last executing test programs: 1m7.8478995s ago: executing program 3 (id=455): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000020603000000000000000000020000001c0007800800064000000001050015000200000008001240000040000500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000fcffff000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a3100"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d00000000000100000000000000"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000002080)={0x77359400}, &(0x7f0000000040)) accept4(r5, 0x0, 0x0, 0x800) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) 1m6.947632838s ago: executing program 3 (id=472): socket$nl_netfilter(0x10, 0x3, 0xc) openat$zero(0xffffff9c, &(0x7f0000000040), 0x8200, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) (fail_nth: 2) 1m6.857405049s ago: executing program 3 (id=474): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uac1.usb0/p_volume_max\x00', 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250b"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x40814) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r4, r5, r6, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r2, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r7, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r4, r5) r9 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r7, 0x2) syz_ublk_setup_queues(r9, r8, &(0x7f0000000700), &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4000, 0x10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0xfffffffe}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5de9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x323}}], 0x1, &(0x7f0000000900)={0x2e, 0x4e, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) nanosleep(&(0x7f0000001a00)={0x5}, &(0x7f0000001a40)) r11 = epoll_create(0x8) clock_gettime(0x0, 0x0) epoll_pwait2(r11, &(0x7f0000001b00)=[{}], 0x1, &(0x7f0000001b80), &(0x7f0000001bc0)={[0x2, 0x2]}, 0x8) syz_io_uring_submit$UBLK(r4, r5, r6, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r2, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r7}}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r4, r5) nanosleep(&(0x7f0000001a80)={0x5}, &(0x7f0000001ac0)) r12 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r7, 0x0) pread64$ublk_bdev(r12, &(0x7f0000005000)=""/4096, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) syz_ublk_process_io(r10, 0x0, 0x1, &(0x7f0000000e00), 0x0) syz_io_uring_submit$UBLK(r4, r5, r6, &(0x7f0000000f00)=@ublk_stop_dev_sqe={0x2e, 0x0, 0x0, r2, 0xc0207507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r7}}) io_uring_enter(r3, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r4, r5) 1m5.987581574s ago: executing program 3 (id=490): r0 = syz_open_dev$evdev(&(0x7f00000002c0), 0x11bbc, 0x801) write$evdev(r0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000180)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000000)=""/91) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x48}}, 0x80) syz_emit_ethernet(0x76, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa1c86dd60122d9200403afffe8000000000000000000000000000bbff020000000000000000000000000001030190780000000069455c438000000000000000000000000000000000000000fe880000000000000000000000000001890000000000000070fbb9bdebfba373b8359a1f7cfc83e41ef1b8435e4bf231a8c282627d46e9a1e466a38527f0bc4b3e387b48d34cff579daff8e096b5617655b19d6db8af1e435708e2beb570cc97bb2afa2b6a665aca7c860838374fd5531b16edbb63f0343c"], 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r7 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r7, 0x0}]) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="fdffffff00060400000006dc7b923a3f000000000010850000000e00", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000100000085000000330000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x4c) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0104fcffffff000000001e0000002000018008000100", @ANYRES32=r4, @ANYBLOB="1400020076657468315f746f5f7465616d"], 0x34}, 0x1, 0x0, 0x0, 0x2404000d}, 0x400d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1b2) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000008e00)=0x9, 0x6a6f, 0x2) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001280), 0x1, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0xa0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0x8, 0x9, 0x0, 0x48000000, 0x0, 0xfffffff8, 0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x88d1}, 0x20000814) 1m5.833928133s ago: executing program 3 (id=492): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40480, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='external:', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5', 0x5) write(0xffffffffffffffff, &(0x7f0000000380)='2', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='65536', 0x5) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/consistency_policy\x00', 0x1, 0x0) 1m5.328620167s ago: executing program 3 (id=495): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='my_sys\x00', 0x0) (async) mount(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x200000, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (rerun: 64) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000cc0)="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", 0x17c}, {&(0x7f0000000600)="d44ce00f8fd55fd697bc4ea1e9b04a44f940bc492d1d4048829720ec08a561468fd46c6f9f4cef472da2a8016ef44e97ee24c173407ab1b40a4d38f0f4235d1504aa438417bbec1dbc5d84a4e34bf82cc45b79d8f8f45193f25eefd678c16f6883c87e4adb96c092a5637646c9245ca81408eadbbcb11aacc78af452ff3d669d926306dce587fbb4c5b952b2f34d5ea7cc2e5f0f129db10fd505ccc04d195a13d8addf54e54f629a530c8c0388339115f8322d0917c15eb173bf9b545bd4bf67185cb8c53e7c47980e651d504a98d2e18f8ef3a76eee2523f5ecb7f27a30b6aff9c86a09869a76ce904f3807827dabb9da58", 0xf2}, {&(0x7f0000000700)="1776a230e2b9", 0x6}, {&(0x7f00000009c0)="9bde76573c0100008000000000671963de9498235e2b7e471216a30c1446aa2bde7f9a98d2012cc76c26d629db5ccba4ab0f0891aaf44593a07a3a615a04a6b8ddbb5aef0700f086c2abe8f12f34d3ad915788579706cdb07848ca47abf82bdd6e6f76d2cc364e6bad8c653a9e49824470145c6c510db94a81a70d0929a42c3d6b644c772dd952bc2d2b7892b3ac1d8f8a48a7f959d83222b3f43180f03b32e510bcdd1ce626962ca6fdcecaf02d93b8dec76155b9a3d04be26428191e9734cc228b4346df1f038aa3ae72e818f6807420fb06e2749a2ce07b", 0xd9}, {&(0x7f0000000980)="06265df21194e66e600fa38789438ff90e3bb33ad030cc435013642c343a5a", 0x1f}, {&(0x7f0000000b40)="6097f886858e9eab3f26556a5dcfd162b1e049ba6862cc327b2da7318617d1aab81224e37ba54ce4b7c7406fac1c640ea2afb3313256c1980ccc58f9f808b4a748e5eb76f5f2a52fd2296779498414e46f1c62f5ae2f3ce96c7f5c21827fad7dd6bd5edb9c8297534ffbcdb9914cdecce53482cfb606a638a6eeb89cd393dd464af139bfac46911281fac5335b185661982561c9795122705e6a771a4835f0385000da83746c55d3b12a16048724dfdf11ab8f9c2561e5657172c26690742d66735ddd3b70765ea37f10adfd11efa312e934098828d6a9e5fbe8129f63", 0xdd}, {&(0x7f0000000c40)="a873c17ea3d310d4a93f7e2d333225d3e7aa0c6ca8bf1b3f6488d7ebdee2059b3e3c6e6246c4767d1c7bed93eccd6a1932bb6cb8ed9dea56707ea39c026b34eeb3fb781c9cf7f1c0d9ea1bcc547b04899c3243da92756db6ee3d62b73e3c6c9d15252d5eeb0caf6d1420", 0x6a}], 0x7}, 0x24000004) (async, rerun: 64) chdir(&(0x7f0000000140)='./file2\x00') (rerun: 64) acct(&(0x7f0000000000)='./mnt\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure\x00', 0x275a, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1fd) (async) mount(0x0, &(0x7f0000000480)='my_sys/bus/pci/devices/0000:00:03.0/resource1/file0/file0\x00', &(0x7f0000000440)='rpc_pipefs\x00', 0x80410, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r2, 0x0) (async) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000540)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y\xcf\x88.\x8a\f\x98l\"\xdd\x8e\xd4>\xb5\x1fD\x0f\x9d\xbd\xfb\xa8\xcfl\xe8-\x03Q\xb0\ae(@\xa3\v@\xa6\x8b/\x8b\xc1\xa8\xed^\'z\xec^\x9be\x8a\xa9&M\x13\xde.\xa7B\xbcb\xc3\x04\xa3}\xb1y):\x97\xc7?W\xe1)7\xf5\xaa\x13\xbb@\x83\xfaP}q\xfa\xd5\xe0\r\'x#f(\x9d\x82\xb7\bw\xe5\x16^\xc0?J\xb4e\xa1@\xafA\x7fs\n\xeb^QN1h\xcc?I\xb2\x1b\xdb\x96\xc9\x94\x11\xc2\xd0]\x14<\xab\xe8\xd8\x1a2>\x8a\xc9\xe8\x85\xcb\xcb\xf1v\xf57\x8cqW[\xfc\x86\x89:\x94.)\xfb\xaa', 0x0, 0x0) (async, rerun: 32) r3 = syz_open_procfs(0x0, &(0x7f0000000040)) (rerun: 32) read$FUSE(r3, &(0x7f0000001640)={0x2020}, 0x2020) write$binfmt_script(r3, &(0x7f00000003c0)={'#! ', 'my_sys/bus/pci/devices/0000:00:03.0/resource1/file0', [{0x20, 'sysfs\x00'}, {0x20, '-\\+\\'}, {0x20, 'ip6gre0\x00'}, {0x20, '\x00'}], 0xa, "ee7ce0a64919640f119002eeb65145f097fee663"}, 0x62) r4 = openat$null(0xffffff9c, &(0x7f0000000180), 0x8000, 0x0) (async, rerun: 64) r5 = socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 64) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) sendto$packet(r7, 0x0, 0x0, 0x4000805, &(0x7f0000000200)={0x11, 0x7, r8, 0x1, 0x87, 0x6, @random="010000009200"}, 0x14) r9 = fsopen(&(0x7f0000000240)='tmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) fsmount(r9, 0x1, 0x0) (rerun: 32) ppoll(&(0x7f0000000800)=[{r5, 0x2000}, {r9}, {r5, 0xb0}, {r5, 0x88}, {r4, 0x6055}, {r1, 0x8001}, {0xffffffffffffffff, 0x20}], 0x7, &(0x7f0000000840)={0x77359400}, &(0x7f0000000080)={[0x2, 0x10000]}, 0x8) (async, rerun: 32) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x8) (rerun: 32) 1m5.29382597s ago: executing program 32 (id=495): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='my_sys\x00', 0x0) (async) mount(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x200000, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (rerun: 64) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000cc0)="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", 0x17c}, {&(0x7f0000000600)="d44ce00f8fd55fd697bc4ea1e9b04a44f940bc492d1d4048829720ec08a561468fd46c6f9f4cef472da2a8016ef44e97ee24c173407ab1b40a4d38f0f4235d1504aa438417bbec1dbc5d84a4e34bf82cc45b79d8f8f45193f25eefd678c16f6883c87e4adb96c092a5637646c9245ca81408eadbbcb11aacc78af452ff3d669d926306dce587fbb4c5b952b2f34d5ea7cc2e5f0f129db10fd505ccc04d195a13d8addf54e54f629a530c8c0388339115f8322d0917c15eb173bf9b545bd4bf67185cb8c53e7c47980e651d504a98d2e18f8ef3a76eee2523f5ecb7f27a30b6aff9c86a09869a76ce904f3807827dabb9da58", 0xf2}, {&(0x7f0000000700)="1776a230e2b9", 0x6}, {&(0x7f00000009c0)="9bde76573c0100008000000000671963de9498235e2b7e471216a30c1446aa2bde7f9a98d2012cc76c26d629db5ccba4ab0f0891aaf44593a07a3a615a04a6b8ddbb5aef0700f086c2abe8f12f34d3ad915788579706cdb07848ca47abf82bdd6e6f76d2cc364e6bad8c653a9e49824470145c6c510db94a81a70d0929a42c3d6b644c772dd952bc2d2b7892b3ac1d8f8a48a7f959d83222b3f43180f03b32e510bcdd1ce626962ca6fdcecaf02d93b8dec76155b9a3d04be26428191e9734cc228b4346df1f038aa3ae72e818f6807420fb06e2749a2ce07b", 0xd9}, {&(0x7f0000000980)="06265df21194e66e600fa38789438ff90e3bb33ad030cc435013642c343a5a", 0x1f}, {&(0x7f0000000b40)="6097f886858e9eab3f26556a5dcfd162b1e049ba6862cc327b2da7318617d1aab81224e37ba54ce4b7c7406fac1c640ea2afb3313256c1980ccc58f9f808b4a748e5eb76f5f2a52fd2296779498414e46f1c62f5ae2f3ce96c7f5c21827fad7dd6bd5edb9c8297534ffbcdb9914cdecce53482cfb606a638a6eeb89cd393dd464af139bfac46911281fac5335b185661982561c9795122705e6a771a4835f0385000da83746c55d3b12a16048724dfdf11ab8f9c2561e5657172c26690742d66735ddd3b70765ea37f10adfd11efa312e934098828d6a9e5fbe8129f63", 0xdd}, {&(0x7f0000000c40)="a873c17ea3d310d4a93f7e2d333225d3e7aa0c6ca8bf1b3f6488d7ebdee2059b3e3c6e6246c4767d1c7bed93eccd6a1932bb6cb8ed9dea56707ea39c026b34eeb3fb781c9cf7f1c0d9ea1bcc547b04899c3243da92756db6ee3d62b73e3c6c9d15252d5eeb0caf6d1420", 0x6a}], 0x7}, 0x24000004) (async, rerun: 64) chdir(&(0x7f0000000140)='./file2\x00') (rerun: 64) acct(&(0x7f0000000000)='./mnt\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure\x00', 0x275a, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1fd) (async) mount(0x0, &(0x7f0000000480)='my_sys/bus/pci/devices/0000:00:03.0/resource1/file0/file0\x00', &(0x7f0000000440)='rpc_pipefs\x00', 0x80410, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r2, 0x0) (async) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000540)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y\xcf\x88.\x8a\f\x98l\"\xdd\x8e\xd4>\xb5\x1fD\x0f\x9d\xbd\xfb\xa8\xcfl\xe8-\x03Q\xb0\ae(@\xa3\v@\xa6\x8b/\x8b\xc1\xa8\xed^\'z\xec^\x9be\x8a\xa9&M\x13\xde.\xa7B\xbcb\xc3\x04\xa3}\xb1y):\x97\xc7?W\xe1)7\xf5\xaa\x13\xbb@\x83\xfaP}q\xfa\xd5\xe0\r\'x#f(\x9d\x82\xb7\bw\xe5\x16^\xc0?J\xb4e\xa1@\xafA\x7fs\n\xeb^QN1h\xcc?I\xb2\x1b\xdb\x96\xc9\x94\x11\xc2\xd0]\x14<\xab\xe8\xd8\x1a2>\x8a\xc9\xe8\x85\xcb\xcb\xf1v\xf57\x8cqW[\xfc\x86\x89:\x94.)\xfb\xaa', 0x0, 0x0) (async, rerun: 32) r3 = syz_open_procfs(0x0, &(0x7f0000000040)) (rerun: 32) read$FUSE(r3, &(0x7f0000001640)={0x2020}, 0x2020) write$binfmt_script(r3, &(0x7f00000003c0)={'#! ', 'my_sys/bus/pci/devices/0000:00:03.0/resource1/file0', [{0x20, 'sysfs\x00'}, {0x20, '-\\+\\'}, {0x20, 'ip6gre0\x00'}, {0x20, '\x00'}], 0xa, "ee7ce0a64919640f119002eeb65145f097fee663"}, 0x62) r4 = openat$null(0xffffff9c, &(0x7f0000000180), 0x8000, 0x0) (async, rerun: 64) r5 = socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 64) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) sendto$packet(r7, 0x0, 0x0, 0x4000805, &(0x7f0000000200)={0x11, 0x7, r8, 0x1, 0x87, 0x6, @random="010000009200"}, 0x14) r9 = fsopen(&(0x7f0000000240)='tmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) fsmount(r9, 0x1, 0x0) (rerun: 32) ppoll(&(0x7f0000000800)=[{r5, 0x2000}, {r9}, {r5, 0xb0}, {r5, 0x88}, {r4, 0x6055}, {r1, 0x8001}, {0xffffffffffffffff, 0x20}], 0x7, &(0x7f0000000840)={0x77359400}, &(0x7f0000000080)={[0x2, 0x10000]}, 0x8) (async, rerun: 32) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x8) (rerun: 32) 52.55011338s ago: executing program 2 (id=652): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003"], 0x12c}}, 0x0) (fail_nth: 4) 52.448579491s ago: executing program 2 (id=653): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000020603000000000000000000020000001c0007800800064000000001050015000200000008001240000040000500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000fcffff000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a3100"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) 52.160563599s ago: executing program 2 (id=657): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f"], 0xe0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r4, 0x24, &(0x7f0000000400)={0x0, 0x1, '\x00', @zc_export={r4}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x8000004) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="8100"/18, 0x12, 0x20000040, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 51.99857709s ago: executing program 2 (id=660): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000600), 0x0, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) close(0x3) 51.970094946s ago: executing program 2 (id=662): mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='ext3\x00', 0x0, &(0x7f0000000100)='/dev/kvm\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000002a80)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12f) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYRES16=r4, @ANYBLOB="4d7e00000000000000002a0000000c0005000201aaaaaaaaaaaa0a0001007770616e3100000008002f00020000000500360003000000"], 0x3c}, 0x4, 0x700000000000000, 0x0, 0x44000}, 0x4004000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 51.758595873s ago: executing program 2 (id=665): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000020603000000000000000000020000001c0007800800064000000001050015000200000008001240000040000500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) 36.791467424s ago: executing program 33 (id=665): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000020603000000000000000000020000001c0007800800064000000001050015000200000008001240000040000500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) 3.412513777s ago: executing program 5 (id=1143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x8100, 0xd, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da2", 0x0, 0xadf0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x4c) socket$rxrpc(0x21, 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./config\x00') write(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0xa4a1\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) openat(r2, &(0x7f00000002c0)='usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x2, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000000000000000040f7eca4d7"], 0x40) write(r0, 0x0, 0x0) symlinkat(&(0x7f0000000340)='usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='usb_gadget/g1/configs/c.1/ecm.usb0\x00') nanosleep(&(0x7f0000000440)={0x0, 0x1dcd6500}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000480)={'gretap0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', 0x1}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'syzkaller1\x00', 0x0}) bind$packet(r5, &(0x7f0000000600)={0x11, 0x300, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 2.798381763s ago: executing program 5 (id=1154): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat$sw_sync(0xffffff9c, &(0x7f0000000340), 0x288600, 0x0) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4484) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x0, 0x0, {0x7}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, 0x0) syz_ublk_setup_io_uring(0xb87, &(0x7f0000000900)={0x0, 0xf8ab, 0x100, 0x1, 0x85}, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f00000000c0)=@riscv64_core={0x8030000000200019, &(0x7f0000000040)=0x1}) 2.798101225s ago: executing program 5 (id=1155): mkdirat(0xffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000440)={@broadcast, @random="9e4338bf2d14", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0x0, @mcast1, @empty, [], "2037e07b610d272d"}}}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000440)={@broadcast, @random="5aeadd61229e", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, @mcast2, {[], @time_exceed={0x4, 0x2, 0x0, 0x9, '\x00', {0x0, 0x6, "f99063", 0x800, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], "af34000000000000"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r1 = openat(0xffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv6/conf/all/force_mld_version\x00', 0x1, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_setup(0x239f, &(0x7f0000000380)) io_submit(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvfrom(r2, 0x0, 0x0, 0x140, &(0x7f0000002400)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x80) write$cgroup_int(r1, &(0x7f0000000180)=0x1, 0x12) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500000000710cbe2c1f50a18f0008000300", @ANYRES32=0x0, @ANYBLOB="0a00180003030303030300001c005a80140000800500060000000000050001006b00000004000180"], 0x44}}, 0x20000800) r6 = socket$netlink(0x10, 0x3, 0x0) futex(&(0x7f00000000c0)=0x1, 0x100, 0x2, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)=0x2, 0x1) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffff689}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x2}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x3}]}}}]}, 0x48}}, 0x404c010) 2.392697052s ago: executing program 5 (id=1160): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x11, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}}, 0x2400c000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x78}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) 2.392487082s ago: executing program 4 (id=1161): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xffffffffffffffc0, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_PROTO, @IFLA_IPTUN_ENCAP_DPORT, @IFLA_IPTUN_ENCAP_SPORT, @IFLA_IPTUN_LINK, @IFLA_IPTUN_PMTUDISC, @IFLA_IPTUN_TOS, @IFLA_IPTUN_FWMARK, @IFLA_IPTUN_REMOTE]}}}]}, 0x3c}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x114, 0x30, 0x1, 0x70bd28, 0x25dfdbfb, "", [@nested={0x103, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061d000017c8", @typed={0x4, 0xeb}, @nested={0x4, 0xaf}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x2000}, 0x20000000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, 0x0, 0x0}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r5, 0x1, &(0x7f0000003080)=[&(0x7f0000000240)={0x200000000000000, 0x0, 0x0, 0x5, 0x808, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) r6 = socket(0x40000000015, 0x805, 0x0) getsockopt(r6, 0x114, 0x5, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x410, 0x70bd2c, 0x800, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000200)) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x29, 0x10, 0x41, 0x5}}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0x82, &(0x7f0000000200)={0x7939, 0x5, 0x8000, 0x80, 0xe2, 0x800000, 0x9, 0x4}, &(0x7f0000000440)=0x20) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x3, 