last executing test programs: 1m39.915178071s ago: executing program 1 (id=96): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='cramfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) 1m39.880313316s ago: executing program 1 (id=97): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000000)={0x0, 0x1, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x6, '\x00', @string=&(0x7f00000000c0)}}) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000002000)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000003000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000004000)={r5, 0x0, 0xd50, 0x0, &(0x7f0000005000)="00112233445566778899aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x20, r9, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0245628, &(0x7f00000002c0)={0x0, 0xb, 0x9, '\x00', &(0x7f0000000280)=0x5}) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xd926, @mcast2}, 0x1c) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$sock_netdev_private(r2, 0x89f8, &(0x7f0000000500)="88cdce85930498d13a5fc57f034cf46d82aba6a62584ffa70e068a2d7da4c77443cf1fdd0ef88dabc3bfe9069a2bec123f9bf77e72ac0322cea3a37f768f2116b15b81b924f85e8eb4fe1dab22aabeb01b8348b0a4c786927066b89f3a4817651e602e2469a89cd680c89769827d58b2426ecb8f89087aaf60539ecd5f8e1b32c1084cae7d6461dddb52e7a79440df06f9a1bdc375f6c43ee2a3a168fca31a7b079181aeaab03c1524660fe315706d6c1f040eceaf8fd5b0") ioctl$FS_IOC_GETVERSION(r10, 0xc0145b0d, &(0x7f0000000040)) 1m38.555307684s ago: executing program 1 (id=106): io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x2e5, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}) 1m38.501778993s ago: executing program 1 (id=107): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x40814) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) ustat(0x11, &(0x7f0000000600)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r4 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) epoll_create1(0x80000) getdents64(r5, &(0x7f0000000000)=""/134, 0x86) r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xdc, 0x12, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x6, 0xc1, 0x5, {0x4e20, 0x4e23, [0x0, 0xfffffff3, 0xff, 0xffffff01], [0x1, 0x4ec, 0x8, 0x8], r7, [0x3, 0x9]}, 0x1, 0x10000}, [@INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "54fa57e3dc20588b6fe822d5a349e1d053d7e96443b3cbca8113aeff064fec58c3c8af9977eec801d5605e9d0018e2570a630d380dc948de10cf05414b0e72a6e6d7c8587d8532ddad77ae7203bb8eadf663a2ed57edf883910c572e22ec3a035d1918cf13b9ddd0750219637630074f320060b2d60a1f873fa94ce8a5ef3a1558a911e10e0cf3bb5898"}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000ffff7ff4ff000000000000000000", @ANYRES32=0x0, @ANYBLOB="e00500000000000008000400e005000008001b0000000000"], 0x30}}, 0x0) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x406, r8) ioctl$FE_SET_PROPERTY(r10, 0x40086f52, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[{0x43, '\x00', @data=0x800, 0x8}, {0xb, '\x00', @data, 0x1}]}) write$binfmt_register(r9, &(0x7f0000000440)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x34) socket$inet(0x2, 0x5, 0x7) 1m38.334701198s ago: executing program 1 (id=109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a0004000100080017"], 0x3c}}, 0x0) 1m38.084459148s ago: executing program 1 (id=113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="f1ff00004ec6"}) 1m38.010384877s ago: executing program 32 (id=113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="f1ff00004ec6"}) 1m33.962541182s ago: executing program 3 (id=140): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000001f40)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000400)="e0cfe54ee1d97772c7c540163f4512a4d761a78db735eb70343afe3b3efe8dde5fbc712f3e5e3c0894b45ec00f5e3cf9c16f32f0105d1f565587a34d565dc6357ca763196d19f0c95f535aea160016533a050e160a3e81ad277c27dca4e422a3959504bdf11f88cdafdcbc9c7a4711de79db04b943d8626cb535c8871b17dd6b3ee78774d862ffc706a149cd392413340487a93a50a0381b0316bebfff015957e803460307cf96dd58c73a70190c229ca5a4c2cdb697d04091515f42306a2bbc9fe28e4559b12a35f5d5b12350d423b5df43a83e2064c33ec20dea93aec9292cfd76f1a5ab8640d4a448b17eae", 0xed}, {&(0x7f0000000500)="1fdd", 0x2}, {&(0x7f0000000540)="84714a9668926b8e8506e94b4d9ababbe02c0952272fcb40648bce5d9bb2761e7b8de68845a3bb6c3d13b8e1add4fd640ae5dcd73f8e67932b63b946cbd295660c2a4d8a0f1b5af66621ba99478978b3571f22716a9e314bdb60d481798cea54a6dc01a2e6180bd0f368eefc3756553441a452be842c4bb29976f996cfb442212185cbf08298409d7c", 0x89}, {&(0x7f0000000600)="cb6116e5a3e120b7545e2aa41cc7da01bddddbb1a7d81e33e167b2e7c118395d4dddeb9a28154da4ad7e78022476dbadc1ec2ef9f56e0f35f5ccc014634823d4ee6dd5683d7b81643c6c53c1ae196daefeec1915b4fb26ec7ba3101daeceabd21df3e1df466e70d7116bdb80f7d58f372d01487bc6e0ac134a1a4d892464060265e055260ff412a116cadf27369c60db1822edfd405c09dae47de5ed5d89c00dbf9b73fe728c660d84897399a0a9195f31c9584effb994480570b2e2f604c8f1da", 0xc1}, {&(0x7f0000000700)}], 0x5, 0x0, 0x0, 0x40000}}, {{&(0x7f0000000780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)="dd8aacc841a367c76ec3cb19a4c6e2fc5750e3984050a4c50e8b20b1d88dbdc06a4a4077d5b608fef2a15e291a804e43a79fd97688fbf4bc727405f936a75ba1b5876b51438164d64bf4a27037718dcc7db2fd14523f6b64e72a1cd53dc9cb89235c24c70b71b27fde4d82c21eecf19146072641c2ffd8a8b1adcbaa31b72cc3886a9f1a58543672c57c157c01c73648dd3431e2d3337c5743811762728796d06addda4fbd927d30091711a438744dbb3359acc009aac53297ecf7508563", 0xbe}], 0x1, &(0x7f0000000a80)=[@cred={{0x18, 0x1, 0x2, {r0, r3, r4}}}], 0x18}}, {{&(0x7f0000000ac0)=@file={0x1, './file0/../file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000000b40)="2b7d04c45d9921bd4c2f653ea310b02f4a078187703695fe42157b25dc56dee6e951b1a1ea699e6995649b7aed", 0x2d}, {&(0x7f0000000b80)="1970fc89181b255495adf9bda1899e65ffcbabb3299ba8390ec19410d0846c70c993276ba1468ded91", 0x29}, {&(0x7f0000000bc0)="bd0e4f2af1d0a3131e89999c711bec118a95c09829ce6e94c1f5163cbcd21e5edb25f5a1ffd24eb2a184322fc3ceb1038d60ef8d548feb6285155668a432791c153111236c5433afe32ee8309e4c6b3f211168f26b97650620060ed28f53b6fd7f7fac29fe8621d92d400ecf96a2d095f8189a9bd56878b4c2cf541aa963c0a239308373309b4e63cd829c247c88bce586f797dd0246328961e0d3982f125304d39198513bbf3ce7a8f7480d42d985fc8a86350b3c208fa6da277848f4e88f4156c5feae6fa7105c6bee1b835bcbd688e577c9", 0xd3}, {&(0x7f0000000cc0)="b7bf2573dd37093e7efaabb77df028d205458f89ce074b9a76eb974430a91e2cc1b2695862d1b600160a0643ee46e8fedd2e355f23179a5929e33a857c12f50a756af51ae1ea7f0a5b3cb550a44bb8dba7fb51825f617d33a8d466d91896ff28ecce00e42cd1093956acf749d263924dc593be27cbde", 0x76}, {&(0x7f0000000d40)="fb80eb7c05c6dd8ba43db0ac9a2eb29faaab85f9920e41d42ed1aa296bf7565f27afff5df9acc1a40dcbbf8616f5d864cf6ea0c948667f9a2fe18558bfb9c4bb14d8abf5ff89ad9d16991660d0565f5bf062de3a19f564b9ba20314ab1737ed0e582049bb062dff7b035632ba2ba03e330c1bd1d2202", 0x76}, {&(0x7f0000000dc0)="a73322c29be723d3aab4429ed7e6f8f0e772bcd4946e35d93ee333a19e0bc62cb73dab1afbd6e50e4a822b5c7ffc31e24013a7428644be1bcb7c715b2723f01e4c8a16af001c3eba1bb772394d69854d64ca5e652c157f063a186c6664a7ac5fd49484764e1a8449615779bdbcb564c01776d7f40e76f1495d043e1762abdc166aa91e3a929d4a263063ba9cf6bab967d94b145cc613c93409d0156ed669f0aa2ed74d1eb61ac329406c1e22617cd69623e8e6e53e15b53a4da4a05cccfa734691fdef49e5a6dbf2305d2e1ed752e21f4537eefcf233e0d046e9cf6253bc5d80458146fe1dc19f7c01cad0a6b15a6bd9c02f04", 0xf3}, {&(0x7f0000000ec0)="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", 0x1000}, {&(0x7f0000001ec0)="3905eae3e63add03faf2edfb2d6384cc3613427f9e0043d545a784691626bdb06587f2b1f5cf72e7052ed0d3343f4d825a90e00f34d265c5d9e5a199bce60dad", 0x40}], 0x8, 0x0, 0x0, 0x40080}}], 0x3, 0x4004040) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x200a0204) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8800) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7fd, 0xd, 0x8009}, 'syz0\x00', 0x40}) 1m32.985139292s ago: executing program 3 (id=145): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x2, @loopback, 0x7}, 0xfffffffffffffd70) (async, rerun: 32) shutdown(r0, 0x2) (rerun: 32) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) (async, rerun: 64) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x89a, @local, 0x9}, 0x20) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpuidle/current_governor\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r2 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='reiserfs\x00', 0x38130d1, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[], 0x0) 1m32.045118209s ago: executing program 3 (id=150): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='e:my_read_msr2 msr/r-ad_msr', 0x1b) 1m31.981955352s ago: executing program 3 (id=152): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000080400300240012800b00010067726574617000001400028008000700e000000108000100", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x804) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x14, r4, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x3, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_LBT_MODE, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0xfffffffffffffdde}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000180)={0x1d, r7}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@can={{0x4, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "71949a1857e8bcf3"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xd209f6d81082d3d6) recvfrom(r6, 0x0, 0x0, 0xc0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x6c, r10, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '{\xc7\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x37}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'nl802154\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000005) close(r9) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r11, 0x0, 0x0}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r8, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x811}, 0x4886) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000700)={@remote, r7}, 0x14) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000080400300240012800b00010067726574617000001400028008000700e000000108000100", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x804) 1m31.902180606s ago: executing program 3 (id=155): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x97, 0x8, 0x47314356, 0x4f565559, 0x3, [{0x9, 0x9}, {0x5, 0x7f75}, {0x0, 0x2001}, {0x89d, 0x2b5}, {0x7, 0x2}, {0x80000001, 0x200}, {0xffffff01, 0x8000}, {0x5, 0x400004}], 0x8, 0x8, 0x8, 0x0, 0x7}}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/rpc/use-gss-proxy\x00', 0x82, 0x184) read$FUSE(r1, &(0x7f0000002900)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x2, r2, 0x2, &(0x7f0000000180)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req={0x7, 0x8, 0xffffffff, 0x2ccb}, 0x10) ptrace(0x10, r4) ptrace$poke(0x4, r4, &(0x7f00000011c0), 0xfffffffffffffffe) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r5, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x54}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) write$binfmt_register(r1, 0x0, 0x0) 1m31.724380652s ago: executing program 3 (id=158): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x2, 0xb7, 0x7f, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x25}, 0x20, 0x700, 0xffffffff, 0x39}}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, 0x0) migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x3) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x80001003, 0x0, 0x0, 'queue1\x00', 0xfffffffd}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x6, 0x2006, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000001c0)={r4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000480)="5400000012000100"/24, 0x18) lseek(0xffffffffffffffff, 0xfffffffffffffff8, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) file_setattr(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x200, 0x0, 0x785, 0x8, 0x7ff}, 0x18, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001440)=@newtfilter={0x18e0, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0x5}, {0x1, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x18b0, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x9c}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_ACT={0x1070, 0x6, [@m_mpls={0x106c, 0xb, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x73}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0x8, 0x10000000, 0x7, 0x4}, 0x1}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r0}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x6}}, @TCA_ROUTE4_POLICE={0x818, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x4f, 0x3, 0x6, 0x3, 0x8, 0x0, 0x3ff, 0x81, 0x8, 0x77, 0x1f85e7e3, 0x39e, 0x1, 0x2, 0x7, 0xffff00, 0x0, 0x380, 0x4, 0x3, 0xf9, 0x0, 0x8, 0x4, 0x400, 0x1, 0x8, 0x1, 0x9, 0x32b3, 0x10000, 0x2521, 0x10001, 0x3, 0xc, 0x1, 0x10001, 0x101, 0x7, 0x1, 0x4, 0x3, 0x80000000, 0x8, 0x7, 0x8, 0x7fff, 0x800, 0x0, 0x6, 0xa0, 0x6, 0xffff0001, 0xb, 0x4, 0xffff8001, 0x2, 0x3, 0x18, 0xd, 0x2, 0x5, 0xd8f, 0x0, 0x4, 0xfffffffb, 0x10011, 0x27b1, 0x3, 0x2e0, 0x8, 0x8, 0x2, 0x83, 0x7, 0x5af0668a, 0x100, 0xfffffffd, 0xb, 0x3ff, 0x2, 0x0, 0x6, 0x10000, 0x3, 0xfff, 0x0, 0x1, 0x8, 0xe, 0x427d, 0x2, 0x3ff, 0x6, 0x0, 0x1, 0x7c966d50, 0x2, 0x1, 0x8, 0x86d4, 0x8, 0x2, 0xd5, 0x0, 0x2, 0x1, 0x9, 0x7, 0x80, 0x0, 0x3, 0x9, 0x0, 0x54, 0x7, 0x8, 0xf8, 0x2, 0x2275, 0x7643, 0x7fffffff, 0x8, 0x79, 0x9, 0x9, 0xd170, 0xec47, 0x7a71bb03, 0x0, 0xfffffffd, 0x10, 0x259674e7, 0x7, 0x7, 0xb10, 0x8, 0x28, 0x2, 0x4, 0x11, 0x6, 0x5, 0x100, 0x6a, 0x6, 0x9, 0x0, 0x80, 0x5, 0x1, 0x9, 0x8, 0x9, 0x1000, 0x6, 0x5, 0x6, 0xd, 0x9, 0x1, 0x2, 0xd, 0x3, 0x8, 0x0, 0x80000001, 0x800, 0x5, 0x3, 0x3, 0x6, 0x0, 0x81, 0xcd7b, 0x9, 0xf, 0x2, 0x7, 0x1, 0xc566, 0x6, 0x9, 0x327, 0xf17, 0x7, 0x8000, 0x4, 0x10, 0x4, 0x0, 0x8, 0x9, 0x3, 0x10001, 0xb422, 0x2, 0xffff, 0x3, 0x4, 0x66e8, 0x8000, 0xfffff1bd, 0x3, 0x8, 0x9, 0xad, 0x8000, 0x3800000, 0x6, 0x10001, 0x77d, 0x4, 0xf154, 0xd29, 0x7, 0x9, 0x81, 0x6, 0x8000, 0x6, 0x2, 0x1, 0x4, 0x2b, 0x6a, 0x200, 0x10000, 0x3, 0xdb, 0x6, 0x40, 0xf, 0x7c2, 0xff, 0x1000, 0x6, 0x0, 0x3, 0x3, 0x3, 0x4, 0x3, 0x2bc, 0x3, 0xe9, 0xf781, 0x2668, 0x5, 0x81, 0x6, 0x4, 0x9, 0xf, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x2, 0x2, 0x5, 0x3, 0x9, 0x7, 0x200, 0x0, 0x0, 0x2444, 0x1ff, 0x7ff, 0x6, 0x7, 0x46, 0xffffffff, 0x2, 0x7ab, 0x987, 0xff, 0x5, 0x9, 0x8, 0xf, 0x2, 0x8, 0x5, 0x2, 0x3, 0x9, 0x400, 0xb, 0x1, 0x4, 0x10001, 0x7, 0xffffffff, 0x6, 0x4, 0xbe3, 0x8001, 0x6, 0x42, 0x9, 0xffff0001, 0x4, 0x800, 0x2, 0x77, 0x9, 0x2, 0x1, 0x8, 0x77d, 0xf, 0x5b, 0x4, 0x5, 0x1, 0x2, 0x1, 0x1, 0x9, 0x8, 0x0, 0x6, 0x7d0d, 0x0, 0x78e, 0x5, 0x515c, 0x5, 0xe, 0xfffffffe, 0x5, 0xc6ab, 0x80000000, 0x0, 0x3, 0x2, 0x101, 0x80, 0xfffffff8, 0xc4, 0xc83156e9, 0x3, 0xfffff175, 0x3, 0x6, 0x400, 0x6, 0x836, 0x0, 0x5, 0xfffffff3, 0x4, 0x9, 0x7483, 0x8, 0x6, 0x2, 0x1ff, 0x3, 0x5, 0x8, 0x2, 0x4, 0x10001, 0xf, 0x3, 0x2, 0x0, 0x6, 0x9, 0x100, 0x6, 0x9, 0x3, 0x5393, 0x76102963, 0x4, 0x4, 0x9d7, 0x6, 0x800, 0x10001, 0x9, 0x6, 0x4, 0x3, 0x200, 0x3, 0x6, 0xf86, 0x3, 0x1, 0x5, 0x347, 0x4, 0x7fff, 0x5, 0x81, 0x800, 0xfff, 0x1, 0x5, 0x9, 0x2, 0x40000007, 0x7f, 0x3, 0x42, 0x1ff, 0x800, 0x7, 0x10, 0x5, 0x8001, 0x28, 0xf, 0x738, 0x9, 0x8001, 0x9, 0xfffffff8, 0xfffffff8, 0x5, 0x9, 0x3, 0x5, 0xea, 0x4, 0x0, 0x401, 0x5, 0x8000009, 0x1f10b8ed, 0x1, 0x4, 0xc, 0x10, 0x5, 0xeb0f, 0x8, 0x8ba, 0x1, 0x10, 0x9, 0x4, 0x6, 0x8, 0x3, 0x4, 0x50, 0x2, 0x4, 0xf6, 0x54, 0x6, 0xfffffc00, 0x81, 0x5, 0x8, 0x9, 0x6, 0x1800, 0xa, 0x3, 0x7, 0xcb, 0xe, 0xd, 0x200, 0x2, 0x801e, 0x40, 0x2d, 0x5, 0x80000000, 0xffff, 0x3, 0x7fffffff, 0xb, 0x8, 0xa9e, 0x5, 0x8, 0x81, 0x8, 0xcaa, 0x9, 0x9, 0x8, 0x86dd, 0x0, 0x3, 0x5, 0x1, 0x6, 0xb, 0xfffffe23, 0x4, 0x0, 0x5, 0xfffffffb, 0x7, 0x8, 0x7, 0x3c, 0x6, 0x40, 0xb, 0x401, 0x9, 0x3]}]}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x18e0}}, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r8, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r8, 0x6, 0x19, &(0x7f0000000080)=@ccm_128={{0x304}, "3533670244f9c17b", "fd73b0610edb2d71e52c522eddc7014d", "421c1beb", "2302ad114616d7c6"}, 0x28) 1m16.737013099s ago: executing program 33 (id=158): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x2, 0xb7, 0x7f, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x25}, 0x20, 0x700, 0xffffffff, 0x39}}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, 0x0) migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x3) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x80001003, 0x0, 0x0, 'queue1\x00', 0xfffffffd}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x6, 0x2006, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000001c0)={r4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000480)="5400000012000100"/24, 0x18) lseek(0xffffffffffffffff, 0xfffffffffffffff8, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) file_setattr(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x200, 0x0, 0x785, 0x8, 0x7ff}, 0x18, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001440)=@newtfilter={0x18e0, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0x5}, {0x1, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x18b0, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x9c}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_ACT={0x1070, 0x6, [@m_mpls={0x106c, 0xb, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x73}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0x8, 0x10000000, 0x7, 0x4}, 0x1}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r0}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x6}}, @TCA_ROUTE4_POLICE={0x818, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x4f, 0x3, 0x6, 0x3, 0x8, 0x0, 0x3ff, 0x81, 0x8, 0x77, 0x1f85e7e3, 0x39e, 0x1, 0x2, 0x7, 0xffff00, 0x0, 0x380, 0x4, 0x3, 0xf9, 0x0, 0x8, 0x4, 0x400, 0x1, 0x8, 0x1, 0x9, 0x32b3, 0x10000, 0x2521, 0x10001, 0x3, 0xc, 0x1, 0x10001, 0x101, 0x7, 0x1, 0x4, 0x3, 0x80000000, 0x8, 0x7, 0x8, 0x7fff, 0x800, 0x0, 0x6, 0xa0, 0x6, 0xffff0001, 0xb, 0x4, 0xffff8001, 0x2, 0x3, 0x18, 0xd, 0x2, 0x5, 0xd8f, 0x0, 0x4, 0xfffffffb, 0x10011, 0x27b1, 0x3, 0x2e0, 0x8, 0x8, 0x2, 0x83, 0x7, 0x5af0668a, 0x100, 0xfffffffd, 0xb, 0x3ff, 0x2, 0x0, 0x6, 0x10000, 0x3, 0xfff, 0x0, 0x1, 0x8, 0xe, 0x427d, 0x2, 0x3ff, 0x6, 0x0, 0x1, 0x7c966d50, 0x2, 0x1, 0x8, 0x86d4, 0x8, 0x2, 0xd5, 0x0, 0x2, 0x1, 0x9, 0x7, 0x80, 0x0, 0x3, 0x9, 0x0, 0x54, 0x7, 0x8, 0xf8, 0x2, 0x2275, 0x7643, 0x7fffffff, 0x8, 0x79, 0x9, 0x9, 0xd170, 0xec47, 0x7a71bb03, 0x0, 0xfffffffd, 0x10, 0x259674e7, 0x7, 0x7, 0xb10, 0x8, 0x28, 0x2, 0x4, 0x11, 0x6, 0x5, 0x100, 0x6a, 0x6, 0x9, 0x0, 0x80, 0x5, 0x1, 0x9, 0x8, 0x9, 0x1000, 0x6, 0x5, 0x6, 0xd, 0x9, 0x1, 0x2, 0xd, 0x3, 0x8, 0x0, 0x80000001, 0x800, 0x5, 0x3, 0x3, 0x6, 0x0, 0x81, 0xcd7b, 0x9, 0xf, 0x2, 0x7, 0x1, 0xc566, 0x6, 0x9, 0x327, 0xf17, 0x7, 0x8000, 0x4, 0x10, 0x4, 0x0, 0x8, 0x9, 0x3, 0x10001, 0xb422, 0x2, 0xffff, 0x3, 0x4, 0x66e8, 0x8000, 0xfffff1bd, 0x3, 0x8, 0x9, 0xad, 0x8000, 0x3800000, 0x6, 0x10001, 0x77d, 0x4, 0xf154, 0xd29, 0x7, 0x9, 0x81, 0x6, 0x8000, 0x6, 0x2, 0x1, 0x4, 0x2b, 0x6a, 0x200, 0x10000, 0x3, 0xdb, 0x6, 0x40, 0xf, 0x7c2, 0xff, 0x1000, 0x6, 0x0, 0x3, 0x3, 0x3, 0x4, 0x3, 0x2bc, 0x3, 0xe9, 0xf781, 0x2668, 0x5, 0x81, 0x6, 0x4, 0x9, 0xf, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x2, 0x2, 0x5, 0x3, 0x9, 0x7, 0x200, 0x0, 0x0, 0x2444, 0x1ff, 0x7ff, 0x6, 0x7, 0x46, 0xffffffff, 0x2, 0x7ab, 0x987, 0xff, 0x5, 0x9, 0x8, 0xf, 0x2, 0x8, 0x5, 0x2, 0x3, 0x9, 0x400, 0xb, 0x1, 0x4, 0x10001, 0x7, 0xffffffff, 0x6, 0x4, 0xbe3, 0x8001, 0x6, 0x42, 0x9, 0xffff0001, 0x4, 0x800, 0x2, 0x77, 0x9, 0x2, 0x1, 0x8, 0x77d, 0xf, 0x5b, 0x4, 0x5, 0x1, 0x2, 0x1, 0x1, 0x9, 0x8, 0x0, 0x6, 0x7d0d, 0x0, 0x78e, 0x5, 0x515c, 0x5, 0xe, 0xfffffffe, 0x5, 0xc6ab, 0x80000000, 0x0, 0x3, 0x2, 0x101, 0x80, 0xfffffff8, 0xc4, 0xc83156e9, 0x3, 0xfffff175, 0x3, 0x6, 0x400, 0x6, 0x836, 0x0, 0x5, 0xfffffff3, 0x4, 0x9, 0x7483, 0x8, 0x6, 0x2, 0x1ff, 0x3, 0x5, 0x8, 0x2, 0x4, 0x10001, 0xf, 0x3, 0x2, 0x0, 0x6, 0x9, 0x100, 0x6, 0x9, 0x3, 0x5393, 0x76102963, 0x4, 0x4, 0x9d7, 0x6, 0x800, 0x10001, 0x9, 0x6, 0x4, 0x3, 0x200, 0x3, 0x6, 0xf86, 0x3, 0x1, 0x5, 0x347, 0x4, 0x7fff, 0x5, 0x81, 0x800, 0xfff, 0x1, 0x5, 0x9, 0x2, 0x40000007, 0x7f, 0x3, 0x42, 0x1ff, 0x800, 0x7, 0x10, 0x5, 0x8001, 0x28, 0xf, 0x738, 0x9, 0x8001, 0x9, 0xfffffff8, 0xfffffff8, 0x5, 0x9, 0x3, 0x5, 0xea, 0x4, 0x0, 0x401, 0x5, 0x8000009, 0x1f10b8ed, 0x1, 0x4, 0xc, 0x10, 0x5, 0xeb0f, 0x8, 0x8ba, 0x1, 0x10, 0x9, 0x4, 0x6, 0x8, 0x3, 0x4, 0x50, 0x2, 0x4, 0xf6, 0x54, 0x6, 0xfffffc00, 0x81, 0x5, 0x8, 0x9, 0x6, 0x1800, 0xa, 0x3, 0x7, 0xcb, 0xe, 0xd, 0x200, 0x2, 0x801e, 0x40, 0x2d, 0x5, 0x80000000, 0xffff, 0x3, 0x7fffffff, 0xb, 0x8, 0xa9e, 0x5, 0x8, 0x81, 0x8, 0xcaa, 0x9, 0x9, 0x8, 0x86dd, 0x0, 0x3, 0x5, 0x1, 0x6, 0xb, 0xfffffe23, 0x4, 0x0, 0x5, 0xfffffffb, 0x7, 0x8, 0x7, 0x3c, 0x6, 0x40, 0xb, 0x401, 0x9, 0x3]}]}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x18e0}}, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r8, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r8, 0x6, 0x19, &(0x7f0000000080)=@ccm_128={{0x304}, "3533670244f9c17b", "fd73b0610edb2d71e52c522eddc7014d", "421c1beb", "2302ad114616d7c6"}, 