last executing test programs: 1m53.767560394s ago: executing program 1 (id=1589): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket(0x1, 0x803, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) rename(&(0x7f00000008c0)='./file2\x00', &(0x7f00000000c0)='./file0\x00') 1m53.707076655s ago: executing program 1 (id=1590): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x1d, 0x2, 0x6) accept4(r1, 0x0, 0x0, 0x80000) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1210, 0x10f0, 0x700001b, 0x148, 0x0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0x10a0, 0x10c0, 0x0, {0x390, 0x8f00}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1270) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd", 0x1}], 0x1, &(0x7f00000003c0)=[@rights={{0x10, 0x1, 0x1, [r2]}}], 0x10, 0x20000041}}], 0x1, 0xc004) recvmmsg(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x62}, 0xfffffffc}], 0x1, 0x2020, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) openat(0xffffffffffffff9c, 0x0, 0x1a3042, 0x20) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) r5 = socket(0x2, 0x5, 0x800003) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi1\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000000)={'comedi_bond\x00', [0x2, 0x4, 0x2, 0x8, 0x90000, 0x9, 0xed, 0x890, 0x280ffa, 0xfffffffc, 0x4, 0x1, 0x1030, 0x1000008, 0x4c, 0x40000009, 0xfff7ffa6, 0x3ff, 0x912, 0x9ea, 0x3, 0x9, 0xc, 0x101, 0x1, 0x990e, 0x5, 0x18, 0x2, 0x2000006, 0x5]}) listen(r0, 0x5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x240000d4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1m53.19360545s ago: executing program 1 (id=1596): r0 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00038400000004030a10"]}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, &(0x7f00000007c0)="0bcde56ca9a62cbf", 0x8) syz_usb_control_io$printer(r1, 0x0, 0x0) 1m50.08691296s ago: executing program 1 (id=1630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syz_tun\x00'}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 1m48.75725886s ago: executing program 1 (id=1634): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2', 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, 0x0, {0xe, 0x1}}}, 0x24}}, 0x4) 1m48.060704955s ago: executing program 1 (id=1647): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2b, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) socket$xdp(0x2c, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0xa, 0x4, 0x9, 0x7fffffff}, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r0, &(0x7f0000000940)=[{&(0x7f0000000340)='\x00!G', 0x3}], 0x1, 0x739, 0xade) 1m32.79150808s ago: executing program 32 (id=1647): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2b, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) socket$xdp(0x2c, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0xa, 0x4, 0x9, 0x7fffffff}, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r0, &(0x7f0000000940)=[{&(0x7f0000000340)='\x00!G', 0x3}], 0x1, 0x739, 0xade) 11.694504184s ago: executing program 4 (id=2043): sched_setattr(0x0, &(0x7f0000000280)={0x73, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000040), 0x12) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000400)={'veth1_to_bond\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x6}}) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) r7 = getpid() mount(0x0, 0x0, &(0x7f00000000c0)='gfs2\x00', 0x10, &(0x7f0000000100)='barrier') sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) sched_getattr(r7, &(0x7f0000000140)={0x38}, 0x38, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f00003ad000/0x3000)=nil, 0x2000, 0x2}) lseek(r0, 0x851, 0x1) 8.875920769s ago: executing program 3 (id=2048): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = dup(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) fcntl$setpipe(r6, 0x407, 0x100004) write$eventfd(r6, &(0x7f0000000240), 0xffffff14) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d1bf91b4d090955f70e06d038e7ff7fc6e5539b0d3f0e8b089b3f390768090890e0878f0e1ac6e7049b3346959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0xf8d}}, 0x96d) socket(0x1a, 0x80000, 0x3) 8.829976054s ago: executing program 4 (id=2049): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rtc(0xffffff9c, &(0x7f0000000140), 0x101000, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) chdir(&(0x7f0000000280)='./file0/file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080), 0x0) write$tun(r4, &(0x7f0000000840)=ANY=[], 0x11b0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) 7.842961319s ago: executing program 3 (id=2053): epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab58baeda525e1a8deffafde25"}) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x100000000000000) 6.767763613s ago: executing program 2 (id=2055): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='status\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000a80)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$inet_smc(0x2b, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0xb3b54c18e0590239, 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x11c, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x15c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setns(0xc9, 0x0) socket$packet(0x11, 0x2, 0x300) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000003f000500000000000000000002000000000000000f0001006f76"], 0x34}}, 0x0) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)='adfs\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 6.15426951s ago: executing program 3 (id=2056): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r5, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4f3bf5835e00000000225121d6958c78cfc0e1f14f1b257f4031f897f3b12ffaada8201e50923df2bb7d50bc559759ae785f8c8564bd270f568b646cf58cb2837303a1d7ad57d8c24d461e2a9eaf1158603987f8e315e14c", 0x58}], 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r7, &(0x7f0000000100)={0x14}, 0x14) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000012000/0x3000)=nil], 0x0, 0x0, 0x6) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000011f000/0x2000)=nil, 0x2000, 0x0) 5.812585038s ago: executing program 4 (id=2057): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000a00)={{0x5, 0x0, 0x0, 0x8, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) 5.261368537s ago: executing program 2 (id=2059): creat(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000bfd2b357620012", 0x32}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)}], 0x1}, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0xfffff9, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, 0x0}, 0x108) eventfd(0x5f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa6d9d000) 3.91303755s ago: executing program 3 (id=2062): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x20010, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) r5 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x403, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x567edf1e112c951d}]}}}]}, 0x38}}, 0x4008844) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) socket$nl_sock_diag(0x10, 0x3, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x3, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x400, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x200, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x8, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x2, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x1ff, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400400, 0x8, 0x28, 0x8, 0x7, 0x9, 0x2, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000980)={0x78, 0x0, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @random=0x4, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6, {0x4a, 0x1e, 0x5, 0x81}}, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x78}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 3.910094583s ago: executing program 0 (id=2070): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0c41b974", @ANYRES32=r4, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x50) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0x3, 0x2000}, 0x4) ppoll(&(0x7f0000000340)=[{0xffffffffffffffff, 0x8200}, {r2, 0x1201}, {0xffffffffffffffff, 0x100}, {r1, 0x2}, {r2, 0x96c0}, {r1}, {r4, 0x1}], 0x7, &(0x7f0000000500), &(0x7f0000000540)={[0xffff, 0x1000]}, 0x8) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x34020046}, 0x4000084) 3.906594982s ago: executing program 2 (id=2063): r0 = socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020320001900000000000000000000000400190000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc01000000000000000000000000000000000000000000000200", @ANYRESDEC], 0xc8}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f00000070c0)={&(0x7f0000006200)={0x50, 0xffffffffffffffda, 0x9, {0x7, 0x2d, 0x1, 0x6000040, 0x1, 0x2005, 0x8, 0x8, 0x0, 0x0, 0x10, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r3, r5, 0x6700000000000000) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r0, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') (async) r6 = accept4$inet(r0, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000600)="00000081fe534d42400000000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000410001000003000000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000008100000000000000000000000000000400000049fe534d42400000000000000001000100010000000000000001000000000000000000000001000000010000000000000000000000000000000000000009000000490000000000000050fe534d424000000000000000030001000100000000000000020000000000000000000000010000000100000000000000000000000000000000000000100001000000000000000000ff011f0000000099fe534d4240000000000000000500010001000000000000000300000000000000010000000100000001000000000000000000000000000000000000005900000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000100000000000000010000000000000000000000000000000000000049fe534d42400000000f0000c00e0001000100000000000000040000000000000001000000010000000100000000000000000000000000000000000000090000000000000000", 0x210) r7 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt\x00', 0x10000, 0x0) getdents64(r7, &(0x7f0000000900)=""/4096, 0x1000) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) 3.815521167s ago: executing program 0 (id=2064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab58baeda525e1a8deffafde25"}) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x100000000000000) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0) write(r5, &(0x7f0000000140)='blk', 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000009000010000000ebf1003c3eeeef41729c0c3f0d676a6db1ba73034b6bed064b464a118bfae2e0757c04294094ca674667b4af4f1576b08d607ba87ad88a0b602faa509a2faaccd26c8804449872070ee0d779dde2be7ec4830798d2c4819e5891973ed0b39d36569324d72bba83d5308833"], 0x0, 0x26}, 0x28) 3.66985804s ago: executing program 0 (id=2065): epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab58baeda525e1a8deffafde25"}) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x100000000000000) 2.267080625s ago: executing program 3 (id=2066): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000900)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="23000000010006", 0x7) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b)<', @ANYRES32=0x0, @ANYBLOB="0c009900fdffffff6b000000"], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) 2.260933331s ago: executing program 4 (id=2075): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f00000013c0), 0xc0, 0x40001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x148}}, 0x4810) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x804) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r7, &(0x7f0000000240)="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", 0x17e) 2.259050837s ago: executing program 0 (id=2067): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$midi(r7, &(0x7f00000001c0)=""/70, 0xffffffd8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 2.258698006s ago: executing program 2 (id=2068): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0xb, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xf, 0x5, 0xfffffff9}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002580)=@newtfilter={0xbc, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x4, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x90, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x9, 0x4}}, @TCA_U32_SEL={0x84, 0x5, {0xb, 0x8, 0x7, 0x7, 0x0, 0xefdf, 0x2, 0x84c, [{0x4, 0x24c900, 0x1, 0x32ec}, {0x9, 0x8001, 0x7, 0x1c00}, {0x9, 0xc3b, 0x80000001, 0x4}, {0xffff, 0x4, 0x2, 0x9}, {0x3, 0x8, 0x5c, 0x4}, {0xc8f, 0x7}, {0x1, 0xeb, 0x401, 0xd}]}}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2004c010}, 0x24040084) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r5 = inotify_init1(0x0) inotify_add_watch(r5, 0x0, 0x50007a2) write$binfmt_elf64(r4, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x1, 0x3, 0x3e, 0xffffffeb, 0x200000294, 0x40, 0x0, 0x0, 0x8f2d, 0x38, 0x1, 0xfffe, 0x2, 0x7}, [{0x3, 0xf97, 0x8, 0xd, 0x0, 0xe5, 0x6, 0x4}]}, 0x78) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r7}, './bus\x00'}) sendmsg$key(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x2, 0x10, 0x5, 0xaa5844baf3b73042, 0x2, 0x0, 0x70bd26, 0x25dfdbfe}, 0x10}}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000bd000000000010002b000a030000003fff00000000000200000000000000000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x40d0) r10 = openat$panthor(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r10, 0x941c, 0x0) 2.032360249s ago: executing program 2 (id=2069): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x1ff) recvmmsg(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f00000001c0), 0x2}], 0x1, 0x0, &(0x7f00000040c0)={0x77359400}, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x44000) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0x0, 0xee00) keyctl$chown(0x4, r3, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x5}) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000000140)={0x10, 0x0, "fda7be45625260e4dfec5d53fcd2e074"}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) 1.271956865s ago: executing program 3 (id=2071): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(r5, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000019180)="97a1606ab58e71aafe5bbd52e840795961f2e9bf92796ccfdcc9d98f213a79f8ae9e01ffe3f8244b35cf18d01b8c6e180c3b4ea4621ea6b4c9288ef3adacdb4ab3164b48327ce7f5cd1500675135b589d0e2aee950702e249496924544e16375ed49effa0d77130827b59112bb1a75f51bf79b85d72479b725ea9ebc7cf8092aab09d83ec9ad5a1afaa8c319af9b98fb6db1acd8a1b2170fdbe041c9803d69426f4a5e803ec8d96f5c295c264ed29d47927ae4438cf7defb2e3536e4075b691cc208f41516c4a6212f4149ccb4") syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000000)={0x7f, 0x20, 0x2}) 785.336324ms ago: executing program 0 (id=2072): madvise(&(0x7f000000f000/0x4000)=nil, 0x4000, 0xa) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x1000, 0x2000, &(0x7f0000010000/0x2000)=nil}) ioctl(r4, 0x4048aecb, &(0x7f0000000700)="000000002efcaff8f01ecc") ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x7800, 0x20, 0x9, 0x6, {{0x6, 0x4, 0x1, 0x36, 0x18, 0x64, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x4, 0xbe, 0x1, 0x4}]}}}}}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2000002, 0x2, 0x2, 0x0, 0x3}) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0x3d13, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc04c5609, &(0x7f0000000580)=@multiplanar_userptr={0x9, 0x2, 0x4, 0x400, 0x6, {}, {0x3, 0xc, 0x0, 0x2, 0x80, 0xeb, "106f7df7"}, 0xffe00, 0x2, {0x0}}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) 785.150554ms ago: executing program 4 (id=2073): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0c41b974", @ANYRES32=r4, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x50) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0x3, 0x2000}, 0x4) ppoll(&(0x7f0000000340)=[{0xffffffffffffffff, 0x8200}, {r2, 0x1201}, {0xffffffffffffffff, 0x100}, {r1, 0x2}, {r2, 0x96c0}, {r1}, {r4, 0x1}], 0x7, &(0x7f0000000500), &(0x7f0000000540)={[0xffff, 0x1000]}, 0x8) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x34020046}, 0x4000084) 297.027609ms ago: executing program 2 (id=2074): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e37bcdba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007f13a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff1ae0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5c9da255f8d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6a783ab647a4c257a4fcd6ba38ef32bc48a0064341697e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a202a991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0x2000, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r5, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4f3bf5835e00000000225121d6958c78cfc0e1f14f1b257f4031f897f3b12ffaada8201e50923df2bb7d50bc559759ae785f8c8564bd270f568b646cf58cb2837303a1d7ad57d8c24d461e2a9eaf1158603987f8e315e14c", 0x58}], 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r7, &(0x7f0000000100)={0x14}, 0x14) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000012000/0x3000)=nil], 0x0, 0x0, 0x6) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000011f000/0x2000)=nil, 0x2000, 0x0) 11.110898ms ago: executing program 4 (id=2076): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$evdev(0x0, 0x1bbc, 0x801) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x80000) close(r6) 0s ago: executing program 0 (id=2084): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, &(0x7f0000000000)) connect(r2, &(0x7f0000000300)=@phonet={0x23, 0x5, 0x8, 0x8}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2c, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x2c}}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)=@newchain={0x24, 0x1e, 0x101, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x4, 0x1}, {0x10, 0xb}}}, 0x24}}, 0x44004) recvmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010120) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r5, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x21e) openat$sequencer(0xffffff9c, 0x0, 0x8ec02, 0x0) wait4(r0, &(0x7f0000000280), 0x1, &(0x7f0000000380)) ioctl$SIOCX25SENDCALLACCPT(r4, 0x89e9) kernel console output (not intermixed with test programs): cess opcode bytes at 0xf706efc2. [ 312.373371][T10851] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 312.373383][T10851] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 312.373391][T10851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.373399][T10851] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 312.373406][T10851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.373414][T10851] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 