last executing test programs: 15.495249503s ago: executing program 0 (id=2809): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x122) fcntl$notify(r2, 0x402, 0x8000003d) mknod(0x0, 0x8001420, 0x0) open$dir(0x0, 0x1, 0x27) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0x8, 0x0, 0x180, 0x0, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffa, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15.212663171s ago: executing program 2 (id=2810): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='\x00', 0x81802) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_INIT(r3, 0x0, 0x0) 15.0150529s ago: executing program 3 (id=2811): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000100)='net/packet\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x40f4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r3, 0x0, 0x0) 14.536445098s ago: executing program 1 (id=2812): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x20040004) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0xfffffffa, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x8001, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x23e, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x86, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf, 0x8}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x1, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0xfcf6, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x40000000, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x13, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x9, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0x0, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x16, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x8}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x80000002}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xbc, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x80007, 0x104, 0x78d, 0xffffcff7, 0x4c0c}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x5b984eb6d5c686a1, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r3, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0x1}], 0x1}, 0x20000885) 13.917580615s ago: executing program 0 (id=2813): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x22401, 0x0) write(r2, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d9", 0x4b) 13.905510267s ago: executing program 2 (id=2814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0xfffffffa, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x8001, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x23e, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x86, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf, 0x8}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x1, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0xfcf6, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x40000000, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x13, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x9, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0x0, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x16, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x8}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x80000002}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xbc, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x80007, 0x104, 0x78d, 0xffffcff7, 0x4c0c}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x5b984eb6d5c686a1, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0x1}], 0x1}, 0x20000885) 12.575046948s ago: executing program 1 (id=2815): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2102, 0x0) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, 0x0) timerfd_create(0x8, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000100)) clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000, 0x40000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x59, 0x7, 0x2000}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000180), 0x4) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f0000000000", 0x15) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000240)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 11.647319404s ago: executing program 2 (id=2816): r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x4, 0x402c1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x20000000) socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) recvfrom$inet(r3, &(0x7f00000001c0)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) read(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.692346994s ago: executing program 1 (id=2817): pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000007c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000800), 0x0, 0x0) read$msr(r4, &(0x7f0000002f40)=""/102392, 0x18ff8) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000ec0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002f00)={0x10, 0xfffffffffffffffe, r6}, 0x66) splice(r0, 0x0, r5, 0x0, 0x10, 0x7) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 10.402602532s ago: executing program 0 (id=2818): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@generic={0x0, 0xffffffffffffffff, 0x180}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x8030, 0xffffffff, {0x77359400}, {0x0, 0x1, 0xf1, 0xa, 0x0, 0x1, "bf231e4b"}}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000400)=0x1) 9.778893618s ago: executing program 3 (id=2819): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) r0 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000600)={0x0, 0x30b5, 0x800, 0x1, 0x158}, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0, &(0x7f00000000c0)=0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{0x0}], 0x1) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x3, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x4, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffa, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r8, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.46908009s ago: executing program 0 (id=2820): setns(0xc9, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) kexec_load(0x80, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x40000000, 0x2000000}], 0xa0000) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xffd8) 7.847333116s ago: executing program 2 (id=2828): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0x18b) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x25) socket(0x2c, 0x4, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@crypt={0x0, 0x2000, 0x0, 0x88, 'crypt\x00', {'aes-xts-plain64', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '0', 0x20, {@ram={'/dev/ram', 0x1}, 0x20, '0'}}}]}) mknodat$dm(0xffffffffffffff9c, &(0x7f00000005c0)='./dm0\x00', 0x6180, r1) openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000600)='./dm0\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) write$binfmt_script(r2, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f00000007c0)=[{0x6, 0x72, 0x0, 0x1007}]}) timer_create(0x2, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 7.501456268s ago: executing program 1 (id=2821): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x100000000000000}, 0x0, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x3) 7.49759523s ago: executing program 3 (id=2830): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x22401, 0x0) write(r2, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d9", 0x4b) 3.658632006s ago: executing program 0 (id=2822): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x159}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000540)=ANY=[], 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000640)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x103080, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, 0x0) r6 = syz_open_procfs(0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) fanotify_mark(r6, 0x445, 0x8001012, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000580)={0x0, 0x7fff, 0x9, 0x0, 0x1d}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2b2, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5631, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x32f4, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) 3.474783455s ago: executing program 1 (id=2823): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x80186803, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 3.376269894s ago: executing program 2 (id=2824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0xfffffffa, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x8001, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x23e, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x86, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf, 0x8}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x1, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0xfcf6, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x40000000, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x13, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x9, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0x0, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x16, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x8}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x80000002}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xbc, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x80007, 0x104, 0x78d, 0xffffcff7, 0x4c0c}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x5b984eb6d5c686a1, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r3, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0x1}], 0x1}, 0x20000885) 3.10744911s ago: executing program 3 (id=2825): socket$nl_generic(0x10, 0x3, 0x10) getpgid(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000002700), &(0x7f00000026c0)={'syz', 0x0}, &(0x7f0000000140)="5b25ad4d73d6528f70", 0x9, 0xfffffffffffffffe) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) add_key$keyring(&(0x7f0000002640), 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4f3bf5835e00000000225121d6958c78cfc0e1f14f1b257f4031f897f3b12ffaada8201e50923df2bb7d50bc559759ae785f8c8564bd270f568b646cf58cb2837303a1d7ad57d8c24d461e2a9eaf1158603987f8e315e1", 0x57}], 0x1) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0xc886) r0 = syz_open_dev$sg(0x0, 0x0, 0x8102) writev(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xa) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 1.650148173s ago: executing program 3 (id=2826): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000580)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f00000005c0)=0x1, 0x4) sendmmsg(r3, &(0x7f0000000600), 0x612, 0x4000010) 1.113561535s ago: executing program 1 (id=2827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0xfffffffa, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x8001, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x23e, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x86, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf, 0x8}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x1, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0xfcf6, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x40000000, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x13, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x9, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0x0, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x16, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x8}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x80000002}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xbc, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x80007, 0x104, 0x78d, 0xffffcff7, 0x4c0c}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x5b984eb6d5c686a1, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r3, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0x1}], 0x1}, 0x20000885) 19.885711ms ago: executing program 0 (id=2829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040004) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0xfffffffa, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x8001, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x23e, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x86, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf, 0x8}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x1, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0xfcf6, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x40000000, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x13, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x9, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0x0, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x16, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x8}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x80000002}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xbc, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x80007, 0x104, 0x78d, 0xffffcff7, 0x4c0c}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x5b984eb6d5c686a1, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r3, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0x1}], 0x1}, 0x20000885) 19.000599ms ago: executing program 2 (id=2831): pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000007c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000800), 0x0, 0x0) read$msr(r4, &(0x7f0000002f40)=""/102392, 0x18ff8) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000ec0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002f00)={0x10, 0xfffffffffffffffe, r6}, 0x66) splice(r0, 0x0, r5, 0x0, 0x10, 0x7) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 0s ago: executing program 3 (id=2832): openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000000c0)={{0x80a0000, 0x0, 0xf000, 0x0, 0x7, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x60000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7000, 0x18, 0x8, 0xd, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x3}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x2000, 0x30000, 0x18, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x1a, 0xa8}, {0x10000, 0x8080000, 0x0, 0x4, 0x0, 0xfa, 0x0, 0x0, 0x0, 0xfc, 0x86, 0x7}, {0x9000, 0x30000, 0x9, 0x0, 0x7, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0xeeee8000, 0x3, 0x82, 0x0, 0x10, 0x4, 0xe, 0x0, 0x0, 0x4}, {0x6000, 0xfffc}, {0x1, 0xfffe}, 0xe0000009, 0x0, 0x0, 0x10, 0x1, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x5]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x2, 0xa, 0xfffffffffffffffd, 0x73, 0x352, 0x2, 0x10000004002004c4, 0x1004, 0x8000000000000004, 0xc595, 0x1, 0x1, 0xd, 0x2000000000000000, 0x5, 0x40008d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000580)={[0x43400078, 0x1000000000, 0x4000001d6, 0x8, 0x3000000, 0x3, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x8, 0x3, 0x3, 0x0, 0xfffffffffffff801], 0x10ff8, 0x100002}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000640)={{0x1000, 0x80a0000, 0x0, 0x10, 0x8, 0x0, 0x0, 0x8b, 0x0, 0xc, 0x6, 0x40}, {0x4, 0xeeef0000, 0x4, 0xff, 0xff, 0x0, 0x0, 0xc, 0x7, 0xff}, {0x1, 0x8080000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x3, 0x0, 0xfc}, {0x1, 0xeeee8000, 0x6, 0x0, 0x81, 0x0, 0x9, 0x0, 0x8, 0x2, 0x6}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x7, 0x0, 0x1, 0x3c, 0x57}, {0x100000, 0xc000, 0xf, 0x78, 0x5, 0x3c, 0x2, 0x0, 0x40, 0xfe, 0x5, 0x4}, {0x4, 0xa000, 0xd, 0x3, 0x3, 0x2, 0xa1, 0x20, 0x0, 0x3}, {0x10000, 0x54000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x2000, 0x3}, {0x30000, 0xfffe}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0x0, 0x8080000, [0x3, 0x0, 0x40000000001]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): 5] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 367.220313][T12445] [ 367.236994][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2055'. [ 367.253933][T12445] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.254074][T12445] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.522876][T12465] syz_tun: MTU not usable for tipc bearer [ 368.522892][T12465] tipc: Disabling bearer [ 369.376884][T12476] 0x0000000000ec-0x0000000000f2 : "" [ 369.407278][T12476] ftl_cs: FTL header corrupt! [ 369.416689][T12478] profile_transition: unconfined exec no attachment [ 369.447400][T12481] syz.0.2062: attempt to access beyond end of device [ 369.447400][T12481] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 369.447456][T12481] gfs2: error -5 reading superblock [ 369.539467][T12484] profile_transition: unconfined exec no attachment [ 369.580375][T12485] profile_transition: unconfined exec no attachment [ 370.503022][T12494] netlink: 'syz.3.2066': attribute type 4 has an invalid length. [ 370.503038][T12494] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2066'. [ 370.503172][T12494] FAULT_INJECTION: forcing a failure. [ 370.503172][T12494] name failslab, interval 1, probability 0, space 0, times 9994 [ 370.503189][T12494] CPU: 3 UID: 0 PID: 12494 Comm: syz.3.2066 Tainted: G L syzkaller #0 PREEMPT(full) [ 370.503207][T12494] Tainted: [L]=SOFTLOCKUP [ 370.503212][T12494] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 370.503219][T12494] Call Trace: [ 370.503223][T12494] [ 370.503228][T12494] dump_stack_lvl+0x100/0x190 [ 370.503250][T12494] should_fail_ex.cold+0x5/0xa [ 370.503270][T12494] should_failslab+0xc2/0x120 [ 370.503290][T12494] __kmalloc_noprof+0xfc/0x840 [ 370.503304][T12494] ? tnode_new+0x2f7/0x350 [ 370.503320][T12494] tnode_new+0x2f7/0x350 [ 370.503335][T12494] resize+0xa60/0x22f0 [ 370.503357][T12494] fib_insert_alias+0x9b3/0xe30 [ 370.503377][T12494] fib_trie_unmerge+0x2af/0xc00 [ 370.503396][T12494] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 370.503414][T12494] ? lock_acquire+0x1d1/0x380 [ 370.503431][T12494] fib_unmerge+0xee/0x510 [ 370.503448][T12494] ? fib_nl2rule_locked+0x3ef/0x740 [ 370.503466][T12494] fib4_rule_configure+0xaba/0x1160 [ 370.503479][T12494] ? fib_nl2rule_locked+0x3fe/0x740 [ 370.503496][T12494] fib_newrule+0x3c3/0x1e50 [ 