0x28) 4.692250158s ago: executing program 0 (id=725): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xe, 0x2}, {0xf, 0xffff}, {0xfff2, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040050) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@gettaction={0x104, 0x32, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x88, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5752}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4044830}, 0x4004884) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0xa0000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_mr_vif\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000400)=[r5], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x7}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)={0x1a8, 0x18, 0x1, 0x70bd25, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0x15a, 0x0, 0x1, [@nested={0x45, 0x39, 0x0, 0x1, [@generic="a4317e13a22e7cddf8795e5f2882fb8ce4c8ab47610c02504d7231d21d8ff700306a63b543d1171883", @generic="dced8f2c369b2609fd8193f10ebb2b794505989a0bada588"]}]}]}, @nested={0x144, 0x6, 0x0, 0x1, [@nested={0x140, 0xfa, 0x0, 0x1, [@nested={0x13c, 0x13e, 0x0, 0x1, [@nested={0x138, 0xa0, 0x0, 0x1, [@nested={0x134, 0x61, 0x0, 0x1, [@nested={0x130, 0x6d, 0x0, 0x1, [@nested={0x12c, 0xd1, 0x0, 0x1, [@nested={0x128, 0x112, 0x0, 0x1, [@nested={0x121, 0xcd, 0x0, 0x1, [@generic="42110f1d6f88ff52f41c6a703875b814ba2c48b3f0cf607256b8d243a3227bb11571d268c41187452c28663be3d9e39505157b48b9212b07ca7b4686a2a55f4f80cbea3f494421c794c12d35f89faffe1de6605dfada605ad7c5d1212f30e4f92cf2ae0e57c77aa34e47801d546b04458c2f6011fb906b6ed5217cb687ba4ddfe78e78b635fdfc513245c2cf7b69f9218d14bb4039e9e3c4cd1c649f4cdea528557d814da783fd6a399fb44d9ceae7ab2e046a74094f015f2aad655abdd7d7bd884d9eacfdffb8d690d970427074e38ab80e3fd67c77f2ec7fb214f91cdf12924a9bc02b01c5e2618391a7ef7c9a44cdce8b538dc7", @nested={0x28, 0x28, 0x0, 0x1, [@nested={0x21, 0x3a, 0x0, 0x1, [@generic="764e9ef8fa02ac8a1ec86f999149427d11f34c130c18bf0d7667bea714"]}]}]}]}]}]}]}]}]}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet6_int(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r7, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 4.689465617s ago: executing program 2 (id=727): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000480)={'fscrypt:', @desc4}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60c848722ba3b132e4fde178c945bd910b0477e804fc8a5909000000000000a6b0aa00265acd465fbb47a100", 0x10000000}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x97) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r5, 0xf) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0xfeffffffffffff) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x2) 4.353302591s ago: executing program 0 (id=732): r0 = mq_open(&(0x7f0000000000)='{\x00', 0x40, 0x4, &(0x7f0000000040)={0x3ff, 0xf5, 0x3ff, 0x6}) setns(0xc9, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r1, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x28, 0x1001, 0x5c01, 0x0, 0x0, "", [@nested={0x18, 0x5, 0x0, 0x1, [@nested={0x14, 0xe8, 0x0, 0x1, [@nested={0x4, 0x101}, @typed={0x8, 0x12d, 0x0, 0x0, @uid}, @typed={0x4, 0x124}]}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x440d0}, 0x10) mq_getsetattr(r0, 0x0, 0x0) 4.353131876s ago: executing program 0 (id=733): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) iopl(0x3) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r0}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000004000, 0x10000ffffffff, 0x1000, 0x3, 0x14000000, 0x1000008, 0x1, 0xfffffffffffff7fc, 0x100fff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) recvfrom(r2, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 4.315832195s ago: executing program 5 (id=735): tee(0xffffffffffffffff, 0xffffffffffffffff, 0xffff, 0x1) (fail_nth: 1) 4.204056969s ago: executing program 5 (id=737): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) r1 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000040)={0x2e, 0x66, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x33f81def, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f00000000c0)) setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r4, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socket$inet6(0xa, 0x2, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000040)={0x0, 0xc4, 0x4000, 0xfffffffd, 0x115}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc577, 0x10, 0x1, 0x124}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf3d8, 0x1, 0x1, 0x7ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf58c, 0x8000, 0x4003bfff, 0x4029d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x8000, 0x1, 0x26d}}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.692482365s ago: executing program 2 (id=738): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x6000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 3.574370002s ago: executing program 5 (id=739): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@getlink={0x2c, 0x12, 0x321, 0x70bd25, 0x8000, {0x7}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) (async) r4 = openat$nmem0(0xffffff9c, &(0x7f0000000100), 0x101200, 0x0) r5 = openat(r4, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) creat(&(0x7f0000000040)='./file2\x00', 0x8) (async) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') (async) lseek(r3, 0x3, 0x0) (async) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x10800) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) 3.572482416s ago: executing program 5 (id=740): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x1000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_COPY(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000547000/0x1000)=nil, &(0x7f000071d000/0x4000)=nil, 0x1000}) socket$inet6_sctp(0xa, 0x801, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) 3.347705455s ago: executing program 5 (id=741): r0 = socket$inet(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000f40)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10}, {0x3, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) write(r1, &(0x7f0000000000)='3', 0x4e) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000030000000000000000009500200000040000"], &(0x7f0000000680)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setresuid(0x0, 0xee01, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000280), 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) symlinkat(&(0x7f0000000880)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000003c0)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9f, 0x10, 0x2, 0x88, 0x9c0}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xa, 0xf, &(0x7f00000027c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000001d8500000008000000bf0920000000000055090100000000009500000000000000bd9a000000000000b70200000000000085000000a0000000b7000000000000009500000000000000"], &(0x7f0000000a80)='GPL\x00'}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0xcb, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca249435, &(0x7f0000001040)={0x2, 0x6, @status={[0xd, 0x0, 0xf, 0x6, 0x6e, 0x5]}, [0x2, 0xfffffffffffffff9, 0x9, 0x0, 0x2, 0x69, 0x2, 0x0, 0xfffffffffffffffa, 0x4000000000, 0x7ffffffffffffffc, 0x5, 0x6, 0x7fffffff, 0x2, 0x7f66, 0x9, 0x5, 0x1, 0x8001, 0x1, 0x100, 0xfffffffffffffffd, 0x1, 0x8, 0x2, 0x8000000000000000, 0x8000000000000001, 0x9, 0xd00000000, 0x5, 0x4, 0x744, 0x3, 0x8, 0x10, 0x100000000, 0xaf, 0xffffffffffffffff, 0x4, 0x9, 0x5, 0x320353a1, 0x0, 0x1, 0x4, 0x9, 0x1, 0x7, 0x5, 0x100, 0x100, 0x3ff, 0x3, 0x2, 0xfffffffffffffff9, 0xe24, 0x2, 0x3, 0x1, 0x2, 0x100000200, 0x401, 0x80]}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a0000080480ff7f0905811765"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x9, 0x7fff, 0xf, 0x8, 0x80, 0x8, 0x9, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x100, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe65f, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0x81, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x8, 0x1000004, 0xffff, 0x400, 0x7f, 0x10001, 0x5, 0x6, 0x1, 0x5, 0x1, 0x4], [0x10000007, 0x400009, 0x80000130, 0x8, 0x5, 0x6, 0x2, 0xc8, 0xf6, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0xb, 0x0, 0x5, 0x42f, 0x0, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x3, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x25f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x8, 0x4000003, 0x3, 0x9, 0x400, 0x3, 0x3, 0xbc45, 0x48c93694, 0xa74, 0x9], [0x7, 0x8, 0x0, 0x5, 0xfbfffffc, 0x100, 0x9, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xe, 0x5, 0x2, 0x2, 0x3, 0x200000, 0x2, 0x6d03, 0x6, 0x81, 0x8000, 0x200, 0x400080, 0x3, 0x7, 0x2950bfaf, 0x2, 0x4, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x6d, 0x7, 0x80000, 0x2, 0x2, 0x120000, 0x6, 0x0, 0x80aaed, 0x4, 0x26], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x4, 0x93a, 0x1, 0x1000006, 0x5, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x80000000, 0x1000, 0x7f, 0x6, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x8, 0x20007, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1001, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c0a, 0x0, 0x4, 0x928, 0xb1e, 0x2140738a, 0x200, 0xffff2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) pipe2(&(0x7f0000000100), 0x800) 3.055972605s ago: executing program 2 (id=742): r0 = socket$xdp(0x2c, 0x3, 0x0) add_key$user(&(0x7f0000000100), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000480)="da854c5846c9543802000000319a2001c383628001b31b8e06f0c3edcde70baa8d01d5a9746982aa0a84f7141cb1e82b34e6c81723ff911005021ca0bb027107a12f4af7a4e11cd4fd68e22e5a67a13a362812903e6622c0bca44b9ddf1eb6efa4bec9e909d5e23a9e9d70e49a16ae1d86048ae5bbd97feb71f5df56c1bcb29d3a2b1280e1201c11d708f8231a6f4237714703d8ab01d9a62d8d59492fd3edd0f404cae42c17a3acafeeb5", 0xab, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000100000)=""/8179, 0x0, 0x800, 0x2320, 0x3}, 0x8) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x19) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) dup3(r4, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x83) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2000000014000105000000000000000023000000010000000500020008000000", 0x20}], 0x1}, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r6, &(0x7f0000000100)={0x23, 0x10, 0x28}, 0x10) connect$phonet_pipe(r6, &(0x7f0000000140)={0x23, 0x10, 0x8}, 0x10) (async) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000001c0)={'caif0\x00', 0x1}) r8 = socket$packet(0x11, 0x3, 0xf500) bind$packet(r8, &(0x7f0000000000)={0x11, 0x5, 0x1}, 0x14) 2.817554868s ago: executing program 0 (id=743): unshare(0x6a040200) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x8d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1be) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x80000000, @private2={0xfc, 0x2, '\x00', 0xfd}, 0xc}, 0x1c) clock_gettime(0x7, &(0x7f00000009c0)) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r2, 0x2e5, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="24008000200025a726a200375329f96f00fcfefffdeededdd5c28c6ef72f14cde76bd43460573b64297a21d6df66fa3f32ff58974375adb54f1de945f5d44156e82844876e76753a0c7dc5b677dd40e9d333f0384e1786c4c25ea5e1a96d789d019ed179cd2db941de10bd33587bda24b82af68ddd47dc1767023821979cd5acab08750611bc4284ad975ce7d1f521cb894066ac0d42c958fbc7df5bd5a75394fe6e1adccc26c624be94ce77c38361e56ea8cd19335b5488d6bf5872ce84e59e98eb79e01a6cb6d01eacc02abc45e33518be45b1e80f01d2d50e12b5cb226107e10cc32a53f9b9eacdd6e97e5cf74ef9fe1de47f55a5ff779d2fa0a4917ff7d7f18e790a220e22d7465a2acd906401ff8f520c9ba4fa08883aaea55b3a3e2d3905c7b3e7b3d93d9af2eba6b8846370f45df75ac9d62af0b48fbfbfa67e70a9a2d2cce4bcbced37dfd3aa7d5af729102f713bab97218f8704420d10e75da4a5"], 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, 0x0, 0x0) 1.970607288s ago: executing program 2 (id=745): socket$inet6_sctp(0xa, 0x801, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (fail_nth: 6) 1.882043169s ago: executing program 2 (id=746): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) syz_emit_ethernet(0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000380065000000019078ac1e0001ac1414aa03039078000300034523000800650a5398060001e0000002e000000100000000c00000d299e4d10e"], 0x0) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ea8f0000000000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000011282dd98500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) recvfrom$inet6(r2, &(0x7f0000000640)=""/248, 0xffffff1f, 0x40010002, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) writev(r2, &(0x7f0000001400)=[{&(0x7f0000000740)="58dd", 0x2}], 0x1) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f0000000440)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0x1000ffb, 0x7, 0x10, 0xc1, 0x4, 0x1, 0x3, 0x1, 0x101, 0x107e, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x9, 0x800004, 0x2, 0x762, 0x3, 0x80, 0x3, 0x2b13, 0x100, 0x6, 0x1c04, 0xb, 0x0, 0xbef4, 0x8, 0x80020fe, 0x3, 0x3, 0x11000, 0x9, 0x2, 0x79b, 0x2, 0x1, 0x7d, 0x8, 0xfffffffe, 0x7, 0xd, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x400a, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x405, 0x6, 0x8, 0x9, 0xb, 0x5, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x3, 0x8, 0xffff, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x7ffffffe, 0xfdffffff, 0xfffffffe, 0x6, 0x83, 0x800100, 0x5, 0x255, 0x81, 0x4, 0x5, 0x20006, 0x7, 0xffffffff, 0xb, 0x2, 0x800, 0x1, 0x2a2, 0xfffffffc, 0x2, 0x2, 0x7, 0x1, 0x0, 0xfffffffd, 0x2, 0x40, 0x8, 0x1, 0x3, 0x3ff, 0x66cd, 0x8, 0x8, 0x2, 0x1fc, 0xc5c, 0xffffffff]}}) 1.377794229s ago: executing program 0 (id=748): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14, 0x800) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0xf22) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x3) msgrcv(0x0, 0x0, 0x2000, 0x1, 0x5800) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) r3 = getpid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r5, 0xda90) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x9, 0x12) open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x89101) accept4(r5, 0x0, 0x0, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000000)='27', 0x2) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r8, 0x1, 0x1d, 0x0, 0x0) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) read(r4, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r4, &(0x7f00000000c0)=r3, 0x12) close(r4) 881.664339ms ago: executing program 2 (id=749): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000380)={{0x0, 0x4, 0xc621, 0x8006, 0x1000, 0xa, 0x7fffffffffffffff, 0x9, 0x7fffffff, 0x80, 0x97e2, 0x7fffffffffffffff, 0x7, 0xfffffffffffff825, 0x7}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000640)={{0x0, 0x3, 0xa5, 0x10, 0x8, 0x7ec, 0x7, 0x9, 0x7, 0xb176, 0xea, 0x6, 0x100, 0x202, 0x3}, 0x18, [0x0, 0x0, 0x0]}) bind$tipc(r0, 0x0, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) read(r3, &(0x7f00000002c0)=""/153, 0x99) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002100), 0x108000, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0, @ANYRES16=r2]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x81900) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r5 = memfd_create(&(0x7f0000000500)='\x14\xa3\xbb\a\x002RgZ*\xc5\x9e[,\xe5uR\x94\xaa\xdc0\xe6n\xb8\xea\xe8\x99Lh(\xc7\xbb_\x81\x15f\xe7\x100\r\x1fE\x82\xf5\xfd\x83\xff{\xa0\x15\xffK\xe4\x98\x93\xf9\xc4!_\x96\xe8&,\xdf\x12\xc0\xa7Y1\x8bUs\x91)\x89\xd0\xa1OF4\xa4fI\a\x84_r\xc6\xdaq%\xd3\x98\n\x7fmF\xa9\xbb\x16\x8bxb\xc8\xfc\xad?\x01\xf40\xf5\xc3\xf3+\xa7\x94=\x96\xe6*~\x18\x9c\xfe\xfe\xdcNWGn\xfa\xf8,\xa9\x84\xf7\xe1RA9\xfeD@\x18b\x1dgz\xdfc\x05>O\xa0\x8b\xce\xe0\x8cS\xfanA\xecx\xc4\xdd\x82aT\xb5b\xc5\xaa\x8fj\xb2\xc3\x96\x96\"&)!Z\x1e\tBq\x96L\x97\xc9G\xaa\x85\xc3C \xa1\x98o\f\xf2\x02\x05oV\a\x82\x9e\")\xfb\xa09b\xb6\v\xb3\xe1p\x97\xe9\x13\xb5-\xc1x<\xc9]\x85\xbb\xb6h\xee\x91Q\xd0V\x80\xbc\x88?\x9cr\x13<\xa5g=CA\xd8d\x86\fr\xee=r0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r2}) (async) openat$drirender128(0xffffff9c, &(0x7f0000000040), 0xa0002, 0x0) 421.832093ms ago: executing program 4 (id=753): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x6000, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) 355.662374ms ago: executing program 4 (id=754): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', &(0x7f0000000080)='configfs\x00', 0x20000a, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x101080, 0x4) syz_clone(0x80000, &(0x7f0000000100)="690066043190aadc88f89df31cf5fa27f42a7789eff219b031a97b86f5e73d5ab9d33842a98ecf817a1bcec10dd09b5f5768aa1c3e32ac4ba709b689e0afc000957c7e56fa88a0c4d75da93ad9b65665745204945f7a302a6203b42c8640beb4e37c5c43f34c4a7bec505bd32286638049b982600118266de6c1603c2708cadf907dd2ab51f6efbc3d6144e3741340234529dc307182469be9805a0644209e7377509eeaab21c4d35b8717308788", 0xae, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="9319e0ff032640f5e3760b6729ae9328d0a8091cc7aeb09aff205bd5a451f42ea03717b0adbbe5d3325402f4fbe170ec5a7669269219bb10d4b5ec9de55620f1c410a08861cae1ca2d37") 355.472095ms ago: executing program 4 (id=755): r0 = socket(0x10, 0x3, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1, 0x0, 0x0, 0x4}, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/116, 0x74}, {&(0x7f00000002c0)=""/53, 0x35}, {&(0x7f0000000500)=""/151, 0x97}, {&(0x7f0000000140)}, {&(0x7f00000000c0)=""/39, 0x27}], 0x5}, 0x2023) close(r1) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r4) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000100)={0x53, 0xfffffffffffffffb, 0x6, 0x7, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000180)="5aeda7a752c2", 0x0, 0x20000040, 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x5) 238.28162ms ago: executing program 4 (id=756): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x88000) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000004002b8008001b00000000003a421d073fc1aae59cd594ff68b93a8c1c469a101554d057c3436fc2f54ac9f5dee900009d49844168995fc641fb7ae0c109bdaca84cb1d5052ef17a946ae908278315b1f22f3308c44e894eed2dfc77b1973a16aa8faa2c9325455745a962d5564a75dd58ea3304da221fa8ed37343877ef2c5428bc3096ca6fd33696daa4a6befcbb991c52221d0d958f34eb3ffc563f40f07371586b3c777d3953a3e7b455c02fbf30a68c140395269d418fb204c8bc066fafe94ddf6dd62f17e44d621d93da4187780bf2a641c835f078"], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000050801"], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) 96.99596ms ago: executing program 0 (id=757): unshare(0x6a040200) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x8d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1be) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x80000000, @private2={0xfc, 0x2, '\x00', 0xfd}, 0xc}, 0x1c) clock_gettime(0x7, &(0x7f00000009c0)) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r2, 0x2e5, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 5 (id=758): r0 = open(&(0x7f0000000240)='./ms/fs/ocfs2/cluster_stack\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='user', 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r1, 0xa}, &(0x7f00000001c0)=0x8) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000200)=0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161642, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000200), 0x0, r3}, 0x68) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): an invalid length. [ 144.430299][ T7996] openvswitch: netlink: Flow key attr not present in new flow. [ 144.486744][ T7999] FAULT_INJECTION: forcing a failure. [ 144.486744][ T7999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.486780][ T7999] CPU: 3 UID: 0 PID: 7999 Comm: syz.0.473 Not tainted syzkaller #0 PREEMPT(full) [ 144.486800][ T7999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.486812][ T7999] Call Trace: [ 144.486819][ T7999] [ 144.486826][ T7999] dump_stack_lvl+0x100/0x190 [ 144.486856][ T7999] should_fail_ex.cold+0x5/0xa [ 144.486881][ T7999] _copy_to_user+0x32/0xd0 [ 144.486909][ T7999] simple_read_from_buffer+0xcb/0x170 [ 144.486934][ T7999] proc_fail_nth_read+0x1af/0x230 [ 144.486958][ T7999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.486981][ T7999] ? rw_verify_area+0xce/0x6d0 [ 144.487001][ T7999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.487023][ T7999] vfs_read+0x1e4/0xb40 [ 144.487045][ T7999] ? lock_acquire+0x1d1/0x380 [ 144.487070][ T7999] ? __fget_files+0x34/0x3d0 [ 144.487090][ T7999] ? __pfx_vfs_read+0x10/0x10 [ 144.487107][ T7999] ? find_held_lock+0x2b/0x80 [ 144.487128][ T7999] ? __fget_files+0x215/0x3d0 [ 144.487155][ T7999] ? __fget_files+0x21f/0x3d0 [ 144.487185][ T7999] ksys_read+0x12a/0x250 [ 144.487206][ T7999] ? __pfx_ksys_read+0x10/0x10 [ 144.487235][ T7999] do_int80_emulation+0x166/0x650 [ 144.487262][ T7999] asm_int80_emulation+0x1a/0x20 [ 144.487280][ T7999] RIP: 0023:0xf71875ab [ 144.487294][ T7999] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 144.487312][ T7999] RSP: 