0x2, 0x1, 0x2, {0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x100}}}, 0x3a) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2.179617984s ago: executing program 5 (id=1164): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x2200040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x0, 0x1000) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) (fail_nth: 4) 2.108137326s ago: executing program 5 (id=1166): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x2200040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x0, 0x1000) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_connect(0x1, 0x3d2, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x4d, 0x33, 0x2d, 0xff, 0x1266, 0x1007, 0x8a03, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3c0, 0x1, 0x1, 0x2, 0x40, 0x6, "", [{{0x9, 0x4, 0xa2, 0x6, 0xe, 0xff, 0x2e, 0xa7, 0x90, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x1, 0xa, 0x5, '+', "90"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x5f, 0x2a, 0x3}, @as_header={0x7, 0x24, 0x1, 0x80, 0x8}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x7, 0x1, 0x10, 0xf6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x1, 0x7f, 0x7, 0x80}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x300, 0x3, 0x28, 0xff}]}, @uac_control={{0xa, 0x24, 0x1, 0x6, 0xa}}], [{{0x9, 0x5, 0x3, 0x10, 0x200, 0x7, 0x10, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0xd}]}}, {{0x9, 0x5, 0xb, 0x1, 0x20, 0x6, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x57, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0x1c, 0x1e, 0x60}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x9, 0x6, 0x1}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x6, 0x4c, 0x0, [@generic={0x7a, 0x10, "3975708927d8c4fa804c7dbd4898832ffdf121dcdf39c773a9ff41fbe0f27e00e592e10f1e72ad8bfb3dae3c8bfe5de0fbe46bfee4ebaa7d4137506dddca08631ff1f78e488ff68648c043fcfae5dee646505a18665ee5bbe46be416043cff9b21c217c86d79867f503aabd22998f10f9196341328797b10"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x7}]}}, {{0x9, 0x5, 0x8, 0x4, 0x8, 0x9, 0x3, 0x3}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x81, 0x3, 0x3, [@generic={0xc8, 0x39, "981dca429530c45cdfb46e2de642ee116a45d845cee589e23a8ffce82bc38b3cc2dcb2bfa19198e1e0d0756085cae5e2c5d4429787fdc350fdeb4d667d7538310c1caee1acd01f50bf090478756aa887d3eb9648f2741386b60484441db289331962195b4d281b867dbc312b4009e57356b210abd05fa2368b9e3aab82291b6cb8ab45cffd0bec1ee1faaff0eede74194bcf139313a028913e0c651e87179d2be4fc5b96158ce49f7f4e3509443d6c06e3d962fa9bb6b00ebf44dc092167b4fba546b8a03457"}, @generic={0x4d, 0x9, "d0eb1f3ed83ace20e973099bfe464107d5a0068e3c0a930073f8b2f32b32abc4def3c9d712a9d46adaf35c74eddddcbb431ecae818879d30efa03bc53d530ac79f826690c6f07ea64c7a97"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0xfa, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x56, 0x6}]}}, {{0x9, 0x5, 0x8, 0x1, 0x8, 0x7, 0x1, 0x5}}, {{0x9, 0x5, 0xc, 0x3, 0x10, 0x5, 0x2, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0xff}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xe2, 0x5, 0x7}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0xc, 0x3d, 0x49, [@generic={0xd5, 0x21, "56c9e8dcbd99640744895f46d43e5a0405b33f68a70e3bdff3ea9b61a8d4299cb3cab74c7fbafe5cd40518659cb08d629a7cd80c583fa6405c5d6b7293d5711d0d88c8f6fbdd57cc92d653dcaa9df607b3f535eb8136619472a9dfa218bd67940fa02c62b99d76a611ff85ccd2c85bbce024d12b95b6cdbed8d74401ea60613b2cd756066bcd4407bae8a97b741493bc785add2df68ad20e2a634533448ac85284ab3f42dba2b72b722a92216cda0efc151aa492ac9763795357613b7655eb26243dc0c8a27a48ab1668bbf9b7d9a3add03b88"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x20, 0x9, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x8}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x8, 0x52, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1c, 0x8}, @generic={0x46, 0xf, "f8f5cc49413ea39e734734db0059181cc969f4904af8c58217bb9d67cd1a5cca9fc57493d68250869ae6378750ac963e5c525ad83ce4650a4c6c552eec82d0a278780f4e"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x0, 0xc, 0x98}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x381, 0x2, 0xd3, 0xe3, 0x20, 0x8}, 0x10, &(0x7f0000000780)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0xfc, 0x4, 0x175, 0x4}]}, 0x7, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x1801}}, {0x75, &(0x7f0000000800)=@string={0x75, 0x3, "20f6bf94ba778bb7f791449386bf80ff02dc93e5de56f7c5ca5f45431966c876d027acb5909575fbc026677751f12d4c2696d03248a90baaeb2fd477f6251d55dedb749f55b14df4a45432ca41f5d963cefcd5d4570b565515a16c815ac571ad005486c01db12f6e0fd43a1a64e3be1750b7ac"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x424}}, {0xd, &(0x7f00000008c0)=@string={0xd, 0x3, "fbb71e4faa0fef010a1aff"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x42b}}, {0x47, &(0x7f0000000940)=@string={0x47, 0x3, "df76023d114b57ae3ce611eeca4512f612d0476509983d05f4c17e561c0dcefb9ff12df53fc8d015093c80b54d74dae31c143d1092a7d755064b8b791722f332d449c6a85e"}}, {0xeb, &(0x7f00000009c0)=@string={0xeb, 0x3, "90bcf83c076d034c49a675bf623ec01cc4d6837446fcfe782b3d0f8f5203f31cf7e30e74ee56a3ba625405cd01f715d8c92b37cb0c274fb42f655aa461801bb9aea807008c39598845944393f415242b70788227d3376e8e484bab17ee247c587b7a6c7d43ef624a145b6e71ea6c35539e81f1d34fbe85835e2759fcd11fa9b6b6357b813923a3f4bf317649086bd04fdd267b801083cc21c6d3e77f298f1974ad56b941dc5f162f002fccc7f29eb353d2c701608e4dae62493ff6ffb8e70d3918343b9eac3e5cf631a0a4df66b478dbab8581a0c7627dadb67eec5945d4435113d82e58f13405ec5d"}}]}) 2.047261416s ago: executing program 4 (id=1169): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r1, 0x2285, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0xff}, {}, @raw32={[0x0, 0x100]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a45352, &(0x7f0000000380)={{0x8, 0x9}, 'port0\x00', 0x1e0, 0x0, 0x4, 0xf, 0x6, 0xd, 0xfffffff9, 0x0, 0x6, 0x4}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0x48, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x8, 0x0, 0x2000, 0xfa, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0xd, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x2aa6, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0xb, 0x1, 0x3fffffe, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x6, 0x4, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x81, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x42, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00', {0x42, 0xd77, 0x8, 0x4}, 0x34, [0x7f, 0x8, 0xfffffff0, 0xbde, 0x9, 0xf, 0x2, 0x8, 0x9, 0x4, 0x94, 0x3, 0x7, 0xffff, 0x146, 0x5c96, 0x0, 0x3, 0x9, 0x172d, 0x83c6, 0x1, 0x0, 0x3c47, 0x3e, 0x0, 0x1, 0x80000001, 0x300000, 0x4, 0x8, 0x2, 0x0, 0x2, 0x3153, 0x1, 0x2, 0xb, 0x0, 0x7fff, 0x24, 0x5d, 0x9, 0x0, 0x0, 0x8, 0x200, 0x4, 0x3, 0x140, 0x4, 0xf00b, 0x7, 0x0, 0x7, 0x0, 0x0, 0xf0, 0x401, 0x7ff, 0x6b, 0x8, 0x8, 0x1], [0x101, 0xffff4a7b, 0x3ff, 0x2, 0x2, 0x2259, 0x8, 0x1, 0x0, 0xfff, 0x5, 0x4, 0x7e, 0x80000001, 0x8, 0x8, 0x0, 0x2, 0x7, 0x8, 0x1, 0x4, 0x3ff, 0xfffff788, 0x1, 0x5, 0x5, 0x41f, 0x5, 0x8, 0x7, 0x1, 0x1, 0xfe, 0xfffffffa, 0xfffff001, 0x9, 0x2, 0xffffffff, 0x104, 0x5, 0xffffff01, 0x79, 0x9, 0x3, 0x5, 0x3, 0x0, 0x9, 0x0, 0x7, 0x5, 0x4, 0x6, 0x7fff, 0xffffdf1c, 0x3, 0x0, 0xff, 0x3ff, 0x9, 0x3, 0x6, 0x40], [0x3, 0xf7, 0x400, 0x4, 0x5, 0xf735, 0x8, 0x9, 0x2, 0x7, 0x4, 0x81, 0x10001, 0x8, 0x2a2, 0x83, 0x8001, 0x9, 0x8, 0x8, 0xfffffff7, 0x9, 0x2, 0x76, 0x101, 0x9, 0x9, 0x2b, 0x40, 0x3ff, 0x4, 0x2, 0x9, 0x0, 0x2, 0x7, 0x6b, 0xffffffff, 0x7, 0x7ff, 0x0, 0x2, 0x6, 0x7f, 0x3, 0x8, 0x1, 0xffffff80, 0x7, 0x3d9, 0x80000000, 0xff, 0x4ba, 0x38000, 0x7f, 0xa2b, 0x6, 0xffffffa2, 0x7, 0x7, 0x6, 0x4, 0x3], [0x491, 0x8, 0x8, 0x1, 0x2, 0x7, 0x4c6e, 0x2, 0x3, 0x7, 0x10, 0x20000000, 0x13b, 0x9, 0x7, 0x5, 0x10, 0x7fffffff, 0x9, 0x3c, 0x9e20, 0xd6, 0x51f2, 0xb, 0xb6, 0x2, 0x98, 0x3, 0x4, 0x4b28, 0xf, 0x47, 0x0, 0x1, 0x5, 0x8, 0x525, 0xff, 0x6, 0x3, 0x6, 0x7, 0x6, 0x2, 0x5, 0x8, 0x5, 0x7, 0xfffffffa, 0x6, 0x7, 0x6, 0x6, 0x982b, 0x2, 0x8, 0x8, 0x4, 0x10001, 0xc9d, 0x10, 0x8001, 0xd85f, 0x8]}, 0x45c) write$apparmor_exec(r3, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x167) r4 = socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) add_key$user(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r5 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0x40044103, &(0x7f0000000080)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000314050000000000000000000900020072786530000000000800410072786500070033006c6f0000"], 0x2c}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, &(0x7f00000000c0)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@newsa={0x184, 0x10, 0x633, 0x70bd2a, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x6}, @in=@initdev={0xac, 0x1e, 0x4, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x4}, {@in=@multicast1, 0x0, 0x32}, @in=@remote, {0xfffffffffffffffd, 0x40000000000, 0x0, 0x2dcd}, {}, {0x0, 0x4}, 0x70bd2d, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x4a, 0x1, {{'md5\x00'}, 0x10, "0400"}}]}, 0x184}, 0x1, 0x0, 0x0, 0x24000884}, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000900)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x7f000001, @empty}, {0x2, 0x4e20, 0x7f000001, @empty}, r8, 0x3e8}}, 0x48) 1.424055443s ago: executing program 1 (id=1178): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x9, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x3ec0, 0x0}, 0x0) 1.421306413s ago: executing program 1 (id=1179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setns(0xc9, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000060801"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r4 = epoll_create1(0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x5608, 0x3) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(r8, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000400800000008000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0xb, 0x70bd2c, 0x25dfdbfb, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3}, @TCA_CT_PARMS={0x18, 0x1, {0xfffffffc, 0xc60a, 0x3, 0x101, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x840) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, 0x0, 0x81) landlock_restrict_self(r7, 0xe) signalfd4(r9, &(0x7f0000000040)={[0xc3, 0x10000]}, 0x8, 0x80800) close_range(r4, 0xffffffffffffffff, 0x100000000000000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000040)={0x3, 'syzkaller1\x00', {0xb}, 0x81}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x20}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.232070367s ago: executing program 1 (id=1183): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xd4a932c15f6503c0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000000080)={0x3, [[0x9, 0x0, 0x0, 0x800, 0x0, 0x9], [0x0, 0x1ff], [0x403, 0x0, 0x1]], '\x00', [{0x8007, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000000}, {}, {0x0, 0x7}, {}, {0xffffffff}], '\x00', 0x100}) 1.220711016s ago: executing program 0 (id=1184): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x24, 0x26, 0x109, 0x870bd22, 0xfffffffa, {0x2}, [@nested={0x8, 0x3f, 0x0, 0x1, [@nested={0x4, 0x122}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x600c800) (fail_nth: 3) 1.148247093s ago: executing program 1 (id=1185): bind$inet6(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_open_dev$dvb_frontend(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) preadv(r0, &(0x7f00000016c0)=[{&(0x7f00000002c0)=""/164, 0xa4}], 0x1, 0x1000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x54, 0x11, 0x4, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x4}, {0x0, 0xe}, {0xfff2, 0x8}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x925c}, {0x8, 0xb, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4c804}, 0x90) 1.148094026s ago: executing program 0 (id=1186): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1100000004000000040000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x8, &(0x7f0000000280)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @jmp={0x5, 0x0, 0x8, 0x7, 0xa, 0x50, 0xfffffffffffffffc}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.075838582s ago: executing program 0 (id=1187): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x800000}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x2, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000280)={r7, r7, 0xc, 0x0, 0x0, 0x9, 0x1, 0x4f3, 0x9, 0x9, 0x1, 0x1, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r8, 0x800448d3, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x8, 0x3ff, 0x8, 0x0, "91b12b949d7950895eea22bced3dd6bfcdd10b7bdd41fabe4fa0b935ca76101ae3dc63d753695d30467e70a084e46bb668a0e330141d490f08078ea29f67b3169e5b436ed3a93b1b980aed36876a343c3e39ff0ea33380358c1d8f46b9cca39e70908e76d855b4a3884375b13bfe4f3e911c7e9e72c6852e3f5635bc2994f969"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000bc0)={0xec, 0x0, &(0x7f0000000a00)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r8}, @fda={0x66646185, 0x9, 0x1, 0x40}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/160, 0xa0, 0x2, 0x20}}, &(0x7f0000000440)={0x0, 0x18, 0x34}}}, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f00000005c0)=""/231, 0xe7}, @fd, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000740)={0x0, 0x28, 0x40}}}, @acquire_done={0x40106309, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000900)={@ptr={0x70742a85, 0x0, &(0x7f0000000780)=""/234, 0xea, 0x2, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000880)=""/110, 0x6e, 0x1, 0xb}, @fd={0x66642a85, 0x0, r5}}, &(0x7f00000009c0)={0x0, 0x28, 0x50}}}], 0x84, 0x0, &(0x7f0000000b00)="faf0528a739433a9f466c06f7cf98cd7924a9223325a22961943fe91ab3875a71219a7de80ce27ae377323de17c26ad97eb37bedb821502fb2a36f5702ea20d09eb53889823383718d02e44f4e6fcfbf8ad9e5e910cb3149ec250494c6a22221ae3e288c371ce37bdcb2fc403cbb028c21998e0cc43de1a0f1b586f1dbe51dc13d8a4f79"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000580)={0x18, 0x0, &(0x7f0000000500)=[@request_death, @decrefs], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000019200)={0x3c, r3, 0x1, 0x70bd2a, 0x1, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x7}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0xa}, 0x8) 977.84766ms ago: executing program 0 (id=1188): socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0xb, 0xe, 0x2, 0x9, 0x1, 0xd8e, 0x401, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x801}, 0x10) write(r0, &(0x7f0000000900), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a010400000000000000000200000a0900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000048000000060a010400000000000000000200000a0900010073797a30000000000900020073797a0d36271f698d40fa8018000180080001006c6f67000c0002800600014000000000140000001100010000000000000000000200000a"], 0xd0}}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = openat$ttynull(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000380)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x80002) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$BLKTRACESETUP(r7, 0x80186803, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13}, 0x94) syz_open_procfs$userns(r3, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x18b) chroot(&(0x7f0000000200)='./file0\x00') 935.934322ms ago: executing program 4 (id=1189): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x24, 0x26, 0x109, 0x870bd22, 0xfffffffa, {0x2}, [@nested={0x8, 0x3f, 0x0, 0x1, [@nested={0x4, 0x122}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x600c800) 934.634716ms ago: executing program 4 (id=1190): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='atkbd', 0x5) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc44}, [@call={0x85, 0x0, 0x0, 0x7b}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86d}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x7b, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) 797.954026ms ago: executing program 4 (id=1191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setns(0xc9, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000060801"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r4 = epoll_create1(0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x5608, 0x3) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(r8, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000400800000008000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0xb, 0x70bd2c, 0x25dfdbfb, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3}, @TCA_CT_PARMS={0x18, 0x1, {0xfffffffc, 0xc60a, 0x3, 0x101, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x840) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, 0x0, 0x81) landlock_restrict_self(r7, 0xe) signalfd4(r9, &(0x7f0000000040)={[0xc3, 0x10000]}, 0x8, 0x80800) close_range(r4, 0xffffffffffffffff, 0x100000000000000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000040)={0x3, 'syzkaller1\x00', {0xb}, 0x81}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x20}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 542.768784ms ago: executing program 4 (id=1192): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='external:', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='2', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='65536', 0x5) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/consistency_policy\x00', 0x1, 0x0) 225.519959ms ago: executing program 1 (id=1193): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000680)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0xf0, 0xce0, 0x0, &(0x7f0000000440)="e0b9547e841fd74eabc89b6f5b32", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 167.336081ms ago: executing program 1 (id=1194): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x4, 0xea, 0x440, 0x0, 0x10, 0x0, 0x4}, 0x9c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x1c, 0x36, 0x1, 0x470fd2b, 0x25dfdbfc, {0x5}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040050}, 0x24008004) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x300, 0x0, 0x1, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xfff9}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff, 0x0, 0x0, 0x0, 0xfc, 0x40}}]}}]}, 0x14c}}, 0x80080c0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@gettfilter={0x6c, 0x2e, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x3, 0xd}, {0x9, 0xfff1}, {0x3, 0x9}}, [{0x8, 0xb, 0xfffffffb}, {0x8, 0xb, 0x186b}, {0x8, 0xb, 0xbc3}, {0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x19}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xcb}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x12, 0x1, {0x2, 0x100, 0x0, 0x401, 0x9, 0x80, 0xef, 0x2, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x5, 0xd}, {0x2, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x0, 0x0, {}, [{@pci={{0x8, 0x8e}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x80}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044090}, 0x1) recvmmsg(r1, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000016c0)=""/4096, 0x1000}], 0x1}, 0xfffffffe}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e010203010902"], 0x0) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r13, 0x0, 0x106f) 51.909029ms ago: executing program 0 (id=1195): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 0 (id=1196): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x264d, &(0x7f0000000180)={0x0, 0xcca7, 0x1, 0x2, 0x34a}, &(0x7f0000000080), &(0x7f0000000340), &(0x7f0000000000)) io_uring_enter(r1, 0x0, 0x3, 0xb, 0x0, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$inet(0x2b, 0x801, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000080)=0x68) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000040)) sendto(r0, &(0x7f0000000480)="2e2f03112edfe19ff0b92aff193f97cfd092caa31f899ff03b4a4890a260324a6ecf3206450589493b169253dd04b9d9431d4d0b44a77194daa4da4d70b743b0ffa6fd8bb6543d692604047fe531ccd08981454459db90ff77cf3197d28c83b2647eed7b70f4a39fa25f95bcc05c041b12e5a1e49e80acdf344ab29b4e517e9a6cd6f24859e36f5460066a3fff47c69bf8d3231d3ac0057317e0b0e2b4108bfc1fdefe5e7ad91116f35df545da3d7ef10c85e1d61b436b2a5e12cc0aea2099f12fcb7e3024506b2dc8845e1bcdec2e2542c2009692a4feeb96", 0xd9, 0x8804, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x1, 0x1, 0x2, {0xa, 0x4e20, 0x3, @local, 0x8}}}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xfff1, 0xffff}, {0xffe0, 0x5}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xffff}, {0x1, 0xffff}, {0x300, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write$tun(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb"], 0xfdef) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x3c, 0x26, 0x109, 0x870bd22, 0xfffffffa, {0x2}, [@typed={0x1a, 0xc, 0x0, 