312.373429][T10851] [ 315.627419][T10898] hpfs: hpfs_map_sector(): read error [ 316.205416][ T8584] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 316.353944][ T8584] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 316.357323][ T8584] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.357354][ T8584] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.357371][ T8584] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 316.357403][ T8584] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.362545][ T8584] usb 6-1: config 0 descriptor?? [ 316.500163][T10908] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 316.657912][T10916] FAULT_INJECTION: forcing a failure. [ 316.657912][T10916] name failslab, interval 1, probability 0, space 0, times 0 [ 316.666626][T10916] CPU: 1 UID: 0 PID: 10916 Comm: syz.3.1532 Tainted: G L syzkaller #0 PREEMPT(full) [ 316.666678][T10916] Tainted: [L]=SOFTLOCKUP [ 316.666689][T10916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 316.666702][T10916] Call Trace: [ 316.666709][T10916] [ 316.666717][T10916] dump_stack_lvl+0x100/0x190 [ 316.666747][T10916] should_fail_ex.cold+0x5/0xa [ 316.666772][T10916] should_failslab+0xc2/0x120 [ 316.666795][T10916] __kmalloc_node_noprof+0xff/0x880 [ 316.666816][T10916] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 316.666841][T10916] ? fifo_init+0x393/0x710 [ 316.666865][T10916] ? qdisc_alloc+0xbb/0xb30 [ 316.666895][T10916] qdisc_alloc+0xbb/0xb30 [ 316.666925][T10916] qdisc_create_dflt+0x93/0x490 [ 316.666951][T10916] prio_tune+0x29a/0xdd0 [ 316.666982][T10916] ? up_write+0x2dc/0x5b0 [ 316.667012][T10916] ? __pfx_prio_tune+0x10/0x10 [ 316.667044][T10916] ? tcf_block_get_ext+0xe43/0x1950 [ 316.667083][T10916] prio_init+0x5d/0x80 [ 316.667111][T10916] ? __pfx_prio_init+0x10/0x10 [ 316.667146][T10916] qdisc_create+0x47b/0x1060 [ 316.667177][T10916] tc_modify_qdisc+0xdcf/0x2120 [ 316.667207][T10916] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 316.667268][T10916] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 316.667292][T10916] rtnetlink_rcv_msg+0x3c9/0xe90 [ 316.667328][T10916] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 316.667360][T10916] ? ref_tracker_free+0x37e/0x6c0 [ 316.667422][T10916] netlink_rcv_skb+0x159/0x420 [ 316.667446][T10916] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 316.667479][T10916] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 316.667512][T10916] ? netlink_deliver_tap+0x1ae/0xcc0 [ 316.667539][T10916] netlink_unicast+0x585/0x850 [ 316.667563][T10916] ? __pfx_netlink_unicast+0x10/0x10 [ 316.667589][T10916] netlink_sendmsg+0x8b0/0xda0 [ 316.667614][T10916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.667636][T10916] ? apparmor_socket_sendmsg+0x165/0x280 [ 316.667663][T10916] ____sys_sendmsg+0xa4d/0xbe0 [ 316.667685][T10916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.667705][T10916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.667751][T10916] ___sys_sendmsg+0x190/0x1e0 [ 316.667782][T10916] ? __pfx____sys_sendmsg+0x10/0x10 [ 316.667807][T10916] ? futex_wait+0x11e/0x370 [ 316.667834][T10916] ? find_held_lock+0x2b/0x80 [ 316.667869][T10916] __sys_sendmsg+0x160/0x210 [ 316.667893][T10916] ? __pfx___sys_sendmsg+0x10/0x10 [ 316.667929][T10916] __do_fast_syscall_32+0x13a/0x8b0 [ 316.667962][T10916] do_fast_syscall_32+0x32/0x70 [ 316.667988][T10916] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 316.668012][T10916] RIP: 0023:0xf706efec [ 316.668036][T10916] Code: Unable to access opcode bytes at 0xf706efc2. [ 316.668045][T10916] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 316.668069][T10916] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 316.668084][T10916] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.668096][T10916] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 316.668108][T10916] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 316.668118][T10916] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 316.668139][T10916] [ 316.826076][ T8584] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 316.839104][T10922] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 317.016115][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.459639][T10936] FAULT_INJECTION: forcing a failure. [ 317.459639][T10936] name failslab, interval 1, probability 0, space 0, times 0 [ 317.459695][T10936] CPU: 3 UID: 0 PID: 10936 Comm: syz.2.1538 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.459713][T10936] Tainted: [L]=SOFTLOCKUP [ 317.459717][T10936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 317.459724][T10936] Call Trace: [ 317.459729][T10936] [ 317.459734][T10936] dump_stack_lvl+0x100/0x190 [ 317.459754][T10936] should_fail_ex.cold+0x5/0xa [ 317.459771][T10936] should_failslab+0xc2/0x120 [ 317.459788][T10936] kmem_cache_alloc_noprof+0x92/0x6a0 [ 317.459801][T10936] ? sctp_get_port_local+0x828/0x1630 [ 317.459821][T10936] sctp_get_port_local+0x828/0x1630 [ 317.459843][T10936] ? __pfx_sctp_get_port_local+0x10/0x10 [ 317.459863][T10936] ? sctp_bind_addr_match+0x19d/0x300 [ 317.459880][T10936] sctp_do_bind+0x2b9/0x760 [ 317.459895][T10936] sctp_connect_new_asoc+0x5e7/0x770 [ 317.459909][T10936] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 317.459925][T10936] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 317.459944][T10936] sctp_sendmsg+0x1743/0x22e0 [ 317.459961][T10936] ? __pfx_sctp_sendmsg+0x10/0x10 [ 317.459983][T10936] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 317.460012][T10936] ? aa_sock_msg_perm+0x11e/0x200 [ 317.460036][T10936] ? __pfx_sctp_sendmsg+0x10/0x10 [ 317.460056][T10936] inet_sendmsg+0x11c/0x140 [ 317.460086][T10936] ____sys_sendmsg+0x9c9/0xbe0 [ 317.460115][T10936] ? __pfx_inet_sendmsg+0x10/0x10 [ 317.460144][T10936] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.460176][T10936] ___sys_sendmsg+0x190/0x1e0 [ 317.460195][T10936] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.460214][T10936] ? futex_wait+0x11e/0x370 [ 317.460232][T10936] ? find_held_lock+0x2b/0x80 [ 317.460255][T10936] __sys_sendmsg+0x160/0x210 [ 317.460270][T10936] ? __pfx___sys_sendmsg+0x10/0x10 [ 317.460290][T10936] __do_fast_syscall_32+0x13a/0x8b0 [ 317.460310][T10936] do_fast_syscall_32+0x32/0x70 [ 317.460327][T10936] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 317.460342][T10936] RIP: 0023:0xf7f12fec [ 317.460355][T10936] Code: Unable to access opcode bytes at 0xf7f12fc2. [ 317.460361][T10936] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 317.460373][T10936] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000140 [ 317.460381][T10936] RDX: 00000000240488c6 RSI: 0000000000000000 RDI: 0000000000000000 [ 317.460389][T10936] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 317.460396][T10936] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 317.460403][T10936] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 317.460416][T10936] [ 317.787310][T10941] FAULT_INJECTION: forcing a failure. [ 317.787310][T10941] name failslab, interval 1, probability 0, space 0, times 0 [ 317.787478][T10941] CPU: 0 UID: 0 PID: 10941 Comm: syz.0.1540 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.787523][T10941] Tainted: [L]=SOFTLOCKUP [ 317.787533][T10941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 317.787544][T10941] Call Trace: [ 317.787553][T10941] [ 317.787562][T10941] dump_stack_lvl+0x100/0x190 [ 317.787596][T10941] should_fail_ex.cold+0x5/0xa [ 317.787625][T10941] should_failslab+0xc2/0x120 [ 317.787655][T10941] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 317.787677][T10941] ? __alloc_skb+0x5b7/0x710 [ 317.787699][T10941] ? __alloc_skb+0x140/0x710 [ 317.787740][T10941] __alloc_skb+0x140/0x710 [ 317.787764][T10941] ? __alloc_skb+0x5b7/0x710 [ 317.787786][T10941] ? __pfx___alloc_skb+0x10/0x10 [ 317.787810][T10941] ? aa_sock_msg_perm+0x11e/0x200 [ 317.787833][T10941] pfkey_sendmsg+0x161/0x840 [ 317.787865][T10941] ____sys_sendmsg+0xa4d/0xbe0 [ 317.787890][T10941] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 317.787919][T10941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.787958][T10941] ___sys_sendmsg+0x190/0x1e0 [ 317.787988][T10941] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.788018][T10941] ? futex_wait+0x11e/0x370 [ 317.788050][T10941] ? find_held_lock+0x2b/0x80 [ 317.788095][T10941] __sys_sendmsg+0x160/0x210 [ 317.788120][T10941] ? __pfx___sys_sendmsg+0x10/0x10 [ 317.788160][T10941] __do_fast_syscall_32+0x13a/0x8b0 [ 317.788194][T10941] do_fast_syscall_32+0x32/0x70 [ 317.788223][T10941] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 317.788250][T10941] RIP: 0023:0xf6ffefec [ 317.788277][T10941] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 317.788286][T10941] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 317.788309][T10941] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 317.788322][T10941] RDX: 0000000004000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 317.788335][T10941] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 317.788348][T10941] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 317.788362][T10941] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 317.788389][T10941] [ 317.824784][T10945] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 317.831629][ T1686] IPVS: starting estimator thread 0... [ 317.921508][T10946] IPVS: using max 29 ests per chain, 69600 per kthread [ 318.130986][ T5837] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 318.283053][ T5837] usb 8-1: unable to get BOS descriptor or descriptor too short [ 318.285844][ T5837] usb 8-1: not running at top speed; connect to a high speed hub [ 318.285867][ T5837] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 318.286715][ T5837] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 318.286729][ T5837] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 318.286739][ T5837] usb 8-1: config 14 has no interface number 0 [ 318.286747][ T5837] usb 8-1: config 14 has no interface number 1 [ 318.286774][ T5837] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 318.286786][ T5837] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 318.286798][ T5837] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 318.286810][ T5837] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 318.286823][ T5837] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 318.286836][ T5837] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 318.286847][ T5837] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 318.286859][ T5837] usb 8-1: config 14 interface 57 has no altsetting 0 [ 318.286868][ T5837] usb 8-1: config 14 interface 228 has no altsetting 0 [ 318.288778][ T5837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.288793][ T5837] usb 8-1: Product: syz [ 318.288800][ T5837] usb 8-1: Manufacturer: syz [ 318.288807][ T5837] usb 8-1: SerialNumber: syz [ 318.713214][ T5837] legousbtower 8-1:14.57: interrupt endpoints not found [ 318.833643][T10968] netlink: 'syz.1.1548': attribute type 1 has an invalid length. [ 318.875181][T10968] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 318.900657][T10968] netlink: 'syz.1.1548': attribute type 1 has an invalid length. [ 318.946938][T10968] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 319.051480][ T2327] usb 6-1: USB disconnect, device number 11 [ 319.117512][ T5837] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 319.125625][ T5837] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 319.284152][T10975] kvm: pic: non byte write [ 319.285116][T10975] kvm: pic: non byte write [ 319.286025][T10975] kvm: pic: non byte write [ 319.286921][T10975] kvm: pic: non byte write [ 319.287954][T10975] kvm: pic: non byte write [ 319.288898][T10975] kvm: pic: non byte write [ 319.290720][T10975] kvm: pic: non byte write [ 319.292584][T10975] kvm: pic: non byte write [ 319.293595][T10975] kvm: pic: non byte write [ 319.294866][T10975] kvm: pic: non byte write [ 319.726905][ T5529] usb 8-1: USB disconnect, device number 9 [ 319.747154][ T5529] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 320.942878][ T5829] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 321.020360][T11031] /dev/loop1: Can't open blockdev [ 321.025861][T11033] FAULT_INJECTION: forcing a failure. [ 321.025861][T11033] name failslab, interval 1, probability 0, space 0, times 0 [ 321.026321][T11033] CPU: 2 UID: 0 PID: 11033 Comm: syz.2.1564 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.026365][T11033] Tainted: [L]=SOFTLOCKUP [ 321.026374][T11033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 321.026384][T11033] Call Trace: [ 321.026392][T11033] [ 321.026400][T11033] dump_stack_lvl+0x100/0x190 [ 321.026429][T11033] should_fail_ex.cold+0x5/0xa [ 321.026472][T11033] should_failslab+0xc2/0x120 [ 321.026497][T11033] __kmalloc_cache_noprof+0x91/0x6d0 [ 321.026522][T11033] ? pty_common_install+0x10e/0xb30 [ 321.026546][T11033] pty_common_install+0x10e/0xb30 [ 321.026567][T11033] ? __pfx_pty_unix98_install+0x10/0x10 [ 321.026586][T11033] tty_init_dev.part.0+0x9e/0x470 [ 321.026619][T11033] tty_init_dev+0x60/0x80 [ 321.026640][T11033] ? __pfx_ptmx_open+0x10/0x10 [ 321.026655][T11033] ptmx_open+0x128/0x360 [ 321.026670][T11033] ? __pfx_ptmx_open+0x10/0x10 [ 321.026686][T11033] chrdev_open+0x234/0x6a0 [ 321.026705][T11033] ? __pfx_apparmor_file_open+0x10/0x10 [ 321.026731][T11033] ? __pfx_chrdev_open+0x10/0x10 [ 321.026753][T11033] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 321.026782][T11033] do_dentry_open+0x6ab/0x14d0 [ 321.026799][T11033] ? __pfx_chrdev_open+0x10/0x10 [ 321.026822][T11033] vfs_open+0x82/0x3f0 [ 321.026852][T11033] path_openat+0x19fa/0x2440 [ 321.026875][T11033] ? __pfx_path_openat+0x10/0x10 [ 321.026900][T11033] do_file_open+0x20e/0x430 [ 321.026920][T11033] ? __pfx_do_file_open+0x10/0x10 [ 321.026962][T11033] ? _raw_spin_unlock+0x28/0x50 [ 321.026982][T11033] ? alloc_fd+0x471/0x7a0 [ 321.027006][T11033] do_sys_openat2+0x10f/0x1e0 [ 321.027028][T11033] ? __pfx_do_sys_openat2+0x10/0x10 [ 321.027052][T11033] ? find_held_lock+0x2b/0x80 [ 321.027071][T11033] ? fd_install+0x223/0x580 [ 321.027093][T11033] __ia32_compat_sys_openat+0x12d/0x210 [ 321.027119][T11033] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 321.027156][T11033] __do_fast_syscall_32+0x13a/0x8b0 [ 321.027188][T11033] do_fast_syscall_32+0x32/0x70 [ 321.027213][T11033] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.027234][T11033] RIP: 0023:0xf7f12fec [ 321.027255][T11033] Code: Unable to access opcode bytes at 0xf7f12fc2. [ 321.027262][T11033] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 321.027280][T11033] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 321.027298][T11033] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 321.027312][T11033] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 321.027325][T11033] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 321.027340][T11033] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 321.027412][T11033] [ 321.143876][ T5829] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 321.148859][ T5829] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 321.152011][ T5829] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 321.155898][ T5829] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 321.158942][ T5829] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 321.181038][ T5829] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 321.192168][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 321.192219][ T5829] usb 5-1: Product: syz [ 321.192269][ T5829] usb 5-1: Manufacturer: syz [ 321.218064][ T5829] cdc_wdm 5-1:1.0: skipping garbage [ 321.220657][ T5829] cdc_wdm 5-1:1.0: skipping garbage [ 321.227891][ T5829] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 321.233500][ T5829] cdc_wdm 5-1:1.0: Unknown control protocol [ 321.542102][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 321.542257][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 321.544707][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 321.544724][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 321.544926][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 321.544941][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 321.545176][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 321.545190][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 321.545396][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 321.545410][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 321.545496][ T2327] usb 5-1: USB disconnect, device number 11 [ 321.545627][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 321.545642][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 321.545656][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 321.830208][T11052] FAULT_INJECTION: forcing a failure. [ 321.830208][T11052] name failslab, interval 1, probability 0, space 0, times 0 [ 321.830295][T11052] CPU: 3 UID: 0 PID: 11052 Comm: syz.3.1572 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.830339][T11052] Tainted: [L]=SOFTLOCKUP [ 321.830347][T11052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 321.830360][T11052] Call Trace: [ 321.830367][T11052] [ 321.830375][T11052] dump_stack_lvl+0x100/0x190 [ 321.830406][T11052] should_fail_ex.cold+0x5/0xa [ 321.830434][T11052] should_failslab+0xc2/0x120 [ 321.830459][T11052] kmem_cache_alloc_noprof+0x92/0x6a0 [ 321.830498][T11052] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 321.830533][T11052] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 321.830568][T11052] mmu_topup_memory_caches+0x25/0x170 [ 321.830602][T11052] kvm_mmu_load+0xe8/0x2580 [ 321.830631][T11052] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 321.830657][T11052] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 321.830686][T11052] ? __pfx_kvm_mmu_load+0x10/0x10 [ 321.830716][T11052] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 321.830746][T11052] ? kvm_check_and_inject_events+0x896/0x1050 [ 321.830782][T11052] vcpu_run+0x395d/0x5e80 [ 321.830800][T11052] ? mark_held_locks+0x40/0x70 [ 321.830836][T11052] ? __pfx____ratelimit+0x10/0x10 [ 321.830861][T11052] ? __pfx_vcpu_run+0x10/0x10 [ 321.830884][T11052] ? lock_acquire+0x1d1/0x380 [ 321.830933][T11052] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 321.830959][T11052] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 321.830988][T11052] ? __local_bh_enable_ip+0xa5/0x120 [ 321.831025][T11052] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 321.831046][T11052] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 321.831074][T11052] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 321.831095][T11052] ? lock_acquire+0x1d1/0x380 [ 