002b:00000000f543d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 144.487331][ T7999] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f543d5d0 [ 144.487343][ T7999] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 144.487354][ T7999] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 144.487364][ T7999] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 144.487375][ T7999] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.487399][ T7999] [ 144.566140][ T8001] lo speed is unknown, defaulting to 1000 [ 144.809638][ T8011] CUSE: info not properly terminated [ 144.853747][ T3270] lo speed is unknown, defaulting to 1000 [ 144.856332][ T8012] profile_transition: unconfined exec no attachment [ 144.876133][ T8014] profile_transition: unconfined exec no attachment [ 145.342865][ T8020] profile_transition: unconfined exec no attachment [ 145.368563][ T8021] profile_transition: unconfined exec no attachment [ 145.407558][ T8018] Bluetooth: ISO socket layer initialized [ 145.421389][ T8018] netlink: 'syz.2.480': attribute type 2 has an invalid length. [ 145.421407][ T8018] netlink: 723 bytes leftover after parsing attributes in process `syz.2.480'. [ 145.465181][ T8023] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.481' resets device [ 145.860010][ T8042] mmap: syz.4.487 (8042) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 146.039315][ T8048] Console: switching to colour dummy device 80x25 [ 146.149065][ T8049] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 146.157983][ T8049] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 146.158125][ T8049] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 146.158504][ T8049] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 146.159947][ T8049] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 146.202093][ T8049] pci 0000:00:01.0: Adding to iommu group 1 [ 146.212004][ T8049] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 146.212019][ T8049] pci 0000:00:01.0: vgaarb: bridge control possible [ 146.212049][ T8049] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 146.223289][ T8049] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 146.224374][ T8049] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 146.228862][ T8049] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 146.253379][ T8049] [drm] Found bochs VGA, ID 0xb0c5. [ 146.253392][ T8049] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 146.306269][ T8049] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 146.558693][ T8049] Console: switching to colour frame buffer device 160x50 [ 146.595821][ T8049] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 146.746633][ T8057] lo speed is unknown, defaulting to 1000 [ 146.787849][ T8057] FAULT_INJECTION: forcing a failure. [ 146.787849][ T8057] name failslab, interval 1, probability 0, space 0, times 0 [ 146.787887][ T8057] CPU: 3 UID: 0 PID: 8057 Comm: syz.5.492 Not tainted syzkaller #0 PREEMPT(full) [ 146.787909][ T8057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.787921][ T8057] Call Trace: [ 146.787927][ T8057] [ 146.787935][ T8057] dump_stack_lvl+0x100/0x190 [ 146.788027][ T8057] should_fail_ex.cold+0x5/0xa [ 146.788053][ T8057] should_failslab+0xc2/0x120 [ 146.788106][ T8057] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 146.788131][ T8057] ? lockdep_hardirqs_on+0x7d/0x110 [ 146.788179][ T8057] ? __d_alloc+0x35/0xa50 [ 146.788212][ T8057] __d_alloc+0x35/0xa50 [ 146.788238][ T8057] ? inode_set_ctime_current+0x283/0x850 [ 146.788267][ T8057] d_alloc_pseudo+0x1c/0xc0 [ 146.788287][ T8057] alloc_file_pseudo+0x118/0x290 [ 146.788317][ T8057] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 146.788354][ T8057] ioctx_alloc+0x5d6/0x21a0 [ 146.788389][ T8057] ? __might_fault+0xc5/0x140 [ 146.788409][ T8057] ? find_held_lock+0x2b/0x80 [ 146.788433][ T8057] ? __pfx_ioctx_alloc+0x10/0x10 [ 146.788485][ T8057] __ia32_compat_sys_io_setup+0xc8/0x220 [ 146.788518][ T8057] __do_fast_syscall_32+0x13a/0x8b0 [ 146.788548][ T8057] do_fast_syscall_32+0x32/0x70 [ 146.788573][ T8057] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 146.788598][ T8057] RIP: 0023:0xf7f22fec [ 146.788620][ T8057] Code: Unable to access opcode bytes at 0xf7f22fc2. [ 146.788629][ T8057] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 00000000000000f5 [ 146.788656][ T8057] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 146.788669][ T8057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.788681][ T8057] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 146.788694][ T8057] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 146.788706][ T8057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.788734][ T8057] [ 146.998728][ T8060] profile_transition: unconfined exec no attachment [ 147.019982][ T8061] profile_transition: unconfined exec no attachment [ 147.204678][ T8066] fuse: Bad value for 'user_id' [ 147.204699][ T8066] fuse: Bad value for 'user_id' [ 147.414492][ T8075] FAULT_INJECTION: forcing a failure. [ 147.414492][ T8075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.414521][ T8075] CPU: 1 UID: 0 PID: 8075 Comm: syz.4.497 Not tainted syzkaller #0 PREEMPT(full) [ 147.414542][ T8075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.414554][ T8075] Call Trace: [ 147.414560][ T8075] [ 147.414567][ T8075] dump_stack_lvl+0x100/0x190 [ 147.414596][ T8075] should_fail_ex.cold+0x5/0xa [ 147.414620][ T8075] _copy_from_user+0x2e/0xd0 [ 147.414646][ T8075] get_old_timex32+0xa2/0x520 [ 147.414666][ T8075] ? __pfx_get_old_timex32+0x10/0x10 [ 147.414682][ T8075] ? get_pid_task+0x106/0x250 [ 147.414714][ T8075] ? rcu_read_lock_any_held+0x6a/0x90 [ 147.414747][ T8075] ? find_held_lock+0x2b/0x80 [ 147.414772][ T8075] __do_sys_clock_adjtime32+0x93/0x280 [ 147.414795][ T8075] ? __pfx___do_sys_clock_adjtime32+0x10/0x10 [ 147.414816][ T8075] ? __mutex_unlock_slowpath+0x35d/0x930 [ 147.414854][ T8075] ? ksys_write+0x1ac/0x250 [ 147.414876][ T8075] ? __pfx_ksys_write+0x10/0x10 [ 147.414903][ T8075] __do_fast_syscall_32+0x13a/0x8b0 [ 147.414926][ T8075] ? lockdep_hardirqs_on+0x7d/0x110 [ 147.414963][ T8075] do_fast_syscall_32+0x32/0x70 [ 147.414988][ T8075] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.415011][ T8075] RIP: 0023:0xf7f03fec [ 147.415031][ T8075] Code: Unable to access opcode bytes at 0xf7f03fc2. [ 147.415040][ T8075] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000157 [ 147.415058][ T8075] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000280 [ 147.415070][ T8075] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.415081][ T8075] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.415091][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.415101][ T8075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.415126][ T8075] [ 147.465415][ T8080] profile_transition: unconfined exec no attachment [ 147.487776][ T8081] profile_transition: unconfined exec no attachment [ 147.620587][ T8091] FAULT_INJECTION: forcing a failure. [ 147.620587][ T8091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.620620][ T8091] CPU: 1 UID: 0 PID: 8091 Comm: syz.2.502 Not tainted syzkaller #0 PREEMPT(full) [ 147.620641][ T8091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.620654][ T8091] Call Trace: [ 147.620660][ T8091] [ 147.620668][ T8091] dump_stack_lvl+0x100/0x190 [ 147.620697][ T8091] should_fail_ex.cold+0x5/0xa [ 147.620728][ T8091] _copy_from_user+0x2e/0xd0 [ 147.620756][ T8091] get_old_timex32+0xa2/0x520 [ 147.620774][ T8091] ? __pfx_get_old_timex32+0x10/0x10 [ 147.620791][ T8091] ? get_pid_task+0x106/0x250 [ 147.620821][ T8091] ? rcu_read_lock_any_held+0x6a/0x90 [ 147.620843][ T8091] ? find_held_lock+0x2b/0x80 [ 147.620883][ T8091] __do_sys_clock_adjtime32+0x93/0x280 [ 147.620906][ T8091] ? __pfx___do_sys_clock_adjtime32+0x10/0x10 [ 147.620930][ T8091] ? __mutex_unlock_slowpath+0x35d/0x930 [ 147.620969][ T8091] ? ksys_write+0x1ac/0x250 [ 147.620992][ T8091] ? __pfx_ksys_write+0x10/0x10 [ 147.621018][ T8091] __do_fast_syscall_32+0x13a/0x8b0 [ 147.621041][ T8091] ? lockdep_hardirqs_on+0x7d/0x110 [ 147.621066][ T8091] do_fast_syscall_32+0x32/0x70 [ 147.621089][ T8091] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.621112][ T8091] RIP: 0023:0xf7ff5fec [ 147.621132][ T8091] Code: Unable to access opcode bytes at 0xf7ff5fc2. [ 147.621141][ T8091] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000157 [ 147.621159][ T8091] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800003c0 [ 147.621171][ T8091] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.621181][ T8091] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.621191][ T8091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.621202][ T8091] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.621226][ T8091] [ 147.827091][ T8109] netlink: 36 bytes leftover after parsing attributes in process `syz.5.507'. [ 147.907202][ T8115] fuse: Unknown parameter 'user_id_00000000000000000000' [ 147.926405][ T8117] netlink: 20 bytes leftover after parsing attributes in process `syz.5.510'. [ 148.396235][ T8123] FAULT_INJECTION: forcing a failure. [ 148.396235][ T8123] name failslab, interval 1, probability 0, space 0, times 0 [ 148.396261][ T8123] CPU: 0 UID: 0 PID: 8123 Comm: syz.4.512 Not tainted syzkaller #0 PREEMPT(full) [ 148.396280][ T8123] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.396291][ T8123] Call Trace: [ 148.396297][ T8123] [ 148.396304][ T8123] dump_stack_lvl+0x100/0x190 [ 148.396333][ T8123] should_fail_ex.cold+0x5/0xa [ 148.396357][ T8123] should_failslab+0xc2/0x120 [ 148.396383][ T8123] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 148.396409][ T8123] ? __alloc_skb+0x140/0x710 [ 148.396471][ T8123] __alloc_skb+0x140/0x710 [ 148.396486][ T8123] ? __alloc_skb+0x5b7/0x710 [ 148.396502][ T8123] ? __pfx___alloc_skb+0x10/0x10 [ 148.396518][ T8123] ? genl_rcv_msg+0x4be/0x800 [ 148.396532][ T8123] netlink_ack+0x117/0xb80 [ 148.396548][ T8123] ? __lock_acquire+0x5c0/0x1f40 [ 148.396568][ T8123] netlink_rcv_skb+0x333/0x420 [ 148.396584][ T8123] ? __pfx_genl_rcv_msg+0x10/0x10 [ 148.396595][ T8123] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 148.396617][ T8123] ? netlink_deliver_tap+0x1ae/0xcc0 [ 148.396636][ T8123] genl_rcv+0x28/0x40 [ 148.396653][ T8123] netlink_unicast+0x585/0x850 [ 148.396671][ T8123] ? __pfx_netlink_unicast+0x10/0x10 [ 148.396686][ T8123] ? aa_sk_perm+0x389/0xab0 [ 148.396701][ T8123] netlink_sendmsg+0x8b0/0xda0 [ 148.396720][ T8123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.396737][ T8123] ? apparmor_socket_sendmsg+0x165/0x280 [ 148.396756][ T8123] ____sys_sendmsg+0xa4d/0xbe0 [ 148.396769][ T8123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.396786][ T8123] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.396805][ T8123] ___sys_sendmsg+0x190/0x1e0 [ 148.396820][ T8123] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.396841][ T8123] ? find_held_lock+0x2b/0x80 [ 148.396862][ T8123] __sys_sendmsg+0x160/0x210 [ 148.396873][ T8123] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.396888][ T8123] ? __pfx_ksys_write+0x10/0x10 [ 148.396904][ T8123] __do_fast_syscall_32+0x13a/0x8b0 [ 148.396919][ T8123] ? lockdep_hardirqs_on+0x7d/0x110 [ 148.396933][ T8123] do_fast_syscall_32+0x32/0x70 [ 148.396947][ T8123] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 148.396961][ T8123] RIP: 0023:0xf7f03fec [ 148.396975][ T8123] Code: Unable to access opcode bytes at 0xf7f03fc2. [ 148.396980][ T8123] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 148.396992][ T8123] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 148.396999][ T8123] RDX: 0000000004040814 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.397005][ T8123] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 148.397011][ T8123] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 148.397018][ T8123] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 148.397031][ T8123] [ 148.466345][ T8127] FAULT_INJECTION: forcing a failure. [ 148.466345][ T8127] name failslab, interval 1, probability 0, space 0, times 0 [ 148.466365][ T8127] CPU: 3 UID: 0 PID: 8127 Comm: syz.4.514 Not tainted syzkaller #0 PREEMPT(full) [ 148.466377][ T8127] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.466384][ T8127] Call Trace: [ 148.466388][ T8127] [ 148.466392][ T8127] dump_stack_lvl+0x100/0x190 [ 148.466411][ T8127] should_fail_ex.cold+0x5/0xa [ 148.466431][ T8127] should_failslab+0xc2/0x120 [ 148.466456][ T8127] __kmalloc_noprof+0xfc/0x840 [ 148.466478][ T8127] ? rcu_is_watching+0x13/0xc0 [ 148.466496][ T8127] ? tomoyo_realpath_from_path+0xb6/0x690 [ 148.466519][ T8127] tomoyo_realpath_from_path+0xb6/0x690 [ 148.466545][ T8127] tomoyo_mount_acl+0x1b6/0x8b0 [ 148.466562][ T8127] ? is_bpf_text_address+0x8a/0x1a0 [ 148.466588][ T8127] ? is_bpf_text_address+0x8a/0x1a0 [ 148.466610][ T8127] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 148.466639][ T8127] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 148.466657][ T8127] ? kernel_text_address+0x8d/0x100 [ 148.466680][ T8127] ? unwind_get_return_address+0x59/0xa0 [ 148.466702][ T8127] ? arch_stack_walk+0xa6/0xf0 [ 148.466724][ T8127] ? __lock_acquire+0x5c0/0x1f40 [ 148.466759][ T8127] ? tomoyo_mount_permission+0x1f6/0x460 [ 148.466782][ T8127] ? tomoyo_domain+0xb2/0x150 [ 148.466803][ T8127] ? tomoyo_profile+0x47/0x60 [ 148.466824][ T8127] tomoyo_mount_permission+0x214/0x460 [ 148.466843][ T8127] ? tomoyo_mount_permission+0x1f6/0x460 [ 148.466863][ T8127] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 148.466897][ T8127] security_sb_mount+0xdd/0x270 [ 148.466922][ T8127] path_mount+0x158/0x24c0 [ 148.466949][ T8127] ? __pfx_path_mount+0x10/0x10 [ 148.466973][ T8127] ? lockdep_hardirqs_on+0x7d/0x110 [ 148.466996][ T8127] ? putname+0xb1/0x110 [ 148.467017][ T8127] ? kmem_cache_free+0x127/0x6c0 [ 148.467038][ T8127] ? __ia32_sys_mount+0x292/0x310 [ 148.467062][ T8127] __ia32_sys_mount+0x292/0x310 [ 148.467087][ T8127] ? __pfx___ia32_sys_mount+0x10/0x10 [ 148.467111][ T8127] ? ksys_write+0x1ac/0x250 [ 148.467130][ T8127] ? __pfx_ksys_write+0x10/0x10 [ 148.467150][ T8127] __do_fast_syscall_32+0x13a/0x8b0 [ 148.467172][ T8127] ? lockdep_hardirqs_on+0x7d/0x110 [ 148.467193][ T8127] do_fast_syscall_32+0x32/0x70 [ 148.467214][ T8127] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 148.467232][ T8127] RIP: 0023:0xf7f03fec [ 148.467250][ T8127] Code: Unable to access opcode bytes at 0xf7f03fc2. [ 148.467258][ T8127] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 148.467275][ T8127] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080000340 [ 148.467286][ T8127] RDX: 0000000000000000 RSI: 000000000020887b RDI: 0000000000000000 [ 148.467296][ T8127] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 148.467306][ T8127] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 148.467316][ T8127] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 148.467334][ T8127] [ 148.467339][ T8127] ERROR: Out of memory at tomoyo_realpath_from_path. [ 148.712571][ T44] audit: type=1326 audit(1791002993.141:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8128 comm="syz.4.515" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f03fec code=0x0 [ 148.747821][ T8132] lo speed is unknown, defaulting to 1000 [ 148.804139][ T8132] FAULT_INJECTION: forcing a failure. [ 148.804139][ T8132] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 148.804173][ T8132] CPU: 2 UID: 0 PID: 8132 Comm: syz.2.516 Not tainted syzkaller #0 PREEMPT(full) [ 148.804197][ T8132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.804210][ T8132] Call Trace: [ 148.804217][ T8132] [ 148.804225][ T8132] dump_stack_lvl+0x100/0x190 [ 148.804260][ T8132] should_fail_ex.cold+0x5/0xa [ 148.804282][ T8132] ? prepare_alloc_pages+0x16d/0x5b0 [ 148.804315][ T8132] should_fail_alloc_page+0xeb/0x140 [ 148.804348][ T8132] prepare_alloc_pages+0x1f0/0x5b0 [ 148.804381][ T8132] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 148.804410][ T8132] ? stack_trace_save+0x8e/0xc0 [ 148.804437][ T8132] ? __pfx_stack_trace_save+0x10/0x10 [ 148.804464][ T8132] ? stack_depot_save_flags+0x27/0x9f0 [ 148.804484][ T8132] ? stack_trace_save+0x8e/0xc0 [ 148.804515][ T8132] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 148.804544][ T8132] ? kasan_save_track+0x14/0x30 [ 148.804570][ T8132] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 148.804597][ T8132] ? init_file+0x95/0x480 [ 148.804625][ T8132] ? alloc_empty_file+0x79/0x1c0 [ 148.804654][ T8132] ? alloc_file_pseudo+0x183/0x290 [ 148.804683][ T8132] ? ioctx_alloc+0x5d6/0x21a0 [ 148.804713][ T8132] ? __ia32_compat_sys_io_setup+0xc8/0x220 [ 148.804745][ T8132] ? __do_fast_syscall_32+0x13a/0x8b0 [ 148.804770][ T8132] ? do_fast_syscall_32+0x32/0x70 [ 148.804793][ T8132] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 148.804835][ T8132] ? __lock_acquire+0x5c0/0x1f40 [ 148.804866][ T8132] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 148.804897][ T8132] ? policy_nodemask+0xed/0x4f0 [ 148.804929][ T8132] alloc_pages_mpol+0x201/0x550 [ 148.804961][ T8132] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 148.804990][ T8132] ? filemap_get_entry+0x22d/0x450 [ 148.805021][ T8132] ? filemap_get_entry+0x22d/0x450 [ 148.805053][ T8132] folio_alloc_noprof+0x22/0x250 [ 148.805076][ T8132] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 148.805118][ T8132] ? percpu_counter_add_batch+0xb9/0x230 [ 148.805154][ T8132] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 148.805184][ T8132] ? alloc_file_pseudo+0x1ee/0x290 [ 148.805214][ T8132] __filemap_get_folio_mpol+0x653/0x1280 [ 148.805253][ T8132] ioctx_alloc+0x7e1/0x21a0 [ 148.805294][ T8132] ? __pfx_ioctx_alloc+0x10/0x10 [ 148.805330][ T8132] __ia32_compat_sys_io_setup+0xc8/0x220 [ 148.805362][ T8132] __do_fast_syscall_32+0x13a/0x8b0 [ 148.805388][ T8132] do_fast_syscall_32+0x32/0x70 [ 148.805413][ T8132] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 148.805436][ T8132] RIP: 0023:0xf7ff5fec [ 148.805458][ T8132] Code: Unable to access opcode bytes at 0xf7ff5fc2. [ 148.805467][ T8132] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 00000000000000f5 [ 148.805486][ T8132] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 148.805499][ T8132] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.805511][ T8132] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 148.805524][ T8132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.805541][ T8132] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 148.805567][ T8132] [ 148.814661][ T8134] FAULT_INJECTION: forcing a failure. [ 148.814661][ T8134] name failslab, interval 1, probability 0, space 0, times 0 [ 148.814689][ T8134] CPU: 3 UID: 0 PID: 8134 Comm: syz.0.517 Not tainted syzkaller #0 PREEMPT(full) [ 148.814709][ T8134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.814720][ T8134] Call Trace: [ 148.814728][ T8134] [ 148.814736][ T8134] dump_stack_lvl+0x100/0x190 [ 148.814771][ T8134] should_fail_ex.cold+0x5/0xa [ 148.814797][ T8134] should_failslab+0xc2/0x120 [ 148.814821][ T8134] __kmalloc_cache_noprof+0x91/0x6d0 [ 148.814836][ T8134] ? iommufd_fops_open+0x45/0x330 [ 148.814858][ T8134] iommufd_fops_open+0x45/0x330 [ 148.814874][ T8134] ? __pfx_iommufd_fops_open+0x10/0x10 [ 148.814893][ T8134] misc_open+0x26d/0x450 [ 148.814909][ T8134] ? __pfx_misc_open+0x10/0x10 [ 148.814926][ T8134] chrdev_open+0x234/0x6a0 [ 148.814941][ T8134] ? __pfx_apparmor_file_open+0x10/0x10 [ 148.814956][ T8134] ? __pfx_chrdev_open+0x10/0x10 [ 148.814972][ T8134] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 148.814991][ T8134] do_dentry_open+0x6ab/0x14d0 [ 148.815006][ T8134] ? __pfx_chrdev_open+0x10/0x10 [ 148.815024][ T8134] vfs_open+0x82/0x3f0 [ 148.815050][ T8134] path_openat+0x19fa/0x2440 [ 148.815069][ T8134] ? __pfx_path_openat+0x10/0x10 [ 148.815090][ T8134] do_file_open+0x20e/0x430 [ 148.815107][ T8134] ? __pfx_do_file_open+0x10/0x10 [ 148.815133][ T8134] ? _raw_spin_unlock+0x28/0x50 [ 148.815145][ T8134] ? alloc_fd+0x471/0x7a0 [ 148.815164][ T8134] do_sys_openat2+0x10f/0x1e0 [ 148.815181][ T8134] ? __pfx_do_sys_openat2+0x10/0x10 [ 148.815199][ T8134] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 148.815214][ T8134] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 148.815232][ T8134] __ia32_compat_sys_openat+0x12d/0x210 [ 148.815244][ T8134] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 148.815261][ T8134] __do_fast_syscall_32+0x13a/0x8b0 [ 148.815277][ T8134] do_fast_syscall_32+0x32/0x70 [ 148.815294][ T8134] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 148.815309][ T8134] RIP: 0023:0xf704efec [ 148.815323][ T8134] Code: Unable to access opcode bytes at 0xf704efc2. [ 148.815328][ T8134] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 148.815340][ T8134] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000280 [ 148.815347][ T8134] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.815354][ T8134] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 