370.503517][T12494] ? __pfx_fib_newrule+0x10/0x10 [ 370.503532][T12494] ? kfree_skbmem+0x19a/0x210 [ 370.503567][T12494] ? kmem_cache_free+0xe0/0x6c0 [ 370.503586][T12494] ? skb_release_data+0x69d/0x860 [ 370.503617][T12494] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 370.503631][T12494] ? find_held_lock+0x2b/0x80 [ 370.503649][T12494] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 370.503662][T12494] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 370.503676][T12494] ? __pfx_fib_nl_newrule+0x10/0x10 [ 370.503694][T12494] rtnetlink_rcv_msg+0x95e/0xe90 [ 370.503709][T12494] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 370.503731][T12494] netlink_rcv_skb+0x159/0x420 [ 370.503748][T12494] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 370.503764][T12494] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 370.503782][T12494] ? netlink_deliver_tap+0x1ae/0xb50 [ 370.503805][T12494] netlink_unicast+0x668/0x950 [ 370.503819][T12494] ? __pfx_netlink_unicast+0x10/0x10 [ 370.503836][T12494] netlink_sendmsg+0x9ac/0x10c0 [ 370.503851][T12494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.503867][T12494] ? apparmor_socket_sendmsg+0x165/0x280 [ 370.503886][T12494] ? ____sys_sendmsg+0xa99/0xc30 [ 370.503899][T12494] ____sys_sendmsg+0xa99/0xc30 [ 370.503913][T12494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.503926][T12494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.503947][T12494] ___sys_sendmsg+0x190/0x1e0 [ 370.503963][T12494] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.503978][T12494] ? futex_wait+0x11e/0x370 [ 370.503996][T12494] ? find_held_lock+0x2b/0x80 [ 370.504042][T12494] __sys_sendmsg+0x160/0x210 [ 370.504068][T12494] ? __pfx___sys_sendmsg+0x10/0x10 [ 370.504099][T12494] __do_fast_syscall_32+0x14d/0x8e0 [ 370.504123][T12494] do_fast_syscall_32+0x32/0x70 [ 370.504142][T12494] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 370.504158][T12494] RIP: 0023:0xf73aefbc [ 370.504168][T12494] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 370.504179][T12494] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 370.504205][T12494] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001c00 [ 370.504213][T12494] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 370.504221][T12494] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 370.504227][T12494] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 370.504235][T12494] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 370.504251][T12494] [ 370.536211][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'. [ 370.563726][T12497] random: crng reseeded on system resumption [ 372.490856][T12517] comedi comedi0: Minor 47 could not be opened [ 373.524919][T12539] EXT4-fs warning (device sda1): ext4_resize_fs:2020: can't read last block, resize aborted [ 373.579897][T12543] EXT4-fs (sda1): Can't modify superblock whileperforming online resize [ 373.614735][T12542] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 373.627975][T12542] pci 0000:00:00.0: Adding to iommu group 0 [ 376.307364][T12571] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 376.511868][T12578] vlan3: entered promiscuous mode [ 376.511883][T12578] hsr0: entered promiscuous mode [ 376.577121][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2092'. [ 376.578724][T12581] hsr_slave_0: left promiscuous mode [ 376.582212][T12581] hsr_slave_1: left promiscuous mode [ 377.854617][T12592] 0x0000000000ec-0x0000000000f2 : "" [ 377.859740][T12592] ftl_cs: FTL header corrupt! [ 377.870404][T12595] profile_transition: unconfined exec no attachment [ 378.121065][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.121129][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.299942][T12611] profile_transition: unconfined exec no attachment [ 378.377589][T12613] profile_transition: unconfined exec no attachment [ 378.429644][T12614] profile_transition: unconfined exec no attachment [ 378.492642][T12615] profile_transition: unconfined exec no attachment [ 378.655886][T12620] profile_transition: unconfined exec no attachment [ 378.680205][T12621] profile_transition: unconfined exec no attachment [ 379.069632][T12625] i801_smbus 0000:00:1f.3: SMBus using PCI interrupt [ 379.101924][T12625] i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD [ 381.068134][ T5890] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 381.222286][ T5890] usb 5-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 381.223153][ T5890] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.223167][ T5890] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 381.224434][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 381.224446][ T5890] usb 5-1: Product: syz [ 381.224454][ T5890] usb 5-1: Manufacturer: syz [ 381.667822][ T5883] usb 5-1: USB disconnect, device number 14 [ 381.797278][T12665] netlink: 'syz.3.2113': attribute type 4 has an invalid length. [ 381.797292][T12665] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2113'. [ 381.797930][T12665] FAULT_INJECTION: forcing a failure. [ 381.797930][T12665] name failslab, interval 1, probability 0, space 0, times 10 [ 381.797958][T12665] CPU: 0 UID: 0 PID: 12665 Comm: syz.3.2113 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.797982][T12665] Tainted: [L]=SOFTLOCKUP [ 381.797987][T12665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 381.797994][T12665] Call Trace: [ 381.798001][T12665] [ 381.798019][T12665] dump_stack_lvl+0x100/0x190 [ 381.798045][T12665] should_fail_ex.cold+0x5/0xa [ 381.798065][T12665] should_failslab+0xc2/0x120 [ 381.798081][T12665] kmem_cache_alloc_noprof+0x92/0x6a0 [ 381.798094][T12665] ? netlink_deliver_tap+0x103/0xb50 [ 381.798115][T12665] ? skb_clone+0x187/0x3f0 [ 381.798130][T12665] skb_clone+0x187/0x3f0 [ 381.798142][T12665] netlink_deliver_tap+0x82f/0xb50 [ 381.798164][T12665] netlink_unicast+0x708/0x950 [ 381.798178][T12665] ? __pfx_netlink_unicast+0x10/0x10 [ 381.798194][T12665] netlink_sendmsg+0x9ac/0x10c0 [ 381.798209][T12665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.798225][T12665] ? apparmor_socket_sendmsg+0x165/0x280 [ 381.798246][T12665] ? ____sys_sendmsg+0xa99/0xc30 [ 381.798259][T12665] ____sys_sendmsg+0xa99/0xc30 [ 381.798272][T12665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.798285][T12665] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.798306][T12665] ___sys_sendmsg+0x190/0x1e0 [ 381.798322][T12665] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.798351][T12665] ? futex_wait+0x11e/0x370 [ 381.798370][T12665] ? find_held_lock+0x2b/0x80 [ 381.798397][T12665] __sys_sendmsg+0x160/0x210 [ 381.798417][T12665] ? __pfx___sys_sendmsg+0x10/0x10 [ 381.798444][T12665] __do_fast_syscall_32+0x14d/0x8e0 [ 381.798467][T12665] do_fast_syscall_32+0x32/0x70 [ 381.798486][T12665] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 381.798506][T12665] RIP: 0023:0xf73aefbc [ 381.798516][T12665] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 381.798528][T12665] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 381.798541][T12665] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 381.798549][T12665] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 381.798556][T12665] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 381.798563][T12665] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 381.798571][T12665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 381.798587][T12665] [ 381.803256][T12666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2112'. [ 381.823825][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2113'. [ 383.485866][T12694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2118'. [ 385.150229][T12713] ceph: No mds server is up or the cluster is laggy [ 385.166615][ T42] libceph: connect (1)[c::]:6789 error -101 [ 385.168170][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 387.265122][T12741] i801_smbus 0000:00:1f.3: SMBus using PCI interrupt [ 387.299285][T12741] i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD [ 387.671876][T12744] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 389.108841][ T50] libceph: connect (1)[c::]:6789 error -101 [ 389.109805][ T50] libceph: mon0 (1)[c::]:6789 connect error [ 389.136074][T12766] ceph: No mds server is up or the cluster is laggy [ 389.143606][ T50] libceph: connect (1)[c::]:6789 error -101 [ 389.145250][ T50] libceph: mon0 (1)[c::]:6789 connect error [ 390.363474][T12779] jffs2: notice: (12779) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 390.373943][T12777] 8021q: adding VLAN 0 to HW filter on device bond3 [ 390.409273][T12777] bond3: (slave ip6gretap1): making interface the new active one [ 390.410271][T12777] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 390.439514][T12777] bond3: (slave vlan2): the slave hw address is in use by the bond; giving it the hw address of ip6gretap1 [ 390.449080][T12783] profile_transition: unconfined exec no attachment [ 393.433690][T12807] i801_smbus 0000:00:1f.3: SMBus using PCI interrupt [ 393.448468][T12807] i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD [ 393.686239][T12815] profile_transition: unconfined exec no attachment [ 393.721052][T12816] profile_transition: unconfined exec no attachment [ 394.892229][T12827] ceph: No mds server is up or the cluster is laggy [ 395.887396][ T42] libceph: connect (1)[c::]:6789 error -101 [ 395.887495][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 395.951176][T12837] jffs2: notice: (12837) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 396.020778][T12840] profile_transition: unconfined exec no attachment [ 397.051887][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2158'. [ 400.697252][T12888] jffs2: notice: (12888) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 400.711777][ T43] audit: type=1326 audit(1794231195.349:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=12889 comm="syz.1.2177" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f26fbc code=0x0 [ 400.805571][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 400.806641][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 400.821866][T12898] profile_transition: unconfined exec no attachment [ 400.833922][T12894] ceph: No mds server is up or the cluster is laggy [ 401.805411][T12913] EXT4-fs warning (device sda1): ext4_resize_fs:2020: can't read last block, resize aborted [ 402.952858][T12932] EXT4-fs warning (device sda1): ext4_resize_fs:2020: can't read last block, resize aborted [ 404.867650][T12953] netlink: 'syz.1.2182': attribute type 2 has an invalid length. [ 404.867672][T12953] netlink: 723 bytes leftover after parsing attributes in process `syz.1.2182'. [ 405.103128][ T43] audit: type=1326 audit(1794231199.739:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=12955 comm="syz.2.2183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52fbc code=0x7ffc0000 [ 405.103324][ T43] audit: type=1326 audit(1794231199.739:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=12955 comm="syz.2.2183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52fbc code=0x7ffc0000 [ 405.104862][ T43] audit: type=1326 audit(1794231199.739:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=12955 comm="syz.2.2183" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f52fbc code=0x7ffc0000 [ 405.104905][ T43] audit: type=1326 audit(1794231199.739:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=12955 comm="syz.2.2183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52fbc code=0x7ffc0000 [ 405.104952][ T43] audit: type=1326 audit(1794231199.739:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=12955 comm="syz.2.2183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52fbc code=0x7ffc0000 [ 405.106841][ T43] audit: type=1326 audit(1794231199.739:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=12955 comm="syz.2.2183" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f52fbc code=0x7ffc0000 [ 405.106948][ T43] audit: type=1326 audit(1794231199.739:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=12955 comm="syz.2.2183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52fbc code=0x7ffc0000 [ 405.107037][ T43] audit: type=1326 audit(1794231199.739:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=12955 comm="syz.2.2183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52fbc code=0x7ffc0000 [ 405.184684][ T43] audit: type=1326 audit(1794231199.819:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=12955 comm="syz.2.2183" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f52fbc code=0x7ffc0000 [ 407.276255][T12981] profile_transition: unconfined exec no attachment [ 407.301714][T12983] profile_transition: unconfined exec no attachment [ 407.983871][T12992] jffs2: notice: (12992) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 408.070060][T12997] profile_transition: unconfined exec no attachment [ 408.993865][T13003] netlink: 'syz.2.2196': attribute type 1 has an invalid length. [ 409.029579][T13003] 8021q: adding VLAN 0 to HW filter on device bond4 [ 409.046676][T13003] bond4: (slave dummy0): Enslaving as a backup interface with an up link [ 409.048950][T13003] netlink: 'syz.2.2196': attribute type 10 has an invalid length. [ 409.048965][T13003] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2196'. [ 409.049062][T13003] dummy0: entered promiscuous mode [ 409.055798][T13003] bond4: (slave dummy0): Releasing backup interface qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 409.409426][T13016] profile_transition: unconfined exec no attachment [ 409.439413][T13017] profile_transition: unconfined exec no attachment [ 411.890632][T13040] TC_ACT_REPEAT abuse ? [ 412.010223][T13042] syzkaller0: entered promiscuous mode [ 412.010245][T13042] syzkaller0: entered allmulticast mode [ 412.015335][T13042] TC_ACT_REPEAT abuse ? [ 412.996892][T13052] rxe_eth0 speed is unknown, defaulting to 1000 [ 416.590874][T13098] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 416.863692][T13111] profile_transition: unconfined exec no attachment [ 417.119706][T13113] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2227'. [ 417.248281][T13116] input: syz0 as /devices/virtual/input/input36 [ 418.367949][T13124] profile_transition: unconfined exec no attachment [ 418.444307][T13128] rxe_eth0 speed is unknown, defaulting to 1000 [ 418.774562][T13123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2240'. [ 420.430080][T13156] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 420.508827][T13163] netlink: 'syz.0.2242': attribute type 1 has an invalid length. [ 420.556173][T13163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.622255][T13163] bond0: (slave dummy0): Enslaving as a backup interface with an up link [ 420.628264][T13163] netlink: 'syz.0.2242': attribute type 10 has an invalid length. [ 420.628278][T13163] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2242'. [ 420.628343][T13163] dummy0: entered promiscuous mode [ 420.650441][T13163] bond0: (slave dummy0): Releasing backup interface [ 423.643122][T13206] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 423.777436][T13212] profile_transition: unconfined exec no attachment [ 423.923159][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 423.924384][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 423.942091][T13215] ceph: No mds server is up or the cluster is laggy [ 424.885556][T13223] rxe_eth0 speed is unknown, defaulting to 1000 [ 426.199548][T13247] 0x000000000000-0x000000010000 : "" [ 426.201134][T13247] ftl_cs: FTL header not found. [ 426.247249][ T3412] libceph: connect (1)[c::]:6789 error -101 [ 426.247344][ T3412] libceph: mon0 (1)[c::]:6789 connect error [ 426.247831][T13249] ceph: No mds server is up or the cluster is laggy [ 426.498347][ T3412] libceph: connect (1)[c::]:6789 error -101 [ 426.498506][ T3412] libceph: mon0 (1)[c::]:6789 connect error [ 426.639655][T13257] profile_transition: unconfined exec no attachment [ 428.000106][T13270] tc action pedit 'at' offset 5 out of bounds [ 428.000120][T13270] tc action pedit 'at' offset 5 out of bounds [ 428.000127][T13270] tc action pedit 'at' offset 5 out of bounds [ 428.000133][T13270] tc action pedit 'at' offset 5 out of bounds [ 428.000139][T13270] tc action pedit 'at' offset 5 out of bounds [ 428.000144][T13270] tc action pedit 'at' offset 5 out of bounds [ 428.000150][T13270] tc action pedit 'at' offset 5 out of bounds [ 428.000156][T13270] tc action pedit 'at' offset 5 out of bounds [ 428.000161][T13270] tc action pedit 'at' offset 5 out of bounds [ 428.000167][T13270] tc action pedit 'at' offset 5 out of bounds [ 428.000178][T13270] 0: reclassify loop, rule prio 0, protocol 800 [ 429.273403][T13281] trusted_key: encrypted_key: insufficient parameters specified [ 429.276456][T13281] Could not find key with description: [syz] [ 429.276470][T13281] process_request_key_err: No key [ 429.276478][T13281] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 429.276487][T13281] One or more global auth toks could not properly register; rc = [-2] [ 429.276515][T13281] Error validating options; rc = [-2] [ 429.277186][T13281] kernel profiling enabled (shift: 7) [ 430.991590][T13293] profile_transition: unconfined exec no attachment [ 431.022940][T13300] profile_transition: unconfined exec no attachment [ 431.632286][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 431.637373][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 431.660885][T13313] ceph: No mds server is up or the cluster is laggy [ 432.633479][T13323] profile_transition: unconfined exec no attachment [ 432.690271][T13324] profile_transition: unconfined exec no attachment [ 432.766610][T13326] profile_transition: unconfined exec no attachment [ 432.794432][T13327] profile_transition: unconfined exec no attachment [ 432.823806][T13329] profile_transition: unconfined exec no attachment [ 432.842175][T13332] profile_transition: unconfined exec no attachment [ 432.855750][T13333] profile_transition: unconfined exec no attachment [ 432.893072][T13334] profile_transition: unconfined exec no attachment [ 432.960034][T13337] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 432.960270][T13337] block device autoloading is deprecated and will be removed. [ 432.990500][T13337] md: could not open device unknown-block(1,5). [ 432.990553][T13337] md: md_import_device returned -16 [ 435.394108][ T43] kauditd_printk_skb: 30 callbacks suppressed [ 435.394193][ T43] audit: type=1326 audit(1794231230.029:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13336 comm="syz.3.2286" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73aefbc code=0x0 [ 435.514994][T13366] rxe_eth0 speed is unknown, defaulting to 1000 [ 436.987692][T13384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2294'. [ 437.230206][ T3412] libceph: connect (1)[c::]:6789 error -101 [ 437.233763][ T3412] libceph: mon0 (1)[c::]:6789 connect error [ 437.256796][T13389] ceph: No mds server is up or the cluster is laggy [ 439.570100][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.570152][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.310743][T13423] profile_transition: unconfined exec no attachment [ 440.763656][T13427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2303'. [ 442.328484][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 442.328650][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 442.356608][T13442] ceph: No mds server is up or the cluster is laggy [ 442.636632][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 442.642084][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 443.165374][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 443.167510][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 443.303118][T13450] jffs2: notice: (13450) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 443.343623][T13452] rxe_eth0 speed is unknown, defaulting to 1000 [ 444.608671][T13463] trusted_key: encrypted_key: insufficient parameters specified [ 444.618293][T13463] Could not find key with description: [syz] [ 444.618305][T13463] process_request_key_err: No key [ 444.618310][T13463] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 444.618316][T13463] One or more global auth toks could not properly register; rc = [-2] [ 444.618334][T13463] Error validating options; rc = [-2] [ 444.638352][T13463] FAULT_INJECTION: forcing a failure. [ 444.638352][T13463] name failslab, interval 1, probability 0, space 0, times 9 [ 444.638373][T13463] CPU: 0 UID: 0 PID: 13463 Comm: syz.1.2314 Tainted: G L syzkaller #0 PREEMPT(full) [ 444.638390][T13463] Tainted: [L]=SOFTLOCKUP [ 444.638395][T13463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 444.638402][T13463] Call Trace: [ 444.638407][T13463] [ 444.638412][T13463] dump_stack_lvl+0x100/0x190 [ 444.638443][T13463] should_fail_ex.cold+0x5/0xa [ 444.638462][T13463] should_failslab+0xc2/0x120 [ 444.638480][T13463] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 444.638494][T13463] ? alloc_inode+0x183/0x250 [ 444.638515][T13463] alloc_inode+0x183/0x250 [ 444.638533][T13463] iget_locked+0x1d4/0x6c0 [ 444.638544][T13463] ? __pfx_iget_locked+0x10/0x10 [ 444.638562][T13463] ? kernfs_root+0xee/0x2a0 [ 444.638580][T13463] ? kernfs_root+0xee/0x2a0 [ 444.638601][T13463] kernfs_get_inode+0x46/0x470 [ 444.638618][T13463] kernfs_iop_lookup+0x1a7/0x2d0 [ 444.638637][T13463] ? __pfx_kernfs_iop_lookup+0x10/0x10 [ 444.638656][T13463] lookup_open+0xb29/0x19e0 [ 444.638668][T13463] ? __d_lookup+0x191/0x4a0 [ 444.638685][T13463] path_openat+0xe75/0x23f0 [ 444.638703][T13463] ? __pfx_path_openat+0x10/0x10 [ 444.638722][T13463] do_file_open+0x20e/0x430 [ 444.638738][T13463] ? __pfx_do_file_open+0x10/0x10 [ 444.638764][T13463] ? _raw_spin_unlock+0x28/0x50 [ 444.638779][T13463] ? alloc_fd+0x471/0x7a0 [ 444.638798][T13463] do_sys_openat2+0x163/0x1d0 [ 444.638817][T13463] ? __pfx_do_sys_openat2+0x10/0x10 [ 444.638835][T13463] ? __local_bh_enable_ip+0xa5/0x120 [ 444.638852][T13463] __ia32_compat_sys_openat+0x12d/0x210 [ 444.638871][T13463] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 444.638897][T13463] __do_fast_syscall_32+0x14d/0x8e0 [ 444.638919][T13463] do_fast_syscall_32+0x32/0x70 [ 444.638937][T13463] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 444.638952][T13463] RIP: 0023:0xf7f26fbc [ 444.638962][T13463] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 444.638973][T13463] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 444.638985][T13463] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000580 [ 444.638993][T13463] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 444.639000][T13463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 444.639007][T13463] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 444.639014][T13463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 444.639029][T13463] [ 445.629041][T13473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2319'. [ 447.196053][T13483] jffs2: notice: (13483) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 447.207611][T13483] Mount JFS Failure: -5 [ 447.207622][T13483] jfs_mount failed w/return code = -5 [ 447.710320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 448.105800][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804023cc00: rx timeout, send abort [ 448.607098][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804023cc00: abort rx timeout. Force session deactivation [ 448.609195][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804023c800: rx timeout, send abort [ 448.732059][T13502] rxe_eth0 speed is unknown, defaulting to 1000 [ 448.971228][T13520] profile_transition: unconfined exec no attachment [ 449.109271][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804023c800: abort rx timeout. Force session deactivation [ 449.858586][T13539] profile_transition: unconfined exec no attachment [ 450.299406][T13543] 0x000000000000-0x000000010000 : "" [ 450.301782][T13543] ftl_cs: FTL header not found. [ 450.301866][T13543] FAULT_INJECTION: forcing a failure. [ 450.301866][T13543] name failslab, interval 1, probability 0, space 0, times 8 [ 450.301883][T13543] CPU: 0 UID: 0 PID: 13543 Comm: syz.1.2330 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.301901][T13543] Tainted: [L]=SOFTLOCKUP [ 450.301906][T13543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 450.301913][T13543] Call Trace: [ 450.301917][T13543] [ 450.301922][T13543] dump_stack_lvl+0x100/0x190 [ 450.301946][T13543] should_fail_ex.cold+0x5/0xa [ 450.301965][T13543] should_failslab+0xc2/0x120 [ 450.301981][T13543] __kmalloc_noprof+0xfc/0x840 [ 450.301994][T13543] ? group_cpus_evenly+0x195/0x660 [ 450.302010][T13543] group_cpus_evenly+0x195/0x660 [ 450.302023][T13543] ? __pfx_group_cpus_evenly+0x10/0x10 [ 450.302042][T13543] blk_mq_map_queues+0x9d/0x430 [ 450.302060][T13543] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 450.302075][T13543] ? trace_kmalloc+0xeb/0x110 [ 450.302090][T13543] ? __kasan_kmalloc+0xaa/0xb0 [ 450.302104][T13543] ? __kmalloc_node_noprof+0x360/0x870 [ 450.302118][T13543] blk_mq_update_queue_map+0x305/0x3a0 [ 450.302134][T13543] blk_mq_alloc_tag_set+0x61a/0x1320 [ 450.302148][T13543] ? __asan_memset+0x23/0x50 [ 450.302161][T13543] add_mtd_blktrans_dev+0x6a1/0x1520 [ 450.302206][T13543] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 450.302235][T13543] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 450.302254][T13543] ? mtdblock_add_mtd+0x4a/0x270 [ 450.302273][T13543] mtdblock_add_mtd+0x1cc/0x270 [ 450.302285][T13543] blktrans_notify_add+0xa2/0xf0 [ 450.302304][T13543] add_mtd_device+0xb6d/0x1820 [ 450.302322][T13543] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 450.302342][T13543] ? __pfx_add_mtd_device+0x10/0x10 [ 450.302361][T13543] mtd_add_partition+0x376/0x6a0 [ 450.302379][T13543] ? __pfx_mtd_add_partition+0x10/0x10 [ 450.302396][T13543] ? __might_fault+0xc5/0x140 [ 450.302411][T13543] ? __might_fault+0xc5/0x140 [ 450.302431][T13543] mtdchar_blkpg_ioctl+0x207/0x250 [ 450.302449][T13543] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 450.302480][T13543] mtdchar_compat_ioctl+0x3d6/0x440 [ 450.302500][T13543] ? find_held_lock+0x2b/0x80 [ 450.302518][T13543] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 450.302562][T13543] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 450.302581][T13543] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 450.302598][T13543] __do_fast_syscall_32+0x14d/0x8e0 [ 450.302617][T13543] ? lockdep_hardirqs_on+0x7d/0x110 [ 450.302637][T13543] do_fast_syscall_32+0x32/0x70 [ 450.302657][T13543] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 450.302673][T13543] RIP: 0023:0xf7f26fbc [ 450.302684][T13543] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 450.302696][T13543] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 450.302709][T13543] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000001269 [ 450.302717][T13543] RDX: 00000000800009c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 450.302724][T13543] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 450.302731][T13543] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 450.302738][T13543] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 450.302754][T13543] [ 450.452970][T13547] profile_transition: unconfined exec no attachment [ 451.254449][T13508] cgroup: fork rejected by pids controller in /syz0 [ 451.324285][T13556] profile_transition: unconfined exec no attachment [ 451.367130][T13557] profile_transition: unconfined exec no attachment [ 451.426748][T13559] profile_transition: unconfined exec no attachment [ 451.445947][T13560] profile_transition: unconfined exec no attachment [ 451.525285][T13562] profile_transition: unconfined exec no attachment [ 451.555728][T13563] profile_transition: unconfined exec no attachment [ 451.609979][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2331'. [ 452.617244][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a7c3400: rx timeout, send abort [ 453.117355][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a7c3400: abort rx timeout. Force session deactivation [ 453.117951][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a7c3c00: rx timeout, send abort [ 453.618040][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a7c3c00: abort rx timeout. Force session deactivation [ 455.102657][T13592] netlink: 'syz.3.2343': attribute type 1 has an invalid length. [ 455.155305][T13594] sctp: [Deprecated]: syz.3.2343 (pid 13594) Use of int in max_burst socket option. [ 455.155305][T13594] Use struct sctp_assoc_value instead [ 455.164168][ T5883] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 455.318951][ T5883] usb 5-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=7.04 [ 455.325049][ T5883] usb 5-1: Dual-Role OTG device on HNP port [ 455.326336][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.463062][ T5883] gspca_main: spca501-2.14.0 probing 0000:0000 [ 455.464174][ T5883] gspca_spca501: reg write: error -32 [ 455.464193][ T5883] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 455.464751][ T5883] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 455.603250][ T5883] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 456.808077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 456.828062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 456.848046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 456.945046][T13613] 0x000000000000-0x000000010000 : "" [ 456.951805][T13613] ftl_cs: FTL header not found. [ 456.963503][T13616] profile_transition: unconfined exec no attachment [ 457.628817][ C3] vcan0: j1939_tp_rxtimer: 0xffff888042898800: rx timeout, send abort [ 457.738159][T13619] team0: Port device xfrm0 removed [ 457.984202][T13619] bond0: (slave geneve2): Releasing active interface [ 458.034530][T13626] rxe_eth0 speed is unknown, defaulting to 1000 [ 458.128876][ C3] vcan0: j1939_tp_rxtimer: 0xffff888042898400: rx timeout, send abort [ 458.128901][ C3] vcan0: j1939_tp_rxtimer: 0xffff888042898800: abort rx timeout. Force session deactivation [ 458.440328][T13633] jffs2: notice: (13633) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 458.449866][T13633] Mount JFS Failure: -5 [ 458.449877][T13633] jfs_mount failed w/return code = -5 [ 458.628935][ C3] vcan0: j1939_tp_rxtimer: 0xffff888042898400: abort rx timeout. Force session deactivation [ 459.589673][T13655] 0x000000000000-0x000000010000 : "" [ 459.678612][T13655] ftl_cs: FTL header not found. [ 459.899304][T13656] profile_transition: unconfined exec no attachment [ 460.722957][T13667] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 460.722987][T13667] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 460.725058][T13667] vhci_hcd vhci_hcd.0: Device attached [ 460.936365][ T43] audit: type=1326 audit(1794231255.569:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13659 comm="syz.3.2363" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 460.936632][ T43] audit: type=1326 audit(1794231255.569:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13659 comm="syz.3.2363" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf73aefd8 code=0x7ffc0000 [ 460.936870][ T43] audit: type=1326 audit(1794231255.569:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13659 comm="syz.3.2363" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 460.937086][ T43] audit: type=1326 audit(1794231255.569:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13659 comm="syz.3.2363" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf73aefd8 code=0x7ffc0000 [ 460.937292][ T43] audit: type=1326 audit(1794231255.569:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13659 comm="syz.3.2363" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 460.937542][ T43] audit: type=1326 audit(1794231255.569:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13659 comm="syz.3.2363" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 460.937751][ T43] audit: type=1326 audit(1794231255.569:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13659 comm="syz.3.2363" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf73aefd8 code=0x7ffc0000 [ 460.937972][ T43] audit: type=1326 audit(1794231255.569:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13659 comm="syz.3.2363" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 460.938166][ T50] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 461.008405][ T50] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 461.014645][ T43] audit: type=1326 audit(1794231255.649:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13659 comm="syz.3.2363" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf73aefd8 code=0x7ffc0000 [ 461.014687][ T43] audit: type=1326 audit(1794231255.649:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13659 comm="syz.3.2363" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 461.504283][T13668] vhci_hcd: connection reset by peer [ 461.524937][ T5861] vhci_hcd vhci_hcd.1: stop threads [ 461.532155][ T5861] vhci_hcd vhci_hcd.1: release socket [ 461.545802][ T5861] vhci_hcd vhci_hcd.1: disconnect device [ 464.045388][T13694] profile_transition: unconfined exec no attachment [ 464.199319][T13702] profile_transition: unconfined exec no attachment [ 464.225229][T13704] profile_transition: unconfined exec no attachment [ 464.228118][ T5897] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 465.236192][T13716] 0x000000000000-0x000000010000 : "" [ 465.241198][T13716] ftl_cs: FTL header not found. [ 465.241448][T13716] FAULT_INJECTION: forcing a failure. [ 465.241448][T13716] name failslab, interval 1, probability 0, space 0, times 7 [ 465.241475][T13716] CPU: 2 UID: 0 PID: 13716 Comm: syz.2.2380 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.241503][T13716] Tainted: [L]=SOFTLOCKUP [ 465.241510][T13716] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 465.241521][T13716] Call Trace: [ 465.241528][T13716] [ 465.241550][T13716] dump_stack_lvl+0x100/0x190 [ 465.241587][T13716] should_fail_ex.cold+0x5/0xa [ 465.241614][T13716] should_failslab+0xc2/0x120 [ 465.241638][T13716] __kmalloc_cache_node_noprof+0x94/0x710 [ 465.241663][T13716] ? sbitmap_queue_init_node+0x291/0x4a0 [ 465.241688][T13716] sbitmap_queue_init_node+0x291/0x4a0 [ 465.241711][T13716] blk_mq_init_tags+0x184/0x300 [ 465.241736][T13716] blk_mq_alloc_map_and_rqs+0x244/0xe20 [ 465.241776][T13716] ? blk_mq_update_queue_map+0x227/0x3a0 [ 465.241803][T13716] blk_mq_alloc_tag_set+0x7ff/0x1320 [ 465.241833][T13716] add_mtd_blktrans_dev+0x6a1/0x1520 [ 465.241868][T13716] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 465.241914][T13716] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 465.241943][T13716] ? mtdblock_add_mtd+0x4a/0x270 [ 465.241965][T13716] mtdblock_add_mtd+0x1cc/0x270 [ 465.241986][T13716] blktrans_notify_add+0xa2/0xf0 [ 465.242015][T13716] add_mtd_device+0xb6d/0x1820 [ 465.242043][T13716] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 465.242074][T13716] ? __pfx_add_mtd_device+0x10/0x10 [ 465.242104][T13716] mtd_add_partition+0x376/0x6a0 [ 465.242132][T13716] ? __pfx_mtd_add_partition+0x10/0x10 [ 465.242156][T13716] ? __might_fault+0xc5/0x140 [ 465.242179][T13716] ? __might_fault+0xc5/0x140 [ 465.242212][T13716] mtdchar_blkpg_ioctl+0x207/0x250 [ 465.242240][T13716] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 465.242289][T13716] mtdchar_compat_ioctl+0x3d6/0x440 [ 465.242319][T13716] ? find_held_lock+0x2b/0x80 [ 465.242346][T13716] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 465.242387][T13716] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 465.242415][T13716] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 465.242440][T13716] __do_fast_syscall_32+0x14d/0x8e0 [ 465.242467][T13716] ? lockdep_hardirqs_on+0x7d/0x110 [ 465.242495][T13716] do_fast_syscall_32+0x32/0x70 [ 465.242523][T13716] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 465.242547][T13716] RIP: 0023:0xf7f52fbc [ 465.242564][T13716] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 