321.831119][T11052] ? do_raw_write_lock+0x11e/0x260 [ 321.831138][T11052] ? find_held_lock+0x2b/0x80 [ 321.831157][T11052] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 321.831179][T11052] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 321.831209][T11052] kvm_vcpu_ioctl+0x730/0x1700 [ 321.831234][T11052] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 321.831259][T11052] ? tomoyo_path_number_perm+0x188/0x580 [ 321.831289][T11052] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 321.831314][T11052] ? futex_wait+0x11e/0x370 [ 321.831376][T11052] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 321.831409][T11052] ? do_vfs_ioctl+0x226/0x13e0 [ 321.831442][T11052] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 321.831478][T11052] ? __fget_files+0x34/0x3d0 [ 321.831503][T11052] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 321.831528][T11052] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 321.831553][T11052] ? __fget_files+0x21f/0x3d0 [ 321.831579][T11052] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 321.831604][T11052] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 321.831639][T11052] __do_fast_syscall_32+0x13a/0x8b0 [ 321.831672][T11052] do_fast_syscall_32+0x32/0x70 [ 321.831702][T11052] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.831734][T11052] RIP: 0023:0xf706efec [ 321.831758][T11052] Code: Unable to access opcode bytes at 0xf706efc2. [ 321.831767][T11052] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 321.831789][T11052] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 321.831805][T11052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 321.831819][T11052] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 321.831832][T11052] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 321.831846][T11052] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 321.831875][T11052] [ 321.861038][ T8584] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 322.041856][ T8584] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 322.042440][ T8584] usb 7-1: config 0 has no interfaces? [ 322.042465][ T8584] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.044781][ T8584] usb 7-1: config 0 descriptor?? [ 322.298536][ T5529] usb 7-1: USB disconnect, device number 3 [ 322.823379][T11088] syz_tun: entered allmulticast mode [ 323.407434][T11114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1594'. [ 323.509447][T11116] FAULT_INJECTION: forcing a failure. [ 323.509447][T11116] name failslab, interval 1, probability 0, space 0, times 0 [ 323.509546][T11116] CPU: 3 UID: 0 PID: 11116 Comm: syz.3.1595 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.509588][T11116] Tainted: [L]=SOFTLOCKUP [ 323.509597][T11116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 323.509610][T11116] Call Trace: [ 323.509616][T11116] [ 323.509625][T11116] dump_stack_lvl+0x100/0x190 [ 323.509658][T11116] should_fail_ex.cold+0x5/0xa [ 323.509683][T11116] should_failslab+0xc2/0x120 [ 323.509698][T11116] __kmalloc_node_noprof+0xff/0x880 [ 323.509712][T11116] ? crypto_create_tfm_node+0x8d/0x3b0 [ 323.509731][T11116] crypto_create_tfm_node+0x8d/0x3b0 [ 323.509749][T11116] crypto_alloc_tfm_node+0x102/0x260 [ 323.509769][T11116] __keyctl_dh_compute+0x45d/0x10d0 [ 323.509790][T11116] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 323.509814][T11116] ? lock_acquire+0x1d1/0x380 [ 323.509830][T11116] ? __might_fault+0xc5/0x140 [ 323.509855][T11116] compat_keyctl_dh_compute+0x14c/0x1c0 [ 323.509876][T11116] ? __pfx_compat_keyctl_dh_compute+0x10/0x10 [ 323.509894][T11116] ? __do_sys_add_key+0x370/0x460 [ 323.509918][T11116] ? xfd_validate_state+0x129/0x190 [ 323.509941][T11116] __ia32_compat_sys_keyctl+0x4c8/0x550 [ 323.509962][T11116] __do_fast_syscall_32+0x13a/0x8b0 [ 323.509983][T11116] do_fast_syscall_32+0x32/0x70 [ 323.510001][T11116] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.510015][T11116] RIP: 0023:0xf706efec [ 323.510032][T11116] Code: Unable to access opcode bytes at 0xf706efc2. [ 323.510037][T11116] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 323.510049][T11116] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 0000000080000040 [ 323.510057][T11116] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080000200 [ 323.510063][T11116] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.510070][T11116] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 323.510076][T11116] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.510090][T11116] [ 323.676776][T11122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1598'. [ 323.699658][T11122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.727498][T11122] macvlan2: entered promiscuous mode [ 323.727581][T11122] macvlan2: entered allmulticast mode [ 323.728937][T11122] bond0: (slave macvlan2): Opening slave failed [ 323.797831][T11125] FAULT_INJECTION: forcing a failure. [ 323.797831][T11125] name failslab, interval 1, probability 0, space 0, times 0 [ 323.797912][T11125] CPU: 3 UID: 0 PID: 11125 Comm: syz.2.1599 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.797958][T11125] Tainted: [L]=SOFTLOCKUP [ 323.797966][T11125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 323.797976][T11125] Call Trace: [ 323.797990][T11125] [ 323.798001][T11125] dump_stack_lvl+0x100/0x190 [ 323.798033][T11125] should_fail_ex.cold+0x5/0xa [ 323.798060][T11125] should_failslab+0xc2/0x120 [ 323.798086][T11125] __kmalloc_node_noprof+0xff/0x880 [ 323.798106][T11125] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.798127][T11125] ? fifo_init+0x393/0x710 [ 323.798149][T11125] ? qdisc_alloc+0xbb/0xb30 [ 323.798180][T11125] qdisc_alloc+0xbb/0xb30 [ 323.798213][T11125] qdisc_create_dflt+0x93/0x490 [ 323.798242][T11125] prio_tune+0x29a/0xdd0 [ 323.798273][T11125] ? up_write+0x2dc/0x5b0 [ 323.798303][T11125] ? __pfx_prio_tune+0x10/0x10 [ 323.798333][T11125] ? tcf_block_get_ext+0xe43/0x1950 [ 323.798370][T11125] prio_init+0x5d/0x80 [ 323.798400][T11125] ? __pfx_prio_init+0x10/0x10 [ 323.798429][T11125] qdisc_create+0x47b/0x1060 [ 323.798454][T11125] tc_modify_qdisc+0xdcf/0x2120 [ 323.798482][T11125] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 323.798525][T11125] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 323.798550][T11125] rtnetlink_rcv_msg+0x3c9/0xe90 [ 323.798579][T11125] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 323.798635][T11125] ? ref_tracker_free+0x37e/0x6c0 [ 323.798672][T11125] netlink_rcv_skb+0x159/0x420 [ 323.798696][T11125] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 323.798726][T11125] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 323.798758][T11125] ? netlink_deliver_tap+0x1ae/0xcc0 [ 323.798784][T11125] netlink_unicast+0x585/0x850 [ 323.798809][T11125] ? __pfx_netlink_unicast+0x10/0x10 [ 323.798835][T11125] netlink_sendmsg+0x8b0/0xda0 [ 323.798861][T11125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.798882][T11125] ? apparmor_socket_sendmsg+0x165/0x280 [ 323.798908][T11125] ____sys_sendmsg+0xa4d/0xbe0 [ 323.798936][T11125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.798957][T11125] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.799004][T11125] ___sys_sendmsg+0x190/0x1e0 [ 323.799034][T11125] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.799064][T11125] ? futex_wait+0x11e/0x370 [ 323.799097][T11125] ? find_held_lock+0x2b/0x80 [ 323.799136][T11125] __sys_sendmsg+0x160/0x210 [ 323.799161][T11125] ? __pfx___sys_sendmsg+0x10/0x10 [ 323.799198][T11125] __do_fast_syscall_32+0x13a/0x8b0 [ 323.799230][T11125] ? lockdep_hardirqs_on+0x7d/0x110 [ 323.799259][T11125] do_fast_syscall_32+0x32/0x70 [ 323.799286][T11125] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.799309][T11125] RIP: 0023:0xf7f12fec [ 323.799362][T11125] Code: Unable to access opcode bytes at 0xf7f12fc2. [ 323.799373][T11125] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 323.799396][T11125] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 323.799409][T11125] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 323.799422][T11125] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.799433][T11125] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 323.799444][T11125] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.799468][T11125] [ 323.899312][T11129] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 323.943137][T11127] FAULT_INJECTION: forcing a failure. [ 323.943137][T11127] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 323.943203][T11127] CPU: 1 UID: 0 PID: 11127 Comm: syz.2.1600 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.943236][T11127] Tainted: [L]=SOFTLOCKUP [ 323.943243][T11127] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 323.943252][T11127] Call Trace: [ 323.943258][T11127] [ 323.943264][T11127] dump_stack_lvl+0x100/0x190 [ 323.943288][T11127] should_fail_ex.cold+0x5/0xa [ 323.943308][T11127] copy_fpstate_to_sigframe+0x82d/0xae0 [ 323.943353][T11127] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 323.943380][T11127] ? posixtimer_deliver_signal+0x1a0/0x6e0 [ 323.943398][T11127] ? x86_task_fpu+0x5f/0x90 [ 323.943416][T11127] get_sigframe+0x3fb/0x940 [ 323.943440][T11127] ? __pfx_get_sigframe+0x10/0x10 [ 323.943465][T11127] ? rcu_is_watching+0x13/0xc0 [ 323.943481][T11127] ? siginfo_layout+0x156/0x290 [ 323.943506][T11127] ia32_setup_rt_frame+0xe7/0xaf0 [ 323.943534][T11127] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 323.943563][T11127] arch_do_signal_or_restart+0x459/0x7a0 [ 323.943585][T11127] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 323.943610][T11127] ? __pfx___do_splice+0x10/0x10 [ 323.943634][T11127] exit_to_user_mode_loop+0x139/0x700 [ 323.943657][T11127] ? rcu_is_watching+0x13/0xc0 [ 323.943673][T11127] __do_fast_syscall_32+0x59f/0x8b0 [ 323.943697][T11127] do_fast_syscall_32+0x32/0x70 [ 323.943718][T11127] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.943736][T11127] RIP: 0023:0xf7f12fea [ 323.943749][T11127] Code: 19 85 d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 323.943763][T11127] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000139 [ 323.943778][T11127] RAX: 0000000000000139 RBX: 0000000000000004 RCX: 0000000000000000 [ 323.943787][T11127] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000f3a [ 323.943795][T11127] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.943804][T11127] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 323.943812][T11127] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.943830][T11127] [ 324.025929][T11132] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3901993312 (7803986624 ns) > initial count (6429106268 ns). Using initial count to start timer. [ 324.029486][T11132] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 324.050958][ T8584] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 324.184442][T11140] bochs-drm 0000:00:01.0: [drm] Unknown color mode 6; guessing buffer size. [ 324.201438][ T8584] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 324.204159][ T8584] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.204179][ T8584] usb 6-1: Product: syz [ 324.204187][ T8584] usb 6-1: Manufacturer: syz [ 324.204194][ T8584] usb 6-1: SerialNumber: syz [ 324.612650][ T8584] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 325.201001][ T8584] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 325.353598][ T8584] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 325.358504][ T8584] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 325.358532][ T8584] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.358571][ T8584] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 325.358610][ T8584] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.360486][ T8584] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 325.360512][ T8584] usb 7-1: Product: syz [ 325.360526][ T8584] usb 7-1: Manufacturer: syz [ 325.366817][ T8584] cdc_wdm 7-1:1.0: skipping garbage [ 325.366835][ T8584] cdc_wdm 7-1:1.0: skipping garbage [ 325.368745][ T8584] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 325.368762][ T8584] cdc_wdm 7-1:1.0: Unknown control protocol [ 325.572618][ T25] usb 7-1: USB disconnect, device number 4 [ 325.966788][T11176] syz_tun: entered allmulticast mode [ 326.011230][ T25] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 326.181477][ T25] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 326.185396][ T25] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 326.188907][ T25] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.193579][ T25] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 326.196930][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.202533][ T25] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 326.205415][ T25] usb 7-1: Product: syz [ 326.207129][ T25] usb 7-1: Manufacturer: syz [ 326.213335][ T25] cdc_wdm 7-1:1.0: skipping garbage [ 326.215201][ T25] cdc_wdm 7-1:1.0: skipping garbage [ 326.222459][ T25] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 326.222527][ T25] cdc_wdm 7-1:1.0: Unknown control protocol [ 326.271116][ T5829] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 326.422280][ T5829] usb 8-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 326.423195][ T5829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.619093][ T5529] usb 7-1: USB disconnect, device number 5 [ 326.648823][ T8584] usb 6-1: USB disconnect, device number 12 [ 326.663316][ T8584] usblp0: removed [ 326.768420][ T5829] net1080 8-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.3-1, NetChip TurboCONNECT, d2:12:03:c6:c0:ca [ 327.692032][T11181] net1080 8-1:1.0 usb0: port B, peer disconnected [ 327.897545][ T25] usb 8-1: USB disconnect, device number 10 [ 327.906181][ T25] net1080 8-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.3-1, NetChip TurboCONNECT [ 328.067628][T11231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1634'. [ 328.157036][T11234] hpfs: hpfs_map_sector(): read error [ 328.419062][T11244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1640'. [ 328.552930][ T5744] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 328.616682][T11256] netlink: 'syz.0.1644': attribute type 10 has an invalid length. [ 328.616755][T11256] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1644'. [ 328.617118][T11256] dummy0: entered promiscuous mode [ 328.619869][T11256] bridge0: port 4(dummy0) entered blocking state [ 328.619964][T11256] bridge0: port 4(dummy0) entered disabled state [ 328.620058][T11256] dummy0: entered allmulticast mode [ 328.621664][T11256] bridge0: port 4(dummy0) entered blocking state [ 328.621798][T11256] bridge0: port 4(dummy0) entered forwarding state [ 328.687120][T11261] hpfs: hpfs_map_sector(): read error [ 328.691862][ T25] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 328.856953][ T25] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 328.858471][ T25] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 328.858514][ T25] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 328.858537][ T25] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 328.858558][ T25] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 328.858578][ T25] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 328.859628][ T25] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 328.859664][ T25] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 328.859686][ T25] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 328.859706][ T25] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 328.859728][ T25] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 328.860746][ T25] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 328.860781][ T25] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 328.860803][ T25] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 328.861036][ T25] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 328.861059][ T25] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 328.869221][ T25] usb 8-1: string descriptor 0 read error: -22 [ 328.869340][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.889022][ T25] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 330.154777][T11285] FAULT_INJECTION: forcing a failure. [ 330.154777][T11285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.154899][T11285] CPU: 0 UID: 0 PID: 11285 Comm: syz.2.1656 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.154920][T11285] Tainted: [L]=SOFTLOCKUP [ 330.154926][T11285] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 330.154934][T11285] Call Trace: [ 330.154939][T11285] [ 330.154945][T11285] dump_stack_lvl+0x100/0x190 [ 330.154976][T11285] should_fail_ex.cold+0x5/0xa [ 330.154994][T11285] save_fsave_header+0x14c/0x2f0 [ 330.155012][T11285] ? __pfx_save_fsave_header+0x10/0x10 [ 330.155035][T11285] ? copy_fpstate_to_sigframe+0x2b8/0xae0 [ 330.155054][T11285] ? __local_bh_enable_ip+0xa5/0x120 [ 330.155075][T11285] copy_fpstate_to_sigframe+0x755/0xae0 [ 330.155097][T11285] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 330.155116][T11285] ? posixtimer_deliver_signal+0x1a0/0x6e0 [ 330.155130][T11285] ? x86_task_fpu+0x5f/0x90 [ 330.155144][T11285] get_sigframe+0x3fb/0x940 [ 330.155162][T11285] ? __pfx_get_sigframe+0x10/0x10 [ 330.155177][T11285] ? rcu_is_watching+0x13/0xc0 [ 330.155189][T11285] ? siginfo_layout+0x156/0x290 [ 330.155208][T11285] ia32_setup_rt_frame+0xe7/0xaf0 [ 330.155230][T11285] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 330.155252][T11285] arch_do_signal_or_restart+0x459/0x7a0 [ 330.155269][T11285] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 330.155301][T11285] ? __pfx___do_splice+0x10/0x10 [ 330.155357][T11285] exit_to_user_mode_loop+0x139/0x700 [ 330.155381][T11285] ? rcu_is_watching+0x13/0xc0 [ 330.155400][T11285] __do_fast_syscall_32+0x59f/0x8b0 [ 330.155426][T11285] do_fast_syscall_32+0x32/0x70 [ 330.155448][T11285] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 330.155467][T11285] RIP: 0023:0xf7f12fea [ 330.155477][T11285] Code: 19 85 d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 330.155489][T11285] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000139 [ 330.155502][T11285] RAX: 0000000000000139 RBX: 0000000000000004 RCX: 0000000000000000 [ 330.155509][T11285] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000f3a [ 330.155516][T11285] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 330.155523][T11285] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 330.155530][T11285] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 330.155544][T11285] [ 330.245040][T11288] FAULT_INJECTION: forcing a failure. [ 330.245040][T11288] name fail_futex, interval 1, probability 0, space 0, times 0 [ 330.245075][T11288] CPU: 2 UID: 0 PID: 11288 Comm: syz.2.1657 