148.815360][ T8134] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 148.815369][ T8134] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 148.815384][ T8134] [ 148.819969][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.517'. [ 148.820073][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.517'. [ 148.969383][ T8141] netlink: 'syz.5.519': attribute type 3 has an invalid length. [ 148.969397][ T8141] netlink: 'syz.5.519': attribute type 1 has an invalid length. [ 148.969403][ T8141] netlink: 224 bytes leftover after parsing attributes in process `syz.5.519'. [ 148.969411][ T8141] NCSI netlink: No device for ifindex 0 [ 148.971373][ T8141] ipvlan1: entered promiscuous mode [ 149.072139][ T8144] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.228151][ T8144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.236336][ T8144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.379136][ T1037] lo speed is unknown, defaulting to 1000 [ 149.384319][ T1037] syz0: Port: 1 Link DOWN [ 149.387488][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.387535][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.387570][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.387599][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.489724][ T8157] profile_transition: 3 callbacks suppressed [ 149.489737][ T8157] profile_transition: unconfined exec no attachment [ 149.538254][ T8159] fuse: Bad value for 'group_id' [ 149.538268][ T8159] fuse: Bad value for 'group_id' [ 149.546594][ T8160] profile_transition: unconfined exec no attachment [ 149.740896][ T8168] ufs: You didn't specify the type of your ufs filesystem [ 149.740896][ T8168] [ 149.740896][ T8168] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 149.740896][ T8168] [ 149.740896][ T8168] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 149.740917][ T8168] ufs: ufstype=old is supported read-only [ 149.742677][ T8168] IPv6: NLM_F_CREATE should be specified when creating new route [ 149.742859][ T8168] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.742866][ T8168] IPv6: NLM_F_CREATE should be set when creating new route [ 149.742884][ T8168] IPv6: NLM_F_CREATE should be set when creating new route [ 149.742894][ T8168] IPv6: NLM_F_CREATE should be set when creating new route [ 149.744225][ T8168] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.526'. [ 149.787599][ T8168] nfs4: Unknown parameter 'appraise' [ 149.835481][ T8170] FAULT_INJECTION: forcing a failure. [ 149.835481][ T8170] name failslab, interval 1, probability 0, space 0, times 0 [ 149.835501][ T8170] CPU: 2 UID: 0 PID: 8170 Comm: syz.4.528 Not tainted syzkaller #0 PREEMPT(full) [ 149.835528][ T8170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.835534][ T8170] Call Trace: [ 149.835539][ T8170] [ 149.835544][ T8170] dump_stack_lvl+0x100/0x190 [ 149.835568][ T8170] should_fail_ex.cold+0x5/0xa [ 149.835583][ T8170] should_failslab+0xc2/0x120 [ 149.835599][ T8170] __kmalloc_noprof+0xfc/0x840 [ 149.835613][ T8170] ? lockdep_init_map_type+0x5c/0x250 [ 149.835630][ T8170] ? pfkey_add+0x22ed/0x2f10 [ 149.835645][ T8170] pfkey_add+0x22ed/0x2f10 [ 149.835658][ T8170] ? skb_release_data+0x560/0x860 [ 149.835677][ T8170] ? __pfx_pfkey_add+0x10/0x10 [ 149.835688][ T8170] ? kfree_skbmem+0x19f/0x210 [ 149.835702][ T8170] ? sk_skb_reason_drop+0x114/0x1b0 [ 149.835726][ T8170] ? pfkey_broadcast+0x28c/0x420 [ 149.835740][ T8170] ? __pfx_pfkey_add+0x10/0x10 [ 149.835751][ T8170] pfkey_process+0x5c3/0x810 [ 149.835765][ T8170] ? __pfx_pfkey_process+0x10/0x10 [ 149.835777][ T8170] ? pfkey_sendmsg+0x41a/0x840 [ 149.835798][ T8170] ? __pfx___alloc_skb+0x10/0x10 [ 149.835818][ T8170] pfkey_sendmsg+0x428/0x840 [ 149.835833][ T8170] ____sys_sendmsg+0xa4d/0xbe0 [ 149.835845][ T8170] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 149.835858][ T8170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.835879][ T8170] ___sys_sendmsg+0x190/0x1e0 [ 149.835893][ T8170] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.835914][ T8170] ? find_held_lock+0x2b/0x80 [ 149.835936][ T8170] __sys_sendmsg+0x160/0x210 [ 149.835947][ T8170] ? __pfx___sys_sendmsg+0x10/0x10 [ 149.835961][ T8170] ? __pfx_ksys_write+0x10/0x10 [ 149.835977][ T8170] __do_fast_syscall_32+0x13a/0x8b0 [ 149.835991][ T8170] ? lockdep_hardirqs_on+0x7d/0x110 [ 149.836005][ T8170] do_fast_syscall_32+0x32/0x70 [ 149.836020][ T8170] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 149.836034][ T8170] RIP: 0023:0xf7f03fec [ 149.836046][ T8170] Code: Unable to access opcode bytes at 0xf7f03fc2. [ 149.836051][ T8170] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 149.836065][ T8170] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 149.836072][ T8170] RDX: 0000000000040880 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.836079][ T8170] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 149.836085][ T8170] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 149.836091][ T8170] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.836105][ T8170] [ 149.976349][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 149.978005][ T8177] profile_transition: unconfined exec no attachment [ 149.978498][ T8176] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.530'. [ 149.998990][ T8178] profile_transition: unconfined exec no attachment [ 150.047754][ T8182] profile_transition: unconfined exec no attachment [ 150.087941][ T8183] profile_transition: unconfined exec no attachment [ 150.387303][ T8189] syzkaller0: entered promiscuous mode [ 150.387321][ T8189] syzkaller0: entered allmulticast mode [ 150.594679][ T8205] openvswitch: netlink: IP tunnel dst address not specified [ 150.847696][ T8211] lo speed is unknown, defaulting to 1000 [ 150.891711][ T8215] FAULT_INJECTION: forcing a failure. [ 150.891711][ T8215] name fail_futex, interval 1, probability 0, space 0, times 0 [ 150.891734][ T8215] CPU: 2 UID: 0 PID: 8215 Comm: syz.4.535 Not tainted syzkaller #0 PREEMPT(full) [ 150.891748][ T8215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.891754][ T8215] Call Trace: [ 150.891759][ T8215] [ 150.891764][ T8215] dump_stack_lvl+0x100/0x190 [ 150.891784][ T8215] should_fail_ex.cold+0x5/0xa [ 150.891799][ T8215] get_futex_key+0x1d0/0x14f0 [ 150.891813][ T8215] ? __pfx_get_futex_key+0x10/0x10 [ 150.891824][ T8215] ? find_held_lock+0x2b/0x80 [ 150.891838][ T8215] ? futex_wake+0x4ea/0x5e0 [ 150.891855][ T8215] futex_wake+0xf4/0x5e0 [ 150.891869][ T8215] ? futex_wait+0x11e/0x370 [ 150.891885][ T8215] ? __pfx_futex_wake+0x10/0x10 [ 150.891901][ T8215] ? __might_fault+0xc5/0x140 [ 150.891913][ T8215] ? find_held_lock+0x2b/0x80 [ 150.891926][ T8215] ? __might_fault+0xc5/0x140 [ 150.891940][ T8215] do_futex+0x2b2/0x440 [ 150.891953][ T8215] ? __pfx_do_futex+0x10/0x10 [ 150.891965][ T8215] ? _copy_to_user+0xaf/0xd0 [ 150.891983][ T8215] __ia32_sys_futex_time32+0x2f4/0x470 [ 150.892000][ T8215] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 150.892014][ T8215] ? __pfx___ia32_sys_clock_gettime32+0x10/0x10 [ 150.892035][ T8215] __do_fast_syscall_32+0x13a/0x8b0 [ 150.892052][ T8215] do_fast_syscall_32+0x32/0x70 [ 150.892067][ T8215] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.892082][ T8215] RIP: 0023:0xf7f03fec [ 150.892095][ T8215] Code: Unable to access opcode bytes at 0xf7f03fc2. [ 150.892100][ T8215] RSP: 002b:00000000f53a55cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 150.892112][ T8215] RAX: ffffffffffffffda RBX: 00000000f73c5024 RCX: 0000000000000081 [ 150.892119][ T8215] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 150.892126][ T8215] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 150.892133][ T8215] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 150.892139][ T8215] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.892154][ T8215] [ 150.955371][ T8218] FAULT_INJECTION: forcing a failure. [ 150.955371][ T8218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.955392][ T8218] CPU: 3 UID: 0 PID: 8218 Comm: syz.2.538 Not tainted syzkaller #0 PREEMPT(full) [ 150.955405][ T8218] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.955411][ T8218] Call Trace: [ 150.955416][ T8218] [ 150.955424][ T8218] dump_stack_lvl+0x100/0x190 [ 150.955443][ T8218] should_fail_ex.cold+0x5/0xa [ 150.955458][ T8218] _copy_to_user+0x32/0xd0 [ 150.955479][ T8218] simple_read_from_buffer+0xcb/0x170 [ 150.955498][ T8218] proc_fail_nth_read+0x1af/0x230 [ 150.955513][ T8218] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.955529][ T8218] ? rw_verify_area+0xce/0x6d0 [ 150.955541][ T8218] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.955554][ T8218] vfs_read+0x1e4/0xb40 [ 150.955570][ T8218] ? lock_acquire+0x1d1/0x380 [ 150.955586][ T8218] ? __fget_files+0x34/0x3d0 [ 150.955600][ T8218] ? __pfx_vfs_read+0x10/0x10 [ 150.955611][ T8218] ? find_held_lock+0x2b/0x80 [ 150.955625][ T8218] ? __fget_files+0x215/0x3d0 [ 150.955640][ T8218] ? __fget_files+0x21f/0x3d0 [ 150.955658][ T8218] ksys_read+0x12a/0x250 [ 150.955671][ T8218] ? __pfx_ksys_read+0x10/0x10 [ 150.955688][ T8218] do_int80_emulation+0x166/0x650 [ 150.955704][ T8218] asm_int80_emulation+0x1a/0x20 [ 150.955716][ T8218] RIP: 0023:0xf71f75ab [ 150.955726][ T8218] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 150.955739][ T8218] RSP: 002b:00000000f54b64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 150.955751][ T8218] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54b65d0 [ 150.955758][ T8218] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 150.955764][ T8218] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.955770][ T8218] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 150.955776][ T8218] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.955790][ T8218] [ 151.030291][ T8223] profile_transition: unconfined exec no attachment [ 151.057941][ T8226] profile_transition: unconfined exec no attachment [ 151.143183][ T5842] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 151.398982][ T5842] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 151.449930][ T5842] usb 10-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 151.449953][ T5842] usb 10-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 151.449966][ T5842] usb 10-1: config 0 interface 0 has no altsetting 0 [ 151.457850][ T8225] Console: switching to colour dummy device 80x25 [ 151.570811][ T5842] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 151.570828][ T5842] usb 10-1: Product: syz [ 151.570836][ T5842] usb 10-1: Manufacturer: syz [ 151.570843][ T5842] usb 10-1: SerialNumber: syz [ 151.597347][ T8230] profile_transition: unconfined exec no attachment [ 151.600838][ T8231] profile_transition: unconfined exec no attachment [ 151.684737][ T8225] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 151.690677][ T8225] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 151.690781][ T8225] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 151.690955][ T8225] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 151.691465][ T8225] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 151.694897][ T8225] pci 0000:00:01.0: Adding to iommu group 1 [ 151.697372][ T8225] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 151.697384][ T8225] pci 0000:00:01.0: vgaarb: bridge control possible [ 151.697391][ T8225] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 151.701360][ T8225] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 151.701489][ T8225] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 151.702764][ T8225] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 151.710744][ T8225] [drm] Found bochs VGA, ID 0xb0c5. [ 151.710758][ T8225] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 151.743323][ T8225] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 151.795195][ T5842] usb 10-1: config 0 descriptor?? [ 151.799822][ T8214] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 151.805530][ T5842] usb 10-1: selecting invalid altsetting 0 [ 151.809841][ T8225] Console: switching to colour frame buffer device 160x50 [ 151.835063][ T8225] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 151.975089][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 152.249148][ T5815] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 152.433250][ T5815] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 152.437511][ T5815] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 152.437527][ T5815] usb 9-1: Product: syz [ 152.437535][ T5815] usb 9-1: Manufacturer: syz [ 152.437542][ T5815] usb 9-1: SerialNumber: syz [ 152.440117][ T5815] usb 9-1: config 0 descriptor?? [ 152.575162][ T8268] device-mapper: ioctl: name not supplied when creating device [ 152.575937][ T8268] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 152.612029][ T30] usb 10-1: USB disconnect, device number 14 [ 152.641408][ T8272] lo speed is unknown, defaulting to 1000 [ 152.669907][ C2] sr 2:0:0:0: [sr0] tag#6 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 152.669941][ C2] sr 2:0:0:0: [sr0] tag#6 CDB: Release(6) [ 152.669952][ C2] sr 2:0:0:0: [sr0] tag#6 CDB[00]: 17 90 f1 f7 23 98 86 a4 ea 15 fb a0 bc da b7 54 [ 152.669962][ C2] sr 2:0:0:0: [sr0] tag#6 CDB[10]: 41 [ 152.681027][ T43] usb 9-1: USB disconnect, device number 11 [ 152.695439][ T8275] FAULT_INJECTION: forcing a failure. [ 152.695439][ T8275] name failslab, interval 1, probability 0, space 0, times 0 [ 152.695469][ T8275] CPU: 3 UID: 0 PID: 8275 Comm: syz.2.552 Not tainted syzkaller #0 PREEMPT(full) [ 152.695490][ T8275] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.695501][ T8275] Call Trace: [ 152.695509][ T8275] [ 152.695516][ T8275] dump_stack_lvl+0x100/0x190 [ 152.695606][ T8275] should_fail_ex.cold+0x5/0xa [ 152.695632][ T8275] should_failslab+0xc2/0x120 [ 152.695687][ T8275] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 152.695721][ T8275] ? __alloc_skb+0x140/0x710 [ 152.695776][ T8275] __alloc_skb+0x140/0x710 [ 152.695802][ T8275] ? __alloc_skb+0x5b7/0x710 [ 152.695829][ T8275] ? __pfx___alloc_skb+0x10/0x10 [ 152.695860][ T8275] ? sctp_transport_pmtu+0x32c/0x7b0 [ 152.695895][ T8275] sctp_packet_transmit+0x1d3/0x30f0 [ 152.695918][ T8275] ? __sctp_packet_append_chunk+0xbb/0xd80 [ 152.695940][ T8275] ? sctp_assoc_sync_pmtu+0x1d6/0x240 [ 152.695973][ T8275] ? sctp_packet_append_chunk+0xeb3/0x1230 [ 152.696001][ T8275] sctp_packet_singleton+0x19e/0x370 [ 152.696030][ T8275] ? sctp_assoc_sync_pmtu+0x1d6/0x240 [ 152.696059][ T8275] ? __pfx_sctp_packet_singleton+0x10/0x10 [ 152.696097][ T8275] ? sctp_outq_select_transport+0x20d/0x720 [ 152.696132][ T8275] sctp_outq_flush+0x315/0x3380 [ 152.696160][ T8275] ? __pfx__raw_spin_unlock_irqrestore+0x1/0x10 [ 152.696221][ T8275] ? __pfx_sctp_outq_flush+0x10/0x10 [ 152.696258][ T8275] ? sctp_outq_tail+0x68c/0xa90 [ 152.696294][ T8275] sctp_do_sm+0xce1/0x5c30 [ 152.696335][ T8275] ? sctp_ulpevent_notify_peer_addr_change+0xf3/0xb70 [ 152.696366][ T8275] ? __pfx_sctp_do_sm+0x10/0x10 [ 152.696411][ T8275] ? sctp_connect_new_asoc+0x41e/0x770 [ 152.696442][ T8275] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 152.696477][ T8275] sctp_primitive_ASSOCIATE+0x9c/0xd0 [ 152.696511][ T8275] __sctp_connect+0x9fc/0xc70 [ 152.696540][ T8275] ? lock_acquire+0x1d1/0x380 [ 152.696572][ T8275] ? __pfx___sctp_connect+0x10/0x10 [ 152.696608][ T8275] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 152.696639][ T8275] sctp_inet_connect+0x15f/0x220 [ 152.696669][ T8275] __sys_connect_file+0x146/0x1a0 [ 152.696704][ T8275] __sys_connect+0x141/0x170 [ 152.696729][ T8275] ? __pfx___sys_connect+0x10/0x10 [ 152.696771][ T8275] __ia32_sys_connect+0x71/0xb0 [ 152.696793][ T8275] ? lockdep_hardirqs_on+0x7d/0x110 [ 152.696816][ T8275] __do_fast_syscall_32+0x13a/0x8b0 [ 152.696845][ T8275] do_fast_syscall_32+0x32/0x70 [ 152.696870][ T8275] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 152.696894][ T8275] RIP: 0023:0xf7ff5fec [ 152.696916][ T8275] Code: Unable to access opcode bytes at 0xf7ff5fc2. [ 152.696926][ T8275] RSP: 002b:00000000f549550c EFLAGS: 00000292 ORIG_RAX: 000000000000016a [ 152.696945][ T8275] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 152.696959][ T8275] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 152.696972][ T8275] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 152.696985][ T8275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.696997][ T8275] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 152.697024][ T8275] [ 152.920408][ T5842] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 153.105832][ T5842] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 153.107106][ T5842] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 153.107123][ T5842] usb 5-1: config 0 interface 0 has no altsetting 0 [ 153.108873][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 153.108886][ T5842] usb 5-1: Product: syz [ 153.108894][ T5842] usb 5-1: Manufacturer: syz [ 153.108903][ T5842] usb 5-1: SerialNumber: syz [ 153.110627][ T5842] usb 5-1: config 0 descriptor?? [ 153.116162][ T5842] usb 5-1: selecting invalid altsetting 0 [ 153.228707][ T8281] profile_transition: name lookup ix on error [ 153.338819][ T5842] usb 5-1: USB disconnect, device number 10 [ 153.502585][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88804c178000: rx timeout, send abort [ 154.044588][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888060186000: rx timeout, send abort [ 154.045862][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88804c178000: abort rx timeout. Force session deactivation [ 154.101846][ T5842] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 154.281499][ T5842] usb 7-1: New USB device found, idVendor=174c, idProduct=46aa, bcdDevice= 1.00 [ 154.282988][ T5842] usb 7-1: config 0 has no interfaces? [ 154.285740][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.286315][ T5842] usb 7-1: Product: syz [ 154.286329][ T5842] usb 7-1: Manufacturer: syz [ 154.286340][ T5842] usb 7-1: SerialNumber: syz [ 154.296023][ T5842] usb 7-1: config 0 descriptor?? [ 154.383913][ T8302] loop5: detected capacity change from 0 to 4095 [ 154.406035][ T8305] lo speed is unknown, defaulting to 1000 [ 154.442525][ T8305] FAULT_INJECTION: forcing a failure. [ 154.442525][ T8305] name failslab, interval 1, probability 0, space 0, times 0 [ 154.442552][ T8305] CPU: 1 UID: 0 PID: 8305 Comm: syz.5.564 Not tainted syzkaller #0 PREEMPT(full) [ 154.442572][ T8305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.442582][ T8305] Call Trace: [ 154.442587][ T8305] [ 154.442594][ T8305] dump_stack_lvl+0x100/0x190 [ 154.442622][ T8305] should_fail_ex.cold+0x5/0xa [ 154.442648][ T8305] should_failslab+0xc2/0x120 [ 154.442676][ T8305] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 154.442693][ T8305] ? lockdep_hardirqs_on+0x7d/0x110 [ 154.442708][ T8305] ? __d_alloc+0x35/0xa50 [ 154.442726][ T8305] __d_alloc+0x35/0xa50 [ 154.442741][ T8305] ? inode_set_ctime_current+0x283/0x850 [ 154.442758][ T8305] d_alloc_pseudo+0x1c/0xc0 [ 154.442771][ T8305] alloc_file_pseudo+0x118/0x290 [ 154.442791][ T8305] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 154.442813][ T8305] ioctx_alloc+0x5d6/0x21a0 [ 154.442833][ T8305] ? __might_fault+0xc5/0x140 [ 154.442844][ T8305] ? find_held_lock+0x2b/0x80 [ 154.442859][ T8305] ? __pfx_ioctx_alloc+0x10/0x10 [ 154.442879][ T8305] __ia32_compat_sys_io_setup+0xc8/0x220 [ 154.442898][ T8305] __do_fast_syscall_32+0x13a/0x8b0 [ 154.442915][ T8305] do_fast_syscall_32+0x32/0x70 [ 154.442929][ T8305] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 154.442944][ T8305] RIP: 0023:0xf7f22fec [ 154.442958][ T8305] Code: Unable to access opcode bytes at 0xf7f22fc2. [ 154.442963][ T8305] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 00000000000000f5 [ 154.442974][ T8305] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 154.442982][ T8305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 154.442988][ T8305] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 154.442995][ T8305] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 154.443001][ T8305] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 154.443015][ T8305] [ 154.445031][ T8302] Buffer I/O error on dev loop5, logical block 511, async page read [ 154.448476][ T6314] Buffer I/O error on dev loop5, logical block 511, async page read [ 154.502777][ T5846] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 154.521010][ T5842] usb 7-1: USB disconnect, device number 8 [ 154.586534][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888060186000: abort rx timeout. Force session deactivation [ 154.689739][ T5846] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 154.690604][ T5846] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 154.690620][ T5846] usb 5-1: config 0 interface 0 has no altsetting 0 [ 154.694490][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 154.694505][ T5846] usb 5-1: Product: syz [ 154.694514][ T5846] usb 5-1: Manufacturer: syz [ 154.694522][ T5846] usb 