last executing test programs: 5.796410881s ago: executing program 2 (id=612): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x4008550c, &(0x7f0000000040)=@usbdevfs_driver={0xfffffffd, 0x9, 0x0}) 5.665939988s ago: executing program 1 (id=614): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000002180)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x20, 0x20, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0xb386, 0x2, 0xd, 0x7, 0x5}}}}}, 0x0) (fail_nth: 4) 5.665706852s ago: executing program 1 (id=615): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES8=r2], &(0x7f0000000280)=""/4096, 0x53, 0x1000, 0x1, 0xe}, 0x28) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000680)='/dev/comedi0\x00', 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000c060101000000000000000000000004050001009ec9a59322fe10d8dbb2def971540f991096f56aa22e9fd63fc945bfa6225fa333790959afccdac0b7f08fefe66c8dcf86ba6e48812902"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x28) unshare(0x40000000) r6 = socket$inet(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000d40), 0x4bb, 0x800) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}}) 4.876926438s ago: executing program 2 (id=618): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_pts(0xffffffffffffffff, 0x81) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r3, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @time={0x3, 0x3}, {0xff}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'lo\x00'}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"ff87c89d4e3e6bd4ae7ee3551b880c0ac56cb2a58b7da498a7045278c8043bbe"}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080c5}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000380), 0x3, 0x400000) ioctl$I2C_PEC(r6, 0x708, 0x4) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=ANY=[@ANYBLOB="300000001000010025bd7076af00fddbdf250000", @ANYRES32=0x0, @ANYBLOB="001004000100000008001b000000000008000d0080000000"], 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080) socket$nl_route(0x10, 0x3, 0x0) 3.828854594s ago: executing program 3 (id=623): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x88) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0xf) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="34000000680001050000000000000000000000220000000088ec00000300000006000300010000000c00020002000000006295d91e2d35790975670000000000"], 0x34}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000180)=r7) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(r0, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a3b", 0x34000}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c00000066001fff29bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="006ae3000000006444087a53de36d03800002000000000b4a066b70bdc86181cf174bdf53d5910b8cce426e197eff2614d8a1f3d392756380d694ceb5f63fd65233b3999a57347d64aeb699776a11d541d0304187addb06fddac84d027d46f07d26d75e1e14fb95315cfd7ba7bf679", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r10, 0x8b32, &(0x7f0000000040)) getsockopt$bt_BT_VOICE(r10, 0x112, 0xb, &(0x7f00000007c0)=0xfeff, &(0x7f0000000800)=0x2) read$FUSE(r8, &(0x7f0000002140)={0x2020}, 0x2020) 3.806678284s ago: executing program 2 (id=624): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001814010028bd70000200000008ad5a00000000000800010000000000"], 0x20}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='res', 0x3) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000340)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "539c1a739956baf72f9224d7bb99566aaed7f88c3bfdc58d3a0a062af33fbe49aef586982a59ac225db1ab0662e85b5e7261f619cb0032609f400510ec901055", 0x1b}, 0x48, 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000180)="110ac03969148b2df0eb9bb7c63596e2e735a8f04b4ffd494baade4092574ca84ce53598c4aef15a6fc9c509864b9897e0b3d2b61234230413c3aabc07efe1b7a5d44dc7dc6ae27eec9c5259680c2a3211dbbb507f96f324e03c723a5e09be0a21d39ea0e062178aa4e926f6cb453d0f897dd3f5a4c1a52c8d9b1c01e7663349df56374ef8d035b48daf8648106313d8457f83264a057209022be442f1fccf9f62bb49ffbb2f9ca6e4db4998ac9e234cef69d0116faf58c4e11bd0dd0e8337d215c7e8f87b268a5d599710bfe230027edf98", 0xd2, r3) 3.775815435s ago: executing program 1 (id=625): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a80), r0) futex_waitv(&(0x7f00000047c0)=[{0x6, &(0x7f0000004680)=0x6, 0x2}, {0x5, &(0x7f00000046c0)=0x5, 0x82}, {0x100, &(0x7f0000004700), 0x2}], 0x3, 0x0, 0x0, 0x1) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r4, 0x4b36) ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f0000000040)=0x1) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x202, 0x82) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000380)={0x80, 0x8, 0x100, 0x6, 0x0, 0x2, 0x0}) 3.666828953s ago: executing program 1 (id=627): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES8=r2], &(0x7f0000000280)=""/4096, 0x53, 0x1000, 0x1, 0xe}, 0x28) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000680)='/dev/comedi0\x00', 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000c060101000000000000000000000004050001009ec9a59322fe10d8dbb2def971540f991096f56aa22e9fd63fc945bfa6225fa333790959afccdac0b7f08fefe66c8dcf86ba6e48812902"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x28) unshare(0x40000000) r6 = socket$inet(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000d40), 0x4bb, 0x800) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}}) 3.265228113s ago: executing program 2 (id=630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0xf5, &(0x7f0000000200)={&(0x7f0000000140)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) 3.176421329s ago: executing program 2 (id=631): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, 0x0, 0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, 0x0, 0x0}, 0x20) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x2044090, &(0x7f0000000a00)=ANY=[@ANYBLOB="1be343e5cbabf4de1a272a14513381e55a4f5386ebf412da93b39a4c7829fbde55668881790b403ac48c436275f93f478aab8a79d0a0b8746a96602f8b68ef412a277b1969e2636bafddead6a609fa47c9", @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x2044090, &(0x7f0000000a00)=ANY=[@ANYBLOB="1be343e5cbabf4de1a272a14513381e55a4f5386ebf412da93b39a4c7829fbde55668881790b403ac48c436275f93f478aab8a79d0a0b8746a96602f8b68ef412a277b1969e2636bafddead6a609fa47c9", @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0xffffffffffeffff5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x18d001, 0x20) writev(r3, &(0x7f00000017c0)=[{&(0x7f0000000340)="bc886a316b203b7c7d84e215eab13a1fc67bad8de181e578dd64db1526d6d4bc69c1a1721b85ddf5c37e1a28bb50861ae84d4fba5d4c1e023fa6e82fcfd30e666fea9f5fbd6e8c9e84d25f278a205b09ff0636421b2838530727d3dc4ae854d14dbf8056f6c6ac", 0x67}], 0x1) ioctl$OCFS2_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000000)={0x2, 0x2, 0x5, 0x8005, 0x2, 0x10000}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./dev/kmsg\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000200)={0xfffffff8, 0x5, 0x10001, 0x4, 0x4f, "0d41810700943aaa91e55b0d6f6ff88c6b00", 0x9, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x3, 0x3d, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b000100000000090437416d1fc7cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_connect$uac2(0x5, 0xb7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201500200000020392ab03f4000010203010902a50003010b2002080b0001010420030904000000010142000924010000013700020a2404040723924b7d4608240a1001070b030c2403060504d1050503000808240b0903edd4da08240b590363921b09040100000102200009040101010102200006240201020409050109200008d300082501820f086000090402000001022000090402010101022000082402010802020209058209ff030002060825010030040900"], &(0x7f0000000780)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x300, 0xe, 0xe8, 0x5, 0x8, 0x8}, 0x98, &(0x7f00000007c0)={0x5, 0xf, 0x98, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "7dec9fe1b9303a79f4a9665774b9c7ee"}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x9, 0x5, 0x25}, @generic={0x39, 0x10, 0xb, "251391c3e33d05cd438ff2d96ffa7d476c5a85ef97c03b12e6714056bf79de41dfc4a12265c589bba8f74da093d2f3688c73233ae3e7"}, @ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0x526, 0xf, 0xb098, [0xc000, 0x0, 0xc0cf, 0x180c0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x23, 0x3, 0x81, 0xffff, 0x9}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x8, 0x0, 0xa, [0xc000, 0xc000, 0x3fc0]}]}, 0x4, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x430}}, {0x8e, &(0x7f0000000600)=@string={0x8e, 0x3, "d342a0edac6483a3ee4689e464d81e0855da18137f60bdbec1c969ec72a28e4ef5c8546507f89f53906406f77233901a0fc499d68027e8afa5bc1d04d97b4ef42ff3de3a43cbe7fd1d25097108ad01447ac484061ce95d6378e6076cc04c102916db2e922226b70a9bde0d90e6ad02ca09147f3ccf070f53047285159aef049304ce94e469c94816c2c34c7b"}}, {0x62, &(0x7f00000006c0)=@string={0x62, 0x3, "d6fe50ce35c23bb95d3bd80d5c3b394aab91ca7596ea71198383658d243ade1ca24d283ceddb9f987e4c39efaa522992aaccfcc7f8fad5a0d42fe3670453076686b476002a18cb6c3312ff737a29f390eae8c843c1236ab89ce84fdd409b46a2"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3401}}]}) (async) syz_usb_connect$uac2(0x5, 0xb7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201500200000020392ab03f4000010203010902a50003010b2002080b0001010420030904000000010142000924010000013700020a2404040723924b7d4608240a1001070b030c2403060504d1050503000808240b0903edd4da08240b590363921b09040100000102200009040101010102200006240201020409050109200008d300082501820f086000090402000001022000090402010101022000082402010802020209058209ff030002060825010030040900"], &(0x7f0000000780)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x300, 0xe, 0xe8, 0x5, 0x8, 0x8}, 0x98, &(0x7f00000007c0)={0x5, 0xf, 