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.245104][T11288] Tainted: [L]=SOFTLOCKUP [ 330.245113][T11288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 330.245126][T11288] Call Trace: [ 330.245133][T11288] [ 330.245140][T11288] dump_stack_lvl+0x100/0x190 [ 330.245172][T11288] should_fail_ex.cold+0x5/0xa [ 330.245199][T11288] get_futex_key+0x1d0/0x14f0 [ 330.245232][T11288] ? __pfx_get_futex_key+0x10/0x10 [ 330.245262][T11288] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 330.245300][T11288] futex_wait_setup+0x91/0x540 [ 330.245329][T11288] __futex_wait+0x19f/0x300 [ 330.245355][T11288] ? __pfx___futex_wait+0x10/0x10 [ 330.245376][T11288] ? __pfx_try_to_wake_up+0x10/0x10 [ 330.245402][T11288] ? futex_hash+0x311/0x400 [ 330.245432][T11288] ? __pfx_futex_wake_mark+0x10/0x10 [ 330.245459][T11288] ? find_held_lock+0x2b/0x80 [ 330.245480][T11288] ? futex_wake+0x4ea/0x5e0 [ 330.245509][T11288] futex_wait+0xe6/0x370 [ 330.245532][T11288] ? __pfx_futex_wait+0x10/0x10 [ 330.245562][T11288] ? find_held_lock+0x2b/0x80 [ 330.245587][T11288] do_futex+0x265/0x440 [ 330.245607][T11288] ? __pfx_do_futex+0x10/0x10 [ 330.245628][T11288] ? fput+0x7c/0x100 [ 330.245651][T11288] __ia32_sys_futex_time32+0x2f4/0x470 [ 330.245676][T11288] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 330.245709][T11288] __do_fast_syscall_32+0x13a/0x8b0 [ 330.245741][T11288] do_fast_syscall_32+0x32/0x70 [ 330.245768][T11288] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 330.245791][T11288] RIP: 0023:0xf7f12fec [ 330.245813][T11288] Code: Unable to access opcode bytes at 0xf7f12fc2. [ 330.245821][T11288] RSP: 002b:00000000f53d65bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 330.245840][T11288] RAX: ffffffffffffffda RBX: 00000000f73d4f88 RCX: 0000000000000080 [ 330.245854][T11288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73d4f8c [ 330.245867][T11288] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 330.245879][T11288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.245891][T11288] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 330.245914][T11288] [ 331.325676][ T5529] usb 8-1: USB disconnect, device number 11 [ 332.063467][T11336] hpfs: hpfs_map_sector(): read error [ 332.209452][ T5744] Bluetooth: hci2: unexpected event for opcode 0x041c [ 332.571010][ T25] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 332.743997][ T25] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 332.745285][ T25] usb 7-1: config 0 has no interfaces? [ 332.749729][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.749754][ T25] usb 7-1: Product: syz [ 332.749765][ T25] usb 7-1: Manufacturer: syz [ 332.749776][ T25] usb 7-1: SerialNumber: syz [ 332.752265][ T25] usb 7-1: config 0 descriptor?? [ 333.403189][T11356] netlink: 'syz.3.1674': attribute type 1 has an invalid length. [ 333.462876][T11356] bridge2: entered promiscuous mode [ 333.471794][T11356] bond1: (slave bridge2): making interface the new active one [ 333.475560][T11356] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 333.536051][T11360] hpfs: hpfs_map_sector(): read error [ 335.417546][ T5851] usb 7-1: USB disconnect, device number 6 [ 336.042490][T11443] netlink: 'syz.0.1699': attribute type 2 has an invalid length. [ 336.279664][ T5744] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 336.279755][ T5744] Bluetooth: hci2: Injecting HCI hardware error event [ 336.284716][ T5744] Bluetooth: hci2: hardware error 0x00 [ 337.381025][ T5851] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 337.531905][ T5851] usb 8-1: Using ep0 maxpacket: 16 [ 337.532408][ T5851] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 337.534364][ T5851] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 337.534381][ T5851] usb 8-1: config 0 interface 0 has no altsetting 0 [ 337.536014][ T5851] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.536027][ T5851] usb 8-1: Product: syz [ 337.536035][ T5851] usb 8-1: Manufacturer: syz [ 337.536042][ T5851] usb 8-1: SerialNumber: syz [ 337.538267][ T5851] usb 8-1: config 0 descriptor?? [ 337.770877][ C1] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 337.784898][ T5851] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input13 [ 337.826588][ T5851] imon:send_packet: packet tx failed (-71) [ 337.851943][ T5851] imon 8-1:0.0: panel buttons/knobs setup failed [ 337.876658][ T5755] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 337.878365][ T5755] CPU: 2 UID: 0 PID: 5755 Comm: kworker/u34:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 337.878389][ T5755] Tainted: [L]=SOFTLOCKUP [ 337.878394][ T5755] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 337.878403][ T5755] Workqueue: hci3 hci_rx_work [ 337.878423][ T5755] Call Trace: [ 337.878427][ T5755] [ 337.878433][ T5755] dump_stack_lvl+0x100/0x190 [ 337.878460][ T5755] sysfs_warn_dup.cold+0x1c/0x28 [ 337.878482][ T5755] sysfs_create_dir_ns+0x24b/0x2b0 [ 337.878498][ T5755] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 337.878510][ T5755] ? find_held_lock+0x2b/0x80 [ 337.878521][ T5755] ? kobject_add_internal+0x25f/0x930 [ 337.878533][ T5755] ? kobject_add_internal+0x25f/0x930 [ 337.878546][ T5755] ? do_raw_spin_unlock+0x145/0x1e0 [ 337.878564][ T5755] kobject_add_internal+0x2c8/0x930 [ 337.878580][ T5755] kobject_add+0x16a/0x1e0 [ 337.878593][ T5755] ? __pfx_kobject_add+0x10/0x10 [ 337.878603][ T5755] ? class_to_subsys+0x10f/0x150 [ 337.878623][ T5755] ? kobject_put+0xb9/0x640 [ 337.878632][ T5755] ? _raw_spin_unlock+0x28/0x50 [ 337.878651][ T5755] device_add+0x294/0x1970 [ 337.878668][ T5755] ? __pfx_dev_set_name+0x10/0x10 [ 337.878686][ T5755] ? __pfx_device_add+0x10/0x10 [ 337.878716][ T5755] ? mgmt_send_event_skb+0x2fb/0x460 [ 337.878735][ T5755] hci_conn_add_sysfs+0x1a3/0x260 [ 337.878752][ T5755] le_conn_complete_evt+0x122f/0x2130 [ 337.878773][ T5755] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 337.878788][ T5755] ? hci_event_packet+0x186/0xcd0 [ 337.878806][ T5755] hci_le_conn_complete_evt+0x23c/0x3a0 [ 337.878823][ T5755] ? skb_pull_data+0x15f/0x1e0 [ 337.878842][ T5755] hci_le_meta_evt+0x34a/0x5f0 [ 337.878858][ T5755] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 337.878873][ T5755] hci_event_packet+0x51c/0xcd0 [ 337.878887][ T5755] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 337.878901][ T5755] ? __pfx_hci_event_packet+0x10/0x10 [ 337.878917][ T5755] ? lockdep_hardirqs_on+0x7d/0x110 [ 337.878936][ T5755] hci_rx_work+0x451/0xfc0 [ 337.878951][ T5755] process_one_work+0xac7/0x1b10 [ 337.878972][ T5755] ? __pfx_process_one_work+0x10/0x10 [ 337.878986][ T5755] ? lock_acquire+0x1d1/0x380 [ 337.879005][ T5755] ? __pfx_hci_rx_work+0x10/0x10 [ 337.879019][ T5755] worker_thread+0x5ef/0xe50 [ 337.879038][ T5755] ? kthread+0x13a/0x450 [ 337.879050][ T5755] ? __pfx_worker_thread+0x10/0x10 [ 337.879063][ T5755] kthread+0x373/0x450 [ 337.879074][ T5755] ? __pfx_kthread+0x10/0x10 [ 337.879087][ T5755] ret_from_fork+0x730/0xd60 [ 337.879106][ T5755] ? __pfx_ret_from_fork+0x10/0x10 [ 337.879123][ T5755] ? native_load_gs_index+0x1e/0xc0 [ 337.879137][ T5755] ? __switch_to+0x800/0x10f0 [ 337.879151][ T5755] ? __pfx_kthread+0x10/0x10 [ 337.879164][ T5755] ret_from_fork_asm+0x1a/0x30 [ 337.879181][ T5755] [ 337.880418][ T5755] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 337.880455][ T5755] Bluetooth: hci3: failed to register connection device [ 337.914569][ T5851] rc_core: IR keymap rc-imon-pad not found [ 337.914591][ T5851] Registered IR keymap rc-empty [ 337.914673][ T5851] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 337.914694][ T5851] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 337.922224][ T5851] imon:send_packet: packet tx failed (-71) [ 337.942369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 337.951474][ T5851] imon 8-1:0.0: remote input dev register failed [ 337.951548][ T5851] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 337.995339][ T5851] imon 8-1:0.0: unable to initialize intf0, err 0 [ 337.995355][ T5851] imon:imon_probe: failed to initialize context! [ 337.995362][ T5851] imon 8-1:0.0: unable to register, err -19 [ 337.999712][ T5851] usb 8-1: USB disconnect, device number 12 [ 338.082153][T11489] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 338.356067][ T5744] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 338.379654][T11502] netlink: zone id is out of range [ 338.379742][T11502] netlink: zone id is out of range [ 338.380042][T11502] netlink: set zone limit has 4 unknown bytes [ 338.779694][T11517] 8021q: adding VLAN 0 to HW filter on device bond1 [ 338.784805][T11517] 8021q: adding VLAN 0 to HW filter on device bond2 [ 338.790586][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 339.002221][T11523] hpfs: hpfs_map_sector(): read error [ 339.211118][ T8584] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 339.364104][ T8584] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 339.380467][ T8584] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.380545][ T8584] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 339.380587][ T8584] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.382460][ T8584] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 339.382483][ T8584] usb 8-1: Product: syz [ 339.382497][ T8584] usb 8-1: Manufacturer: syz [ 339.386004][T11522] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 339.388055][ T8584] garmin_gps 8-1:1.0: Garmin GPS usb/tty converter detected [ 339.397990][T11525] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 339.425633][ T8584] usb 8-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 339.471625][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 339.482599][T11528] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1733'. [ 339.729931][ T8584] usb 8-1: USB disconnect, device number 13 [ 339.740292][ T8584] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 339.743511][ T8584] garmin_gps 8-1:1.0: device disconnected [ 340.532192][T11544] 9p: Bad value for 'version' [ 341.171895][T11558] mmap: syz.2.1742 (11558) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 341.232675][T11560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1743'. [ 341.288349][T11563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1743'. [ 341.291182][T11563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1743'. [ 342.125070][T11577] 9p: Bad value for 'version' [ 342.709856][T11589] fuse: fd is not a fuse device [ 342.952051][T11598] Cannot find add_set index 1 as target [ 343.774341][T11612] 9p: Bad value for 'version' [ 344.153596][T11618] comedi comedi1: Minor 2 could not be opened [ 344.405467][ T5755] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.421032][ T5755] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.498671][ T5755] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.499793][ T5755] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.500323][ T5755] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.925668][T10891] syz_tun (unregistering): left allmulticast mode [ 345.158015][T10891] svc: failed to register nfsdv3 RPC service (errno 111). [ 345.177144][T10891] svc: failed to register nfsaclv3 RPC service (errno 111). [ 345.180550][T10891] failed to unregister tcp with rpcbind [ 345.184597][T10891] svc: failed to register nfsdv3 RPC service (errno 97). [ 345.193184][T10891] svc: failed to register nfsaclv3 RPC service (errno 97). [ 345.198166][T10891] failed to unregister tcp with rpcbind [ 345.381263][T11672] comedi comedi1: Minor 2 could not be opened [ 345.448564][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.616557][T11678] binder: 11677:11678 ioctl 4018620d 0 returned -22 [ 345.624881][T11678] jffs2: notice: (11678) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 345.670152][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.805715][ T13] bond0: (slave netdevsim1): Releasing backup interface [ 345.819846][T11691] netlink: 'syz.3.1774': attribute type 1 has an invalid length. [ 345.839902][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.868507][T11691] 8021q: adding VLAN 0 to HW filter on device bond3 [ 345.894580][T11691] 8021q: adding VLAN 0 to HW filter on device bond3 [ 345.895179][T11691] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 345.897972][T11691] bond3: (slave gre1): Error -95 calling set_mac_address [ 345.972541][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.013299][T11694] gretap1: entered promiscuous mode [ 346.019222][T11694] bond3: (slave gretap1): making interface the new active one [ 346.023709][T11694] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 346.053438][T11691] macvlan2: entered promiscuous mode [ 346.053502][T11691] macvlan2: entered allmulticast mode [ 346.053919][T11691] bond3: entered promiscuous mode [ 346.065498][T11691] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 346.073217][T11691] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 346.080419][T11691] bond3: left promiscuous mode [ 346.161710][T11640] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.161900][T11640] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.162030][T11640] bridge_slave_0: entered allmulticast mode [ 346.163318][T11640] bridge_slave_0: entered promiscuous mode [ 346.165216][T11640] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.165322][T11640] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.165412][T11640] bridge_slave_1: entered allmulticast mode [ 346.166768][T11640] bridge_slave_1: entered promiscuous mode [ 346.277343][T11640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.280171][T11640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.312469][T11640] team0: Port device team_slave_0 added [ 346.328470][T11640] team0: Port device team_slave_1 added [ 346.347701][T11640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.347758][T11640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.347826][T11640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.391769][T11640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.391851][T11640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.392151][T11640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.427120][ T13] bridge_slave_1: left allmulticast mode [ 346.427255][ T13] bridge_slave_1: left promiscuous mode [ 346.435076][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.456363][ T13] bridge_slave_0: left allmulticast mode [ 346.456491][ T13] bridge_slave_0: left promiscuous mode [ 346.456907][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.592943][ T5744] Bluetooth: hci4: command tx timeout [ 346.823325][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.836374][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.843186][ T13] bond0 (unregistering): Released all slaves [ 346.846657][ T13] bond1 (unregistering): Released all slaves [ 346.940760][T11640] hsr_slave_0: entered promiscuous mode [ 346.947739][T11640] hsr_slave_1: entered promiscuous mode [ 346.948353][T11640] debugfs: 'hsr0' already exists in 'hsr' [ 346.949533][T11640] Cannot create hsr debugfs directory [ 347.044866][T11720] comedi comedi1: Minor 2 could not be opened [ 347.918850][ T5452] 8021q: adding VLAN 0 to HW filter on device eth2 [ 348.031384][ T9151] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 348.184339][ T9151] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 348.185590][ T9151] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 348.185618][ T9151] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.185636][ T9151] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 348.185668][ T9151] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.195917][ T9151] usb 8-1: config 0 descriptor?? [ 348.439770][ T13] hsr_slave_0: left promiscuous mode [ 348.443707][ T13] hsr_slave_1: left promiscuous mode [ 348.445346][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.445408][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.451830][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.451860][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.481655][ T13] veth1_macvtap: left promiscuous mode [ 348.481803][ T13] veth0_macvtap: left promiscuous mode [ 348.482410][ T13] veth1_vlan: left promiscuous mode [ 348.482493][ T13] veth0_vlan: left promiscuous mode [ 348.624100][ T9151] hid_parser_main: 5 callbacks suppressed [ 348.624183][ T9151] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 348.624218][ T9151] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 348.624249][ T9151] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 348.624281][ T9151] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 348.624326][ T9151] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 348.624367][ T9151] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 348.624408][ T9151] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 348.634184][ T9151] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 348.671292][ T5744] Bluetooth: hci4: command tx timeout [ 348.818401][T11730] FAULT_INJECTION: forcing a failure. [ 348.818401][T11730] name failslab, interval 1, probability 0, space 0, times 0 [ 348.818498][T11730] CPU: 3 UID: 0 PID: 11730 Comm: syz.3.1782 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.818534][T11730] Tainted: [L]=SOFTLOCKUP [ 348.818540][T11730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 348.818548][T11730] Call Trace: [ 348.818553][T11730] [ 348.818560][T11730] dump_stack_lvl+0x100/0x190 [ 348.818581][T11730] should_fail_ex.cold+0x5/0xa [ 348.818598][T11730] should_failslab+0xc2/0x120 [ 348.818616][T11730] __kmalloc_noprof+0xfc/0x840 [ 348.818630][T11730] ? lsm_blob_alloc+0x68/0x90 [ 348.818648][T11730] lsm_blob_alloc+0x68/0x90 [ 348.818674][T11730] security_sb_alloc+0x25/0x240 [ 348.818690][T11730] sget_fc+0x3ca/0x1f20 [ 348.818704][T11730] ? __pfx_set_anon_super_fc+0x10/0x10 [ 348.818722][T11730] ? __pfx_sget_fc+0x10/0x10 [ 348.818736][T11730] ? lockdep_init_map_type+0x5c/0x250 [ 348.818753][T11730] ? __raw_spin_lock_init+0x3a/0x110 [ 348.818780][T11730] ? __pfx_fuse_fill_super+0x10/0x10 [ 348.818800][T11730] get_tree_nodev+0x28/0x190 [ 348.818818][T11730] fuse_get_tree+0x30e/0x490 [ 348.818833][T11730] vfs_get_tree+0x92/0x320 [ 348.818849][T11730] path_mount+0x7d0/0x24c0 [ 348.818866][T11730] ? __pfx_path_mount+0x10/0x10 [ 348.818881][T11730] ? lockdep_hardirqs_on+0x7d/0x110 [ 348.818898][T11730] ? putname+0xb1/0x110 [ 348.818910][T11730] ? kmem_cache_free+0x127/0x6c0 [ 348.818937][T11730] ? __ia32_sys_mount+0x292/0x310 [ 348.818959][T11730] __ia32_sys_mount+0x292/0x310 [ 348.818982][T11730] ? __pfx___ia32_sys_mount+0x10/0x10 [ 348.819013][T11730] __do_fast_syscall_32+0x13a/0x8b0 [ 348.819036][T11730] ? lockdep_hardirqs_on+0x7d/0x110 [ 