5-1: SerialNumber: syz [ 154.695804][ T5846] usb 5-1: config 0 descriptor?? [ 154.700318][ T5846] usb 5-1: selecting invalid altsetting 0 [ 154.918256][ T5846] usb 5-1: USB disconnect, device number 11 [ 155.100776][ T8324] FAULT_INJECTION: forcing a failure. [ 155.100776][ T8324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.100797][ T8324] CPU: 2 UID: 0 PID: 8324 Comm: syz.2.571 Not tainted syzkaller #0 PREEMPT(full) [ 155.100810][ T8324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.100816][ T8324] Call Trace: [ 155.100820][ T8324] [ 155.100825][ T8324] dump_stack_lvl+0x100/0x190 [ 155.100844][ T8324] should_fail_ex.cold+0x5/0xa [ 155.100859][ T8324] _copy_to_user+0x32/0xd0 [ 155.100875][ T8324] simple_read_from_buffer+0xcb/0x170 [ 155.100891][ T8324] proc_fail_nth_read+0x1af/0x230 [ 155.100905][ T8324] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.100920][ T8324] ? rw_verify_area+0xce/0x6d0 [ 155.100931][ T8324] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.100944][ T8324] vfs_read+0x1e4/0xb40 [ 155.100957][ T8324] ? lock_acquire+0x1d1/0x380 [ 155.100974][ T8324] ? __fget_files+0x34/0x3d0 [ 155.100990][ T8324] ? __pfx_vfs_read+0x10/0x10 [ 155.101002][ T8324] ? find_held_lock+0x2b/0x80 [ 155.101015][ T8324] ? __fget_files+0x215/0x3d0 [ 155.101031][ T8324] ? __fget_files+0x21f/0x3d0 [ 155.101048][ T8324] ksys_read+0x12a/0x250 [ 155.101061][ T8324] ? __pfx_ksys_read+0x10/0x10 [ 155.101078][ T8324] do_int80_emulation+0x166/0x650 [ 155.101095][ T8324] asm_int80_emulation+0x1a/0x20 [ 155.101106][ T8324] RIP: 0023:0xf71f75ab [ 155.101116][ T8324] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 155.101127][ T8324] RSP: 002b:00000000f54b64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 155.101138][ T8324] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54b65d0 [ 155.101145][ T8324] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 155.101151][ T8324] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.101157][ T8324] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 155.101163][ T8324] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.101177][ T8324] [ 155.391629][ T5815] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 155.555204][ T5815] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.556039][ T5815] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.556056][ T5815] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.556067][ T5815] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 155.556086][ T5815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.559958][ T5815] usb 7-1: config 0 descriptor?? [ 155.874691][ T8345] syzkaller0: entered promiscuous mode [ 155.874711][ T8345] syzkaller0: entered allmulticast mode [ 156.020246][ T5815] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 156.024841][ T8346] profile_transition: 7 callbacks suppressed [ 156.024860][ T8346] profile_transition: unconfined exec no attachment [ 156.100276][ T8348] lo speed is unknown, defaulting to 1000 [ 156.215693][ T8351] profile_transition: unconfined exec no attachment [ 156.253073][ T8354] profile_transition: unconfined exec no attachment [ 156.277452][ T8357] FAULT_INJECTION: forcing a failure. [ 156.277452][ T8357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.277497][ T8357] CPU: 3 UID: 0 PID: 8357 Comm: syz.0.583 Not tainted syzkaller #0 PREEMPT(full) [ 156.277519][ T8357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.277529][ T8357] Call Trace: [ 156.277535][ T8357] [ 156.277541][ T8357] dump_stack_lvl+0x100/0x190 [ 156.277570][ T8357] should_fail_ex.cold+0x5/0xa [ 156.277594][ T8357] _copy_from_user+0x2e/0xd0 [ 156.277638][ T8357] move_addr_to_kernel+0x65/0x170 [ 156.277662][ T8357] __sys_sendto+0x1b8/0x4e0 [ 156.277688][ T8357] ? __pfx___sys_sendto+0x10/0x10 [ 156.277721][ T8357] ? lock_acquire+0x1d1/0x380 [ 156.277764][ T8357] __ia32_compat_sys_socketcall+0x59a/0x770 [ 156.277787][ T8357] ? __fget_files+0x21f/0x3d0 [ 156.277810][ T8357] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 156.277849][ T8357] do_int80_emulation+0x166/0x650 [ 156.277876][ T8357] asm_int80_emulation+0x1a/0x20 [ 156.277893][ T8357] RIP: 0023:0xf71875ab [ 156.277906][ T8357] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 156.277923][ T8357] RSP: 002b:00000000f543c34c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 156.277947][ T8357] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f543c3f4 [ 156.277982][ T8357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.277992][ T8357] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 156.278003][ T8357] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 156.278013][ T8357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 156.278034][ T8357] [ 156.360693][ T8363] profile_transition: unconfined exec no attachment [ 156.375272][ T8365] profile_transition: unconfined exec no attachment [ 156.420725][ T8367] profile_transition: unconfined exec no attachment [ 156.426486][ T8368] profile_transition: unconfined exec no attachment [ 156.432893][ T8369] profile_transition: unconfined exec no attachment [ 156.439481][ T8361] netlink: 36 bytes leftover after parsing attributes in process `syz.0.584'. [ 156.497574][ T8373] profile_transition: unconfined exec no attachment [ 156.522716][ T8374] profile_transition: unconfined exec no attachment [ 156.802082][ T8382] comedi comedi3: comedi_config --init_data is deprecated [ 157.275887][ T8391] ip6t_ah: unknown flags D6 [ 157.284937][ T8391] netlink: 28 bytes leftover after parsing attributes in process `syz.5.589'. [ 157.344757][ T8392] netlink: 28 bytes leftover after parsing attributes in process `syz.5.589'. [ 157.344779][ T8392] nbd: must specify at least one socket [ 157.494354][ T8394] ip6t_ah: unknown flags D6 [ 157.500692][ T8394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.590'. [ 157.501889][ T8394] FAULT_INJECTION: forcing a failure. [ 157.501889][ T8394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.501917][ T8394] CPU: 1 UID: 0 PID: 8394 Comm: syz.4.590 Not tainted syzkaller #0 PREEMPT(full) [ 157.501939][ T8394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.501973][ T8394] Call Trace: [ 157.501981][ T8394] [ 157.501996][ T8394] dump_stack_lvl+0x100/0x190 [ 157.502027][ T8394] should_fail_ex.cold+0x5/0xa [ 157.502051][ T8394] _copy_from_user+0x2e/0xd0 [ 157.502079][ T8394] move_addr_to_kernel+0x65/0x170 [ 157.502105][ T8394] __sys_connect+0xb5/0x170 [ 157.502131][ T8394] ? __pfx___sys_connect+0x10/0x10 [ 157.502155][ T8394] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 157.502190][ T8394] ? ksys_write+0x1ac/0x250 [ 157.502212][ T8394] ? __pfx_ksys_write+0x10/0x10 [ 157.502240][ T8394] __ia32_sys_connect+0x71/0xb0 [ 157.502265][ T8394] ? lockdep_hardirqs_on+0x7d/0x110 [ 157.502286][ T8394] __do_fast_syscall_32+0x13a/0x8b0 [ 157.502309][ T8394] ? lockdep_hardirqs_on+0x7d/0x110 [ 157.502333][ T8394] do_fast_syscall_32+0x32/0x70 [ 157.502357][ T8394] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.502380][ T8394] RIP: 0023:0xf7f03fec [ 157.502402][ T8394] Code: Unable to access opcode bytes at 0xf7f03fc2. [ 157.502410][ T8394] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 000000000000016a [ 157.502430][ T8394] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000240 [ 157.502442][ T8394] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 157.502453][ T8394] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.502464][ T8394] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 157.502475][ T8394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.502499][ T8394] [ 157.507710][ T8394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.590'. [ 157.507728][ T8394] nbd: must specify at least one socket [ 157.668350][ T8400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.592'. [ 157.668389][ T8400] nbd: must specify at least one socket [ 158.066089][ T8396] bond0: option arp_interval: invalid value ( ) [ 158.066106][ T8396] bond0: option arp_interval: allowed values 0 - 2147483647 [ 158.089327][ T8416] lo speed is unknown, defaulting to 1000 [ 158.128367][ T8416] FAULT_INJECTION: forcing a failure. [ 158.128367][ T8416] name failslab, interval 1, probability 0, space 0, times 0 [ 158.128388][ T8416] CPU: 0 UID: 0 PID: 8416 Comm: syz.2.597 Not tainted syzkaller #0 PREEMPT(full) [ 158.128402][ T8416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.128409][ T8416] Call Trace: [ 158.128414][ T8416] [ 158.128419][ T8416] dump_stack_lvl+0x100/0x190 [ 158.128439][ T8416] should_fail_ex.cold+0x5/0xa [ 158.128456][ T8416] should_failslab+0xc2/0x120 [ 158.128474][ T8416] kmem_cache_alloc_noprof+0x92/0x6a0 [ 158.128489][ T8416] ? __pfx_map_id_range_down+0x10/0x10 [ 158.128508][ T8416] ? security_inode_alloc+0x3b/0x2c0 [ 158.128530][ T8416] security_inode_alloc+0x3b/0x2c0 [ 158.128548][ T8416] inode_init_always_gfp+0xc6f/0xfb0 [ 158.128566][ T8416] alloc_inode+0x8e/0x250 [ 158.128577][ T8416] alloc_anon_inode+0x2a/0x3e0 [ 158.128595][ T8416] ioctx_alloc+0x4dc/0x21a0 [ 158.128622][ T8416] ? __might_fault+0xc5/0x140 [ 158.128636][ T8416] ? find_held_lock+0x2b/0x80 [ 158.128652][ T8416] ? __pfx_ioctx_alloc+0x10/0x10 [ 158.128673][ T8416] __ia32_compat_sys_io_setup+0xc8/0x220 [ 158.128694][ T8416] __do_fast_syscall_32+0x13a/0x8b0 [ 158.128712][ T8416] do_fast_syscall_32+0x32/0x70 [ 158.128728][ T8416] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.128744][ T8416] RIP: 0023:0xf7ff5fec [ 158.128756][ T8416] Code: Unable to access opcode bytes at 0xf7ff5fc2. [ 158.128762][ T8416] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 00000000000000f5 [ 158.128774][ T8416] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 158.128781][ T8416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.128788][ T8416] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.128795][ T8416] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 158.128802][ T8416] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.128817][ T8416] [ 158.271086][ T8421] netlink: 20 bytes leftover after parsing attributes in process `syz.5.598'. [ 158.340378][ T5815] usb 7-1: USB disconnect, device number 9 [ 158.837780][ T8459] ipvlan2: entered promiscuous mode [ 158.842205][ T8459] team0: Device ipvlan2 failed to register rx_handler [ 159.378826][ T8473] MINIX-fs: unable to read superblock [ 159.486712][ T8478] FAULT_INJECTION: forcing a failure. [ 159.486712][ T8478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.486780][ T8478] CPU: 0 UID: 0 PID: 8478 Comm: syz.0.608 Not tainted syzkaller #0 PREEMPT(full) [ 159.486794][ T8478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.486801][ T8478] Call Trace: [ 159.486806][ T8478] [ 159.486810][ T8478] dump_stack_lvl+0x100/0x190 [ 159.486829][ T8478] should_fail_ex.cold+0x5/0xa [ 159.486845][ T8478] strncpy_from_user+0x3b/0x2d0 [ 159.486873][ T8478] path_setxattrat+0x127/0x3b0 [ 159.486898][ T8478] ? __pfx_path_setxattrat+0x10/0x10 [ 159.486928][ T8478] ? rcu_read_lock_any_held+0x6a/0x90 [ 159.486946][ T8478] ? find_held_lock+0x2b/0x80 [ 159.486985][ T8478] ? fput+0x7c/0x100 [ 159.487009][ T8478] ? ksys_write+0x1ac/0x250 [ 159.487031][ T8478] __ia32_sys_setxattr+0xc4/0x140 [ 159.487054][ T8478] ? __do_fast_syscall_32+0xb3/0x8b0 [ 159.487076][ T8478] ? lockdep_hardirqs_on+0x7d/0x110 [ 159.487095][ T8478] __do_fast_syscall_32+0x13a/0x8b0 [ 159.487116][ T8478] ? lockdep_hardirqs_on+0x7d/0x110 [ 159.487137][ T8478] do_fast_syscall_32+0x32/0x70 [ 159.487158][ T8478] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.487179][ T8478] RIP: 0023:0xf704efec [ 159.487198][ T8478] Code: Unable to access opcode bytes at 0xf704efc2. [ 159.487205][ T8478] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000e2 [ 159.487221][ T8478] RAX: ffffffffffffffda RBX: 0000000080002a00 RCX: 0000000080002a40 [ 159.487233][ T8478] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.487242][ T8478] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.487252][ T8478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.487262][ T8478] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.487284][ T8478] [ 159.596158][ T8484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.611'. [ 159.609822][ T8486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.612'. [ 160.126578][ T8514] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 160.126606][ T8514] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 160.126707][ T8514] vhci_hcd vhci_hcd.0: Device attached [ 160.132540][ T8514] loop8: detected capacity change from 0 to 16384 [ 160.158638][ T8520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.617'. [ 160.178597][ T8518] lo speed is unknown, defaulting to 1000 [ 160.307236][ T8526] binder: 8512:8526 ioctl 84009422 80000500 returned -22 [ 160.307522][ T8526] binder: 8512:8526 ioctl 50009403 800001c0 returned -22 [ 160.344264][ T30] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 160.357388][ T8521] loop8: detected capacity change from 16384 to 16383 [ 160.376593][ T8532] FAULT_INJECTION: forcing a failure. [ 160.376593][ T8532] name failslab, interval 1, probability 0, space 0, times 0 [ 160.379571][ T8532] CPU: 0 UID: 0 PID: 8532 Comm: syz.5.619 Not tainted syzkaller #0 PREEMPT(full) [ 160.379590][ T8532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.379598][ T8532] Call Trace: [ 160.379603][ T8532] [ 160.379609][ T8532] dump_stack_lvl+0x100/0x190 [ 160.379631][ T8532] should_fail_ex.cold+0x5/0xa [ 160.379648][ T8532] should_failslab+0xc2/0x120 [ 160.379667][ T8532] __kmalloc_noprof+0xfc/0x840 [ 160.379683][ T8532] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 160.379698][ T8532] ? afs_alloc_vlserver_list+0x24/0xa0 [ 160.379720][ T8532] afs_alloc_vlserver_list+0x24/0xa0 [ 160.379738][ T8532] afs_parse_text_addrs+0x1ea/0xa10 [ 160.379760][ T8532] ? __pfx_afs_parse_text_addrs+0x10/0x10 [ 160.379779][ T8532] ? lockdep_init_map_type+0x5c/0x250 [ 160.379799][ T8532] ? lockdep_init_map_type+0x5c/0x250 [ 160.379820][ T8532] afs_lookup_cell+0xbb6/0x1940 [ 160.379836][ T8532] ? __pfx_afs_lookup_cell+0x10/0x10 [ 160.379847][ T8532] ? __pfx___might_resched+0x10/0x10 [ 160.379863][ T8532] ? lock_acquire+0x1d1/0x380 [ 160.379884][ T8532] afs_cell_init+0x17d/0x380 [ 160.379897][ T8532] afs_proc_rootcell_write+0x1c9/0x280 [ 160.379916][ T8532] proc_simple_write+0x10e/0x1a0 [ 160.379928][ T8532] ? __pfx_proc_simple_write+0x10/0x10 [ 160.379940][ T8532] proc_reg_write+0x240/0x330 [ 160.379958][ T8532] vfs_write+0x2aa/0x1050 [ 160.379972][ T8532] ? __pfx_proc_reg_write+0x10/0x10 [ 160.379988][ T8532] ? lock_acquire+0x1d1/0x380 [ 160.380004][ T8532] ? __fget_files+0x34/0x3d0 [ 160.380019][ T8532] ? __pfx_vfs_write+0x10/0x10 [ 160.380032][ T8532] ? find_held_lock+0x2b/0x80 [ 160.380047][ T8532] ? __fget_files+0x215/0x3d0 [ 160.380064][ T8532] ? __fget_files+0x21f/0x3d0 [ 160.380084][ T8532] ksys_write+0x12a/0x250 [ 160.380098][ T8532] ? __pfx_ksys_write+0x10/0x10 [ 160.380115][ T8532] __do_fast_syscall_32+0x13a/0x8b0 [ 160.380132][ T8532] do_fast_syscall_32+0x32/0x70 [ 160.380147][ T8532] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.380170][ T8532] RIP: 0023:0xf7f22fec [ 160.380185][ T8532] Code: Unable to access opcode bytes at 0xf7f22fc2. [ 160.380191][ T8532] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 160.380204][ T8532] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000070 [ 160.380212][ T8532] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.380219][ T8532] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.380226][ T8532] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 160.380234][ T8532] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.380248][ T8532] [ 160.485702][ T30] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 160.712718][ T5815] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 160.767459][ T8543] netlink: 20 bytes leftover after parsing attributes in process `syz.5.624'. [ 160.767629][ T8543] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 160.769496][ T8544] netlink: 20 bytes leftover after parsing attributes in process `syz.5.624'. [ 160.875291][ T5815] usb 5-1: Using ep0 maxpacket: 8 [ 160.878241][ T5815] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 160.879302][ T5815] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 160.879317][ T5815] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 160.879336][ T5815] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.879359][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.884309][ T5815] usbtmc 5-1:16.0: bulk endpoints not found [ 161.066887][ T8550] Config c/1 of g1 needs at least one function. [ 161.067105][ T8550] udc usbip-vudc.0: failed to start g1: -22 [ 161.067127][ T8550] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 161.075673][ T8550] UDC core: g1: couldn't find an available UDC or it's busy [ 161.167941][ T8515] vhci_hcd: connection reset by peer [ 161.175034][ T12] vhci_hcd vhci_hcd.2: stop threads [ 161.175059][ T12] vhci_hcd vhci_hcd.2: release socket [ 161.175105][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 161.403720][ T8577] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 161.403741][ T8577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.425920][ T8577] input: syz1 as /devices/virtual/input/input11 [ 161.532959][ T8580] netlink: 'syz.5.636': attribute type 58 has an invalid length. [ 161.532972][ T8580] netlink: 20 bytes leftover after parsing attributes in process `syz.5.636'. [ 161.589283][ T8582] kvm: user requested TSC rate below hardware speed [ 161.688612][ T8584] loop5: detected capacity change from 0 to 7 [ 161.692991][ T8584] Dev loop5: unable to read RDB block 7 [ 161.693010][ T8584] loop5: AHDI p1 p3 p4 [ 161.693021][ T8584] loop5: partition table partially beyond EOD, truncated [ 161.695082][ T8584] loop5: p1 size 100663296 extends beyond EOD, truncated [ 161.699871][ T8584] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 161.756350][ T8584] Dev loop5: unable to read RDB block 7 [ 161.756379][ T8584] loop5: AHDI p1 p3 p4 [ 161.756397][ T8584] loop5: partition table partially beyond EOD, truncated [ 161.756908][ T8584] loop5: p1 size 100663296 extends beyond EOD, truncated [ 161.759211][ T8584] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 161.787234][ T6284] udevd[6284]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 161.789601][ T6314] udevd[6314]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 161.799260][ T8586] lo speed is unknown, defaulting to 1000 [ 161.806583][ T6284] udevd[6284]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 161.809726][ T6314] udevd[6314]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 161.931242][ T8591] profile_transition: 22 callbacks suppressed [ 161.931260][ T8591] profile_transition: unconfined exec no attachment [ 161.957097][ T8592] profile_transition: unconfined exec no attachment [ 162.078293][ T854] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 162.242725][ T854] usb 10-1: not running at top speed; connect to a high speed hub [ 162.242744][ T854] usb 10-1: New USB device found, idVendor=0b05, idProduct=1854, bcdDevice= 0.40 [ 162.243626][ T854] usb 10-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 162.243642][ T854] usb 10-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 162.243655][ T854] usb 10-1: config 1 interface 0 has no altsetting 0 [ 162.245451][ T854] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.245463][ T854] usb 10-1: Product: syz [ 162.245471][ T854] usb 10-1: Manufacturer: ᦽ᧾攮䁃ⴭ琳喳싴뜳엂䦕㝗墕廵獰㌟긘恛├爕楥皅冲㆐ [ 162.245480][ T854] usb 10-1: SerialNumber: syz [ 162.248170][ T8588] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 162.307932][ T8594] netlink: 'syz.4.640': attribute type 10 has an invalid length. [ 162.316865][ T8594] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 162.479994][ T854] usbhid 10-1:1.0: can't add hid device: -71 [ 162.480046][ T854] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 162.483456][ T854] usb 10-1: USB disconnect, device number 15 [ 162.611234][ T8604] profile_transition: unconfined exec no attachment [ 162.813353][ T8610] FAULT_INJECTION: forcing a failure. [ 162.813353][ T8610] name failslab, interval 1, probability 0, space 0, times 0 [ 162.813375][ T8610] CPU: 3 UID: 0 PID: 8610 Comm: syz.2.646 Not tainted syzkaller #0 PREEMPT(full) [ 162.813388][ T8610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.813395][ T8610] Call Trace: [ 162.813399][ T8610] [ 162.813404][ T8610] dump_stack_lvl+0x100/0x190 [ 162.813423][ T8610] should_fail_ex.cold+0x5/0xa [ 162.813438][ T8610] should_failslab+0xc2/0x120 [ 162.813456][ T8610] __kmalloc_cache_noprof+0x91/0x6d0 [ 162.813468][ T8610] ? __kasan_kmalloc+0xaa/0xb0 [ 162.813483][ T8610] ? ntfs_init_fs_context+0x31c/0x620 [ 162.813499][ T8610] ntfs_init_fs_context+0x31c/0x620 [ 162.813511][ T8610] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 162.813529][ T8610] alloc_fs_context+0x60c/0xf40 [ 