0x98, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "7dec9fe1b9303a79f4a9665774b9c7ee"}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x9, 0x5, 0x25}, @generic={0x39, 0x10, 0xb, "251391c3e33d05cd438ff2d96ffa7d476c5a85ef97c03b12e6714056bf79de41dfc4a12265c589bba8f74da093d2f3688c73233ae3e7"}, @ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0x526, 0xf, 0xb098, [0xc000, 0x0, 0xc0cf, 0x180c0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x23, 0x3, 0x81, 0xffff, 0x9}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x8, 0x0, 0xa, [0xc000, 0xc000, 0x3fc0]}]}, 0x4, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x430}}, {0x8e, &(0x7f0000000600)=@string={0x8e, 0x3, "d342a0edac6483a3ee4689e464d81e0855da18137f60bdbec1c969ec72a28e4ef5c8546507f89f53906406f77233901a0fc499d68027e8afa5bc1d04d97b4ef42ff3de3a43cbe7fd1d25097108ad01447ac484061ce95d6378e6076cc04c102916db2e922226b70a9bde0d90e6ad02ca09147f3ccf070f53047285159aef049304ce94e469c94816c2c34c7b"}}, {0x62, &(0x7f00000006c0)=@string={0x62, 0x3, "d6fe50ce35c23bb95d3bd80d5c3b394aab91ca7596ea71198383658d243ade1ca24d283ceddb9f987e4c39efaa522992aaccfcc7f8fad5a0d42fe3670453076686b476002a18cb6c3312ff737a29f390eae8c843c1236ab89ce84fdd409b46a2"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3401}}]}) 2.026854956s ago: executing program 3 (id=634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) (fail_nth: 4) 1.946703605s ago: executing program 3 (id=635): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x121242, 0x0) writev(r1, &(0x7f0000000c40)=[{&(0x7f00000009c0)="7066aff9d6503bd3621f99a776c72c47f20d64", 0x13}], 0x1) sendto(r1, &(0x7f0000000000)="4bdbce2e4c3d56aec0712c7594ea009604a92054fc2a4d4a308b9e3b6dba18e995e40813e54afd31b8680269ea46ee41e2806d110adc64dd352e7431441152778293ba191c3162b29045a62a53e15890b0b0", 0x52, 0x1000c001, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x10, 0x700, 0x81a7, 0x1, {{0xd, 0x4, 0x3, 0x0, 0x34, 0x66, 0x0, 0x6, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x3, 0x8d}, @cipso={0x86, 0x1c, 0x1, [{0x2, 0x7, "3677f3d6fe"}, {0x2, 0xb, "5b1a61c59c2a178b61"}, {0x6, 0x4, 'D1'}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x80, 0x2, 0x2, @remote, @private1, 0x8, 0x1, 0xc, 0x17}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000540)={{0x3, 0x2, 0x9, 0x1, 0x59a}}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x13}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x51}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000440)={'wg1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x81, 0x4, 0x14, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @local, 0x8000, 0x8000, 0x10, 0x58}}) r10 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r10, r10, 0x0, 0xfffa83) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000001040)={0x22c, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x180, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x92, 0x5, "93bf5d52d9d4b8f121dc23576d4f094d7d7f7938afc0e60c837de5e05de749b8a13303ab7d2e7c045135ad6d943f5595ac2cf3514c69235615d4bb0643f4745fc370a84fd5d5dfc36fd966622b53540b3907993046bb3e92e1195c0df19995e130bee58da55af3f77ffc55a1e81a01d408da1d6725f1c68222dc86e70cd6128e43337e3a7e96043015bdcbacaac3"}, @ETHTOOL_A_BITSET_VALUE={0x58, 0x4, "104b76141a9d70b197457956230fb1467ca45437156122da192a6326d207f7a26ebd81610387505f5b47143867b1c26a047d45972c1f63ba8c79f7a7638bcb62d04162f4bdbc563b7ffdf5c8a60ef063c1e5f88b"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_MASK={0x85, 0x5, "36ad43b939bcddf7489be6556cde6198cbdeeef8487a28b37bad1f6cd6f249bc2e8fdbc0b50def923dbd5a3e3b896a82a0504ae9214908c0269355dd0205751ee761c67798e25b3eae9ae03e3aab73defe133d9928c5b849ba9bb39745233ffa8d34296515bf55fbd839d48774c241d3c913f9b02bfe56d8f1d5457ab880a7893e"}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x22c}}, 0xc000) fchdir(0xffffffffffffffff) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r11, &(0x7f00000000c0)=""/55, 0x37) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) close(0x3) 1.351206824s ago: executing program 3 (id=636): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="00042bbd7000ffdbdf52120000000a000600ff"], 0x48}, 0x1, 0x0, 0x0, 0x4040810}, 0x40000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) (async) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x503, 0x70bd28, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3816}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x72923d35}]}, 0x3c}}, 0x440b0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'netdevsim0\x00', 0x1000}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) (async) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000001040)={0x0, 0x0}) (async) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000001040)={0x0, 0x0}) 1.296991211s ago: executing program 0 (id=637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x200}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3f, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xd}}}}}}, 0x0) (fail_nth: 4) 1.247092686s ago: executing program 0 (id=638): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x1, {0x800a}}) io_uring_enter(r0, 0x1002000, 0xfffffffd, 0x4b, 0x0, 0x0) 1.246778052s ago: executing program 0 (id=639): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_pts(0xffffffffffffffff, 0x81) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r3, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @time={0x3, 0x3}, {0xff}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'lo\x00'}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"ff87c89d4e3e6bd4ae7ee3551b880c0ac56cb2a58b7da498a7045278c8043bbe"}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080c5}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000380), 0x3, 0x400000) ioctl$I2C_PEC(r6, 0x708, 0x4) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=ANY=[@ANYBLOB="300000001000010025bd7076af00fddbdf250000", @ANYRES32=0x0, @ANYBLOB="001004000100000008001b000000000008000d0080000000"], 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080) socket$nl_route(0x10, 0x3, 0x0) 997.009995ms ago: executing program 3 (id=640): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES8=r2], &(0x7f0000000280)=""/4096, 0x53, 0x1000, 0x1, 0xe}, 0x28) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000680)='/dev/comedi0\x00', 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000c060101000000000000000000000004050001009ec9a59322fe10d8dbb2def971540f991096f56aa22e9fd63fc945bfa6225fa333790959afccdac0b7f08fefe66c8dcf86ba6e48812902"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x1c}}, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x0) unshare(0x40000000) r6 = socket$inet(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000d40), 0x4bb, 0x800) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}}) 934.805784ms ago: executing program 1 (id=641): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x50) socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xfffffee2) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000480)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r7, r5, 0x25, 0x0, @val=@uprobe_multi={&(0x7f0000000400)='./file0\x00', &(0x7f0000000500)=[0x5, 0x6, 0x4, 0x4, 0x44, 0x4, 0x8000000000000001], &(0x7f00000005c0)=[0x2, 0x2, 0x3], 0x81, 0x7, 0x1, r2}}, 0x3c) syz_emit_ethernet(0x1016, &(0x7f0000001b40)=ANY=[], 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[], 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/195, 0xc3}], 0x1}, 0x0) timerfd_create(0x3, 0x80000) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xcd0}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b", 0x33}], 0x1}, 0x40085) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xac, 0x1, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xe00}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x26}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_NAT_SRC={0x4}, @CTA_TUPLE_ORIG={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8001}, 0x4b75817543f1005e) write$cgroup_subtree(r8, 0x0, 0xfe33) r9 = timerfd_create(0x9, 0x0) timerfd_gettime(r9, &(0x7f0000000380)) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setns(0xc9, 0x0) 238.808724ms ago: executing program 0 (id=642): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000000)=""/24, 0x18, 0x0, &(0x7f0000000040)=""/194, 0xc2}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x7, [@typedef={0x8}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x2e, 0x0, 0x3f, 0x1}, @restrict={0xf, 0x0, 0x0, 0xb, 0x3}, @struct={0xd, 0x1, 0x0, 0x4, 0x1, 0x0, [{0xa, 0x5, 0x1}]}]}, {0x0, [0x51, 0x5f, 0x0, 0x2e, 0x2e]}}, &(0x7f0000000280)=""/75, 0x5f, 0x4b, 0x1, 0x4}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x12a, 0x0, r0, 0x8, '\x00', 0x0, r2, 0x5, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRESDEC=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 176.855285ms ago: executing program 0 (id=643): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x1c, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f0000000000)={0xb6, 0x0, 0x1}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x300, 0x2, 0x2, 0x10, 0x9, 0x5, 0x0, 0xfffffff8, 0x80008, 0x1b1, 0x7, 0x1, 0x7, 0x2, 0x0, 0xfffffffd, 0xfffffffe, 0x7, 0x100003, 0x80000003, 0x489, 0x7, 0x0, 0x4, 0x1, 0xf39e, 0x0, 0x8, 0x6, 0xffffffff, 0xfffffff8]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x6c}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x11, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x1, 0xff, 0x20000000, 0x9, 0x4}, 0x7, 0x4}, [{0x7, 0x3, 0x4, 0x0, 0x4a3, 0x2}, {0x1, 0x6, 0x4, 0x0, 0x1, 0x3}, {0xd, 0x0, 0x9, 0x101, 0x41, 0x6}, {0x7f, 0x4, 0x7, 0x2, 0x4, 0x4}, {0x200, 0x1000, 0x1, 0xfff, 0x8}, {0xffffffad, 0x6, 0x6, 0x2, 0x101, 0x8}, {0x7, 0x3, 0x0, 