0x0, @str='\xb8(\xa3\v\xa5\xb7\x9f\x8f\v\x90\xb4\xad\xcd<=)~\x9dN\"\xc5\x00'}, @typed={0xc, 0x3, 0x0, 0x0, @u64=0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x600c800) kernel console output (not intermixed with test programs): T8898] vfs_get_tree+0x92/0x320 [ 142.902760][ T8898] path_mount+0x7d0/0x24c0 [ 142.902790][ T8898] ? __pfx_path_mount+0x10/0x10 [ 142.902816][ T8898] ? lockdep_hardirqs_on+0x7d/0x110 [ 142.902841][ T8898] ? putname+0xb1/0x110 [ 142.902866][ T8898] ? kmem_cache_free+0x127/0x6c0 [ 142.902893][ T8898] ? __ia32_sys_mount+0x292/0x310 [ 142.902920][ T8898] __ia32_sys_mount+0x292/0x310 [ 142.902950][ T8898] ? __pfx___ia32_sys_mount+0x10/0x10 [ 142.902987][ T8898] __do_fast_syscall_32+0x13a/0x8b0 [ 142.903012][ T8898] ? lockdep_hardirqs_on+0x7d/0x110 [ 142.903036][ T8898] do_fast_syscall_32+0x32/0x70 [ 142.903061][ T8898] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.903086][ T8898] RIP: 0023:0xf6feefec [ 142.903115][ T8898] Code: Unable to access opcode bytes at 0xf6feefc2. [ 142.903125][ T8898] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 142.903146][ T8898] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000080 [ 142.903160][ T8898] RDX: 0000000080000240 RSI: 0000000000004000 RDI: 0000000000000000 [ 142.903172][ T8898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 142.903185][ T8898] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 142.903198][ T8898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.903224][ T8898] [ 142.905737][ T8898] FAULT_INJECTION: forcing a failure. [ 142.905737][ T8898] name failslab, interval 1, probability 0, space 0, times 0 [ 142.905769][ T8898] CPU: 3 UID: 0 PID: 8898 Comm: syz.4.872 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.905811][ T8898] Tainted: [L]=SOFTLOCKUP [ 142.905819][ T8898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.905830][ T8898] Call Trace: [ 142.905837][ T8898] [ 142.905846][ T8898] dump_stack_lvl+0x100/0x190 [ 142.905878][ T8898] should_fail_ex.cold+0x5/0xa [ 142.905903][ T8898] should_failslab+0xc2/0x120 [ 142.905930][ T8898] __kmalloc_noprof+0xfc/0x840 [ 142.905954][ T8898] ? rcu_is_watching+0x13/0xc0 [ 142.905975][ T8898] ? tomoyo_realpath_from_path+0xb6/0x690 [ 142.906004][ T8898] tomoyo_realpath_from_path+0xb6/0x690 [ 142.906032][ T8898] tomoyo_path_number_perm+0x23c/0x580 [ 142.906050][ T8898] ? tomoyo_path_number_perm+0x22e/0x580 [ 142.906070][ T8898] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 142.906115][ T8898] ? futex_wait+0x11e/0x370 [ 142.906149][ T8898] ? __lock_acquire+0x5c0/0x1f40 [ 142.906189][ T8898] ? __fget_files+0x34/0x3d0 [ 142.906212][ T8898] ? find_held_lock+0x2b/0x80 [ 142.906234][ T8898] ? __fget_files+0x215/0x3d0 [ 142.906256][ T8898] ? hook_file_ioctl_common+0x140/0x440 [ 142.906275][ T8898] ? __fget_files+0x215/0x3d0 [ 142.906304][ T8898] ? __fget_files+0x21f/0x3d0 [ 142.906331][ T8898] security_file_ioctl_compat+0xd3/0x230 [ 142.906352][ T8898] __ia32_compat_sys_ioctl+0xc2/0x360 [ 142.906378][ T8898] __do_fast_syscall_32+0x13a/0x8b0 [ 142.906402][ T8898] ? lockdep_hardirqs_on+0x7d/0x110 [ 142.906427][ T8898] do_fast_syscall_32+0x32/0x70 [ 142.906451][ T8898] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.906474][ T8898] RIP: 0023:0xf6feefec [ 142.906495][ T8898] Code: Unable to access opcode bytes at 0xf6feefc2. [ 142.906503][ T8898] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 142.906521][ T8898] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005423 [ 142.906535][ T8898] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.906547][ T8898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 142.906558][ T8898] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 142.906570][ T8898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.906594][ T8898] [ 142.906793][ T8898] ERROR: Out of memory at tomoyo_realpath_from_path. [ 143.027526][ T64] Bluetooth: hci2: command 0x041b tx timeout [ 143.027594][ T64] Bluetooth: hci4: command 0x040f tx timeout [ 143.068545][ T8904] FAULT_INJECTION: forcing a failure. [ 143.068545][ T8904] name failslab, interval 1, probability 0, space 0, times 0 [ 143.068566][ T8904] CPU: 1 UID: 0 PID: 8904 Comm: syz.5.875 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.068585][ T8904] Tainted: [L]=SOFTLOCKUP [ 143.068589][ T8904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.068596][ T8904] Call Trace: [ 143.068600][ T8904] [ 143.068605][ T8904] dump_stack_lvl+0x100/0x190 [ 143.068638][ T8904] should_fail_ex.cold+0x5/0xa [ 143.068655][ T8904] should_failslab+0xc2/0x120 [ 143.068673][ T8904] __kmalloc_noprof+0xfc/0x840 [ 143.068687][ T8904] ? rcu_is_watching+0x13/0xc0 [ 143.068700][ T8904] ? tomoyo_realpath_from_path+0xb6/0x690 [ 143.068719][ T8904] tomoyo_realpath_from_path+0xb6/0x690 [ 143.068737][ T8904] tomoyo_path_number_perm+0x23c/0x580 [ 143.068748][ T8904] ? tomoyo_path_number_perm+0x22e/0x580 [ 143.068761][ T8904] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 143.068772][ T8904] ? futex_wait+0x11e/0x370 [ 143.068791][ T8904] ? __lock_acquire+0x5c0/0x1f40 [ 143.068814][ T8904] ? __fget_files+0x34/0x3d0 [ 143.068829][ T8904] ? find_held_lock+0x2b/0x80 [ 143.068842][ T8904] ? __fget_files+0x215/0x3d0 [ 143.068855][ T8904] ? hook_file_ioctl_common+0x140/0x440 [ 143.068867][ T8904] ? __fget_files+0x215/0x3d0 [ 143.068883][ T8904] ? __fget_files+0x21f/0x3d0 [ 143.068899][ T8904] security_file_ioctl_compat+0xd3/0x230 [ 143.068912][ T8904] __ia32_compat_sys_ioctl+0xc2/0x360 [ 143.068926][ T8904] __do_fast_syscall_32+0x13a/0x8b0 [ 143.068943][ T8904] do_fast_syscall_32+0x32/0x70 [ 143.068977][ T8904] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 143.068993][ T8904] RIP: 0023:0xf700efec [ 143.069007][ T8904] Code: Unable to access opcode bytes at 0xf700efc2. [ 143.069012][ T8904] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 143.069024][ T8904] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005423 [ 143.069032][ T8904] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.069039][ T8904] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 143.069045][ T8904] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 143.069052][ T8904] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 143.069066][ T8904] [ 143.069111][ T8904] ERROR: Out of memory at tomoyo_realpath_from_path. [ 143.313424][ T8931] random: crng reseeded on system resumption [ 143.370177][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.5.880'. [ 143.419692][ T8938] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it! [ 143.529341][ T30] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input18 [ 143.542341][ T30] usb 6-1: USB disconnect, device number 12 [ 143.603041][ T8953] FAULT_INJECTION: forcing a failure. [ 143.603041][ T8953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.603063][ T8953] CPU: 1 UID: 0 PID: 8953 Comm: syz.5.885 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.603082][ T8953] Tainted: [L]=SOFTLOCKUP [ 143.603086][ T8953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.603093][ T8953] Call Trace: [ 143.603097][ T8953] [ 143.603102][ T8953] dump_stack_lvl+0x100/0x190 [ 143.603121][ T8953] should_fail_ex.cold+0x5/0xa [ 143.603136][ T8953] _copy_from_user+0x2e/0xd0 [ 143.603153][ T8953] cmsghdr_from_user_compat_to_kern+0x4eb/0x7d0 [ 143.603172][ T8953] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 143.603187][ T8953] ? __import_iovec+0x1d2/0x640 [ 143.603206][ T8953] ____sys_sendmsg+0x607/0xbe0 [ 143.603222][ T8953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.603242][ T8953] ___sys_sendmsg+0x190/0x1e0 [ 143.603257][ T8953] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.603277][ T8953] ? find_held_lock+0x2b/0x80 [ 143.603300][ T8953] __sys_sendmsg+0x160/0x210 [ 143.603311][ T8953] ? __pfx___sys_sendmsg+0x10/0x10 [ 143.603325][ T8953] ? __pfx_ksys_write+0x10/0x10 [ 143.603342][ T8953] __do_fast_syscall_32+0x13a/0x8b0 [ 143.603356][ T8953] ? lockdep_hardirqs_on+0x7d/0x110 [ 143.603370][ T8953] do_fast_syscall_32+0x32/0x70 [ 143.603384][ T8953] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 143.603398][ T8953] RIP: 0023:0xf700efec [ 143.603410][ T8953] Code: Unable to access opcode bytes at 0xf700efc2. [ 143.603415][ T8953] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 143.603427][ T8953] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 143.603433][ T8953] RDX: 000000002400c880 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.603440][ T8953] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 143.603446][ T8953] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 143.603452][ T8953] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 143.603466][ T8953] [ 143.678809][ T8962] jffs2: notice: (8962) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 143.809095][ T8962] ./file0: Can't lookup blockdev [ 143.857607][ T8970] fuse: Bad value for 'fd' [ 143.875850][ T43] audit: type=1326 audit(1790563999.291:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8950 comm="syz.0.886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 143.880442][ T43] audit: type=1326 audit(1790563999.291:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8950 comm="syz.0.886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 143.884165][ T43] audit: type=1326 audit(1790563999.291:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8950 comm="syz.0.886" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 143.889292][ T43] audit: type=1326 audit(1790563999.291:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8950 comm="syz.0.886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 143.889319][ T43] audit: type=1326 audit(1790563999.291:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8950 comm="syz.0.886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 143.889340][ T43] audit: type=1326 audit(1790563999.291:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8950 comm="syz.0.886" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 143.889360][ T43] audit: type=1326 audit(1790563999.291:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8950 comm="syz.0.886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 143.889379][ T43] audit: type=1326 audit(1790563999.291:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8950 comm="syz.0.886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 143.889401][ T43] audit: type=1326 audit(1790563999.291:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8950 comm="syz.0.886" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 143.889421][ T43] audit: type=1326 audit(1790563999.291:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8950 comm="syz.0.886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 144.712649][ T8984] tipc: Enabling of bearer rejected, failed to enable media [ 144.731719][ T8984] netlink: 164 bytes leftover after parsing attributes in process `syz.0.893'. [ 144.824221][ T8988] FAULT_INJECTION: forcing a failure. [ 144.824221][ T8988] name failslab, interval 1, probability 0, space 0, times 0 [ 144.824243][ T8988] CPU: 1 UID: 0 PID: 8988 Comm: syz.4.892 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.824258][ T8988] Tainted: [L]=SOFTLOCKUP [ 144.824262][ T8988] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.824269][ T8988] Call Trace: [ 144.824273][ T8988] [ 144.824277][ T8988] dump_stack_lvl+0x100/0x190 [ 144.824295][ T8988] should_fail_ex.cold+0x5/0xa [ 144.824310][ T8988] should_failslab+0xc2/0x120 [ 144.824326][ T8988] kmem_cache_alloc_noprof+0x92/0x6a0 [ 144.824341][ T8988] ? do_getname+0x35/0x390 [ 144.824353][ T8988] do_getname+0x35/0x390 [ 144.824364][ T8988] __ia32_sys_link+0x65/0xb0 [ 144.824381][ T8988] __do_fast_syscall_32+0x13a/0x8b0 [ 144.824396][ T8988] ? lockdep_hardirqs_on+0x7d/0x110 [ 144.824410][ T8988] do_fast_syscall_32+0x32/0x70 [ 144.824424][ T8988] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 144.824439][ T8988] RIP: 0023:0xf6feefec [ 144.824451][ T8988] Code: Unable to access opcode bytes at 0xf6feefc2. [ 144.824456][ T8988] RSP: 002b:00000000f539b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000009 [ 144.824467][ T8988] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000080000000 [ 144.824474][ T8988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.824480][ T8988] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 144.824486][ T8988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.824493][ T8988] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.824506][ T8988] [ 145.019696][ T8995] FAULT_INJECTION: forcing a failure. [ 145.019696][ T8995] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 145.019728][ T8995] CPU: 0 UID: 0 PID: 8995 Comm: syz.1.896 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.019752][ T8995] Tainted: [L]=SOFTLOCKUP [ 145.019758][ T8995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.019768][ T8995] Call Trace: [ 145.019775][ T8995] [ 145.019782][ T8995] dump_stack_lvl+0x100/0x190 [ 145.019809][ T8995] should_fail_ex.cold+0x5/0xa [ 145.019828][ T8995] ? prepare_alloc_pages+0x16d/0x5b0 [ 145.019853][ T8995] should_fail_alloc_page+0xeb/0x140 [ 145.019879][ T8995] prepare_alloc_pages+0x1f0/0x5b0 [ 145.019902][ T8995] ? is_bpf_text_address+0x94/0x1a0 [ 145.019929][ T8995] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 145.019958][ T8995] ? stack_trace_save+0x8e/0xc0 [ 145.019981][ T8995] ? __pfx_stack_trace_save+0x10/0x10 [ 145.020001][ T8995] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 145.020023][ T8995] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 145.020049][ T8995] ? is_bpf_text_address+0x94/0x1a0 [ 145.020076][ T8995] ? kasan_save_stack+0x3f/0x50 [ 145.020096][ T8995] ? kasan_save_stack+0x30/0x50 [ 145.020116][ T8995] ? kasan_save_track+0x14/0x30 [ 145.020134][ T8995] ? __kasan_slab_alloc+0x89/0x90 [ 145.020159][ T8995] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 145.020195][ T8995] ? alloc_vmap_area+0x640/0x2bb0 [ 145.020217][ T8995] ? __get_vm_area_node+0x1ed/0x350 [ 145.020238][ T8995] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 145.020262][ T8995] ? __vmalloc_node_noprof+0xad/0xf0 [ 145.020284][ T8995] ? __vmalloc_noprof+0xa3/0x120 [ 145.020308][ T8995] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 145.020329][ T8995] ? bpf_prog_alloc+0x3b/0x200 [ 145.020349][ T8995] ? bpf_prog_load+0x49e/0x2a80 [ 145.020371][ T8995] ? __sys_bpf+0x1f46/0x4a30 [ 145.020388][ T8995] ? __ia32_sys_bpf+0xcc/0x170 [ 145.020405][ T8995] ? __do_fast_syscall_32+0x13a/0x8b0 [ 145.020426][ T8995] ? do_fast_syscall_32+0x32/0x70 [ 145.020454][ T8995] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 145.020480][ T8995] ? policy_nodemask+0xed/0x4f0 [ 145.020506][ T8995] alloc_pages_mpol+0x201/0x550 [ 145.020531][ T8995] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 145.020561][ T8995] alloc_pages_noprof+0x1a/0x160 [ 145.020578][ T8995] get_free_pages_noprof+0x10/0xb0 [ 145.020599][ T8995] __kasan_populate_vmalloc+0xa0/0x210 [ 145.020625][ T8995] alloc_vmap_area+0x95d/0x2bb0 [ 145.020653][ T8995] ? kasan_save_track+0x14/0x30 [ 145.020674][ T8995] ? __kasan_kmalloc+0xaa/0xb0 [ 145.020695][ T8995] ? __pfx_alloc_vmap_area+0x10/0x10 [ 145.020718][ T8995] ? __get_vm_area_node+0x124/0x350 [ 145.020742][ T8995] __get_vm_area_node+0x1ed/0x350 [ 145.020769][ T8995] __vmalloc_node_range_noprof+0x268/0x1420 [ 145.020794][ T8995] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 145.020816][ T8995] ? process_measurement+0x4c8/0x2350 [ 145.020841][ T8995] ? down_write+0x146/0x1f0 [ 145.020864][ T8995] ? up_write+0x2dc/0x5b0 [ 145.020881][ T8995] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 145.020908][ T8995] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 145.020932][ T8995] ? __lock_acquire+0x5c0/0x1f40 [ 145.020985][ T8995] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 145.021008][ T8995] __vmalloc_node_noprof+0xad/0xf0 [ 145.021032][ T8995] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 145.021063][ T8995] __vmalloc_noprof+0xa3/0x120 [ 145.021087][ T8995] ? __pfx___vmalloc_noprof+0x10/0x10 [ 145.021110][ T8995] ? lock_acquire+0x1d1/0x380 [ 145.021133][ T8995] ? is_bpf_text_address+0x25/0x1a0 [ 145.021158][ T8995] ? rcu_is_watching+0x13/0xc0 [ 145.021178][ T8995] ? apparmor_capable+0x1d7/0x4d0 [ 145.021205][ T8995] bpf_prog_alloc_no_stats+0x58/0x690 [ 145.021227][ T8995] ? security_capable+0x80/0x260 [ 145.021251][ T8995] bpf_prog_alloc+0x3b/0x200 [ 145.021273][ T8995] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 145.021298][ T8995] bpf_prog_load+0x49e/0x2a80 [ 145.021322][ T8995] ? __lock_acquire+0x5c0/0x1f40 [ 145.021347][ T8995] ? __pfx_bpf_prog_load+0x10/0x10 [ 145.021389][ T8995] __sys_bpf+0x1f46/0x4a30 [ 145.021414][ T8995] ? __pfx___sys_bpf+0x10/0x10 [ 145.021431][ T8995] ? lock_acquire+0x1d1/0x380 [ 145.021453][ T8995] ? get_pid_task+0x2a/0x250 [ 145.021472][ T8995] ? find_held_lock+0x2b/0x80 [ 145.021490][ T8995] ? get_pid_task+0xfc/0x250 [ 145.021507][ T8995] ? get_pid_task+0xfc/0x250 [ 145.021529][ T8995] ? proc_fail_nth_write+0x9f/0x220 [ 145.021550][ T8995] ? find_held_lock+0x2b/0x80 [ 145.021573][ T8995] ? rcu_read_lock_any_held+0x6a/0x90 [ 145.021593][ T8995] ? find_held_lock+0x2b/0x80 [ 145.021611][ T8995] ? ksys_write+0x190/0x250 [ 145.021630][ T8995] ? ksys_write+0x190/0x250 [ 145.021649][ T8995] ? lock_acquire+0x1d1/0x380 [ 145.021686][ T8995] ? fput+0x7c/0x100 [ 145.021709][ T8995] ? __ia32_sys_bpf+0xcc/0x170 [ 145.021728][ T8995] __ia32_sys_bpf+0xcc/0x170 [ 145.021747][ T8995] ? __do_fast_syscall_32+0xb3/0x8b0 [ 145.021769][ T8995] __do_fast_syscall_32+0x13a/0x8b0 [ 145.021789][ T8995] ? lockdep_hardirqs_on+0x7d/0x110 [ 145.021809][ T8995] do_fast_syscall_32+0x32/0x70 [ 145.021830][ T8995] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 145.021852][ T8995] RIP: 0023:0xf7fe5fec [ 145.021870][ T8995] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 145.021878][ T8995] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 145.021895][ T8995] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000580 [ 145.021906][ T8995] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.021914][ T8995] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 145.021924][ T8995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.021933][ T8995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 145.021954][ T8995] [ 145.109363][ T5745] Bluetooth: hci4: command 0x040f tx timeout [ 145.109385][ T5745] Bluetooth: hci2: command 0x041b tx timeout [ 145.199376][ T9003] ocfs2: Unknown parameter 'grpquota²ð´"¶E5F'è'˦$+Ôˆ~Ó÷W”ê0@^ù&µó§ ×£ÈÚ¼Òp!P¥ÕcËm)g„Ÿ' [ 145.644561][ T9008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.899'. [ 145.644575][ T9008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.899'. [ 145.644582][ T9008] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 145.644591][ T9008] iwpm_mapping_info_cb: Unable to parse nlmsg [ 145.745360][ T9014] lo speed is unknown, defaulting to 1000 [ 145.793580][ T9011] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 145.796076][ T9011] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 146.065098][ T9030] syz_tun: entered allmulticast mode [ 146.099962][ T9030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.903'. [ 146.304252][ T9027] syz_tun: left allmulticast mode [ 146.708116][ T7353] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 146.735780][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.910'. [ 146.735795][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.910'. [ 146.735802][ T9055] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 146.735815][ T9055] iwpm_mapping_info_cb: Unable to parse nlmsg [ 146.867777][ T7353] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 146.868768][ T7353] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 146.868798][ T7353] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 146.870763][ T7353] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.870786][ T7353] usb 6-1: Product: syz [ 146.870802][ T7353] usb 6-1: Manufacturer: syz [ 146.870818][ T7353] usb 6-1: SerialNumber: syz [ 146.873932][ T7353] usb 6-1: config 0 descriptor?? [ 146.874735][ T9046] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 146.947134][ T7353] rc_core: IR keymap rc-streamzap not found [ 146.947148][ T7353] Registered IR keymap rc-empty [ 146.952588][ T7353] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 146.954569][ T7353] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input19 [ 146.992004][ T9063] FAULT_INJECTION: forcing a failure. [ 146.992004][ T9063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.992035][ T9063] CPU: 0 UID: 0 PID: 9063 Comm: syz.5.912 