348.819060][T11730] do_fast_syscall_32+0x32/0x70 [ 348.819085][T11730] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 348.819107][T11730] RIP: 0023:0xf706efec [ 348.819129][T11730] Code: Unable to access opcode bytes at 0xf706efc2. [ 348.819135][T11730] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 348.819146][T11730] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800020c0 [ 348.819154][T11730] RDX: 0000000080002100 RSI: 0000000000000080 RDI: 0000000080000580 [ 348.819161][T11730] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 348.819167][T11730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.819174][T11730] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 348.819188][T11730] [ 348.859060][ T5837] usb 8-1: USB disconnect, device number 14 [ 349.035750][ T13] team0 (unregistering): Port device team_slave_1 removed [ 349.056299][ T13] team0 (unregistering): Port device team_slave_0 removed [ 349.069878][T11743] netlink: 'syz.2.1784': attribute type 1 has an invalid length. [ 349.069941][T11743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1784'. [ 349.236873][T11640] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 349.243555][T11640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 349.245098][ T5452] 8021q: adding VLAN 0 to HW filter on device eth3 [ 349.246686][T11640] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 349.255992][T11640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 349.265725][T11640] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 349.279357][T11640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 349.280717][T11640] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 349.290305][T11640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 349.469988][T11640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.507262][T11640] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.514359][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.514461][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.533897][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.534070][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.665109][ T5452] 8021q: adding VLAN 0 to HW filter on device eth4 [ 349.710384][ T13] IPVS: stop unused estimator thread 0... [ 349.924980][ T5452] 8021q: adding VLAN 0 to HW filter on device eth5 [ 349.956021][T11640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.962495][ T5529] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 350.114073][ T5529] usb 8-1: New USB device found, idVendor=ee8d, idProduct=0000, bcdDevice= 0.00 [ 350.114163][ T5529] usb 8-1: no configurations [ 350.114324][ T5529] usb 8-1: can't read configurations, error -22 [ 350.222019][T11640] veth0_vlan: entered promiscuous mode [ 350.230599][T11640] veth1_vlan: entered promiscuous mode [ 350.241871][ T5529] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 350.249702][T11640] veth0_macvtap: entered promiscuous mode [ 350.252631][T11640] veth1_macvtap: entered promiscuous mode [ 350.260697][T11640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.266971][T11640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.341207][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.344242][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.344332][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.361058][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.392563][ T1686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.392627][ T1686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.412259][ T5529] usb 8-1: New USB device found, idVendor=ee8d, idProduct=0000, bcdDevice= 0.00 [ 350.416413][ T5529] usb 8-1: no configurations [ 350.418409][ T5529] usb 8-1: can't read configurations, error -22 [ 350.427027][ T5529] usb usb8-port1: attempt power cycle [ 350.466895][T10489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.470155][T10489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.751129][ T5744] Bluetooth: hci4: command tx timeout [ 350.851105][ T5529] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 350.892587][ T5529] usb 8-1: New USB device found, idVendor=ee8d, idProduct=0000, bcdDevice= 0.00 [ 350.909887][ T5529] usb 8-1: no configurations [ 350.915710][ T5529] usb 8-1: can't read configurations, error -22 [ 350.973833][ T9151] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 351.083778][ T5529] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 351.113149][ T5529] usb 8-1: New USB device found, idVendor=ee8d, idProduct=0000, bcdDevice= 0.00 [ 351.116847][ T5529] usb 8-1: no configurations [ 351.118757][ T5529] usb 8-1: can't read configurations, error -22 [ 351.125429][ T5529] usb usb8-port1: unable to enumerate USB device [ 351.161163][ T9151] usb 9-1: Using ep0 maxpacket: 16 [ 351.161719][ T9151] usb 9-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 351.162686][ T9151] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 351.162710][ T9151] usb 9-1: config 0 interface 0 has no altsetting 0 [ 351.164638][ T9151] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.164658][ T9151] usb 9-1: Product: syz [ 351.164670][ T9151] usb 9-1: Manufacturer: syz [ 351.164681][ T9151] usb 9-1: SerialNumber: syz [ 351.167541][ T9151] usb 9-1: config 0 descriptor?? [ 351.387342][ C1] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 351.394388][ T9151] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input15 [ 351.409946][ T9151] imon:send_packet: packet tx failed (-71) [ 351.431095][ T9151] imon 9-1:0.0: panel buttons/knobs setup failed [ 351.481630][ T9151] rc_core: IR keymap rc-imon-pad not found [ 351.481682][ T9151] Registered IR keymap rc-empty [ 351.481765][ T9151] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 351.481779][ T9151] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 351.482050][ T9151] imon:send_packet: packet tx failed (-71) [ 351.501097][ T9151] imon 9-1:0.0: remote input dev register failed [ 351.501244][ T9151] imon 9-1:0.0: imon_init_intf0: rc device setup failed [ 351.534291][ T9151] imon 9-1:0.0: unable to initialize intf0, err 0 [ 351.534378][ T9151] imon:imon_probe: failed to initialize context! [ 351.534726][ T9151] imon 9-1:0.0: unable to register, err -19 [ 351.537477][ T9151] usb 9-1: USB disconnect, device number 2 [ 351.941052][ T9151] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 352.102404][ T9151] usb 9-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 352.103934][ T9151] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 352.103963][ T9151] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 352.103983][ T9151] usb 9-1: config 0 interface 0 has no altsetting 0 [ 352.106101][ T9151] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.106123][ T9151] usb 9-1: Product: syz [ 352.106136][ T9151] usb 9-1: Manufacturer: syz [ 352.106148][ T9151] usb 9-1: SerialNumber: syz [ 352.111341][ T9151] usb 9-1: config 0 descriptor?? [ 352.112136][T11805] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 352.324262][ C1] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 352.329381][ T9151] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input17 [ 352.611571][ T9151] rc_core: IR keymap rc-imon-pad not found [ 352.616058][ T9151] Registered IR keymap rc-empty [ 352.618749][ T9151] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 352.618813][ T9151] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 352.752294][ T9151] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 352.772983][ T9151] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input18 [ 352.831403][ T5744] Bluetooth: hci4: command tx timeout [ 353.241249][ T9151] imon 9-1:0.0: iMON device (15c2:0045, intf0) on usb<9:3> initialized [ 355.114844][ T9151] usb 9-1: USB disconnect, device number 3 [ 355.247964][T11857] hpfs: hpfs_map_sector(): read error [ 355.386167][T11860] netlink: del zone limit has 4 unknown bytes [ 355.392476][T11860] overlayfs: failed to clone upperpath [ 355.686797][T11871] syzkaller0: entered promiscuous mode [ 355.686872][T11871] syzkaller0: entered allmulticast mode [ 356.076746][T11889] fuse: fd is not a fuse device [ 356.806780][T11901] jffs2: notice: (11901) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 357.709184][T11913] hpfs: hpfs_map_sector(): read error [ 357.894731][ T43] kauditd_printk_skb: 31 callbacks suppressed [ 357.894887][ T43] audit: type=1800 audit(1788720475.442:659): pid=11917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1824" name="(" dev="sda1" ino=2039 res=0 errno=0 [ 357.997580][ T43] audit: type=1804 audit(1788720475.542:660): pid=11917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1824" name="/newroot/461/mnt/(" dev="sda1" ino=2039 res=1 errno=0 [ 359.549217][T11941] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 359.550343][T11941] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 359.907640][T11947] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 359.907694][T11947] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 359.910275][T11947] vhci_hcd vhci_hcd.0: Device attached [ 359.912725][T11949] vhci_hcd: connection closed [ 359.918075][ T13] vhci_hcd vhci_hcd.2: stop threads [ 359.923580][ T13] vhci_hcd vhci_hcd.2: release socket [ 359.923836][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 360.121819][T11952] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input19 [ 360.370946][ T8584] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 360.526209][ T8584] usb 8-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 360.527159][ T8584] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 360.527200][ T8584] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 360.527211][ T8584] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 360.527229][ T8584] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.542533][T11963] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 360.542652][T11963] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 360.544673][ T8584] pl2303 8-1:1.0: required interrupt-in endpoint missing [ 360.623227][T11973] jffs2: notice: (11973) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 360.654633][T11973] overlayfs: failed to clone upperpath [ 360.793415][T11984] overlayfs: failed to resolve './file0': -2 [ 360.959087][ T42] usb 8-1: USB disconnect, device number 19 [ 360.973331][ T57] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 361.180944][ T57] usb 9-1: Using ep0 maxpacket: 16 [ 361.181985][ T57] usb 9-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 361.183321][ T57] usb 9-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 361.183349][ T57] usb 9-1: config 0 interface 0 has no altsetting 0 [ 361.183377][ T57] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.187314][ T57] usb 9-1: config 0 descriptor?? [ 361.431889][ T57] usbhid 9-1:0.0: can't add hid device: -71 [ 361.432031][ T57] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 361.443410][ T57] usb 9-1: USB disconnect, device number 4 [ 362.592640][T12009] syz.0.1844: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 362.592867][T12009] CPU: 1 UID: 0 PID: 12009 Comm: syz.0.1844 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.592886][T12009] Tainted: [L]=SOFTLOCKUP [ 362.592892][T12009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 362.592899][T12009] Call Trace: [ 362.592904][T12009] [ 362.592910][T12009] dump_stack_lvl+0x100/0x190 [ 362.592929][T12009] warn_alloc.cold+0x9e/0xb2 [ 362.592942][T12009] ? __pfx_warn_alloc+0x10/0x10 [ 362.592968][T12009] ? __lock_acquire+0x4c5/0x1ec0 [ 362.592988][T12009] __vmalloc_node_range_noprof+0x123b/0x1420 [ 362.593009][T12009] ? do_replace+0x1c6/0x490 [ 362.593021][T12009] ? pick_eevdf+0x1ad/0x880 [ 362.593037][T12009] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 362.593054][T12009] ? __lock_acquire+0x4c5/0x1ec0 [ 362.593072][T12009] ? do_replace+0x1c6/0x490 [ 362.593083][T12009] __vmalloc_node_noprof+0xad/0xf0 [ 362.593098][T12009] ? do_replace+0x1c6/0x490 [ 362.593111][T12009] __vmalloc_noprof+0xa3/0x120 [ 362.593125][T12009] ? __pfx___vmalloc_noprof+0x10/0x10 [ 362.593144][T12009] do_replace+0x1c6/0x490 [ 362.593157][T12009] ? __pfx_do_replace+0x10/0x10 [ 362.593174][T12009] ? register_lock_class+0x3f/0x7b0 [ 362.593191][T12009] compat_do_replace+0x589/0x7a0 [ 362.593205][T12009] ? __pfx_compat_do_replace+0x10/0x10 [ 362.593225][T12009] ? bpf_lsm_capable+0x9/0x10 [ 362.593241][T12009] ? security_capable+0x80/0x260 [ 362.593256][T12009] do_ebt_set_ctl+0x3f4/0x4a0 [ 362.593270][T12009] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 362.593283][T12009] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 362.593303][T12009] ? nf_sockopt_find.isra.0+0x222/0x290 [ 362.593320][T12009] nf_setsockopt+0x8d/0xf0 [ 362.593335][T12009] ip_setsockopt+0xcb/0xf0 [ 362.593352][T12009] tcp_setsockopt+0xa7/0x100 [ 362.593365][T12009] smc_setsockopt+0x1b6/0xa40 [ 362.593378][T12009] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 362.593396][T12009] ? __pfx_smc_setsockopt+0x10/0x10 [ 362.593410][T12009] ? aa_sock_opt_perm+0x114/0x1e0 [ 362.593423][T12009] ? __pfx_smc_setsockopt+0x10/0x10 [ 362.593437][T12009] do_sock_setsockopt+0xf3/0x1d0 [ 362.593455][T12009] __sys_setsockopt+0x119/0x190 [ 362.593473][T12009] __ia32_sys_setsockopt+0xbc/0x160 [ 362.593487][T12009] ? __do_fast_syscall_32+0xb3/0x8b0 [ 362.593503][T12009] ? lockdep_hardirqs_on+0x7d/0x110 [ 362.593525][T12009] __do_fast_syscall_32+0x13a/0x8b0 [ 362.593568][T12009] do_fast_syscall_32+0x32/0x70 [ 362.593585][T12009] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 362.593603][T12009] RIP: 0023:0xf6ffefec [ 362.593617][T12009] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 362.593622][T12009] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 362.593635][T12009] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000000 [ 362.593642][T12009] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108 [ 362.593650][T12009] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 362.593658][T12009] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 362.593666][T12009] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 362.593679][T12009] [ 362.596176][T12009] Mem-Info: [ 362.596191][T12009] active_anon:4951 inactive_anon:1344 isolated_anon:0 [ 362.596191][T12009] active_file:6088 inactive_file:10437 isolated_file:0 [ 362.596191][T12009] unevictable:1000 dirty:39 writeback:1 [ 362.596191][T12009] slab_reclaimable:6138 slab_unreclaimable:66774 [ 362.596191][T12009] mapped:24183 shmem:1494 pagetables:1296 [ 362.596191][T12009] sec_pagetables:307 bounce:0 [ 362.596191][T12009] kernel_misc_reclaimable:0 [ 362.596191][T12009] free:40708 free_pcp:10635 free_cma:0 [ 362.596225][T12009] Node 0 active_anon:32kB inactive_anon:112kB active_file:24kB inactive_file:128kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8620kB pagetables:1500kB sec_pagetables:1144kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 362.596258][T12009] Node 1 active_anon:19772kB inactive_anon:5264kB active_file:24328kB inactive_file:41620kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:96704kB dirty:156kB writeback:4kB shmem:3976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5920kB pagetables:3684kB sec_pagetables:84kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 362.596290][T12009] Node 0 DMA free:2052kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:492kB local_pcp:148kB free_cma:0kB [ 362.596325][T12009] lowmem_reserve[]: 0 277 277 277 277 [ 362.596347][T12009] Node 0 DMA32 free:15584kB boost:0kB min:12628kB low:15784kB high:18940kB reserved_highatomic:0kB free_highatomic:0kB active_anon:32kB inactive_anon:112kB active_file:24kB inactive_file:128kB unevictable:2000kB writepending:0kB zspages:0kB present:1032196kB managed:284620kB mlocked:0kB bounce:0kB free_pcp:6004kB local_pcp:2392kB free_cma:0kB [ 362.596401][T12009] lowmem_reserve[]: 0 0 0 0 0 [ 362.596421][T12009] Node 1 DMA32 free:145196kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:19772kB inactive_anon:5264kB active_file:24328kB inactive_file:41620kB unevictable:2000kB writepending:160kB zspages:2056kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:36044kB local_pcp:8120kB free_cma:0kB [ 362.596456][T12009] lowmem_reserve[]: 0 0 0 0 0 [ 362.596477][T12009] Node 0 DMA: 53*4kB (UM) 14*8kB (UM) 6*16kB (UM) 13*32kB (UM) 7*64kB (UM) 4*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2052kB [ 362.596584][T12009] Node 0 DMA32: 8*4kB (ME) 42*8kB (UE) 17*16kB (UME) 77*32kB (UME) 49*64kB (UME) 29*128kB (UME) 12*256kB (UME) 3*512kB (M) 1*1024kB (U) 0*2048kB 0*4096kB = 15584kB [ 362.596677][T12009] Node 1 DMA32: 223*4kB (UME) 122*8kB (ME) 239*16kB (UME) 128*32kB (UME) 152*64kB (UME) 125*128kB (UME) 82*256kB (UME) 41*512kB (UME) 32*1024kB (UM) 3*2048kB (UM) 7*4096kB (UM) = 145084kB [ 362.596779][T12009] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 362.596787][T12009] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 362.596795][T12009] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 362.596804][T12009] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 362.596812][T12009] 18743 total pagecache pages [ 362.596816][T12009] 680 pages in swap cache [ 362.596820][T12009] Free swap = 118088kB [ 362.596824][T12009] Total swap = 124996kB [ 362.596828][T12009] 524155 pages RAM [ 362.596832][T12009] 0 pages HighMem/MovableOnly [ 362.596835][T12009] 212108 pages reserved [ 362.596839][T12009] 0 pages cma reserved [ 363.109272][T12012] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 363.365223][T12023] Invalid ELF header magic: != ELF [ 364.552246][T12061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1860'. [ 364.609256][T12066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1861'. [ 365.548123][T12090] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 366.500602][T12106] syzkaller0: entered promiscuous mode [ 366.500810][T12106] syzkaller0: entered allmulticast mode [ 366.937756][ T43] audit: type=1804 audit(1788720484.492:661): pid=12112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1872" name="/newroot/495/mnt/(" dev="sda1" ino=2039 res=1 errno=0 [ 367.477950][T12128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1879'. [ 367.492151][T12128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1879'. [ 368.483122][ C3] vcan0: j1939_tp_rxtimer: 0xffff88801be73800: rx timeout, send abort [ 368.983253][ C3] vcan0: j1939_tp_rxtimer: 0xffff88801be73400: rx timeout, send abort [ 368.983419][ C3] vcan0: j1939_tp_rxtimer: 0xffff88801be73800: abort rx timeout. Force session deactivation [ 369.483419][ C3] vcan0: j1939_tp_rxtimer: 0xffff88801be73400: abort rx timeout. Force session deactivation [ 371.228488][T12143] syz.2.1882 (12143) used