pcp:8634 free_cma:0 [ 2333.241168][ T2188] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2333.242764][ T2196] vhci_hcd vhci_hcd.0: Device attached [ 2333.242839][ T2188] vhci_hcd vhci_hcd.0: Device attached [ 2333.243400][ T2189] vhci_hcd vhci_hcd.0: Device attached [ 2333.316201][ T2191] Node 0 active_anon:164kB inactive_anon:16kB active_file:3104kB inactive_file:7788kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:1276kB dirty:12kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7200kB pagetables:1232kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB [ 2333.316236][ T2191] Node 1 active_anon:26832kB inactive_anon:2812kB active_file:17016kB inactive_file:33656kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:137212kB dirty:1228kB writeback:0kB shmem:26504kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9792kB pagetables:4036kB sec_pagetables:432kB all_unreclaimable? no Balloon:0kB [ 2333.316263][ T2191] Node 0 DMA free:2492kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:308kB inactive_file:292kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2333.316296][ T2191] lowmem_reserve[]: 0 285 285 285 285 [ 2333.316318][ T2191] Node 0 DMA32 free:27348kB boost:29392kB min:42460kB low:45724kB high:48988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:160kB inactive_anon:16kB active_file:2796kB inactive_file:7496kB unevictable:3536kB writepending:12kB zspages:464kB present:1032196kB managed:292456kB mlocked:0kB bounce:0kB free_pcp:104kB local_pcp:4kB free_cma:0kB [ 2333.316350][ T2191] lowmem_reserve[]: 0 0 0 0 0 [ 2333.316371][ T2191] Node 1 DMA32 free:103100kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26832kB inactive_anon:2812kB active_file:17016kB inactive_file:33656kB unevictable:3536kB writepending:1228kB zspages:5496kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:34108kB local_pcp:18280kB free_cma:0kB [ 2333.316403][ T2191] lowmem_reserve[]: 0 0 0 0 0 [ 2333.316424][ T2191] Node 0 DMA: 99*4kB (UE) 18*8kB (UE) 6*16kB (U) 10*32kB (U) 6*64kB (U) 1*128kB (E) 2*256kB (E) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 2492kB [ 2333.316508][ T2191] Node 0 DMA32: 1271*4kB (UME) 479*8kB (UME) 202*16kB (UME) 201*32kB (UME) 53*64kB (UME) 22*128kB (UME) 8*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 27348kB [ 2333.316593][ T2191] Node 1 DMA32: 585*4kB (U) 2873*8kB (UE) 4217*16kB (U) 112*32kB (UE) 65*64kB (UE) 5*128kB (U) 7*256kB (UE) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 102972kB [ 2333.316703][ T2191] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2333.316713][ T2191] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2333.316722][ T2191] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2333.316731][ T2191] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2333.316740][ T2191] 24096 total pagecache pages [ 2333.316745][ T2191] 1114 pages in swap cache [ 2333.316749][ T2191] Free swap = 98764kB [ 2333.316754][ T2191] Total swap = 124996kB [ 2333.316758][ T2191] 524155 pages RAM [ 2333.316762][ T2191] 0 pages HighMem/MovableOnly [ 2333.316766][ T2191] 210148 pages reserved [ 2333.316770][ T2191] 0 pages cma reserved [ 2333.363455][ T2207] FAULT_INJECTION: forcing a failure. [ 2333.363455][ T2207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2333.363487][ T2207] CPU: 0 UID: 0 PID: 2207 Comm: syz.4.7639 Tainted: G L syzkaller #0 PREEMPT(full) [ 2333.363508][ T2207] Tainted: [L]=SOFTLOCKUP [ 2333.363513][ T2207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2333.363523][ T2207] Call Trace: [ 2333.363529][ T2207] [ 2333.363536][ T2207] dump_stack_lvl+0x100/0x190 [ 2333.363567][ T2207] should_fail_ex.cold+0x5/0xa [ 2333.363581][ T2207] _copy_from_user+0x2e/0xd0 [ 2333.363598][ T2207] get_compat_msghdr+0xb3/0x4b0 [ 2333.363617][ T2207] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2333.363636][ T2207] ? ___sys_recvmsg+0x177/0x1a0 [ 2333.363651][ T2207] ? kfree+0x2ec/0x6b0 [ 2333.363669][ T2207] ___sys_recvmsg+0x193/0x1a0 [ 2333.363684][ T2207] ? __pfx____sys_recvmsg+0x10/0x10 [ 2333.363701][ T2207] ? find_held_lock+0x2b/0x80 [ 2333.363717][ T2207] ? __pfx___might_resched+0x10/0x10 [ 2333.363737][ T2207] do_recvmmsg+0x563/0x760 [ 2333.363755][ T2207] ? __pfx_do_recvmmsg+0x10/0x10 [ 2333.363771][ T2207] ? ksys_write+0x190/0x250 [ 2333.363782][ T2207] ? ksys_write+0x190/0x250 [ 2333.363798][ T2207] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2333.363815][ T2207] __sys_recvmmsg+0x21f/0x270 [ 2333.363828][ T2207] ? __pfx___sys_recvmmsg+0x10/0x10 [ 2333.363840][ T2207] ? ksys_write+0x1ac/0x250 [ 2333.363853][ T2207] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 2333.363865][ T2207] ? __do_fast_syscall_32+0x94/0x8c0 [ 2333.363892][ T2207] ? lockdep_hardirqs_on+0x78/0x100 [ 2333.363927][ T2207] __do_fast_syscall_32+0xe3/0x8c0 [ 2333.363943][ T2207] do_fast_syscall_32+0x32/0x70 [ 2333.363956][ T2207] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2333.363970][ T2207] RIP: 0023:0xf70aef6c [ 2333.363980][ T2207] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2333.363991][ T2207] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 2333.364003][ T2207] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000fc0 [ 2333.364015][ T2207] RDX: 0000000000000002 RSI: 0000000000010120 RDI: 0000000000000000 [ 2333.364021][ T2207] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2333.364028][ T2207] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2333.364034][ T2207] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2333.364052][ T2207] [ 2333.418917][ T2209] netlink: 'syz.1.7640': attribute type 5 has an invalid length. [ 2333.511852][T22793] usb 48-1: SetAddress Request (35) to port 0 [ 2333.607247][ T2198] vhci_hcd: connection closed [ 2333.607484][ T13] vhci_hcd vhci_hcd.5: stop threads [ 2333.611357][ T13] vhci_hcd vhci_hcd.5: release socket [ 2333.613593][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 2333.642871][T22793] usb 48-1: new SuperSpeed USB device number 35 using vhci_hcd [ 2333.651751][ T2197] vhci_hcd: connection closed [ 2333.662909][T14417] vhci_hcd vhci_hcd.5: stop threads [ 2333.667079][T14417] vhci_hcd vhci_hcd.5: release socket [ 2333.672357][T14417] vhci_hcd vhci_hcd.5: disconnect device [ 2333.793352][ T2192] vhci_hcd: connection closed [ 2333.793702][ T46] vhci_hcd vhci_hcd.3: stop threads [ 2333.797385][ T46] vhci_hcd vhci_hcd.3: release socket [ 2333.799218][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 2333.871785][ T5980] usb 40-1: device descriptor read/8, error -110 [ 2333.959283][ T2231] tmpfs: Unknown parameter 'grpqudlimit' [ 2334.332609][ T5980] usb usb40-port1: attempt power cycle [ 2335.011104][ T2243] FAULT_INJECTION: forcing a failure. [ 2335.011104][ T2243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2335.016424][ T2243] CPU: 3 UID: 0 PID: 2243 Comm: syz.1.7650 Tainted: G L syzkaller #0 PREEMPT(full) [ 2335.016451][ T2243] Tainted: [L]=SOFTLOCKUP [ 2335.016455][ T2243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2335.016463][ T2243] Call Trace: [ 2335.016468][ T2243] [ 2335.016473][ T2243] dump_stack_lvl+0x100/0x190 [ 2335.016496][ T2243] should_fail_ex.cold+0x5/0xa [ 2335.016511][ T2243] strncpy_from_user+0x3b/0x2d0 [ 2335.016528][ T2243] do_getname+0x78/0x390 [ 2335.016546][ T2243] do_sys_openat2+0xc5/0x1e0 [ 2335.016562][ T2243] ? __pfx_do_sys_openat2+0x10/0x10 [ 2335.016577][ T2243] ? __fget_files+0x215/0x3d0 [ 2335.016591][ T2243] ? __fget_files+0x21f/0x3d0 [ 2335.016604][ T2243] __ia32_compat_sys_openat+0x12d/0x210 [ 2335.016658][ T2243] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 2335.016678][ T2243] ? __pfx_ksys_write+0x10/0x10 [ 2335.016693][ T2243] __do_fast_syscall_32+0xe3/0x8c0 [ 2335.016709][ T2243] do_fast_syscall_32+0x32/0x70 [ 2335.016722][ T2243] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2335.016737][ T2243] RIP: 0023:0xf7fa7f6c [ 2335.016747][ T2243] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2335.016758][ T2243] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 2335.016770][ T2243] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080004280 [ 2335.016778][ T2243] RDX: 0000000000000000 RSI: 000000000000002c RDI: 0000000000000000 [ 2335.016784][ T2243] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2335.016804][ T2243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2335.016811][ T2243] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2335.016824][ T2243] [ 2335.104477][ T5980] usb usb40-port1: unable to enumerate USB device [ 2335.927124][ T2267] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2335.929793][ T2267] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2335.933867][ T2267] vhci_hcd vhci_hcd.0: Device attached [ 2336.221683][ T951] usb 46-1: SetAddress Request (27) to port 0 [ 2336.223986][ T951] usb 46-1: new SuperSpeed USB device number 27 using vhci_hcd [ 2336.662305][T14417] net_ratelimit: 16 callbacks suppressed [ 2336.662326][T14417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2336.899576][ T1764] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2336.960249][ T2268] vhci_hcd: connection reset by peer [ 2336.962199][T14417] vhci_hcd vhci_hcd.4: stop threads [ 2336.964519][T14417] vhci_hcd vhci_hcd.4: release socket [ 2336.967345][T14417] vhci_hcd vhci_hcd.4: disconnect device [ 2337.032906][T28313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2337.033595][T23272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2337.061806][ T1764] usb 6-1: Using ep0 maxpacket: 8 [ 2337.065893][ T1764] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2337.069173][ T1764] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2337.074514][ T1764] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2337.080003][ T1764] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2337.085583][ T1764] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2337.091494][ T1764] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2337.095037][ T1764] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2337.344134][T10301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2337.431147][T25795] usb 44-1: device descriptor read/8, error -110 [ 2337.435331][ T1814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2337.438387][ T1764] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2337.442807][ T1764] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2337.446522][ T1764] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2337.452303][ T1764] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2337.455600][ T1764] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2337.460914][ T1764] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2337.465791][ T1764] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2337.470343][ T1764] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2337.478555][ T1764] usb 6-1: string descriptor 0 read error: -22 [ 2337.486886][ T1764] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2337.490653][ T1764] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2337.512066][ T1764] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2337.532275][ T2281] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2337.535046][ T2281] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2337.538634][ T2281] vhci_hcd vhci_hcd.0: Device attached [ 2337.551989][T25795] usb usb44-port1: attempt power cycle [ 2337.588442][ T2282] vhci_hcd: connection reset by peer [ 2337.592188][ T46] vhci_hcd vhci_hcd.5: stop threads [ 2337.594447][ T46] vhci_hcd vhci_hcd.5: release socket [ 2337.597080][ T46] vhci_hcd vhci_hcd.5: disconnect device [ 2337.641775][T24214] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 2337.714838][T10301] usb 6-1: USB disconnect, device number 2 [ 2337.772021][T14417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2337.843683][ T2287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7662'. [ 2337.847664][ T2287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7662'. [ 2337.898426][ T2291] tipc: Enabled bearer , priority 0 [ 2337.904949][ T2291] syzkaller0: entered promiscuous mode [ 2337.906920][ T2291] syzkaller0: entered allmulticast mode [ 2337.914391][ T2291] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2337.937451][ T2291] tipc: Resetting bearer [ 2338.040402][ T2255] adutux: No device or device unplugged -19 [ 2338.050637][ T2255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7654'. [ 2338.057730][ T2294] tipc: Enabling of bearer rejected, already enabled [ 2338.065211][ T2294] wg1: entered promiscuous mode [ 2338.066871][ T2294] wg1: entered allmulticast mode [ 2338.070679][ T2255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7654'. [ 2338.074688][ T2294] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 2338.092102][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2338.105043][T23272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2338.133918][ T2296] syzkaller0: entered promiscuous mode [ 2338.136746][ T2296] syzkaller0: entered allmulticast mode [ 2338.155901][ T2299] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7666'. [ 2338.733403][T22793] usb 48-1: device descriptor read/8, error -110 [ 2338.891987][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2338.939766][ T2310] lo speed is unknown, defaulting to 1000 [ 2338.963713][ T2310] vcan0 speed is unknown, defaulting to 1000 [ 2339.122691][T22793] usb usb48-port1: attempt power cycle [ 2339.131923][ T5304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2339.294167][ T1814] tipc: Node number set to 4060594913 [ 2339.684741][T22793] usb usb48-port1: unable to enumerate USB device [ 2339.864332][ T2319] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2339.866765][ T2319] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2339.869455][ T2319] vhci_hcd vhci_hcd.0: Device attached [ 2339.935025][ T2321] vhci_hcd: connection closed [ 2339.935420][ T46] vhci_hcd vhci_hcd.4: stop threads [ 2339.938585][ T46] vhci_hcd vhci_hcd.4: release socket [ 2339.940395][ T46] vhci_hcd vhci_hcd.4: disconnect device [ 2339.942867][T25795] usb usb44-port1: unable to enumerate USB device [ 2340.046163][ T2325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7672'. [ 2340.051679][ T2325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7672'. [ 2340.311974][ T2330] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2340.314628][ T2330] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2340.321779][ T2330] vhci_hcd vhci_hcd.0: Device attached [ 2340.554781][ T2338] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2340.557066][ T2338] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2340.560991][ T2338] vhci_hcd vhci_hcd.0: Device attached [ 2340.611811][ T5980] usb 44-1: SetAddress Request (106) to port 0 [ 2340.614728][ T5980] usb 44-1: new SuperSpeed USB device number 106 using vhci_hcd [ 2340.796636][ T2347] syzkaller0: entered promiscuous mode [ 2340.802823][ T2347] FAULT_INJECTION: forcing a failure. [ 2340.802823][ T2347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2340.809341][ T2347] CPU: 3 UID: 0 PID: 2347 Comm: syz.5.7679 Tainted: G L syzkaller #0 PREEMPT(full) [ 2340.809370][ T2347] Tainted: [L]=SOFTLOCKUP [ 2340.809377][ T2347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2340.809388][ T2347] Call Trace: [ 2340.809396][ T2347] [ 2340.809406][ T2347] dump_stack_lvl+0x100/0x190 [ 2340.809441][ T2347] should_fail_ex.cold+0x5/0xa [ 2340.809465][ T2347] _copy_from_user+0x2e/0xd0 [ 2340.809491][ T2347] move_addr_to_kernel+0x65/0x170 [ 2340.809516][ T2347] get_compat_msghdr+0x3ee/0x4b0 [ 2340.809545][ T2347] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2340.809579][ T2347] ___sys_sendmsg+0x1b6/0x1e0 [ 2340.809602][ T2347] ? __pfx____sys_sendmsg+0x10/0x10 [ 2340.809651][ T2347] __sys_sendmsg+0x170/0x220 [ 2340.809669][ T2347] ? __pfx___sys_sendmsg+0x10/0x10 [ 2340.809692][ T2347] ? __pfx_ksys_write+0x10/0x10 [ 2340.809716][ T2347] __do_fast_syscall_32+0xe3/0x8c0 [ 2340.809742][ T2347] do_fast_syscall_32+0x32/0x70 [ 2340.809763][ T2347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2340.809788][ T2347] RIP: 0023:0xf70aef6c [ 2340.809805][ T2347] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2340.809821][ T2347] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2340.809841][ T2347] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000280 [ 2340.809852][ T2347] RDX: 0000000001eb085f RSI: 0000000000000000 RDI: 0000000000000000 [ 2340.809863][ T2347] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2340.809873][ T2347] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2340.809884][ T2347] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2340.809908][ T2347] [ 2340.925687][ T2344] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2340.927784][ T2344] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2340.930313][ T2344] vhci_hcd vhci_hcd.0: Device attached [ 2340.949900][ T2348] vhci_hcd: connection closed [ 2340.950223][T24875] vhci_hcd vhci_hcd.4: stop threads [ 2340.959327][T24875] vhci_hcd vhci_hcd.4: release socket [ 2340.969432][T24875] vhci_hcd vhci_hcd.4: disconnect device [ 2340.971936][T24214] usb 40-1: SetAddress Request (109) to port 0 [ 2340.974339][T24214] usb 40-1: new SuperSpeed USB device number 109 using vhci_hcd [ 2340.987151][ T2333] vhci_hcd: connection reset by peer [ 2340.991275][T24875] vhci_hcd vhci_hcd.3: stop threads [ 2340.995635][T24875] vhci_hcd vhci_hcd.3: release socket [ 2340.998059][T24875] vhci_hcd vhci_hcd.3: disconnect device [ 2341.186872][ T2339] vhci_hcd: connection reset by peer [ 2341.189537][ T46] vhci_hcd vhci_hcd.1: stop threads [ 2341.193723][ T46] vhci_hcd vhci_hcd.1: release socket [ 2341.197688][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 2341.231967][ T1814] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 2341.291887][ T951] usb 46-1: device descriptor read/8, error -110 [ 2341.411851][ T1814] usb 10-1: Using ep0 maxpacket: 8 [ 2341.416041][ T1814] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2341.419675][ T1814] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2341.423556][ T1814] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2341.427024][ T1814] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2341.429972][ T1814] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2341.434241][ T1814] usb 10-1: config 0 descriptor?? [ 2341.597740][ T2353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7681'. [ 2341.707669][ T951] usb usb46-port1: attempt power cycle [ 2341.818381][ T2360] lo speed is unknown, defaulting to 1000 [ 2341.823081][ T2360] vcan0 speed is unknown, defaulting to 1000 [ 2341.878017][ T2361] lo speed is unknown, defaulting to 1000 [ 2341.946205][ T1814] mcp2221 0003:04D8:00DD.0029: unknown main item tag 0x0 [ 2341.949907][ T1814] mcp2221 0003:04D8:00DD.0029: unknown main item tag 0x0 [ 2341.953318][ T1814] mcp2221 0003:04D8:00DD.0029: unknown main item tag 0x0 [ 2341.958610][ T1814] mcp2221 0003:04D8:00DD.0029: unknown main item tag 0x0 [ 2341.961051][ T1814] mcp2221 0003:04D8:00DD.0029: unknown main item tag 0x0 [ 2341.963839][ T1814] mcp2221 0003:04D8:00DD.0029: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 2342.205155][T10301] usb 10-1: USB disconnect, device number 4 [ 2342.209349][ T2367] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2342.212325][ T2367] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2342.216516][ T2367] vhci_hcd vhci_hcd.0: Device attached [ 2342.267987][ T2369] vhci_hcd: connection closed [ 2342.268238][ T13] vhci_hcd vhci_hcd.1: stop threads [ 2342.274819][ T13] vhci_hcd vhci_hcd.1: release socket [ 2342.277243][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 2342.333078][ T972] net_ratelimit: 14 callbacks suppressed [ 2342.333102][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2342.342205][T23272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2342.381833][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2342.382355][ T951] usb usb46-port1: unable to enumerate USB device [ 2342.439206][ T2361] vcan0 speed is unknown, defaulting to 1000 [ 2342.710883][ T2374] FAULT_INJECTION: forcing a failure. [ 2342.710883][ T2374] name failslab, interval 1, probability 0, space 0, times 0 [ 2342.716968][ T2374] CPU: 0 UID: 0 PID: 2374 Comm: syz.4.7686 Tainted: G L syzkaller #0 PREEMPT(full) [ 2342.717004][ T2374] Tainted: [L]=SOFTLOCKUP [ 2342.717011][ T2374] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2342.717024][ T2374] Call Trace: [ 2342.717033][ T2374] [ 2342.717044][ T2374] dump_stack_lvl+0x100/0x190 [ 2342.717084][ T2374] should_fail_ex.cold+0x5/0xa [ 2342.717110][ T2374] ? tomoyo_encode2+0xfb/0x3c0 [ 2342.717140][ T2374] should_failslab+0xc2/0x120 [ 2342.717164][ T2374] __kmalloc_noprof+0xe0/0x850 [ 2342.717210][ T2374] tomoyo_encode2+0xfb/0x3c0 [ 2342.717245][ T2374] tomoyo_encode+0x29/0x50 [ 2342.717272][ T2374] tomoyo_realpath_from_path+0x18c/0x690 [ 2342.717310][ T2374] tomoyo_path_number_perm+0x23c/0x580 [ 2342.717335][ T2374] ? tomoyo_path_number_perm+0x22e/0x580 [ 2342.717363][ T2374] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2342.717418][ T2374] ? find_held_lock+0x2b/0x80 [ 2342.717439][ T2374] ? hook_file_ioctl_common+0x146/0x410 [ 2342.717464][ T2374] ? __fget_files+0x215/0x3d0 [ 2342.717490][ T2374] ? __fget_files+0x21f/0x3d0 [ 2342.717516][ T2374] security_file_ioctl_compat+0xd3/0x230 [ 2342.717547][ T2374] __ia32_compat_sys_ioctl+0xc2/0x360 [ 2342.717583][ T2374] __do_fast_syscall_32+0xe3/0x8c0 [ 2342.717613][ T2374] do_fast_syscall_32+0x32/0x70 [ 2342.717637][ T2374] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2342.717664][ T2374] RIP: 0023:0xf70aef6c [ 2342.717681][ T2374] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2342.717700][ T2374] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2342.717722][ T2374] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 2342.717735][ T2374] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2342.717746][ T2374] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2342.717758][ T2374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2342.717770][ T2374] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2342.717797][ T2374] [ 2342.717858][ T2374] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2342.907334][ T2377] syzkaller0: left promiscuous mode [ 2343.376156][T28313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2343.514397][T10301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2343.533384][ T2382] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2343.535871][ T2382] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2343.538643][ T2382] vhci_hcd vhci_hcd.0: Device attached [ 2343.699450][ T2390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7691'. [ 2343.897399][ T2395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2343.900161][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2343.903565][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2344.188286][ T2392] vhci_hcd: connection closed [ 2344.188704][ T13] vhci_hcd vhci_hcd.1: stop threads [ 2344.193208][ T13] vhci_hcd vhci_hcd.1: release socket [ 2344.195753][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 2344.271742][ T40] audit: type=1326 audit(1775776280.539:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2396 comm="syz.3.7692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2344.301703][ T40] audit: type=1326 audit(1775776280.539:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2396 comm="syz.3.7692" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2344.325516][T23272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2344.326297][ T40] audit: type=1326 audit(1775776280.539:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2396 comm="syz.3.7692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2344.330749][ T1814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2344.337812][ T40] audit: type=1326 audit(1775776280.539:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2396 comm="syz.3.7692" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2344.401920][ T40] audit: type=1326 audit(1775776280.539:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2396 comm="syz.3.7692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2344.942347][ T2403] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7692'. [ 2345.078849][ T2404] lo speed is unknown, defaulting to 1000 [ 2345.090524][ T2404] vcan0 speed is unknown, defaulting to 1000 [ 2345.472940][ T2411] /dev/nullb0: Can't open blockdev [ 2345.881873][ T40] audit: type=1326 audit(1775776280.539:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2396 comm="syz.3.7692" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2345.890871][ T40] audit: type=1326 audit(1775776280.539:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2396 comm="syz.3.7692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2345.900180][ T40] audit: type=1326 audit(1775776280.549:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2396 comm="syz.3.7692" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2345.911310][ T40] audit: type=1326 audit(1775776280.549:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2396 comm="syz.3.7692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2345.920306][ T40] audit: type=1326 audit(1775776280.549:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2396 comm="syz.3.7692" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2346.511709][ T5980] usb 44-1: device descriptor read/8, error -110 [ 2346.516242][T24214] usb 40-1: device descriptor read/8, error -110 [ 2346.518981][ T2417] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2346.521339][ T2417] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2346.524254][ T2417] vhci_hcd vhci_hcd.0: Device attached [ 2346.615912][ T2420] vhci_hcd: connection closed [ 2346.616222][ T46] vhci_hcd vhci_hcd.5: stop threads [ 2346.620494][ T46] vhci_hcd vhci_hcd.5: release socket [ 2346.634885][ T46] vhci_hcd vhci_hcd.5: disconnect device [ 2346.669831][ T2425] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7699'. [ 2346.776927][ T2434] FAULT_INJECTION: forcing a failure. [ 2346.776927][ T2434] name failslab, interval 1, probability 0, space 0, times 0 [ 2346.782163][ T2434] CPU: 0 UID: 0 PID: 2434 Comm: syz.1.7702 Tainted: G L syzkaller #0 PREEMPT(full) [ 2346.782190][ T2434] Tainted: [L]=SOFTLOCKUP [ 2346.782195][ T2434] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2346.782205][ T2434] Call Trace: [ 2346.782212][ T2434] [ 2346.782220][ T2434] dump_stack_lvl+0x100/0x190 [ 2346.782252][ T2434] should_fail_ex.cold+0x5/0xa [ 2346.782274][ T2434] should_failslab+0xc2/0x120 [ 2346.782293][ T2434] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 2346.782319][ T2434] ? __alloc_skb+0x140/0x710 [ 2346.782348][ T2434] __alloc_skb+0x140/0x710 [ 2346.782370][ T2434] ? __alloc_skb+0x5b7/0x710 [ 2346.782393][ T2434] ? __pfx___alloc_skb+0x10/0x10 [ 2346.782416][ T2434] ? __pfx___might_resched+0x10/0x10 [ 2346.782444][ T2434] netlink_alloc_large_skb+0x69/0x150 [ 2346.782465][ T2434] netlink_sendmsg+0x680/0xda0 [ 2346.782486][ T2434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2346.782506][ T2434] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2346.782528][ T2434] ____sys_sendmsg+0x9e1/0xb70 [ 2346.782547][ T2434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2346.782566][ T2434] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2346.782594][ T2434] ___sys_sendmsg+0x190/0x1e0 [ 2346.782617][ T2434] ? __pfx____sys_sendmsg+0x10/0x10 [ 2346.782662][ T2434] __sys_sendmsg+0x170/0x220 [ 2346.782678][ T2434] ? __pfx___sys_sendmsg+0x10/0x10 [ 2346.782701][ T2434] ? __pfx_ksys_write+0x10/0x10 [ 2346.782723][ T2434] __do_fast_syscall_32+0xe3/0x8c0 [ 2346.782746][ T2434] do_fast_syscall_32+0x32/0x70 [ 2346.782765][ T2434] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2346.782785][ T2434] RIP: 0023:0xf7fa7f6c [ 2346.782800][ T2434] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2346.782815][ T2434] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2346.782833][ T2434] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 2346.782843][ T2434] RDX: 0000000024008080 RSI: 0000000000000000 RDI: 0000000000000000 [ 2346.782852][ T2434] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2346.782861][ T2434] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2346.782871][ T2434] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2346.782891][ T2434] [ 2346.912346][ T5980] usb usb44-port1: attempt power cycle [ 2346.915084][T24214] usb usb40-port1: attempt power cycle [ 2346.974383][ T2440] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7705'. [ 2347.037128][ T2446] FAULT_INJECTION: forcing a failure. [ 2347.037128][ T2446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2347.043016][ T2446] CPU: 2 UID: 0 PID: 2446 Comm: syz.1.7708 Tainted: G L syzkaller #0 PREEMPT(full) [ 2347.043046][ T2446] Tainted: [L]=SOFTLOCKUP [ 2347.043053][ T2446] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2347.043064][ T2446] Call Trace: [ 2347.043072][ T2446] [ 2347.043080][ T2446] dump_stack_lvl+0x100/0x190 [ 2347.043114][ T2446] should_fail_ex.cold+0x5/0xa [ 2347.043137][ T2446] _copy_to_iter+0x5a4/0x1720 [ 2347.043165][ T2446] ? __pfx__copy_to_iter+0x10/0x10 [ 2347.043185][ T2446] ? print_binder_state+0x270/0x360 [ 2347.043213][ T2446] ? print_binder_state+0x2ea/0x360 [ 2347.043238][ T2446] seq_read_iter+0xdab/0x1270 [ 2347.043267][ T2446] seq_read+0x33b/0x4c0 [ 2347.043285][ T2446] ? __pfx_seq_read+0x10/0x10 [ 2347.043322][ T2446] full_proxy_read+0x135/0x1a0 [ 2347.043352][ T2446] ? __pfx_full_proxy_read+0x10/0x10 [ 2347.043380][ T2446] vfs_read+0x1e4/0xb30 [ 2347.043402][ T2446] ? __pfx_vfs_read+0x10/0x10 [ 2347.043419][ T2446] ? __fget_files+0x215/0x3d0 [ 2347.043443][ T2446] ? __fget_files+0x21f/0x3d0 [ 2347.043469][ T2446] ksys_read+0x12a/0x250 [ 2347.043487][ T2446] ? __pfx_ksys_read+0x10/0x10 [ 2347.043505][ T2446] ? __pfx_ksys_write+0x10/0x10 [ 2347.043528][ T2446] __do_fast_syscall_32+0xe3/0x8c0 [ 2347.043554][ T2446] do_fast_syscall_32+0x32/0x70 [ 2347.043575][ T2446] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2347.043597][ T2446] RIP: 0023:0xf7fa7f6c [ 2347.043614][ T2446] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2347.043631][ T2446] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 2347.043650][ T2446] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001180 [ 2347.043661][ T2446] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 2347.043672][ T2446] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2347.043682][ T2446] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2347.043692][ T2446] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2347.043716][ T2446] [ 2347.442027][T25795] net_ratelimit: 13 callbacks suppressed [ 2347.442043][T25795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2347.458178][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2347.481759][ T2455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2347.484863][ T2455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2347.487972][ T2455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2347.525848][ T5980] usb usb44-port1: unable to enumerate USB device [ 2347.531063][T24214] usb usb40-port1: unable to enumerate USB device [ 2347.603939][ T2449] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2347.606096][ T2449] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2347.608839][ T2449] vhci_hcd vhci_hcd.0: Device attached [ 2347.636818][ T2459] Mount JFS Failure: -22 [ 2347.638464][ T2459] jfs_mount failed w/return code = -22 [ 2348.245051][T14277] kernel read not supported for file /dsp (pid: 14277 comm: kworker/1:6) [ 2348.292667][ T2456] vhci_hcd: connection closed [ 2348.294591][ T1145] vhci_hcd vhci_hcd.3: stop threads [ 2348.303219][ T1145] vhci_hcd vhci_hcd.3: release socket [ 2348.308718][ T1145] vhci_hcd vhci_hcd.3: disconnect device [ 2348.311918][T24214] usb 44-1: SetAddress Request (110) to port 0 [ 2348.315305][T24214] usb 44-1: new SuperSpeed USB device number 110 using vhci_hcd [ 2348.341797][T24214] usb 44-1: enqueue for inactive port 0 [ 2348.426714][T23272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2348.429783][T14277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2348.434923][ T2464] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2348.437167][ T2464] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2348.440571][ T2464] vhci_hcd vhci_hcd.0: Device attached [ 2348.535963][ T2443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2348.539187][ T2443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2348.693254][ T2465] vhci_hcd: connection closed [ 2348.693424][ T106] vhci_hcd vhci_hcd.1: stop threads [ 2348.697142][ T106] vhci_hcd vhci_hcd.1: release socket [ 2348.701802][ T106] vhci_hcd vhci_hcd.1: disconnect device [ 2348.712102][T14277] usb 40-1: enqueue for inactive port 0 [ 2348.752582][T24214] usb usb44-port1: attempt power cycle [ 2349.212491][T14277] usb usb40-port1: attempt power cycle [ 2349.366034][ T2480] overlay: Unknown parameter '/' [ 2349.373393][T24214] usb usb44-port1: unable to enumerate USB device [ 2349.452394][ T5304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2349.548578][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 2349.551081][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 2349.823461][ T2483] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7719'. [ 2349.827450][ T2483] netlink: 90 bytes leftover after parsing attributes in process `syz.5.7719'. [ 2349.832866][ T2483] netlink: 90 bytes leftover after parsing attributes in process `syz.5.7719'. [ 2349.838483][ T2483] netlink: 'syz.5.7719': attribute type 1 has an invalid length. [ 2349.842368][ T2483] netlink: 'syz.5.7719': attribute type 1 has an invalid length. [ 2350.882100][ T2472] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2350.885053][ T2472] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2350.895092][ T2472] vhci_hcd vhci_hcd.0: Device attached [ 2350.958627][ T2498] FAULT_INJECTION: forcing a failure. [ 2350.958627][ T2498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2350.965929][ T2498] CPU: 3 UID: 0 PID: 2498 Comm: syz.5.7725 Tainted: G L syzkaller #0 PREEMPT(full) [ 2350.965949][ T2498] Tainted: [L]=SOFTLOCKUP [ 2350.965954][ T2498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2350.965961][ T2498] Call Trace: [ 2350.965965][ T2498] [ 2350.965971][ T2498] dump_stack_lvl+0x100/0x190 [ 2350.965994][ T2498] should_fail_ex.cold+0x5/0xa [ 2350.966008][ T2498] _copy_from_iter+0x1f4/0x1690 [ 2350.966026][ T2498] ? alloc_pages_mpol+0x25a/0x550 [ 2350.966039][ T2498] ? __pfx__copy_from_iter+0x10/0x10 [ 2350.966054][ T2498] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2350.966072][ T2498] copy_page_from_iter+0xde/0x180 [ 2350.966089][ T2498] tun_build_skb.constprop.0+0x2ea/0x15d0 [ 2350.966110][ T2498] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 2350.966124][ T2498] ? unwind_get_return_address+0x59/0xa0 [ 2350.966138][ T2498] ? arch_stack_walk+0xa6/0xf0 [ 2350.966152][ T2498] ? __lock_acquire+0x4a5/0x2630 [ 2350.966176][ T2498] tun_get_user+0x16d0/0x3e10 [ 2350.966195][ T2498] ? __pfx_tun_get_user+0x10/0x10 [ 2350.966210][ T2498] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2350.966231][ T2498] ? find_held_lock+0x2b/0x80 [ 2350.966241][ T2498] ? tun_get+0x191/0x370 [ 2350.966252][ T2498] ? tun_get+0x191/0x370 [ 2350.966268][ T2498] tun_chr_write_iter+0xdc/0x200 [ 2350.966283][ T2498] vfs_write+0x6ac/0x1070 [ 2350.966296][ T2498] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 2350.966311][ T2498] ? __pfx_vfs_write+0x10/0x10 [ 2350.966321][ T2498] ? find_held_lock+0x2b/0x80 [ 2350.966340][ T2498] ksys_write+0x12a/0x250 [ 2350.966351][ T2498] ? __pfx_ksys_write+0x10/0x10 [ 2350.966366][ T2498] do_int80_emulation+0x141/0x6b0 [ 2350.966382][ T2498] asm_int80_emulation+0x1a/0x20 [ 2350.966393][ T2498] RIP: 0023:0xf71e5cab [ 2350.966403][ T2498] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2350.966414][ T2498] RSP: 002b:00000000f549d44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 2350.966426][ T2498] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000440 [ 2350.966433][ T2498] RDX: 0000000000000046 RSI: 0000000000000000 RDI: 0000000000000000 [ 2350.966440][ T2498] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2350.966446][ T2498] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2350.966452][ T2498] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2350.966466][ T2498] [ 2351.143377][T14277] usb usb40-port1: unable to enumerate USB device [ 2351.201758][T25795] usb 46-1: SetAddress Request (31) to port 0 [ 2351.204437][T25795] usb 46-1: new SuperSpeed USB device number 31 using vhci_hcd [ 2351.278290][ T2493] vhci_hcd: connection reset by peer [ 2351.460414][ T187] vhci_hcd vhci_hcd.4: stop threads [ 2351.464265][ T187] vhci_hcd vhci_hcd.4: release socket [ 2351.467031][ T187] vhci_hcd vhci_hcd.4: disconnect device [ 2351.845885][ T2517] Mount JFS Failure: -22 [ 2351.847979][ T2517] jfs_mount failed w/return code = -22 [ 2352.894424][ T5304] net_ratelimit: 10 callbacks suppressed [ 2352.894441][ T5304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2352.973419][T14277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2353.211997][T21901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2353.270298][ T2525] overlay: Bad value for 'workdir' [ 2353.299353][ T2526] evm: overlay not supported [ 2353.436659][ T106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2353.693560][ T2529] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2353.695895][ T2529] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2353.712082][ T2529] vhci_hcd vhci_hcd.0: Device attached [ 2353.931877][T14376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2353.932997][T23272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2354.035722][T14277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2354.039702][T10301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2354.043405][ T2540] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2354.046388][ T2540] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2354.066942][ T2540] vhci_hcd vhci_hcd.0: Device attached [ 2354.180824][ T2529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2354.184470][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2354.316974][ T2541] vhci_hcd: connection closed [ 2354.317345][ T106] vhci_hcd vhci_hcd.3: stop threads [ 2354.321162][ T106] vhci_hcd vhci_hcd.3: release socket [ 2354.323332][ T106] vhci_hcd vhci_hcd.3: disconnect device [ 2354.331944][T23272] usb 44-1: enqueue for inactive port 0 [ 2354.404700][ T2533] vhci_hcd: connection closed [ 2354.404969][ T106] vhci_hcd vhci_hcd.4: stop threads [ 2354.409420][ T106] vhci_hcd vhci_hcd.4: release socket [ 2354.431858][ T106] vhci_hcd vhci_hcd.4: disconnect device [ 2354.445898][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 2354.445912][ T40] audit: type=1400 audit(1775776290.749:1780): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=2556 comm="syz.5.7736" [ 2354.455598][ T2557] syzkaller0: entered promiscuous mode [ 2354.822940][T23272] usb usb44-port1: attempt power cycle [ 2355.402578][T23272] usb usb44-port1: unable to enumerate USB device [ 2356.254201][T25795] usb 46-1: device descriptor read/8, error -110 [ 2356.653602][T25795] usb usb46-port1: attempt power cycle [ 2356.846549][ T2575] Mount JFS Failure: -22 [ 2356.848600][ T2575] jfs_mount failed w/return code = -22 [ 2357.222751][T25795] usb usb46-port1: unable to enumerate USB device [ 2357.288893][T14277] kernel read not supported for file /dsp (pid: 14277 comm: kworker/1:6) [ 2357.378933][ T2577] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7741'. [ 2357.592873][ T2578] tipc: Resetting bearer [ 2357.598272][T25795] lo speed is unknown, defaulting to 1000 [ 2357.600197][T25795] syz2: Port: 1 Link DOWN [ 2357.607703][ T106] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2357.610705][ T106] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2357.613727][ T106] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2357.620821][ T106] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2357.988822][ T2589] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7745'. [ 2358.020869][ T2589] nbd: socks must be embedded in a SOCK_ITEM attr [ 2358.124049][ T1606] block nbd64: NBD_DISCONNECT [ 2358.252249][T23272] net_ratelimit: 10 callbacks suppressed [ 2358.252268][T23272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2358.297460][ T2606] x_tables: duplicate underflow at hook 1 [ 2358.351889][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2358.381254][ T1515] udevd[1515]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2358.450185][ T2618] lo speed is unknown, defaulting to 1000 [ 2358.457386][ T2618] vcan0 speed is unknown, defaulting to 1000 [ 2358.656927][ T2612] hub 8-0:1.0: USB hub found [ 2358.666583][ T2612] hub 8-0:1.0: 1 port detected [ 2359.289211][ T2623] geneve1: entered allmulticast mode [ 2359.295467][ T2622] geneve1: left allmulticast mode [ 2359.302478][ T5304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2359.394837][T10301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2359.572781][ T1145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2359.715247][ T2638] ieee802154 phy0 wpan0: encryption failed: -90 [ 2360.472911][T23272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2360.492270][T25795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2360.596658][ T2644] FAULT_INJECTION: forcing a failure. [ 2360.596658][ T2644] name failslab, interval 1, probability 0, space 0, times 0 [ 2360.602614][ T2644] CPU: 1 UID: 0 PID: 2644 Comm: syz.1.7757 Tainted: G L syzkaller #0 PREEMPT(full) [ 2360.602634][ T2644] Tainted: [L]=SOFTLOCKUP [ 2360.602638][ T2644] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2360.602646][ T2644] Call Trace: [ 2360.602651][ T2644] [ 2360.602656][ T2644] dump_stack_lvl+0x100/0x190 [ 2360.602682][ T2644] should_fail_ex.cold+0x5/0xa [ 2360.602697][ T2644] ? video_usercopy+0x145/0x14d0 [ 2360.602711][ T2644] should_failslab+0xc2/0x120 [ 2360.602725][ T2644] __kmalloc_noprof+0xe0/0x850 [ 2360.602744][ T2644] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2360.602759][ T2644] video_usercopy+0x145/0x14d0 [ 2360.602772][ T2644] ? __pfx___video_do_ioctl+0x10/0x10 [ 2360.602784][ T2644] ? irqentry_exit+0x180/0x670 [ 2360.602799][ T2644] ? __pfx_video_usercopy+0x10/0x10 [ 2360.602816][ T2644] ? __pfx___video_do_ioctl+0x10/0x10 [ 2360.602830][ T2644] v4l2_ioctl+0x1bd/0x250 [ 2360.602846][ T2644] v4l2_compat_ioctl32+0x20f/0x2d0 [ 2360.602864][ T2644] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 2360.602883][ T2644] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 2360.602903][ T2644] __do_fast_syscall_32+0xe3/0x8c0 [ 2360.602920][ T2644] do_fast_syscall_32+0x32/0x70 [ 2360.602933][ T2644] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2360.602950][ T2644] RIP: 0023:0xf7fa7f6c [ 2360.602960][ T2644] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2360.602972][ T2644] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2360.602985][ T2644] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0cc5605 [ 2360.602992][ T2644] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2360.602998][ T2644] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2360.603004][ T2644] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2360.603011][ T2644] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2360.603024][ T2644] [ 2360.713751][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2361.291259][ T2661] FAULT_INJECTION: forcing a failure. [ 2361.291259][ T2661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2361.296791][ T2661] CPU: 0 UID: 0 PID: 2661 Comm: syz.5.7761 Tainted: G L syzkaller #0 PREEMPT(full) [ 2361.296813][ T2661] Tainted: [L]=SOFTLOCKUP [ 2361.296818][ T2661] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2361.296825][ T2661] Call Trace: [ 2361.296830][ T2661] [ 2361.296836][ T2661] dump_stack_lvl+0x100/0x190 [ 2361.296865][ T2661] should_fail_ex.cold+0x5/0xa [ 2361.296880][ T2661] _copy_from_user+0x2e/0xd0 [ 2361.296899][ T2661] get_compat_msghdr+0xb3/0x4b0 [ 2361.296923][ T2661] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2361.296948][ T2661] ___sys_sendmsg+0x1b6/0x1e0 [ 2361.296966][ T2661] ? __pfx____sys_sendmsg+0x10/0x10 [ 2361.296999][ T2661] __sys_sendmsg+0x170/0x220 [ 2361.297012][ T2661] ? __pfx___sys_sendmsg+0x10/0x10 [ 2361.297031][ T2661] ? __pfx_ksys_write+0x10/0x10 [ 2361.297056][ T2661] __do_fast_syscall_32+0xe3/0x8c0 [ 2361.297075][ T2661] do_fast_syscall_32+0x32/0x70 [ 2361.297089][ T2661] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2361.297105][ T2661] RIP: 0023:0xf70aef6c [ 2361.297115][ T2661] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2361.297127][ T2661] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2361.297140][ T2661] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 2361.297148][ T2661] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 2361.297154][ T2661] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2361.297161][ T2661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2361.297168][ T2661] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2361.297182][ T2661] [ 2361.305242][ T2659] fuse: Bad value for 'group_id' [ 2361.366458][ T2659] fuse: Bad value for 'group_id' [ 2361.710402][ T2675] lo speed is unknown, defaulting to 1000 [ 2361.715929][ T2675] vcan0 speed is unknown, defaulting to 1000 [ 2361.858259][ T5947] Bluetooth: hci2: command 0x0406 tx timeout [ 2362.352413][ T2682] Mount JFS Failure: -22 [ 2362.354049][ T2682] jfs_mount failed w/return code = -22 [ 2362.422296][ T951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2362.481055][T23272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2363.247936][ T972] kernel read not supported for file /dsp (pid: 972 comm: kworker/1:2) [ 2363.532269][T32657] net_ratelimit: 1 callbacks suppressed [ 2363.532337][T32657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2363.931894][T14417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2364.603836][T23272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2364.745011][ T2704] lo speed is unknown, defaulting to 1000 [ 2364.750488][ T2704] vcan0 speed is unknown, defaulting to 1000 [ 2364.756871][ T2702] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2364.759483][ T2702] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2364.777412][ T2702] vhci_hcd vhci_hcd.0: Device attached [ 2365.041694][T23272] usb 40-1: SetAddress Request (117) to port 0 [ 2365.044220][T23272] usb 40-1: new SuperSpeed USB device number 117 using vhci_hcd [ 2365.093527][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2365.238396][ T2707] /dev/nullb0: Can't open blockdev [ 2365.547439][ T951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2365.613065][ T5304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2366.290725][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2366.737001][T32657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2366.825935][ T2703] vhci_hcd: connection reset by peer [ 2366.861498][ T46] vhci_hcd vhci_hcd.1: stop threads [ 2366.863872][ T46] vhci_hcd vhci_hcd.1: release socket [ 2366.866484][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 2367.032553][ T2737] FAULT_INJECTION: forcing a failure. [ 2367.032553][ T2737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2367.044333][ T2737] CPU: 3 UID: 0 PID: 2737 Comm: syz.4.7775 Tainted: G L syzkaller #0 PREEMPT(full) [ 2367.044356][ T2737] Tainted: [L]=SOFTLOCKUP [ 2367.044360][ T2737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2367.044367][ T2737] Call Trace: [ 2367.044372][ T2737] [ 2367.044378][ T2737] dump_stack_lvl+0x100/0x190 [ 2367.044404][ T2737] should_fail_ex.cold+0x5/0xa [ 2367.044419][ T2737] _copy_from_user+0x2e/0xd0 [ 2367.044436][ T2737] kstrtouint_from_user+0xd6/0x1d0 [ 2367.044455][ T2737] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2367.044494][ T2737] ? __lock_acquire+0x4a5/0x2630 [ 2367.044513][ T2737] ? lock_acquire+0x1cf/0x380 [ 2367.044531][ T2737] proc_fail_nth_write+0x83/0x220 [ 2367.044547][ T2737] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2367.044566][ T2737] vfs_write+0x2aa/0x1070 [ 2367.044579][ T2737] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2367.044596][ T2737] ? __pfx_vfs_write+0x10/0x10 [ 2367.044606][ T2737] ? find_held_lock+0x2b/0x80 [ 2367.044617][ T2737] ? __fget_files+0x215/0x3d0 [ 2367.044631][ T2737] ? __fget_files+0x21f/0x3d0 [ 2367.044646][ T2737] ksys_write+0x12a/0x250 [ 2367.044657][ T2737] ? __pfx_ksys_write+0x10/0x10 [ 2367.044673][ T2737] do_int80_emulation+0x141/0x6b0 [ 2367.044689][ T2737] asm_int80_emulation+0x1a/0x20 [ 2367.044701][ T2737] RIP: 0023:0xf71e5cab [ 2367.044711][ T2737] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2367.044722][ T2737] RSP: 002b:00000000f549d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 2367.044734][ T2737] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f549d5d0 [ 2367.044742][ T2737] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 2367.044748][ T2737] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2367.044754][ T2737] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2367.044761][ T2737] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2367.044776][ T2737] [ 2367.544932][ T2752] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2367.547382][ T2752] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2367.550548][ T2752] vhci_hcd vhci_hcd.0: Device attached [ 2367.603046][T14417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2367.783431][T32657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2367.861035][ T2753] vhci_hcd: connection closed [ 2367.861298][ T1148] vhci_hcd vhci_hcd.1: stop threads [ 2367.864915][ T1148] vhci_hcd vhci_hcd.1: release socket [ 2367.866968][ T1148] vhci_hcd vhci_hcd.1: disconnect device [ 2368.741522][ T951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2368.792147][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2368.806961][ T2773] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2368.809055][ T2773] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2368.811900][ T2773] vhci_hcd vhci_hcd.0: Device attached [ 2368.814725][T32657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2368.892881][ T40] audit: type=1800 audit(1775776305.189:1781): pid=2780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7787" name="file1" dev="tmpfs" ino=534 res=0 errno=0 [ 2368.959577][ T2783] bond1 (unregistering): Released all slaves [ 2369.073726][ T2790] bond1 (unregistering): Released all slaves [ 2369.261990][ T972] usb 46-1: SetAddress Request (35) to port 0 [ 2369.264378][ T972] usb 46-1: new SuperSpeed USB device number 35 using vhci_hcd [ 2369.296785][ T2798] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2369.298918][ T2798] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2369.301734][ T2798] vhci_hcd vhci_hcd.0: Device attached [ 2369.862180][ T5304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2369.865218][ T2774] vhci_hcd: connection reset by peer [ 2369.872137][ T187] vhci_hcd vhci_hcd.4: stop threads [ 2369.873962][ T187] vhci_hcd vhci_hcd.4: release socket [ 2369.876280][ T187] vhci_hcd vhci_hcd.4: disconnect device [ 2369.904851][ T2804] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7791'. [ 2369.916399][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2370.013721][T14376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2370.052721][ T2799] vhci_hcd: connection closed [ 2370.052959][ T1145] vhci_hcd vhci_hcd.1: stop threads [ 2370.056226][ T1145] vhci_hcd vhci_hcd.1: release socket [ 2370.060304][ T1145] vhci_hcd vhci_hcd.1: disconnect device [ 2370.121919][T23272] usb 40-1: device descriptor read/8, error -110 [ 2370.269268][ T2814] lo speed is unknown, defaulting to 1000 [ 2370.274454][ T2814] vcan0 speed is unknown, defaulting to 1000 [ 2370.891701][ T2816] Mount JFS Failure: -22 [ 2370.893570][ T2816] jfs_mount failed w/return code = -22 [ 2370.894213][T32657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2371.348717][T24214] kernel read not supported for file /dsp (pid: 24214 comm: kworker/1:4) [ 2371.779224][T21901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2371.859031][ T106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2371.929172][ T2835] netlink: 'syz.5.7796': attribute type 1 has an invalid length. [ 2371.934213][ T2836] netlink: 'syz.5.7796': attribute type 1 has an invalid length. [ 2371.939836][T32657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2371.974437][ T2838] FAULT_INJECTION: forcing a failure. [ 2371.974437][ T2838] name failslab, interval 1, probability 0, space 0, times 0 [ 2371.978361][ T2838] CPU: 0 UID: 0 PID: 2838 Comm: syz.4.7797 Tainted: G L syzkaller #0 PREEMPT(full) [ 2371.978382][ T2838] Tainted: [L]=SOFTLOCKUP [ 2371.978386][ T2838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2371.978394][ T2838] Call Trace: [ 2371.978400][ T2838] [ 2371.978405][ T2838] dump_stack_lvl+0x100/0x190 [ 2371.978428][ T2838] should_fail_ex.cold+0x5/0xa [ 2371.978442][ T2838] ? tomoyo_encode2+0xfb/0x3c0 [ 2371.978460][ T2838] should_failslab+0xc2/0x120 [ 2371.978474][ T2838] __kmalloc_noprof+0xe0/0x850 [ 2371.978492][ T2838] ? d_absolute_path+0x136/0x1b0 [ 2371.978511][ T2838] tomoyo_encode2+0xfb/0x3c0 [ 2371.978529][ T2838] tomoyo_encode+0x29/0x50 [ 2371.978545][ T2838] tomoyo_realpath_from_path+0x18c/0x690 [ 2371.978565][ T2838] tomoyo_path_number_perm+0x23c/0x580 [ 2371.978578][ T2838] ? tomoyo_path_number_perm+0x22e/0x580 [ 2371.978594][ T2838] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2371.978622][ T2838] ? find_held_lock+0x2b/0x80 [ 2371.978633][ T2838] ? hook_file_ioctl_common+0x146/0x410 [ 2371.978650][ T2838] ? __fget_files+0x215/0x3d0 [ 2371.978663][ T2838] ? __fget_files+0x21f/0x3d0 [ 2371.978677][ T2838] security_file_ioctl_compat+0xd3/0x230 [ 2371.978695][ T2838] __ia32_compat_sys_ioctl+0xc2/0x360 [ 2371.978715][ T2838] __do_fast_syscall_32+0xe3/0x8c0 [ 2371.978731][ T2838] do_fast_syscall_32+0x32/0x70 [ 2371.978744][ T2838] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2371.978759][ T2838] RIP: 0023:0xf70aef6c [ 2371.978769][ T2838] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2371.978780][ T2838] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2371.978792][ T2838] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 00000000c03864bc [ 2371.978802][ T2838] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 2371.978809][ T2838] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2371.978815][ T2838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2371.978822][ T2838] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2371.978837][ T2838] [ 2371.979104][ T2838] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2371.987360][ T2835] bond1: entered promiscuous mode [ 2372.082437][T23272] usb usb40-port1: attempt power cycle [ 2372.085199][ T2835] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2372.642569][T23272] usb usb40-port1: unable to enumerate USB device [ 2372.807192][ T2862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7801'. [ 2373.053870][ T2865] netlink: 256 bytes leftover after parsing attributes in process `syz.5.7798'. [ 2373.118841][T32398] Bluetooth: hci1: Malformed Event: 0x13 [ 2373.623887][ T2882] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7803'. [ 2373.810950][ T2895] CUSE: info not properly terminated [ 2373.817545][ T2892] FAULT_INJECTION: forcing a failure. [ 2373.817545][ T2892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2373.820819][ T2890] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7804'. [ 2373.831734][ T2892] CPU: 0 UID: 0 PID: 2892 Comm: syz.5.7805 Tainted: G L syzkaller #0 PREEMPT(full) [ 2373.831765][ T2892] Tainted: [L]=SOFTLOCKUP [ 2373.831772][ T2892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2373.831781][ T2892] Call Trace: [ 2373.831794][ T2892] [ 2373.831799][ T2892] dump_stack_lvl+0x100/0x190 [ 2373.831824][ T2892] should_fail_ex.cold+0x5/0xa [ 2373.831839][ T2892] _copy_to_user+0x32/0xd0 [ 2373.831857][ T2892] simple_read_from_buffer+0xcb/0x170 [ 2373.831877][ T2892] proc_fail_nth_read+0x1af/0x230 [ 2373.831893][ T2892] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2373.831909][ T2892] ? rw_verify_area+0xce/0x6d0 [ 2373.831926][ T2892] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2373.831940][ T2892] vfs_read+0x1e4/0xb30 [ 2373.831954][ T2892] ? __pfx_vfs_read+0x10/0x10 [ 2373.831964][ T2892] ? find_held_lock+0x2b/0x80 [ 2373.831976][ T2892] ? __fget_files+0x215/0x3d0 [ 2373.831990][ T2892] ? __fget_files+0x21f/0x3d0 [ 2373.832005][ T2892] ksys_read+0x12a/0x250 [ 2373.832015][ T2892] ? __pfx_ksys_read+0x10/0x10 [ 2373.832030][ T2892] do_int80_emulation+0x141/0x6b0 [ 2373.832049][ T2892] asm_int80_emulation+0x1a/0x20 [ 2373.832061][ T2892] RIP: 0023:0xf71e5cab [ 2373.832071][ T2892] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2373.832082][ T2892] RSP: 002b:00000000f547c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2373.832094][ T2892] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f547c5d0 [ 2373.832101][ T2892] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 2373.832107][ T2892] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2373.832114][ T2892] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2373.832120][ T2892] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2373.832136][ T2892] [ 2374.016413][T23272] net_ratelimit: 2 callbacks suppressed [ 2374.016456][T23272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2374.240403][ T2913] lo speed is unknown, defaulting to 1000 [ 2374.244177][ T2913] vcan0 speed is unknown, defaulting to 1000 [ 2374.364741][ T972] usb 46-1: device descriptor read/8, error -110 [ 2374.437464][ T1145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2374.563912][ T2914] netlink: 256 bytes leftover after parsing attributes in process `syz.5.7810'. [ 2374.752751][ T972] usb usb46-port1: attempt power cycle [ 2374.850106][ T951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2375.001415][ T2927] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7813'. [ 2375.055337][T23272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2375.342630][ T972] usb usb46-port1: unable to enumerate USB device [ 2375.651853][ T1145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2375.706312][ T2957] lo speed is unknown, defaulting to 1000 [ 2375.710408][ T2957] vcan0 speed is unknown, defaulting to 1000 [ 2375.769224][ T2957] syz.1.7818: page allocation failure: order:6, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2375.775929][ T2957] CPU: 2 UID: 0 PID: 2957 Comm: syz.1.7818 Tainted: G L syzkaller #0 PREEMPT(full) [ 2375.775949][ T2957] Tainted: [L]=SOFTLOCKUP [ 2375.775954][ T2957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2375.775961][ T2957] Call Trace: [ 2375.775966][ T2957] [ 2375.775972][ T2957] dump_stack_lvl+0x100/0x190 [ 2375.776006][ T2957] warn_alloc.cold+0x95/0x1c1 [ 2375.776032][ T2957] ? __pfx_warn_alloc+0x10/0x10 [ 2375.776051][ T2957] ? psi_memstall_leave+0x19c/0x2e0 [ 2375.776070][ T2957] ? __pfx___might_resched+0x10/0x10 [ 2375.776091][ T2957] __alloc_frozen_pages_noprof+0xf36/0x2ba0 [ 2375.776117][ T2957] ? sysfs_add_file_mode_ns+0x22f/0x3c0 [ 2375.776135][ T2957] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2375.776153][ T2957] ? kernfs_put+0x3f/0x60 [ 2375.776170][ T2957] ? internal_create_group+0x915/0xf40 [ 2375.776197][ T2957] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2375.776210][ T2957] ? policy_nodemask+0xed/0x4f0 [ 2375.776225][ T2957] alloc_pages_mpol+0x1fb/0x550 [ 2375.776238][ T2957] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2375.776255][ T2957] ? ib_setup_port_attrs+0x2b4/0x600 [ 2375.776272][ T2957] ___kmalloc_large_node+0x104/0x150 [ 2375.776288][ T2957] __kmalloc_large_node_noprof+0x1c/0x70 [ 2375.776304][ T2957] __kmalloc_noprof+0x5be/0x850 [ 2375.776321][ T2957] ? rdma_port_get_link_layer+0x57/0xe0 [ 2375.776341][ T2957] ib_setup_port_attrs+0x2b4/0x600 [ 2375.776357][ T2957] ? kobject_put+0xb9/0x640 [ 2375.776373][ T2957] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 2375.776394][ T2957] ? __init_waitqueue_head+0xca/0x150 [ 2375.776415][ T2957] add_one_compat_dev+0x5b3/0x820 [ 2375.776454][ T2957] rdma_dev_init_net+0x30a/0x590 [ 2375.776471][ T2957] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 2375.776483][ T2957] ? __kmalloc_noprof+0x320/0x850 [ 2375.776503][ T2957] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 2375.776515][ T2957] ops_init+0x1e2/0x5f0 [ 2375.776529][ T2957] setup_net+0x118/0x3a0 [ 2375.776541][ T2957] ? __pfx_setup_net+0x10/0x10 [ 2375.776552][ T2957] ? lockdep_init_map_type+0x5c/0x250 [ 2375.776568][ T2957] ? mutex_init_lockep+0x110/0x150 [ 2375.776586][ T2957] copy_net_ns+0x46f/0x7c0 [ 2375.776600][ T2957] create_new_namespaces+0x3ea/0xac0 [ 2375.776631][ T2957] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 2375.776645][ T2957] ksys_unshare+0x473/0xad0 [ 2375.776662][ T2957] ? __pfx_ksys_unshare+0x10/0x10 [ 2375.776682][ T2957] __ia32_sys_unshare+0x30/0x40 [ 2375.776697][ T2957] __do_fast_syscall_32+0xe3/0x8c0 [ 2375.776713][ T2957] do_fast_syscall_32+0x32/0x70 [ 2375.776726][ T2957] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2375.776741][ T2957] RIP: 0023:0xf7fa7f6c [ 2375.776751][ T2957] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2375.776765][ T2957] RSP: 002b:00000000f542450c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 2375.776778][ T2957] RAX: ffffffffffffffda RBX: 0000000040000080 RCX: 0000000000000000 [ 2375.776785][ T2957] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2375.776792][ T2957] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2375.776798][ T2957] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2375.776805][ T2957] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2375.776821][ T2957] [ 2375.776849][ T2957] Mem-Info: [ 2375.900957][ T2957] active_anon:7590 inactive_anon:1112 isolated_anon:0 [ 2375.900957][ T2957] active_file:6041 inactive_file:5521 isolated_file:0 [ 2375.900957][ T2957] unevictable:1768 dirty:355 writeback:0 [ 2375.900957][ T2957] slab_reclaimable:7651 slab_unreclaimable:82159 [ 2375.900957][ T2957] mapped:32550 shmem:8665 pagetables:1311 [ 2375.900957][ T2957] sec_pagetables:393 bounce:0 [ 2375.900957][ T2957] kernel_misc_reclaimable:0 [ 2375.900957][ T2957] free:39535 free_pcp:2920 free_cma:0 [ 2375.916273][ T2957] Node 0 active_anon:4kB inactive_anon:180kB active_file:1292kB inactive_file:5368kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:640kB dirty:16kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7200kB pagetables:1232kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB [ 2375.926772][ T2957] Node 1 active_anon:30356kB inactive_anon:4268kB active_file:22872kB inactive_file:16716kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:129560kB dirty:1404kB writeback:0kB shmem:31124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9984kB pagetables:4012kB sec_pagetables:432kB all_unreclaimable? no Balloon:0kB [ 2375.937562][ T2957] Node 0 DMA free:2492kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:68kB inactive_file:532kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2375.948215][ T2957] lowmem_reserve[]: 0 285 285 285 285 [ 2375.950209][ T2957] Node 0 DMA32 free:31328kB boost:29392kB min:42460kB low:45724kB high:48988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:176kB active_file:1224kB inactive_file:4836kB unevictable:3536kB writepending:16kB zspages:476kB present:1032196kB managed:292456kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2375.961961][ T2957] lowmem_reserve[]: 0 0 0 0 0 [ 2375.963761][ T2957] Node 1 DMA32 free:123196kB boost:2048kB min:49192kB low:60976kB high:72760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30356kB inactive_anon:4268kB active_file:22872kB inactive_file:16716kB unevictable:3536kB writepending:1404kB zspages:5588kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:12364kB local_pcp:32kB free_cma:0kB [ 2375.968521][ T2963] lo speed is unknown, defaulting to 1000 [ 2375.974985][ T2957] lowmem_reserve[]: 0 0 0 0 0 [ 2375.978194][ T2957] Node 0 DMA: 99*4kB (UE) 18*8kB (UE) 6*16kB (U) 10*32kB (U) 6*64kB (U) 1*128kB (E) 2*256kB (E) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 2492kB [ 2375.983458][ T2957] Node 0 DMA32: 1292*4kB (UME) 544*8kB (UME) 253*16kB (UME) 237*32kB (UME) 71*64kB (UME) 22*128kB (UME) 9*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 31328kB [ 2375.989143][ T2957] Node 1 DMA32: 928*4kB (UME) 4068*8kB (UME) 4392*16kB (UME) 196*32kB (UME) 103*64kB (UME) 27*128kB (UME) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 123104kB [ 2375.995002][ T2957] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2375.998143][ T2957] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2376.001395][ T2957] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2376.005106][ T2957] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2376.011987][ T2957] 21246 total pagecache pages [ 2376.013759][ T2957] 1014 pages in swap cache [ 2376.015421][ T2957] Free swap = 98644kB [ 2376.016921][ T2957] Total swap = 124996kB [ 2376.018398][ T2957] 524155 pages RAM [ 2376.019732][ T2957] 0 pages HighMem/MovableOnly [ 2376.021451][ T2957] 210148 pages reserved [ 2376.023590][ T2957] 0 pages cma reserved [ 2376.057236][ T2963] vcan0 speed is unknown, defaulting to 1000 [ 2376.102296][T32657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2376.847476][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2376.854080][T14277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2376.859283][T14277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2377.133395][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2377.388490][ T2967] lo speed is unknown, defaulting to 1000 [ 2377.391037][ T2967] vcan0 speed is unknown, defaulting to 1000 [ 2377.968379][ T2962] Mount JFS Failure: -22 [ 2377.969810][ T2962] jfs_mount failed w/return code = -22 [ 2378.010255][T14277] kernel read not supported for file /dsp (pid: 14277 comm: kworker/1:6) [ 2378.116814][ T2969] Mount JFS Failure: -22 [ 2378.118291][ T2969] jfs_mount failed w/return code = -22 [ 2378.304511][ T2974] FAULT_INJECTION: forcing a failure. [ 2378.304511][ T2974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2378.309830][ T2974] CPU: 3 UID: 0 PID: 2974 Comm: syz.3.7822 Tainted: G L syzkaller #0 PREEMPT(full) [ 2378.309862][ T2974] Tainted: [L]=SOFTLOCKUP [ 2378.309868][ T2974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2378.309879][ T2974] Call Trace: [ 2378.309888][ T2974] [ 2378.309897][ T2974] dump_stack_lvl+0x100/0x190 [ 2378.309934][ T2974] should_fail_ex.cold+0x5/0xa [ 2378.309958][ T2974] _copy_to_user+0x32/0xd0 [ 2378.309985][ T2974] simple_read_from_buffer+0xcb/0x170 [ 2378.310013][ T2974] proc_fail_nth_read+0x1af/0x230 [ 2378.310040][ T2974] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2378.310064][ T2974] ? rw_verify_area+0xce/0x6d0 [ 2378.310091][ T2974] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2378.310113][ T2974] vfs_read+0x1e4/0xb30 [ 2378.310137][ T2974] ? __pfx_vfs_read+0x10/0x10 [ 2378.310152][ T2974] ? find_held_lock+0x2b/0x80 [ 2378.310172][ T2974] ? __fget_files+0x215/0x3d0 [ 2378.310196][ T2974] ? __fget_files+0x21f/0x3d0 [ 2378.310220][ T2974] ksys_read+0x12a/0x250 [ 2378.310239][ T2974] ? __pfx_ksys_read+0x10/0x10 [ 2378.310263][ T2974] do_int80_emulation+0x141/0x6b0 [ 2378.310290][ T2974] asm_int80_emulation+0x1a/0x20 [ 2378.310308][ T2974] RIP: 0023:0xf71b5cab [ 2378.310326][ T2974] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2378.310344][ T2974] RSP: 002b:00000000f546d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2378.310363][ T2974] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f546d5d0 [ 2378.310375][ T2974] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 2378.310386][ T2974] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2378.310398][ T2974] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2378.310409][ T2974] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2378.310435][ T2974] [ 2378.418625][ T2979] FAULT_INJECTION: forcing a failure. [ 2378.418625][ T2979] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2378.425276][ T2979] CPU: 3 UID: 0 PID: 2979 Comm: syz.3.7823 Tainted: G L syzkaller #0 PREEMPT(full) [ 2378.425308][ T2979] Tainted: [L]=SOFTLOCKUP [ 2378.425315][ T2979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2378.425326][ T2979] Call Trace: [ 2378.425334][ T2979] [ 2378.425343][ T2979] dump_stack_lvl+0x100/0x190 [ 2378.425379][ T2979] should_fail_ex.cold+0x5/0xa [ 2378.425399][ T2979] ? prepare_alloc_pages+0x16d/0x5f0 [ 2378.425425][ T2979] should_fail_alloc_page+0xeb/0x140 [ 2378.425448][ T2979] prepare_alloc_pages+0x1f0/0x5f0 [ 2378.425470][ T2979] ? bpf_ksym_find+0x124/0x1c0 [ 2378.425496][ T2979] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 2378.425528][ T2979] ? __kernel_text_address+0xd/0x30 [ 2378.425555][ T2979] ? unwind_get_return_address+0x59/0xa0 [ 2378.425576][ T2979] ? arch_stack_walk+0xa6/0xf0 [ 2378.425604][ T2979] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2378.425633][ T2979] ? stack_trace_save+0x8e/0xc0 [ 2378.425651][ T2979] ? __pfx_stack_trace_save+0x10/0x10 [ 2378.425672][ T2979] ? stack_depot_save_flags+0x27/0x9d0 [ 2378.425704][ T2979] ? kasan_save_stack+0x30/0x50 [ 2378.425721][ T2979] ? kasan_save_track+0x14/0x30 [ 2378.425735][ T2979] ? __kasan_slab_alloc+0x89/0x90 [ 2378.425752][ T2979] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 2378.425779][ T2979] ? __pmd_alloc+0xbf/0x950 [ 2378.425800][ T2979] ? __handle_mm_fault+0xa9e/0x2b60 [ 2378.425824][ T2979] ? handle_mm_fault+0x36d/0xa20 [ 2378.425847][ T2979] ? do_user_addr_fault+0x74c/0x12f0 [ 2378.425865][ T2979] ? exc_page_fault+0x6f/0xd0 [ 2378.425883][ T2979] ? asm_exc_page_fault+0x26/0x30 [ 2378.425900][ T2979] ? __put_user_4+0xd/0x20 [ 2378.425919][ T2979] ? __sys_socketpair+0x120/0x5b0 [ 2378.425953][ T2979] ? __ia32_sys_socketpair+0x95/0x100 [ 2378.425977][ T2979] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2378.426001][ T2979] ? policy_nodemask+0xed/0x4f0 [ 2378.426025][ T2979] alloc_pages_mpol+0x1fb/0x550 [ 2378.426052][ T2979] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2378.426081][ T2979] alloc_pages_noprof+0x136/0x390 [ 2378.426103][ T2979] pte_alloc_one+0x1c/0x3d0 [ 2378.426125][ T2979] __pte_alloc+0x6d/0x3e0 [ 2378.426145][ T2979] ? __pfx___pte_alloc+0x10/0x10 [ 2378.426166][ T2979] ? do_raw_spin_lock+0x128/0x260 [ 2378.426193][ T2979] ? find_held_lock+0x2b/0x80 [ 2378.426214][ T2979] do_anonymous_page+0x13cc/0x1fb0 [ 2378.426240][ T2979] ? do_raw_spin_unlock+0x145/0x1e0 [ 2378.426267][ T2979] ? _raw_spin_unlock+0x28/0x50 [ 2378.426295][ T2979] ? __pmd_alloc+0x3fb/0x950 [ 2378.426320][ T2979] __handle_mm_fault+0x1d48/0x2b60 [ 2378.426349][ T2979] ? mt_find+0x45e/0x8e0 [ 2378.426371][ T2979] ? __pfx___handle_mm_fault+0x10/0x10 [ 2378.426395][ T2979] ? __pfx_mt_find+0x10/0x10 [ 2378.426430][ T2979] ? find_vma+0xbf/0x140 [ 2378.426449][ T2979] ? __pfx_find_vma+0x10/0x10 [ 2378.426470][ T2979] handle_mm_fault+0x36d/0xa20 [ 2378.426502][ T2979] do_user_addr_fault+0x74c/0x12f0 [ 2378.426528][ T2979] exc_page_fault+0x6f/0xd0 [ 2378.426549][ T2979] asm_exc_page_fault+0x26/0x30 [ 2378.426568][ T2979] RIP: 0010:__put_user_4+0xd/0x20 [ 2378.426588][ T2979] Code: 66 89 01 31 c9 0f 01 ca e9 c0 d0 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 97 d0 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 2378.426605][ T2979] RSP: 0018:ffffc9000e68fdf8 EFLAGS: 00050202 [ 2378.426621][ T2979] RAX: 0000000000000005 RBX: 0000000000000000 RCX: 0000000080000080 [ 2378.426633][ T2979] RDX: ffff888013cc4980 RSI: ffffffff82563541 RDI: ffffffff8c1b1e20 [ 2378.426645][ T2979] RBP: 1ffff92001cd1fc3 R08: 0000000000000001 R09: 00000000000001d0 [ 2378.426656][ T2979] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000005 [ 2378.426666][ T2979] R13: 0000000000000006 R14: 0000000000000003 R15: dffffc0000000000 [ 2378.426685][ T2979] ? __might_fault+0x111/0x140 [ 