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.992057][ T9063] Tainted: [L]=SOFTLOCKUP [ 146.992063][ T9063] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.992072][ T9063] Call Trace: [ 146.992078][ T9063] [ 146.992084][ T9063] dump_stack_lvl+0x100/0x190 [ 146.992117][ T9063] should_fail_ex.cold+0x5/0xa [ 146.992137][ T9063] _copy_from_user+0x2e/0xd0 [ 146.992179][ T9063] memdup_user+0x6b/0xe0 [ 146.992196][ T9063] strndup_user+0x78/0xe0 [ 146.992214][ T9063] __ia32_sys_mount+0x17f/0x310 [ 146.992237][ T9063] ? __pfx___ia32_sys_mount+0x10/0x10 [ 146.992257][ T9063] ? ksys_write+0x1ac/0x250 [ 146.992274][ T9063] ? __pfx_ksys_write+0x10/0x10 [ 146.992295][ T9063] __do_fast_syscall_32+0x13a/0x8b0 [ 146.992314][ T9063] ? lockdep_hardirqs_on+0x7d/0x110 [ 146.992332][ T9063] do_fast_syscall_32+0x32/0x70 [ 146.992351][ T9063] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 146.992370][ T9063] RIP: 0023:0xf700efec [ 146.992388][ T9063] Code: Unable to access opcode bytes at 0xf700efc2. [ 146.992396][ T9063] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 146.992415][ T9063] RAX: ffffffffffffffda RBX: 0000000080000200 RCX: 0000000080000100 [ 146.992428][ T9063] RDX: 0000000080000300 RSI: 0000000000800000 RDI: 0000000000000000 [ 146.992440][ T9063] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 146.992450][ T9063] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 146.992461][ T9063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.992482][ T9063] [ 147.827027][ T64] Bluetooth: hci4: command 0x040f tx timeout [ 147.827041][ T5745] Bluetooth: hci2: command 0x041b tx timeout [ 148.017780][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.922'. [ 148.017798][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.922'. [ 148.017805][ T9104] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 148.017816][ T9104] iwpm_mapping_info_cb: Unable to parse nlmsg [ 148.165652][ T9112] netlink: 'syz.4.925': attribute type 1 has an invalid length. [ 148.200700][ T9112] bond1: entered promiscuous mode [ 148.200886][ T9112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.220232][ T9118] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 148.236519][ T9112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.236758][ T9112] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 148.240987][ T9112] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 148.249855][ T9112] bond1: (slave ip6gre1): making interface the new active one [ 148.249877][ T9112] ip6gre1: entered promiscuous mode [ 148.254759][ T9112] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 148.313808][ T9122] netlink: 20 bytes leftover after parsing attributes in process `syz.4.927'. [ 148.384611][ T35] libceph: connect (1)[c::]:6789 error -101 [ 148.384751][ T35] libceph: mon0 (1)[c::]:6789 connect error [ 148.451338][ T9124] ceph: No mds server is up or the cluster is laggy [ 148.496237][ T9138] FAULT_INJECTION: forcing a failure. [ 148.496237][ T9138] name failslab, interval 1, probability 0, space 0, times 0 [ 148.496270][ T9138] CPU: 3 UID: 0 PID: 9138 Comm: syz.5.931 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.496295][ T9138] Tainted: [L]=SOFTLOCKUP [ 148.496303][ T9138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.496314][ T9138] Call Trace: [ 148.496321][ T9138] [ 148.496329][ T9138] dump_stack_lvl+0x100/0x190 [ 148.496359][ T9138] should_fail_ex.cold+0x5/0xa [ 148.496399][ T9138] should_failslab+0xc2/0x120 [ 148.496428][ T9138] __kmalloc_cache_noprof+0x91/0x6d0 [ 148.496450][ T9138] ? io_uring_setup.cold+0x6c/0x1c5e [ 148.496493][ T9138] io_uring_setup.cold+0x6c/0x1c5e [ 148.496523][ T9138] ? rcu_read_lock_any_held+0x6a/0x90 [ 148.496546][ T9138] ? find_held_lock+0x2b/0x80 [ 148.496568][ T9138] ? __pfx_io_uring_setup+0x10/0x10 [ 148.496596][ T9138] ? ksys_write+0x190/0x250 [ 148.496618][ T9138] ? lock_acquire+0x1d1/0x380 [ 148.496646][ T9138] ? __mutex_unlock_slowpath+0x35d/0x930 [ 148.496683][ T9138] ? fput+0x7c/0x100 [ 148.496706][ T9138] ? ksys_write+0x1ac/0x250 [ 148.496727][ T9138] ? __pfx_ksys_write+0x10/0x10 [ 148.496751][ T9138] __ia32_sys_io_uring_setup+0xc2/0x170 [ 148.496782][ T9138] __do_fast_syscall_32+0x13a/0x8b0 [ 148.496806][ T9138] ? lockdep_hardirqs_on+0x7d/0x110 [ 148.496829][ T9138] do_fast_syscall_32+0x32/0x70 [ 148.496870][ T9138] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 148.496894][ T9138] RIP: 0023:0xf700efec [ 148.496914][ T9138] Code: Unable to access opcode bytes at 0xf700efc2. [ 148.496923][ T9138] RSP: 002b:00000000f53dc43c EFLAGS: 00000286 ORIG_RAX: 00000000000001a9 [ 148.496968][ T9138] RAX: ffffffffffffffda RBX: 0000000000000e26 RCX: 0000000080000808 [ 148.497007][ T9138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.497020][ T9138] RBP: 00000000f53dc4fc R08: 0000000000000000 R09: 0000000000000000 [ 148.497032][ T9138] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 148.497043][ T9138] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 148.497067][ T9138] [ 148.658073][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.932'. [ 148.658089][ T9142] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 148.658099][ T9142] iwpm_mapping_info_cb: Unable to parse nlmsg [ 149.363481][ T9153] netlink: 'syz.5.934': attribute type 10 has an invalid length. [ 149.377543][ T9153] team0 (unregistering): Port device team_slave_0 removed [ 149.391986][ T9153] team0 (unregistering): Port device team_slave_1 removed [ 149.480071][ T30] usb 6-1: USB disconnect, device number 13 [ 149.876119][ T9179] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 149.907141][ T5745] Bluetooth: hci2: command 0x041b tx timeout [ 149.921894][ T5745] Bluetooth: hci4: command 0x040f tx timeout [ 150.069309][ T9184] __nla_validate_parse: 1 callbacks suppressed [ 150.069329][ T9184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.939'. [ 150.124112][ T9187] FAULT_INJECTION: forcing a failure. [ 150.124112][ T9187] name failslab, interval 1, probability 0, space 0, times 0 [ 150.124135][ T9187] CPU: 3 UID: 0 PID: 9187 Comm: syz.1.940 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.124151][ T9187] Tainted: [L]=SOFTLOCKUP [ 150.124156][ T9187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.124163][ T9187] Call Trace: [ 150.124167][ T9187] [ 150.124172][ T9187] dump_stack_lvl+0x100/0x190 [ 150.124191][ T9187] should_fail_ex.cold+0x5/0xa [ 150.124207][ T9187] should_failslab+0xc2/0x120 [ 150.124224][ T9187] __kmalloc_noprof+0xfc/0x840 [ 150.124239][ T9187] ? tomoyo_encode2+0xfb/0x3c0 [ 150.124256][ T9187] tomoyo_encode2+0xfb/0x3c0 [ 150.124271][ T9187] tomoyo_encode+0x29/0x50 [ 150.124284][ T9187] tomoyo_realpath_from_path+0x18c/0x690 [ 150.124301][ T9187] tomoyo_path_number_perm+0x23c/0x580 [ 150.124313][ T9187] ? tomoyo_path_number_perm+0x22e/0x580 [ 150.124325][ T9187] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 150.124338][ T9187] ? get_pid_task+0x106/0x250 [ 150.124354][ T9187] ? __lock_acquire+0x5c0/0x1f40 [ 150.124377][ T9187] ? __fget_files+0x34/0x3d0 [ 150.124392][ T9187] ? find_held_lock+0x2b/0x80 [ 150.124405][ T9187] ? __fget_files+0x215/0x3d0 [ 150.124418][ T9187] ? hook_file_ioctl_common+0x140/0x440 [ 150.124429][ T9187] ? __fget_files+0x215/0x3d0 [ 150.124446][ T9187] ? __fget_files+0x21f/0x3d0 [ 150.124462][ T9187] security_file_ioctl_compat+0xd3/0x230 [ 150.124475][ T9187] __ia32_compat_sys_ioctl+0xc2/0x360 [ 150.124496][ T9187] __do_fast_syscall_32+0x13a/0x8b0 [ 150.124531][ T9187] ? lockdep_hardirqs_on+0x7d/0x110 [ 150.124551][ T9187] do_fast_syscall_32+0x32/0x70 [ 150.124572][ T9187] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.124590][ T9187] RIP: 0023:0xf7fe5fec [ 150.124603][ T9187] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 150.124609][ T9187] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 150.124624][ T9187] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c040565e [ 150.124635][ T9187] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.124643][ T9187] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.124649][ T9187] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 150.124656][ T9187] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.124670][ T9187] [ 150.124706][ T9187] ERROR: Out of memory at tomoyo_realpath_from_path. [ 150.321409][ T9207] netlink: 'syz.0.943': attribute type 2 has an invalid length. [ 150.358378][ T9207] : entered promiscuous mode [ 150.375819][ T9210] comedi comedi3: pcl812: I/O base address not correctly aligned [ 150.404966][ T9207] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.497475][ T9207] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.568364][ T9207] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.624724][ T9214] FAULT_INJECTION: forcing a failure. [ 150.624724][ T9214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.624746][ T9214] CPU: 2 UID: 0 PID: 9214 Comm: syz.4.945 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.624761][ T9214] Tainted: [L]=SOFTLOCKUP [ 150.624766][ T9214] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.624773][ T9214] Call Trace: [ 150.624777][ T9214] [ 150.624782][ T9214] dump_stack_lvl+0x100/0x190 [ 150.624800][ T9214] should_fail_ex.cold+0x5/0xa [ 150.624815][ T9214] _copy_from_iter+0x1f4/0x1690 [ 150.624835][ T9214] ? __asan_memset+0x23/0x50 [ 150.624849][ T9214] ? __pfx__copy_from_iter+0x10/0x10 [ 150.624865][ T9214] ? __pfx___alloc_skb+0x10/0x10 [ 150.624888][ T9214] netlink_sendmsg+0x808/0xda0 [ 150.624908][ T9214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.624946][ T9214] ? apparmor_socket_sendmsg+0x165/0x280 [ 150.624966][ T9214] ____sys_sendmsg+0xa4d/0xbe0 [ 150.624979][ T9214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.624997][ T9214] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.625028][ T9214] ___sys_sendmsg+0x190/0x1e0 [ 150.625046][ T9214] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.625068][ T9214] ? find_held_lock+0x2b/0x80 [ 150.625090][ T9214] __sys_sendmsg+0x160/0x210 [ 150.625106][ T9214] ? __pfx___sys_sendmsg+0x10/0x10 [ 150.625121][ T9214] ? __pfx_ksys_write+0x10/0x10 [ 150.625137][ T9214] __do_fast_syscall_32+0x13a/0x8b0 [ 150.625152][ T9214] ? lockdep_hardirqs_on+0x7d/0x110 [ 150.625166][ T9214] do_fast_syscall_32+0x32/0x70 [ 150.625181][ T9214] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.625196][ T9214] RIP: 0023:0xf6feefec [ 150.625209][ T9214] Code: Unable to access opcode bytes at 0xf6feefc2. [ 150.625214][ T9214] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 150.625226][ T9214] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 150.625233][ T9214] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.625239][ T9214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.625246][ T9214] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 150.625253][ T9214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.625267][ T9214] [ 150.678032][ T9207] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.797413][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.808116][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.808157][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.808188][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.874469][ T9223] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 150.886670][ T9225] netlink: 20 bytes leftover after parsing attributes in process `syz.0.950'. [ 150.917316][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'. [ 150.993671][ T9235] netlink: 12 bytes leftover after parsing attributes in process `syz.5.956'. [ 151.364374][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.960'. [ 151.368204][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.960'. [ 151.368501][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.960'. [ 151.369296][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.960'. [ 151.369403][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.960'. [ 151.374869][ T9260] netlink: 16 bytes leftover after parsing attributes in process `syz.4.960'. [ 151.432826][ T9264] FAULT_INJECTION: forcing a failure. [ 151.432826][ T9264] name failslab, interval 1, probability 0, space 0, times 0 [ 151.432848][ T9264] CPU: 2 UID: 0 PID: 9264 Comm: syz.4.962 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.432864][ T9264] Tainted: [L]=SOFTLOCKUP [ 151.432869][ T9264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.432875][ T9264] Call Trace: [ 151.432880][ T9264] [ 151.432884][ T9264] dump_stack_lvl+0x100/0x190 [ 151.432903][ T9264] should_fail_ex.cold+0x5/0xa [ 151.432937][ T9264] ? __netlink_lookup+0x652/0x900 [ 151.432955][ T9264] should_failslab+0xc2/0x120 [ 151.432973][ T9264] kmem_cache_alloc_noprof+0x92/0x6a0 [ 151.432989][ T9264] ? skb_clone+0x190/0x400 [ 151.433002][ T9264] skb_clone+0x190/0x400 [ 151.433014][ T9264] netlink_deliver_tap+0xaed/0xcc0 [ 151.433032][ T9264] netlink_unicast+0x62b/0x850 [ 151.433051][ T9264] ? __pfx_netlink_unicast+0x10/0x10 [ 151.433071][ T9264] netlink_sendmsg+0x8b0/0xda0 [ 151.433090][ T9264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.433108][ T9264] ? apparmor_socket_sendmsg+0x165/0x280 [ 151.433128][ T9264] ____sys_sendmsg+0xa4d/0xbe0 [ 151.433141][ T9264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.433159][ T9264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.433179][ T9264] ___sys_sendmsg+0x190/0x1e0 [ 151.433195][ T9264] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.433216][ T9264] ? find_held_lock+0x2b/0x80 [ 151.433239][ T9264] __sys_sendmsg+0x160/0x210 [ 151.433250][ T9264] ? __pfx___sys_sendmsg+0x10/0x10 [ 151.433265][ T9264] ? __pfx_ksys_write+0x10/0x10 [ 151.433282][ T9264] __do_fast_syscall_32+0x13a/0x8b0 [ 151.433297][ T9264] ? lockdep_hardirqs_on+0x7d/0x110 [ 151.433311][ T9264] do_fast_syscall_32+0x32/0x70 [ 151.433326][ T9264] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.433340][ T9264] RIP: 0023:0xf6feefec [ 151.433353][ T9264] Code: Unable to access opcode bytes at 0xf6feefc2. [ 151.433359][ T9264] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 151.433371][ T9264] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 151.433378][ T9264] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.433385][ T9264] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.433391][ T9264] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 151.433398][ T9264] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.433413][ T9264] [ 151.918060][ T1159] rpcbind: server 127.0.0.1 not responding, timed out [ 151.997049][ T5745] Bluetooth: hci4: command 0x040f tx timeout [ 151.997071][ T64] Bluetooth: hci2: command 0x041b tx timeout [ 152.869839][ T9285] FAULT_INJECTION: forcing a failure. [ 152.869839][ T9285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.869872][ T9285] CPU: 3 UID: 0 PID: 9285 Comm: syz.5.969 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.869896][ T9285] Tainted: [L]=SOFTLOCKUP [ 152.869903][ T9285] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.869914][ T9285] Call Trace: [ 152.869921][ T9285] [ 152.869928][ T9285] dump_stack_lvl+0x100/0x190 [ 152.869958][ T9285] should_fail_ex.cold+0x5/0xa [ 152.869984][ T9285] _copy_from_iter+0x1f4/0x1690 [ 152.870012][ T9285] ? __asan_memset+0x23/0x50 [ 152.870033][ T9285] ? __pfx__copy_from_iter+0x10/0x10 [ 152.870052][ T9285] ? __pfx___alloc_skb+0x10/0x10 [ 152.870075][ T9285] netlink_sendmsg+0x808/0xda0 [ 152.870095][ T9285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.870118][ T9285] ? apparmor_socket_sendmsg+0x165/0x280 [ 152.870138][ T9285] ____sys_sendmsg+0xa4d/0xbe0 [ 152.870151][ T9285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.870169][ T9285] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.870189][ T9285] ___sys_sendmsg+0x190/0x1e0 [ 152.870204][ T9285] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.870228][ T9285] ? find_held_lock+0x2b/0x80 [ 152.870250][ T9285] __sys_sendmsg+0x160/0x210 [ 152.870262][ T9285] ? __pfx___sys_sendmsg+0x10/0x10 [ 152.870276][ T9285] ? __pfx_ksys_write+0x10/0x10 [ 152.870293][ T9285] __do_fast_syscall_32+0x13a/0x8b0 [ 152.870308][ T9285] ? lockdep_hardirqs_on+0x7d/0x110 [ 152.870322][ T9285] do_fast_syscall_32+0x32/0x70 [ 152.870337][ T9285] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 152.870351][ T9285] RIP: 0023:0xf700efec [ 152.870364][ T9285] Code: Unable to access opcode bytes at 0xf700efc2. [ 152.870369][ T9285] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 152.870381][ T9285] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 152.870389][ T9285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 152.870396][ T9285] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 152.870402][ T9285] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 152.870409][ T9285] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 152.870423][ T9285] [ 152.951575][ T9289] warning: `syz.5.971' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 153.021453][ T9299] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 153.132409][ T9308] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.265292][ T8181] IPVS: starting estimator thread 0... [ 153.351025][ T9328] FAULT_INJECTION: forcing a failure. [ 153.351025][ T9328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.351058][ T9328] CPU: 3 UID: 0 PID: 9328 Comm: syz.1.984 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.351084][ T9328] Tainted: [L]=SOFTLOCKUP [ 153.351091][ T9328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.351102][ T9328] Call Trace: [ 153.351110][ T9328] [ 153.351118][ T9328] dump_stack_lvl+0x100/0x190 [ 153.351148][ T9328] should_fail_ex.cold+0x5/0xa [ 153.351173][ T9328] _copy_from_iter+0x1f4/0x1690 [ 153.351203][ T9328] ? __asan_memset+0x23/0x50 [ 153.351226][ T9328] ? __pfx__copy_from_iter+0x10/0x10 [ 153.351253][ T9328] ? __pfx___alloc_skb+0x10/0x10 [ 153.351292][ T9328] netlink_sendmsg+0x808/0xda0 [ 153.351323][ T9328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.351352][ T9328] ? apparmor_socket_sendmsg+0x165/0x280 [ 153.351382][ T9328] ____sys_sendmsg+0xa4d/0xbe0 [ 153.351406][ T9328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.351434][ T9328] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.351468][ T9328] ___sys_sendmsg+0x190/0x1e0 [ 153.351493][ T9328] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.351529][ T9328] ? find_held_lock+0x2b/0x80 [ 153.351567][ T9328] __sys_sendmsg+0x160/0x210 [ 153.351585][ T9328] ? __pfx___sys_sendmsg+0x10/0x10 [ 153.351611][ T9328] ? __pfx_ksys_write+0x10/0x10 [ 153.351638][ T9328] __do_fast_syscall_32+0x13a/0x8b0 [ 153.351661][ T9328] ? lockdep_hardirqs_on+0x7d/0x110 [ 153.351684][ T9328] do_fast_syscall_32+0x32/0x70 [ 153.351709][ T9328] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.351732][ T9328] RIP: 0023:0xf7fe5fec [ 153.351753][ T9328] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 153.351761][ T9328] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 153.351780][ T9328] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000c00 [ 153.351793][ T9328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.351805][ T9328] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 153.351816][ T9328] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 153.351827][ T9328] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.351851][ T9328] [ 153.361579][ T9325] IPVS: using max 43 ests per chain, 103200 per kthread [ 153.439919][ T9331] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 153.466547][ T9323] jffs2: notice: (9323) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 153.477021][ T5816] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 153.592862][ T9334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.601501][ T9334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.623251][ T9336] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 153.637567][ T5816] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 153.640107][ T5816] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.640136][ T5816] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 153.640149][ T5816] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 153.640161][ T5816] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 153.640173][ T5816] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 153.640185][ T5816] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 153.640197][ T5816] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 153.640208][ T5816] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 153.640220][ T5816] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 153.640234][ T5816] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 153.640246][ T5816] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 153.640258][ T5816] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 153.640269][ T5816] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.640280][ T5816] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.640291][ T5816] usb 9-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 153.644430][ T5816] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.644445][ T5816] usb 9-1: Product: syz [ 153.644453][ T5816] usb 9-1: Manufacturer: syz [ 153.644460][ T5816] usb 9-1: SerialNumber: syz [ 153.646298][ T9318] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 153.646348][ T9318] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 153.646455][ T9318] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 153.646507][ T9318] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 153.646594][ T9318] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 153.646640][ T9318] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 153.646745][ T9318] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 153.646791][ T9318] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 153.646918][ T9318] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 153.646967][ T9318] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 153.647063][ T9318] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 153.648030][ T5816] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 153.648635][ T5816] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 7 [ 153.658722][ T5816] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 153.660109][ T5816] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 153.667449][ T5816] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 153.834376][ T9340] profile_transition: unconfined exec no attachment [ 153.844833][ T9342] FAULT_INJECTION: forcing a failure. [ 153.844833][ T9342] name failslab, interval 1, probability 0, space 0, times 0 [ 153.844869][ T9342] CPU: 3 UID: 0 PID: 9342 Comm: syz.1.988 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.844898][ T9342] Tainted: [L]=SOFTLOCKUP [ 153.844934][ T9342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.844947][ T9342] Call Trace: [ 153.844955][ T9342] [ 153.844964][ T9342] dump_stack_lvl+0x100/0x190 [ 153.844996][ T9342] should_fail_ex.cold+0x5/0xa [ 153.845024][ T9342] should_failslab+0xc2/0x120 [ 153.845053][ T9342] __kmalloc_cache_noprof+0x91/0x6d0 [ 153.845076][ T9342] ? fuse_get_tree+0x88/0x490 [ 153.845117][ T9342] fuse_get_tree+0x88/0x490 [ 153.845145][ T9342] vfs_get_tree+0x92/0x320 [ 153.845165][ T9342] path_mount+0x7d0/0x24c0 [ 153.845199][ T9342] ? __pfx_path_mount+0x10/0x10 [ 153.845229][ T9342] ? lockdep_hardirqs_on+0x7d/0x110 [ 153.845256][ T9342] ? putname+0xb1/0x110 [ 153.845282][ T9342] ? kmem_cache_free+0x127/0x6c0 [ 153.845313][ T9342] ? __ia32_sys_mount+0x292/0x310 [ 153.845342][ T9342] __ia32_sys_mount+0x292/0x310 [ 153.845373][ T9342] ? __pfx___ia32_sys_mount+0x10/0x10 [ 153.845411][ T9342] __do_fast_syscall_32+0x13a/0x8b0 [ 153.845440][ T9342] do_fast_syscall_32+0x32/0x70 [ 153.845483][ T9342] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.845509][ T9342] RIP: 0023:0xf7fe5fec [ 153.845531][ T9342] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 153.845541][ T9342] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 153.845561][ T9342] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080002080 [ 153.845574][ T9342] RDX: 0000000080000000 RSI: 0000000001000000 RDI: 0000000000000000 [ 153.845586][ T9342] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 153.845597][ T9342] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 153.845609][ T9342] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.845635][ T9342] [ 153.851253][ T9343] profile_transition: unconfined exec no attachment [ 153.979789][ T9347] FAULT_INJECTION: forcing a failure. [ 153.979789][ T9347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.979812][ T9347] CPU: 1 UID: 0 PID: 9347 Comm: syz.1.992 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.979830][ T9347] Tainted: [L]=SOFTLOCKUP [ 153.979836][ T9347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.979844][ T9347] Call Trace: [ 153.979848][ T9347] [ 153.979853][ T9347] dump_stack_lvl+0x100/0x190 [ 153.979886][ T9347] should_fail_ex.cold+0x5/0xa [ 153.979901][ T9347] _copy_from_iter+0x1f4/0x1690 [ 153.979920][ T9347] ? __asan_memset+0x23/0x50 [ 153.979939][ T9347] ? __pfx__copy_from_iter+0x10/0x10 [ 153.979956][ T9347] ? __pfx___alloc_skb+0x10/0x10 [ 153.979975][ T9347] ? aa_sk_perm+0x389/0xab0 [ 153.979990][ T9347] netlink_sendmsg+0x808/0xda0 [ 153.980010][ T9347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.980027][ T9347] ? apparmor_socket_sendmsg+0x165/0x280 [ 153.980047][ T9347] ____sys_sendmsg+0xa4d/0xbe0 [ 153.980060][ T9347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.980077][ T9347] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.980097][ T9347] ___sys_sendmsg+0x190/0x1e0 [ 153.980113][ T9347] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.980134][ T9347] ? find_held_lock+0x2b/0x80 [ 153.980156][ T9347] __sys_sendmsg+0x160/0x210 [ 153.980168][ T9347] ? __pfx___sys_sendmsg+0x10/0x10 [ 153.980182][ T9347] ? __pfx_ksys_write+0x10/0x10 [ 153.980199][ T9347] __do_fast_syscall_32+0x13a/0x8b0 [ 153.980214][ T9347] ? lockdep_hardirqs_on+0x7d/0x110 [ 153.980228][ T9347] do_fast_syscall_32+0x32/0x70 [ 153.980242][ T9347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.980257][ T9347] RIP: 0023:0xf7fe5fec [ 153.980270][ T9347] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 153.980275][ T9347] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 153.980287][ T9347] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 153.980294][ T9347] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.980301][ T9347] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 153.980307][ T9347] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 153.980314][ T9347] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.980328][ T9347] [ 154.012187][ T35] usb 9-1: USB disconnect, device number 10 [ 154.026379][ T35] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 154.028148][ T35] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 154.028786][ T35] keyspan 9-1:1.0: device disconnected [ 154.036104][ T9350] jffs2: notice: (9350) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 154.068449][ T64] Bluetooth: hci2: command 0x041b tx timeout [ 154.271315][ T9367] Invalid ELF header magic: != ELF [ 154.365201][ T9369] profile_transition: unconfined exec no attachment [ 154.393131][ T9370] profile_transition: unconfined exec no attachment [ 154.606377][ T9366] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 154.843439][ T9381] comedi comedi3: dt2817: I/O base address or length out of range [ 155.050097][ T9393] profile_transition: unconfined exec no attachment [ 155.080178][ T9396] profile_transition: unconfined exec no attachment [ 155.105431][ T9399] __nla_validate_parse: 7 callbacks suppressed [ 155.105458][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1007'. [ 155.105471][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1007'. [ 155.105481][ T9399] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 155.105497][ T9399] iwpm_mapping_info_cb: Unable to parse nlmsg [ 155.112721][ T9401] profile_transition: unconfined exec no attachment [ 155.131147][ T9402] profile_transition: unconfined exec no attachment [ 156.077243][ T9409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1010'. [ 156.122171][ T9411] veth1_to_bond: entered allmulticast mode [ 156.147043][ T5745] Bluetooth: hci2: command 0x041b tx timeout [ 157.107085][ T5745] Bluetooth: hci4: command 0x040f tx timeout [ 157.677503][ T9410] veth1_to_bond: left allmulticast mode [ 157.696081][ T9403] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 157.696220][ T9403] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 157.770443][ T9416] FAULT_INJECTION: forcing a failure. [ 157.770443][ T9416] name failslab, interval 1, probability 0, space 0, times 0 [ 157.770475][ T9416] CPU: 2 UID: 0 PID: 9416 Comm: syz.4.1012 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.770499][ T9416] Tainted: [L]=SOFTLOCKUP [ 157.770505][ T9416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.770515][ T9416] Call Trace: [ 157.770521][ T9416] [ 157.770529][ T9416] dump_stack_lvl+0x100/0x190 [ 157.770562][ T9416] should_fail_ex.cold+0x5/0xa [ 157.770586][ T9416] should_failslab+0xc2/0x120 [ 157.770611][ T9416] __kmalloc_noprof+0xfc/0x840 [ 157.770632][ T9416] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 157.770666][ T9416] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 157.770699][ T9416] genl_family_rcv_msg_doit+0xc7/0x300 [ 157.770728][ T9416] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 157.770753][ T9416] ? genl_get_cmd+0x3e7/0x760 [ 157.770785][ T9416] ? bpf_lsm_capable+0x9/0x10 [ 157.770801][ T9416] ? security_capable+0x80/0x260 [ 157.770831][ T9416] genl_rcv_msg+0x560/0x800 [ 157.770850][ T9416] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.770867][ T9416] ? __lock_acquire+0x5c0/0x1f40 [ 157.770892][ T9416] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 157.770920][ T9416] ? __pfx_nl802154_del_llsec_seclevel+0x10/0x10 [ 157.770942][ T9416] ? __pfx_nl802154_post_doit+0x10/0x10 [ 157.770959][ T9416] ? __lock_acquire+0x5c0/0x1f40 [ 157.770985][ T9416] netlink_rcv_skb+0x159/0x420 [ 157.771009][ T9416] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.771027][ T9416] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.771060][ T9416] ? netlink_deliver_tap+0x1ae/0xcc0 [ 157.771086][ T9416] genl_rcv+0x28/0x40 [ 157.771109][ T9416] netlink_unicast+0x585/0x850 [ 157.771136][ T9416] ? __pfx_netlink_unicast+0x10/0x10 [ 157.771159][ T9416] ? aa_sk_perm+0x389/0xab0 [ 157.771182][ T9416] netlink_sendmsg+0x8b0/0xda0 [ 157.771210][ T9416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.771237][ T9416] ? apparmor_socket_sendmsg+0x165/0x280 [ 157.771265][ T9416] ____sys_sendmsg+0xa4d/0xbe0 [ 157.771285][ T9416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.771310][ T9416] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.771342][ T9416] ___sys_sendmsg+0x190/0x1e0 [ 157.771365][ T9416] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.771397][ T9416] ? find_held_lock+0x2b/0x80 [ 157.771431][ T9416] __sys_sendmsg+0x160/0x210 [ 157.771448][ T9416] ? __pfx___sys_sendmsg+0x10/0x10 [ 157.771472][ T9416] ? __pfx_ksys_write+0x10/0x10 [ 157.771497][ T9416] __do_fast_syscall_32+0x13a/0x8b0 [ 157.771518][ T9416] ? lockdep_hardirqs_on+0x7d/0x110 [ 157.771540][ T9416] do_fast_syscall_32+0x32/0x70 [ 157.771566][ T9416] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.771587][ T9416] RIP: 0023:0xf6feefec [ 157.771605][ T9416] Code: Unable to access opcode bytes at 0xf6feefc2. [ 157.771612][ T9416] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 157.771629][ T9416] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001c00 [ 157.771640][ T9416] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.771650][ T9416] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.771660][ T9416] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 157.771670][ T9416] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.771692][ T9416] [ 157.829741][ T9420] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.830150][ T9420] FAULT_INJECTION: forcing a failure. [ 157.830150][ T9420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.830169][ T9420] CPU: 0 UID: 0 PID: 9420 Comm: syz.4.1015 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.830184][ T9420] Tainted: [L]=SOFTLOCKUP [ 157.830188][ T9420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.830195][ T9420] Call Trace: [ 157.830199][ T9420] [ 157.830204][ T9420] dump_stack_lvl+0x100/0x190 [ 157.830224][ T9420] should_fail_ex.cold+0x5/0xa [ 157.830239][ T9420] _copy_from_iter+0x1f4/0x1690 [ 157.830260][ T9420] ? __asan_memset+0x23/0x50 [ 157.830274][ T9420] ? __pfx__copy_from_iter+0x10/0x10 [ 157.830290][ T9420] ? __pfx___alloc_skb+0x10/0x10 [ 157.830313][ T9420] netlink_sendmsg+0x808/0xda0 [ 157.830332][ T9420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.830349][ T9420] ? apparmor_socket_sendmsg+0x165/0x280 [ 157.830369][ T9420] ____sys_sendmsg+0xa4d/0xbe0 [ 157.830382][ T9420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.830399][ T9420] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.830415][ T9420] ? _kstrtoull+0x144/0x200 [ 157.830427][ T9420] ? __pfx__kstrtoull+0x10/0x10 [ 157.830440][ T9420] ___sys_sendmsg+0x190/0x1e0 [ 157.830455][ T9420] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.830470][ T9420] ? __lock_acquire+0x5c0/0x1f40 [ 157.830491][ T9420] ? __fget_files+0x34/0x3d0 [ 157.830515][ T9420] __sys_sendmmsg+0x309/0x440 [ 157.830528][ T9420] ? __pfx___sys_sendmmsg+0x10/0x10 [ 157.830538][ T9420] ? find_held_lock+0x2b/0x80 [ 157.830555][ T9420] ? __mutex_unlock_slowpath+0x35d/0x930 [ 157.830584][ T9420] ? fput+0x7c/0x100 [ 157.830607][ T9420] ? ksys_write+0x1ac/0x250 [ 157.830632][ T9420] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 157.830656][ T9420] ? lockdep_hardirqs_on+0x7d/0x110 [ 157.830679][ T9420] __do_fast_syscall_32+0x13a/0x8b0 [ 157.830698][ T9420] ? lockdep_hardirqs_on+0x7d/0x110 [ 157.830712][ T9420] do_fast_syscall_32+0x32/0x70 [ 157.830727][ T9420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.830741][ T9420] RIP: 0023:0xf6feefec [ 157.830755][ T9420] Code: Unable to access opcode bytes at 0xf6feefc2. [ 157.830761][ T9420] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 157.830773][ T9420] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 157.830781][ T9420] RDX: 00000000000001f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.830788][ T9420] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.830794][ T9420] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 157.830800][ T9420] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.830814][ T9420] [ 157.838622][ T9424] profile_transition: unconfined exec no attachment [ 157.860149][ T9428] profile_transition: unconfined exec no attachment [ 157.885051][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1017'. [ 157.885069][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1017'. [ 157.885079][ T9423] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 157.885092][ T9423] iwpm_mapping_info_cb: Unable to parse nlmsg [ 157.916310][ T9433] FAULT_INJECTION: forcing a failure. [ 157.916310][ T9433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.916334][ T9433] CPU: 2 UID: 0 PID: 9433 Comm: syz.1.1019 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.916350][ T9433] Tainted: [L]=SOFTLOCKUP [ 157.916355][ T9433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.916362][ T9433] Call Trace: [ 157.916366][ T9433] [ 157.916371][ T9433] dump_stack_lvl+0x100/0x190 [ 157.916391][ T9433] should_fail_ex.cold+0x5/0xa [ 157.916406][ T9433] strncpy_from_user+0x3b/0x2d0 [ 157.916443][ T9433] do_getname+0x78/0x390 [ 157.916455][ T9433] do_sys_openat2+0xc7/0x1e0 [ 157.916474][ T9433] ? __pfx_do_sys_openat2+0x10/0x10 [ 157.916497][ T9433] __ia32_compat_sys_openat+0x12d/0x210 [ 157.916509][ T9433] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 157.916526][ T9433] __do_fast_syscall_32+0x13a/0x8b0 [ 157.916544][ T9433] do_fast_syscall_32+0x32/0x70 [ 157.916558][ T9433] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.916573][ T9433] RIP: 0023:0xf7fe5fec [ 157.916586][ T9433] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 157.916592][ T9433] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 157.916604][ T9433] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 157.916612][ T9433] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.916618][ T9433] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.916625][ T9433] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 157.916632][ T9433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.916648][ T9433] [ 157.943316][ T9430] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 158.204950][ T9452] input: syz1 as /devices/virtual/input/input20 [ 158.244954][ T9446] usb 1-1: USB disconnect, device number 4 [ 158.459131][ T9446] hub 1-0:1.0: USB hub found [ 158.466436][ T9446] hub 1-0:1.0: 6 ports detected [ 158.485225][ T9470] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.485744][ T9470] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.499772][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1029'. [ 158.499792][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1029'. [ 158.499803][ T9466] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 158.499818][ T9466] iwpm_mapping_info_cb: Unable to parse nlmsg [ 158.583003][ T9477] vivid-002: kernel_thread() failed [ 158.611926][ T9480] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 158.619315][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 158.619328][ T43] audit: type=1400 audit(1790564014.051:45): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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luetooth: hci2: Opcode 0x0c1a failed: -4 [ 158.631291][ T9475] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 158.677434][ T5816] usb 1-1: new high-speed USB device number 5 using ehci-pci [ 158.703484][ T9491] FAULT_INJECTION: forcing a failure. [ 158.703484][ T9491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.703506][ T9491] CPU: 0 UID: 0 PID: 9491 Comm: syz.5.1036 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.703521][ T9491] Tainted: [L]=SOFTLOCKUP [ 158.703526][ T9491] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.703533][ T9491] Call Trace: [ 158.703537][ T9491] [ 158.703542][ T9491] dump_stack_lvl+0x100/0x190 [ 158.703562][ T9491] should_fail_ex.cold+0x5/0xa [ 158.703578][ T9491] _copy_from_user+0x2e/0xd0 [ 158.703595][ T9491] memdup_user+0x6b/0xe0 [ 158.703608][ T9491] proc_pid_attr_write+0x22f/0x780 [ 158.703626][ T9491] vfs_write+0x2aa/0x1050 [ 158.703640][ T9491] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 158.703654][ T9491] ? lock_acquire+0x1d1/0x380 [ 158.703671][ T9491] ? __fget_files+0x34/0x3d0 [ 158.703686][ T9491] ? __pfx_vfs_write+0x10/0x10 [ 158.703698][ T9491] ? find_held_lock+0x2b/0x80 [ 158.703712][ T9491] ? __fget_files+0x215/0x3d0 [ 158.703729][ T9491] ? __fget_files+0x21f/0x3d0 [ 158.703747][ T9491] ksys_write+0x12a/0x250 [ 158.703760][ T9491] ? __pfx_ksys_write+0x10/0x10 [ 158.703773][ T9491] ? ksys_write+0x1ac/0x250 [ 158.703786][ T9491] ? __pfx_ksys_write+0x10/0x10 [ 158.703802][ T9491] __do_fast_syscall_32+0x13a/0x8b0 [ 158.703817][ T9491] ? lockdep_hardirqs_on+0x7d/0x110 [ 158.703831][ T9491] do_fast_syscall_32+0x32/0x70 [ 158.703846][ T9491] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.703861][ T9491] RIP: 0023:0xf700efec [ 158.703875][ T9491] Code: Unable to access opcode bytes at 0xf700efc2. [ 158.703880][ T9491] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 158.703892][ T9491] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 158.703899][ T9491] RDX: 0000000000000564 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.703906][ T9491] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.703913][ T9491] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 158.703919][ T9491] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.703934][ T9491] [ 158.747890][ T9496] input: syz1 as /devices/virtual/input/input21 [ 158.751602][ T9494] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1035'. [ 158.841020][ T9494] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 158.841046][ T9494] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 158.841110][ T9494] vhci_hcd vhci_hcd.0: Device attached [ 158.858112][ T9508] profile_transition: 9 callbacks suppressed [ 158.858130][ T9508] profile_transition: unconfined exec no attachment [ 158.858721][ T5816] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 158.874333][ T9505] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 158.874530][ T5809] vhci_hcd vhci_hcd.1: stop threads [ 158.874545][ T5809] vhci_hcd vhci_hcd.1: release socket [ 158.874561][ T5809] vhci_hcd vhci_hcd.1: disconnect device [ 158.877534][ T9509] FAULT_INJECTION: forcing a failure. [ 158.877534][ T9509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.877564][ T9509] CPU: 1 UID: 0 PID: 9509 Comm: syz.4.1039 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.877588][ T9509] Tainted: [L]=SOFTLOCKUP [ 158.877595][ T9509] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.877606][ T9509] Call Trace: [ 158.877612][ T9509] [ 158.877620][ T9509] dump_stack_lvl+0x100/0x190 [ 158.877649][ T9509] should_fail_ex.cold+0x5/0xa [ 158.877671][ T9509] _copy_from_iter+0x1f4/0x1690 [ 158.877701][ T9509] ? __asan_memset+0x23/0x50 [ 158.877723][ T9509] ? __pfx__copy_from_iter+0x10/0x10 [ 158.877749][ T9509] ? __pfx___alloc_skb+0x10/0x10 [ 158.877786][ T9509] netlink_sendmsg+0x808/0xda0 [ 158.877817][ T9509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.877846][ T9509] ? apparmor_socket_sendmsg+0x165/0x280 [ 158.877877][ T9509] ____sys_sendmsg+0xa4d/0xbe0 [ 158.877898][ T9509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.877927][ T9509] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.877961][ T9509] ___sys_sendmsg+0x190/0x1e0 [ 158.877986][ T9509] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.878021][ T9509] ? find_held_lock+0x2b/0x80 [ 158.878057][ T9509] __sys_sendmsg+0x160/0x210 [ 158.878076][ T9509] ? __pfx___sys_sendmsg+0x10/0x10 [ 158.878101][ T9509] ? __pfx_ksys_write+0x10/0x10 [ 158.878127][ T9509] __do_fast_syscall_32+0x13a/0x8b0 [ 158.878151][ T9509] ? lockdep_hardirqs_on+0x7d/0x110 [ 158.878174][ T9509] do_fast_syscall_32+0x32/0x70 [ 158.878197][ T9509] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.878221][ T9509] RIP: 0023:0xf6feefec [ 158.878242][ T9509] Code: Unable to access opcode bytes at 0xf6feefc2. [ 158.878251][ T9509] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 158.878270][ T9509] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 158.878282][ T9509] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.878294][ T9509] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.878305][ T9509] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 158.878316][ T9509] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.878340][ T9509] [ 158.895595][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 158.895620][ T5816] usb 1-1: Product: QEMU USB Tablet [ 158.895634][ T5816] usb 1-1: Manufacturer: QEMU [ 158.895647][ T5816] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 158.988601][ T5816] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0007/input/input22 [ 159.078030][ T9521] FAULT_INJECTION: forcing a failure. [ 159.078030][ T9521] name failslab, interval 1, probability 0, space 0, times 0 [ 159.078052][ T9521] CPU: 1 UID: 0 PID: 9521 Comm: syz.5.1042 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.078068][ T9521] Tainted: [L]=SOFTLOCKUP [ 159.078073][ T9521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.078079][ T9521] Call Trace: [ 159.078083][ T9521] [ 159.078089][ T9521] dump_stack_lvl+0x100/0x190 [ 159.078110][ T9521] should_fail_ex.cold+0x5/0xa [ 159.078127][ T9521] should_failslab+0xc2/0x120 [ 159.078146][ T9521] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 159.078163][ T9521] ? kvasprintf_const+0x66/0x1a0 [ 159.078185][ T9521] kvasprintf+0xbc/0x150 [ 159.078203][ T9521] ? __pfx_kvasprintf+0x10/0x10 [ 159.078221][ T9521] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 159.078235][ T9521] ? __debug_object_init+0x2de/0x3d0 [ 159.078255][ T9521] kvasprintf_const+0x66/0x1a0 [ 159.078273][ T9521] kobject_set_name_vargs+0x5a/0x140 [ 159.078293][ T9521] dev_set_name+0xc7/0x100 [ 159.078308][ T9521] ? __pfx_dev_set_name+0x10/0x10 [ 159.078322][ T9521] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 159.078340][ T9521] ? lockdep_init_map_type+0x5c/0x250 [ 159.078359][ T9521] ? __init_waitqueue_head+0xca/0x150 [ 159.078375][ T9521] wakeup_source_device_create+0x204/0x2e0 [ 159.078391][ T9521] wakeup_source_sysfs_add+0x1c/0x90 [ 159.078405][ T9521] wakeup_source_register+0x154/0x3e0 [ 159.078424][ T9521] ep_create_wakeup_source+0x1df/0x2e0 [ 159.078450][ T9521] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 159.078471][ T9521] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 159.078490][ T9521] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 159.078514][ T9521] do_epoll_ctl_file+0x1e26/0x36e0 [ 159.078538][ T9521] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 159.078555][ T9521] ? lock_acquire+0x1d1/0x380 [ 159.078573][ T9521] ? __fget_files+0x34/0x3d0 [ 159.078588][ T9521] ? find_held_lock+0x2b/0x80 [ 159.078603][ T9521] ? __fget_files+0x215/0x3d0 [ 159.078621][ T9521] ? __fget_files+0x21f/0x3d0 [ 159.078639][ T9521] ? do_epoll_ctl+0xfd/0x1a0 [ 159.078655][ T9521] do_epoll_ctl+0xfd/0x1a0 [ 159.078673][ T9521] ? __pfx_do_epoll_ctl+0x10/0x10 [ 159.078694][ T9521] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 159.078713][ T9521] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 159.078736][ T9521] __do_fast_syscall_32+0x13a/0x8b0 [ 159.078753][ T9521] do_fast_syscall_32+0x32/0x70 [ 159.078768][ T9521] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.078783][ T9521] RIP: 0023:0xf700efec [ 159.078797][ T9521] Code: Unable to access opcode bytes at 0xf700efc2. [ 159.078802][ T9521] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 159.078814][ T9521] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000001 [ 159.078822][ T9521] RDX: 0000000000000006 RSI: 0000000080000140 RDI: 0000000000000000 [ 159.078829][ T9521] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.078835][ T9521] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 159.078842][ T9521] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.078857][ T9521] [ 159.087429][ T5816] hid-generic 0003:0627:0001.0007: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 159.092106][ T9522] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.092118][ T9522] IPv6: NLM_F_CREATE should be set when creating new route [ 159.172025][ T9527] profile_transition: unconfined exec no attachment [ 159.186433][ T9528] profile_transition: unconfined exec no attachment [ 159.223690][ T9529] profile_transition: unconfined exec no attachment [ 159.226473][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1044'. [ 159.226492][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1044'. [ 159.226499][ T9530] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 159.226509][ T9530] iwpm_mapping_info_cb: Unable to parse nlmsg [ 159.315112][ T9518] overlayfs: failed to clone upperpath [ 159.338636][ T9525] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 159.338821][ T9525] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 159.379023][ T9539] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 159.410400][ T9535] FAULT_INJECTION: forcing a failure. [ 159.410400][ T9535] name failslab, interval 1, probability 0, space 0, times 0 [ 159.410425][ T9535] CPU: 1 UID: 0 PID: 9535 Comm: syz.4.1046 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.410440][ T9535] Tainted: [L]=SOFTLOCKUP [ 159.410445][ T9535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.410452][ T9535] Call Trace: [ 159.410456][ T9535] [ 159.410461][ T9535] dump_stack_lvl+0x100/0x190 [ 159.410480][ T9535] should_fail_ex.cold+0x5/0xa [ 159.410496][ T9535] should_failslab+0xc2/0x120 [ 159.410513][ T9535] kmem_cache_alloc_noprof+0x92/0x6a0 [ 159.410529][ T9535] ? skb_clone+0x190/0x400 [ 159.410543][ T9535] skb_clone+0x190/0x400 [ 159.410554][ T9535] netlink_deliver_tap+0xaed/0xcc0 [ 159.410587][ T9535] netlink_dump+0x909/0xd00 [ 159.410605][ T9535] ? __pfx_netlink_dump+0x10/0x10 [ 159.410619][ T9535] ? kasan_quarantine_put+0x104/0x240 [ 159.410640][ T9535] ? kfree_skbmem+0x19f/0x210 [ 159.410656][ T9535] netlink_recvmsg+0x7dc/0xa90 [ 159.410672][ T9535] ? __pfx_netlink_recvmsg+0x10/0x10 [ 159.410690][ T9535] ? aa_sock_msg_perm+0x11e/0x200 [ 159.410708][ T9535] ? __pfx_netlink_recvmsg+0x10/0x10 [ 159.410724][ T9535] sock_recvmsg+0x1d5/0x220 [ 159.410739][ T9535] ____sys_recvmsg+0x21e/0x670 [ 159.410756][ T9535] ? __pfx_____sys_recvmsg+0x10/0x10 [ 159.410775][ T9535] ? __lock_acquire+0x5c0/0x1f40 [ 159.410795][ T9535] ___sys_recvmsg+0x16a/0x1a0 [ 159.410810][ T9535] ? __pfx____sys_recvmsg+0x10/0x10 [ 159.410825][ T9535] ? lock_acquire+0x1d1/0x380 [ 159.410840][ T9535] ? __fget_files+0x34/0x3d0 [ 159.410855][ T9535] ? find_held_lock+0x2b/0x80 [ 159.410878][ T9535] __sys_recvmsg+0x15d/0x210 [ 159.410890][ T9535] ? __pfx___sys_recvmsg+0x10/0x10 [ 159.410905][ T9535] ? __pfx_ksys_write+0x10/0x10 [ 159.410926][ T9535] __do_fast_syscall_32+0x13a/0x8b0 [ 159.410940][ T9535] ? lockdep_hardirqs_on+0x7d/0x110 [ 159.410955][ T9535] do_fast_syscall_32+0x32/0x70 [ 159.410970][ T9535] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.410984][ T9535] RIP: 0023:0xf6feefec [ 159.410998][ T9535] Code: Unable to access opcode bytes at 0xf6feefc2. [ 159.411004][ T9535] RSP: 002b:00000000f53bc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000174 [ 159.411016][ T9535] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 159.411023][ T9535] RDX: 0000000040000020 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.411029][ T9535] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.411036][ T9535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.411043][ T9535] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.411058][ T9535] [ 159.466098][ T9542] FAULT_INJECTION: forcing a failure. [ 159.466098][ T9542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.466123][ T9542] CPU: 3 UID: 0 PID: 9542 Comm: syz.4.1048 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.466138][ T9542] Tainted: [L]=SOFTLOCKUP [ 159.466143][ T9542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.466150][ T9542] Call Trace: [ 159.466154][ T9542] [ 159.466159][ T9542] dump_stack_lvl+0x100/0x190 [ 159.466179][ T9542] should_fail_ex.cold+0x5/0xa [ 159.466194][ T9542] _copy_from_iter+0x1f4/0x1690 [ 159.466213][ T9542] ? __asan_memset+0x23/0x50 [ 159.466227][ T9542] ? __pfx__copy_from_iter+0x10/0x10 [ 159.466243][ T9542] ? __pfx___alloc_skb+0x10/0x10 [ 159.466265][ T9542] netlink_sendmsg+0x808/0xda0 [ 159.466284][ T9542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.466302][ T9542] ? apparmor_socket_sendmsg+0x165/0x280 [ 159.466322][ T9542] ____sys_sendmsg+0xa4d/0xbe0 [ 159.466335][ T9542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.466353][ T9542] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.466370][ T9542] ? _kstrtoull+0x144/0x200 [ 159.466381][ T9542] ? __pfx__kstrtoull+0x10/0x10 [ 159.466394][ T9542] ___sys_sendmsg+0x190/0x1e0 [ 159.466410][ T9542] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.466424][ T9542] ? __lock_acquire+0x5c0/0x1f40 [ 159.466446][ T9542] ? __fget_files+0x34/0x3d0 [ 159.466470][ T9542] __sys_sendmmsg+0x309/0x440 [ 159.466483][ T9542] ? __pfx___sys_sendmmsg+0x10/0x10 [ 159.466493][ T9542] ? find_held_lock+0x2b/0x80 [ 159.466510][ T9542] ? __mutex_unlock_slowpath+0x35d/0x930 [ 159.466532][ T9542] ? fput+0x7c/0x100 [ 159.466547][ T9542] ? ksys_write+0x1ac/0x250 [ 159.466566][ T9542] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 159.466581][ T9542] ? lockdep_hardirqs_on+0x7d/0x110 [ 159.466594][ T9542] __do_fast_syscall_32+0x13a/0x8b0 [ 159.466614][ T9542] ? lockdep_hardirqs_on+0x7d/0x110 [ 159.466628][ T9542] do_fast_syscall_32+0x32/0x70 [ 159.466643][ T9542] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.466658][ T9542] RIP: 0023:0xf6feefec [ 159.466671][ T9542] Code: Unable to access opcode bytes at 0xf6feefc2. [ 159.466677][ T9542] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 159.466689][ T9542] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 159.466696][ T9542] RDX: 000000000000009f RSI: 0000000000000000 RDI: 0000000000000000 [ 159.466702][ T9542] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.466709][ T9542] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 159.466716][ T9542] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.466729][ T9542] [ 159.560106][ T9548] syzkaller0: entered promiscuous mode [ 159.560123][ T9548] syzkaller0: entered allmulticast mode [ 159.982244][ T9553] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 159.982264][ T9553] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 159.982359][ T9553] vhci_hcd vhci_hcd.0: Device attached [ 160.177132][ T7353] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 160.206990][ T5816] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 160.236999][ T3374] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 160.237020][ T7353] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 160.357053][ T5816] usb 9-1: Using ep0 maxpacket: 8 [ 160.358888][ T5816] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 160.359774][ T5816] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 160.359798][ T5816] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.359810][ T5816] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 160.359822][ T5816] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.359834][ T5816] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.359853][ T5816] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.397467][ T3374] usb 6-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 160.398353][ T3374] usb 6-1: config 0 has no interfaces? [ 160.398373][ T3374] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.399757][ T3374] usb 6-1: config 0 descriptor?? [ 160.567563][ T5816] usb 9-1: usb_control_msg returned -32 [ 160.567621][ T5816] usbtmc 9-1:16.0: can't read capabilities [ 160.589717][ T9563] profile_transition: unconfined exec no attachment [ 160.602429][ T9555] vhci_hcd: unknown pdu 2 [ 160.604349][ T5809] vhci_hcd vhci_hcd.1: stop threads [ 160.604360][ T5809] vhci_hcd vhci_hcd.1: release socket [ 160.605036][ T5809] vhci_hcd vhci_hcd.1: disconnect device [ 160.608475][ T5816] usb 6-1: USB disconnect, device number 14 [ 160.608584][ T9564] profile_transition: unconfined exec no attachment [ 160.630372][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1055'. [ 160.630388][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1055'. [ 160.630395][ T9562] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 160.630405][ T9562] iwpm_mapping_info_cb: Unable to parse nlmsg [ 160.632281][ T9565] profile_transition: unconfined exec no attachment [ 160.658599][ T9566] profile_transition: unconfined exec no attachment [ 160.667049][ T7353] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 160.929077][ T9579] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 160.930631][ T5816] usb 9-1: USB disconnect, device number 11 [ 160.991278][ T9581] FAULT_INJECTION: forcing a failure. [ 160.991278][ T9581] name failslab, interval 1, probability 0, space 0, times 0 [ 160.991325][ T9581] CPU: 0 UID: 0 PID: 9581 Comm: syz.5.1059 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.991354][ T9581] Tainted: [L]=SOFTLOCKUP [ 160.991358][ T9581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.991365][ T9581] Call Trace: [ 160.991370][ T9581] [ 160.991375][ T9581] dump_stack_lvl+0x100/0x190 [ 160.991394][ T9581] should_fail_ex.cold+0x5/0xa [ 160.991409][ T9581] should_failslab+0xc2/0x120 [ 160.991426][ T9581] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 160.991442][ T9581] ? __alloc_skb+0x5b7/0x710 [ 160.991459][ T9581] ? __alloc_skb+0x140/0x710 [ 160.991478][ T9581] __alloc_skb+0x140/0x710 [ 160.991504][ T9581] ? __alloc_skb+0x5b7/0x710 [ 160.991523][ T9581] ? __pfx___alloc_skb+0x10/0x10 [ 160.991544][ T9581] netlink_alloc_large_skb+0x69/0x150 [ 160.991562][ T9581] netlink_sendmsg+0x680/0xda0 [ 160.991584][ T9581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.991602][ T9581] ? apparmor_socket_sendmsg+0x165/0x280 [ 160.991622][ T9581] ____sys_sendmsg+0xa4d/0xbe0 [ 160.991635][ T9581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.991652][ T9581] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.991670][ T9581] ? rcu_is_watching+0x13/0xc0 [ 160.991684][ T9581] ___sys_sendmsg+0x190/0x1e0 [ 160.991699][ T9581] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.991720][ T9581] ? find_held_lock+0x2b/0x80 [ 160.991742][ T9581] __sys_sendmsg+0x160/0x210 [ 160.991753][ T9581] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.991767][ T9581] ? exit_to_user_mode_loop+0x166/0x700 [ 160.991778][ T9581] ? rcu_is_watching+0x13/0xc0 [ 160.991793][ T9581] __do_fast_syscall_32+0x13a/0x8b0 [ 160.991808][ T9581] ? lockdep_hardirqs_on+0x7d/0x110 [ 160.991822][ T9581] do_fast_syscall_32+0x32/0x70 [ 160.991837][ T9581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.991851][ T9581] RIP: 0023:0xf700efec [ 160.991866][ T9581] Code: Unable to access opcode bytes at 0xf700efc2. [ 160.991871][ T9581] RSP: 002b:00000000f53bb50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 160.991883][ T9581] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800001c0 [ 160.991890][ T9581] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.991897][ T9581] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.991904][ T9581] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 160.991910][ T9581] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.991924][ T9581] [ 161.194797][ T9583] lo speed is unknown, defaulting to 1000 [ 161.351109][ T5745] Bluetooth: hci4: command 0x040f tx timeout [ 161.351151][ T5745] Bluetooth: hci2: command 0x041b tx timeout [ 161.632727][ T9600] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 161.719348][ T9607] profile_transition: unconfined exec no attachment [ 161.761415][ T9608] profile_transition: unconfined exec no attachment [ 161.771942][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1064'. [ 161.771963][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1064'. [ 161.771976][ T9612] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 161.771992][ T9612] iwpm_mapping_info_cb: Unable to parse nlmsg [ 161.834425][ T9614] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 161.884828][ T9606] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.885072][ T9606] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 162.015673][ T9626] md/raid1:md0: active with 1 out of 2 mirrors [ 162.284396][ T7353] Process accounting resumed [ 162.350284][ T5745] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 162.536480][ T43] audit: type=1326 audit(1790564017.971:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9642 comm="syz.0.1077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 162.536529][ T43] audit: type=1326 audit(1790564017.971:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9642 comm="syz.0.1077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 162.539225][ T43] audit: type=1326 audit(1790564017.981:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9642 comm="syz.0.1077" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 162.539262][ T43] audit: type=1326 audit(1790564017.981:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9642 comm="syz.0.1077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 162.539291][ T43] audit: type=1326 audit(1790564017.981:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9642 comm="syz.0.1077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 162.557668][ T43] audit: type=1326 audit(1790564018.001:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9642 comm="syz.0.1077" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 162.557770][ T43] audit: type=1326 audit(1790564018.001:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9642 comm="syz.0.1077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 162.558035][ T43] audit: type=1326 audit(1790564018.001:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9642 comm="syz.0.1077" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 162.559084][ T43] audit: type=1326 audit(1790564018.001:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9642 comm="syz.0.1077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 162.818676][ T9643] cgroup: Invalid name [ 162.840995][ T9651] FAULT_INJECTION: forcing a failure. [ 162.840995][ T9651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.841018][ T9651] CPU: 3 UID: 0 PID: 9651 Comm: syz.1.1079 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.841034][ T9651] Tainted: [L]=SOFTLOCKUP [ 162.841038][ T9651] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.841045][ T9651] Call Trace: [ 162.841050][ T9651] [ 162.841055][ T9651] dump_stack_lvl+0x100/0x190 [ 162.841074][ T9651] should_fail_ex.cold+0x5/0xa [ 162.841089][ T9651] strncpy_from_user+0x3b/0x2d0 [ 162.841108][ T9651] do_getname+0x78/0x390 [ 162.841121][ T9651] __ia32_sys_symlinkat+0x8a/0xe0 [ 162.841139][ T9651] __do_fast_syscall_32+0x13a/0x8b0 [ 162.841154][ T9651] ? lockdep_hardirqs_on+0x7d/0x110 [ 162.841168][ T9651] do_fast_syscall_32+0x32/0x70 [ 162.841183][ T9651] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.841197][ T9651] RIP: 0023:0xf7fe5fec [ 162.841210][ T9651] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 162.841216][ T9651] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 162.841228][ T9651] RAX: ffffffffffffffda RBX: 0000000080000480 RCX: 00000000ffffff9c [ 162.841235][ T9651] RDX: 00000000800004c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.841242][ T9651] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.841248][ T9651] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 162.841255][ T9651] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.841269][ T9651] [ 163.112332][ T9655] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 163.156791][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1080'. [ 163.156807][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1080'. [ 163.156815][ T9653] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 163.156825][ T9653] iwpm_mapping_info_cb: Unable to parse nlmsg [ 163.293082][ T9662] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 163.295768][ T9662] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 163.763840][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1090'. [ 163.763863][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1090'. [ 163.763874][ T9696] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 163.763892][ T9696] iwpm_mapping_info_cb: Unable to parse nlmsg [ 163.827181][ T3374] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 163.977055][ T5877] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 163.989070][ T3374] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 163.990234][ T3374] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 163.990257][ T3374] usb 6-1: config 0 has no interface number 0 [ 163.990291][ T3374] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 163.990318][ T3374] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 163.990353][ T3374] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.993579][ T3374] usb 6-1: config 0 descriptor?? [ 163.998594][ T9669] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 164.018242][ T3374] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 164.055669][ T9709] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1092'. [ 164.147430][ T5877] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 164.150246][ T5877] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 164.150261][ T5877] usb 9-1: config 0 has no interface number 0 [ 164.150279][ T5877] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 164.150293][ T5877] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 164.150316][ T5877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.151561][ T5877] usb 9-1: config 0 descriptor?? [ 164.152757][ T9694] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 164.160655][ T5877] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 164.359681][ T9694] FAULT_INJECTION: forcing a failure. [ 164.359681][ T9694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.359705][ T9694] CPU: 0 UID: 0 PID: 9694 Comm: syz.4.1089 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.359720][ T9694] Tainted: [L]=SOFTLOCKUP [ 164.359724][ T9694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.359731][ T9694] Call Trace: [ 164.359736][ T9694] [ 164.359741][ T9694] dump_stack_lvl+0x100/0x190 [ 164.359759][ T9694] should_fail_ex.cold+0x5/0xa [ 164.359774][ T9694] _copy_from_user+0x2e/0xd0 [ 164.359792][ T9694] get_compat_msghdr+0xb3/0x480 [ 164.359806][ T9694] ? __pfx_get_compat_msghdr+0x10/0x10 [ 164.359821][ T9694] ? rcu_is_watching+0x13/0xc0 [ 164.359834][ T9694] ? ___sys_recvmsg+0x177/0x1a0 [ 164.359848][ T9694] ? kfree+0x1e5/0x6d0 [ 164.359858][ T9694] ? __might_fault+0xc5/0x140 [ 164.359871][ T9694] ___sys_recvmsg+0x193/0x1a0 [ 164.359886][ T9694] ? __pfx____sys_recvmsg+0x10/0x10 [ 164.359908][ T9694] ? __pfx___might_resched+0x10/0x10 [ 164.359926][ T9694] do_recvmmsg+0x54d/0x740 [ 164.359943][ T9694] ? __pfx_do_recvmmsg+0x10/0x10 [ 164.359958][ T9694] ? vfs_write+0x15d/0x1050 [ 164.359973][ T9694] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 164.359991][ T9694] ? __pfx_do_sys_openat2+0x10/0x10 [ 164.360012][ T9694] __sys_recvmmsg+0x21f/0x270 [ 164.360024][ T9694] ? __pfx___sys_recvmmsg+0x10/0x10 [ 164.360037][ T9694] ? ksys_write+0x1ac/0x250 [ 164.360052][ T9694] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 164.360067][ T9694] ? __do_fast_syscall_32+0xb3/0x8b0 [ 164.360082][ T9694] ? lockdep_hardirqs_on+0x7d/0x110 [ 164.360097][ T9694] __do_fast_syscall_32+0x13a/0x8b0 [ 164.360116][ T9694] ? lockdep_hardirqs_on+0x7d/0x110 [ 164.360136][ T9694] do_fast_syscall_32+0x32/0x70 [ 164.360156][ T9694] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 164.360180][ T9694] RIP: 0023:0xf6feefec [ 164.360200][ T9694] Code: Unable to access opcode bytes at 0xf6feefc2. [ 164.360210][ T9694] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 164.360242][ T9694] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080003700 [ 164.360250][ T9694] RDX: 0000000000000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.360257][ T9694] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 164.360263][ T9694] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 164.360270][ T9694] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 164.360284][ T9694] [ 164.785282][ T9729] profile_transition: 10 callbacks suppressed [ 164.785302][ T9729] profile_transition: unconfined exec no attachment [ 164.791414][ T3374] usb 6-1: USB disconnect, device number 15 [ 164.814837][ T9732] profile_transition: unconfined exec no attachment [ 164.846757][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'. [ 164.846782][ T9735] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 164.846799][ T9735] iwpm_mapping_info_cb: Unable to parse nlmsg [ 164.893462][ T5836] usb 9-1: USB disconnect, device number 12 [ 164.950431][ T9740] capability: warning: `syz.4.1103' uses 32-bit capabilities (legacy support in use) [ 164.951650][ T9740] profile_transition: name lookup ix on error [ 164.960083][ T9745] profile_transition: unconfined exec no attachment [ 164.983598][ T9746] profile_transition: unconfined exec no attachment [ 165.005208][ T9747] profile_transition: unconfined exec no attachment [ 165.022413][ T9748] profile_transition: unconfined exec no attachment [ 165.044641][ T9749] profile_transition: unconfined exec no attachment [ 165.069234][ T9750] profile_transition: unconfined exec no attachment [ 165.228305][ T43] kauditd_printk_skb: 67 callbacks suppressed [ 165.228326][ T43] audit: type=1800 audit(1790564020.661:122): pid=9757 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.4.1107" name="file0" dev="overlay" ino=786 res=0 errno=0 [ 165.257211][ T3374] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 165.347116][ T5745] Bluetooth: hci4: command 0x040f tx timeout [ 165.347142][ T64] Bluetooth: hci2: command 0x041b tx timeout [ 165.404074][ T9759] binder: Bad value for 'stats' [ 165.424604][ T3374] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 165.427318][ T3374] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 165.427334][ T3374] usb 6-1: config 0 has no interface number 0 [ 165.427358][ T3374] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 165.427379][ T3374] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 165.427409][ T3374] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.428637][ T3374] usb 6-1: config 0 descriptor?? [ 165.429261][ T9741] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 165.432600][ T3374] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 165.711629][ T9765] profile_transition: unconfined exec no attachment [ 165.739061][ T9766] profile_transition: unconfined exec no attachment [ 165.762809][ T9767] __nla_validate_parse: 2 callbacks suppressed [ 165.762823][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1110'. [ 165.762831][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1110'. [ 165.762838][ T9767] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 165.762849][ T9767] iwpm_mapping_info_cb: Unable to parse nlmsg [ 166.318490][ T35] usb 6-1: USB disconnect, device number 16 [ 166.485296][ T9779] random: crng reseeded on system resumption [ 166.489534][ T9779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1112'. [ 166.493305][ T9779] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it! [ 166.951415][ T9788] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 167.193998][ T9792] FAULT_INJECTION: forcing a failure. [ 167.193998][ T9792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.194022][ T9792] CPU: 2 UID: 0 PID: 9792 Comm: syz.1.1121 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.194038][ T9792] Tainted: [L]=SOFTLOCKUP [ 167.194042][ T9792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.194049][ T9792] Call Trace: [ 167.194053][ T9792] [ 167.194058][ T9792] dump_stack_lvl+0x100/0x190 [ 167.194078][ T9792] should_fail_ex.cold+0x5/0xa [ 167.194093][ T9792] _copy_from_iter+0x1f4/0x1690 [ 167.194112][ T9792] ? __asan_memset+0x23/0x50 [ 167.194126][ T9792] ? __pfx__copy_from_iter+0x10/0x10 [ 167.194142][ T9792] ? __pfx___alloc_skb+0x10/0x10 [ 167.194165][ T9792] netlink_sendmsg+0x808/0xda0 [ 167.194184][ T9792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.194202][ T9792] ? apparmor_socket_sendmsg+0x165/0x280 [ 167.194221][ T9792] ____sys_sendmsg+0xa4d/0xbe0 [ 167.194235][ T9792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.194252][ T9792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.194272][ T9792] ___sys_sendmsg+0x190/0x1e0 [ 167.194287][ T9792] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.194308][ T9792] ? find_held_lock+0x2b/0x80 [ 167.194330][ T9792] __sys_sendmsg+0x160/0x210 [ 167.194341][ T9792] ? __pfx___sys_sendmsg+0x10/0x10 [ 167.194356][ T9792] ? __pfx_ksys_write+0x10/0x10 [ 167.194372][ T9792] __do_fast_syscall_32+0x13a/0x8b0 [ 167.194392][ T9792] ? lockdep_hardirqs_on+0x7d/0x110 [ 167.194427][ T9792] do_fast_syscall_32+0x32/0x70 [ 167.194447][ T9792] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 167.194467][ T9792] RIP: 0023:0xf7fe5fec [ 167.194486][ T9792] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 167.194495][ T9792] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 167.194513][ T9792] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 167.194524][ T9792] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 167.194532][ T9792] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 167.194539][ T9792] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 167.194546][ T9792] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 167.194560][ T9792] [ 167.237386][ T9794] jffs2: notice: (9794) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 167.342133][ T9790] syzkaller0: entered promiscuous mode [ 167.342148][ T9790] syzkaller0: entered allmulticast mode [ 167.348955][ T9790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.427141][ T64] Bluetooth: hci2: command 0x041b tx timeout [ 167.437020][ T64] Bluetooth: hci4: command 0x040f tx timeout [ 167.503845][ T9794] fuse: Bad value for 'fd' [ 167.504342][ T9794] ./file0: Can't lookup blockdev [ 167.568595][ T9806] raw_sendmsg: syz.1.1126 forgot to set AF_INET. Fix it! [ 167.586601][ T9811] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1128'. [ 167.970706][ T9834] gadgetfs: bound to dummy_udc driver [ 168.130474][ T9847] FAULT_INJECTION: forcing a failure. [ 168.130474][ T9847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.130507][ T9847] CPU: 3 UID: 0 PID: 9847 Comm: syz.5.1136 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.130533][ T9847] Tainted: [L]=SOFTLOCKUP [ 168.130539][ T9847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.130550][ T9847] Call Trace: [ 168.130557][ T9847] [ 168.130564][ T9847] dump_stack_lvl+0x100/0x190 [ 168.130593][ T9847] should_fail_ex.cold+0x5/0xa [ 168.130616][ T9847] _copy_from_iter+0x1f4/0x1690 [ 168.130643][ T9847] ? __asan_memset+0x23/0x50 [ 168.130666][ T9847] ? __pfx__copy_from_iter+0x10/0x10 [ 168.130690][ T9847] ? __pfx___alloc_skb+0x10/0x10 [ 168.130728][ T9847] netlink_sendmsg+0x808/0xda0 [ 168.130758][ T9847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.130786][ T9847] ? apparmor_socket_sendmsg+0x165/0x280 [ 168.130817][ T9847] ____sys_sendmsg+0xa4d/0xbe0 [ 168.130838][ T9847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.130866][ T9847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.130894][ T9847] ? _kstrtoull+0x144/0x200 [ 168.130914][ T9847] ? __pfx__kstrtoull+0x10/0x10 [ 168.130937][ T9847] ___sys_sendmsg+0x190/0x1e0 [ 168.130962][ T9847] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.130986][ T9847] ? __lock_acquire+0x5c0/0x1f40 [ 168.131022][ T9847] ? __fget_files+0x34/0x3d0 [ 168.131070][ T9847] __sys_sendmmsg+0x309/0x440 [ 168.131094][ T9847] ? __pfx___sys_sendmmsg+0x10/0x10 [ 168.131113][ T9847] ? find_held_lock+0x2b/0x80 [ 168.131141][ T9847] ? __mutex_unlock_slowpath+0x35d/0x930 [ 168.131174][ T9847] ? fput+0x7c/0x100 [ 168.131199][ T9847] ? ksys_write+0x1ac/0x250 [ 168.131224][ T9847] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 168.131247][ T9847] ? lockdep_hardirqs_on+0x7d/0x110 [ 168.131268][ T9847] __do_fast_syscall_32+0x13a/0x8b0 [ 168.131290][ T9847] ? lockdep_hardirqs_on+0x7d/0x110 [ 168.131312][ T9847] do_fast_syscall_32+0x32/0x70 [ 168.131335][ T9847] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 168.131359][ T9847] RIP: 0023:0xf700efec [ 168.131379][ T9847] Code: Unable to access opcode bytes at 0xf700efc2. [ 168.131388][ T9847] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 168.131408][ T9847] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 168.131421][ T9847] RDX: 000000000000009f RSI: 0000000000000000 RDI: 0000000000000000 [ 168.131433][ T9847] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 168.131444][ T9847] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 168.131455][ T9847] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 168.131479][ T9847] [ 168.195736][ T9851] jffs2: notice: (9851) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 168.271188][ T9854] 9p: Could not find request transport: d [ 168.335585][ T9860] FAULT_INJECTION: forcing a failure. [ 168.335585][ T9860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.335608][ T9860] CPU: 3 UID: 0 PID: 9860 Comm: syz.5.1141 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.335624][ T9860] Tainted: [L]=SOFTLOCKUP [ 168.335629][ T9860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.335636][ T9860] Call Trace: [ 168.335641][ T9860] [ 168.335646][ T9860] dump_stack_lvl+0x100/0x190 [ 168.335665][ T9860] should_fail_ex.cold+0x5/0xa [ 168.335682][ T9860] _copy_from_user+0x2e/0xd0 [ 168.335700][ T9860] binder_thread_write+0x97b/0x4db0 [ 168.335715][ T9860] ? kasan_save_free_info+0x3b/0x70 [ 168.335745][ T9860] ? __lock_acquire+0x5c0/0x1f40 [ 168.335764][ T9860] ? __pfx_binder_thread_write+0x10/0x10 [ 168.335778][ T9860] ? binder_debug+0xe0/0x190 [ 168.335795][ T9860] ? __pfx_binder_debug+0x10/0x10 [ 168.335816][ T9860] ? __might_fault+0xc5/0x140 [ 168.335833][ T9860] ? __pfx_binder_ioctl+0x10/0x10 [ 168.335845][ T9860] binder_ioctl+0x28ca/0x74a0 [ 168.335858][ T9860] ? tomoyo_path_number_perm+0x28f/0x580 [ 168.335871][ T9860] ? tomoyo_path_number_perm+0x28f/0x580 [ 168.335886][ T9860] ? tomoyo_path_number_perm+0x188/0x580 [ 168.335899][ T9860] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 168.335912][ T9860] ? __pfx_binder_ioctl+0x10/0x10 [ 168.335926][ T9860] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 168.335947][ T9860] ? do_vfs_ioctl+0x226/0x13e0 [ 168.335961][ T9860] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 168.335978][ T9860] ? find_held_lock+0x2b/0x80 [ 168.335993][ T9860] ? __fget_files+0x215/0x3d0 [ 168.336008][ T9860] ? hook_file_ioctl_common+0x140/0x440 [ 168.336024][ T9860] ? __fget_files+0x21f/0x3d0 [ 168.336040][ T9860] ? __pfx_binder_ioctl+0x10/0x10 [ 168.336051][ T9860] compat_ptr_ioctl+0x6e/0xa0 [ 168.336064][ T9860] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 168.336076][ T9860] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 168.336091][ T9860] __do_fast_syscall_32+0x13a/0x8b0 [ 168.336106][ T9860] ? lockdep_hardirqs_on+0x7d/0x110 [ 168.336121][ T9860] do_fast_syscall_32+0x32/0x70 [ 168.336137][ T9860] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 168.336152][ T9860] RIP: 0023:0xf700efec [ 168.336167][ T9860] Code: Unable to access opcode bytes at 0xf700efc2. [ 168.336172][ T9860] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 168.336185][ T9860] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0306201 [ 168.336192][ T9860] RDX: 0000000080001800 RSI: 0000000000000000 RDI: 0000000000000000 [ 168.336199][ T9860] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 168.336206][ T9860] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 168.336214][ T9860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 168.336228][ T9860] [ 168.336260][ T9860] binder: 9859:9860 ioctl c0306201 80001800 returned -14 [ 168.443836][ T9861] profile_transition: name lookup ix on error [ 168.510643][ T9851] ./file0: Can't lookup blockdev [ 168.647613][ T9874] jffs2: notice: (9874) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 168.684340][ T9872] syz_tun: entered allmulticast mode [ 168.695559][ T9872] syz_tun: left allmulticast mode [ 168.703630][ T9877] jffs2: notice: (9877) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 168.705293][ T9877] FAULT_INJECTION: forcing a failure. [ 168.705293][ T9877] name failslab, interval 1, probability 0, space 0, times 0 [ 168.705321][ T9877] CPU: 3 UID: 0 PID: 9877 Comm: syz.1.1146 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.705347][ T9877] Tainted: [L]=SOFTLOCKUP [ 168.705354][ T9877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.705365][ T9877] Call Trace: [ 168.705372][ T9877] [ 168.705381][ T9877] dump_stack_lvl+0x100/0x190 [ 168.705409][ T9877] should_fail_ex.cold+0x5/0xa [ 168.705436][ T9877] should_failslab+0xc2/0x120 [ 168.705464][ T9877] kmem_cache_alloc_noprof+0x92/0x6a0 [ 168.705490][ T9877] ? security_file_alloc+0x34/0x2c0 [ 168.705516][ T9877] security_file_alloc+0x34/0x2c0 [ 168.705544][ T9877] init_file+0x95/0x480 [ 168.705572][ T9877] alloc_empty_file+0x79/0x1c0 [ 168.705601][ T9877] path_openat+0xdb/0x2440 [ 168.705630][ T9877] ? __pfx_path_openat+0x10/0x10 [ 168.705662][ T9877] do_file_open+0x20e/0x430 [ 168.705689][ T9877] ? __pfx_do_file_open+0x10/0x10 [ 168.705731][ T9877] ? _raw_spin_unlock+0x28/0x50 [ 168.705750][ T9877] ? alloc_fd+0x471/0x7a0 [ 168.705783][ T9877] do_sys_openat2+0x10f/0x1e0 [ 168.705812][ T9877] ? __pfx_do_sys_openat2+0x10/0x10 [ 168.705844][ T9877] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 168.705873][ T9877] __ia32_compat_sys_openat+0x12d/0x210 [ 168.705893][ T9877] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 168.705910][ T9877] ? fput+0x7c/0x100 [ 168.705933][ T9877] ? ksys_write+0x1ac/0x250 [ 168.705955][ T9877] ? __pfx_ksys_write+0x10/0x10 [ 168.705982][ T9877] __do_fast_syscall_32+0x13a/0x8b0 [ 168.706023][ T9877] ? lockdep_hardirqs_on+0x7d/0x110 [ 168.706047][ T9877] do_fast_syscall_32+0x32/0x70 [ 168.706071][ T9877] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 168.706094][ T9877] RIP: 0023:0xf7fe5fec [ 168.706115][ T9877] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 168.706124][ T9877] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 168.706142][ T9877] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000840 [ 168.706154][ T9877] RDX: 000000000000275a RSI: 0000000000000000 RDI: 0000000000000000 [ 168.706165][ T9877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 168.706174][ T9877] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 168.706185][ T9877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 168.706209][ T9877] [ 169.078062][ T9895] FAULT_INJECTION: forcing a failure. [ 169.078062][ T9895] name failslab, interval 1, probability 0, space 0, times 0 [ 169.078087][ T9895] CPU: 1 UID: 0 PID: 9895 Comm: syz.5.1154 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.078114][ T9895] Tainted: [L]=SOFTLOCKUP [ 169.078119][ T9895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.078127][ T9895] Call Trace: [ 169.078133][ T9895] [ 169.078139][ T9895] dump_stack_lvl+0x100/0x190 [ 169.078160][ T9895] should_fail_ex.cold+0x5/0xa [ 169.078177][ T9895] should_failslab+0xc2/0x120 [ 169.078197][ T9895] __kmalloc_cache_noprof+0x91/0x6d0 [ 169.078211][ T9895] ? io_wq_create+0x6a/0x9a0 [ 169.078231][ T9895] io_wq_create+0x6a/0x9a0 [ 169.078251][ T9895] io_uring_alloc_task_context+0x2d9/0x656 [ 169.078264][ T9895] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 169.078279][ T9895] ? alloc_file_pseudo+0x1ee/0x290 [ 169.078299][ T9895] __io_uring_add_tctx_node.cold+0x15/0x20a [ 169.078311][ T9895] ? security_inode_init_security_anon+0x7b/0x230 [ 169.078332][ T9895] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 169.078350][ T9895] ? __anon_inode_getfile+0x17c/0x280 [ 169.078365][ T9895] io_uring_setup.cold+0x1998/0x1c5e [ 169.078386][ T9895] ? __pfx_io_uring_setup+0x10/0x10 [ 169.078407][ T9895] ? __pfx_do_futex+0x10/0x10 [ 169.078427][ T9895] ? xfd_validate_state+0x129/0x190 [ 169.078451][ T9895] __ia32_sys_io_uring_setup+0xc2/0x170 [ 169.078471][ T9895] __do_fast_syscall_32+0x13a/0x8b0 [ 169.078488][ T9895] ? lockdep_hardirqs_on+0x7d/0x110 [ 169.078503][ T9895] do_fast_syscall_32+0x32/0x70 [ 169.078519][ T9895] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.078535][ T9895] RIP: 0023:0xf700efec [ 169.078549][ T9895] Code: Unable to access opcode bytes at 0xf700efc2. [ 169.078556][ T9895] RSP: 002b:00000000f53fd4bc EFLAGS: 00000282 ORIG_RAX: 00000000000001a9 [ 169.078569][ T9895] RAX: ffffffffffffffda RBX: 0000000000000b87 RCX: 0000000080000900 [ 169.078578][ T9895] RDX: 00000000f7170fd7 RSI: 0000000000000001 RDI: 00000000f53fd53c [ 169.078574][ T9896] FAULT_INJECTION: forcing a failure. [ 169.078574][ T9896] name failslab, interval 1, probability 0, space 0, times 0 [ 169.078585][ T9895] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.078593][ T9895] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 169.078600][ T9895] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.078615][ T9895] [ 169.078627][ T9896] CPU: 0 UID: 0 PID: 9896 Comm: syz.1.1153 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.078656][ T9896] Tainted: [L]=SOFTLOCKUP [ 169.078665][ T9896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.078677][ T9896] Call Trace: [ 169.078685][ T9896] [ 169.078691][ T9896] dump_stack_lvl+0x100/0x190 [ 169.078720][ T9896] should_fail_ex.cold+0x5/0xa [ 169.078746][ T9896] should_failslab+0xc2/0x120 [ 169.078799][ T9896] __kmalloc_cache_noprof+0x91/0x6d0 [ 169.078819][ T9896] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 169.078841][ T9896] ? io_uring_alloc_task_context+0x1a3/0x656 [ 169.078866][ T9896] io_uring_alloc_task_context+0x1a3/0x656 [ 169.078891][ T9896] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 169.078916][ T9896] ? alloc_file_pseudo+0x1ee/0x290 [ 169.078951][ T9896] __io_uring_add_tctx_node.cold+0x15/0x20a [ 169.078972][ T9896] ? security_inode_init_security_anon+0x7b/0x230 [ 169.079005][ T9896] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 169.079034][ T9896] ? __anon_inode_getfile+0x17c/0x280 [ 169.079053][ T9896] io_uring_setup.cold+0x1998/0x1c5e [ 169.079087][ T9896] ? __pfx_io_uring_setup+0x10/0x10 [ 169.079122][ T9896] ? __pfx_do_futex+0x10/0x10 [ 169.079149][ T9896] ? xfd_validate_state+0x129/0x190 [ 169.079188][ T9896] __ia32_sys_io_uring_setup+0xc2/0x170 [ 169.079233][ T9896] __do_fast_syscall_32+0x13a/0x8b0 [ 169.079258][ T9896] do_fast_syscall_32+0x32/0x70 [ 169.079285][ T9896] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.079309][ T9896] RIP: 0023:0xf7fe5fec [ 169.079330][ T9896] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 169.079339][ T9896] RSP: 002b:00000000f54a64bc EFLAGS: 00000282 ORIG_RAX: 00000000000001a9 [ 169.079354][ T9896] RAX: ffffffffffffffda RBX: 0000000000000b87 RCX: 0000000080000900 [ 169.079366][ T9896] RDX: 00000000f7210fd7 RSI: 0000000000000001 RDI: 00000000f54a653c [ 169.079379][ T9896] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.079391][ T9896] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 169.079403][ T9896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.079429][ T9896] [ 169.290232][ T9905] jffs2: notice: (9905) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 169.290456][ T9900] bridge1: entered allmulticast mode [ 169.420236][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1159'. [ 169.420258][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1159'. [ 169.420267][ T9922] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 169.420281][ T9922] iwpm_mapping_info_cb: Unable to parse nlmsg [ 169.507267][ T5745] Bluetooth: hci4: command 0x040f tx timeout [ 169.507312][ T5745] Bluetooth: hci2: command 0x041b tx timeout [ 169.539234][ T9929] netlink: 'syz.5.1160': attribute type 1 has an invalid length. [ 169.541295][ T9922] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 169.541424][ T9922] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 169.557677][ T9929] bond1: entered promiscuous mode [ 169.557934][ T9929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.570663][ T9928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1161'. [ 169.578186][ T9928] netlink: 'syz.4.1161': attribute type 1 has an invalid length. [ 169.578207][ T9928] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1161'. [ 169.605118][ T9929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.605321][ T9929] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 169.605334][ T9929] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 169.614103][ T9929] bond1: (slave ip6gre1): making interface the new active one [ 169.614129][ T9929] ip6gre1: entered promiscuous mode [ 169.622854][ T9929] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 169.672442][ T9939] jffs2: notice: (9939) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 169.715227][ T9942] FAULT_INJECTION: forcing a failure. [ 169.715227][ T9942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.715258][ T9942] CPU: 1 UID: 0 PID: 9942 Comm: syz.5.1164 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.715284][ T9942] Tainted: [L]=SOFTLOCKUP [ 169.715291][ T9942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.715303][ T9942] Call Trace: [ 169.715309][ T9942] [ 169.715317][ T9942] dump_stack_lvl+0x100/0x190 [ 169.715347][ T9942] should_fail_ex.cold+0x5/0xa [ 169.715372][ T9942] _copy_to_user+0x32/0xd0 [ 169.715400][ T9942] simple_read_from_buffer+0xcb/0x170 [ 169.715433][ T9942] proc_fail_nth_read+0x1af/0x230 [ 169.715457][ T9942] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.715480][ T9942] ? rw_verify_area+0xce/0x6d0 [ 169.715500][ T9942] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.715521][ T9942] vfs_read+0x1e4/0xb40 [ 169.715543][ T9942] ? lock_acquire+0x1d1/0x380 [ 169.715569][ T9942] ? __fget_files+0x34/0x3d0 [ 169.715592][ T9942] ? __pfx_vfs_read+0x10/0x10 [ 169.715612][ T9942] ? find_held_lock+0x2b/0x80 [ 169.715633][ T9942] ? __fget_files+0x215/0x3d0 [ 169.715661][ T9942] ? __fget_files+0x21f/0x3d0 [ 169.715691][ T9942] ksys_read+0x12a/0x250 [ 169.715712][ T9942] ? __pfx_ksys_read+0x10/0x10 [ 169.715745][ T9942] do_int80_emulation+0x166/0x650 [ 169.715789][ T9942] asm_int80_emulation+0x1a/0x20 [ 169.715808][ T9942] RIP: 0023:0xf71475ab [ 169.715824][ T9942] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 169.715842][ T9942] RSP: 002b:00000000f53fd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 169.715862][ T9942] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53fd5d0 [ 169.715875][ T9942] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 169.715886][ T9942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.715897][ T9942] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 169.715909][ T9942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.715933][ T9942] [ 169.793211][ T9946] jffs2: notice: (9946) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 169.796193][ T9944] netlink: 432 bytes leftover after parsing attributes in process `syz.1.1165'. [ 169.796215][ T9944] openvswitch: netlink: Flow key attr not present in new flow. [ 169.939422][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1170'. [ 169.939443][ T9956] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 169.939459][ T9956] iwpm_mapping_info_cb: Unable to parse nlmsg [ 169.942218][ T9958] profile_transition: 21 callbacks suppressed [ 169.942230][ T9958] profile_transition: unconfined exec no attachment [ 169.955507][ T9957] lo speed is unknown, defaulting to 1000 [ 169.958017][ T9957] lo speed is unknown, defaulting to 1000 [ 169.958385][ T9957] lo speed is unknown, defaulting to 1000 [ 169.960282][ T9959] profile_transition: unconfined exec no attachment [ 169.990418][ T9960] profile_transition: unconfined exec no attachment [ 170.010724][ T9962] profile_transition: unconfined exec no attachment [ 170.034064][ T9951] md: md0: raid5 would not accept array [ 170.048926][ T5836] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 170.053497][ T9966] profile_transition: unconfined exec no attachment [ 170.077095][ T9968] profile_transition: unconfined exec no attachment [ 170.106111][ T9971] profile_transition: unconfined exec no attachment [ 170.123256][ T9957] infiniband rxe0: set active [ 170.126381][ T9957] infiniband rxe0: added lo [ 170.135310][ T9973] profile_transition: unconfined exec no attachment [ 170.141425][ T3374] lo speed is unknown, defaulting to 1000 [ 170.160369][ T9957] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 170.160404][ T9957] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 170.160439][ T9957] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 170.188643][ T5836] usb 10-1: device descriptor read/64, error -71 [ 170.215774][ T9957] RDS/IB: rxe0: added [ 170.216281][ T9957] smc: adding ib device rxe0 with port count 1 [ 170.216441][ T9957] smc: ib device rxe0 port 1 has no pnetid [ 170.219048][ T5879] lo speed is unknown, defaulting to 1000 [ 170.231669][ T9957] lo speed is unknown, defaulting to 1000 [ 170.428543][ T5836] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 170.470589][ T9996] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 170.470605][ T9996] iwpm_mapping_info_cb: Unable to parse nlmsg [ 170.492774][ T9957] lo speed is unknown, defaulting to 1000 [ 170.567399][ T5836] usb 10-1: device descriptor read/64, error -71 [ 170.575116][ T9957] lo speed is unknown, defaulting to 1000 [ 170.587217][ T9997] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 170.587408][ T9997] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 170.678052][ T5836] usb usb10-port1: attempt power cycle [ 170.704969][ T9957] lo speed is unknown, defaulting to 1000 [ 170.811443][ T9957] lo speed is unknown, defaulting to 1000 [ 170.891417][T10018] __nla_validate_parse: 6 callbacks suppressed [ 170.891431][T10018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1188'. [ 171.015702][T10023] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 171.037038][ T5836] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 171.057917][ T5836] usb 10-1: device descriptor read/8, error -71 [ 171.108248][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1191'. [ 171.108263][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1191'. [ 171.108270][T10026] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 171.108280][T10026] iwpm_mapping_info_cb: Unable to parse nlmsg [ 171.267947][T10028] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 171.268223][T10028] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 171.307048][ T5836] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 171.329620][ T5836] usb 10-1: device descriptor read/8, error -71 [ 171.418358][T10034] profile_transition: unconfined exec no attachment [ 171.441004][ T5836] usb usb10-port1: unable to enumerate USB device [ 171.454518][T10036] profile_transition: unconfined exec no attachment [ 171.481767][T10033] md/raid:md0: device ram0 operational as raid disk 0 [ 171.507268][T10033] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 2 [ 171.515371][T10033] md/raid:md0: PPL space too small on ram0 [ 172.008018][T10033] ============================================================================= [ 172.008037][T10033] BUG raid5-md0 (Tainted: G L ): Objects remaining on __kmem_cache_shutdown() [ 172.008051][T10033] ----------------------------------------------------------------------------- [ 172.008051][T10033] [ 172.010065][T10033] Object 0xffff888067450000 @offset=0 [ 172.010085][T10033] Object 0xffff8880674504d8 @offset=1240 [ 172.010096][T10033] Object 0xffff8880674509b0 @offset=2480 [ 172.010107][T10033] Object 0xffff888067450e88 @offset=3720 [ 172.010118][T10033] Object 0xffff888067451360 @offset=4960 [ 172.010129][T10033] Object 0xffff888067451838 @offset=6200 [ 172.010139][T10033] Object 0xffff888067451d10 @offset=7440 [ 172.010150][T10033] Object 0xffff8880674521e8 @offset=8680 [ 172.010158][T10033] Object 0xffff8880674526c0 @offset=9920 [ 172.010169][T10033] Object 0xffff888067452b98 @offset=11160 [ 172.010180][T10033] Object 0xffff888067453070 @offset=12400 [ 172.010189][T10033] Object 0xffff888067453548 @offset=13640 [ 172.010200][T10033] Slab 0xffffea00019d1400 objects=26 used=12 fp=0xffff888067453a20 flags=0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 172.010226][T10033] Disabling lock debugging due to kernel taint [ 172.010435][T10033] ------------[ cut here ]------------ [ 172.010443][T10033] 1 [ 172.010449][T10033] WARNING: mm/slub.c:1268 at __slab_err+0x15/0x20, CPU#1: syz.4.1192/10033 [ 172.065333][T10033] Modules linked in: [ 172.066438][T10033] CPU: 1 UID: 0 PID: 10033 Comm: syz.4.1192 Tainted: G B L syzkaller #0 PREEMPT(full) [ 172.069473][T10033] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 172.071096][T10033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.074127][T10033] RIP: 0010:__slab_err+0x15/0x20 [ 172.074810][T10053] netlink: 'syz.0.1196': attribute type 12 has an invalid length. [ 172.074828][T10053] netlink: 'syz.0.1196': attribute type 3 has an invalid length. [ 172.080297][T10033] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 7c b3 a3 00 90 <0f> 0b 90 e9 03 5a af 0a 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 172.085936][T10033] RSP: 0000:ffffc900039f7920 EFLAGS: 00010087 [ 172.087734][T10033] RAX: 0000000000032a0c RBX: ffffc900039f7970 RCX: ffffc90006c91000 [ 172.090260][T10033] RDX: 0000000000080000 RSI: ffffffff81c8013d RDI: ffff888027308000 [ 172.092593][T10033] RBP: ffff88804c868858 R08: 0000000000000007 R09: 0000000000000000 [ 172.094924][T10033] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000007918 [ 172.097310][T10033] R13: ffff888067457df0 R14: ffff88804c868840 R15: ffffea00019d1400 [ 172.099685][T10033] FS: 0000000000000000(0000) GS:ffff888096a55000(0063) knlGS:00000000f53ddb40 [ 172.102276][T10033] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 172.104264][T10033] CR2: 00007f047b9aca90 CR3: 00000000678c9000 CR4: 0000000000352ef0 [ 172.106643][T10033] Call Trace: [ 172.107670][T10033] [ 172.108583][T10033] __kmem_cache_shutdown.cold+0x16e/0x177 [ 172.110277][T10033] kmem_cache_destroy+0x7d/0x1a0 [ 172.111778][T10033] free_conf+0x1cb/0x710 [ 172.113075][T10033] raid5_run.cold+0x593/0xd51 [ 172.114481][T10033] level_store+0x103f/0x1f60 [ 172.115853][T10033] ? __pfx_level_store+0x10/0x10 [ 172.117525][T10033] ? lock_acquire+0x1d1/0x380 [ 172.118991][T10033] ? do_raw_spin_lock+0x128/0x260 [ 172.120530][T10033] ? find_held_lock+0x2b/0x80 [ 172.121986][T10033] ? md_attr_store+0x195/0x330 [ 172.123460][T10033] ? md_attr_store+0x195/0x330 [ 172.124922][T10033] md_attr_store+0x1c5/0x330 [ 172.126354][T10033] ? __pfx_md_attr_store+0x10/0x10 [ 172.127932][T10033] sysfs_kf_write+0xf2/0x150 [ 172.129362][T10033] kernfs_fop_write_iter+0x3e0/0x5f0 [ 172.130994][T10033] ? __pfx_sysfs_kf_write+0x10/0x10 [ 172.132592][T10033] vfs_write+0x6af/0x1050 [ 172.133927][T10033] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 172.135697][T10033] ? __pfx_vfs_write+0x10/0x10 [ 172.137213][T10033] ? find_held_lock+0x2b/0x80 [ 172.138674][T10033] ksys_write+0x12a/0x250 [ 172.140006][T10033] ? __pfx_ksys_write+0x10/0x10 [ 172.141491][T10033] __do_fast_syscall_32+0x13a/0x8b0 [ 172.143085][T10033] do_fast_syscall_32+0x32/0x70 [ 172.144583][T10033] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.146489][T10033] RIP: 0023:0xf6feefec [ 172.147761][T10033] Code: Unable to access opcode bytes at 0xf6feefc2. [ 172.149750][T10033] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 172.152266][T10033] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000300 [ 172.154656][T10033] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.157035][T10033] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 172.159416][T10033] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 172.161787][T10033] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.164168][T10033] [ 172.165134][T10033] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 172.167298][T10033] CPU: 1 UID: 0 PID: 10033 Comm: syz.4.1192 Tainted: G B L syzkaller #0 PREEMPT(full) [ 172.170532][T10033] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 172.172196][T10033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.175284][T10033] Call Trace: [ 172.176316][T10033] [ 172.177240][T10033] dump_stack_lvl+0x100/0x190 [ 172.178667][T10033] vpanic+0x553/0x970 [ 172.179923][T10033] ? __pfx_vpanic+0x10/0x10 [ 172.181336][T10033] ? lock_release+0x24d/0x310 [ 172.182807][T10033] panic+0xd1/0xe0 [ 172.183968][T10033] ? __pfx_panic+0x10/0x10 [ 172.185325][T10033] check_panic_on_warn.cold+0x19/0x34 [ 172.186851][T10033] ? __slab_err+0x15/0x20 [ 172.188068][T10033] __warn.cold+0x191/0x318 [ 172.189361][T10033] __report_bug+0x30f/0x440 [ 172.190711][T10033] ? __slab_err+0x15/0x20 [ 172.192034][T10033] ? __pfx___report_bug+0x10/0x10 [ 172.193602][T10033] ? irq_work_queue+0xd1/0x100 [ 172.195040][T10033] ? __wake_up_klogd+0xe5/0x140 [ 172.196575][T10033] ? vprintk_emit+0x1c9/0x6b0 [ 172.198017][T10033] ? __pfx_vprintk_emit+0x10/0x10 [ 172.199558][T10033] ? __pfx_vprintk_emit+0x10/0x10 [ 172.201080][T10033] ? __pfx_vprintk_emit+0x10/0x10 [ 172.202602][T10033] ? __slab_err+0x15/0x20 [ 172.203949][T10033] report_bug+0xb3/0x220 [ 172.205351][T10033] ? __slab_err+0x15/0x20 [ 172.206684][T10033] handle_bug+0x16a/0x2a0 [ 172.207969][T10033] exc_invalid_op+0x17/0x50 [ 172.209346][T10033] asm_exc_invalid_op+0x1a/0x20 [ 172.210891][T10033] RIP: 0010:__slab_err+0x15/0x20 [ 172.212644][T10033] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 7c b3 a3 00 90 <0f> 0b 90 e9 03 5a af 0a 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 172.219179][T10033] RSP: 0000:ffffc900039f7920 EFLAGS: 00010087 [ 172.221163][T10033] RAX: 0000000000032a0c RBX: ffffc900039f7970 RCX: ffffc90006c91000 [ 172.223663][T10033] RDX: 0000000000080000 RSI: ffffffff81c8013d RDI: ffff888027308000 [ 172.226554][T10033] RBP: ffff88804c868858 R08: 0000000000000007 R09: 0000000000000000 [ 172.229447][T10033] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000007918 [ 172.232175][T10033] R13: ffff888067457df0 R14: ffff88804c868840 R15: ffffea00019d1400 [ 172.234665][T10033] ? add_taint+0x6d/0xb0 [ 172.236239][T10033] __kmem_cache_shutdown.cold+0x16e/0x177 [ 172.238309][T10033] kmem_cache_destroy+0x7d/0x1a0 [ 172.239996][T10033] free_conf+0x1cb/0x710 [ 172.241515][T10033] raid5_run.cold+0x593/0xd51 [ 172.243145][T10033] level_store+0x103f/0x1f60 [ 172.244850][T10033] ? __pfx_level_store+0x10/0x10 [ 172.246678][T10033] ? lock_acquire+0x1d1/0x380 [ 172.248333][T10033] ? do_raw_spin_lock+0x128/0x260 [ 172.250128][T10033] ? find_held_lock+0x2b/0x80 [ 172.251801][T10033] ? md_attr_store+0x195/0x330 [ 172.253586][T10033] ? md_attr_store+0x195/0x330 [ 172.255357][T10033] md_attr_store+0x1c5/0x330 [ 172.257100][T10033] ? __pfx_md_attr_store+0x10/0x10 [ 172.259054][T10033] sysfs_kf_write+0xf2/0x150 [ 172.260735][T10033] kernfs_fop_write_iter+0x3e0/0x5f0 [ 172.262614][T10033] ? __pfx_sysfs_kf_write+0x10/0x10 [ 172.264482][T10033] vfs_write+0x6af/0x1050 [ 172.266143][T10033] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 172.268284][T10033] ? __pfx_vfs_write+0x10/0x10 [ 172.270047][T10033] ? find_held_lock+0x2b/0x80 [ 172.271695][T10033] ksys_write+0x12a/0x250 [ 172.273231][T10033] ? __pfx_ksys_write+0x10/0x10 [ 172.274769][T10033] __do_fast_syscall_32+0x13a/0x8b0 [ 172.276385][T10033] do_fast_syscall_32+0x32/0x70 [ 172.278211][T10033] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.280384][T10033] RIP: 0023:0xf6feefec [ 172.281861][T10033] Code: Unable to access opcode bytes at 0xf6feefc2. [ 172.284185][T10033] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 172.287235][T10033] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000300 [ 172.290110][T10033] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.292953][T10033] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 172.295819][T10033] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 172.298727][T10033] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.301641][T10033] [ 172.303417][T10033] Kernel Offset: disabled [ 172.304893][T10033] Rebooting in 86400 seconds..