0x0, 0x3, 0x8}, {0x2, 0x5, 0xc3b, 0x2, 0x1, 0x8001}, {0x97b, 0x9, 0x3, 0x1, 0xd, 0xcf5}, {0x7f, 0x8001, 0x10001, 0x7, 0x101, 0x6eb865f7}, {0x7a, 0x80, 0x2, 0x1ff, 0x8d, 0x4}, {0x9, 0x9, 0x0, 0x179, 0x8, 0x7}, {0x8, 0x8, 0x7, 0x9, 0x97b5, 0x5}, {0x5, 0x7, 0x6, 0x1, 0xc000, 0x7f}, {0xa, 0xffffffff, 0x3ff, 0x7, 0x8, 0x6}, {0x401, 0xf97, 0xd, 0x691a, 0x6}, {0x0, 0x2, 0x8001, 0x6, 0xeb3, 0x8}, {0x2, 0x1ff, 0xa5, 0x36d6, 0x91}, {0x0, 0x0, 0x8, 0x10001, 0x9, 0x40}, {0x6f, 0x6, 0xff86, 0x5, 0x1, 0x88}, {0x7ff, 0x5, 0x81, 0x2, 0x80, 0xfffffff9}, {0x976b, 0x763, 0x2, 0x0, 0x6, 0x40000}, {0xa, 0x2, 0x9, 0x2, 0x6, 0x6}, {0xffffffff, 0x6215, 0x81, 0xf6cf, 0x1000, 0x8}, {0x0, 0xe7b, 0x6, 0x5, 0x4, 0x10}, {0x59, 0x4, 0x5, 0x8, 0x8001, 0x5e25abe6}, {0x7fffffff, 0x5, 0x13b9, 0x2}, {0x1, 0xaf14, 0x2, 0x3, 0x9, 0x5cf1}, {0xffff, 0x8000, 0x3ff, 0xffff, 0x6, 0x1}, {0x9, 0x0, 0x5, 0xa0a, 0x4, 0xfffffff9}, {0x10000, 0xee1, 0x400, 0x3ff, 0xffff}, {0x2, 0x4, 0x0, 0x3, 0x8, 0xfff}, {0xfffffff7, 0x9, 0x6, 0x8, 0x9, 0x80000}, {0x9, 0x2, 0x10, 0x1ff, 0xc, 0x8}, {0x100, 0x6, 0x800, 0x3, 0x0, 0x6}, {0x5804, 0x6, 0x0, 0x10, 0x9, 0x5}, {0x8, 0xfffffffe, 0x6, 0x6, 0x0, 0x1}, {0x9, 0x57b2f255, 0xd, 0x9f, 0x40, 0x6}, {0x1, 0x4903, 0x6, 0x1, 0xb3, 0x8}, {0x9, 0x6, 0x40000, 0x1, 0xc, 0x1}, {0x2, 0xfffff001, 0x2, 0x5, 0xfffffff9, 0x9}, {0x6, 0xea, 0xf, 0x8, 0x1, 0x7}, {0x8, 0x8, 0xfffe0000, 0x9, 0x3}, {0x101, 0x2, 0x5b, 0x7, 0x7f, 0x2}, {0xe5ce, 0xffffff01, 0x7000, 0x0, 0xd, 0xc}, {0x8, 0xff, 0x0, 0x59, 0x0, 0x3ff}, {0x5, 0x9, 0x80000001, 0x2, 0xfffffffe, 0xfffffffc}, {0x3, 0xd, 0x50000000, 0x400, 0x5, 0x1}, {0x8, 0x9, 0xeea, 0x1, 0x3, 0x8001}, {0x0, 0x9, 0x3, 0x498, 0x8, 0x40000000}, {0x10001, 0xffffff7f, 0x9, 0x8, 0x7, 0xc}, {0x54fd3e6b, 0x8, 0x5, 0x1, 0x7, 0x8}, {0x4, 0x8, 0x4, 0x6, 0x6, 0x2964}, {0x5, 0x2, 0x0, 0x82, 0x2, 0x7}, {0x3, 0xffffffd6, 0x93, 0xeaf, 0x5, 0x6}, {0x1, 0x9, 0x0, 0xea3, 0x16}, {0x3, 0x9, 0x65d, 0x8, 0x5, 0x1}, {0x5, 0x6, 0x80000001, 0x2, 0x1, 0x2693d155}, {0x6, 0x7, 0x35e, 0x66c, 0x9, 0x6}, {0xcf, 0x8, 0xa, 0x6, 0x0, 0x5}, {0x5, 0xbe, 0x0, 0x3, 0x7, 0x4}, {0x7, 0x4c2600, 0x1, 0x7ee, 0x1, 0x10001}, {0x3, 0xbbf, 0x8, 0x8, 0x6, 0xb06e}, {0x9, 0xc2f, 0x3, 0x6, 0x4, 0x2}, {0x7, 0x81, 0xf, 0xf0, 0x5, 0xf779}, {0x8001, 0x7, 0x10, 0x0, 0x8, 0x7c81}, {0x1, 0x7f, 0xbe, 0x2, 0x4, 0x6}, {0x10000007, 0x2, 0x1, 0x0, 0x8, 0x6}, {0x3fb, 0x2, 0x8, 0x5d06, 0x4, 0x7fff}, {0x9, 0x6cf, 0x1, 0x81, 0xe56b, 0xfffffff8}, {0x74d, 0x2, 0x8, 0x7, 0x8, 0x2}, {0x401, 0x6, 0x2, 0x80000000, 0xccb9, 0x13f}, {0x5, 0x1ff, 0xed2, 0x9, 0x1658, 0x6}, {0x0, 0x1, 0x5, 0x1ff, 0x7, 0x7}, {0x10, 0x400, 0x7, 0x1, 0x8, 0x3}, {0xf, 0x0, 0xee68, 0x7ff, 0xbb, 0x8}, {0x590, 0x0, 0x64, 0x10, 0x8, 0x2}, {0x4, 0xd, 0x659, 0x6e, 0x2f193dcb, 0x7}, {0xffff, 0x9, 0x800, 0xf, 0x1, 0x3}, {0x5, 0x1, 0xff, 0x8001, 0x7, 0xfffffeff}, {0x6, 0x3, 0x7f, 0xc98b, 0x401, 0x3}, {0xd, 0x7a04, 0x2f, 0x1, 0x7, 0xa}, {0x2, 0x100, 0x7fffffff, 0x5, 0x1a5, 0x5}, {0x1000, 0x5, 0x7, 0x80000000, 0x1, 0x8}, {0x7, 0x80000000, 0x800, 0xfb, 0x187, 0xffff}, {0xd0e, 0xb, 0x1ff, 0x5, 0x401, 0x3ff}, {0x99dea97, 0xfffffffd, 0x7, 0x0, 0x0, 0x6}, {0x7c937224, 0x0, 0x10001, 0x9, 0x7fffffff, 0x6}, {0x2, 0xd11, 0x6, 0x3a, 0x3, 0xa}, {0x0, 0x9, 0x6, 0x18c0, 0x0, 0x3}, {0xfffffffb, 0x1, 0x1, 0x5, 0x0, 0x34}, {0x7fff, 0x10, 0x6, 0x6, 0xffffffff, 0x582}, {0xc3, 0x8, 0xd, 0xc87, 0x41, 0x2}, {0x0, 0x4, 0x0, 0xffff8001, 0x0, 0x4}, {0x6, 0x8, 0xe, 0xe2c1, 0x9, 0x8}, {0x6, 0x1, 0x5, 0x80000001, 0x4, 0x9}, {0x1a0, 0x5, 0xa16, 0xffffff2a, 0x9, 0x10001}, {0x4, 0xe, 0x6, 0xf, 0x8, 0x4}, {0x6, 0x4, 0xa, 0xffffffff, 0xc, 0x4}, {0x545, 0x3, 0xe62, 0x9a9d, 0x7, 0xf}, {0x6, 0x5, 0x2, 0x2, 0x6, 0x1c}, {0x8718, 0x9, 0xc, 0x672e, 0x9, 0x81}, {0xc, 0x0, 0x1, 0xa6, 0x5, 0xffffff4a}, {0x1, 0x2c9, 0x0, 0x26, 0x6, 0x10}, {0x4, 0x9, 0x0, 0x5, 0x8}, {0xfffffffb, 0xffff, 0x4, 0xc1, 0xd, 0x6}, {0xd, 0x6, 0xa78e, 0x8, 0x6, 0x3}, {0x403fc, 0x7, 0x9, 0x66, 0x1, 0xc4e}, {0x8, 0x10, 0x0, 0x5, 0x9, 0x7}, {0xfffffff7, 0x5, 0x1ff, 0x8, 0x8001}, {0x37, 0x3, 0xeafa, 0x3, 0x9, 0xf8ed}, {0xffffffff, 0x6, 0xfffffffe, 0x8, 0xfffffffa, 0x7}, {0x8, 0x10, 0x3fb, 0x9, 0xe, 0x1}, {0x5, 0x101, 0x9, 0x3ff, 0x6, 0x8}, {0x5, 0x6f9a, 0x3, 0x1, 0x3, 0xd}, {0x5, 0x3, 0x7ff, 0xa, 0x80000000, 0x9}, {0xac0, 0x3, 0x0, 0x1, 0x3, 0xa}, {0x9, 0x3ff, 0x5, 0x9, 0xfff, 0x7}, {0x42b, 0x5, 0x1, 0x8, 0xc896, 0x80}, {0x4, 0x6, 0x9, 0x8, 0x8031, 0xa471}, {0x8df8a4f1, 0x5, 0x10000, 0xfffffffd, 0x10, 0x7}, {0xff1, 0x4, 0xe53f, 0xa9dd, 0xfffffffd, 0xa}, {0x6, 0x6, 0x85cc, 0x8, 0xb, 0x2}, {0xf86f, 0x5, 0x6, 0x80000001, 0x2, 0x2}, {0xe, 0x8, 0x9, 0x5, 0x10001, 0x1}, {0x7, 0x2, 0x4, 0x8001, 0x5, 0x1}, {0x9, 0x5, 0x400, 0x6, 0x2f12, 0x401}, {0x3, 0xed, 0x1, 0x0, 0x8, 0x9}], [{0x2, 0x1}, {0x2}, {}, {0x1}, {0x2}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0xa}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x48133f6b97655fe4}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x5}, {}, {0x3}, {}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0xd1ff0590c25ec697}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0xb}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x20040804) r8 = openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x105001, 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x9, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf018}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004860}, 0x1) 176.525408ms ago: executing program 2 (id=644): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001814010028bd70000200000008ad5a00000000000800010000000000"], 0x20}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='res', 0x3) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000340)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "539c1a739956baf72f9224d7bb99566aaed7f88c3bfdc58d3a0a062af33fbe49aef586982a59ac225db1ab0662e85b5e7261f619cb0032609f400510ec901055", 0x1b}, 0x48, 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000180)="110ac03969148b2df0eb9bb7c63596e2e735a8f04b4ffd494baade4092574ca84ce53598c4aef15a6fc9c509864b9897e0b3d2b61234230413c3aabc07efe1b7a5d44dc7dc6ae27eec9c5259680c2a3211dbbb507f96f324e03c723a5e09be0a21d39ea0e062178aa4e926f6cb453d0f897dd3f5a4c1a52c8d9b1c01e7663349df56374ef8d035b48daf8648106313d8457f83264a057209022be442f1fccf9f62bb49ffbb2f9ca6e4db4998ac9e234cef69d0116faf58c4e11bd0dd0e8337d215c7e8f87b268a5d599710bfe230027edf9870740bb02b4d2d9dfec892f64cf99a", 0xe1, r3) 27.0421ms ago: executing program 0 (id=645): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) bind$unix(r1, &(0x7f0000000240)=@file={0x1}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x6e) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) r4 = socket(0x400000000010, 0x3, 0x0) syz_open_dev$mtd(&(0x7f0000000140), 0x8000, 0x19d480) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'bridge_slave_1\x00', @broadcast}) write$tun(r5, &(0x7f0000000740)={@val={0x8, 0x6006}, @val={0x0, 0x4, 0x6, 0x3, 0x14}, @eth={@local, @empty, @val={@val={0x88a8, 0x1, 0x0, 0x4}, {0x8100, 0x1, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xb, 0x6, "59f35d", 0x10, 0x11, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, {[@fragment={0x21, 0x0, 0x9, 0x0, 0x0, 0x9, 0x68}], {0x4e22, 0x4e20, 0x8}}}}}}}, 0x5c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0xf}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x75521fc4caed34d}, 0x20004804) 26.487767ms ago: executing program 1 (id=646): setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="700000000206050000000000000000000000000012"], 0x70}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c7207f35794e"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000890}, 0x4) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x67, r2, 0x8, 0x70bd2a, 0x25dfdc00, {{}, {@void, @val={0xc, 0x99, {0x0, 0x50}}}}, [@NL80211_ATTR_PBSS]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008005) bind$rds(r0, &(0x7f0000000040)={0xa, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 0s ago: executing program 3 (id=647): r0 = semget$private(0x0, 0x3, 0xc0) semctl$GETNCNT(r0, 0x2, 0xe, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x0, 0x6]) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000000)=0x5, 0x4) getxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x0) write(r1, &(0x7f0000000000)='2', 0x49) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x200801, 0x100) write(r3, &(0x7f0000000140)='o', 0x1) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e1d, 0x5, @remote, 0x40}}}, 0x108) kernel console output (not intermixed with test programs): 43] audit: type=1326 audit(1791059118.047:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.2.394" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 147.865998][ T7252] ptrace attach of ""[7254] was attempted by "/syz-executor exec"[7252] [ 147.870887][ T7251] ptrace attach of ""[7253] was attempted by "/syz-executor exec"[7251] [ 148.142360][ T7258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.402'. [ 148.582947][ T7258] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input93 [ 148.823083][ T7274] FAULT_INJECTION: forcing a failure. [ 148.823083][ T7274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.823260][ T7274] CPU: 3 UID: 0 PID: 7274 Comm: syz.3.405 Not tainted syzkaller #0 PREEMPT(full) [ 148.823296][ T7274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.823307][ T7274] Call Trace: [ 148.823313][ T7274] [ 148.823321][ T7274] dump_stack_lvl+0x100/0x190 [ 148.823348][ T7274] should_fail_ex.cold+0x5/0xa [ 148.823372][ T7274] _copy_from_user+0x2e/0xd0 [ 148.823399][ T7274] move_addr_to_kernel+0x65/0x170 [ 148.823423][ T7274] __sys_sendto+0x1b8/0x4e0 [ 148.823448][ T7274] ? __pfx___sys_sendto+0x10/0x10 [ 148.823489][ T7274] ? fput+0x7c/0x100 [ 