greatest stack depth: 18752 bytes left [ 372.333199][ T43] audit: type=1326 audit(1788720489.882:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12195 comm="syz.4.1896" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x0 [ 372.534113][ T43] audit: type=1804 audit(1788720490.092:663): pid=12197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1896" name="/newroot/18/file1" dev="fuse" ino=1 res=1 errno=0 [ 372.542642][ T43] audit: type=1800 audit(1788720490.092:664): pid=12197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1896" name="/" dev="fuse" ino=1 res=0 errno=0 [ 376.051505][T12232] comedi comedi0: das16m1: I/O base address not correctly aligned [ 376.645629][T12232] usbip-vudc usbip-vudc.0: gadget not bound [ 377.301001][ T2327] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 377.451912][ T2327] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 377.454925][ T2327] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 377.454950][ T2327] usb 7-1: Product: syz [ 377.454961][ T2327] usb 7-1: Manufacturer: syz [ 377.454973][ T2327] usb 7-1: SerialNumber: syz [ 377.459605][ T2327] usb 7-1: config 0 descriptor?? [ 377.462978][ T2327] ch341 7-1:0.0: ch341-uart converter detected [ 378.445082][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.538977][ T2327] usb 7-1: failed to receive control message: -110 [ 378.539206][ T2327] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 379.208816][ T8584] usb 7-1: USB disconnect, device number 7 [ 379.210334][ T8584] ch341 7-1:0.0: device disconnected [ 379.351190][T12281] fuse: fd is not a fuse device [ 379.530404][T12281] CIFS: Attempting to mount //127.0.0.1/share [ 379.538362][T12281] CIFS: VFS: Error connecting to socket. Aborting operation. [ 379.545447][T12281] CIFS: VFS: cifs_mount failed w/return code = -4 [ 380.440264][T12299] netlink: 'syz.2.1923': attribute type 10 has an invalid length. [ 380.461596][T12299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 380.463282][T12299] : (slave netdevsim1): Enslaving as an active interface with an up link [ 380.498703][T12299] warn_alloc: 1 callbacks suppressed [ 380.498819][T12299] syz.2.1923: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 380.498957][T12299] CPU: 3 UID: 0 PID: 12299 Comm: syz.2.1923 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.498993][T12299] Tainted: [L]=SOFTLOCKUP [ 380.499002][T12299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 380.499016][T12299] Call Trace: [ 380.499025][T12299] [ 380.499035][T12299] dump_stack_lvl+0x100/0x190 [ 380.499067][T12299] warn_alloc.cold+0x9e/0xb2 [ 380.499140][T12299] ? __pfx_warn_alloc+0x10/0x10 [ 380.499180][T12299] ? __lock_acquire+0x4c5/0x1ec0 [ 380.499218][T12299] ? __lock_acquire+0x4c5/0x1ec0 [ 380.499248][T12299] ? rcu_is_watching+0x13/0xc0 [ 380.499273][T12299] __vmalloc_node_range_noprof+0x123b/0x1420 [ 380.499304][T12299] ? do_raw_spin_lock+0x128/0x260 [ 380.499336][T12299] ? find_held_lock+0x2b/0x80 [ 380.499359][T12299] ? debug_object_activate+0x343/0x4b0 [ 380.499383][T12299] ? do_replace+0x1c6/0x490 [ 380.499406][T12299] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 380.499437][T12299] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 380.499472][T12299] ? __lock_acquire+0x4c5/0x1ec0 [ 380.499509][T12299] ? do_replace+0x1c6/0x490 [ 380.499533][T12299] __vmalloc_node_noprof+0xad/0xf0 [ 380.499559][T12299] ? do_replace+0x1c6/0x490 [ 380.499581][T12299] __vmalloc_noprof+0xa3/0x120 [ 380.499608][T12299] ? __pfx___vmalloc_noprof+0x10/0x10 [ 380.499644][T12299] do_replace+0x1c6/0x490 [ 380.499669][T12299] ? __pfx_do_replace+0x10/0x10 [ 380.499697][T12299] ? register_lock_class+0x3f/0x7b0 [ 380.499727][T12299] compat_do_replace+0x589/0x7a0 [ 380.499753][T12299] ? __pfx_compat_do_replace+0x10/0x10 [ 380.499786][T12299] ? bpf_lsm_capable+0x9/0x10 [ 380.499837][T12299] ? security_capable+0x80/0x260 [ 380.499874][T12299] do_ebt_set_ctl+0x3f4/0x4a0 [ 380.499911][T12299] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 380.499942][T12299] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 380.499978][T12299] ? futex_wake+0x4ea/0x5e0 [ 380.500009][T12299] ? nf_sockopt_find.isra.0+0x222/0x290 [ 380.500047][T12299] nf_setsockopt+0x8d/0xf0 [ 380.500077][T12299] ip_setsockopt+0xcb/0xf0 [ 380.500106][T12299] tcp_setsockopt+0xa7/0x100 [ 380.500131][T12299] smc_setsockopt+0x1b6/0xa40 [ 380.500150][T12299] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 380.500184][T12299] ? __pfx_smc_setsockopt+0x10/0x10 [ 380.500208][T12299] ? aa_sock_opt_perm+0x114/0x1e0 [ 380.500229][T12299] ? __pfx_smc_setsockopt+0x10/0x10 [ 380.500253][T12299] do_sock_setsockopt+0xf3/0x1d0 [ 380.500285][T12299] __sys_setsockopt+0x119/0x190 [ 380.500320][T12299] __ia32_sys_setsockopt+0xbc/0x160 [ 380.500344][T12299] ? __do_fast_syscall_32+0xb3/0x8b0 [ 380.500374][T12299] ? lockdep_hardirqs_on+0x7d/0x110 [ 380.500408][T12299] __do_fast_syscall_32+0x13a/0x8b0 [ 380.500447][T12299] do_fast_syscall_32+0x32/0x70 [ 380.500479][T12299] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 380.500505][T12299] RIP: 0023:0xf7f12fec [ 380.500529][T12299] Code: Unable to access opcode bytes at 0xf7f12fc2. [ 380.500540][T12299] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 380.500565][T12299] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 380.500585][T12299] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108 [ 380.500600][T12299] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 380.500617][T12299] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 380.500632][T12299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 380.500659][T12299] [ 380.500711][T12299] Mem-Info: [ 380.500727][T12299] active_anon:708 inactive_anon:3085 isolated_anon:0 [ 380.500727][T12299] active_file:8883 inactive_file:10894 isolated_file:0 [ 380.500727][T12299] unevictable:1000 dirty:352 writeback:0 [ 380.500727][T12299] slab_reclaimable:6133 slab_unreclaimable:66320 [ 380.500727][T12299] mapped:22668 shmem:1209 pagetables:1302 [ 380.500727][T12299] sec_pagetables:312 bounce:0 [ 380.500727][T12299] kernel_misc_reclaimable:0 [ 380.500727][T12299] free:28155 free_pcp:5537 free_cma:0 [ 380.500794][T12299] Node 0 active_anon:4kB inactive_anon:144kB active_file:740kB inactive_file:192kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8592kB pagetables:1516kB sec_pagetables:1148kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 380.508919][T12299] Node 1 active_anon:2828kB inactive_anon:12196kB active_file:34792kB inactive_file:43384kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:90644kB dirty:1408kB writeback:0kB shmem:2836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5908kB pagetables:3692kB sec_pagetables:100kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 380.508982][T12299] Node 0 DMA free:1768kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:260kB inactive_file:48kB unevictable:0kB writepending:0kB zspages:68kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:388kB local_pcp:228kB free_cma:0kB [ 380.509042][T12299] lowmem_reserve[]: 0 277 277 277 277 [ 380.509080][T12299] Node 0 DMA32 free:17096kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:144kB active_file:516kB inactive_file:144kB unevictable:2000kB writepending:0kB zspages:1252kB present:1032196kB managed:284620kB mlocked:0kB bounce:0kB free_pcp:2076kB local_pcp:128kB free_cma:0kB [ 380.509136][T12299] lowmem_reserve[]: 0 0 0 0 0 [ 380.509167][T12299] Node 1 DMA32 free:93756kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:2828kB inactive_anon:12196kB active_file:34792kB inactive_file:43384kB unevictable:2000kB writepending:1408kB zspages:3436kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:19736kB local_pcp:2252kB free_cma:0kB [ 380.509219][T12299] lowmem_reserve[]: 0 0 0 0 0 [ 380.509251][T12299] Node 0 DMA: 54*4kB (UM) 22*8kB (UM) 3*16kB (U) 7*32kB (UM) 5*64kB (M) 4*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1752kB [ 380.509387][T12299] Node 0 DMA32: 346*4kB (UME) 146*8kB (UME) 57*16kB (UME) 120*32kB (UME) 51*64kB (UME) 21*128kB (UME) 13*256kB (UME) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17096kB [ 380.509530][T12299] Node 1 DMA32: 586*4kB (UE) 733*8kB (UME) 268*16kB (UME) 350*32kB (UME) 183*64kB (UME) 47*128kB (UME) 54*256kB (UME) 21*512kB (UME) 15*1024kB (M) 6*2048kB (UM) 0*4096kB = 93648kB [ 380.509663][T12299] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 380.509686][T12299] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 380.509700][T12299] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 380.509715][T12299] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 380.509729][T12299] 21498 total pagecache pages [ 380.509735][T12299] 514 pages in swap cache [ 380.509741][T12299] Free swap = 108868kB [ 380.509747][T12299] Total swap = 124996kB [ 380.509757][T12299] 524155 pages RAM [ 380.509763][T12299] 0 pages HighMem/MovableOnly [ 380.509771][T12299] 212108 pages reserved [ 380.509777][T12299] 0 pages cma reserved [ 380.513557][T12297] MTD: Couldn't look up './dev/mtdblock0': -2 [ 382.938752][T12347] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1935'. [ 383.186460][T12352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 383.186879][T12352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 383.187245][T12352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 383.187647][T12352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 383.188835][T12352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 383.189140][T12352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 383.189433][T12352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 383.189723][T12352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 383.190015][T12352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 383.190327][T12352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 383.751188][T12363] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 383.751222][T12363] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 383.752663][T12363] vhci_hcd vhci_hcd.0: Device attached [ 383.920988][ T8584] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 384.071881][ T8584] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 384.078459][ T8584] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 384.084463][ T8584] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.090091][ T8584] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.095179][ T8584] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 384.103679][ T8584] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 384.107493][ T8584] usb 9-1: Manufacturer: syz [ 384.116174][ T8584] usb 9-1: config 0 descriptor?? [ 384.612709][T12367] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 384.624477][T12362] input: syz1 as /devices/virtual/input/input20 [ 384.631938][T12362] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1941'. [ 384.661202][T12373] lo: entered allmulticast mode [ 384.682837][ T42] usb 44-1: SetAddress Request (2) to port 0 [ 384.683019][ T42] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 384.868875][T12364] vhci_hcd: connection reset by peer [ 384.869335][ T5796] vhci_hcd vhci_hcd.3: stop threads [ 384.869371][ T5796] vhci_hcd vhci_hcd.3: release socket [ 384.870360][ T5796] vhci_hcd vhci_hcd.3: disconnect device [ 384.975886][ T8584] usbhid 9-1:0.0: can't add hid device: -71 [ 384.980606][ T8584] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 385.008369][ T8584] usb 9-1: USB disconnect, device number 5 [ 389.070989][ T988] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 389.248656][T12422] netlink: 'syz.3.1952': attribute type 12 has an invalid length. [ 389.249049][ T988] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 389.250545][ T988] usb 7-1: config 0 has an invalid descriptor of length 121, skipping remainder of the config [ 389.250572][ T988] usb 7-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 389.250619][ T988] usb 7-1: config 0 interface 0 has no altsetting 0 [ 389.255353][ T988] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 389.255373][ T988] usb 7-1: Product: syz [ 389.255382][ T988] usb 7-1: Manufacturer: syz [ 389.255390][ T988] usb 7-1: SerialNumber: syz [ 389.256883][ T988] usb 7-1: config 0 descriptor?? [ 389.573210][ T988] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 389.616245][ T6059] udevd[6059]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 389.763180][T12429] netlink: 'syz.3.1953': attribute type 10 has an invalid length. [ 389.803362][ T42] usb 44-1: device descriptor read/8, error -110 [ 389.950640][T12429] team0 (unregistering): Port device team_slave_0 removed [ 389.991580][T12429] team0 (unregistering): Port device team_slave_1 removed [ 390.420808][ T42] usb usb44-port1: attempt power cycle [ 391.027119][ T42] usb usb44-port1: unable to enumerate USB device [ 392.110334][T12474] hpfs: hpfs_map_sector(): read error [ 393.167767][ T57] usb 7-1: USB disconnect, device number 8 [ 393.421227][ T2327] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 393.582060][ T2327] usb 9-1: Using ep0 maxpacket: 32 [ 393.582914][ T2327] usb 9-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 393.584902][ T2327] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.584965][ T2327] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 393.588471][ T2327] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.588520][ T2327] usb 9-1: Product: syz [ 393.588562][ T2327] usb 9-1: Manufacturer: syz [ 393.588592][ T2327] usb 9-1: SerialNumber: syz [ 394.191196][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1962'. [ 394.351895][T12534] netlink: 1012 bytes leftover after parsing attributes in process `syz.0.1970'. [ 394.778091][T12543] tipc: Started in network mode [ 394.778332][T12543] tipc: Node identity 0010000000000000002, cluster identity 1 [ 394.793748][T12543] Invalid ELF header magic: != ELF [ 394.809987][T12543] overlayfs: failed to clone lowerpath [ 395.159421][ T2327] usb 9-1: USB disconnect, device number 6 [ 395.495701][ T43] audit: type=1326 audit(1788720513.042:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12545 comm="syz.0.1973" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 395.504236][ T43] audit: type=1326 audit(1788720513.042:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12545 comm="syz.0.1973" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 395.513757][ T43] audit: type=1326 audit(1788720513.042:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12545 comm="syz.0.1973" exe="/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 395.524069][ T43] audit: type=1326 audit(1788720513.042:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12545 comm="syz.0.1973" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 395.531210][ T43] audit: type=1326 audit(1788720513.042:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12545 comm="syz.0.1973" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 395.531246][ T43] audit: type=1326 audit(1788720513.042:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12545 comm="syz.0.1973" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 395.531270][ T43] audit: type=1326 audit(1788720513.042:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12545 comm="syz.0.1973" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 395.531294][ T43] audit: type=1326 audit(1788720513.042:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12545 comm="syz.0.1973" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 395.531318][ T43] audit: type=1326 audit(1788720513.072:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12545 comm="syz.0.1973" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 395.531342][ T43] audit: type=1326 audit(1788720513.072:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12545 comm="syz.0.1973" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 396.697556][T12581] hpfs: hpfs_map_sector(): read error [ 399.841107][T12630] hpfs: hpfs_map_sector(): read error [ 400.176958][T12637] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 401.074854][T12661] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 401.768995][T12668] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 401.769027][T12668] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 401.769173][T12668] vhci_hcd vhci_hcd.0: Device attached [ 402.052951][ T62] usb 44-1: SetAddress Request (6) to port 0 [ 402.053062][ T62] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 402.263117][T12677] netlink: 'syz.4.1991': attribute type 10 has an invalid length. [ 402.587443][T12678] syz.4.1991: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 402.594952][T12678] CPU: 0 UID: 0 PID: 12678 Comm: syz.4.1991 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.595034][T12678] Tainted: [L]=SOFTLOCKUP [ 402.595044][T12678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 402.595077][T12678] Call Trace: [ 402.595093][T12678] [ 402.595107][T12678] dump_stack_lvl+0x100/0x190 [ 402.595150][T12678] warn_alloc.cold+0x9e/0xb2 [ 402.595185][T12678] ? __pfx_warn_alloc+0x10/0x10 [ 402.595257][T12678] __vmalloc_node_range_noprof+0x123b/0x1420 [ 402.595294][T12678] ? __lock_acquire+0x4c5/0x1ec0 [ 402.595327][T12678] ? debug_object_activate+0x343/0x4b0 [ 402.595365][T12678] ? do_raw_spin_unlock+0x145/0x1e0 [ 402.595404][T12678] ? do_replace+0x1c6/0x490 [ 402.595432][T12678] ? do_raw_spin_lock+0x128/0x260 [ 402.595471][T12678] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 402.595507][T12678] ? __lock_acquire+0x4c5/0x1ec0 [ 402.595539][T12678] ? do_raw_spin_unlock+0x145/0x1e0 [ 402.595580][T12678] ? do_replace+0x1c6/0x490 [ 402.595598][T12678] __vmalloc_node_noprof+0xad/0xf0 [ 402.595623][T12678] ? do_replace+0x1c6/0x490 [ 402.595646][T12678] __vmalloc_noprof+0xa3/0x120 [ 402.595670][T12678] ? __pfx___vmalloc_noprof+0x10/0x10 [ 402.595702][T12678] do_replace+0x1c6/0x490 [ 402.595724][T12678] ? __pfx_do_replace+0x10/0x10 [ 402.595754][T12678] ? register_lock_class+0x3f/0x7b0 [ 402.595784][T12678] compat_do_replace+0x589/0x7a0 [ 402.595810][T12678] ? __pfx_compat_do_replace+0x10/0x10 [ 402.595849][T12678] ? bpf_lsm_capable+0x9/0x10 [ 402.595874][T12678] ? security_capable+0x80/0x260 [ 402.595901][T12678] do_ebt_set_ctl+0x3f4/0x4a0 [ 402.595923][T12678] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 402.595949][T12678] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 402.595986][T12678] ? futex_wake+0x4ea/0x5e0 [ 402.596023][T12678] ? nf_sockopt_find.isra.0+0x222/0x290 [ 402.596058][T12678] nf_setsockopt+0x8d/0xf0 [ 402.596093][T12678] ip_setsockopt+0xcb/0xf0 [ 402.596132][T12678] tcp_setsockopt+0xa7/0x100 [ 402.596161][T12678] smc_setsockopt+0x1b6/0xa40 [ 