465.242581][T13716] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 465.242601][T13716] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000001269 [ 465.242614][T13716] RDX: 00000000800009c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 465.242625][T13716] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 465.242636][T13716] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 465.242648][T13716] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 465.242672][T13716] [ 465.247728][T13716] blk-mq: reduced tag depth (2 -> 1) [ 465.254923][T13717] profile_transition: unconfined exec no attachment [ 465.560812][ T5897] usb 6-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 465.561339][ T5897] usb 6-1: config 0 has no interfaces? [ 465.563370][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.563392][ T5897] usb 6-1: Product: syz [ 465.563405][ T5897] usb 6-1: Manufacturer: syz [ 465.563419][ T5897] usb 6-1: SerialNumber: syz [ 465.565526][ T5897] usb 6-1: config 0 descriptor?? [ 466.118273][ T50] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 467.269034][ T3412] usb 6-1: USB disconnect, device number 13 [ 467.369293][T13732] md: could not open device unknown-block(1,1). [ 467.369953][T13732] md: md_import_device returned -16 [ 468.641703][T13744] profile_transition: unconfined exec no attachment [ 468.804048][T13752] profile_transition: unconfined exec no attachment [ 469.707495][ T43] kauditd_printk_skb: 158 callbacks suppressed [ 469.707508][ T43] audit: type=1326 audit(1794231264.339:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13763 comm="syz.1.2393" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f26fbc code=0x0 [ 469.869505][T13771] syzkaller1: entered promiscuous mode [ 469.869528][T13771] syzkaller1: entered allmulticast mode [ 470.028099][ T5940] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 470.193641][ T5940] usb 6-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 470.204483][ T5940] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 470.204533][ T5940] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 470.204573][ T5940] usb 6-1: config 0 interface 0 has no altsetting 0 [ 470.248210][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 470.248347][ T5940] usb 6-1: Product: syz [ 470.248357][ T5940] usb 6-1: Manufacturer: syz [ 470.248365][ T5940] usb 6-1: SerialNumber: syz [ 470.310036][ T5940] usb 6-1: config 0 descriptor?? [ 470.317749][T13765] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 470.465579][ T5940] usb 6-1: selecting invalid altsetting 0 [ 471.965158][T13788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2401'. [ 472.056443][T13790] FAULT_INJECTION: forcing a failure. [ 472.056443][T13790] name failslab, interval 1, probability 0, space 0, times 6 [ 472.056466][T13790] CPU: 0 UID: 0 PID: 13790 Comm: syz.0.2409 Tainted: G L syzkaller #0 PREEMPT(full) [ 472.056485][T13790] Tainted: [L]=SOFTLOCKUP [ 472.056492][T13790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 472.056503][T13790] Call Trace: [ 472.056509][T13790] [ 472.056517][T13790] dump_stack_lvl+0x100/0x190 [ 472.056554][T13790] should_fail_ex.cold+0x5/0xa [ 472.056586][T13790] should_failslab+0xc2/0x120 [ 472.056612][T13790] kmem_cache_alloc_noprof+0x92/0x6a0 [ 472.056631][T13790] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 472.056648][T13790] ? acpi_ps_alloc_op+0x212/0x2b0 [ 472.056665][T13790] acpi_ps_alloc_op+0x212/0x2b0 [ 472.056676][T13790] ? acpi_ut_status_exit+0x111/0x1c0 [ 472.056691][T13790] acpi_ps_create_op+0x4b3/0xd10 [ 472.056705][T13790] ? __pfx_acpi_ps_create_op+0x10/0x10 [ 472.056716][T13790] ? acpi_ut_create_generic_state+0x61/0xc0 [ 472.056730][T13790] ? acpi_ut_status_exit+0x111/0x1c0 [ 472.056747][T13790] acpi_ps_parse_loop+0x93f/0x26e0 [ 472.056763][T13790] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 472.056774][T13790] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 472.056787][T13790] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 472.056802][T13790] ? acpi_ut_create_thread_state+0x6d/0x170 [ 472.056820][T13790] acpi_ps_parse_aml+0x81e/0x1120 [ 472.056836][T13790] acpi_ps_execute_method+0x5c4/0xe90 [ 472.056854][T13790] acpi_ns_evaluate+0x640/0x1670 [ 472.056872][T13790] acpi_ut_evaluate_object+0xf7/0x610 [ 472.056898][T13790] acpi_rs_get_prt_method_data+0xa0/0x150 [ 472.056925][T13790] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 472.056951][T13790] ? acpi_ut_status_exit+0x111/0x1c0 [ 472.056974][T13790] ? acpi_rs_validate_parameters+0x104/0x210 [ 472.056997][T13790] acpi_get_irq_routing_table+0xb8/0x140 [ 472.057014][T13790] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 472.057032][T13790] ? do_raw_spin_lock+0x128/0x260 [ 472.057049][T13790] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 472.057068][T13790] ? do_raw_spin_lock+0x128/0x260 [ 472.057092][T13790] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 472.057110][T13790] ? mark_held_locks+0x40/0x70 [ 472.057124][T13790] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 472.057144][T13790] acpi_pci_irq_lookup+0x8e/0x6b0 [ 472.057162][T13790] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 472.057183][T13790] acpi_pci_irq_disable+0x1a8/0x360 [ 472.057199][T13790] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 472.057216][T13790] pcibios_disable_device+0x89/0xb0 [ 472.057234][T13790] do_pci_disable_device+0x9f/0x100 [ 472.057249][T13790] ? __pfx_do_pci_disable_device+0x10/0x10 [ 472.057266][T13790] ? pci_release_region.part.0+0x15b/0x2e0 [ 472.057285][T13790] pci_disable_device+0x130/0x270 [ 472.057301][T13790] virtio_pci_remove+0xcf/0x110 [ 472.057317][T13790] pci_device_remove+0xb2/0x1d0 [ 472.057328][T13790] ? __pfx_pci_device_remove+0x10/0x10 [ 472.057342][T13790] device_remove+0xcb/0x180 [ 472.057380][T13790] device_release_driver_internal+0x441/0x610 [ 472.057398][T13790] pci_stop_bus_device+0x120/0x160 [ 472.057413][T13790] pci_stop_and_remove_bus_device+0x58/0xa0 [ 472.057429][T13790] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 472.057444][T13790] remove_store+0x123/0x140 [ 472.057461][T13790] ? __pfx_remove_store+0x10/0x10 [ 472.057478][T13790] ? find_held_lock+0x2b/0x80 [ 472.057496][T13790] ? sysfs_file_kobj+0xe4/0x290 [ 472.057513][T13790] ? sysfs_file_kobj+0xe4/0x290 [ 472.057530][T13790] ? __pfx_remove_store+0x10/0x10 [ 472.057545][T13790] dev_attr_store+0x58/0x80 [ 472.057558][T13790] ? __pfx_dev_attr_store+0x10/0x10 [ 472.057572][T13790] sysfs_kf_write+0xf2/0x150 [ 472.057591][T13790] kernfs_fop_write_iter+0x3e0/0x5f0 [ 472.057604][T13790] ? __pfx_sysfs_kf_write+0x10/0x10 [ 472.057622][T13790] vfs_write+0x6af/0x1040 [ 472.057636][T13790] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 472.057652][T13790] ? __pfx_vfs_write+0x10/0x10 [ 472.057664][T13790] ? find_held_lock+0x2b/0x80 [ 472.057691][T13790] ksys_write+0x12a/0x250 [ 472.057704][T13790] ? __pfx_ksys_write+0x10/0x10 [ 472.057722][T13790] __do_fast_syscall_32+0x14d/0x8e0 [ 472.057741][T13790] ? lockdep_hardirqs_on+0x7d/0x110 [ 472.057760][T13790] do_fast_syscall_32+0x32/0x70 [ 472.057779][T13790] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 472.057795][T13790] RIP: 0023:0xf7f43fbc [ 472.057807][T13790] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 472.057819][T13790] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 472.057832][T13790] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000240 [ 472.057840][T13790] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 472.057847][T13790] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 472.057853][T13790] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 472.057861][T13790] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 472.057876][T13790] [ 472.057912][T13790] ACPI Error: Aborting method \_SB.PCI0._PRT due to previous error (AE_NO_MEMORY) (20260408/psparse-543) [ 472.068332][T13790] ACPI Error: Method execution failed \_SB.PCI0._PRT due to previous error (AE_NO_MEMORY) (20260408/uteval-68) [ 472.068468][T13790] virtio-pci 0000:00:03.0: can't derive routing for PCI INT A [ 472.739225][ T5940] usb 6-1: USB disconnect, device number 14 [ 472.840014][T13801] lo speed is unknown, defaulting to 1000 [ 472.840050][T13801] lo speed is unknown, defaulting to 1000 [ 472.890178][T13801] lo speed is unknown, defaulting to 1000 [ 472.894868][T13801] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 472.894892][T13801] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 472.894917][T13801] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 472.906268][T13799] rxe_eth0 speed is unknown, defaulting to 1000 [ 472.944656][T13801] lo speed is unknown, defaulting to 1000 [ 472.953837][T13801] lo speed is unknown, defaulting to 1000 [ 472.954494][T13801] lo speed is unknown, defaulting to 1000 [ 472.955258][T13801] lo speed is unknown, defaulting to 1000 [ 472.972121][T13801] lo speed is unknown, defaulting to 1000 [ 473.628289][T13810] rxe_eth0 speed is unknown, defaulting to 1000 [ 473.858052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 474.068547][T13823] profile_transition: unconfined exec no attachment [ 474.239831][T13810] lo speed is unknown, defaulting to 1000 [ 474.700669][T13829] profile_transition: unconfined exec no attachment [ 474.768290][T13828] syzkaller0: entered promiscuous mode [ 474.768306][T13828] syzkaller0: entered allmulticast mode [ 475.445136][T13837] team0: Port device xfrm0 removed [ 475.455560][T13837] bond3: (slave ip6gretap1): Releasing active interface [ 475.457856][ T1176] tipc: Resetting bearer [ 475.482481][T13838] team0: Mode changed to "broadcast" [ 475.482679][T13840] tipc: Enabling of bearer rejected, already enabled [ 475.483713][T13839] vlan0: entered promiscuous mode [ 475.505534][T13839] team0: Port device vlan0 added [ 475.797019][ T43] audit: type=1326 audit(1794231270.429:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13843 comm="syz.0.2415" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f43fbc code=0x0 [ 475.893302][T13847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.893567][T13847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.171448][T13851] rxe_eth0 speed is unknown, defaulting to 1000 [ 476.330253][T13851] lo speed is unknown, defaulting to 1000 [ 476.761359][T13863] siw: device registration error -23 [ 478.030795][T13870] syzkaller0: entered promiscuous mode [ 478.030816][T13870] syzkaller0: entered allmulticast mode [ 478.803238][T13891] rxe_eth0 speed is unknown, defaulting to 1000 [ 479.127321][T13891] lo speed is unknown, defaulting to 1000 [ 480.001183][T13910] syzkaller0: entered promiscuous mode [ 480.001205][T13910] syzkaller0: entered allmulticast mode [ 480.037864][T13907] rxe_eth0 speed is unknown, defaulting to 1000 [ 480.414262][T13907] lo speed is unknown, defaulting to 1000 [ 480.416857][T13912] rxe_eth0 speed is unknown, defaulting to 1000 [ 480.618781][T13920] Bluetooth: MGMT ver 1.23 [ 480.650159][T13912] lo speed is unknown, defaulting to 1000 [ 481.594595][T13932] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 481.594624][T13932] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 481.594650][T13932] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 481.831145][T13934] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 482.206257][T13938] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 482.206299][T13938] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 482.207167][T13938] vhci_hcd vhci_hcd.0: Device attached [ 482.386964][ T43] audit: type=1326 audit(1794231276.969:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13927 comm="syz.2.2440" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f52fbc code=0x0 [ 482.447290][ T5897] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 482.528608][ T5897] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 483.156538][T13943] vhci_hcd: connection reset by peer [ 483.160064][ T5874] vhci_hcd vhci_hcd.0: stop threads [ 483.160196][ T5874] vhci_hcd vhci_hcd.0: release socket [ 483.160422][ T5874] vhci_hcd vhci_hcd.0: disconnect device [ 483.738302][ T3412] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 483.898674][ T3412] usb 7-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 483.899705][ T3412] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 483.899724][ T3412] usb 7-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 483.899742][ T3412] usb 7-1: config 0 interface 0 has no altsetting 0 [ 483.903909][ T3412] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 483.903956][ T3412] usb 7-1: Product: syz [ 483.903965][ T3412] usb 7-1: Manufacturer: syz [ 483.903973][ T3412] usb 7-1: SerialNumber: syz [ 483.939433][ T3412] usb 7-1: config 0 descriptor?? [ 483.940091][T13941] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 483.961524][ T3412] usb 7-1: selecting invalid altsetting 0 [ 484.334295][T13955] usb 1-1: USB disconnect, device number 2 [ 484.533818][T13961] rxe_eth0 speed is unknown, defaulting to 1000 [ 484.644772][T13961] lo speed is unknown, defaulting to 1000 [ 485.477534][ T50] usb 7-1: USB disconnect, device number 11 [ 485.648609][T13967] syzkaller0: entered promiscuous mode [ 485.648625][T13967] syzkaller0: entered allmulticast mode [ 485.936413][T13977] siw: device registration error -23 [ 486.030426][T13977] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 486.368053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 487.552593][ T43] audit: type=1326 audit(1794231282.189:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13994 comm="syz.0.2462" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f43fbc code=0x0 [ 487.650100][ T5897] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 487.650941][T13996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.651149][T13996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.756114][T14011] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 490.756142][T14011] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 490.756167][T14011] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 490.756314][T14011] FAULT_INJECTION: forcing a failure. [ 490.756314][T14011] name failslab, interval 1, probability 0, space 0, times 5 [ 490.756333][T14011] CPU: 0 UID: 0 PID: 14011 Comm: syz.1.2467 Tainted: G L syzkaller #0 PREEMPT(full) [ 490.756350][T14011] Tainted: [L]=SOFTLOCKUP [ 490.756355][T14011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 490.756363][T14011] Call Trace: [ 490.756368][T14011] [ 490.756384][T14011] dump_stack_lvl+0x100/0x190 [ 490.756412][T14011] should_fail_ex.cold+0x5/0xa [ 490.756433][T14011] should_failslab+0xc2/0x120 [ 490.756450][T14011] __kmalloc_cache_noprof+0x91/0x6d0 [ 490.756470][T14011] ? ib_uverbs_add_one+0xcc/0x7d0 [ 490.756521][T14011] ? __pfx_ib_uverbs_add_one+0x10/0x10 [ 490.756543][T14011] ib_uverbs_add_one+0xcc/0x7d0 [ 490.756563][T14011] ? __pfx_ib_uverbs_add_one+0x10/0x10 [ 490.756585][T14011] add_client_context+0x3f2/0x5b0 [ 490.756605][T14011] ? __pfx_add_client_context+0x10/0x10 [ 490.756624][T14011] ? enable_device_and_get+0xf7/0x3f0 [ 490.756640][T14011] ? enable_device_and_get+0xf7/0x3f0 [ 490.756660][T14011] enable_device_and_get+0x1d4/0x3f0 [ 490.756676][T14011] ? __pfx_enable_device_and_get+0x10/0x10 [ 490.756694][T14011] ? rdma_counter_init+0x209/0x400 [ 490.756718][T14011] ib_register_device+0x8c7/0xdd0 [ 490.756739][T14011] siw_newlink+0xb44/0xe70 [ 490.756768][T14011] nldev_newlink+0x3b0/0x630 [ 490.756784][T14011] ? __pfx_nldev_newlink+0x10/0x10 [ 490.756845][T14011] ? lock_acquire+0x1d1/0x380 [ 490.756860][T14011] ? rdma_nl_rcv_msg+0x168/0x6f0 [ 490.756873][T14011] ? hook_capable+0x1bc/0x500 [ 490.756895][T14011] ? security_capable+0x80/0x260 [ 490.756912][T14011] ? ns_capable+0xcd/0xf0 [ 490.756924][T14011] ? __pfx_nldev_newlink+0x10/0x10 [ 490.756938][T14011] rdma_nl_rcv_msg+0x392/0x6f0 [ 490.756952][T14011] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 490.756967][T14011] ? __lock_acquire+0x5c0/0x1f40 [ 490.756985][T14011] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 490.757002][T14011] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 490.757023][T14011] ? netlink_deliver_tap+0x1ae/0xb50 [ 490.757047][T14011] netlink_unicast+0x668/0x950 [ 490.757061][T14011] ? __pfx_netlink_unicast+0x10/0x10 [ 490.757078][T14011] netlink_sendmsg+0x9ac/0x10c0 [ 490.757094][T14011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.757110][T14011] ? apparmor_socket_sendmsg+0x165/0x280 [ 490.757129][T14011] ? ____sys_sendmsg+0xa99/0xc30 [ 490.757144][T14011] ____sys_sendmsg+0xa99/0xc30 [ 490.757157][T14011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.757171][T14011] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.757194][T14011] ___sys_sendmsg+0x190/0x1e0 [ 490.757213][T14011] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.757229][T14011] ? futex_wait+0x11e/0x370 [ 490.757248][T14011] ? find_held_lock+0x2b/0x80 [ 490.757276][T14011] __sys_sendmsg+0x160/0x210 [ 490.757297][T14011] ? __pfx___sys_sendmsg+0x10/0x10 [ 490.757324][T14011] __do_fast_syscall_32+0x14d/0x8e0 [ 490.757344][T14011] ? lockdep_hardirqs_on+0x7d/0x110 [ 490.757363][T14011] do_fast_syscall_32+0x32/0x70 [ 490.757382][T14011] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 490.757398][T14011] RIP: 0023:0xf7f26fbc [ 490.757409][T14011] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 490.757421][T14011] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 490.757434][T14011] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000440 [ 490.757442][T14011] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 490.757449][T14011] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 490.757456][T14011] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 490.757463][T14011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 490.757479][T14011] [ 492.371857][ T43] audit: type=1326 audit(1794231287.009:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=14028 comm="syz.2.2474" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f52fbc