148.823528][ T7274] ? ksys_write+0x1ac/0x250 [ 148.823551][ T7274] __ia32_sys_sendto+0xdd/0x1b0 [ 148.823581][ T7274] ? __do_fast_syscall_32+0xb3/0x8b0 [ 148.823600][ T7274] ? lockdep_hardirqs_on+0x7d/0x110 [ 148.823614][ T7274] __do_fast_syscall_32+0x13a/0x8b0 [ 148.823628][ T7274] ? lockdep_hardirqs_on+0x7d/0x110 [ 148.823642][ T7274] do_fast_syscall_32+0x32/0x70 [ 148.823657][ T7274] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 148.823671][ T7274] RIP: 0023:0xf6ffefec [ 148.823685][ T7274] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 148.823690][ T7274] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 148.823702][ T7274] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 148.823709][ T7274] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000080000200 [ 148.823715][ T7274] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 148.823722][ T7274] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 148.823728][ T7274] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 148.823742][ T7274] [ 149.972691][ T7281] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 149.973524][ T7281] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 149.974226][ T7281] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 150.216661][ T7292] ptrace attach of ""[7293] was attempted by "/syz-executor exec"[7292] [ 150.598928][ T7298] FAULT_INJECTION: forcing a failure. [ 150.598928][ T7298] name failslab, interval 1, probability 0, space 0, times 0 [ 150.598949][ T7298] CPU: 3 UID: 0 PID: 7298 Comm: syz.1.412 Not tainted syzkaller #0 PREEMPT(full) [ 150.598963][ T7298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.598970][ T7298] Call Trace: [ 150.598974][ T7298] [ 150.598979][ T7298] dump_stack_lvl+0x100/0x190 [ 150.599001][ T7298] should_fail_ex.cold+0x5/0xa [ 150.599016][ T7298] should_failslab+0xc2/0x120 [ 150.599036][ T7298] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 150.599051][ T7298] ? __d_alloc+0x35/0xa50 [ 150.599070][ T7298] __d_alloc+0x35/0xa50 [ 150.599087][ T7298] d_alloc_parallel+0x105/0x14c0 [ 150.599102][ T7298] ? lock_acquire+0x1d1/0x380 [ 150.599120][ T7298] ? __d_lookup+0x73/0x4a0 [ 150.599133][ T7298] ? __pfx_d_alloc_parallel+0x10/0x10 [ 150.599146][ T7298] ? __d_lookup+0x25c/0x4a0 [ 150.599160][ T7298] ? __d_lookup+0x266/0x4a0 [ 150.599175][ T7298] lookup_open+0x6bb/0x1990 [ 150.599193][ T7298] path_openat+0xa2c/0x2440 [ 150.599210][ T7298] ? __pfx_path_openat+0x10/0x10 [ 150.599229][ T7298] do_file_open+0x20e/0x430 [ 150.599245][ T7298] ? __pfx_do_file_open+0x10/0x10 [ 150.599266][ T7298] ? __pfx_kfree_link+0x10/0x10 [ 150.599282][ T7298] ? _raw_spin_unlock+0x28/0x50 [ 150.599294][ T7298] ? alloc_fd+0x471/0x7a0 [ 150.599312][ T7298] do_sys_openat2+0x10f/0x1e0 [ 150.599331][ T7298] ? __pfx_do_sys_openat2+0x10/0x10 [ 150.599347][ T7298] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 150.599365][ T7298] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 150.599382][ T7298] __ia32_compat_sys_openat+0x12d/0x210 [ 150.599394][ T7298] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 150.599412][ T7298] do_int80_emulation+0x166/0x650 [ 150.599429][ T7298] asm_int80_emulation+0x1a/0x20 [ 150.599440][ T7298] RIP: 0023:0xf71775ab [ 150.599450][ T7298] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 150.599461][ T7298] RSP: 002b:00000000f543642c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 150.599474][ T7298] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f72419a5 [ 150.599481][ T7298] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.599487][ T7298] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.599494][ T7298] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 150.599500][ T7298] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.599514][ T7298] [ 150.882100][ T7302] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 150.882119][ T7302] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 150.883683][ T7302] vhci_hcd vhci_hcd.0: Device attached [ 151.108009][ T856] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 151.177347][ T856] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 151.182406][ T7310] comedi: valid board names for 8255 driver are: [ 151.182420][ T7310] 8255 [ 151.182427][ T7310] comedi: valid board names for vmk80xx driver are: [ 151.182435][ T7310] vmk80xx [ 151.182441][ T7310] comedi: valid board names for usbduxsigma driver are: [ 151.182449][ T7310] usbduxsigma [ 151.182455][ T7310] comedi: valid board names for usbduxfast driver are: [ 151.182462][ T7310] usbduxfast [ 151.182468][ T7310] comedi: valid board names for usbdux driver are: [ 151.182477][ T7310] usbdux [ 151.182484][ T7310] comedi: valid board names for ni6501 driver are: [ 151.182494][ T7310] ni6501 [ 151.182501][ T7310] comedi: valid board names for dt9812 driver are: [ 151.182508][ T7310] dt9812 [ 151.182514][ T7310] comedi: valid board names for ni_labpc_cs driver are: [ 151.182521][ T7310] ni_labpc_cs [ 151.182562][ T7310] comedi: valid board names for ni_daq_700 driver are: [ 151.182571][ T7310] ni_daq_700 [ 151.182578][ T7310] comedi: valid board names for labpc_pci driver are: [ 151.182584][ T7310] labpc_pci [ 151.182591][ T7310] comedi: valid board names for adl_pci9118 driver are: [ 151.182599][ T7310] pci9118dg [ 151.182605][ T7310] pci9118hg [ 151.182610][ T7310] pci9118hr [ 151.182617][ T7310] comedi: valid board names for 8255_pci driver are: [ 151.182624][ T7310] 8255_pci [ 151.182630][ T7310] comedi: valid board names for s526 driver are: [ 151.182638][ T7310] s526 [ 151.182644][ T7310] comedi: valid board names for multiq3 driver are: [ 151.182652][ T7310] multiq3 [ 151.182658][ T7310] comedi: valid board names for pcmuio driver are: [ 151.182666][ T7310] pcmuio48 [ 151.182672][ T7310] pcmuio96 [ 151.182678][ T7310] comedi: valid board names for pcmmio driver are: [ 151.182686][ T7310] pcmmio [ 151.182693][ T7310] comedi: valid board names for pcmda12 driver are: [ 151.182700][ T7310] pcmda12 [ 151.182707][ T7310] comedi: valid board names for pcmad driver are: [ 151.182715][ T7310] pcmad12 [ 151.182721][ T7310] pcmad16 [ 151.182728][ T7310] comedi: valid board names for ni_labpc driver are: [ 151.182735][ T7310] lab-pc-1200 [ 151.182742][ T7310] lab-pc-1200ai [ 151.182748][ T7310] lab-pc+ [ 151.182754][ T7310] comedi: valid board names for atmio16 driver are: [ 151.182762][ T7310] atmio16 [ 151.182769][ T7310] atmio16d [ 151.182775][ T7310] comedi: valid board names for ni_at_ao driver are: [ 151.182783][ T7310] at-ao-6 [ 151.182788][ T7310] at-ao-10 [ 151.182795][ T7310] comedi: valid board names for ni_at_a2150 driver are: [ 151.182802][ T7310] ni_at_a2150 [ 151.182809][ T7310] comedi: valid board names for adq12b driver are: [ 151.182817][ T7310] adq12b [ 151.182823][ T7310] comedi: valid board names for mpc624 driver are: [ 151.182830][ T7310] mpc624 [ 151.182836][ T7310] comedi: valid board names for c6xdigio driver are: [ 151.182843][ T7310] c6xdigio [ 151.182849][ T7310] comedi: valid board names for aio_iiro_16 driver are: [ 151.182856][ T7310] aio_iiro_16 [ 151.182861][ T7310] comedi: valid board names for aio_aio12_8 driver are: [ 151.182868][ T7310] aio_aio12_8 [ 151.182874][ T7310] aio_ai12_8 [ 151.182887][ T7310] aio_ao12_4 [ 151.182894][ T7310] comedi: valid board names for fl512 driver are: [ 151.182901][ T7310] fl512 [ 151.182906][ T7310] comedi: valid board names for dmm32at driver are: [ 151.183971][ T7310] dmm32at [ 151.183981][ T7310] comedi: valid board names for dt282x driver are: [ 151.183988][ T7310] dt2821 [ 151.183994][ T7310] dt2821-f [ 151.184000][ T7310] dt2821-g [ 151.184005][ T7310] dt2823 [ 151.184011][ T7310] dt2824-pgh [ 151.184016][ T7310] dt2824-pgl [ 151.184022][ T7310] dt2825 [ 151.184027][ T7310] dt2827 [ 151.184033][ T7310] dt2828 [ 151.184038][ T7310] dt2829 [ 151.184043][ T7310] dt21-ez [ 151.184049][ T7310] dt23-ez [ 151.184054][ T7310] dt24-ez [ 151.184060][ T7310] dt24-ez-pgl [ 151.184066][ T7310] comedi: valid board names for dt2817 driver are: [ 151.184073][ T7310] dt2817 [ 151.184079][ T7310] comedi: valid board names for dt2815 driver are: [ 151.184087][ T7310] dt2815 [ 151.184092][ T7310] comedi: valid board names for dt2814 driver are: [ 151.184099][ T7310] dt2814 [ 151.184104][ T7310] comedi: valid board names for dt2811 driver are: [ 151.184112][ T7310] dt2811-pgh [ 151.184117][ T7310] dt2811-pgl [ 151.184123][ T7310] comedi: valid board names for dt2801 driver are: [ 151.184130][ T7310] dt2801 [ 151.184136][ T7310] comedi: valid board names for das6402 driver are: [ 151.184142][ T7310] das6402-12 [ 151.184148][ T7310] das6402-16 [ 151.184153][ T7310] comedi: valid board names for das1800 driver are: [ 151.184160][ T7310] das-1701st [ 151.184166][ T7310] das-1701st-da [ 151.184171][ T7310] das-1702st [ 151.184177][ T7310] das-1702st-da [ 151.184183][ T7310] das-1702hr [ 151.184189][ T7310] das-1702hr-da [ 151.184195][ T7310] das-1701ao [ 151.184201][ T7310] das-1702ao [ 151.184207][ T7310] das-1801st [ 151.184212][ T7310] das-1801st-da [ 151.184218][ T7310] das-1802st [ 151.184223][ T7310] das-1802st-da [ 151.184229][ T7310] das-1802hr [ 151.184234][ T7310] das-1802hr-da [ 151.184240][ T7310] das-1801hc [ 151.184246][ T7310] das-1802hc [ 151.184252][ T7310] das-1801ao [ 151.184258][ T7310] das-1802ao [ 151.184264][ T7310] comedi: valid board names for das800 driver are: [ 151.184271][ T7310] das-800 [ 151.184277][ T7310] cio-das800 [ 151.184283][ T7310] das-801 [ 151.184303][ T7310] cio-das801 [ 151.195903][ T7310] das-802 [ 151.195914][ T7310] cio-das802 [ 151.195920][ T7310] cio-das802/16 [ 151.195927][ T7310] comedi: valid board names for isa-das08 driver are: [ 151.195934][ T7310] isa-das08 [ 151.195940][ T7310] das08-pgm [ 151.195945][ T7310] das08-pgh [ 151.195951][ T7310] das08-pgl [ 151.195956][ T7310] das08-aoh [ 151.195961][ T7310] das08-aol [ 151.195967][ T7310] das08-aom [ 151.195972][ T7310] das08/jr-ao [ 151.195977][ T7310] das08jr-16-ao [ 151.195983][ T7310] pc104-das08 [ 151.195988][ T7310] das08jr/16 [ 151.195994][ T7310] comedi: valid board names for das16m1 driver are: [ 151.196000][ T7310] das16m1 [ 151.196005][ T7310] comedi: valid board names for dac02 driver are: [ 151.196012][ T7310] dac02 [ 151.196017][ T7310] comedi: valid board names for rti802 driver are: [ 151.196024][ T7310] rti802 [ 151.196029][ T7310] comedi: valid board names for rti800 driver are: [ 151.196036][ T7310] rti800 [ 151.196041][ T7310] rti815 [ 151.196046][ T7310] comedi: valid board names for pcm3724 driver are: [ 151.196053][ T7310] pcm3724 [ 151.196057][ T7310] comedi: valid board names for pcl818 driver are: [ 151.196064][ T7310] pcl818l [ 151.196068][ T7310] pcl818h [ 151.196073][ T7310] pcl818hd [ 151.196078][ T7310] pcl818hg [ 151.196084][ T7310] pcl818 [ 151.196089][ T7310] pcl718 [ 151.196094][ T7310] pcm3718 [ 151.196100][ T7310] comedi: valid board names for pcl816 driver are: [ 151.196106][ T7310] pcl816 [ 151.196112][ T7310] pcl814b [ 151.196118][ T7310] comedi: valid board names for pcl812 driver are: [ 151.196125][ T7310] pcl812 [ 151.196129][ T7310] pcl812pg [ 151.196134][ T7310] acl8112pg [ 151.196139][ T7310] acl8112dg [ 151.196145][ T7310] acl8112hg [ 151.196152][ T7310] a821pgl [ 151.196158][ T7310] a821pglnda [ 151.196165][ T7310] a821pgh [ 151.196171][ T7310] a822pgl [ 151.196176][ T7310] a822pgh [ 151.196181][ T7310] a823pgl [ 151.196186][ T7310] a823pgh [ 151.196191][ T7310] pcl813 [ 151.196196][ T7310] pcl813b [ 151.196201][ T7310] acl8113 [ 151.196206][ T7310] iso813 [ 151.196211][ T7310] acl8216 [ 151.196215][ T7310] a826pg [ 151.196221][ T7310] comedi: valid board names for pcl730 driver are: [ 151.196228][ T7310] pcl730 [ 151.196233][ T7310] iso730 [ 151.196238][ T7310] acl7130 [ 151.196244][ T7310] pcm3730 [ 151.196248][ T7310] pcl725 [ 151.196254][ T7310] p8r8dio [ 151.196259][ T7310] acl7225b [ 151.196265][ T7310] p16r16dio [ 151.196271][ T7310] pcl733 [ 151.196276][ T7310] pcl734 [ 151.196281][ T7310] opmm-1616-xt [ 151.196287][ T7310] pearl-mm-p [ 151.196292][ T7310] ir104-pbf [ 151.196298][ T7310] comedi: valid board names for pcl726 driver are: [ 151.196305][ T7310] pcl726 [ 151.196310][ T7310] pcl727 [ 151.196342][ T7310] pcl728 [ 151.196347][ T7310] acl6126 [ 151.196353][ T7310] acl6128 [ 151.196359][ T7310] comedi: valid board names for pcl724 driver are: [ 151.196366][ T7310] pcl724 [ 151.196371][ T7310] pcl722 [ 151.196377][ T7310] pcl731 [ 151.196382][ T7310] acl7122 [ 151.196387][ T7310] acl7124 [ 151.196393][ T7310] pet48dio [ 151.196399][ T7310] pcmio48 [ 151.196405][ T7310] onyx-mm-dio [ 151.196411][ T7310] comedi: valid board names for pcl711 driver are: [ 151.196419][ T7310] pcl711 [ 151.196425][ T7310] pcl711b [ 151.196430][ T7310] acl8112hg [ 151.196437][ T7310] acl8112dg [ 151.196443][ T7310] comedi: valid board names for amplc_pc263 driver are: [ 151.196451][ T7310] pc263 [ 151.196458][ T7310] comedi: valid board names for amplc_pc236 driver are: [ 151.196466][ T7310] pc36at [ 151.196471][ T7310] comedi: valid board names for amplc_dio200 driver are: [ 151.196479][ T7310] pc212e [ 151.196485][ T7310] pc214e [ 151.196491][ T7310] pc215e [ 151.196497][ T7310] pc218e [ 151.196502][ T7310] pc272e [ 151.196508][ T7310] comedi: valid board names for comedi_parport driver are: [ 151.196516][ T7310] comedi_parport [ 151.196523][ T7310] comedi: valid board names for comedi_test driver are: [ 151.196530][ T7310] comedi_test [ 151.196536][ T7310] comedi: valid board names for comedi_bond driver are: [ 151.196544][ T7310] comedi_bond [ 151.632000][ T7303] vhci_hcd: connection reset by peer [ 151.637549][ T5846] vhci_hcd vhci_hcd.1: stop threads [ 151.638003][ T5846] vhci_hcd vhci_hcd.1: release socket [ 151.638550][ T5846] vhci_hcd vhci_hcd.1: disconnect device [ 151.647263][ T7309] macsec0: entered promiscuous mode [ 151.647398][ T7309] macsec0: entered allmulticast mode [ 151.647407][ T7309] veth1_macvtap: entered allmulticast mode [ 152.074491][ T7331] FAULT_INJECTION: forcing a failure. [ 152.074491][ T7331] name failslab, interval 1, probability 0, space 0, times 0 [ 152.074512][ T7331] CPU: 0 UID: 0 PID: 7331 Comm: syz.0.419 Not tainted syzkaller #0 PREEMPT(full) [ 152.074524][ T7331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.074531][ T7331] Call Trace: [ 152.074535][ T7331] [ 152.074540][ T7331] dump_stack_lvl+0x100/0x190 [ 152.074624][ T7331] should_fail_ex.cold+0x5/0xa [ 152.074642][ T7331] should_failslab+0xc2/0x120 [ 152.074659][ T7331] __kmalloc_noprof+0xfc/0x840 [ 152.074674][ T7331] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 152.074689][ T7331] kernfs_fop_write_iter+0x26a/0x5f0 [ 152.074703][ T7331] vfs_write+0x6af/0x1050 [ 152.074717][ T7331] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 152.074729][ T7331] ? __pfx_vfs_write+0x10/0x10 [ 152.074742][ T7331] ? find_held_lock+0x2b/0x80 [ 152.074764][ T7331] ksys_write+0x12a/0x250 [ 152.074777][ T7331] ? __pfx_ksys_write+0x10/0x10 [ 152.074790][ T7331] ? ksys_write+0x1ac/0x250 [ 152.074804][ T7331] ? __pfx_ksys_write+0x10/0x10 [ 152.074824][ T7331] __do_fast_syscall_32+0x13a/0x8b0 [ 152.074839][ T7331] ? lockdep_hardirqs_on+0x7d/0x110 [ 152.074853][ T7331] do_fast_syscall_32+0x32/0x70 [ 152.074868][ T7331] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 152.074883][ T7331] RIP: 0023:0xf703efec [ 152.074897][ T7331] Code: Unable to access opcode bytes at 0xf703efc2. [ 152.074903][ T7331] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 152.074914][ T7331] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 152.074921][ T7331] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 152.074928][ T7331] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 152.074934][ T7331] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 152.074940][ T7331] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 152.074954][ T7331] [ 152.252867][ T7336] binder: 7335:7336 ioctl c018620c 80000200 returned -22 [ 152.356369][ T7340] FAULT_INJECTION: forcing a failure. [ 152.356369][ T7340] name failslab, interval 1, probability 0, space 0, times 0 [ 152.356394][ T7340] CPU: 0 UID: 0 PID: 7340 Comm: syz.2.421 Not tainted syzkaller #0 PREEMPT(full) [ 152.356407][ T7340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.356414][ T7340] Call Trace: [ 152.356419][ T7340] [ 152.356423][ T7340] dump_stack_lvl+0x100/0x190 [ 152.356445][ T7340] should_fail_ex.cold+0x5/0xa [ 152.356461][ T7340] should_failslab+0xc2/0x120 [ 152.356480][ T7340] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 152.356496][ T7340] ? __d_alloc+0x35/0xa50 [ 152.356516][ T7340] __d_alloc+0x35/0xa50 [ 152.356534][ T7340] d_alloc_parallel+0x105/0x14c0 [ 152.356549][ T7340] ? lock_acquire+0x1d1/0x380 [ 152.356572][ T7340] ? __d_lookup+0x73/0x4a0 [ 152.356586][ T7340] ? __pfx_d_alloc_parallel+0x10/0x10 [ 152.356598][ T7340] ? __d_lookup+0x25c/0x4a0 [ 152.356614][ T7340] ? __d_lookup+0x266/0x4a0 [ 152.356630][ T7340] lookup_open+0x6bb/0x1990 [ 152.356650][ T7340] path_openat+0xa2c/0x2440 [ 152.356668][ T7340] ? __pfx_path_openat+0x10/0x10 [ 152.356689][ T7340] do_file_open+0x20e/0x430 [ 152.356706][ T7340] ? __pfx_do_file_open+0x10/0x10 [ 152.356727][ T7340] ? __pfx_kfree_link+0x10/0x10 [ 152.356745][ T7340] ? _raw_spin_unlock+0x28/0x50 [ 152.356761][ T7340] ? alloc_fd+0x471/0x7a0 [ 152.356788][ T7340] do_sys_openat2+0x10f/0x1e0 [ 152.356817][ T7340] ? __pfx_do_sys_openat2+0x10/0x10 [ 152.356844][ T7340] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 152.356873][ T7340] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 152.356898][ T7340] __ia32_compat_sys_openat+0x12d/0x210 [ 152.356918][ T7340] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 152.356944][ T7340] do_int80_emulation+0x166/0x650 [ 152.356971][ T7340] asm_int80_emulation+0x1a/0x20 [ 152.356990][ T7340] RIP: 0023:0xf71f75ab [ 152.357005][ T7340] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 152.357023][ T7340] RSP: 002b:00000000f54ad42c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 152.357040][ T7340] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f72c19a5 [ 152.357051][ T7340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 152.357063][ T7340] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 152.357073][ T7340] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 152.357083][ T7340] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 152.357107][ T7340] [ 152.509891][ T7347] ptrace attach of ""[7348] was attempted by "/syz-executor exec"[7347] [ 152.911834][ T7353] netlink: 164 bytes leftover after parsing attributes in process `syz.3.424'. [ 153.278411][ T7357] netlink: 164 bytes leftover after parsing attributes in process `syz.2.426'. [ 153.628729][ T7368] FAULT_INJECTION: forcing a failure. [ 153.628729][ T7368] name failslab, interval 1, probability 0, space 0, times 0 [ 153.628762][ T7368] CPU: 2 UID: 0 PID: 7368 Comm: syz.3.428 Not tainted syzkaller #0 PREEMPT(full) [ 153.628781][ T7368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.628791][ T7368] Call Trace: [ 153.628796][ T7368] [ 153.628803][ T7368] dump_stack_lvl+0x100/0x190 [ 153.628828][ T7368] should_fail_ex.cold+0x5/0xa [ 153.628852][ T7368] should_failslab+0xc2/0x120 [ 153.628873][ T7368] kmem_cache_alloc_noprof+0x92/0x6a0 [ 153.628890][ T7368] ? mas_preallocate+0xc22/0xee0 [ 153.628911][ T7368] mas_preallocate+0xc22/0xee0 [ 153.628931][ T7368] ? __pfx_mas_preallocate+0x10/0x10 [ 153.628954][ T7368] ? anon_vma_name+0x5a/0x250 [ 153.628970][ T7368] __split_vma+0x2f8/0x1de0 [ 153.628987][ T7368] ? __pfx___split_vma+0x10/0x10 [ 153.628999][ T7368] ? can_vma_merge_after+0x2b5/0x6f0 [ 153.629018][ T7368] vma_modify+0x137b/0x29b0 [ 153.629037][ T7368] ? __pfx_vma_modify+0x10/0x10 [ 153.629049][ T7368] ? queue_pages_test_walk+0x258/0x420 [ 153.629061][ T7368] ? __pfx_find_vma+0x10/0x10 [ 153.629076][ T7368] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 153.629088][ T7368] ? walk_page_test+0x78/0x180 [ 153.629108][ T7368] vma_modify_policy+0x2a4/0x390 [ 153.629123][ T7368] ? __pfx_vma_modify_policy+0x10/0x10 [ 153.629142][ T7368] ? mas_next_slot+0xc05/0x13a0 [ 153.629164][ T7368] mbind_range+0x175/0x550 [ 153.629179][ T7368] do_mbind+0x7dc/0xfd0 [ 153.629196][ T7368] ? __pfx_do_mbind+0x10/0x10 [ 153.629210][ T7368] ? find_held_lock+0x2b/0x80 [ 153.629225][ T7368] ? ksys_write+0x190/0x250 [ 153.629245][ T7368] ? __pfx_get_nodes+0x10/0x10 [ 153.629266][ T7368] kernel_mbind+0x1b7/0x200 [ 153.629281][ T7368] ? __pfx_kernel_mbind+0x10/0x10 [ 153.629299][ T7368] __do_fast_syscall_32+0x13a/0x8b0 [ 153.629317][ T7368] do_fast_syscall_32+0x32/0x70 [ 153.629333][ T7368] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.629350][ T7368] RIP: 0023:0xf6ffefec [ 153.629364][ T7368] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 153.629371][ T7368] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000112 [ 153.629385][ T7368] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600000 [ 153.629392][ T7368] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.629408][ T7368] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 153.629416][ T7368] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 153.629424][ T7368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.629442][ T7368] [ 153.685719][ T7370] FAULT_INJECTION: forcing a failure. [ 153.685719][ T7370] name failslab, interval 1, probability 0, space 0, times 0 [ 153.685750][ T7370] CPU: 1 UID: 0 PID: 7370 Comm: syz.3.431 Not tainted syzkaller #0 PREEMPT(full) [ 153.685771][ T7370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.685782][ T7370] Call Trace: [ 153.685789][ T7370] [ 153.685797][ T7370] dump_stack_lvl+0x100/0x190 [ 153.685827][ T7370] should_fail_ex.cold+0x5/0xa [ 153.685852][ T7370] should_failslab+0xc2/0x120 [ 153.685881][ T7370] __kmalloc_cache_noprof+0x91/0x6d0 [ 153.685901][ T7370] ? proc_thread_self_get_link+0x1a6/0x210 [ 153.685931][ T7370] proc_thread_self_get_link+0x1a6/0x210 [ 153.685958][ T7370] pick_link+0xac2/0x13c0 [ 153.685978][ T7370] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 153.686007][ T7370] step_into_slowpath+0x9ba/0xf90 [ 153.686033][ T7370] ? __pfx_step_into_slowpath+0x10/0x10 [ 153.686057][ T7370] ? lookup_fast+0x2da/0x600 [ 153.686075][ T7370] ? inode_permission+0x374/0x620 [ 153.686097][ T7370] link_path_walk+0xf28/0x1cc0 [ 153.686129][ T7370] path_openat+0x1ac/0x2440 [ 153.686158][ T7370] ? __pfx_path_openat+0x10/0x10 [ 153.686192][ T7370] do_file_open+0x20e/0x430 [ 153.686237][ T7370] ? __pfx_do_file_open+0x10/0x10 [ 153.686282][ T7370] ? _raw_spin_unlock+0x28/0x50 [ 153.686304][ T7370] ? alloc_fd+0x471/0x7a0 [ 153.686337][ T7370] do_sys_openat2+0x10f/0x1e0 [ 153.686367][ T7370] ? __pfx_do_sys_openat2+0x10/0x10 [ 153.686394][ T7370] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 153.686423][ T7370] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 153.686452][ T7370] __ia32_compat_sys_openat+0x12d/0x210 [ 153.686473][ T7370] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 153.686509][ T7370] do_int80_emulation+0x166/0x650 [ 153.686538][ T7370] asm_int80_emulation+0x1a/0x20 [ 153.686558][ T7370] RIP: 0023:0xf71375ab [ 153.686573][ T7370] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 153.686592][ T7370] RSP: 002b:00000000f53ed4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 153.686612][ T7370] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7201b71 [ 153.686624][ T7370] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.686635][ T7370] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 153.686646][ T7370] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 153.686658][ T7370] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.686684][ T7370] [ 153.687071][ T7370] FAULT_INJECTION: forcing a failure. [ 153.687071][ T7370] name failslab, interval 1, probability 0, space 0, times 0 [ 153.687106][ T7370] CPU: 1 UID: 0 PID: 7370 Comm: syz.3.431 Not tainted syzkaller #0 PREEMPT(full) [ 153.687127][ T7370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.687138][ T7370] Call Trace: [ 153.687161][ T7370] [ 153.687169][ T7370] dump_stack_lvl+0x100/0x190 [ 153.687197][ T7370] should_fail_ex.cold+0x5/0xa [ 153.687222][ T7370] should_failslab+0xc2/0x120 [ 153.687250][ T7370] kmem_cache_alloc_noprof+0x92/0x6a0 [ 153.687274][ T7370] ? lock_acquire+0x1d1/0x380 [ 153.687301][ T7370] ? mpol_new+0x11b/0x2d0 [ 153.687332][ T7370] mpol_new+0x11b/0x2d0 [ 153.687360][ T7370] do_mbind+0x210/0xfd0 [ 153.687388][ T7370] ? __pfx_do_mbind+0x10/0x10 [ 153.687411][ T7370] ? find_held_lock+0x2b/0x80 [ 153.687434][ T7370] ? ksys_write+0x190/0x250 [ 153.687465][ T7370] ? __pfx_get_nodes+0x10/0x10 [ 153.687497][ T7370] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 153.687523][ T7370] ? __fget_files+0x21f/0x3d0 [ 153.687550][ T7370] kernel_mbind+0x1b7/0x200 [ 153.687573][ T7370] ? __pfx_kernel_mbind+0x10/0x10 [ 153.687593][ T7370] ? ksys_write+0x1ac/0x250 [ 153.687614][ T7370] ? __pfx_ksys_write+0x10/0x10 [ 153.687642][ T7370] __do_fast_syscall_32+0x13a/0x8b0 [ 153.687666][ T7370] ? lockdep_hardirqs_on+0x7d/0x110 [ 153.687691][ T7370] do_fast_syscall_32+0x32/0x70 [ 153.687716][ T7370] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.687739][ T7370] RIP: 0023:0xf6ffefec [ 153.687760][ T7370] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 153.687769][ T7370] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000112 [ 153.687788][ T7370] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600000 [ 153.687800][ T7370] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.687812][ T7370] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 153.687822][ T7370] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 153.687834][ T7370] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.687859][ T7370] [ 155.154117][ T7390] ptrace attach of ""[7391] was attempted by "/syz-executor exec"[7390] [ 155.282440][ T7386] netlink: 164 bytes leftover after parsing attributes in process `syz.3.436'. [ 155.969715][ T7402] FAULT_INJECTION: forcing a failure. [ 155.969715][ T7402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.969747][ T7402] CPU: 3 UID: 0 PID: 7402 Comm: syz.3.440 Not tainted syzkaller #0 PREEMPT(full) [ 155.969768][ T7402] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.969779][ T7402] Call Trace: [ 155.969786][ T7402] [ 155.969793][ T7402] dump_stack_lvl+0x100/0x190 [ 155.969824][ T7402] should_fail_ex.cold+0x5/0xa [ 155.969847][ T7402] _copy_from_iter+0x1f4/0x1690 [ 155.969876][ T7402] ? __asan_memset+0x23/0x50 [ 155.969897][ T7402] ? __pfx__copy_from_iter+0x10/0x10 [ 155.969922][ T7402] ? __pfx___alloc_skb+0x10/0x10 [ 155.969958][ T7402] netlink_sendmsg+0x808/0xda0 [ 155.969988][ T7402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.970017][ T7402] ? apparmor_socket_sendmsg+0x165/0x280 [ 155.970046][ T7402] ____sys_sendmsg+0xa4d/0xbe0 [ 155.970064][ T7402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.970087][ T7402] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.970115][ T7402] ___sys_sendmsg+0x190/0x1e0 [ 155.970135][ T7402] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.970165][ T7402] ? find_held_lock+0x2b/0x80 [ 155.970197][ T7402] __sys_sendmsg+0x160/0x210 [ 155.970213][ T7402] ? __pfx___sys_sendmsg+0x10/0x10 [ 155.970234][ T7402] ? __pfx_ksys_write+0x10/0x10 [ 155.970258][ T7402] __do_fast_syscall_32+0x13a/0x8b0 [ 155.970278][ T7402] ? lockdep_hardirqs_on+0x7d/0x110 [ 155.970303][ T7402] do_fast_syscall_32+0x32/0x70 [ 155.970325][ T7402] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.970347][ T7402] RIP: 0023:0xf6ffefec [ 155.970367][ T7402] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 155.970375][ T7402] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 155.970393][ T7402] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 155.970404][ T7402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.970413][ T7402] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.970423][ T7402] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 155.970434][ T7402] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.970456][ T7402] [ 156.082775][ T7406] FAULT_INJECTION: forcing a failure. [ 156.082775][ T7406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.082831][ T7406] CPU: 1 UID: 0 PID: 7406 Comm: syz.2.439 Not tainted syzkaller #0 PREEMPT(full) [ 156.082857][ T7406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.082864][ T7406] Call Trace: [ 156.082870][ T7406] [ 156.082875][ T7406] dump_stack_lvl+0x100/0x190 [ 156.082895][ T7406] should_fail_ex.cold+0x5/0xa [ 156.082913][ T7406] _copy_from_user+0x2e/0xd0 [ 156.082931][ T7406] get_compat_msghdr+0xb3/0x480 [ 156.082945][ T7406] ? __pfx_get_compat_msghdr+0x10/0x10 [ 156.082961][ T7406] ? __lock_acquire+0x5c0/0x1f40 [ 156.082980][ T7406] ___sys_recvmsg+0x193/0x1a0 [ 156.082996][ T7406] ? __pfx____sys_recvmsg+0x10/0x10 [ 156.083010][ T7406] ? lock_acquire+0x1d1/0x380 [ 156.083037][ T7406] do_recvmmsg+0x54d/0x740 [ 156.083066][ T7406] ? __pfx_do_recvmmsg+0x10/0x10 [ 156.083079][ T7406] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 