162.813550][ T8610] __ia32_sys_fsopen+0xef/0x230 [ 162.813562][ T8610] __do_fast_syscall_32+0x13a/0x8b0 [ 162.813579][ T8610] do_fast_syscall_32+0x32/0x70 [ 162.813594][ T8610] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.813609][ T8610] RIP: 0023:0xf7ff5fec [ 162.813622][ T8610] Code: Unable to access opcode bytes at 0xf7ff5fc2. [ 162.813627][ T8610] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae [ 162.813639][ T8610] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 0000000000000001 [ 162.813647][ T8610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.813654][ T8610] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.813661][ T8610] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 162.813669][ T8610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.813683][ T8610] [ 162.885878][ T8612] tipc: Started in network mode [ 162.885906][ T8612] tipc: Node identity 7f000001, cluster identity 4711 [ 162.886806][ T8612] tipc: New replicast peer: 127.0.0.1 [ 162.887485][ T8612] tipc: Enabled bearer , priority 10 [ 162.887952][ T8612] tipc: Disabling bearer [ 162.897173][ T8613] profile_transition: unconfined exec no attachment [ 162.930250][ T8618] profile_transition: unconfined exec no attachment [ 162.950227][ T8621] profile_transition: unconfined exec no attachment [ 162.971931][ T8624] profile_transition: unconfined exec no attachment [ 163.003114][ T8628] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.651'. [ 163.044519][ T8629] input: syz0 as /devices/virtual/input/input12 [ 163.098216][ T8634] lo speed is unknown, defaulting to 1000 [ 163.136929][ T8634] FAULT_INJECTION: forcing a failure. [ 163.136929][ T8634] name failslab, interval 1, probability 0, space 0, times 0 [ 163.136950][ T8634] CPU: 3 UID: 0 PID: 8634 Comm: syz.5.653 Not tainted syzkaller #0 PREEMPT(full) [ 163.136965][ T8634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.136978][ T8634] Call Trace: [ 163.136983][ T8634] [ 163.136988][ T8634] dump_stack_lvl+0x100/0x190 [ 163.137009][ T8634] should_fail_ex.cold+0x5/0xa [ 163.137024][ T8634] should_failslab+0xc2/0x120 [ 163.137043][ T8634] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 163.137058][ T8634] ? lockdep_hardirqs_on+0x7d/0x110 [ 163.137073][ T8634] ? __d_alloc+0x35/0xa50 [ 163.137092][ T8634] __d_alloc+0x35/0xa50 [ 163.137107][ T8634] ? inode_set_ctime_current+0x283/0x850 [ 163.137125][ T8634] d_alloc_pseudo+0x1c/0xc0 [ 163.137137][ T8634] alloc_file_pseudo+0x118/0x290 [ 163.137155][ T8634] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 163.137178][ T8634] ioctx_alloc+0x5d6/0x21a0 [ 163.137199][ T8634] ? __might_fault+0xc5/0x140 [ 163.137211][ T8634] ? find_held_lock+0x2b/0x80 [ 163.137225][ T8634] ? __pfx_ioctx_alloc+0x10/0x10 [ 163.137245][ T8634] __ia32_compat_sys_io_setup+0xc8/0x220 [ 163.137263][ T8634] __do_fast_syscall_32+0x13a/0x8b0 [ 163.137280][ T8634] do_fast_syscall_32+0x32/0x70 [ 163.137295][ T8634] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.137310][ T8634] RIP: 0023:0xf7f22fec [ 163.137324][ T8634] Code: Unable to access opcode bytes at 0xf7f22fc2. [ 163.137330][ T8634] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 00000000000000f5 [ 163.137341][ T8634] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 163.137349][ T8634] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.137355][ T8634] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.137362][ T8634] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 163.137368][ T8634] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.137383][ T8634] [ 163.199187][ T8641] profile_transition: unconfined exec no attachment [ 163.217253][ T8642] profile_transition: unconfined exec no attachment [ 163.411919][ T5815] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 163.596052][ T5815] usb 7-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 163.596998][ T5815] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.599179][ T5815] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.599200][ T5815] usb 7-1: Product: syz [ 163.599212][ T5815] usb 7-1: Manufacturer: syz [ 163.599224][ T5815] usb 7-1: SerialNumber: syz [ 163.600983][ T5815] usb 7-1: config 0 descriptor?? [ 163.606360][ T5815] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 163.608523][ T5815] dvb-usb: bulk message failed: -22 (3/0) [ 163.643072][ T5815] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 163.643562][ T5815] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 163.643587][ T5815] usb 7-1: media controller created [ 163.644396][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.649750][ T5815] dvb-usb: bulk message failed: -22 (6/0) [ 163.649797][ T5815] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 163.652057][ T5815] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input13 [ 163.655318][ T5815] dvb-usb: schedule remote query interval to 150 msecs. [ 163.655357][ T5815] dvb-usb: bulk message failed: -22 (3/0) [ 163.671408][ T5815] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 163.730410][ T5815] usb 5-1: USB disconnect, device number 12 [ 163.796182][ T8646] FAULT_INJECTION: forcing a failure. [ 163.796182][ T8646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.796213][ T8646] CPU: 0 UID: 0 PID: 8646 Comm: syz.0.657 Not tainted syzkaller #0 PREEMPT(full) [ 163.796235][ T8646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.796246][ T8646] Call Trace: [ 163.796253][ T8646] [ 163.796260][ T8646] dump_stack_lvl+0x100/0x190 [ 163.796294][ T8646] should_fail_ex.cold+0x5/0xa [ 163.796319][ T8646] _copy_to_user+0x32/0xd0 [ 163.796348][ T8646] simple_read_from_buffer+0xcb/0x170 [ 163.796373][ T8646] proc_fail_nth_read+0x1af/0x230 [ 163.796397][ T8646] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 163.796421][ T8646] ? rw_verify_area+0xce/0x6d0 [ 163.796440][ T8646] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 163.796461][ T8646] vfs_read+0x1e4/0xb40 [ 163.796482][ T8646] ? lock_acquire+0x1d1/0x380 [ 163.796506][ T8646] ? __fget_files+0x34/0x3d0 [ 163.796528][ T8646] ? __pfx_vfs_read+0x10/0x10 [ 163.796547][ T8646] ? find_held_lock+0x2b/0x80 [ 163.796568][ T8646] ? __fget_files+0x215/0x3d0 [ 163.796594][ T8646] ? __fget_files+0x21f/0x3d0 [ 163.796621][ T8646] ksys_read+0x12a/0x250 [ 163.796637][ T8646] ? __pfx_ksys_read+0x10/0x10 [ 163.796654][ T8646] do_int80_emulation+0x166/0x650 [ 163.796670][ T8646] asm_int80_emulation+0x1a/0x20 [ 163.796682][ T8646] RIP: 0023:0xf71875ab [ 163.796691][ T8646] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 163.796702][ T8646] RSP: 002b:00000000f543d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 163.796714][ T8646] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f543d5d0 [ 163.796721][ T8646] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 163.796727][ T8646] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.796733][ T8646] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 163.796740][ T8646] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.796754][ T8646] [ 163.824608][ T908] dvb-usb: bulk message failed: -22 (1/0) [ 163.824645][ T908] dvb-usb: error while querying for an remote control event. [ 163.834754][ T44] audit: type=1807 audit(1791003013.091:300): action=measure func=F res=0 [ 163.879128][ T44] audit: type=1802 audit(1791003013.101:301): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=update_policy cause=invalid-policy comm="syz.2.655" res=0 errno=0 [ 164.009122][ T5815] dvb-usb: bulk message failed: -22 (1/0) [ 164.009141][ T5815] dvb-usb: error while querying for an remote control event. [ 164.021756][ T8638] ima: policy update failed [ 164.022653][ T44] audit: type=1802 audit(1791003013.276:302): pid=8638 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=policy_update cause=failed comm="syz.2.655" res=0 errno=0 [ 164.027110][ T5815] usb 7-1: USB disconnect, device number 10 [ 164.114697][ T5815] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 164.185734][ T8659] /dev/nullb0: Can't open blockdev [ 164.312730][ T1037] Process accounting resumed [ 164.320520][ T8671] profile_transition: unconfined exec no attachment [ 164.480980][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.666'. [ 164.481752][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.666'. [ 164.481955][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.666'. [ 164.482516][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.666'. [ 164.482602][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.666'. [ 164.703164][ T8683] lo speed is unknown, defaulting to 1000 [ 164.771027][ T8683] FAULT_INJECTION: forcing a failure. [ 164.771027][ T8683] name failslab, interval 1, probability 0, space 0, times 0 [ 164.771121][ T8683] CPU: 2 UID: 0 PID: 8683 Comm: syz.2.669 Not tainted syzkaller #0 PREEMPT(full) [ 164.771146][ T8683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.771159][ T8683] Call Trace: [ 164.771166][ T8683] [ 164.771174][ T8683] dump_stack_lvl+0x100/0x190 [ 164.771207][ T8683] should_fail_ex.cold+0x5/0xa [ 164.771234][ T8683] should_failslab+0xc2/0x120 [ 164.771259][ T8683] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 164.771278][ T8683] ? lockdep_hardirqs_on+0x7d/0x110 [ 164.771297][ T8683] ? __d_alloc+0x35/0xa50 [ 164.771322][ T8683] __d_alloc+0x35/0xa50 [ 164.771344][ T8683] ? inode_set_ctime_current+0x283/0x850 [ 164.771372][ T8683] d_alloc_pseudo+0x1c/0xc0 [ 164.771390][ T8683] alloc_file_pseudo+0x118/0x290 [ 164.771420][ T8683] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 164.771454][ T8683] ioctx_alloc+0x5d6/0x21a0 [ 164.771486][ T8683] ? __might_fault+0xc5/0x140 [ 164.771503][ T8683] ? find_held_lock+0x2b/0x80 [ 164.771518][ T8683] ? __pfx_ioctx_alloc+0x10/0x10 [ 164.771540][ T8683] __ia32_compat_sys_io_setup+0xc8/0x220 [ 164.771565][ T8683] __do_fast_syscall_32+0x13a/0x8b0 [ 164.771590][ T8683] do_fast_syscall_32+0x32/0x70 [ 164.771614][ T8683] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 164.771648][ T8683] RIP: 0023:0xf7ff5fec [ 164.771672][ T8683] Code: Unable to access opcode bytes at 0xf7ff5fc2. [ 164.771681][ T8683] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 00000000000000f5 [ 164.771703][ T8683] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 164.771716][ T8683] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.771730][ T8683] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 164.771742][ T8683] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 164.771754][ T8683] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 164.771780][ T8683] [ 164.787736][ T854] usb 10-1: new low-speed USB device number 16 using dummy_hcd [ 164.951375][ T854] usb 10-1: device descriptor read/64, error -71 [ 165.164008][ T8693] FAULT_INJECTION: forcing a failure. [ 165.164008][ T8693] name failslab, interval 1, probability 0, space 0, times 0 [ 165.164030][ T8693] CPU: 2 UID: 0 PID: 8693 Comm: syz.2.672 Not tainted syzkaller #0 PREEMPT(full) [ 165.164042][ T8693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 165.164049][ T8693] Call Trace: [ 165.164054][ T8693] [ 165.164058][ T8693] dump_stack_lvl+0x100/0x190 [ 165.164077][ T8693] should_fail_ex.cold+0x5/0xa [ 165.164092][ T8693] should_failslab+0xc2/0x120 [ 165.164113][ T8693] kmem_cache_alloc_noprof+0x92/0x6a0 [ 165.164132][ T8693] ? rcu_is_watching+0x13/0xc0 [ 165.164151][ T8693] ? do_getname+0x35/0x390 [ 165.164169][ T8693] do_getname+0x35/0x390 [ 165.164185][ T8693] __ia32_sys_fspick+0x16e/0x3a0 [ 165.164202][ T8693] ? __pfx___ia32_sys_fspick+0x10/0x10 [ 165.164219][ T8693] ? ksys_write+0x1ac/0x250 [ 165.164239][ T8693] ? __pfx_ksys_write+0x10/0x10 [ 165.164264][ T8693] __do_fast_syscall_32+0x13a/0x8b0 [ 165.164286][ T8693] ? lockdep_hardirqs_on+0x7d/0x110 [ 165.164308][ T8693] do_fast_syscall_32+0x32/0x70 [ 165.164330][ T8693] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 165.164355][ T8693] RIP: 0023:0xf7ff5fec [ 165.164375][ T8693] Code: Unable to access opcode bytes at 0xf7ff5fc2. [ 165.164383][ T8693] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 00000000000001b1 [ 165.164396][ T8693] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000000000000 [ 165.164403][ T8693] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 165.164410][ T8693] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 165.164417][ T8693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.164423][ T8693] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 165.164437][ T8693] [ 165.232079][ T854] usb 10-1: new low-speed USB device number 17 using dummy_hcd [ 165.338473][ T8699] tunl0: entered promiscuous mode [ 165.338851][ T8699] netlink: 'syz.4.674': attribute type 4 has an invalid length. [ 165.338861][ T8699] netlink: 9 bytes leftover after parsing attributes in process `syz.4.674'. [ 165.383752][ T854] usb 10-1: device descriptor read/64, error -71 [ 165.405502][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.675'. [ 165.406995][ T8702] hsr_slave_0: left promiscuous mode [ 165.410261][ T8702] hsr_slave_1: left promiscuous mode [ 165.418661][ T8704] netlink: 40 bytes leftover after parsing attributes in process `syz.2.676'. [ 165.429265][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.676'. [ 165.472410][ T8710] lo speed is unknown, defaulting to 1000 [ 165.503425][ T854] usb usb10-port1: attempt power cycle [ 165.597685][ T8707] netlink: 'syz.0.677': attribute type 4 has an invalid length. [ 165.818797][ T43] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 165.824668][ T8726] TCP: TCP_TX_DELAY enabled [ 165.882386][ T854] usb 10-1: new low-speed USB device number 18 using dummy_hcd [ 165.916125][ T854] usb 10-1: device descriptor read/8, error -71 [ 166.002283][ T43] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.003176][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.003197][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.003213][ T43] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.003242][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.005320][ T43] usb 9-1: config 0 descriptor?? [ 166.045158][ T30] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 166.196608][ T854] usb 10-1: new low-speed USB device number 19 using dummy_hcd [ 166.226332][ T8718] lo: entered allmulticast mode [ 166.229944][ T854] usb 10-1: device descriptor read/8, error -71 [ 166.231335][ T8718] FAULT_INJECTION: forcing a failure. [ 166.231335][ T8718] name failslab, interval 1, probability 0, space 0, times 0 [ 166.231353][ T8718] CPU: 2 UID: 0 PID: 8718 Comm: syz.4.680 Not tainted syzkaller #0 PREEMPT(full) [ 166.231366][ T8718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.231373][ T8718] Call Trace: [ 166.231377][ T8718] [ 166.231381][ T8718] dump_stack_lvl+0x100/0x190 [ 166.231414][ T8718] should_fail_ex.cold+0x5/0xa [ 166.231430][ T8718] should_failslab+0xc2/0x120 [ 166.231449][ T8718] __kmalloc_node_noprof+0xff/0x880 [ 166.231465][ T8718] ? __kmalloc_noprof+0x350/0x840 [ 166.231480][ T8718] ? get_callchain_buffers+0x1e5/0x380 [ 166.231498][ T8718] get_callchain_buffers+0x1e5/0x380 [ 166.231512][ T8718] ? security_capable+0x80/0x260 [ 166.231530][ T8718] stack_map_alloc+0x316/0x610 [ 166.231543][ T8718] map_create+0x874/0x30d0 [ 166.231556][ T8718] ? __lock_acquire+0x5c0/0x1f40 [ 166.231577][ T8718] ? __pfx_map_create+0x10/0x10 [ 166.231589][ T8718] ? lock_acquire+0x1d1/0x380 [ 166.231605][ T8718] ? __might_fault+0xc5/0x140 [ 166.231617][ T8718] ? __might_fault+0xc5/0x140 [ 166.231635][ T8718] __sys_bpf+0x12a0/0x4a30 [ 166.231647][ T8718] ? plist_check_list+0x1b8/0x280 [ 166.231668][ T8718] ? plist_check_list+0x190/0x280 [ 166.231685][ T8718] ? __pfx___sys_bpf+0x10/0x10 [ 166.231697][ T8718] ? find_held_lock+0x2b/0x80 [ 166.231710][ T8718] ? futex_wake+0x4ea/0x5e0 [ 166.231726][ T8718] ? futex_private_hash_put.part.0+0xdc/0x180 [ 166.231745][ T8718] ? futex_private_hash_put+0x24/0x30 [ 166.231759][ T8718] ? __pfx_futex_wake+0x10/0x10 [ 166.231775][ T8718] ? rcu_read_lock_any_held+0x6a/0x90 [ 166.231789][ T8718] ? find_held_lock+0x2b/0x80 [ 166.231802][ T8718] ? ksys_write+0x190/0x250 [ 166.231814][ T8718] ? ksys_write+0x190/0x250 [ 166.231836][ T8718] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 166.231851][ T8718] ? xfd_validate_state+0x129/0x190 [ 166.231871][ T8718] ? __ia32_sys_bpf+0xcc/0x170 [ 166.231884][ T8718] __ia32_sys_bpf+0xcc/0x170 [ 166.231897][ T8718] ? __do_fast_syscall_32+0xb3/0x8b0 [ 166.231913][ T8718] __do_fast_syscall_32+0x13a/0x8b0 [ 166.231929][ T8718] do_fast_syscall_32+0x32/0x70 [ 166.231944][ T8718] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 166.231958][ T8718] RIP: 0023:0xf7f03fec [ 166.231972][ T8718] Code: Unable to access opcode bytes at 0xf7f03fc2. [ 166.231977][ T8718] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 166.231989][ T8718] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800005c0 [ 166.231996][ T8718] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 166.232003][ T8718] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 166.232009][ T8718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.232015][ T8718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 166.232030][ T8718] [ 166.234067][ T8717] lo: left allmulticast mode [ 166.238353][ T43] usbhid 9-1:0.0: can't add hid device: -71 [ 166.238404][ T43] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 166.240626][ T43] usb 9-1: USB disconnect, device number 12 [ 166.359602][ T854] usb usb10-port1: unable to enumerate USB device [ 166.496724][ T8729] block nbd2: shutting down sockets [ 166.559082][ T8734] netlink: 'syz.0.685': attribute type 10 has an invalid length. [ 166.560898][ T8734] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 166.577779][ T8736] netlink: 'syz.2.686': attribute type 10 has an invalid length. [ 166.588081][ T8736] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 166.625132][ T8740] netlink: 'syz.2.688': attribute type 10 has an invalid length. [ 166.682447][ T8743] lo speed is unknown, defaulting to 1000 [ 166.786968][ T8743] FAULT_INJECTION: forcing a failure. [ 166.786968][ T8743] name failslab, interval 1, probability 0, space 0, times 0 [ 166.787000][ T8743] CPU: 0 UID: 0 PID: 8743 Comm: syz.2.689 Not tainted syzkaller #0 PREEMPT(full) [ 166.787021][ T8743] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.787031][ T8743] Call Trace: [ 166.787038][ T8743] [ 166.787045][ T8743] dump_stack_lvl+0x100/0x190 [ 166.787075][ T8743] should_fail_ex.cold+0x5/0xa [ 166.787097][ T8743] should_failslab+0xc2/0x120 [ 166.787121][ T8743] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 166.787144][ T8743] ? lockdep_hardirqs_on+0x7d/0x110 [ 166.787166][ T8743] ? __d_alloc+0x35/0xa50 [ 166.787194][ T8743] __d_alloc+0x35/0xa50 [ 166.787215][ T8743] ? inode_set_ctime_current+0x283/0x850 [ 166.787243][ T8743] d_alloc_pseudo+0x1c/0xc0 [ 166.787261][ T8743] alloc_file_pseudo+0x118/0x290 [ 166.787288][ T8743] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 166.787323][ T8743] ioctx_alloc+0x5d6/0x21a0 [ 166.787358][ T8743] ? __might_fault+0xc5/0x140 [ 166.787377][ T8743] ? find_held_lock+0x2b/0x80 [ 166.787396][ T8743] ? __pfx_ioctx_alloc+0x10/0x10 [ 166.787426][ T8743] __ia32_compat_sys_io_setup+0xc8/0x220 [ 166.787456][ T8743] __do_fast_syscall_32+0x13a/0x8b0 [ 166.787483][ T8743] do_fast_syscall_32+0x32/0x70 [ 166.787505][ T8743] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 166.787527][ T8743] RIP: 0023:0xf7ff5fec [ 166.787549][ T8743] Code: Unable to access opcode bytes at 0xf7ff5fc2. [ 166.787556][ T8743] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 00000000000000f5 [ 166.787573][ T8743] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 166.787583][ T8743] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 166.787593][ T8743] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 166.787602][ T8743] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 166.787612][ T8743] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 166.787635][ T8743] [ 166.853097][ T8749] Unknown options in mask e346 [ 166.945513][ T8752] ublk0: read batch cmd buffer failed [ 166.945607][ T8752] ublk0: read batch cmd buffer failed [ 167.044006][ T8755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.057619][ T8755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.148766][ T8757] FAULT_INJECTION: forcing a failure. [ 167.148766][ T8757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.148796][ T8757] CPU: 0 UID: 0 PID: 8757 Comm: syz.2.693 Not tainted syzkaller #0 PREEMPT(full) [ 167.148816][ T8757] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.148827][ T8757] Call Trace: [ 167.148834][ T8757] [ 167.148841][ T8757] dump_stack_lvl+0x100/0x190 [ 167.148871][ T8757] should_fail_ex.cold+0x5/0xa [ 167.148895][ T8757] _copy_to_user+0x32/0xd0 [ 167.148923][ T8757] simple_read_from_buffer+0xcb/0x170 [ 167.148949][ T8757] proc_fail_nth_read+0x1af/0x230 [ 167.148973][ T8757] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.148996][ T8757] ? rw_verify_area+0xce/0x6d0 [ 167.149056][ T8757] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.149085][ T8757] vfs_read+0x1e4/0xb40 [ 167.149109][ T8757] ? lock_acquire+0x1d1/0x380 [ 167.149134][ T8757] ? __fget_files+0x34/0x3d0 [ 167.149156][ T8757] ? __pfx_vfs_read+0x10/0x10 [ 167.149175][ T8757] ? find_held_lock+0x2b/0x80 [ 167.149197][ T8757] ? __fget_files+0x215/0x3d0 [ 167.149224][ T8757] ? __fget_files+0x21f/0x3d0 [ 167.149254][ T8757] ksys_read+0x12a/0x250 [ 167.149275][ T8757] ? __pfx_ksys_read+0x10/0x10 [ 167.149304][ T8757] do_int80_emulation+0x166/0x650 [ 167.149331][ T8757] asm_int80_emulation+0x1a/0x20 [ 167.149349][ T8757] RIP: 0023:0xf71f75ab [ 167.149365][ T8757] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 167.149383][ T8757] RSP: 002b:00000000f54b64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 167.149402][ T8757] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54b65d0 [ 167.149414][ T8757] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 167.149424][ T8757] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 167.149435][ T8757] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 167.149446][ T8757] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 167.149471][ T8757] [ 167.356658][ T8761] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 167.408557][ T44] audit: type=1326 audit(1791003016.395:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8765 comm="syz.2.