402.596190][T12678] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 402.596239][T12678] ? __pfx_smc_setsockopt+0x10/0x10 [ 402.596268][T12678] ? aa_sock_opt_perm+0x114/0x1e0 [ 402.596298][T12678] ? __pfx_smc_setsockopt+0x10/0x10 [ 402.596329][T12678] do_sock_setsockopt+0xf3/0x1d0 [ 402.596370][T12678] __sys_setsockopt+0x119/0x190 [ 402.596401][T12678] __ia32_sys_setsockopt+0xbc/0x160 [ 402.596429][T12678] ? __do_fast_syscall_32+0xb3/0x8b0 [ 402.596465][T12678] ? lockdep_hardirqs_on+0x7d/0x110 [ 402.596494][T12678] __do_fast_syscall_32+0x13a/0x8b0 [ 402.596532][T12678] do_fast_syscall_32+0x32/0x70 [ 402.596569][T12678] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 402.596600][T12678] RIP: 0023:0xf70befec [ 402.596630][T12678] Code: Unable to access opcode bytes at 0xf70befc2. [ 402.596641][T12678] RSP: 002b:00000000f548c50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 402.596666][T12678] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 402.596684][T12678] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108 [ 402.596702][T12678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 402.596719][T12678] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 402.596736][T12678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 402.596767][T12678] [ 402.601464][T12678] Mem-Info: [ 402.601492][T12678] active_anon:850 inactive_anon:7067 isolated_anon:0 [ 402.601492][T12678] active_file:1453 inactive_file:9428 isolated_file:0 [ 402.601492][T12678] unevictable:1000 dirty:329 writeback:0 [ 402.601492][T12678] slab_reclaimable:6148 slab_unreclaimable:66727 [ 402.601492][T12678] mapped:27262 shmem:7444 pagetables:1371 [ 402.601492][T12678] sec_pagetables:312 bounce:0 [ 402.601492][T12678] kernel_misc_reclaimable:0 [ 402.601492][T12678] free:20652 free_pcp:4093 free_cma:0 [ 402.601566][T12678] Node 0 active_anon:172kB inactive_anon:7688kB active_file:84kB inactive_file:732kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:7716kB dirty:0kB writeback:0kB shmem:9688kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8660kB pagetables:1544kB sec_pagetables:1148kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 402.601639][T12678] Node 1 active_anon:3228kB inactive_anon:20580kB active_file:5728kB inactive_file:36980kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:101332kB dirty:1316kB writeback:0kB shmem:20088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6224kB pagetables:3940kB sec_pagetables:100kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 402.601689][T12678] Node 0 DMA free:1516kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:36kB active_file:76kB inactive_file:176kB unevictable:0kB writepending:0kB zspages:64kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:52kB local_pcp:0kB free_cma:0kB [ 402.601743][T12678] lowmem_reserve[]: 0 277 277 277 277 [ 402.601777][T12678] Node 0 DMA32 free:8284kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:172kB inactive_anon:7728kB active_file:8kB inactive_file:556kB unevictable:2000kB writepending:0kB zspages:1416kB present:1032196kB managed:284620kB mlocked:0kB bounce:0kB free_pcp:3668kB local_pcp:60kB free_cma:0kB [ 402.601831][T12678] lowmem_reserve[]: 0 0 0 0 0 [ 402.601864][T12678] Node 1 DMA32 free:72808kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:8192kB free_highatomic:212kB active_anon:3228kB inactive_anon:20580kB active_file:5728kB inactive_file:36980kB unevictable:2000kB writepending:1316kB zspages:5708kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:12652kB local_pcp:3256kB free_cma:0kB [ 402.601919][T12678] lowmem_reserve[]: 0 0 0 0 0 [ 402.602002][T12678] Node 0 DMA: 73*4kB (UM) 19*8kB (UM) 5*16kB (UM) 9*32kB (UM) 5*64kB (M) 3*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1516kB [ 402.602184][T12678] Node 0 DMA32: 223*4kB (UM) 35*8kB (UM) 25*16kB (UME) 94*32kB (UME) 20*64kB (UME) 11*128kB (UME) 4*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8292kB [ 402.602336][T12678] Node 1 DMA32: 649*4kB (UMEH) 1248*8kB (UMEH) 864*16kB (UMEH) 241*32kB (MEH) 104*64kB (UME) 77*128kB (UME) 40*256kB (UME) 13*512kB (UME) 3*1024kB (M) 1*2048kB (M) 0*4096kB = 72644kB [ 402.605027][T12678] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 402.605049][T12678] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 402.605064][T12678] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 402.605078][T12678] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 402.605095][T12678] 18845 total pagecache pages [ 402.605101][T12678] 579 pages in swap cache [ 402.605107][T12678] Free swap = 81600kB [ 402.605113][T12678] Total swap = 124996kB [ 402.605120][T12678] 524155 pages RAM [ 402.605125][T12678] 0 pages HighMem/MovableOnly [ 402.605131][T12678] 212108 pages reserved [ 402.605137][T12678] 0 pages cma reserved [ 402.724702][T12677] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 402.725628][T12677] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 403.433921][T12669] vhci_hcd: connection reset by peer [ 403.435953][ T5796] vhci_hcd vhci_hcd.3: stop threads [ 403.438510][ T5796] vhci_hcd vhci_hcd.3: release socket [ 403.438594][ T5796] vhci_hcd vhci_hcd.3: disconnect device [ 403.801105][T12690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1994'. [ 405.134440][ T43] kauditd_printk_skb: 40 callbacks suppressed [ 405.134736][ T43] audit: type=1400 audit(1788720521.690:715): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=12707 comm="syz.0.1999" [ 405.137856][T12714] 9p: Bad value for 'rfdno' [ 405.541759][T12711] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 405.541807][T12711] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 405.591214][T12711] vhci_hcd vhci_hcd.0: Device attached [ 405.875007][T12726] netlink: 'syz.0.2002': attribute type 10 has an invalid length. [ 406.058697][T12726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 406.060190][T12726] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 406.249747][T12732] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 406.249790][T12732] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 406.256662][T12732] vhci_hcd vhci_hcd.0: Device attached [ 406.293539][T12712] vhci_hcd: connection closed [ 406.302511][ T5796] vhci_hcd vhci_hcd.3: stop threads [ 406.302595][ T5796] vhci_hcd vhci_hcd.3: release socket [ 406.302677][ T5796] vhci_hcd vhci_hcd.3: disconnect device [ 406.572046][ T30] usb 46-1: SetAddress Request (2) to port 0 [ 406.575966][ T30] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 407.150972][ T62] usb 44-1: device descriptor read/8, error -110 [ 407.743554][T12750] netlink: 'syz.2.2005': attribute type 12 has an invalid length. [ 407.784216][ T62] usb usb44-port1: attempt power cycle [ 407.793211][T12746] Console: switching to colour dummy device 80x25 [ 408.344688][ T62] usb usb44-port1: unable to enumerate USB device [ 408.630741][T12758] nvme_fabrics: unknown parameter or missing value 'tranwport=rdma' in ctrl creation request [ 409.057579][T12733] vhci_hcd: connection reset by peer [ 409.090409][ T12] vhci_hcd vhci_hcd.4: stop threads [ 409.123447][ T12] vhci_hcd vhci_hcd.4: release socket [ 409.124490][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 410.270197][T12751] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 410.324637][T12751] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 410.324799][T12751] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 410.340574][T12751] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 410.341592][T12751] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 410.480187][T12751] pci 0000:00:01.0: Adding to iommu group 1 [ 410.509741][T12751] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 410.509771][T12751] pci 0000:00:01.0: vgaarb: bridge control possible [ 410.509782][T12751] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 410.636793][T12751] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 410.647670][T12751] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 410.787642][T12751] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 411.151133][T12751] [drm] Found bochs VGA, ID 0xb0c5. [ 411.151211][T12751] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 411.260920][T12781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2011'. [ 411.343340][T12751] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 411.493276][T12784] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 411.665927][ T30] usb 46-1: device descriptor read/8, error -110 [ 411.712881][T12784] md: array md0 already has disks! [ 411.761724][T12751] Console: switching to colour frame buffer device 160x50 [ 411.773099][T12784] md: personality for level is not loaded! [ 411.813305][T12751] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 411.923710][T12791] xt_CT: No such helper "pptp" [ 412.188101][T12797] tmpfs: Unknown parameter 'grpquotaq.io_wait_time_recursive' [ 412.188296][ T30] usb usb46-port1: attempt power cycle [ 412.870796][ T30] usb usb46-port1: unable to enumerate USB device [ 414.679207][T12820] nvme_fabrics: unknown parameter or missing value 'tranwport=rdma' in ctrl creation request [ 415.862776][T12832] fuse: fd is not a fuse device [ 416.216277][T12829] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2032'. [ 416.897650][T12844] netlink: 'syz.4.2035': attribute type 10 has an invalid length. [ 417.213180][T12846] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2025'. [ 420.331679][T12868] sctp_transport_update_pmtu: 45 callbacks suppressed [ 420.331804][T12868] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 420.332250][T12868] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 420.332683][T12868] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 420.333263][T12868] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 420.335619][T12868] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 420.336388][T12868] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 420.394788][T12868] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 420.395367][T12868] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 420.395895][T12868] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 420.396406][T12868] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 421.057607][T12882] Console: switching to colour dummy device 80x25 [ 422.287137][T12884] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 422.314818][T12884] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 422.315100][T12884] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 422.327957][T12884] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 422.333775][T12884] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 422.501653][T12884] pci 0000:00:01.0: Adding to iommu group 1 [ 422.547676][T12884] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 422.547738][T12884] pci 0000:00:01.0: vgaarb: bridge control possible [ 422.547753][T12884] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 422.642668][T12884] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 422.642872][T12884] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 422.645095][T12884] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 422.979856][T12884] [drm] Found bochs VGA, ID 0xb0c5. [ 422.980094][T12884] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 422.992031][T12902] warn_alloc: 1 callbacks suppressed [ 422.992091][T12902] syz.0.2038: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 422.992209][T12902] CPU: 2 UID: 0 PID: 12902 Comm: syz.0.2038 Tainted: G L syzkaller #0 PREEMPT(full) [ 422.992237][T12902] Tainted: [L]=SOFTLOCKUP [ 422.992243][T12902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 422.992250][T12902] Call Trace: [ 422.992254][T12902] [ 422.992259][T12902] dump_stack_lvl+0x100/0x190 [ 422.992335][T12902] warn_alloc.cold+0x9e/0xb2 [ 422.992348][T12902] ? __pfx_warn_alloc+0x10/0x10 [ 422.992390][T12902] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 422.992429][T12902] ? __pfx_get_page_from_freelist+0x10/0x10 [ 422.992451][T12902] __alloc_frozen_pages_noprof+0xcb6/0x3300 [ 422.992475][T12902] ? debug_check_no_obj_freed+0x2a0/0x630 [ 422.992494][T12902] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 422.992515][T12902] ? find_held_lock+0x2b/0x80 [ 422.992528][T12902] ? __free_frozen_pages+0x747/0x10f0 [ 422.992542][T12902] ? __free_frozen_pages+0x747/0x10f0 [ 422.992563][T12902] ? _raw_spin_unlock+0x28/0x50 [ 422.992578][T12902] ? __folio_put+0x187/0x5f0 [ 422.992600][T12902] __folio_alloc_noprof+0x16/0x260 [ 422.992611][T12902] alloc_migration_target+0x1d7/0x6d0 [ 422.992629][T12902] migrate_pages_batch+0x5c4/0x4680 [ 422.992647][T12902] ? __pfx_alloc_migration_target+0x10/0x10 [ 422.992666][T12902] ? migrate_pages_sync+0x12c/0x880 [ 422.992682][T12902] ? migrate_pages_sync+0x588/0x880 [ 422.992697][T12902] ? __pfx_migrate_pages_batch+0x10/0x10 [ 422.992717][T12902] ? __pfx_migrate_pages_sync+0x10/0x10 [ 422.992736][T12902] ? __lock_acquire+0x4c5/0x1ec0 [ 422.992751][T12902] ? __css_rstat_updated+0x1ce/0x590 [ 422.992770][T12902] migrate_pages+0x1950/0x2850 [ 422.992790][T12902] ? __pfx_alloc_migration_target+0x10/0x10 [ 422.992810][T12902] ? __pfx_migrate_pages+0x10/0x10 [ 422.992831][T12902] ? mtree_load+0x3a4/0xb50 [ 422.992850][T12902] move_pages_and_store_status+0xf1/0x230 [ 422.992868][T12902] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 422.992891][T12902] kernel_move_pages+0xca4/0x14d0 [ 422.992912][T12902] ? __pfx_kernel_move_pages+0x10/0x10 [ 422.992933][T12902] ? xfd_validate_state+0x129/0x190 [ 422.992954][T12902] __ia32_sys_move_pages+0xdd/0x1b0 [ 422.992971][T12902] ? __do_fast_syscall_32+0xb3/0x8b0 [ 422.992988][T12902] ? lockdep_hardirqs_on+0x7d/0x110 [ 422.993003][T12902] __do_fast_syscall_32+0x13a/0x8b0 [ 422.993021][T12902] do_fast_syscall_32+0x32/0x70 [ 422.993038][T12902] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 422.993058][T12902] RIP: 0023:0xf6ffefec [ 422.993073][T12902] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 422.993079][T12902] RSP: 002b:00000000f4f8850c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 422.993090][T12902] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 422.993097][T12902] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 422.993106][T12902] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 422.993115][T12902] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 422.993125][T12902] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 422.993160][T12902] [ 422.993224][T12902] Mem-Info: [ 422.993250][T12902] active_anon:3363 inactive_anon:613 isolated_anon:12 [ 422.993250][T12902] active_file:655 inactive_file:13692 isolated_file:0 [ 422.993250][T12902] unevictable:0 dirty:38 writeback:0 [ 422.993250][T12902] slab_reclaimable:6150 slab_unreclaimable:65863 [ 422.993250][T12902] mapped:29010 shmem:2873 pagetables:1371 [ 422.993250][T12902] sec_pagetables:315 bounce:0 [ 422.993250][T12902] kernel_misc_reclaimable:0 [ 422.993250][T12902] free:28216 free_pcp:391 free_cma:0 [ 422.993309][T12902] Node 0 active_anon:4kB inactive_anon:180kB active_file:108kB inactive_file:476kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8620kB pagetables:1516kB sec_pagetables:1152kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 422.993366][T12902] Node 1 active_anon:13448kB inactive_anon:2272kB active_file:2512kB inactive_file:54292kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:115988kB dirty:152kB writeback:0kB shmem:11492kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6204kB pagetables:3968kB sec_pagetables:108kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 422.993425][T12902] Node 0 DMA free:1656kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:12kB active_file:0kB inactive_file:152kB unevictable:0kB writepending:0kB zspages:64kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 422.993506][T12902] lowmem_reserve[]: 0 277 277 277 277 [ 422.993654][T12902] Node 0 DMA32 free:24716kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:168kB active_file:108kB inactive_file:324kB unevictable:0kB writepending:0kB zspages:1428kB present:1032196kB managed:284620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 422.993736][T12902] lowmem_reserve[]: 0 0 0 0 0 [ 422.993881][T12902] Node 1 DMA32 free:86492kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048kB free_highatomic:132kB active_anon:13448kB inactive_anon:2272kB active_file:2512kB inactive_file:54292kB unevictable:0kB writepending:52kB zspages:6124kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:1564kB local_pcp:768kB free_cma:0kB [ 422.993963][T12902] lowmem_reserve[]: 0 0 0 0 0 [ 422.994113][T12902] Node 0 DMA: 94*4kB (UM) 12*8kB (UM) 11*16kB (UM) 6*32kB (UM) 7*64kB (UM) 3*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1672kB [ 423.192704][T12902] Node 0 DMA32: 459*4kB (UME) 142*8kB (UME) 80*16kB (UME) 156*32kB (UME) 51*64kB (UME) 32*128kB (UME) 16*256kB (UME) 6*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 24796kB [ 423.192897][T12902] Node 1 DMA32: 2716*4kB (MEH) 1126*8kB (UME) 437*16kB (UME) 383*32kB (UMEH) 189*64kB (UME) 49*128kB (UME) 37*256kB (UME) 10*512kB (UME) 3*1024kB (UM) 4*2048kB (UM) 0*4096kB = 83344kB [ 423.193108][T12902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 423.193129][T12902] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 423.193148][T12902] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 423.193168][T12902] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 423.193185][T12902] 18024 total pagecache pages [ 423.193193][T12902] 621 pages in swap cache [ 423.193202][T12902] Free swap = 97332kB [ 423.193210][T12902] Total swap = 124996kB [ 423.193219][T12902] 524155 pages RAM [ 423.193229][T12902] 0 pages HighMem/MovableOnly [ 423.193237][T12902] 212108 pages reserved [ 423.193245][T12902] 0 pages cma reserved [ 423.553295][T12884] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 423.723833][T12884] Console: switching to colour frame buffer device 160x50 [ 423.745271][T12884] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 424.115234][T12915] netlink: 'syz.2.2040': attribute type 10 has an invalid length. [ 425.059501][T12922] netlink: 'syz.2.2041': attribute type 1 has an invalid length. [ 425.079586][T12922] netlink: 756 bytes leftover after parsing attributes in process `syz.2.2041'. [ 428.059076][T12943] netlink: 'syz.0.2047': attribute type 10 has an invalid length. [ 428.502958][T12948] netlink: 'syz.0.2051': attribute type 10 has an invalid length. [ 430.597932][T12974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2055'. [ 431.461037][ T42] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 431.516375][T12987] netlink: 'syz.2.2059': attribute type 