code=0x0 [ 492.708109][ T3412] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 492.895806][ T3412] usb 7-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 492.954918][ T3412] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 492.954988][ T3412] usb 7-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 492.955003][ T3412] usb 7-1: config 0 interface 0 has no altsetting 0 [ 493.084175][ T3412] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 493.084195][ T3412] usb 7-1: Product: syz [ 493.084203][ T3412] usb 7-1: Manufacturer: syz [ 493.084211][ T3412] usb 7-1: SerialNumber: syz [ 493.905421][ T3412] usb 7-1: config 0 descriptor?? [ 493.935095][T14031] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 493.937712][ T3412] usb 7-1: selecting invalid altsetting 0 [ 494.965136][T14047] siw: device registration error -23 [ 495.006886][T14047] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 495.714552][ T5890] usb 7-1: USB disconnect, device number 12 [ 497.932975][T14069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2485'. [ 497.956888][T14071] profile_transition: unconfined exec no attachment [ 498.009639][T14069] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 498.065877][T14074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2486'. [ 498.539203][T14077] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 498.678315][T14077] md: could not open device unknown-block(1,1). [ 498.800175][T14077] md: personality for level is not loaded! [ 499.271324][T14087] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 499.539279][T14091] md: could not open device unknown-block(1,5). [ 499.608773][T14095] syzkaller0: entered promiscuous mode [ 499.608795][T14095] syzkaller0: entered allmulticast mode [ 499.625493][T14097] loop9: detected capacity change from 0 to 7 [ 499.629614][T14097] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.629655][T14097] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.629685][T14097] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.629710][T14097] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.629748][T14097] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.629783][T14097] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.629810][T14097] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.629824][T14097] ldm_validate_partition_table(): Disk read failed. [ 499.629849][T14097] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.629875][T14097] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.629900][T14097] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.629928][T14097] Dev loop9: unable to read RDB block 0 [ 499.629980][T14097] loop9: unable to read partition table [ 499.630157][T14097] loop9: partition table beyond EOD, truncated [ 499.630190][T14097] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 499.630190][T14097] ) failed (rc=-5) [ 499.864714][T14102] busy [ 500.999512][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.999549][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.409617][T14122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2500'. [ 504.332518][T14144] busy [ 504.491499][T14152] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 504.599940][T14152] md: could not open device unknown-block(1,7). [ 504.612174][T14154] profile_transition: unconfined exec no attachment [ 504.799244][T14158] siw: device registration error -23 [ 504.815938][T14158] FAULT_INJECTION: forcing a failure. [ 504.815938][T14158] name failslab, interval 1, probability 0, space 0, times 4 [ 504.815960][T14158] CPU: 3 UID: 0 PID: 14158 Comm: syz.2.2511 Tainted: G L syzkaller #0 PREEMPT(full) [ 504.815978][T14158] Tainted: [L]=SOFTLOCKUP [ 504.815984][T14158] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 504.815992][T14158] Call Trace: [ 504.815998][T14158] [ 504.816004][T14158] dump_stack_lvl+0x100/0x190 [ 504.816035][T14158] should_fail_ex.cold+0x5/0xa [ 504.816055][T14158] should_failslab+0xc2/0x120 [ 504.816073][T14158] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 504.816088][T14158] ? find_held_lock+0x2b/0x80 [ 504.816106][T14158] ? gnet_stats_copy_app+0x71/0x2f0 [ 504.816129][T14158] kmemdup_noprof+0x29/0x60 [ 504.816144][T14158] gnet_stats_copy_app+0x71/0x2f0 [ 504.816165][T14158] sfb_dump_stats+0x2fd/0x3c0 [ 504.816181][T14158] ? __pfx_sfb_dump_stats+0x10/0x10 [ 504.816194][T14158] ? __nla_put_64bit+0x27/0x40 [ 504.816212][T14158] ? __asan_memcpy+0x3c/0x60 [ 504.816227][T14158] ? gnet_stats_start_copy_compat+0x1ee/0x470 [ 504.816247][T14158] ? __pfx_sfb_dump_stats+0x10/0x10 [ 504.816261][T14158] tc_fill_qdisc+0xa2b/0x1300 [ 504.816278][T14158] ? __pfx_tc_fill_qdisc+0x10/0x10 [ 504.816294][T14158] ? __pfx___alloc_skb+0x10/0x10 [ 504.816316][T14158] qdisc_notify.isra.0+0x365/0x3f0 [ 504.816332][T14158] qdisc_graft+0xee6/0x19c0 [ 504.816349][T14158] ? __pfx_qdisc_graft+0x10/0x10 [ 504.816362][T14158] ? rcu_is_watching+0x13/0xc0 [ 504.816384][T14158] tc_modify_qdisc+0x10df/0x2120 [ 504.816401][T14158] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 504.816426][T14158] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 504.816439][T14158] rtnetlink_rcv_msg+0x3c9/0xe90 [ 504.816456][T14158] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 504.816472][T14158] ? __lock_acquire+0x5c0/0x1f40 [ 504.816489][T14158] netlink_rcv_skb+0x159/0x420 [ 504.816501][T14158] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 504.816518][T14158] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 504.816535][T14158] ? netlink_deliver_tap+0x1ae/0xb50 [ 504.816557][T14158] netlink_unicast+0x668/0x950 [ 504.816572][T14158] ? __pfx_netlink_unicast+0x10/0x10 [ 504.816588][T14158] netlink_sendmsg+0x9ac/0x10c0 [ 504.816602][T14158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.816618][T14158] ? apparmor_socket_sendmsg+0x165/0x280 [ 504.816636][T14158] ? ____sys_sendmsg+0xa99/0xc30 [ 504.816650][T14158] ____sys_sendmsg+0xa99/0xc30 [ 504.816664][T14158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.816677][T14158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.816699][T14158] ___sys_sendmsg+0x190/0x1e0 [ 504.816715][T14158] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.816731][T14158] ? futex_wait+0x11e/0x370 [ 504.816749][T14158] ? find_held_lock+0x2b/0x80 [ 504.816776][T14158] __sys_sendmsg+0x160/0x210 [ 504.816803][T14158] ? __pfx___sys_sendmsg+0x10/0x10 [ 504.816842][T14158] __do_fast_syscall_32+0x14d/0x8e0 [ 504.816868][T14158] ? lockdep_hardirqs_on+0x7d/0x110 [ 504.816894][T14158] do_fast_syscall_32+0x32/0x70 [ 504.816921][T14158] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 504.816944][T14158] RIP: 0023:0xf7f52fbc [ 504.816959][T14158] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 504.816977][T14158] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 504.816995][T14158] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800002c0 [ 504.817014][T14158] RDX: 0000000000044080 RSI: 0000000000000000 RDI: 0000000000000000 [ 504.817026][T14158] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 504.817037][T14158] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 504.817048][T14158] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 504.817071][T14158] [ 504.891889][T14152] md/raid1:md3: not clean -- starting background reconstruction [ 504.891907][T14152] md/raid1:md3: active with 2 out of 2 mirrors [ 504.896787][T14152] md3: detected capacity change from 0 to 1024 [ 505.000692][T14160] md: resync of RAID array md3 [ 505.055830][T14160] md: md3: resync done. [ 505.706240][T14173] profile_transition: unconfined exec no attachment [ 505.841241][T14175] profile_transition: unconfined exec no attachment [ 505.882275][T14176] profile_transition: unconfined exec no attachment [ 506.033785][T14178] profile_transition: unconfined exec no attachment [ 506.078476][T14179] profile_transition: unconfined exec no attachment [ 506.327127][T14181] profile_transition: unconfined exec no attachment [ 506.553878][T14183] loop9: detected capacity change from 0 to 7 [ 506.565090][T14183] buffer_io_error: 7449 callbacks suppressed [ 506.565102][T14183] Buffer I/O error on dev loop9, logical block 0, async page read [ 506.565122][T14183] Buffer I/O error on dev loop9, logical block 0, async page read [ 506.565140][T14183] Buffer I/O error on dev loop9, logical block 0, async page read [ 506.565157][T14183] Buffer I/O error on dev loop9, logical block 0, async page read [ 506.565181][T14183] Buffer I/O error on dev loop9, logical block 0, async page read [ 506.567715][T14183] Buffer I/O error on dev loop9, logical block 0, async page read [ 506.567792][T14183] Buffer I/O error on dev loop9, logical block 0, async page read [ 506.567806][T14183] ldm_validate_partition_table(): Disk read failed. [ 506.567825][T14183] Buffer I/O error on dev loop9, logical block 0, async page read [ 506.567841][T14183] Buffer I/O error on dev loop9, logical block 0, async page read [ 506.567856][T14183] Buffer I/O error on dev loop9, logical block 0, async page read [ 506.567873][T14183] Dev loop9: unable to read RDB block 0 [ 506.567935][T14183] loop9: unable to read partition table [ 506.568341][T14183] loop9: partition table beyond EOD, truncated [ 506.568354][T14183] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 506.568354][T14183] ) failed (rc=-5) [ 506.938958][T14188] busy [ 507.439998][T14198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.440401][T14198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.718883][T14200] siw: device registration error -23 [ 507.727210][T14200] FAULT_INJECTION: forcing a failure. [ 507.727210][T14200] name failslab, interval 1, probability 0, space 0, times 3 [ 507.727242][T14200] CPU: 1 UID: 0 PID: 14200 Comm: syz.3.2521 Tainted: G L syzkaller #0 PREEMPT(full) [ 507.727271][T14200] Tainted: [L]=SOFTLOCKUP [ 507.727279][T14200] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 507.727292][T14200] Call Trace: [ 507.727301][T14200] [ 507.727431][T14200] dump_stack_lvl+0x100/0x190 [ 507.727479][T14200] should_fail_ex.cold+0x5/0xa [ 507.727509][T14200] should_failslab+0xc2/0x120 [ 507.727537][T14200] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 507.727559][T14200] ? find_held_lock+0x2b/0x80 [ 507.727589][T14200] ? gnet_stats_copy_app+0x71/0x2f0 [ 507.727625][T14200] kmemdup_noprof+0x29/0x60 [ 507.727650][T14200] gnet_stats_copy_app+0x71/0x2f0 [ 507.727681][T14200] sfb_dump_stats+0x2fd/0x3c0 [ 507.727707][T14200] ? __pfx_sfb_dump_stats+0x10/0x10 [ 507.727729][T14200] ? __nla_put_64bit+0x27/0x40 [ 507.727756][T14200] ? __asan_memcpy+0x3c/0x60 [ 507.727780][T14200] ? gnet_stats_start_copy_compat+0x1ee/0x470 [ 507.727815][T14200] ? __pfx_sfb_dump_stats+0x10/0x10 [ 507.727837][T14200] tc_fill_qdisc+0xa2b/0x1300 [ 507.727865][T14200] ? __pfx_tc_fill_qdisc+0x10/0x10 [ 507.727894][T14200] ? __pfx___alloc_skb+0x10/0x10 [ 507.727944][T14200] qdisc_notify.isra.0+0x365/0x3f0 [ 507.727973][T14200] qdisc_graft+0xee6/0x19c0 [ 507.728003][T14200] ? __pfx_qdisc_graft+0x10/0x10 [ 507.728025][T14200] ? rcu_is_watching+0x13/0xc0 [ 507.728064][T14200] tc_modify_qdisc+0x10df/0x2120 [ 507.728094][T14200] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 507.728139][T14200] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 507.728163][T14200] rtnetlink_rcv_msg+0x3c9/0xe90 [ 507.728190][T14200] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 507.728226][T14200] netlink_rcv_skb+0x159/0x420 [ 507.728245][T14200] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 507.728271][T14200] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 507.728300][T14200] ? netlink_deliver_tap+0x1ae/0xb50 [ 507.728337][T14200] netlink_unicast+0x668/0x950 [ 507.728360][T14200] ? __pfx_netlink_unicast+0x10/0x10 [ 507.728388][T14200] netlink_sendmsg+0x9ac/0x10c0 [ 507.728410][T14200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.728442][T14200] ? apparmor_socket_sendmsg+0x165/0x280 [ 507.728478][T14200] ? ____sys_sendmsg+0xa99/0xc30 [ 507.728504][T14200] ____sys_sendmsg+0xa99/0xc30 [ 507.728527][T14200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.728552][T14200] ? __pfx_____sys_sendmsg+0x10/0x10 [ 507.728590][T14200] ___sys_sendmsg+0x190/0x1e0 [ 507.728615][T14200] ? __pfx____sys_sendmsg+0x10/0x10 [ 507.728641][T14200] ? futex_wait+0x11e/0x370 [ 507.728674][T14200] ? find_held_lock+0x2b/0x80 [ 507.728827][T14200] __sys_sendmsg+0x160/0x210 [ 507.728861][T14200] ? __pfx___sys_sendmsg+0x10/0x10 [ 507.728904][T14200] __do_fast_syscall_32+0x14d/0x8e0 [ 507.728940][T14200] do_fast_syscall_32+0x32/0x70 [ 507.728972][T14200] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 507.728999][T14200] RIP: 0023:0xf73aefbc [ 507.729014][T14200] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 507.729032][T14200] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 507.729051][T14200] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800002c0 [ 507.729065][T14200] RDX: 0000000000044080 RSI: 0000000000000000 RDI: 0000000000000000 [ 507.729077][T14200] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 507.729089][T14200] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 507.729101][T14200] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 507.729127][T14200] [ 508.312315][T14196] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input38 [ 508.471916][T14203] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 508.622110][T14203] md: personality for level is not loaded! [ 508.648611][T14205] md: could not open device unknown-block(1,3). [ 508.683533][T14209] block nbd0: server does not support multiple connections per device. [ 508.696186][T14209] block nbd0: shutting down sockets [ 509.319673][T14224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2529'. [ 509.342097][T14224] team0: Port device team_slave_0 removed [ 510.567080][T14232] netlink: 'syz.3.2533': attribute type 1 has an invalid length. [ 510.762900][T14232] 8021q: adding VLAN 0 to HW filter on device bond4 [ 510.941073][T14235] bond4: (slave gretap1): making interface the new active one [ 510.945280][T14235] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 512.372274][T14250] netlink: 'syz.1.2538': attribute type 10 has an invalid length. [ 512.372296][T14250] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2538'. [ 512.438123][T14252] profile_transition: unconfined exec no attachment [ 512.518854][ T74] smbdirect: ib_dev[syz2] removed [ 512.536453][ T3301] infiniband syz2: ib_query_port failed (-19) [ 512.724946][T14257] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 512.766898][T14257] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 512.773628][T14257] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 512.776688][T14257] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 512.784005][T14257] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 512.846427][T14257] pci 0000:00:01.0: Adding to iommu group 1 [ 512.864130][T14257] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 512.864152][T14257] pci 0000:00:01.0: vgaarb: bridge control possible [ 512.864165][T14257] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 512.884904][T14257] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 512.937338][T14257] pci 0000:00:03.0: BAR 0 [io 0xc0a0-0xc0bf] [ 512.937632][T14257] pci 0000:00:03.0: BAR 1 [mem 0xfeaf7000-0xfeaf7fff] [ 512.944992][T14257] pci 0000:00:03.0: BAR 4 [mem 0xfe200000-0xfe203fff 64bit pref] [ 513.062566][T14257] pci 0000:00:03.0: Adding to iommu group 3 [ 513.128649][T14257] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 513.128870][T14257] pci 0000:00:03.0: BAR 4 [mem 0x580200000-0x580203fff 64bit pref]: assigned [ 513.132546][T14257] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 513.132753][T14257] pci 0000:00:03.0: BAR 1 [mem 0x81201000-0x81201fff]: assigned [ 513.134299][T14257] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f]: assigned [ 513.141358][T14257] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 513.172821][T14257] [drm] Found bochs VGA, ID 0xb0c5. [ 513.172841][T14257] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 513.228645][T14257] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 513.335125][T14257] Console: switching to colour frame buffer device 160x50 [ 513.335157][T14257] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 513.678587][T14273] profile_transition: unconfined exec no attachment [ 513.744174][T14276] profile_transition: unconfined exec no attachment [ 514.487889][T14282] busy [ 515.189334][T14288] syzkaller0: entered promiscuous mode [ 515.189349][T14288] syzkaller0: entered allmulticast mode [ 516.314747][T14297] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2552'. [ 516.329013][T14297] capability: warning: `syz.1.2552' uses deprecated v2 capabilities in a way that may be insecure [ 517.206100][T14309] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 518.314717][T14323] netlink: 'syz.3.2563': attribute type 10 has an invalid length. [ 518.314740][T14323] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2563'. [ 518.380872][T14327] profile_transition: unconfined exec no attachment [ 518.437464][T14323] team0: Port device vlan0 removed [ 518.488490][ T234] tipc: Resetting bearer [ 518.492717][T14332] profile_transition: unconfined exec no attachment [ 518.589929][T14334] profile_transition: unconfined exec no attachment [ 518.630588][T14336] syzkaller0: entered promiscuous mode [ 518.630603][T14336] syzkaller0: entered allmulticast mode [ 518.896442][T14340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2566'. [ 518.966461][T14342] netlink: 'syz.2.2568': attribute type 1 has an invalid length. [ 519.006921][T14342] 8021q: adding VLAN 0 to HW filter on device bond5 [ 519.262190][T14342] bond5: (slave gretap1): making interface the new active one [ 519.262758][T14342] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 519.404738][T14339] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input40 [ 521.004087][T14363] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 521.050646][T14368] netlink: 'syz.0.2576': attribute type 10 has an invalid length. [ 521.050666][T14368] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2576'. [ 521.108991][T14374] profile_transition: unconfined exec no attachment [ 521.253218][T14376] netlink: 'syz.0.2578': attribute type 5 has an invalid length. [ 521.253235][T14376] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2578'. [ 521.361975][T14378] profile_transition: unconfined exec no attachment [ 521.412388][T14379] profile_transition: unconfined exec no attachment [ 521.446719][T14382] profile_transition: unconfined exec no attachment [ 521.492938][T14383] profile_transition: unconfined exec no attachment [ 521.546214][T14386] profile_transition: unconfined exec no attachment [ 521.583903][T14387] profile_transition: unconfined exec no attachment [ 524.192947][T14427] busy [ 524.398227][ T5890] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 524.570622][ T5890] usb 7-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 524.571525][ T5890] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 524.571551][ T5890] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.576400][ T5890] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 524.576530][ T5890] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 524.576559][ T5890] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 524.577132][ T5890] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 524.577166][ T5890] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 524.591442][ T5890] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 524.592201][ T5890] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 524.592237][ T5890] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 524.608495][ T5890] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 524.622101][T14421] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input42 [ 524.748555][T14392] syz.0.2580 (14392) used greatest stack depth: 18472 bytes left [ 525.071014][T14436] loop9: detected capacity change from 0 to 7 [ 525.071347][T14436] buffer_io_error: 8191 callbacks suppressed [ 525.071358][T14436] Buffer I/O error on dev loop9, logical block 0, async page read [ 525.071379][T14436] Buffer I/O error on dev loop9, logical block 0, async page read [ 525.071397][T14436] Buffer I/O error on dev loop9, logical block 0, async page read [ 525.071414][T14436] Buffer I/O error on dev loop9, logical block 0, async page read [ 525.071437][T14436] Buffer I/O error on dev loop9, logical block 0, async page read [ 525.071460][T14436] Buffer I/O error on dev loop9, logical block 0, async page read [ 525.071476][T14436] Buffer I/O error on dev loop9, logical block 0, async page read [ 525.071485][T14436] ldm_validate_partition_table(): Disk read failed. [ 525.071500][T14436] Buffer I/O error on dev loop9, logical block 0, async page read [ 525.071515][T14436] Buffer I/O error on dev loop9, logical block 0, async page read [ 525.071531][T14436] Buffer I/O error on dev loop9, logical block 0, async page read [ 525.071548][T14436] Dev loop9: unable to read RDB block 0 [ 525.071578][T14436] loop9: unable to read partition table [ 525.071667][T14436] loop9: partition table beyond EOD, truncated [ 525.071686][T14436] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 525.071686][T14436] ) failed (rc=-5) [ 525.381003][ T5940] usb 7-1: USB disconnect, device number 13 [ 525.397634][ T5940] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 525.414522][ T5940] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 525.415043][ T5940] keyspan 7-1:1.0: device disconnected [ 525.864412][T14449] nvmet: adding nsid 1 to subsystem testsubsys [ 525.914842][T14450] profile_transition: unconfined exec no attachment [ 526.019162][T14453] profile_transition: unconfined exec no attachment [ 526.065064][T14445] null_blk: disk nullb1 created [ 526.100053][T14449] block device autoloading is deprecated and will be removed. [ 526.314106][T14462] busy [ 526.346072][T14455] rxe_eth0 speed is unknown, defaulting to 1000 [ 526.441837][T14455] lo speed is unknown, defaulting to 1000 [ 528.963895][T14487] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input44 [ 530.815113][T14511] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.815177][T14511] bridge0: port 2(bridge_slave_1) entered listening state [ 530.815355][T14511] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.815446][T14511] bridge0: port 1(bridge_slave_0) entered listening state [ 530.817792][T14511] 8021q: adding VLAN 0 to HW filter on device .` [ 530.819253][T14511] dummy0: left promiscuous mode [ 530.833851][T14511] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 530.966574][T14522] netlink: 'syz.2.2618': attribute type 10 has an invalid length. [ 530.966590][T14522] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2618'. [ 531.065153][T14524] profile_transition: unconfined exec no attachment [ 531.180965][T14527] Console: switching to colour dummy device 80x25 [ 531.305105][T14528] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 531.346497][T14528] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 531.346654][T14528] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 531.346943][T14528] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 531.350245][T14528] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 531.373999][T14528] pci 0000:00:01.0: Adding to iommu group 1 [ 531.391663][T14528] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 531.391686][T14528] pci 0000:00:01.0: vgaarb: bridge control possible [ 531.391700][T14528] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 531.411334][T14528] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 531.411490][T14528] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 531.422073][T14528] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 531.453514][T14528] [drm] Found bochs VGA, ID 0xb0c5. [ 531.453532][T14528] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 531.856397][T14528] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 532.187554][T14528] Console: switching to colour frame buffer device 160x50 [ 532.187589][T14528] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 532.413967][T14540] veth1_to_bond: entered allmulticast mode [ 532.414436][T14540] veth1_to_bond: entered promiscuous mode [ 532.415201][T14540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2624'. [ 532.444858][T14540] veth1_to_bond (unregistering): left allmulticast mode [ 532.444900][T14540] veth1_to_bond (unregistering): left promiscuous mode [ 532.778605][T14546] profile_transition: unconfined exec no attachment [ 533.611527][T14552] profile_transition: unconfined exec no attachment [ 533.855732][T14556] profile_transition: unconfined exec no attachment [ 533.941187][T14557] profile_transition: unconfined exec no attachment [ 534.173034][T14560] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 534.307810][T14562] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 534.539125][T14571] rxe_eth0 speed is unknown, defaulting to 1000 [ 534.689686][T14571] lo speed is unknown, defaulting to 1000 [ 535.644176][T14593] profile_transition: unconfined exec no attachment [ 535.819674][T14595] profile_transition: unconfined exec no attachment [ 536.120580][T14597] veth1_to_bond: entered allmulticast mode [ 536.120991][T14597] veth1_to_bond: entered promiscuous mode [ 536.127613][T14597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2640'. [ 536.163421][T14597] veth1_to_bond (unregistering): left allmulticast mode [ 536.163460][T14597] veth1_to_bond (unregistering): left promiscuous mode [ 539.394122][T14614] rxe_eth0 speed is unknown, defaulting to 1000 [ 539.603648][T14610] veth1_to_bond: entered allmulticast mode [ 539.604263][T14610] veth1_to_bond: entered promiscuous mode [ 539.605325][T14610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2652'. [ 539.606239][T14610] veth1_to_bond (unregistering): left allmulticast mode [ 539.606268][T14610] veth1_to_bond (unregistering): left promiscuous mode [ 539.931482][T14614] lo speed is unknown, defaulting to 1000 [ 540.009623][T14620] FAULT_INJECTION: forcing a failure. [ 540.009623][T14620] name failslab, interval 1, probability 0, space 0, times 2 [ 540.009647][T14620] CPU: 0 UID: 0 PID: 14620 Comm: syz.1.2646 Tainted: G L syzkaller #0 PREEMPT(full) [ 540.009665][T14620] Tainted: [L]=SOFTLOCKUP [ 540.009671][T14620] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 540.009678][T14620] Call Trace: [ 540.009683][T14620] [ 540.009688][T14620] dump_stack_lvl+0x100/0x190 [ 540.009800][T14620] should_fail_ex.cold+0x5/0xa [ 540.009835][T14620] should_failslab+0xc2/0x120 [ 540.009886][T14620] __kmalloc_noprof+0xfc/0x840 [ 540.009900][T14620] ? trace_kmalloc+0xeb/0x110 [ 540.009915][T14620] ? lsm_blob_alloc+0x68/0x90 [ 540.009941][T14620] lsm_blob_alloc+0x68/0x90 [ 540.009954][T14620] security_sk_alloc+0x2d/0x290 [ 540.009972][T14620] sk_prot_alloc+0x12a/0x2a0 [ 540.010026][T14620] sk_alloc+0x36/0xe80 [ 540.010046][T14620] __netlink_create+0x5e/0x2c0 [ 540.010073][T14620] __netlink_kernel_create+0xed/0x750 [ 540.010094][T14620] ? __pfx___netlink_kernel_create+0x10/0x10 [ 540.010118][T14620] fib_net_init+0x2ca/0x460 [ 540.010165][T14620] ? __pfx_fib_net_init+0x10/0x10 [ 540.010182][T14620] ? timer_init_key+0x150/0x310 [ 540.010205][T14620] ? __pfx_nl_fib_input+0x10/0x10 [ 540.010224][T14620] ? devinet_init_net+0x56c/0x8d0 [ 540.010241][T14620] ? __pfx_arp_net_init+0x10/0x10 [ 540.010261][T14620] ? __pfx_fib_net_init+0x10/0x10 [ 540.010276][T14620] ops_init+0x1e2/0x5f0 [ 540.010292][T14620] setup_net+0x118/0x3a0 [ 540.010305][T14620] ? __pfx_setup_net+0x10/0x10 [ 540.010319][T14620] ? bpf_lsm_namespace_init+0x9/0x10 [ 540.010339][T14620] copy_net_ns+0x340/0x7a0 [ 540.010354][T14620] create_new_namespaces+0x3ea/0xac0 [ 540.010372][T14620] unshare_nsproxy_namespaces+0xf6/0x210 [ 540.010387][T14620] ksys_unshare+0x44f/0x980 [ 540.010401][T14620] ? __pfx_ksys_unshare+0x10/0x10 [ 540.010417][T14620] ? __might_fault+0xc5/0x140 [ 540.010437][T14620] __ia32_sys_unshare+0x30/0x40 [ 540.010451][T14620] __do_fast_syscall_32+0x14d/0x8e0 [ 540.010500][T14620] do_fast_syscall_32+0x32/0x70 [ 540.010520][T14620] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 540.010536][T14620] RIP: 0023:0xf7f26fbc [ 540.010548][T14620] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 540.010560][T14620] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 540.010584][T14620] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 540.010593][T14620] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 540.010601][T14620] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 540.010608][T14620] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 540.010615][T14620] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 540.010632][T14620] [ 540.337280][T14627] bond0: entered promiscuous mode [ 540.340870][T14627] batadv0: entered promiscuous mode [ 540.341694][T14627] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 540.341978][T14627] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 540.345571][T14627] bond0: left promiscuous mode [ 540.345977][T14627] batadv0: left promiscuous mode [ 540.404655][T14632] profile_transition: unconfined exec no attachment [ 540.807636][T14636] profile_transition: unconfined exec no attachment [ 540.956509][T14639] No buffer was provided with the request [ 541.645456][T14574] syz.0.2632 (14574) used greatest stack depth: 16552 bytes left [ 542.231178][T14656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2660'. [ 542.277483][T14656] vxcan3: entered promiscuous mode [ 542.539745][T14662] FAULT_INJECTION: forcing a failure. [ 542.539745][T14662] name failslab, interval 1, probability 0, space 0, times 1 [ 542.539811][T14662] CPU: 0 UID: 0 PID: 14662 Comm: syz.2.2661 Tainted: G L syzkaller #0 PREEMPT(full) [ 542.539841][T14662] Tainted: [L]=SOFTLOCKUP [ 542.539848][T14662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 542.539856][T14662] Call Trace: [ 542.539862][T14662] [ 542.539867][T14662] dump_stack_lvl+0x100/0x190 [ 542.539891][T14662] should_fail_ex.cold+0x5/0xa [ 542.539910][T14662] should_failslab+0xc2/0x120 [ 542.539928][T14662] __kmalloc_node_noprof+0xff/0x870 [ 542.539941][T14662] ? mempool_init_node+0x11b/0x6f0 [ 542.539957][T14662] ? __pfx_msgpool_free+0x10/0x10 [ 542.539976][T14662] ? __pfx_msgpool_alloc+0x10/0x10 [ 542.539994][T14662] mempool_init_node+0x11b/0x6f0 [ 542.540013][T14662] ? __pfx_msgpool_free+0x10/0x10 [ 542.540031][T14662] mempool_create_node_noprof+0xe9/0x1b0 [ 542.540047][T14662] ? __pfx_msgpool_alloc+0x10/0x10 [ 542.540067][T14662] ceph_msgpool_init+0xdc/0x1d0 [ 542.540086][T14662] ceph_osdc_init+0x539/0xa00 [ 542.540103][T14662] ceph_create_client+0x281/0x370 [ 542.540118][T14662] ceph_get_tree+0x1a4/0x2020 [ 542.540133][T14662] ? bpf_lsm_capable+0x9/0x10 [ 542.540145][T14662] ? security_capable+0x80/0x260 [ 542.540161][T14662] vfs_get_tree+0x92/0x320 [ 542.540180][T14662] path_mount+0x7d0/0x2850 [ 542.540201][T14662] ? __pfx_path_mount+0x10/0x10 [ 542.540217][T14662] ? lockdep_hardirqs_on+0x7d/0x110 [ 542.540237][T14662] ? putname+0xb1/0x110 [ 542.540252][T14662] ? kmem_cache_free+0x127/0x6c0 [ 542.540274][T14662] ? __ia32_sys_mount+0x292/0x310 [ 542.540291][T14662] __ia32_sys_mount+0x292/0x310 [ 542.540315][T14662] ? __pfx___ia32_sys_mount+0x10/0x10 [ 542.540338][T14662] __do_fast_syscall_32+0x14d/0x8e0 [ 542.540359][T14662] ? lockdep_hardirqs_on+0x7d/0x110 [ 542.540379][T14662] do_fast_syscall_32+0x32/0x70 [ 542.540399][T14662] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 542.540417][T14662] RIP: 0023:0xf7f52fbc [ 542.540428][T14662] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 542.540441][T14662] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 542.540454][T14662] RAX: ffffffffffffffda RBX: 0000000080002840 RCX: 0000000080002880 [ 542.540462][T14662] RDX: 00000000800028c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 542.540470][T14662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 542.540482][T14662] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 542.540489][T14662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 542.540505][T14662] [ 543.243259][T14675] profile_transition: unconfined exec no attachment [ 543.669223][T14679] profile_transition: unconfined exec no attachment [ 544.122977][T14686] profile_transition: unconfined exec no attachment [ 544.257384][T14688] profile_transition: unconfined exec no attachment [ 544.603277][T14692] profile_transition: unconfined exec no attachment [ 545.153045][T14695] profile_transition: unconfined exec no attachment [ 545.689416][T14698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2670'. [ 546.965264][T14729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2679'. [ 546.969045][T14729] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2679'. [ 546.969067][T14729] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2679'. [ 546.992119][T14732] profile_transition: unconfined exec no attachment [ 547.135317][T14734] netlink: 'syz.3.2681': attribute type 1 has an invalid length. [ 547.644302][T14740] netlink: 'syz.0.2682': attribute type 1 has an invalid length. [ 547.731579][T14740] bond5: entered promiscuous mode [ 547.732666][T14740] 8021q: adding VLAN 0 to HW filter on device bond5 [ 547.754162][T14731] ip6erspan0: entered allmulticast mode [ 547.845212][T14731] bond5: (slave ip6erspan0): making interface the new active one [ 547.846343][T14731] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 547.916590][T14746] bond5: (slave bridge2): making interface the new active one [ 547.916609][T14746] bridge2: entered promiscuous mode [ 547.917435][T14746] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 548.078670][T14740] ipvlan0: entered allmulticast mode [ 548.078695][T14740] bond5: entered allmulticast mode [ 548.078726][T14740] bridge2: entered allmulticast mode [ 548.079104][T14740] bond5: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 548.079124][T14740] bond5: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 548.541089][T14761] profile_transition: unconfined exec no attachment [ 549.084091][T14777] Console: switching to colour dummy device 80x25 [ 549.339028][T14779] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 549.408813][T14779] pci 0000:00:00.0: Adding to iommu group 0 [ 549.547756][T14779] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 549.598497][T14779] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 549.598741][T14779] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 549.599635][T14779] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 549.600250][T14779] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 549.683104][T14779] pci 0000:00:01.0: Adding to iommu group 1 [ 549.776784][T14779] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 549.776804][T14779] pci 0000:00:01.0: vgaarb: bridge control possible [ 549.776813][T14779] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 549.814960][T14779] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 549.815122][T14779] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 549.855453][T14779] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 550.635657][T14779] [drm] Found bochs VGA, ID 0xb0c5. [ 550.635677][T14779] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 550.680977][T14779] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 550.997637][T14790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2695'. [ 551.039655][T14790] vxcan3: entered promiscuous mode [ 552.150665][T14779] Console: switching to colour frame buffer device 160x50 [ 552.150716][T14779] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 552.821660][T14803] No buffer was provided with the request [ 553.013871][T14808] profile_transition: unconfined exec