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fec code=0x7ffc0000 [ 167.408630][ T44] audit: type=1326 audit(1791003016.395:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8765 comm="syz.2.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fec code=0x7ffc0000 [ 167.408928][ T44] audit: type=1326 audit(1791003016.395:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8765 comm="syz.2.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fec code=0x7ffc0000 [ 167.409012][ T44] audit: type=1326 audit(1791003016.395:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8765 comm="syz.2.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fec code=0x7ffc0000 [ 167.409085][ T44] audit: type=1326 audit(1791003016.395:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8765 comm="syz.2.697" exe="/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7ff5fec code=0x7ffc0000 [ 167.409190][ T44] audit: type=1326 audit(1791003016.395:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8765 comm="syz.2.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fec code=0x7ffc0000 [ 167.409262][ T44] audit: type=1326 audit(1791003016.395:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8765 comm="syz.2.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fec code=0x7ffc0000 [ 167.516223][ T8766] Invalid ELF header magic: != ELF [ 167.691894][ T8777] lo speed is unknown, defaulting to 1000 [ 167.752627][ T8777] FAULT_INJECTION: forcing a failure. [ 167.752627][ T8777] name failslab, interval 1, probability 0, space 0, times 0 [ 167.752648][ T8777] CPU: 0 UID: 0 PID: 8777 Comm: syz.4.701 Not tainted syzkaller #0 PREEMPT(full) [ 167.752662][ T8777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.752669][ T8777] Call Trace: [ 167.752673][ T8777] [ 167.752678][ T8777] dump_stack_lvl+0x100/0x190 [ 167.752699][ T8777] should_fail_ex.cold+0x5/0xa [ 167.752715][ T8777] should_failslab+0xc2/0x120 [ 167.752734][ T8777] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 167.752749][ T8777] ? lockdep_hardirqs_on+0x7d/0x110 [ 167.752763][ T8777] ? __d_alloc+0x35/0xa50 [ 167.752782][ T8777] __d_alloc+0x35/0xa50 [ 167.752797][ T8777] ? inode_set_ctime_current+0x283/0x850 [ 167.752815][ T8777] d_alloc_pseudo+0x1c/0xc0 [ 167.752827][ T8777] alloc_file_pseudo+0x118/0x290 [ 167.752845][ T8777] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 167.752866][ T8777] ioctx_alloc+0x5d6/0x21a0 [ 167.752886][ T8777] ? __might_fault+0xc5/0x140 [ 167.752898][ T8777] ? find_held_lock+0x2b/0x80 [ 167.752912][ T8777] ? __pfx_ioctx_alloc+0x10/0x10 [ 167.752933][ T8777] __ia32_compat_sys_io_setup+0xc8/0x220 [ 167.752951][ T8777] __do_fast_syscall_32+0x13a/0x8b0 [ 167.752968][ T8777] do_fast_syscall_32+0x32/0x70 [ 167.752983][ T8777] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 167.752997][ T8777] RIP: 0023:0xf7f03fec [ 167.753012][ T8777] Code: Unable to access opcode bytes at 0xf7f03fc2. [ 167.753017][ T8777] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 00000000000000f5 [ 167.753028][ T8777] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 167.753036][ T8777] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 167.753042][ T8777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 167.753049][ T8777] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 167.753055][ T8777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 167.753070][ T8777] [ 167.758768][ T8781] profile_transition: 7 callbacks suppressed [ 167.758780][ T8781] profile_transition: unconfined exec no attachment [ 167.777626][ T8782] profile_transition: unconfined exec no attachment [ 167.834325][ T8784] FAULT_INJECTION: forcing a failure. [ 167.834325][ T8784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.834351][ T8784] CPU: 0 UID: 0 PID: 8784 Comm: syz.5.702 Not tainted syzkaller #0 PREEMPT(full) [ 167.834366][ T8784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.834374][ T8784] Call Trace: [ 167.834380][ T8784] [ 167.834387][ T8784] dump_stack_lvl+0x100/0x190 [ 167.834417][ T8784] should_fail_ex.cold+0x5/0xa [ 167.834441][ T8784] _copy_from_user+0x2e/0xd0 [ 167.834470][ T8784] memdup_user+0x6b/0xe0 [ 167.834492][ T8784] strndup_user+0x78/0xe0 [ 167.834515][ T8784] __do_sys_fsconfig+0x276/0xcb0 [ 167.834539][ T8784] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 167.834563][ T8784] ? ksys_write+0x1ac/0x250 [ 167.834587][ T8784] ? __pfx_ksys_write+0x10/0x10 [ 167.834615][ T8784] __do_fast_syscall_32+0x13a/0x8b0 [ 167.834639][ T8784] ? lockdep_hardirqs_on+0x7d/0x110 [ 167.834665][ T8784] do_fast_syscall_32+0x32/0x70 [ 167.834689][ T8784] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 167.834714][ T8784] RIP: 0023:0xf7f22fec [ 167.834735][ T8784] Code: Unable to access opcode bytes at 0xf7f22fc2. [ 167.834743][ T8784] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 167.834762][ T8784] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 167.834775][ T8784] RDX: 0000000080000000 RSI: 0000000080000040 RDI: 0000000000000000 [ 167.834786][ T8784] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 167.834798][ T8784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.834809][ T8784] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 167.834835][ T8784] [ 167.938915][ T8793] FAULT_INJECTION: forcing a failure. [ 167.938915][ T8793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.938946][ T8793] CPU: 1 UID: 0 PID: 8793 Comm: syz.5.705 Not tainted syzkaller #0 PREEMPT(full) [ 167.938967][ T8793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.938979][ T8793] Call Trace: [ 167.938985][ T8793] [ 167.938994][ T8793] dump_stack_lvl+0x100/0x190 [ 167.939024][ T8793] should_fail_ex.cold+0x5/0xa [ 167.939048][ T8793] _copy_to_user+0x32/0xd0 [ 167.939079][ T8793] simple_read_from_buffer+0xcb/0x170 [ 167.939106][ T8793] proc_fail_nth_read+0x1af/0x230 [ 167.939129][ T8793] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.939154][ T8793] ? rw_verify_area+0xce/0x6d0 [ 167.939183][ T8793] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.939204][ T8793] vfs_read+0x1e4/0xb40 [ 167.939225][ T8793] ? lock_acquire+0x1d1/0x380 [ 167.939251][ T8793] ? __fget_files+0x34/0x3d0 [ 167.939273][ T8793] ? __pfx_vfs_read+0x10/0x10 [ 167.939292][ T8793] ? find_held_lock+0x2b/0x80 [ 167.939314][ T8793] ? __fget_files+0x215/0x3d0 [ 167.939341][ T8793] ? __fget_files+0x21f/0x3d0 [ 167.939372][ T8793] ksys_read+0x12a/0x250 [ 167.939393][ T8793] ? __pfx_ksys_read+0x10/0x10 [ 167.939423][ T8793] do_int80_emulation+0x166/0x650 [ 167.939451][ T8793] asm_int80_emulation+0x1a/0x20 [ 167.939470][ T8793] RIP: 0023:0xf71275ab [ 167.939486][ T8793] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 167.939504][ T8793] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 167.939523][ T8793] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53e65d0 [ 167.939535][ T8793] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 167.939546][ T8793] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 167.939556][ T8793] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 167.939567][ T8793] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 167.939593][ T8793] [ 168.063872][ T8802] random: crng reseeded on system resumption [ 168.069327][ T8798] bridge1: entered promiscuous mode [ 168.077391][ T8798] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 169.050252][ T8817] lo speed is unknown, defaulting to 1000 [ 169.123910][ T8821] profile_transition: unconfined exec no attachment [ 169.173166][ T8823] profile_transition: unconfined exec no attachment [ 169.186044][ T8826] FAULT_INJECTION: forcing a failure. [ 169.186044][ T8826] name failslab, interval 1, probability 0, space 0, times 0 [ 169.186066][ T8826] CPU: 3 UID: 0 PID: 8826 Comm: syz.2.715 Not tainted syzkaller #0 PREEMPT(full) [ 169.186079][ T8826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.186086][ T8826] Call Trace: [ 169.186090][ T8826] [ 169.186094][ T8826] dump_stack_lvl+0x100/0x190 [ 169.186114][ T8826] should_fail_ex.cold+0x5/0xa [ 169.186129][ T8826] should_failslab+0xc2/0x120 [ 169.186146][ T8826] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 169.186160][ T8826] ? alloc_fd+0x471/0x7a0 [ 169.186174][ T8826] ? alloc_inode+0x183/0x250 [ 169.186187][ T8826] alloc_inode+0x183/0x250 [ 169.186198][ T8826] alloc_anon_inode+0x2a/0x3e0 [ 169.186216][ T8826] anon_inode_make_secure_inode+0x2f/0x140 [ 169.186230][ T8826] __do_sys_memfd_secret+0xd7/0x570 [ 169.186249][ T8826] __do_fast_syscall_32+0x13a/0x8b0 [ 169.186264][ T8826] ? lockdep_hardirqs_on+0x7d/0x110 [ 169.186278][ T8826] do_fast_syscall_32+0x32/0x70 [ 169.186293][ T8826] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.186308][ T8826] RIP: 0023:0xf7ff5fec [ 169.186321][ T8826] Code: Unable to access opcode bytes at 0xf7ff5fc2. [ 169.186326][ T8826] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 00000000000001bf [ 169.186337][ T8826] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 0000000000000000 [ 169.186345][ T8826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 169.186351][ T8826] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.186357][ T8826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.186364][ T8826] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.186378][ T8826] [ 169.517552][ T8855] __nla_validate_parse: 1 callbacks suppressed [ 169.517574][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.725'. [ 169.520845][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.725'. [ 169.521119][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.725'. [ 169.522824][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.725'. [ 169.543391][ T8860] FAULT_INJECTION: forcing a failure. [ 169.543391][ T8860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.543420][ T8860] CPU: 3 UID: 0 PID: 8860 Comm: syz.4.730 Not tainted syzkaller #0 PREEMPT(full) [ 169.543439][ T8860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.543449][ T8860] Call Trace: [ 169.543457][ T8860] [ 169.543464][ T8860] dump_stack_lvl+0x100/0x190 [ 169.543498][ T8860] should_fail_ex.cold+0x5/0xa [ 169.543521][ T8860] _copy_to_user+0x32/0xd0 [ 169.543546][ T8860] simple_read_from_buffer+0xcb/0x170 [ 169.543570][ T8860] proc_fail_nth_read+0x1af/0x230 [ 169.543592][ T8860] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.543613][ T8860] ? rw_verify_area+0xce/0x6d0 [ 169.543631][ T8860] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.543651][ T8860] vfs_read+0x1e4/0xb40 [ 169.543670][ T8860] ? lock_acquire+0x1d1/0x380 [ 169.543694][ T8860] ? __fget_files+0x34/0x3d0 [ 169.543715][ T8860] ? __pfx_vfs_read+0x10/0x10 [ 169.543732][ T8860] ? find_held_lock+0x2b/0x80 [ 169.543753][ T8860] ? __fget_files+0x215/0x3d0 [ 169.543777][ T8860] ? __fget_files+0x21f/0x3d0 [ 169.543805][ T8860] ksys_read+0x12a/0x250 [ 169.543824][ T8860] ? __pfx_ksys_read+0x10/0x10 [ 169.543851][ T8860] do_int80_emulation+0x166/0x650 [ 169.543876][ T8860] asm_int80_emulation+0x1a/0x20 [ 169.543893][ T8860] RIP: 0023:0xf71075ab [ 169.543908][ T8860] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 169.543924][ T8860] RSP: 002b:00000000f53c64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 169.543941][ T8860] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53c65d0 [ 169.543951][ T8860] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 169.543961][ T8860] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.543971][ T8860] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 169.543979][ T8860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.544002][ T8860] [ 169.602317][ T8865] lo speed is unknown, defaulting to 1000 [ 169.653085][ T8865] FAULT_INJECTION: forcing a failure. [ 169.653085][ T8865] name failslab, interval 1, probability 0, space 0, times 0 [ 169.653107][ T8865] CPU: 0 UID: 0 PID: 8865 Comm: syz.4.731 Not tainted syzkaller #0 PREEMPT(full) [ 169.653120][ T8865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.653128][ T8865] Call Trace: [ 169.653133][ T8865] [ 169.653137][ T8865] dump_stack_lvl+0x100/0x190 [ 169.653157][ T8865] should_fail_ex.cold+0x5/0xa [ 169.653173][ T8865] should_failslab+0xc2/0x120 [ 169.653192][ T8865] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 169.653209][ T8865] ? lockdep_hardirqs_on+0x7d/0x110 [ 169.653223][ T8865] ? __d_alloc+0x35/0xa50 [ 169.653241][ T8865] __d_alloc+0x35/0xa50 [ 169.653256][ T8865] ? inode_set_ctime_current+0x283/0x850 [ 169.653274][ T8865] d_alloc_pseudo+0x1c/0xc0 [ 169.653286][ T8865] alloc_file_pseudo+0x118/0x290 [ 169.653306][ T8865] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 169.653328][ T8865] ioctx_alloc+0x5d6/0x21a0 [ 169.653403][ T8865] ? __might_fault+0xc5/0x140 [ 169.653418][ T8865] ? find_held_lock+0x2b/0x80 [ 169.653433][ T8865] ? __pfx_ioctx_alloc+0x10/0x10 [ 169.653460][ T8865] __ia32_compat_sys_io_setup+0xc8/0x220 [ 169.653481][ T8865] __do_fast_syscall_32+0x13a/0x8b0 [ 169.653498][ T8865] do_fast_syscall_32+0x32/0x70 [ 169.653514][ T8865] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.653529][ T8865] RIP: 0023:0xf7f03fec [ 169.653544][ T8865] Code: Unable to access opcode bytes at 0xf7f03fc2. [ 169.653549][ T8865] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 00000000000000f5 [ 169.653560][ T8865] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 169.653567][ T8865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 169.653574][ T8865] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.653580][ T8865] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 169.653587][ T8865] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.653601][ T8865] [ 169.672616][ T8867] profile_transition: unconfined exec no attachment [ 169.732601][ T8868] profile_transition: unconfined exec no attachment [ 169.812312][ T8873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.836551][ T8877] FAULT_INJECTION: forcing a failure. [ 169.836551][ T8877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.836579][ T8877] CPU: 1 UID: 0 PID: 8877 Comm: syz.5.735 Not tainted syzkaller #0 PREEMPT(full) [ 169.836598][ T8877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.836607][ T8877] Call Trace: [ 169.836613][ T8877] [ 169.836620][ T8877] dump_stack_lvl+0x100/0x190 [ 169.836648][ T8877] should_fail_ex.cold+0x5/0xa [ 169.836671][ T8877] _copy_to_user+0x32/0xd0 [ 169.836696][ T8877] simple_read_from_buffer+0xcb/0x170 [ 169.836720][ T8877] proc_fail_nth_read+0x1af/0x230 [ 169.836741][ T8877] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.836762][ T8877] ? rw_verify_area+0xce/0x6d0 [ 169.836780][ T8877] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.836799][ T8877] vfs_read+0x1e4/0xb40 [ 169.836818][ T8877] ? lock_acquire+0x1d1/0x380 [ 169.836842][ T8877] ? __fget_files+0x34/0x3d0 [ 169.836863][ T8877] ? __pfx_vfs_read+0x10/0x10 [ 169.836879][ T8877] ? find_held_lock+0x2b/0x80 [ 169.836898][ T8877] ? __fget_files+0x215/0x3d0 [ 169.836923][ T8877] ? __fget_files+0x21f/0x3d0 [ 169.836949][ T8877] ksys_read+0x12a/0x250 [ 169.836968][ T8877] ? __pfx_ksys_read+0x10/0x10 [ 169.836994][ T8877] do_int80_emulation+0x166/0x650 [ 169.837028][ T8877] asm_int80_emulation+0x1a/0x20 [ 169.837046][ T8877] RIP: 0023:0xf71275ab [ 169.837060][ T8877] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 169.837076][ T8877] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 169.837093][ T8877] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53e65d0 [ 169.837104][ T8877] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 169.837114][ T8877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.837123][ T8877] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 169.837133][ T8877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.837156][ T8877] [ 170.239163][ T30] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 170.403638][ T30] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 170.404612][ T30] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 170.404647][ T30] usb 9-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 170.404663][ T30] usb 9-1: config 0 interface 0 has no altsetting 0 [ 170.406496][ T30] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 170.406514][ T30] usb 9-1: Product: syz [ 170.406524][ T30] usb 9-1: Manufacturer: syz [ 170.406535][ T30] usb 9-1: SerialNumber: syz [ 170.408466][ T30] usb 9-1: config 0 descriptor?? [ 170.411617][ T30] hub 9-1:0.0: bad descriptor, ignoring hub [ 170.411635][ T30] hub 9-1:0.0: probe with driver hub failed with error -5 [ 170.450341][ T8885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.450648][ T30] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 170.461254][ T8885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.465378][ T6314] udevd[6314]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.749266][ T30] usb 9-1: USB disconnect, device number 13 [ 171.122078][ T8899] profile_transition: unconfined exec no attachment [ 171.126775][ T8900] profile_transition: unconfined exec no attachment [ 171.127778][ T43] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 171.153360][ T8901] profile_transition: unconfined exec no attachment [ 171.160729][ T8902] profile_transition: unconfined exec no attachment [ 171.315722][ T8908] lo speed is unknown, defaulting to 1000 [ 171.322818][ T43] usb 9-1: Using ep0 maxpacket: 32 [ 171.324833][ T43] usb 9-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 171.325838][ T43] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 38, changing to 7 [ 171.327478][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.327491][ T43] usb 9-1: Product: syz [ 171.327499][ T43] usb 9-1: Manufacturer: syz [ 171.327508][ T43] usb 9-1: SerialNumber: syz [ 171.357917][ T8910] FAULT_INJECTION: forcing a failure. [ 171.357917][ T8910] name failslab, interval 1, probability 0, space 0, times 0 [ 171.357939][ T8910] CPU: 2 UID: 0 PID: 8910 Comm: syz.0.743 Not tainted syzkaller #0 PREEMPT(full) [ 171.357953][ T8910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 171.357961][ T8910] Call Trace: [ 171.357965][ T8910] [ 171.357970][ T8910] dump_stack_lvl+0x100/0x190 [ 171.358002][ T8910] should_fail_ex.cold+0x5/0xa [ 171.358021][ T8910] should_failslab+0xc2/0x120 [ 171.358040][ T8910] __kmalloc_cache_noprof+0x91/0x6d0 [ 171.358053][ T8910] ? sctp_add_bind_addr+0xae/0x3e0 [ 171.358073][ T8910] sctp_add_bind_addr+0xae/0x3e0 [ 171.358089][ T8910] sctp_copy_local_addr_list+0x349/0x550 [ 171.358107][ T8910] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 171.358124][ T8910] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 171.358140][ T8910] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 171.358159][ T8910] sctp_bind_addr_copy+0x331/0x530 [ 171.358175][ T8910] sctp_connect_new_asoc+0x1c9/0x770 [ 171.358194][ T8910] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 171.358215][ T8910] ? __ipv6_addr_type+0xe8/0x2e0 [ 171.358226][ T8910] ? __ipv6_addr_type+0xe8/0x2e0 [ 171.358238][ T8910] __sctp_connect+0x3e7/0xc70 [ 171.358255][ T8910] ? lock_acquire+0x1d1/0x380 [ 171.358274][ T8910] ? __pfx___sctp_connect+0x10/0x10 [ 171.358294][ T8910] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 171.358312][ T8910] sctp_inet_connect+0x15f/0x220 [ 171.358330][ T8910] __sys_connect_file+0x146/0x1a0 [ 171.358348][ T8910] __sys_connect+0x141/0x170 [ 171.358364][ T8910] ? __pfx___sys_connect+0x10/0x10 [ 171.358390][ T8910] __ia32_sys_connect+0x71/0xb0 [ 171.358405][ T8910] ? lockdep_hardirqs_on+0x7d/0x110 [ 171.358419][ T8910] __do_fast_syscall_32+0x13a/0x8b0 [ 171.358436][ T8910] do_fast_syscall_32+0x32/0x70 [ 171.358451][ T8910] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 171.358466][ T8910] RIP: 0023:0xf704efec [ 171.358480][ T8910] Code: Unable to access opcode bytes at 0xf704efc2. [ 171.358486][ T8910] RSP: 002b:00000000f541c50c EFLAGS: 00000292 ORIG_RAX: 000000000000016a [ 171.358498][ T8910] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 171.358505][ T8910] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 171.358512][ T8910] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 171.358519][ T8910] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 171.358530][ T8910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.358546][ T8910] [ 171.564344][ T44] kauditd_printk_skb: 137 callbacks suppressed [ 171.564403][ T44] audit: type=1326 audit(1791003020.233:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8878 comm="syz.4.736" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f03fec code=0x0 [ 171.635273][ T43] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 171.659815][ T43] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 171.672863][ T43] usb 9-1: USB disconnect, device number 14 [ 171.695116][ T6314] udevd[6314]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.163669][ T8931] FAULT_INJECTION: forcing a failure. [ 172.163669][ T8931] name failslab, interval 1, probability 0, space 0, times 0 [ 172.163697][ T8931] CPU: 3 UID: 0 PID: 8931 Comm: syz.2.745 Not tainted syzkaller #0 PREEMPT(full) [ 172.163714][ T8931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.163723][ T8931] Call Trace: [ 172.163728][ T8931] [ 172.163733][ T8931] dump_stack_lvl+0x100/0x190 [ 172.163759][ T8931] should_fail_ex.cold+0x5/0xa [ 172.163800][ T8931] should_failslab+0xc2/0x120 [ 172.163822][ T8931] __kmalloc_noprof+0xfc/0x840 [ 172.163841][ T8931] ? tomoyo_encode2+0xfb/0x3c0 [ 172.163863][ T8931] tomoyo_encode2+0xfb/0x3c0 [ 172.163883][ T8931] tomoyo_encode+0x29/0x50 [ 172.163898][ T8931] tomoyo_realpath_from_path+0x18c/0x690 [ 172.163920][ T8931] tomoyo_check_open_permission+0x2af/0x3c0 [ 172.163936][ T8931] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 172.163951][ T8931] ? __lock_acquire+0x5c0/0x1f40 [ 172.163979][ T8931] ? hook_file_open+0x248/0x8e0 [ 172.164009][ T8931] ? path_get+0x61/0x80 [ 172.164032][ T8931] tomoyo_file_open+0x6b/0x90 [ 172.164053][ T8931] security_file_open+0xb5/0x1e0 [ 172.164069][ T8931] do_dentry_open+0x588/0x14d0 [ 172.164093][ T8931] vfs_open+0x82/0x3f0 [ 172.164119][ T8931] path_openat+0x19fa/0x2440 [ 172.164143][ T8931] ? __pfx_path_openat+0x10/0x10 [ 172.164171][ T8931] do_file_open+0x20e/0x430 [ 172.164196][ T8931] ? __pfx_do_file_open+0x10/0x10 [ 172.164235][ T8931] ? _raw_spin_unlock+0x28/0x50 [ 172.164253][ T8931] ? alloc_fd+0x471/0x7a0 [ 172.164274][ T8931] do_sys_openat2+0x10f/0x1e0 [ 172.164292][ T8931] ? __pfx_do_sys_openat2+0x10/0x10 [ 172.164311][ T8931] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 172.164328][ T8931] __ia32_compat_sys_openat+0x12d/0x210 [ 172.164340][ T8931] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 172.164351][ T8931] ? fput+0x7c/0x100 [ 172.164366][ T8931] ? ksys_write+0x1ac/0x250 [ 172.164379][ T8931] ? __pfx_ksys_write+0x10/0x10 [ 172.164395][ T8931] __do_fast_syscall_32+0x13a/0x8b0 [ 172.164408][ T8931] ? lockdep_hardirqs_on+0x7d/0x110 [ 172.164422][ T8931] do_fast_syscall_32+0x32/0x70 [ 172.164437][ T8931] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.164452][ T8931] RIP: 0023:0xf7ff5fec [ 172.164466][ T8931] Code: Unable to access opcode bytes at 0xf7ff5fc2. [ 172.164471][ T8931] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 172.164483][ T8931] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000300 [ 172.164490][ T8931] RDX: 0000000000080200 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.164496][ T8931] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 172.164503][ T8931] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 172.164509][ T8931] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.164524][ T8931] [ 172.164563][ T8931] ERROR: Out of memory at tomoyo_realpath_from_path. [ 173.168697][ T8950] FAULT_INJECTION: forcing a failure. [ 173.168697][ T8950] name failslab, interval 1, probability 0, space 0, times 0 [ 173.168719][ T8950] CPU: 1 UID: 0 PID: 8950 Comm: syz.0.748 Not tainted syzkaller #0 PREEMPT(full) [ 173.168732][ T8950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.168739][ T8950] Call Trace: [ 173.168742][ T8950] [ 173.168747][ T8950] dump_stack_lvl+0x100/0x190 [ 173.168766][ T8950] should_fail_ex.cold+0x5/0xa [ 173.168782][ T8950] should_failslab+0xc2/0x120 [ 173.168801][ T8950] kmem_cache_alloc_noprof+0x92/0x6a0 [ 173.168818][ T8950] ? security_file_alloc+0x34/0x2c0 [ 173.168833][ T8950] security_file_alloc+0x34/0x2c0 [ 173.168860][ T8950] init_file+0x95/0x480 [ 173.168879][ T8950] alloc_empty_file+0x79/0x1c0 [ 173.168897][ T8950] dentry_open+0x46/0xd0 [ 173.168916][ T8950] vfs_open_tree+0x852/0xae0 [ 173.168935][ T8950] ? __pfx_vfs_open_tree+0x10/0x10 [ 173.168956][ T8950] __ia32_sys_open_tree+0xa3/0x150 [ 173.168975][ T8950] __do_fast_syscall_32+0x13a/0x8b0 [ 173.168992][ T8950] do_fast_syscall_32+0x32/0x70 [ 173.169006][ T8950] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.169021][ T8950] RIP: 0023:0xf704efec [ 173.169034][ T8950] Code: Unable to access opcode bytes at 0xf704efc2. [ 173.169039][ T8950] RSP: 002b:00000000f53fb50c EFLAGS: 00000292 ORIG_RAX: 00000000000001ac [ 173.169052][ T8950] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000200 [ 173.169059][ T8950] RDX: 0000000000089101 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.169066][ T8950] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.169072][ T8950] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 173.169079][ T8950] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.169094][ T8950] [ 173.202612][ T8951] profile_transition: 18 callbacks suppressed [ 173.202630][ T8951] profile_transition: unconfined exec no attachment [ 173.277839][ T8953] profile_transition: unconfined exec no attachment [ 173.312039][ T8954] profile_transition: unconfined exec no attachment [ 173.334008][ T8957] profile_transition: unconfined exec no attachment [ 173.355038][ T8959] netlink: 40 bytes leftover after parsing attributes in process `syz.4.751'. [ 173.797617][ T8974] profile_transition: unconfined exec no attachment [ 173.829233][ T8973] PKCS8: Unsupported PKCS#8 version [ 173.964819][ T8947] FAULT_INJECTION: forcing a failure. [ 173.964819][ T8947] name fail_futex, interval 1, probability 0, space 0, times 0 [ 173.964854][ T8947] CPU: 2 UID: 0 PID: 8947 Comm: syz.0.748 Not tainted syzkaller #0 PREEMPT(full) [ 173.964878][ T8947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.964890][ T8947] Call Trace: [ 173.964896][ T8947] [ 173.964905][ T8947] dump_stack_lvl+0x100/0x190 [ 173.964933][ T8947] should_fail_ex.cold+0x5/0xa [ 173.964957][ T8947] get_futex_key+0x1d0/0x14f0 [ 173.964981][ T8947] ? __pfx_get_futex_key+0x10/0x10 [ 173.965001][ T8947] ? __mutex_unlock_slowpath+0x35d/0x930 [ 173.965031][ T8947] futex_wake+0xf4/0x5e0 [ 173.965055][ T8947] ? __pfx_futex_wake+0x10/0x10 [ 173.965084][ T8947] ? detach_task_ctx_data+0x83/0x490 [ 173.965113][ T8947] do_futex+0x2b2/0x440 [ 173.965135][ T8947] ? __pfx_do_futex+0x10/0x10 [ 173.965152][ T8947] ? __might_fault+0xc5/0x140 [ 173.965178][ T8947] mm_exit_exec_release+0x256/0x2f0 [ 173.965198][ T8947] do_exit+0x707/0x2a50 [ 173.965224][ T8947] ? __pfx_do_exit+0x10/0x10 [ 173.965244][ T8947] ? do_raw_spin_lock+0x128/0x260 [ 173.965262][ T8947] ? find_held_lock+0x2b/0x80 [ 173.965280][ T8947] ? get_signal+0x7e0/0x21e0 [ 173.965308][ T8947] do_group_exit+0xd5/0x2a0 [ 173.965331][ T8947] get_signal+0x1ec7/0x21e0 [ 173.965368][ T8947] ? __pfx_get_signal+0x10/0x10 [ 173.965393][ T8947] ? do_futex+0x190/0x440 [ 173.965415][ T8947] arch_do_signal_or_restart+0x91/0x7a0 [ 173.965442][ T8947] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 173.965481][ T8947] exit_to_user_mode_loop+0x139/0x700 [ 173.965499][ T8947] ? rcu_is_watching+0x13/0xc0 [ 173.965520][ T8947] __do_fast_syscall_32+0x59f/0x8b0 [ 173.965543][ T8947] ? lockdep_hardirqs_on+0x7d/0x110 [ 173.965567][ T8947] do_fast_syscall_32+0x32/0x70 [ 173.965590][ T8947] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.965611][ T8947] RIP: 0023:0xf704efec [ 173.965630][ T8947] Code: Unable to access opcode bytes at 0xf704efc2. [ 173.965638][ T8947] RSP: 002b:00000000f543d5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 173.965657][ T8947] RAX: fffffffffffffe00 RBX: 00000000f7444f88 RCX: 0000000000000080 [ 173.965669][ T8947] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7444f8c [ 173.965679][ T8947] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 173.965690][ T8947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.965701][ T8947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.965726][ T8947] [ 174.035952][ T8979] lo speed is unknown, defaulting to 1000 [ 174.076857][ T8979] FAULT_INJECTION: forcing a failure. [ 174.076857][ T8979] name failslab, interval 1, probability 0, space 0, times 0 [ 174.076879][ T8979] CPU: 3 UID: 0 PID: 8979 Comm: syz.0.757 Not tainted syzkaller #0 PREEMPT(full) [ 174.076892][ T8979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.076899][ T8979] Call Trace: [ 174.076903][ T8979] [ 174.076909][ T8979] dump_stack_lvl+0x100/0x190 [ 174.076932][ T8979] should_fail_ex.cold+0x5/0xa [ 174.076950][ T8979] should_failslab+0xc2/0x120 [ 174.076967][ T8979] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 174.076982][ T8979] ? lockdep_hardirqs_on+0x7d/0x110 [ 174.076997][ T8979] ? __d_alloc+0x35/0xa50 [ 174.077017][ T8979] __d_alloc+0x35/0xa50 [ 174.077033][ T8979] ? inode_set_ctime_current+0x283/0x850 [ 174.077050][ T8979] d_alloc_pseudo+0x1c/0xc0 [ 174.077063][ T8979] alloc_file_pseudo+0x118/0x290 [ 174.077082][ T8979] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 174.077106][ T8979] ioctx_alloc+0x5d6/0x21a0 [ 174.077127][ T8979] ? __might_fault+0xc5/0x140 [ 174.077139][ T8979] ? find_held_lock+0x2b/0x80 [ 174.077153][ T8979] ? __pfx_ioctx_alloc+0x10/0x10 [ 174.077174][ T8979] __ia32_compat_sys_io_setup+0xc8/0x220 [ 174.077192][ T8979] __do_fast_syscall_32+0x13a/0x8b0 [ 174.077209][ T8979] do_fast_syscall_32+0x32/0x70 [ 174.077223][ T8979] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.077238][ T8979] RIP: 0023:0xf704efec [ 174.077251][ T8979] Code: Unable to access opcode bytes at 0xf704efc2. [ 174.077256][ T8979] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000f5 [ 174.077268][ T8979] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 174.077275][ T8979] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 174.077282][ T8979] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 174.077288][ T8979] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 174.077295][ T8979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.077309][ T8979] [ 174.180334][ T8985] profile_transition: unconfined exec no attachment [ 174.197167][ T8986] profile_transition: unconfined exec no attachment [ 174.197247][ T8982] BUG: unable to handle page fault for address: fffff52008eeea00 [ 174.206540][ T8982] #PF: supervisor read access in kernel mode [ 174.209289][ T8982] #PF: error_code(0x0000) - not-present page [ 174.213706][ T8982] PGD 7ffd4067 P4D 7ffd4067 PUD 1d6ac067 PMD 0 [ 174.216382][ T8982] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 174.218783][ T8982] CPU: 1 UID: 0 PID: 8982 Comm: syz.4.756 Not tainted syzkaller #0 PREEMPT(full) [ 174.222713][ T8982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.227265][ T8982] RIP: 0010:sys_imageblit+0x16c1/0x1d60 [ 174.229797][ T8982] Code: 7c cd 00 48 89 fe 48 c1 ee 03 80 3c 1e 00 0f 85 aa 05 00 00 4d 63 f6 48 8b 8c cc 88 00 00 00 4f 8d 34 f7 4c 89 f6 48 c1 ee 03 <80> 3c 1e 00 0f 85 1b 03 00 00 49 89 0e 41 89 c6 8d 4d fd 41 c1 ee [ 174.238032][ T8982] RSP: 0000:ffffc9000ce27610 EFLAGS: 00010a06 [ 174.240610][ T8982] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 174.243925][ T8982] RDX: 0000000000000000 RSI: 1ffff92008eeea00 RDI: ffffc9000ce27698 [ 174.247299][ T8982] RBP: 0000000000000004 R08: 0000000000000005 R09: 0000000000000003 [ 174.250628][ T8982] R10: 0000000000000008 R11: 0000000000000000 R12: ffff88806f6e8001 [ 174.253931][ T8982] R13: ffffc9000ce27698 R14: ffffc90047775000 R15: ffffc90047775000 [ 174.257237][ T8982] FS: 0000000000000000(0000) GS:ffff888096a55000(0063) knlGS:00000000f5384b40 [ 174.260979][ T8982] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 174.263769][ T8982] CR2: fffff52008eeea00 CR3: 0000000067cb2000 CR4: 0000000000352ef0 [ 174.267096][ T8982] Call Trace: [ 174.268534][ T8982] [ 174.269811][ T8982] ? __pfx_sys_imageblit+0x10/0x10 [ 174.271499][ T8982] ? fb_pad_aligned_buffer+0xcb/0x160 [ 174.273181][ T8982] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 174.275092][ T8982] ccw_putcs+0x92f/0xbb0 [ 174.276428][ T8982] ? __pfx_ccw_putcs+0x10/0x10 [ 174.277972][ T8982] ? fb_get_color_depth+0x120/0x250 [ 174.279612][ T8982] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 174.281480][ T8982] fbcon_putcs+0x3b2/0x480 [ 174.282890][ T8982] ? __pfx_ccw_putcs+0x10/0x10 [ 174.284400][ T8982] do_update_region+0x2cf/0x3f0 [ 174.285946][ T8982] redraw_screen+0x63f/0x760 [ 174.287439][ T8982] ? mark_held_locks+0x40/0x70 [ 174.288956][ T8982] ? __pfx_redraw_screen+0x10/0x10 [ 174.290570][ T8982] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 174.292398][ T8982] vc_do_resize+0xc3d/0xeb0 [ 174.293832][ T8982] ? lock_acquire+0x1d1/0x380 [ 174.295338][ T8982] ? __pfx_vc_do_resize+0x10/0x10 [ 174.296938][ T8982] ? rcu_is_watching+0x13/0xc0 [ 174.298477][ T8982] vt_ioctl+0x1e74/0x3170 [ 174.299840][ T8982] ? __pfx_vt_ioctl+0x10/0x10 [ 174.301323][ T8982] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 174.303217][ T8982] ? futex_wait+0x11e/0x370 [ 174.304649][ T8982] ? rcu_is_watching+0x13/0xc0 [ 174.306160][ T8982] ? apparmor_capable+0x1d7/0x4d0 [ 174.307772][ T8982] ? bpf_lsm_capable+0x9/0x10 [ 174.309250][ T8982] ? security_capable+0x80/0x260 [ 174.310811][ T8982] vt_compat_ioctl+0x33f/0x4e0 [ 174.312320][ T8982] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 174.313981][ T8982] ? __fget_files+0x215/0x3d0 [ 174.315490][ T8982] ? hook_file_ioctl_common+0x140/0x440 [ 174.317282][ T8982] ? __fget_files+0x21f/0x3d0 [ 174.318802][ T8982] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 174.320453][ T8982] tty_compat_ioctl+0x1b4/0x420 [ 174.321990][ T8982] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 174.323673][ T8982] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 174.325377][ T8982] __do_fast_syscall_32+0x13a/0x8b0 [ 174.327039][ T8982] ? lockdep_hardirqs_on+0x7d/0x110 [ 174.328671][ T8982] do_fast_syscall_32+0x32/0x70 [ 174.330217][ T8982] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.332177][ T8982] RIP: 0023:0xf7f03fec [ 174.333484][ T8982] Code: Unable to access opcode bytes at 0xf7f03fc2. [ 174.335543][ T8982] RSP: 002b:00000000f538450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 174.338166][ T8982] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000000000560a [ 174.340640][ T8982] RDX: 00000000800006c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 174.343005][ T8982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 174.345451][ T8982] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 174.347928][ T8982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.350398][ T8982] [ 174.351379][ T8982] Modules linked in: [ 174.352608][ T8982] CR2: fffff52008eeea00 [ 174.353912][ T8982] ---[ end trace 0000000000000000 ]--- [ 174.355597][ T8982] RIP: 0010:sys_imageblit+0x16c1/0x1d60 [ 174.355619][ T8982] Code: 7c cd 00 48 89 fe 48 c1 ee 03 80 3c 1e 00 0f 85 aa 05 00 00 4d 63 f6 48 8b 8c cc 88 00 00 00 4f 8d 34 f7 4c 89 f6 48 c1 ee 03 <80> 3c 1e 00 0f 85 1b 03 00 00 49 89 0e 41 89 c6 8d 4d fd 41 c1 ee [ 174.355630][ T8982] RSP: 0000:ffffc9000ce27610 EFLAGS: 00010a06 [ 174.355639][ T8982] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 174.355646][ T8982] RDX: 0000000000000000 RSI: 1ffff92008eeea00 RDI: ffffc9000ce27698 [ 174.355653][ T8982] RBP: 0000000000000004 R08: 0000000000000005 R09: 0000000000000003 [ 174.355659][ T8982] R10: 0000000000000008 R11: 0000000000000000 R12: ffff88806f6e8001 [ 174.355666][ T8982] R13: ffffc9000ce27698 R14: ffffc90047775000 R15: ffffc90047775000 [ 174.355673][ T8982] FS: 0000000000000000(0000) GS:ffff888096a55000(0063) knlGS:00000000f5384b40 [ 174.355695][ T8982] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 174.355704][ T8982] CR2: 00000000f7f04000 CR3: 0000000067cb2000 CR4: 0000000000352ef0 [ 174.355713][ T8982] Kernel panic - not syncing: Fatal exception [ 174.387309][ T8982] Kernel Offset: disabled [ 174.388699][ T8982] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:50:20 Registers: info registers vcpu 0 CPU#0 RAX=00000000001d811c RBX=ffffffff8ea91580 RCX=ffffffff8bd08215 RDX=0000000000000001 RSI=ffffffff8c623f00 RDI=ffffffff81e010ae RBP=fffffbfff1d522b0 RSP=ffffffff8ea07cf0 R8 =0000000000000000 R9 =ffffed10056467bd R10=ffff88802b233deb R11=ffffffff81d6d689 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d40fa2 R15=dffffc0000000000 RIP=ffffffff8bd0674f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096955000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe2ba32b6b0 CR3=000000000eb96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020000002 Opmask01=0000000000000001 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe2ba53c8f0 00007fe2ba53c310 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe2ba4fd050 00007fe2ba4fc0c0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe2ba4fd580 00007fe2ba4fcb20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe2ba1ff0c0 00007fe2ba4fdab0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe2ba53bda0 00007fe2ba4fc5f0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe2ba1ff6b0 00007fe2ba1ff0c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe2ba4fdab0 00007fe2ba4fd580 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe2ba4fcb20 00007fe2ba4fd050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e75006465696669 63657073206e6f69 74706f20676e6f6c 207974706d65000a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 636572696420746f 6f722065676e6168 632074276e616300 7269646863660027 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4640574c4105514a 4a570540424b444d 460551024b444600 574c414d46430002 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85afd130 RDI=ffffffff9bc624a0 RBP=ffffffff9bc62460 RSP=ffffc9000ce26ca0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff378c4e9 R15=dffffc0000000000 RIP=ffffffff85afd157 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096a55000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=fffff52008eeea00 CR3=0000000067cb2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000d800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffc9002030fd40 RCX=ffffc90005400000 RDX=0000000000000000 RSI=ffffffff85285b92 RDI=ffffc9002030fd70 RBP=0000000000000000 RSP=ffffc9002030fa48 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffc9002030fb60 R13=0000000000000000 R14=1ffff92004061f4b R15=ffffc9002030fb40 RIP=ffffffff820ba470 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096b55000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7208c10 CR3=0000000067cb2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=1ffff92004065f34 RCX=ffffc9000c001000 RDX=0000000000000000 RSI=00000000000000a9 RDI=ffffffff8c603b60 RBP=0000000000000000 RSP=ffffc9002032f998 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=ffffffff81d6d689 R12=ffffffff8c603b60 R13=00000000000000a9 R14=dffffc0000000000 R15=000000008000362b RIP=ffffffff8bd07160 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096c55000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080003000 CR3=0000000060ab1000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d04f1050d55c9082 48bbf376d33f245f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6706f3a5d33fa706 c5a8b0fc1beb9a43 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 349b59aa08fa24d8 7b5086aa3769741c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1b102a3cf3d90283 fc27ce96c60e406b ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001600 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9fed12b600800100 a22a7b0e00800100 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a1f52db00000006a 0000006a00800100 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a21b93520000006a 0000006a0000006a ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006aa2416c50 a23812b60000006a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 302bd555937d00e3 b6a497551fe0f377 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 72a930026cf1a0fe 668c8581ddfbce15 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000