2378.426716][ T2979] __sys_socketpair+0x120/0x5b0 [ 2378.426743][ T2979] ? __pfx___sys_socketpair+0x10/0x10 [ 2378.426769][ T2979] ? fput+0x79/0x100 [ 2378.426792][ T2979] ? ksys_write+0x1ac/0x250 [ 2378.426811][ T2979] ? __pfx_ksys_write+0x10/0x10 [ 2378.426833][ T2979] __ia32_sys_socketpair+0x95/0x100 [ 2378.426857][ T2979] ? lockdep_hardirqs_on+0x78/0x100 [ 2378.426878][ T2979] __do_fast_syscall_32+0xe3/0x8c0 [ 2378.426902][ T2979] do_fast_syscall_32+0x32/0x70 [ 2378.426925][ T2979] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2378.426947][ T2979] RIP: 0023:0xf707ef6c [ 2378.426963][ T2979] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2378.426979][ T2979] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 2378.426995][ T2979] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000003 [ 2378.427006][ T2979] RDX: 0000000000000000 RSI: 0000000080000080 RDI: 0000000000000000 [ 2378.427017][ T2979] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2378.427027][ T2979] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2378.427043][ T2979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2378.427066][ T2979] [ 2378.625561][T32657] kernel read not supported for file /dsp (pid: 32657 comm: kworker/3:4) [ 2379.052308][T23272] net_ratelimit: 3 callbacks suppressed [ 2379.052322][T23272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2379.260859][ T3000] ------------[ cut here ]------------ [ 2379.262740][ T3000] inode->i_blocks [ 2379.262749][ T3000] WARNING: mm/shmem.c:1430 at shmem_evict_inode+0x8e6/0xbd0, CPU#1: syz.3.7826/3000 [ 2379.266949][ T3000] Modules linked in: [ 2379.268395][ T3000] CPU: 1 UID: 0 PID: 3000 Comm: syz.3.7826 Tainted: G L syzkaller #0 PREEMPT(full) [ 2379.272394][ T3000] Tainted: [L]=SOFTLOCKUP [ 2379.273808][ T3000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2379.276954][ T3000] RIP: 0010:shmem_evict_inode+0x8e6/0xbd0 [ 2379.278801][ T3000] Code: fe e8 ce cc b9 ff 45 85 ff 75 ac e8 14 d2 b9 ff 48 8b 74 24 28 48 8b 7c 24 30 e8 95 79 92 ff e9 e5 fd ff ff e8 fb d1 b9 ff 90 <0f> 0b 90 e9 59 f9 ff ff e8 ed d1 b9 ff 4c 89 e2 48 b8 00 00 00 00 [ 2379.285454][ T3000] RSP: 0000:ffffc9000e9f7980 EFLAGS: 00010293 [ 2379.287379][ T3000] RAX: 0000000000000000 RBX: ffff88806cbb6f78 RCX: ffffffff824e6ade [ 2379.289871][ T3000] RDX: ffff888029a88000 RSI: ffffffff824e7185 RDI: ffff888029a88000 [ 2379.292391][ T3000] RBP: ffffc9000e9f7aa8 R08: 0000000000000007 R09: 0000000000000000 [ 2379.294959][ T3000] R10: 0000000000000008 R11: 0000000000000000 R12: 0000000000000008 [ 2379.297694][ T3000] R13: 0000000000000000 R14: ffff88806cbb6fa8 R15: 0000000000000000 [ 2379.299613][ T2996] lo speed is unknown, defaulting to 1000 [ 2379.300306][ T3000] FS: 0000000000000000(0000) GS:ffff888097240000(0000) knlGS:0000000000000000 [ 2379.300333][ T3000] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2379.308032][ T3000] CR2: 000000008054e000 CR3: 0000000061b13000 CR4: 0000000000352ef0 [ 2379.308559][ T2996] vcan0 speed is unknown, defaulting to 1000 [ 2379.310549][ T3000] Call Trace: [ 2379.314387][ T3000] [ 2379.315455][ T3000] ? inode_wait_for_writeback+0x171/0x390 [ 2379.317454][ T3000] ? __pfx_shmem_evict_inode+0x10/0x10 [ 2379.319348][ T3000] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 2379.321367][ T3000] ? find_held_lock+0x2b/0x80 [ 2379.323014][ T3000] ? evict+0x37e/0xad0 [ 2379.324340][ T3000] ? evict+0x37e/0xad0 [ 2379.325658][ T3000] ? __pfx_shmem_evict_inode+0x10/0x10 [ 2379.327375][ T3000] evict+0x3c2/0xad0 [ 2379.328638][ T3000] ? find_held_lock+0x2b/0x80 [ 2379.330130][ T3000] ? __pfx_evict+0x10/0x10 [ 2379.331596][ T3000] ? iput.part.0+0x5fd/0xf50 [ 2379.333117][ T3000] iput.part.0+0x605/0xf50 [ 2379.334659][ T3000] ? __pfx_inode_just_drop+0x10/0x10 [ 2379.336511][ T3000] iput+0x35/0x40 [ 2379.337803][ T3000] dentry_unlink_inode+0x2a1/0x490 [ 2379.339488][ T3000] __dentry_kill+0x1d0/0x600 [ 2379.340969][ T3000] finish_dput+0x76/0x480 [ 2379.342399][ T3000] dput.part.0+0x456/0x570 [ 2379.343841][ T3000] dput+0x1f/0x30 [ 2379.345032][ T3000] __fput+0x519/0xb40 [ 2379.346349][ T3000] ? _raw_spin_unlock_irq+0x23/0x50 [ 2379.348106][ T3000] task_work_run+0x150/0x240 [ 2379.349642][ T3000] ? __pfx_task_work_run+0x10/0x10 [ 2379.351325][ T3000] ? do_raw_spin_unlock+0x145/0x1e0 [ 2379.353036][ T3000] do_exit+0x8b8/0x2b60 [ 2379.354390][ T3000] ? count_memcg_events_mm.constprop.0+0x109/0x2a0 [ 2379.356510][ T3000] ? find_held_lock+0x2b/0x80 [ 2379.358136][ T3000] ? exc_page_fault+0x6f/0xd0 [ 2379.359748][ T3000] ? __pfx_do_exit+0x10/0x10 [ 2379.361343][ T3000] __ia32_sys_exit+0x42/0x50 [ 2379.362921][ T3000] ia32_sys_call+0x19ef/0x19f0 [ 2379.364515][ T3000] __do_fast_syscall_32+0xe3/0x8c0 [ 2379.366150][ T3000] do_fast_syscall_32+0x32/0x70 [ 2379.367702][ T3000] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2379.369769][ T3000] RIP: 0023:0xf707ef6c [ 2379.371117][ T3000] Code: Unable to access opcode bytes at 0xf707ef42. [ 2379.373405][ T3000] RSP: 002b:00000000f546d4cc EFLAGS: 00000286 ORIG_RAX: 0000000000000001 [ 2379.376102][ T3000] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000f546d5ec [ 2379.378694][ T3000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f546d5f4 [ 2379.381177][ T3000] RBP: 00000000f70a4f29 R08: 0000000000000000 R09: 0000000000000000 [ 2379.383716][ T3000] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2379.386279][ T3000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2379.388936][ T3000] [ 2379.389968][ T3000] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2379.392263][ T3000] CPU: 1 UID: 0 PID: 3000 Comm: syz.3.7826 Tainted: G L syzkaller #0 PREEMPT(full) [ 2379.395628][ T3000] Tainted: [L]=SOFTLOCKUP [ 2379.397016][ T3000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2379.400127][ T3000] Call Trace: [ 2379.401208][ T3000] [ 2379.402160][ T3000] dump_stack_lvl+0x100/0x190 [ 2379.403663][ T3000] vpanic+0x552/0x970 [ 2379.404979][ T3000] ? __pfx_vpanic+0x10/0x10 [ 2379.406437][ T3000] panic+0xd1/0xe0 [ 2379.407638][ T3000] ? __pfx_panic+0x10/0x10 [ 2379.409075][ T3000] ? check_panic_on_warn+0x1f/0x90 [ 2379.410727][ T3000] check_panic_on_warn.cold+0x19/0x34 [ 2379.412593][ T3000] ? shmem_evict_inode+0x8e6/0xbd0 [ 2379.414497][ T3000] __warn.cold+0x191/0x348 [ 2379.416116][ T3000] __report_bug+0x296/0x3d0 [ 2379.417639][ T3000] ? shmem_evict_inode+0x8e6/0xbd0 [ 2379.419286][ T3000] ? __pfx___report_bug+0x10/0x10 [ 2379.420892][ T3000] ? find_held_lock+0x2b/0x80 [ 2379.422390][ T3000] ? inode_set_ctime_current+0x9c/0x8a0 [ 2379.424199][ T3000] ? timestamp_truncate+0x22e/0x2f0 [ 2379.425870][ T3000] ? __pfx_timestamp_truncate+0x10/0x10 [ 2379.427632][ T3000] ? shmem_evict_inode+0x8e6/0xbd0 [ 2379.429265][ T3000] report_bug+0xb2/0x220 [ 2379.430614][ T3000] ? shmem_evict_inode+0x8e6/0xbd0 [ 2379.432276][ T3000] handle_bug+0x16a/0x2a0 [ 2379.433713][ T3000] exc_invalid_op+0x17/0x50 [ 2379.435473][ T3000] asm_exc_invalid_op+0x1a/0x20 [ 2379.437119][ T3000] RIP: 0010:shmem_evict_inode+0x8e6/0xbd0 [ 2379.438894][ T3000] Code: fe e8 ce cc b9 ff 45 85 ff 75 ac e8 14 d2 b9 ff 48 8b 74 24 28 48 8b 7c 24 30 e8 95 79 92 ff e9 e5 fd ff ff e8 fb d1 b9 ff 90 <0f> 0b 90 e9 59 f9 ff ff e8 ed d1 b9 ff 4c 89 e2 48 b8 00 00 00 00 [ 2379.444827][ T3000] RSP: 0000:ffffc9000e9f7980 EFLAGS: 00010293 [ 2379.446746][ T3000] RAX: 0000000000000000 RBX: ffff88806cbb6f78 RCX: ffffffff824e6ade [ 2379.449229][ T3000] RDX: ffff888029a88000 RSI: ffffffff824e7185 RDI: ffff888029a88000 [ 2379.451699][ T3000] RBP: ffffc9000e9f7aa8 R08: 0000000000000007 R09: 0000000000000000 [ 2379.454250][ T3000] R10: 0000000000000008 R11: 0000000000000000 R12: 0000000000000008 [ 2379.456748][ T3000] R13: 0000000000000000 R14: ffff88806cbb6fa8 R15: 0000000000000000 [ 2379.459262][ T3000] ? shmem_evict_inode+0x23e/0xbd0 [ 2379.460940][ T3000] ? shmem_evict_inode+0x8e5/0xbd0 [ 2379.462576][ T3000] ? inode_wait_for_writeback+0x171/0x390 [ 2379.464433][ T3000] ? __pfx_shmem_evict_inode+0x10/0x10 [ 2379.466117][ T3000] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 2379.468028][ T3000] ? find_held_lock+0x2b/0x80 [ 2379.469564][ T3000] ? evict+0x37e/0xad0 [ 2379.470902][ T3000] ? evict+0x37e/0xad0 [ 2379.472249][ T3000] ? __pfx_shmem_evict_inode+0x10/0x10 [ 2379.474028][ T3000] evict+0x3c2/0xad0 [ 2379.475275][ T3000] ? find_held_lock+0x2b/0x80 [ 2379.476766][ T3000] ? __pfx_evict+0x10/0x10 [ 2379.478182][ T3000] ? iput.part.0+0x5fd/0xf50 [ 2379.479653][ T3000] iput.part.0+0x605/0xf50 [ 2379.481078][ T3000] ? __pfx_inode_just_drop+0x10/0x10 [ 2379.482736][ T3000] iput+0x35/0x40 [ 2379.483933][ T3000] dentry_unlink_inode+0x2a1/0x490 [ 2379.485549][ T3000] __dentry_kill+0x1d0/0x600 [ 2379.487010][ T3000] finish_dput+0x76/0x480 [ 2379.488388][ T3000] dput.part.0+0x456/0x570 [ 2379.490082][ T3000] dput+0x1f/0x30 [ 2379.491627][ T3000] __fput+0x519/0xb40 [ 2379.493242][ T3000] ? _raw_spin_unlock_irq+0x23/0x50 [ 2379.495238][ T3000] task_work_run+0x150/0x240 [ 2379.496858][ T3000] ? __pfx_task_work_run+0x10/0x10 [ 2379.498495][ T3000] ? do_raw_spin_unlock+0x145/0x1e0 [ 2379.500165][ T3000] do_exit+0x8b8/0x2b60 [ 2379.501495][ T3000] ? count_memcg_events_mm.constprop.0+0x109/0x2a0 [ 2379.503521][ T3000] ? find_held_lock+0x2b/0x80 [ 2379.505026][ T3000] ? exc_page_fault+0x6f/0xd0 [ 2379.506512][ T3000] ? __pfx_do_exit+0x10/0x10 [ 2379.507982][ T3000] __ia32_sys_exit+0x42/0x50 [ 2379.509465][ T3000] ia32_sys_call+0x19ef/0x19f0 [ 2379.510986][ T3000] __do_fast_syscall_32+0xe3/0x8c0 [ 2379.512616][ T3000] do_fast_syscall_32+0x32/0x70 [ 2379.514181][ T3000] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2379.516155][ T3000] RIP: 0023:0xf707ef6c [ 2379.517463][ T3000] Code: Unable to access opcode bytes at 0xf707ef42. [ 2379.519531][ T3000] RSP: 002b:00000000f546d4cc EFLAGS: 00000286 ORIG_RAX: 0000000000000001 [ 2379.522149][ T3000] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000f546d5ec [ 2379.524625][ T3000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f546d5f4 [ 2379.527098][ T3000] RBP: 00000000f70a4f29 R08: 0000000000000000 R09: 0000000000000000 [ 2379.529622][ T3000] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2379.532144][ T3000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2379.534665][ T3000] [ 2379.536288][ T3000] Kernel Offset: disabled [ 2379.537655][ T3000] Rebooting in 86400 seconds..