no attachment [ 554.611482][T14829] syzkaller0: entered promiscuous mode [ 554.611499][T14829] syzkaller0: entered allmulticast mode [ 555.934767][T14845] profile_transition: unconfined exec no attachment [ 556.327654][T14849] profile_transition: unconfined exec no attachment [ 556.391946][T14851] profile_transition: unconfined exec no attachment [ 556.468426][T14853] profile_transition: unconfined exec no attachment [ 556.473059][T14854] profile_transition: unconfined exec no attachment [ 556.478168][T14855] profile_transition: unconfined exec no attachment [ 556.630554][T14857] profile_transition: unconfined exec no attachment [ 556.670737][T14858] profile_transition: unconfined exec no attachment [ 556.754366][T14859] profile_transition: unconfined exec no attachment [ 558.715825][T14883] profile_transition: unconfined exec no attachment [ 558.763768][T14884] profile_transition: unconfined exec no attachment [ 558.807369][T14886] profile_transition: unconfined exec no attachment [ 558.841160][T14887] profile_transition: unconfined exec no attachment [ 558.859500][T14888] profile_transition: unconfined exec no attachment [ 558.887160][T14889] profile_transition: unconfined exec no attachment [ 558.912605][T14891] profile_transition: unconfined exec no attachment [ 558.947393][T14892] profile_transition: unconfined exec no attachment [ 559.100583][T14881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2717'. [ 559.104902][T14881] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2717'. [ 559.104923][T14881] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2717'. [ 560.540784][T14914] profile_transition: unconfined exec no attachment [ 560.601622][T14916] profile_transition: unconfined exec no attachment [ 561.162231][ C3] bridge0: port 1(bridge_slave_0) entered learning state [ 561.163147][ C3] bridge0: port 2(bridge_slave_1) entered learning state [ 562.441079][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.441208][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.633761][T14968] FAULT_INJECTION: forcing a failure. [ 562.633761][T14968] name failslab, interval 1, probability 0, space 0, times 0 [ 562.633801][T14968] CPU: 1 UID: 0 PID: 14968 Comm: syz.1.2729 Tainted: G L syzkaller #0 PREEMPT(full) [ 562.633841][T14968] Tainted: [L]=SOFTLOCKUP [ 562.633850][T14968] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 562.633863][T14968] Call Trace: [ 562.633873][T14968] [ 562.633883][T14968] dump_stack_lvl+0x100/0x190 [ 562.633955][T14968] should_fail_ex.cold+0x5/0xa [ 562.633999][T14968] should_failslab+0xc2/0x120 [ 562.634039][T14968] __kmalloc_cache_noprof+0x91/0x6d0 [ 562.634072][T14968] ? __pfx___mutex_lock+0x10/0x10 [ 562.634154][T14968] ? ring_buffer_read_start+0xf4/0x530 [ 562.634182][T14968] ring_buffer_read_start+0xf4/0x530 [ 562.634206][T14968] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 562.634228][T14968] ? lockdep_init_map_type+0x5c/0x250 [ 562.634255][T14968] ? ring_buffer_overruns+0x14e/0x1a0 [ 562.634290][T14968] __tracing_open+0x82e/0xa80 [ 562.634316][T14968] tracing_open+0x26b/0x460 [ 562.634340][T14968] do_dentry_open+0x674/0x1470 [ 562.634364][T14968] ? __pfx_tracing_open+0x10/0x10 [ 562.634390][T14968] vfs_open_consume+0xcc/0x460 [ 562.634424][T14968] path_openat+0x1547/0x23f0 [ 562.634455][T14968] ? __pfx_path_openat+0x10/0x10 [ 562.634490][T14968] do_file_open+0x20e/0x430 [ 562.634520][T14968] ? __pfx_do_file_open+0x10/0x10 [ 562.634566][T14968] ? _raw_spin_unlock+0x28/0x50 [ 562.634593][T14968] ? alloc_fd+0x471/0x7a0 [ 562.634626][T14968] do_sys_openat2+0x163/0x1d0 [ 562.634657][T14968] ? __pfx_do_sys_openat2+0x10/0x10 [ 562.634696][T14968] __ia32_compat_sys_openat+0x12d/0x210 [ 562.634728][T14968] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 562.634772][T14968] __do_fast_syscall_32+0x14d/0x8e0 [ 562.634807][T14968] do_fast_syscall_32+0x32/0x70 [ 562.634847][T14968] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 562.634875][T14968] RIP: 0023:0xf7f26fbc [ 562.634893][T14968] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 562.634913][T14968] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 562.634959][T14968] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0 [ 562.634973][T14968] RDX: 0000000000048342 RSI: 00000000000001a1 RDI: 0000000000000000 [ 562.634986][T14968] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 562.635000][T14968] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 562.635013][T14968] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 562.635043][T14968] [ 563.362996][ T43] audit: type=1326 audit(1794231359.998:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=14984 comm="syz.3.2733" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 563.367144][ T43] audit: type=1326 audit(1794231359.998:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=14984 comm="syz.3.2733" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 563.367468][ T43] audit: type=1326 audit(1794231359.998:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=14984 comm="syz.3.2733" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 563.367557][ T43] audit: type=1326 audit(1794231359.998:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=14984 comm="syz.3.2733" exe="/syz-executor" sig=0 arch=40000003 syscall=40 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 563.368275][ T43] audit: type=1326 audit(1794231360.008:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=14984 comm="syz.3.2733" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 563.489660][ T43] audit: type=1326 audit(1794231360.128:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=14984 comm="syz.3.2733" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 563.519744][ T43] audit: type=1326 audit(1794231360.148:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=14984 comm="syz.3.2733" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 563.552788][ T43] audit: type=1326 audit(1794231360.158:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=14984 comm="syz.3.2733" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 563.557262][ T43] audit: type=1326 audit(1794231360.188:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=14984 comm="syz.3.2733" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 563.578436][ T43] audit: type=1326 audit(1794231360.208:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=14984 comm="syz.3.2733" exe="/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf713b2d0 code=0x7ffc0000 [ 563.848877][T14986] Console: switching to colour dummy device 80x25 [ 564.100137][T14985] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2733'. [ 564.109329][T14985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2733'. [ 564.638723][T14996] profile_transition: 30 callbacks suppressed [ 564.638738][T14996] profile_transition: unconfined exec no attachment [ 564.696601][T14998] profile_transition: unconfined exec no attachment [ 564.702786][T14999] profile_transition: unconfined exec no attachment [ 564.746468][T15000] profile_transition: unconfined exec no attachment [ 564.755056][T15002] profile_transition: unconfined exec no attachment [ 564.812656][T15003] profile_transition: unconfined exec no attachment [ 564.895076][T15004] profile_transition: unconfined exec no attachment [ 564.896360][T15005] profile_transition: unconfined exec no attachment [ 565.175758][T15009] syzkaller0: entered promiscuous mode [ 565.175774][T15009] syzkaller0: entered allmulticast mode [ 565.609155][T14988] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 565.661425][T14988] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 565.661579][T14988] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 565.661823][T14988] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 565.665819][T14988] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 565.959674][T15017] profile_transition: unconfined exec no attachment [ 565.985581][T14988] pci 0000:00:01.0: Adding to iommu group 1 [ 566.014113][T14988] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 566.014131][T14988] pci 0000:00:01.0: vgaarb: bridge control possible [ 566.014140][T14988] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 566.069947][T15019] profile_transition: unconfined exec no attachment [ 566.073688][T14988] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 566.073841][T14988] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 566.094312][T14988] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 566.120580][T14988] [drm] Found bochs VGA, ID 0xb0c5. [ 566.120593][T14988] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 566.134193][T14988] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 568.691871][T15058] syzkaller0: entered promiscuous mode [ 568.691893][T15058] syzkaller0: entered allmulticast mode [ 570.149170][T15085] profile_transition: 14 callbacks suppressed [ 570.149187][T15085] profile_transition: unconfined exec no attachment [ 570.211189][T15082] profile_transition: unconfined exec no attachment [ 570.211993][T15087] profile_transition: unconfined exec no attachment [ 570.223605][T15088] profile_transition: unconfined exec no attachment [ 570.327258][T15092] profile_transition: unconfined exec no attachment [ 570.364083][T15093] profile_transition: unconfined exec no attachment [ 570.384035][T15096] profile_transition: unconfined exec no attachment [ 570.385065][T15095] profile_transition: unconfined exec no attachment [ 570.399137][T15099] profile_transition: unconfined exec no attachment [ 570.403741][T15100] profile_transition: unconfined exec no attachment [ 571.465579][T15143] No buffer was provided with the request [ 571.702588][T15139] evm: overlay not supported [ 573.163998][T15176] FAULT_INJECTION: forcing a failure. [ 573.163998][T15176] name failslab, interval 1, probability 0, space 0, times 0 [ 573.164021][T15176] CPU: 1 UID: 0 PID: 15176 Comm: syz.0.2768 Tainted: G L syzkaller #0 PREEMPT(full) [ 573.164039][T15176] Tainted: [L]=SOFTLOCKUP [ 573.164044][T15176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 573.164052][T15176] Call Trace: [ 573.164057][T15176] [ 573.164063][T15176] dump_stack_lvl+0x100/0x190 [ 573.164176][T15176] should_fail_ex.cold+0x5/0xa [ 573.164202][T15176] should_failslab+0xc2/0x120 [ 573.164244][T15176] __kvmalloc_node_noprof+0x113/0x9b0 [ 573.164260][T15176] ? do_replace_table+0x1c5/0x750 [ 573.164322][T15176] do_replace_table+0x1c5/0x750 [ 573.164345][T15176] xt_register_table+0x384/0x9a0 [ 573.164368][T15176] ? __pfx_xt_register_table+0x10/0x10 [ 573.164386][T15176] ? xt_alloc_table_info+0x44/0xa0 [ 573.164405][T15176] ? __asan_memset+0x23/0x50 [ 573.164418][T15176] ipt_register_table+0x137/0x2b0 [ 573.164462][T15176] ? __pfx_ipt_register_table+0x10/0x10 [ 573.164482][T15176] ? __kmalloc_noprof+0x350/0x840 [ 573.164499][T15176] ? ipt_alloc_initial_table+0x5b8/0x700 [ 573.164521][T15176] iptable_nat_table_init+0x4b/0x270 [ 573.164537][T15176] xt_find_table_lock+0x2db/0x520 [ 573.164559][T15176] xt_request_find_table_lock+0x28/0xf0 [ 573.164578][T15176] get_info+0x196/0x5f0 [ 573.164598][T15176] ? sockopt_release_sock+0x5c/0x70 [ 573.164622][T15176] ? __pfx_get_info+0x10/0x10 [ 573.164652][T15176] ? lock_acquire+0x1d1/0x380 [ 573.164680][T15176] ? nf_sockopt_find.isra.0+0x2a/0x290 [ 573.164711][T15176] ? hook_capable+0x1bc/0x500 [ 573.164748][T15176] ? rcu_is_watching+0x13/0xc0 [ 573.164801][T15176] ? bpf_lsm_capable+0x9/0x10 [ 573.164823][T15176] ? security_capable+0x80/0x260 [ 573.164851][T15176] do_ipt_get_ctl+0x209/0xab0 [ 573.164886][T15176] ? __mutex_unlock_slowpath+0x35d/0x930 [ 573.164957][T15176] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 573.164989][T15176] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 573.165023][T15176] ? lock_acquire+0x1d1/0x380 [ 573.165044][T15176] ? __might_fault+0xc5/0x140 [ 573.165075][T15176] ? nf_sockopt_find.isra.0+0x222/0x290 [ 573.165103][T15176] nf_getsockopt+0x7c/0xe0 [ 573.165129][T15176] ip_getsockopt+0x192/0x1e0 [ 573.165163][T15176] ? __pfx_ip_getsockopt+0x10/0x10 [ 573.165185][T15176] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 573.165215][T15176] sctp_getsockopt+0x19b/0x70e0 [ 573.165262][T15176] ? aa_inet_opt_perm+0x307/0x8e0 [ 573.165291][T15176] ? __pfx_sctp_getsockopt+0x10/0x10 [ 573.165322][T15176] ? futex_unqueue+0x29/0x2c0 [ 573.165353][T15176] ? find_held_lock+0x2b/0x80 [ 573.165382][T15176] ? futex_unqueue+0x133/0x2c0 [ 573.165409][T15176] ? futex_unqueue+0x133/0x2c0 [ 573.165442][T15176] ? futex_unqueue+0x13d/0x2c0 [ 573.165470][T15176] ? __futex_wait+0x2ac/0x360 [ 573.165501][T15176] ? __pfx_futex_wake_mark+0x10/0x10 [ 573.165548][T15176] ? __pfx_futex_hash+0x10/0x10 [ 573.165576][T15176] ? __pfx_get_futex_key+0x10/0x10 [ 573.165614][T15176] ? aa_sock_opt_perm+0x114/0x1e0 [ 573.165642][T15176] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 573.165670][T15176] do_sock_getsockopt+0x415/0x570 [ 573.165706][T15176] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 573.165741][T15176] ? __fget_files+0x34/0x3d0 [ 573.165766][T15176] ? find_held_lock+0x2b/0x80 [ 573.165799][T15176] ? __fget_files+0x21f/0x3d0 [ 573.165828][T15176] __sys_getsockopt+0x133/0x1d0 [ 573.165860][T15176] ? __might_fault+0xc5/0x140 [ 573.165890][T15176] ? __ia32_sys_getsockopt+0xbc/0x160 [ 573.165920][T15176] __ia32_sys_getsockopt+0xbc/0x160 [ 573.165949][T15176] ? __might_fault+0x111/0x140 [ 573.165975][T15176] __do_fast_syscall_32+0x14d/0x8e0 [ 573.166012][T15176] do_fast_syscall_32+0x32/0x70 [ 573.166044][T15176] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 573.166069][T15176] RIP: 0023:0xf7f43fbc [ 573.166087][T15176] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 573.166107][T15176] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 573.166149][T15176] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 573.166164][T15176] RDX: 0000000000000040 RSI: 0000000080000040 RDI: 00000000800000c0 [ 573.166178][T15176] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 573.166191][T15176] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 573.166203][T15176] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 573.166231][T15176] [ 575.113467][T15200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.113486][T15200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.123567][T15200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.123585][T15200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.146613][T15212] profile_transition: 31 callbacks suppressed [ 576.146638][T15212] profile_transition: unconfined exec no attachment [ 576.228602][T15215] profile_transition: unconfined exec no attachment [ 576.424763][T15220] profile_transition: unconfined exec no attachment [ 576.456902][T15222] profile_transition: unconfined exec no attachment [ 576.470938][T15223] profile_transition: unconfined exec no attachment [ 576.558353][T15225] profile_transition: unconfined exec no attachment [ 576.572670][T15226] profile_transition: unconfined exec no attachment [ 576.614493][T15227] profile_transition: unconfined exec no attachment [ 576.627820][T15228] profile_transition: unconfined exec no attachment [ 576.678740][T15230] profile_transition: unconfined exec no attachment [ 577.530109][T15237] tipc: Enabled bearer , priority 0 [ 577.532422][T15237] syzkaller0: entered promiscuous mode [ 577.532442][T15237] syzkaller0: entered allmulticast mode [ 577.590668][T15237] tipc: Resetting bearer [ 577.713579][T15235] tipc: Resetting bearer [ 577.772496][T15235] tipc: Disabling bearer [ 578.411900][T15263] overlay: ./file1 is not a directory [ 579.347614][T15268] i801_smbus 0000:00:1f.3: SMBus using PCI interrupt [ 579.360275][T15268] FAULT_INJECTION: forcing a failure. [ 579.360275][T15268] name failslab, interval 1, probability 0, space 0, times 0 [ 579.360307][T15268] CPU: 3 UID: 0 PID: 15268 Comm: syz.1.2786 Tainted: G L syzkaller #0 PREEMPT(full) [ 579.360336][T15268] Tainted: [L]=SOFTLOCKUP [ 579.360345][T15268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 579.360357][T15268] Call Trace: [ 579.360364][T15268] [ 579.360373][T15268] dump_stack_lvl+0x100/0x190 [ 579.360409][T15268] should_fail_ex.cold+0x5/0xa [ 579.360441][T15268] should_failslab+0xc2/0x120 [ 579.360467][T15268] __kmalloc_noprof+0xfc/0x840 [ 579.360487][T15268] ? stack_depot_save_flags+0x27/0xa10 [ 579.360534][T15268] ? acpi_ns_internalize_name+0x161/0x2e0 [ 579.360572][T15268] acpi_ns_internalize_name+0x161/0x2e0 [ 579.360604][T15268] ? __pfx_acpi_ns_internalize_name+0x10/0x10 [ 579.360633][T15268] ? __lock_acquire+0x5c0/0x1f40 [ 579.360655][T15268] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 579.360680][T15268] ? i801_probe.cold+0x30c/0x8bf [ 579.360706][T15268] ? local_pci_probe+0xdd/0x1b0 [ 579.360724][T15268] ? pci_call_probe+0x176/0x800 [ 579.360743][T15268] ? pci_device_probe+0x25b/0x400 [ 579.360762][T15268] ? really_probe+0x241/0xa60 [ 579.360800][T15268] ? __driver_probe_device+0x210/0x460 [ 579.360824][T15268] acpi_ns_get_node_unlocked+0x18c/0x500 [ 579.360859][T15268] ? __pfx_acpi_ns_get_node_unlocked+0x10/0x10 [ 579.360893][T15268] ? mark_held_locks+0x40/0x70 [ 579.360923][T15268] ? acpi_os_wait_semaphore+0x21e/0x3b0 [ 579.360949][T15268] ? acpi_ns_get_node+0x6c/0xf0 [ 579.360975][T15268] acpi_ns_get_node+0x6c/0xf0 [ 579.361007][T15268] acpi_ns_evaluate+0xb01/0x1670 [ 579.361030][T15268] ? acpi_evaluate_object+0xf5/0xe00 [ 579.361066][T15268] acpi_evaluate_object+0x420/0xe00 [ 579.361095][T15268] ? is_bpf_text_address+0x8a/0x1a0 [ 579.361123][T15268] ? bpf_ksym_find+0x124/0x1c0 [ 579.361164][T15268] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 579.361198][T15268] ? __kernel_text_address+0xd/0x30 [ 579.361229][T15268] ? unwind_get_return_address+0x59/0xa0 [ 579.361268][T15268] acpi_evaluate_integer+0xdf/0x220 [ 579.361294][T15268] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 579.361335][T15268] acpi_bus_get_status+0x19c/0x420 [ 