10 has an invalid length. [ 431.628738][ T42] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 431.633302][ T42] usb 9-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 431.633320][ T42] usb 9-1: Product: syz [ 431.633362][ T42] usb 9-1: Manufacturer: syz [ 431.633370][ T42] usb 9-1: SerialNumber: syz [ 431.634749][ T42] usb 9-1: config 0 descriptor?? [ 431.636042][ T42] ch341 9-1:0.0: ch341-uart converter detected [ 432.389509][T12994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2057'. [ 432.440369][T12994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2057'. [ 432.467980][T12994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2057'. [ 432.494733][T12994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2057'. [ 432.672343][ T42] usb 9-1: failed to receive control message: -110 [ 432.672658][ T42] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 433.634713][T13001] CIFS: Attempting to mount //127.0.0.1/share [ 433.643339][T13001] CIFS: VFS: Error connecting to socket. Aborting operation. [ 433.646002][T13001] CIFS: VFS: cifs_mount failed w/return code = -4 [ 434.236765][ T5837] usb 9-1: USB disconnect, device number 7 [ 434.243950][ T5837] ch341 9-1:0.0: device disconnected [ 435.057644][T13020] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2066'. [ 435.196361][T13026] nvme_fabrics: unknown parameter or missing value 'tranwport=rdma' in ctrl creation request [ 435.422743][T13024] gfs2: error -5 reading superblock [ ** replaying previous printk message ** [ 437.582344][T13058] ------------[ cut here ]------------ [ 437.582402][T13058] current->flags & PF_MEMALLOC [ 437.582454][T13058] WARNING: mm/page_alloc.c:4816 at __alloc_frozen_pages_noprof+0x1eac/0x3300, CPU#0: syz.2.2074/13058 [ 437.595908][T13058] Modules linked in: [ 437.597658][T13058] CPU: 0 UID: 0 PID: 13058 Comm: syz.2.2074 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.603971][T13058] Tainted: [L]=SOFTLOCKUP [ 437.606129][T13058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 437.609659][T13058] RIP: 0010:__alloc_frozen_pages_noprof+0x1eac/0x3300 [ 437.611910][T13058] Code: 38 d0 7c 08 84 d2 0f 85 de 12 00 00 65 48 8b 05 22 54 1c 12 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ba e7 ff ff 90 <0f> 0b 90 e9 b1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 437.617688][T13058] RSP: 0000:ffffc90005b56328 EFLAGS: 00010202 [ 437.619604][T13058] RAX: ffff888022442580 RBX: 0000000000000000 RCX: 1ffff1100fffad29 [ 437.622204][T13058] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 437.624649][T13058] RBP: ffff8880224425ac R08: 0000000000008000 R09: 0000000000000001 [ 437.627723][T13058] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000148c48 [ 437.630487][T13058] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff92000b6ac7f [ 437.633416][T13058] FS: 0000000000000000(0000) GS:ffff888096963000(0063) knlGS:00000000f5394b40 [ 437.636295][T13058] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 437.638367][T13058] CR2: 00000000f74342e8 CR3: 000000006c38b000 CR4: 0000000000352ef0 [ 437.640922][T13058] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 437.643564][T13058] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 437.646380][T13058] Call Trace: [ 437.647559][T13058] [ 437.648618][T13058] ? __bfs+0x150/0x2a0 [ 437.650034][T13058] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 437.652255][T13058] ? __lock_acquire+0x4c5/0x1ec0 [ 437.653879][T13058] ? check_prev_add+0xfe/0xe60 [ 437.655537][T13058] ? __lock_acquire+0x4c5/0x1ec0 [ 437.657274][T13058] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 437.659445][T13058] ? policy_nodemask+0xed/0x4f0 [ 437.661358][T13058] alloc_pages_mpol+0x201/0x550 [ 437.663145][T13058] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 437.664932][T13058] ? filemap_get_entry+0x22d/0x450 [ 437.666563][T13058] ? filemap_get_entry+0x22d/0x450 [ 437.668216][T13058] folio_alloc_noprof+0x22/0x250 [ 437.669804][T13058] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 437.671913][T13058] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 437.674217][T13058] ? __filemap_get_folio_mpol+0x369/0x1320 [ 437.676195][T13058] __filemap_get_folio_mpol+0x653/0x1320 [ 437.678118][T13058] bdev_getblk+0x246/0x6a0 [ 437.679720][T13058] ? ext4_get_group_desc+0x2b9/0x570 [ 437.681636][T13058] __ext4_get_inode_loc+0x571/0x1510 [ 437.683421][T13058] ? __pfx___ext4_get_inode_loc+0x10/0x10 [ 437.685438][T13058] ? start_this_handle+0xfa7/0x1390 [ 437.687238][T13058] ? ext4_get_inode_loc+0xbd/0x160 [ 437.689040][T13058] ext4_get_inode_loc+0xbd/0x160 [ 437.690896][T13058] ? __pfx_ext4_get_inode_loc+0x10/0x10 [ 437.692849][T13058] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 437.694824][T13058] ext4_reserve_inode_write+0x145/0x330 [ 437.696815][T13058] __ext4_mark_inode_dirty+0x18f/0x910 [ 437.698678][T13058] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 437.700463][T13058] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 437.702450][T13058] ? trace_jbd2_handle_start+0x83/0x240 [ 437.704238][T13058] ? jbd2__journal_start+0xf7/0x6b0 [ 437.706039][T13058] ? __ext4_journal_start_sb+0x314/0x610 [ 437.708288][T13058] ? __ext4_journal_start_sb+0x17b/0x610 [ 437.710539][T13058] ? ext4_dirty_inode+0xa1/0x130 [ 437.712547][T13058] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 437.714387][T13058] ext4_dirty_inode+0xd9/0x130 [ 437.715922][T13058] ? rcu_is_watching+0x13/0xc0 [ 437.717462][T13058] __mark_inode_dirty+0x1f3/0x16e0 [ 437.719117][T13058] sync_lazytime+0x39b/0x5d0 [ 437.720733][T13058] iput.part.0+0x207/0x1050 [ 437.722293][T13058] ? dentry_unlink_inode+0x157/0x470 [ 437.724041][T13058] ? __pfx_do_raw_spin_trylock+0x10/0x10 [ 437.725921][T13058] iput+0x35/0x40 [ 437.727121][T13058] dentry_unlink_inode+0x284/0x470 [ 437.728772][T13058] dentry_kill+0x25d/0xc20 [ 437.730187][T13058] shrink_dentry_list+0x1e8/0x310 [ 437.732188][T13058] prune_dcache_sb+0xea/0x150 [ 437.734033][T13058] ? list_lru_count_one+0x147/0x320 [ 437.736082][T13058] ? __pfx_prune_dcache_sb+0x10/0x10 [ 437.738231][T13058] super_cache_scan+0x361/0x5c0 [ 437.739741][T13058] do_shrink_slab+0x416/0x1200 [ 437.741242][T13058] shrink_slab+0xa82/0x12e0 [ 437.742646][T13058] ? shrink_slab+0x677/0x12e0 [ 437.744092][T13058] ? __pfx_shrink_slab+0x10/0x10 [ 437.745641][T13058] ? lock_acquire+0x1d1/0x380 [ 437.747073][T13058] shrink_one+0x398/0x850 [ 437.748444][T13058] ? shrink_node+0x2b00/0x4320 [ 437.749931][T13058] shrink_node+0x2b20/0x4320 [ 437.751442][T13058] ? __queue_work+0x4d6/0x1370 [ 437.752977][T13058] ? shrink_node+0x286e/0x4320 [ 437.754673][T13058] ? __pfx_shrink_node+0x10/0x10 [ 437.756668][T13058] ? queue_work_on+0x141/0x1e0 [ 437.758834][T13058] ? do_try_to_free_pages+0x33e/0x16d0 [ 437.761326][T13058] do_try_to_free_pages+0x33e/0x16d0 [ 437.763169][T13058] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 437.765017][T13058] ? __lock_acquire+0x4c5/0x1ec0 [ 437.766595][T13058] try_to_free_pages+0x2a0/0x740 [ 437.768184][T13058] ? __pfx_try_to_free_pages+0x10/0x10 [ 437.769913][T13058] ? find_held_lock+0x2b/0x80 [ 437.771504][T13058] ? fs_reclaim_acquire+0x70/0x100 [ 437.773123][T13058] ? fs_reclaim_acquire+0x70/0x100 [ 437.774775][T13058] __alloc_frozen_pages_noprof+0xf8a/0x3300 [ 437.776653][T13058] ? debug_check_no_obj_freed+0x31f/0x630 [ 437.778508][T13058] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 437.780721][T13058] ? find_held_lock+0x2b/0x80 [ 437.782534][T13058] ? __free_frozen_pages+0x747/0x10f0 [ 437.784580][T13058] ? __free_frozen_pages+0x747/0x10f0 [ 437.786416][T13058] ? do_raw_spin_unlock+0x145/0x1e0 [ 437.788072][T13058] ? _raw_spin_unlock+0x28/0x50 [ 437.789620][T13058] ? irqentry_exit+0x24d/0xa10 [ 437.791597][T13058] __folio_alloc_noprof+0x16/0x260 [ 437.793230][T13058] alloc_migration_target+0x1d7/0x6d0 [ 437.795051][T13058] migrate_pages_batch+0x5c4/0x4680 [ 437.797091][T13058] ? __pfx_alloc_migration_target+0x10/0x10 [ 437.799600][T13058] ? migrate_pages_sync+0x12c/0x880 [ 437.801772][T13058] ? migrate_pages_sync+0x588/0x880 [ 437.803493][T13058] ? __pfx_migrate_pages_batch+0x10/0x10 [ 437.805386][T13058] ? __pfx_migrate_pages_sync+0x10/0x10 [ 437.807147][T13058] ? __lock_acquire+0x4c5/0x1ec0 [ 437.808702][T13058] ? __css_rstat_updated+0x1ce/0x590 [ 437.810421][T13058] migrate_pages+0x1950/0x2850 [ 437.812055][T13058] ? __pfx_alloc_migration_target+0x10/0x10 [ 437.814022][T13058] ? __pfx_migrate_pages+0x10/0x10 [ 437.815891][T13058] ? mtree_load+0x3a4/0xb50 [ 437.817559][T13058] move_pages_and_store_status+0xf1/0x230 [ 437.819624][T13058] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 437.821752][T13058] kernel_move_pages+0xca4/0x14d0 [ 437.823368][T13058] ? __pfx_kernel_move_pages+0x10/0x10 [ 437.825129][T13058] ? irqentry_exit+0x24d/0xa10 [ 437.826657][T13058] ? xfd_validate_state+0x129/0x190 [ 437.828561][T13058] __ia32_sys_move_pages+0xdd/0x1b0 [ 437.830716][T13058] ? __do_fast_syscall_32+0xb3/0x8b0 [ 437.832833][T13058] ? lockdep_hardirqs_on+0x7d/0x110 [ 437.834783][T13058] __do_fast_syscall_32+0x13a/0x8b0 [ 437.836445][T13058] ? lockdep_hardirqs_on+0x7d/0x110 [ 437.838096][T13058] do_fast_syscall_32+0x32/0x70 [ 437.839670][T13058] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 437.841719][T13058] RIP: 0023:0xf7f12fec [ 437.843073][T13058] Code: Unable to access opcode bytes at 0xf7f12fc2. [ 437.845310][T13058] RSP: 002b:00000000f539450c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 437.848463][T13058] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 437.851581][T13058] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 437.854580][T13058] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 437.857089][T13058] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 437.859584][T13058] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 437.862104][T13058] [ 437.863108][T13058] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 437.865374][T13058] CPU: 0 UID: 0 PID: 13058 Comm: syz.2.2074 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.868542][T13058] Tainted: [L]=SOFTLOCKUP [ 437.869828][T13058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 437.873324][T13058] Call Trace: [ 437.874512][T13058] [ 437.875589][T13058] dump_stack_lvl+0x100/0x190 [ 437.877326][T13058] vpanic+0x553/0x970 [ 437.878736][T13058] ? __pfx_vpanic+0x10/0x10 [ 437.880234][T13058] panic+0xd1/0xe0 [ 437.881456][T13058] ? __pfx_panic+0x10/0x10 [ 437.882877][T13058] check_panic_on_warn.cold+0x19/0x34 [ 437.884581][T13058] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 437.886523][T13058] __warn.cold+0x191/0x318 [ 437.888239][T13058] __report_bug+0x30f/0x440 [ 437.889697][T13058] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 437.891684][T13058] ? __pfx___report_bug+0x10/0x10 [ 437.893483][T13058] ? get_page_from_freelist+0x344/0x35d0 [ 437.895709][T13058] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 437.898131][T13058] report_bug+0xb3/0x220 [ 437.899790][T13058] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 437.902305][T13058] handle_bug+0x16a/0x2a0 [ 437.903928][T13058] exc_invalid_op+0x17/0x50 [ 437.905453][T13058] asm_exc_invalid_op+0x1a/0x20 [ 437.907016][T13058] RIP: 0010:__alloc_frozen_pages_noprof+0x1eac/0x3300 [ 437.909135][T13058] Code: 38 d0 7c 08 84 d2 0f 85 de 12 00 00 65 48 8b 05 22 54 1c 12 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ba e7 ff ff 90 <0f> 0b 90 e9 b1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 437.915369][T13058] RSP: 0000:ffffc90005b56328 EFLAGS: 00010202 [ 437.917661][T13058] RAX: ffff888022442580 RBX: 0000000000000000 RCX: 1ffff1100fffad29 [ 437.920929][T13058] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 437.923517][T13058] RBP: ffff8880224425ac R08: 0000000000008000 R09: 0000000000000001 [ 437.926037][T13058] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000148c48 [ 437.928549][T13058] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff92000b6ac7f [ 437.931022][T13058] ? __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 437.933002][T13058] ? __bfs+0x150/0x2a0 [ 437.934430][T13058] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 437.936857][T13058] ? __lock_acquire+0x4c5/0x1ec0 [ 437.938724][T13058] ? check_prev_add+0xfe/0xe60 [ 437.940452][T13058] ? __lock_acquire+0x4c5/0x1ec0 [ 437.942098][T13058] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 437.943967][T13058] ? policy_nodemask+0xed/0x4f0 [ 437.945577][T13058] alloc_pages_mpol+0x201/0x550 [ 437.947128][T13058] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 437.948820][T13058] ? filemap_get_entry+0x22d/0x450 [ 437.950432][T13058] ? filemap_get_entry+0x22d/0x450 [ 437.952057][T13058] folio_alloc_noprof+0x22/0x250 [ 437.953627][T13058] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 437.955725][T13058] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 437.958555][T13058] ? __filemap_get_folio_mpol+0x369/0x1320 [ 437.960941][T13058] __filemap_get_folio_mpol+0x653/0x1320 [ 437.962964][T13058] bdev_getblk+0x246/0x6a0 [ 437.964455][T13058] ? ext4_get_group_desc+0x2b9/0x570 [ 437.966111][T13058] __ext4_get_inode_loc+0x571/0x1510 [ 437.967786][T13058] ? __pfx___ext4_get_inode_loc+0x10/0x10 [ 437.969540][T13058] ? start_this_handle+0xfa7/0x1390 [ 437.971150][T13058] ? ext4_get_inode_loc+0xbd/0x160 [ 437.972753][T13058] ext4_get_inode_loc+0xbd/0x160 [ 437.974339][T13058] ? __pfx_ext4_get_inode_loc+0x10/0x10 [ 437.976099][T13058] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 437.978009][T13058] ext4_reserve_inode_write+0x145/0x330 [ 437.979954][T13058] __ext4_mark_inode_dirty+0x18f/0x910 [ 437.981804][T13058] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 437.984062][T13058] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 437.986402][T13058] ? trace_jbd2_handle_start+0x83/0x240 [ 437.988260][T13058] ? jbd2__journal_start+0xf7/0x6b0 [ 437.989914][T13058] ? __ext4_journal_start_sb+0x314/0x610 [ 437.991709][T13058] ? __ext4_journal_start_sb+0x17b/0x610 [ 437.993472][T13058] ? ext4_dirty_inode+0xa1/0x130 [ 437.995167][T13058] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 437.996886][T13058] ext4_dirty_inode+0xd9/0x130 [ 437.998444][T13058] ? rcu_is_watching+0x13/0xc0 [ 438.000277][T13058] __mark_inode_dirty+0x1f3/0x16e0 [ 438.002173][T13058] sync_lazytime+0x39b/0x5d0 [ 438.003932][T13058] iput.part.0+0x207/0x1050 [ 438.006056][T13058] ? dentry_unlink_inode+0x157/0x470 [ 438.008547][T13058] ? __pfx_do_raw_spin_trylock+0x10/0x10 [ 438.011181][T13058] iput+0x35/0x40 [ 438.012699][T13058] dentry_unlink_inode+0x284/0x470 [ 438.014866][T13058] dentry_kill+0x25d/0xc20 [ 438.016773][T13058] shrink_dentry_list+0x1e8/0x310 [ 438.018931][T13058] prune_dcache_sb+0xea/0x150 [ 438.021157][T13058] ? list_lru_count_one+0x147/0x320 [ 438.023553][T13058] ? __pfx_prune_dcache_sb+0x10/0x10 [ 438.025719][T13058] super_cache_scan+0x361/0x5c0 [ 438.027692][T13058] do_shrink_slab+0x416/0x1200 [ 438.029613][T13058] shrink_slab+0xa82/0x12e0 [ 438.031365][T13058] ? shrink_slab+0x677/0x12e0 [ 438.033253][T13058] ? __pfx_shrink_slab+0x10/0x10 [ 438.035322][T13058] ? lock_acquire+0x1d1/0x380 [ 438.037449][T13058] shrink_one+0x398/0x850 [ 438.039608][T13058] ? shrink_node+0x2b00/0x4320 [ 438.041737][T13058] shrink_node+0x2b20/0x4320 [ 438.043621][T13058] ? __queue_work+0x4d6/0x1370 [ 438.045556][T13058] ? shrink_node+0x286e/0x4320 [ 438.047486][T13058] ? __pfx_shrink_node+0x10/0x10 [ 438.049465][T13058] ? queue_work_on+0x141/0x1e0 [ 438.051401][T13058] ? do_try_to_free_pages+0x33e/0x16d0 [ 438.053580][T13058] do_try_to_free_pages+0x33e/0x16d0 [ 438.055760][T13058] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 438.058137][T13058] ? __lock_acquire+0x4c5/0x1ec0 [ 438.060321][T13058] try_to_free_pages+0x2a0/0x740 [ 438.062499][T13058] ? __pfx_try_to_free_pages+0x10/0x10 [ 438.064938][T13058] ? find_held_lock+0x2b/0x80 [ 438.066829][T13058] ? fs_reclaim_acquire+0x70/0x100 [ 438.068857][T13058] ? fs_reclaim_acquire+0x70/0x100 [ 438.070918][T13058] __alloc_frozen_pages_noprof+0xf8a/0x3300 [ 438.073284][T13058] ? debug_check_no_obj_freed+0x31f/0x630 [ 438.075568][T13058] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 438.078212][T13058] ? find_held_lock+0x2b/0x80 [ 438.080248][T13058] ? __free_frozen_pages+0x747/0x10f0 [ 438.082599][T13058] ? __free_frozen_pages+0x747/0x10f0 [ 438.084863][T13058] ? do_raw_spin_unlock+0x145/0x1e0 [ 438.086998][T13058] ? _raw_spin_unlock+0x28/0x50 [ 438.088929][T13058] ? irqentry_exit+0x24d/0xa10 [ 438.090886][T13058] __folio_alloc_noprof+0x16/0x260 [ 438.092912][T13058] alloc_migration_target+0x1d7/0x6d0 [ 438.095131][T13058] migrate_pages_batch+0x5c4/0x4680 [ 438.096874][T13058] ? __pfx_alloc_migration_target+0x10/0x10 [ 438.099378][T13058] ? migrate_pages_sync+0x12c/0x880 [ 438.101574][T13058] ? migrate_pages_sync+0x588/0x880 [ 438.103724][T13058] ? __pfx_migrate_pages_batch+0x10/0x10 [ 438.106058][T13058] ? __pfx_migrate_pages_sync+0x10/0x10 [ 438.108288][T13058] ? __lock_acquire+0x4c5/0x1ec0 [ 438.110279][T13058] ? __css_rstat_updated+0x1ce/0x590 [ 438.112417][T13058] migrate_pages+0x1950/0x2850 [ 438.114460][T13058] ? __pfx_alloc_migration_target+0x10/0x10 [ 438.117027][T13058] ? __pfx_migrate_pages+0x10/0x10 [ 438.119293][T13058] ? mtree_load+0x3a4/0xb50 [ 438.121306][T13058] move_pages_and_store_status+0xf1/0x230 [ 438.123878][T13058] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 438.126510][T13058] kernel_move_pages+0xca4/0x14d0 [ 438.128625][T13058] ? __pfx_kernel_move_pages+0x10/0x10 [ 438.130977][T13058] ? irqentry_exit+0x24d/0xa10 [ 438.133092][T13058] ? xfd_validate_state+0x129/0x190 [ 438.135571][T13058] __ia32_sys_move_pages+0xdd/0x1b0 [ 438.137843][T13058] ? __do_fast_syscall_32+0xb3/0x8b0 [ 438.140046][T13058] ? lockdep_hardirqs_on+0x7d/0x110 [ 438.142125][T13058] __do_fast_syscall_32+0x13a/0x8b0 [ 438.144267][T13058] ? lockdep_hardirqs_on+0x7d/0x110 [ 438.146366][T13058] do_fast_syscall_32+0x32/0x70 [ 438.148461][T13058] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 438.151234][T13058] RIP: 0023:0xf7f12fec [ 438.153099][T13058] Code: Unable to access opcode bytes at 0xf7f12fc2. [ 438.156181][T13058] RSP: 002b:00000000f539450c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 438.159482][T13058] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 438.162639][T13058] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 438.165884][T13058] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 438.169294][T13058] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 438.172909][T13058] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 438.176318][T13058] [ 438.178360][T13058] Kernel Offset: disabled [ 438.179865][T13058] Rebooting in 86400 seconds..