579.361363][T15268] ? __pfx_acpi_bus_get_status+0x10/0x10 [ 579.361393][T15268] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 579.361422][T15268] ? lockdep_hardirqs_on+0x7d/0x110 [ 579.361454][T15268] i2c_acpi_do_lookup+0x9b/0x280 [ 579.361515][T15268] ? __pfx_up+0x10/0x10 [ 579.361545][T15268] ? __pfx_i2c_acpi_do_lookup+0x10/0x10 [ 579.361579][T15268] ? acpi_ut_track_stack_ptr+0x114/0x180 [ 579.361608][T15268] i2c_acpi_get_info+0x115/0x360 [ 579.361629][T15268] ? __pfx_i2c_acpi_get_info+0x10/0x10 [ 579.361667][T15268] ? acpi_fetch_acpi_dev+0x99/0xe0 [ 579.361686][T15268] ? __pfx_acpi_fetch_acpi_dev+0x10/0x10 [ 579.361712][T15268] i2c_acpi_add_device+0xb5/0x200 [ 579.361731][T15268] ? __pfx_i2c_acpi_add_device+0x10/0x10 [ 579.361749][T15268] ? __pfx_up+0x10/0x10 [ 579.361775][T15268] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 579.361809][T15268] ? acpi_os_signal_semaphore+0x11e/0x1a0 [ 579.361836][T15268] acpi_ns_walk_namespace+0x4cc/0x760 [ 579.361867][T15268] ? __pfx_i2c_acpi_add_device+0x10/0x10 [ 579.361889][T15268] ? __pfx_i2c_acpi_add_device+0x10/0x10 [ 579.361908][T15268] acpi_walk_namespace+0xff/0x1d0 [ 579.361943][T15268] i2c_acpi_register_devices+0x82/0x160 [ 579.361964][T15268] i2c_register_adapter+0x8c0/0x13f0 [ 579.361989][T15268] ? of_alias_get_id+0xb1/0x110 [ 579.362043][T15268] i801_probe.cold+0x30c/0x8bf [ 579.362074][T15268] ? __pfx_i801_probe+0x10/0x10 [ 579.362109][T15268] ? mark_held_locks+0x40/0x70 [ 579.362131][T15268] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 579.362158][T15268] ? lockdep_hardirqs_on+0x7d/0x110 [ 579.362187][T15268] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 579.362215][T15268] ? __pfx_i801_probe+0x10/0x10 [ 579.362242][T15268] local_pci_probe+0xdd/0x1b0 [ 579.362267][T15268] pci_call_probe+0x176/0x800 [ 579.362288][T15268] ? pci_match_device+0x147/0x7d0 [ 579.362307][T15268] ? __pfx_pci_call_probe+0x10/0x10 [ 579.362335][T15268] ? __pfx_pci_match_device+0x10/0x10 [ 579.362356][T15268] ? pci_find_host_bridge+0x3c/0x80 [ 579.362392][T15268] pci_device_probe+0x25b/0x400 [ 579.362415][T15268] ? __pfx_pci_device_probe+0x10/0x10 [ 579.362445][T15268] ? sysfs_create_link+0x68/0xc0 [ 579.362479][T15268] ? __pfx_pci_device_probe+0x10/0x10 [ 579.362503][T15268] really_probe+0x241/0xa60 [ 579.362526][T15268] __driver_probe_device+0x210/0x460 [ 579.362550][T15268] device_driver_attach+0xaa/0x230 [ 579.362571][T15268] bind_store+0xf4/0x190 [ 579.362595][T15268] ? __pfx_bind_store+0x10/0x10 [ 579.362623][T15268] drv_attr_store+0x74/0xb0 [ 579.362646][T15268] ? __pfx_drv_attr_store+0x10/0x10 [ 579.362669][T15268] sysfs_kf_write+0xf2/0x150 [ 579.362698][T15268] kernfs_fop_write_iter+0x3e0/0x5f0 [ 579.362722][T15268] ? __pfx_sysfs_kf_write+0x10/0x10 [ 579.362751][T15268] vfs_write+0x6af/0x1040 [ 579.362775][T15268] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 579.362801][T15268] ? __pfx_vfs_write+0x10/0x10 [ 579.362820][T15268] ? find_held_lock+0x2b/0x80 [ 579.362867][T15268] ksys_write+0x12a/0x250 [ 579.362888][T15268] ? __pfx_ksys_write+0x10/0x10 [ 579.362917][T15268] __do_fast_syscall_32+0x14d/0x8e0 [ 579.362956][T15268] do_fast_syscall_32+0x32/0x70 [ 579.362989][T15268] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 579.363014][T15268] RIP: 0023:0xf7f26fbc [ 579.363032][T15268] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 579.363084][T15268] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 579.363106][T15268] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800005c0 [ 579.363120][T15268] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 579.363132][T15268] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 579.363145][T15268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.363157][T15268] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 579.363185][T15268] [ 579.669209][T15268] i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD [ 581.328194][T15326] No buffer was provided with the request [ 586.349581][T15344] syzkaller0: entered promiscuous mode [ 586.349597][T15344] syzkaller0: entered allmulticast mode [ 586.394496][T15346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2801'. [ 591.238543][ C3] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.238564][ C3] bridge0: topology change detected, propagating [ 591.238804][ C3] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.238819][ C3] bridge0: topology change detected, propagating [ 593.449184][T15389] profile_transition: 36 callbacks suppressed [ 593.449206][T15389] profile_transition: unconfined exec no attachment [ 593.559545][T15390] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 593.577752][T15390] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 593.578169][T15390] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 593.578741][T15390] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 593.581859][T15390] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 593.599392][T15393] profile_transition: unconfined exec no attachment [ 593.659665][T15390] pci 0000:00:01.0: Adding to iommu group 1 [ 593.686665][T15390] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 593.686687][T15390] pci 0000:00:01.0: vgaarb: bridge control possible [ 593.686702][T15390] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 593.697883][T15390] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 593.698539][T15390] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 593.745826][T15390] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 593.848418][T15397] profile_transition: unconfined exec no attachment [ 593.967064][T15398] profile_transition: unconfined exec no attachment [ 594.263093][T15401] profile_transition: unconfined exec no attachment [ 594.266564][T15402] profile_transition: unconfined exec no attachment [ 594.287199][T15403] profile_transition: unconfined exec no attachment [ 594.302955][T15404] profile_transition: unconfined exec no attachment [ 594.541409][T15390] [drm] Found bochs VGA, ID 0xb0c5. [ 594.541427][T15390] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 594.662184][T15390] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 594.745286][T15410] profile_transition: unconfined exec no attachment [ 595.553536][T15390] Console: switching to colour frame buffer device 160x50 [ 595.553596][T15390] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 596.067044][T15417] profile_transition: unconfined exec no attachment [ 597.378526][T15424] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 599.401920][T15437] profile_transition: unconfined exec no attachment [ 599.447002][ T43] kauditd_printk_skb: 89 callbacks suppressed [ 599.447028][ T43] audit: type=1326 audit(1794231397.084:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=15431 comm="syz.2.2828" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f52fbc code=0x0 [ 599.996115][T15436] block device autoloading is deprecated and will be removed. [ 609.142823][ T117] ------------[ cut here ]------------ [ 609.142838][ T117] current->flags & PF_MEMALLOC [ 609.142846][ T117] WARNING: mm/page_alloc.c:4817 at __alloc_frozen_pages_noprof+0x1d7e/0x31e0, CPU#0: kswapd1/117 [ 609.151170][ T117] Modules linked in: [ 609.152863][ T117] CPU: 0 UID: 0 PID: 117 Comm: kswapd1 Tainted: G L syzkaller #0 PREEMPT(full) [ 609.157138][ T117] Tainted: [L]=SOFTLOCKUP [ 609.159224][ T117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 609.163646][ T117] RIP: 0010:__alloc_frozen_pages_noprof+0x1d7e/0x31e0 [ 609.166283][ T117] Code: 38 d0 7c 08 84 d2 0f 85 02 14 00 00 65 48 8b 05 90 7a 41 13 c7 84 24 90 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 6a e7 ff ff 90 <0f> 0b 90 e9 61 e7 ff ff 8b bc 24 90 00 00 00 85 ff 0f 85 90 07 00 [ 609.172899][ T117] RSP: 0000:ffffc9000220ed48 EFLAGS: 00010202 [ 609.174881][ T117] RAX: ffff888040bd0000 RBX: 0000000000000000 RCX: 1ffff1100fffad69 [ 609.177391][ T117] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 609.180153][ T117] RBP: 0000000000000000 R08: 0000000000008000 R09: 0000000000002f2f [ 609.182705][ T117] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888040bd002c [ 609.185402][ T117] R13: 1ffff92000441dc3 R14: 0000000000048c40 R15: 0000000000000000 [ 609.187925][ T117] FS: 0000000000000000(0000) GS:ffff888095279000(0000) knlGS:0000000000000000 [ 609.191093][ T117] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 609.193214][ T117] CR2: 000000002e822580 CR3: 0000000044870000 CR4: 0000000000352ef0 [ 609.195797][ T117] Call Trace: [ 609.196938][ T117] [ 609.198093][ T117] ? mtree_range_walk+0x72b/0xb70 [ 609.199773][ T117] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 609.201756][ T117] ? mas_next_slot+0xc05/0x13a0 [ 609.203299][ T117] ? mas_find+0x2cb/0x790 [ 609.204806][ T117] ? __lock_acquire+0x5c0/0x1f40 [ 609.206830][ T117] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 609.209346][ T117] ? policy_nodemask+0xed/0x5e0 [ 609.211350][ T117] alloc_pages_mpol+0x201/0x560 [ 609.213327][ T117] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 609.215221][ T117] ? filemap_get_entry+0x22d/0x450 [ 609.216852][ T117] ? filemap_get_entry+0x22d/0x450 [ 609.218971][ T117] folio_alloc_noprof+0x22/0x250 [ 609.220545][ T117] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 609.222628][ T117] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 609.224794][ T117] ? lock_acquire+0x1d1/0x380 [ 609.226422][ T117] ? ext4_get_group_info+0x177/0x4b0 [ 609.228308][ T117] ? find_held_lock+0x2b/0x80 [ 609.229800][ T117] __filemap_get_folio_mpol+0x64e/0x11d0 [ 609.231570][ T117] ext4_mb_load_buddy_gfp+0x708/0x1b20 [ 609.233542][ T117] ext4_discard_preallocations+0x584/0x10c0 [ 609.235661][ T117] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 609.237742][ T117] ? __pfx_xa_destroy+0x10/0x10 [ 609.239329][ T117] ? inode_wait_for_writeback+0x171/0x390 [ 609.241221][ T117] ? inode_lru_isolate+0x30/0x11d0 [ 609.242887][ T117] ext4_clear_inode+0x6e/0x280 [ 609.244527][ T117] ext4_evict_inode+0x1de/0x1890 [ 609.246106][ T117] ? evict+0x37e/0xad0 [ 609.247461][ T117] ? __pfx_ext4_evict_inode+0x10/0x10 [ 609.249277][ T117] evict+0x3c2/0xad0 [ 609.250723][ T117] ? _raw_spin_unlock+0x28/0x50 [ 609.252280][ T117] ? __list_lru_walk_one+0x26d/0x550 [ 609.253961][ T117] ? __pfx_evict+0x10/0x10 [ 609.255441][ T117] ? xa_load+0x149/0x2c0 [ 609.256834][ T117] ? xa_load+0x149/0x2c0 [ 609.258515][ T117] dispose_list+0x117/0x1e0 [ 609.260032][ T117] prune_icache_sb+0xea/0x150 [ 609.261562][ T117] ? list_lru_count_one+0x147/0x320 [ 609.263259][ T117] ? __pfx_prune_icache_sb+0x10/0x10 [ 609.264968][ T117] super_cache_scan+0x37c/0x560 [ 609.266525][ T117] do_shrink_slab+0x411/0x1200 [ 609.268106][ T117] shrink_slab+0xa78/0x12d0 [ 609.269551][ T117] ? shrink_slab+0x68b/0x12d0 [ 609.271037][ T117] ? __pfx_shrink_slab+0x10/0x10 [ 609.272598][ T117] ? lock_acquire+0x1d1/0x380 [ 609.274092][ T117] shrink_one+0x3d3/0x870 [ 609.275567][ T117] ? shrink_node+0x2a41/0x4410 [ 609.277121][ T117] shrink_node+0x2a61/0x4410 [ 609.278927][ T117] ? __lock_acquire+0x5c0/0x1f40 [ 609.280523][ T117] ? shrink_node+0x276d/0x4410 [ 609.282141][ T117] ? __pfx_shrink_node+0x10/0x10 [ 609.283773][ T117] ? find_held_lock+0x2b/0x80 [ 609.285314][ T117] ? balance_pgdat+0xa9e/0x1e60 [ 609.286866][ T117] balance_pgdat+0xa9e/0x1e60 [ 609.288690][ T117] ? __pfx_balance_pgdat+0x10/0x10 [ 609.290311][ T117] ? __lock_acquire+0x5c0/0x1f40 [ 609.291902][ T117] ? rcu_is_watching+0x13/0xc0 [ 609.293466][ T117] kswapd+0x556/0xb50 [ 609.294741][ T117] ? __pfx_kswapd+0x10/0x10 [ 609.296313][ T117] ? __rcu_read_lock+0x50/0x70 [ 609.297979][ T117] ? __pfx_autoremove_wake_function+0x10/0x10 [ 609.300075][ T117] ? __kthread_parkme+0x18f/0x230 [ 609.302093][ T117] ? kthread+0x13a/0x450 [ 609.303834][ T117] ? __pfx_kswapd+0x10/0x10 [ 609.305713][ T117] kthread+0x373/0x450 [ 609.307386][ T117] ? __pfx_kthread+0x10/0x10 [ 609.308984][ T117] ret_from_fork+0x730/0xd60 [ 609.310739][ T117] ? __pfx_ret_from_fork+0x10/0x10 [ 609.312903][ T117] ? __switch_to+0x800/0x10e0 [ 609.314860][ T117] ? __pfx_kthread+0x10/0x10 [ 609.316826][ T117] ret_from_fork_asm+0x1a/0x30 [ 609.318979][ T117] [ 609.320195][ T117] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 609.323147][ T117] CPU: 0 UID: 0 PID: 117 Comm: kswapd1 Tainted: G L syzkaller #0 PREEMPT(full) [ 609.327785][ T117] Tainted: [L]=SOFTLOCKUP [ 609.329618][ T117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 609.333400][ T117] Call Trace: [ 609.334617][ T117] [ 609.335783][ T117] dump_stack_lvl+0x100/0x190 [ 609.337737][ T117] vpanic+0x2dc/0x6f8 [ 609.339464][ T117] panic+0xd1/0xe0 [ 609.341023][ T117] ? __pfx_panic+0x10/0x10 [ 609.342924][ T117] check_panic_on_warn.cold+0x19/0x34 [ 609.345301][ T117] ? __alloc_frozen_pages_noprof+0x1d7e/0x31e0 [ 609.347370][ T117] __warn.cold+0x191/0x321 [ 609.348866][ T117] __report_bug+0x30f/0x440 [ 609.350766][ T117] ? __alloc_frozen_pages_noprof+0x1d7e/0x31e0 [ 609.353311][ T117] ? __pfx___report_bug+0x10/0x10 [ 609.355238][ T117] ? __zone_watermark_ok+0x281/0x500 [ 609.357368][ T117] ? get_page_from_freelist+0x346/0x3640 [ 609.359545][ T117] ? __alloc_frozen_pages_noprof+0x1d7e/0x31e0 [ 609.361943][ T117] report_bug+0xb3/0x220 [ 609.363693][ T117] ? __alloc_frozen_pages_noprof+0x1d7e/0x31e0 [ 609.366236][ T117] handle_bug+0x16a/0x2a0 [ 609.368101][ T117] exc_invalid_op+0x17/0x50 [ 609.370022][ T117] asm_exc_invalid_op+0x1a/0x20 [ 609.372293][ T117] RIP: 0010:__alloc_frozen_pages_noprof+0x1d7e/0x31e0 [ 609.375107][ T117] Code: 38 d0 7c 08 84 d2 0f 85 02 14 00 00 65 48 8b 05 90 7a 41 13 c7 84 24 90 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 6a e7 ff ff 90 <0f> 0b 90 e9 61 e7 ff ff 8b bc 24 90 00 00 00 85 ff 0f 85 90 07 00 [ 609.383196][ T117] RSP: 0000:ffffc9000220ed48 EFLAGS: 00010202 [ 609.385576][ T117] RAX: ffff888040bd0000 RBX: 0000000000000000 RCX: 1ffff1100fffad69 [ 609.388251][ T117] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 609.391398][ T117] RBP: 0000000000000000 R08: 0000000000008000 R09: 0000000000002f2f [ 609.394508][ T117] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888040bd002c [ 609.397806][ T117] R13: 1ffff92000441dc3 R14: 0000000000048c40 R15: 0000000000000000 [ 609.400848][ T117] ? __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 609.403424][ T117] ? mtree_range_walk+0x72b/0xb70 [ 609.405525][ T117] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 609.408046][ T117] ? mas_next_slot+0xc05/0x13a0 [ 609.409996][ T117] ? mas_find+0x2cb/0x790 [ 609.411708][ T117] ? __lock_acquire+0x5c0/0x1f40 [ 609.413815][ T117] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 609.416386][ T117] ? policy_nodemask+0xed/0x5e0 [ 609.418207][ T117] alloc_pages_mpol+0x201/0x560 [ 609.420159][ T117] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 609.422550][ T117] ? filemap_get_entry+0x22d/0x450 [ 609.424568][ T117] ? filemap_get_entry+0x22d/0x450 [ 609.426557][ T117] folio_alloc_noprof+0x22/0x250 [ 609.428741][ T117] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 609.430865][ T117] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 609.433270][ T117] ? lock_acquire+0x1d1/0x380 [ 609.435085][ T117] ? ext4_get_group_info+0x177/0x4b0 [ 609.437339][ T117] ? find_held_lock+0x2b/0x80 [ 609.439165][ T117] __filemap_get_folio_mpol+0x64e/0x11d0 [ 609.441351][ T117] ext4_mb_load_buddy_gfp+0x708/0x1b20 [ 609.443636][ T117] ext4_discard_preallocations+0x584/0x10c0 [ 609.446054][ T117] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 609.448692][ T117] ? __pfx_xa_destroy+0x10/0x10 [ 609.450780][ T117] ? inode_wait_for_writeback+0x171/0x390 [ 609.453200][ T117] ? inode_lru_isolate+0x30/0x11d0 [ 609.455346][ T117] ext4_clear_inode+0x6e/0x280 [ 609.457646][ T117] ext4_evict_inode+0x1de/0x1890 [ 609.459446][ T117] ? evict+0x37e/0xad0 [ 609.461588][ T117] ? __pfx_ext4_evict_inode+0x10/0x10 [ 609.464733][ T117] evict+0x3c2/0xad0 [ 609.466402][ T117] ? _raw_spin_unlock+0x28/0x50 [ 609.468353][ T117] ? __list_lru_walk_one+0x26d/0x550 [ 609.470462][ T117] ? __pfx_evict+0x10/0x10 [ 609.472302][ T117] ? xa_load+0x149/0x2c0 [ 609.473975][ T117] ? xa_load+0x149/0x2c0 [ 609.475706][ T117] dispose_list+0x117/0x1e0 [ 609.477493][ T117] prune_icache_sb+0xea/0x150 [ 609.479660][ T117] ? list_lru_count_one+0x147/0x320 [ 609.481712][ T117] ? __pfx_prune_icache_sb+0x10/0x10 [ 609.483836][ T117] super_cache_scan+0x37c/0x560 [ 609.485767][ T117] do_shrink_slab+0x411/0x1200 [ 609.487752][ T117] shrink_slab+0xa78/0x12d0 [ 609.489741][ T117] ? shrink_slab+0x68b/0x12d0 [ 609.491670][ T117] ? __pfx_shrink_slab+0x10/0x10 [ 609.493414][ T117] ? lock_acquire+0x1d1/0x380 [ 609.495167][ T117] shrink_one+0x3d3/0x870 [ 609.496832][ T117] ? shrink_node+0x2a41/0x4410 [ 609.498538][ T117] shrink_node+0x2a61/0x4410 [ 609.500060][ T117] ? __lock_acquire+0x5c0/0x1f40 [ 609.502112][ T117] ? shrink_node+0x276d/0x4410 [ 609.504129][ T117] ? __pfx_shrink_node+0x10/0x10 [ 609.505918][ T117] ? find_held_lock+0x2b/0x80 [ 609.507614][ T117] ? balance_pgdat+0xa9e/0x1e60 [ 609.509474][ T117] balance_pgdat+0xa9e/0x1e60 [ 609.511362][ T117] ? __pfx_balance_pgdat+0x10/0x10 [ 609.513120][ T117] ? __lock_acquire+0x5c0/0x1f40 [ 609.515065][ T117] ? rcu_is_watching+0x13/0xc0 [ 609.517114][ T117] kswapd+0x556/0xb50 [ 609.518814][ T117] ? __pfx_kswapd+0x10/0x10 [ 609.520394][ T117] ? __rcu_read_lock+0x50/0x70 [ 609.522086][ T117] ? __pfx_autoremove_wake_function+0x10/0x10 [ 609.524398][ T117] ? __kthread_parkme+0x18f/0x230 [ 609.526376][ T117] ? kthread+0x13a/0x450 [ 609.527759][ T117] ? __pfx_kswapd+0x10/0x10 [ 609.529434][ T117] kthread+0x373/0x450 [ 609.531105][ T117] ? __pfx_kthread+0x10/0x10 [ 609.533057][ T117] ret_from_fork+0x730/0xd60 [ 609.534768][ T117] ? __pfx_ret_from_fork+0x10/0x10 [ 609.536685][ T117] ? __switch_to+0x800/0x10e0 [ 609.538215][ T117] ? __pfx_kthread+0x10/0x10 [ 609.540107][ T117] ret_from_fork_asm+0x1a/0x30 [ 609.542152][ T117] [ 609.543992][ T117] Kernel Offset: disabled [ 609.545711][ T117] Rebooting in 86400 seconds..