156.083098][ T7406] ? trace_sched_exit_tp+0x120/0x160 [ 156.083115][ T7406] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 156.083133][ T7406] __sys_recvmmsg+0x21f/0x270 [ 156.083145][ T7406] ? __pfx___sys_recvmmsg+0x10/0x10 [ 156.083160][ T7406] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 156.083175][ T7406] ? __do_fast_syscall_32+0xb3/0x8b0 [ 156.083190][ T7406] ? lockdep_hardirqs_on+0x7d/0x110 [ 156.083203][ T7406] __do_fast_syscall_32+0x13a/0x8b0 [ 156.083217][ T7406] ? lockdep_hardirqs_on+0x7d/0x110 [ 156.083231][ T7406] do_fast_syscall_32+0x32/0x70 [ 156.083246][ T7406] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 156.083260][ T7406] RIP: 0023:0xf70befec [ 156.083274][ T7406] Code: Unable to access opcode bytes at 0xf70befc2. [ 156.083280][ T7406] RSP: 002b:00000000f546b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 156.083291][ T7406] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800066c0 [ 156.083298][ T7406] RDX: 0000000000000a0d RSI: 0000000000000000 RDI: 0000000000000000 [ 156.083304][ T7406] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 156.083311][ T7406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.083317][ T7406] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 156.083330][ T7406] [ 156.181596][ T7409] FAULT_INJECTION: forcing a failure. [ 156.181596][ T7409] name fail_futex, interval 1, probability 0, space 0, times 1 [ 156.181623][ T7409] CPU: 3 UID: 0 PID: 7409 Comm: syz.0.441 Not tainted syzkaller #0 PREEMPT(full) [ 156.181637][ T7409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.181644][ T7409] Call Trace: [ 156.181649][ T7409] [ 156.181654][ T7409] dump_stack_lvl+0x100/0x190 [ 156.181678][ T7409] should_fail_ex.cold+0x5/0xa [ 156.181695][ T7409] get_futex_key+0x1d0/0x14f0 [ 156.181709][ T7409] ? __pfx_get_futex_key+0x10/0x10 [ 156.181725][ T7409] futex_wake_op+0x16f/0xe70 [ 156.181740][ T7409] ? find_held_lock+0x2b/0x80 [ 156.181762][ T7409] ? __pfx_futex_wake_op+0x10/0x10 [ 156.181778][ T7409] ? find_held_lock+0x2b/0x80 [ 156.181794][ T7409] ? rcu_read_lock_any_held+0x6a/0x90 [ 156.181808][ T7409] ? find_held_lock+0x2b/0x80 [ 156.181822][ T7409] do_futex+0x3d8/0x440 [ 156.181835][ T7409] ? __pfx_do_futex+0x10/0x10 [ 156.181847][ T7409] ? __mutex_unlock_slowpath+0x35d/0x930 [ 156.181867][ T7409] __ia32_sys_futex_time32+0x2f4/0x470 [ 156.181883][ T7409] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 156.181896][ T7409] ? fput+0x7c/0x100 [ 156.181913][ T7409] ? ksys_write+0x1ac/0x250 [ 156.181926][ T7409] ? __pfx_ksys_write+0x10/0x10 [ 156.181942][ T7409] __do_fast_syscall_32+0x13a/0x8b0 [ 156.181957][ T7409] ? lockdep_hardirqs_on+0x7d/0x110 [ 156.181971][ T7409] do_fast_syscall_32+0x32/0x70 [ 156.181986][ T7409] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 156.182001][ T7409] RIP: 0023:0xf703efec [ 156.182017][ T7409] Code: Unable to access opcode bytes at 0xf703efc2. [ 156.182022][ T7409] RSP: 002b:00000000f540c50c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 156.182034][ T7409] RAX: ffffffffffffffda RBX: 000000008000cffc RCX: 0000000000000005 [ 156.182042][ T7409] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000080000000 [ 156.182048][ T7409] RBP: 0000000004ffffff R08: 0000000000000000 R09: 0000000000000000 [ 156.182055][ T7409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.182061][ T7409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 156.182074][ T7409] [ 156.304337][ T856] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 157.401385][ T7427] '>î [ 157.663612][ T7429] ptrace attach of ""[7434] was attempted by "/syz-executor exec"[7429] [ 157.777447][ T7431] netlink: 164 bytes leftover after parsing attributes in process `syz.0.448'. [ 157.841305][ T7436] netlink: 16 bytes leftover after parsing attributes in process `syz.3.449'. [ 158.162581][ T7447] netlink: 20 bytes leftover after parsing attributes in process `syz.1.452'. [ 158.440064][ T7436] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input95 [ 158.706652][ T7453] syz.3.454: vmalloc error: size 2147479552, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 158.706729][ T7453] CPU: 2 UID: 0 PID: 7453 Comm: syz.3.454 Not tainted syzkaller #0 PREEMPT(full) [ 158.706744][ T7453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.706751][ T7453] Call Trace: [ 158.706756][ T7453] [ 158.706761][ T7453] dump_stack_lvl+0x100/0x190 [ 158.706781][ T7453] warn_alloc.cold+0x9e/0xb2 [ 158.706795][ T7453] ? __pfx_warn_alloc+0x10/0x10 [ 158.706809][ T7453] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 158.706824][ T7453] ? stack_depot_save_flags+0x49a/0x9f0 [ 158.706840][ T7453] ? kasan_save_stack+0x3f/0x50 [ 158.706855][ T7453] ? kasan_save_stack+0x30/0x50 [ 158.706870][ T7453] ? kasan_save_track+0x14/0x30 [ 158.706886][ T7453] ? __kasan_kmalloc+0xaa/0xb0 [ 158.706900][ T7453] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 158.706917][ T7453] __vmalloc_node_range_noprof+0x123b/0x1420 [ 158.706938][ T7453] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 158.706959][ T7453] ? aa_loaddata_alloc+0x6f/0x200 [ 158.706975][ T7453] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 158.706993][ T7453] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 158.707013][ T7453] ? rcu_is_watching+0x13/0xc0 [ 158.707029][ T7453] __kvmalloc_node_noprof+0x3da/0x9b0 [ 158.707043][ T7453] ? aa_loaddata_alloc+0x6f/0x200 [ 158.707058][ T7453] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 158.707069][ T7453] ? __might_fault+0xc5/0x140 [ 158.707080][ T7453] ? aa_loaddata_alloc+0x6f/0x200 [ 158.707097][ T7453] aa_loaddata_alloc+0x6f/0x200 [ 158.707112][ T7453] aa_simple_write_to_buffer+0x89/0x230 [ 158.707126][ T7453] policy_update+0x2c1/0x930 [ 158.707162][ T7453] ? __pfx_policy_update+0x10/0x10 [ 158.707180][ T7453] ? lock_acquire+0x1d1/0x380 [ 158.707203][ T7453] profile_load+0xaa/0x1a0 [ 158.707218][ T7453] vfs_write+0x2aa/0x1050 [ 158.707233][ T7453] ? __pfx_profile_load+0x10/0x10 [ 158.707247][ T7453] ? lock_acquire+0x1d1/0x380 [ 158.707264][ T7453] ? __fget_files+0x34/0x3d0 [ 158.707280][ T7453] ? __pfx_vfs_write+0x10/0x10 [ 158.707294][ T7453] ? find_held_lock+0x2b/0x80 [ 158.707309][ T7453] ? __fget_files+0x215/0x3d0 [ 158.707325][ T7453] ? __fget_files+0x21f/0x3d0 [ 158.707344][ T7453] ksys_write+0x12a/0x250 [ 158.707357][ T7453] ? __pfx_ksys_write+0x10/0x10 [ 158.707375][ T7453] __do_fast_syscall_32+0x13a/0x8b0 [ 158.707392][ T7453] do_fast_syscall_32+0x32/0x70 [ 158.707407][ T7453] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.707422][ T7453] RIP: 0023:0xf6ffefec [ 158.707441][ T7453] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 158.707448][ T7453] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 158.707460][ T7453] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000400 [ 158.707468][ T7453] RDX: 00000000fffffe18 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.707476][ T7453] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.707483][ T7453] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 158.707491][ T7453] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.707506][ T7453] [ 158.814856][ T7453] Mem-Info: [ 158.814867][ T7453] active_anon:4900 inactive_anon:553 isolated_anon:0 [ 158.814867][ T7453] active_file:3644 inactive_file:37053 isolated_file:0 [ 158.814867][ T7453] unevictable:1000 dirty:847 writeback:0 [ 158.814867][ T7453] slab_reclaimable:7580 slab_unreclaimable:50369 [ 158.814867][ T7453] mapped:24957 shmem:1463 pagetables:1128 [ 158.814867][ T7453] sec_pagetables:298 bounce:0 [ 158.814867][ T7453] kernel_misc_reclaimable:0 [ 158.814867][ T7453] free:57577 free_pcp:16095 free_cma:0 [ 158.814898][ T7453] Node 0 active_anon:100kB inactive_anon:144kB active_file:24kB inactive_file:48kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:12kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10112kB pagetables:1268kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 158.814929][ T7453] Node 1 active_anon:19500kB inactive_anon:2068kB active_file:14552kB inactive_file:148164kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:99800kB dirty:3376kB writeback:0kB shmem:3852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3576kB pagetables:3244kB sec_pagetables:64kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 158.814965][ T7453] Node 0 DMA free:1964kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:716kB local_pcp:188kB free_cma:0kB [ 158.814997][ T7453] lowmem_reserve[]: 0 278 278 278 278 [ 158.815017][ T7453] Node 0 DMA32 free:17764kB boost:2048kB min:14672kB low:17828kB high:20984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:100kB inactive_anon:144kB active_file:4kB inactive_file:28kB unevictable:2000kB writepending:12kB zspages:0kB present:1032196kB managed:284764kB mlocked:0kB bounce:0kB free_pcp:10160kB local_pcp:1796kB free_cma:0kB [ 158.815048][ T7453] lowmem_reserve[]: 0 0 0 0 0 [ 158.815067][ T7453] Node 1 DMA32 free:210580kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:19500kB inactive_anon:2068kB active_file:14552kB inactive_file:148164kB unevictable:2000kB writepending:3376kB zspages:2724kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:53504kB local_pcp:1376kB free_cma:0kB [ 158.815100][ T7453] lowmem_reserve[]: 0 0 0 0 0 [ 158.815121][ T7453] Node 0 DMA: 15*4kB (UM) 8*8kB (UM) 5*16kB (UM) 7*32kB (UM) 6*64kB (UM) 3*128kB (UM) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 1964kB [ 158.815225][ T7453] Node 0 DMA32: 56*4kB (UME) 26*8kB (UME) 11*16kB (UME) 120*32kB (UME) 58*64kB (UME) 23*128kB (UME) 2*256kB (UE) 8*512kB (UME) 2*1024kB (UM) 0*2048kB 0*4096kB = 17760kB [ 158.815316][ T7453] Node 1 DMA32: 298*4kB (UME) 251*8kB (ME) 314*16kB (UME) 651*32kB (UME) 431*64kB (UME) 299*128kB (UME) 137*256kB (UME) 53*512kB (UME) 6*1024kB (ME) 7*2048kB (UM) 8*4096kB (UM) = 210368kB [ 158.815411][ T7453] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 158.815420][ T7453] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 158.815428][ T7453] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 158.815437][ T7453] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 158.815445][ T7453] 42989 total pagecache pages [ 158.815450][ T7453] 833 pages in swap cache [ 158.815454][ T7453] Free swap = 116468kB [ 158.815458][ T7453] Total swap = 124996kB [ 158.815462][ T7453] 524155 pages RAM [ 158.815465][ T7453] 0 pages HighMem/MovableOnly [ 158.815469][ T7453] 212072 pages reserved [ 158.815472][ T7453] 0 pages cma reserved [ 159.170588][ T7461] netlink: 20 bytes leftover after parsing attributes in process `syz.0.455'. [ 159.428959][ T7468] netlink: 164 bytes leftover after parsing attributes in process `syz.3.458'. [ 159.827236][ T1043] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 159.869386][ T7480] ptrace attach of ""[7481] was attempted by "/syz-executor exec"[7480] [ 159.987278][ T1043] usb 5-1: Using ep0 maxpacket: 32 [ 159.987724][ T1043] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 159.991240][ T1043] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 159.992971][ T1043] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 159.992984][ T1043] usb 5-1: Product: syz [ 159.992991][ T1043] usb 5-1: Manufacturer: syz [ 159.992998][ T1043] usb 5-1: SerialNumber: syz [ 159.994339][ T1043] usb 5-1: config 0 descriptor?? [ 159.994799][ T7473] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 160.199963][ T7473] FAULT_INJECTION: forcing a failure. [ 160.199963][ T7473] name failslab, interval 1, probability 0, space 0, times 0 [ 160.199986][ T7473] CPU: 0 UID: 0 PID: 7473 Comm: syz.0.460 Not tainted syzkaller #0 PREEMPT(full) [ 160.200000][ T7473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.200006][ T7473] Call Trace: [ 160.200011][ T7473] [ 160.200016][ T7473] dump_stack_lvl+0x100/0x190 [ 160.200035][ T7473] should_fail_ex.cold+0x5/0xa [ 160.200050][ T7473] should_failslab+0xc2/0x120 [ 160.200067][ T7473] __kmalloc_cache_noprof+0x91/0x6d0 [ 160.200080][ T7473] ? dummy_urb_enqueue+0xa3/0x880 [ 160.200099][ T7473] dummy_urb_enqueue+0xa3/0x880 [ 160.200115][ T7473] ? usb_hcd_map_urb_for_dma+0x28a/0x1190 [ 160.200133][ T7473] usb_hcd_submit_urb+0x268/0x2150 [ 160.200152][ T7473] usb_submit_urb+0x827/0x19b0 [ 160.200171][ T7473] ? __pm_runtime_resume+0xc3/0x170 [ 160.200185][ T7473] _chaoskey_fill+0x35c/0x9a0 [ 160.200200][ T7473] ? chaoskey_read+0x2f1/0x6d0 [ 160.200216][ T7473] ? __pfx__chaoskey_fill+0x10/0x10 [ 160.200232][ T7473] ? __pfx_autoremove_wake_function+0x10/0x10 [ 160.200248][ T7473] ? get_pid_task+0x2a/0x250 [ 160.200261][ T7473] ? get_pid_task+0xfc/0x250 [ 160.200294][ T7473] ? get_pid_task+0xfc/0x250 [ 160.200310][ T7473] chaoskey_read+0x3f0/0x6d0 [ 160.200326][ T7473] ? security_file_permission+0x76/0x210 [ 160.200341][ T7473] ? __pfx_chaoskey_read+0x10/0x10 [ 160.200356][ T7473] vfs_read+0x1e4/0xb40 [ 160.200370][ T7473] ? lock_acquire+0x1d1/0x380 [ 160.200386][ T7473] ? __fget_files+0x34/0x3d0 [ 160.200400][ T7473] ? __pfx_vfs_read+0x10/0x10 [ 160.200412][ T7473] ? find_held_lock+0x2b/0x80 [ 160.200424][ T7473] ? __fget_files+0x215/0x3d0 [ 160.200437][ T7473] ? __fget_files+0x215/0x3d0 [ 160.200454][ T7473] ? __fget_files+0x21f/0x3d0 [ 160.200471][ T7473] ksys_read+0x12a/0x250 [ 160.200484][ T7473] ? __pfx_ksys_read+0x10/0x10 [ 160.200496][ T7473] ? ksys_write+0x1ac/0x250 [ 160.200509][ T7473] ? __pfx_ksys_write+0x10/0x10 [ 160.200529][ T7473] __do_fast_syscall_32+0x13a/0x8b0 [ 160.200545][ T7473] ? lockdep_hardirqs_on+0x7d/0x110 [ 160.200559][ T7473] do_fast_syscall_32+0x32/0x70 [ 160.200574][ T7473] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.200589][ T7473] RIP: 0023:0xf703efec [ 160.200602][ T7473] Code: Unable to access opcode bytes at 0xf703efc2. [ 160.200608][ T7473] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 160.200619][ T7473] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 160.200625][ T7473] RDX: 0000000000000097 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.200644][ T7473] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.200651][ T7473] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 160.200658][ T7473] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.200672][ T7473] [ 160.203737][ T1043] usb 5-1: USB disconnect, device number 11 [ 160.856833][ T7497] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 160.856851][ T7497] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 160.856894][ T7497] vhci_hcd vhci_hcd.0: Device attached [ 160.896486][ T7497] binder: 7496:7497 ioctl 50009403 80000900 returned -22 [ 160.896780][ T7497] binder: 7496:7497 ioctl ca249435 80000500 returned -22 [ 160.906835][ T7503] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 160.906851][ T7503] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 160.912537][ T7503] vhci_hcd vhci_hcd.0: Device attached [ 160.933169][ T7498] vhci_hcd: connection closed [ 160.938019][ T12] vhci_hcd vhci_hcd.1: stop threads [ 160.938043][ T12] vhci_hcd vhci_hcd.1: release socket [ 160.938105][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 161.147744][ T5741] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 161.207279][ T5741] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 161.766942][ T7505] vhci_hcd: connection reset by peer [ 161.774257][ T5846] vhci_hcd vhci_hcd.2: stop threads [ 161.774355][ T5846] vhci_hcd vhci_hcd.2: release socket [ 161.774979][ T5846] vhci_hcd vhci_hcd.2: disconnect device [ 161.875339][ T7516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.467'. [ 162.382426][ T7525] netlink: 20 bytes leftover after parsing attributes in process `syz.3.469'. [ 162.602954][ T7516] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input97 [ 162.819920][ T7527] xt_TCPMSS: Only works on TCP SYN packets [ 163.014349][ T7535] ptrace attach of ""[7536] was attempted by "/syz-executor exec"[7535] [ 163.337032][ T7542] 9pnet_virtio: no channels available for device syz [ 163.341403][ T7542] FAULT_INJECTION: forcing a failure. [ 163.341403][ T7542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.341423][ T7542] CPU: 3 UID: 0 PID: 7542 Comm: syz.2.473 Not tainted syzkaller #0 PREEMPT(full) [ 163.341436][ T7542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.341443][ T7542] Call Trace: [ 163.341447][ T7542] [ 163.341452][ T7542] dump_stack_lvl+0x100/0x190 [ 163.341470][ T7542] should_fail_ex.cold+0x5/0xa [ 163.341486][ T7542] _copy_to_user+0x32/0xd0 [ 163.341507][ T7542] simple_read_from_buffer+0xcb/0x170 [ 163.341522][ T7542] proc_fail_nth_read+0x1af/0x230 [ 163.341537][ T7542] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 163.341551][ T7542] ? rw_verify_area+0xce/0x6d0 [ 163.341563][ T7542] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 163.341576][ T7542] vfs_read+0x1e4/0xb40 [ 163.341589][ T7542] ? lock_acquire+0x1d1/0x380 [ 163.341606][ T7542] ? __fget_files+0x34/0x3d0 [ 163.341620][ T7542] ? __pfx_vfs_read+0x10/0x10 [ 163.341632][ T7542] ? find_held_lock+0x2b/0x80 [ 163.341645][ T7542] ? __fget_files+0x215/0x3d0 [ 163.341675][ T7542] ? __fget_files+0x21f/0x3d0 [ 163.341693][ T7542] ksys_read+0x12a/0x250 [ 163.341706][ T7542] ? __pfx_ksys_read+0x10/0x10 [ 163.341723][ T7542] do_int80_emulation+0x166/0x650 [ 163.341741][ T7542] asm_int80_emulation+0x1a/0x20 [ 163.341752][ T7542] RIP: 0023:0xf71f75ab [ 163.341762][ T7542] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 163.341772][ T7542] RSP: 002b:00000000f54ad4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 163.341784][ T7542] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54ad5d0 [ 163.341791][ T7542] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 163.341797][ T7542] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.341803][ T7542] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 163.341810][ T7542] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.341824][ T7542] [ 163.408982][ T7545] FAULT_INJECTION: forcing a failure. [ 163.408982][ T7545] name failslab, interval 1, probability 0, space 0, times 0 [ 163.409003][ T7545] CPU: 2 UID: 0 PID: 7545 Comm: syz.2.476 Not tainted syzkaller #0 PREEMPT(full) [ 163.409016][ T7545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.409023][ T7545] Call Trace: [ 163.409027][ T7545] [ 163.409033][ T7545] dump_stack_lvl+0x100/0x190 [ 163.409052][ T7545] should_fail_ex.cold+0x5/0xa [ 163.409068][ T7545] should_failslab+0xc2/0x120 [ 163.409086][ T7545] __kmalloc_cache_noprof+0x91/0x6d0 [ 163.409099][ T7545] ? proc_thread_self_get_link+0x1a6/0x210 [ 163.409118][ T7545] proc_thread_self_get_link+0x1a6/0x210 [ 163.409135][ T7545] pick_link+0xac2/0x13c0 [ 163.409148][ T7545] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 163.409166][ T7545] step_into_slowpath+0x9ba/0xf90 [ 163.409182][ T7545] ? __pfx_step_into_slowpath+0x10/0x10 [ 163.409198][ T7545] ? lookup_fast+0x2da/0x600 [ 163.409209][ T7545] ? inode_permission+0x374/0x620 [ 163.409222][ T7545] link_path_walk+0xf28/0x1cc0 [ 163.409240][ T7545] path_openat+0x1ac/0x2440 [ 163.409258][ T7545] ? __pfx_path_openat+0x10/0x10 [ 163.409278][ T7545] do_file_open+0x20e/0x430 [ 163.409294][ T7545] ? __pfx_do_file_open+0x10/0x10 [ 163.409320][ T7545] ? _raw_spin_unlock+0x28/0x50 [ 163.409333][ T7545] ? alloc_fd+0x471/0x7a0 [ 163.409352][ T7545] do_sys_openat2+0x10f/0x1e0 [ 163.409371][ T7545] ? __pfx_do_sys_openat2+0x10/0x10 [ 163.409388][ T7545] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 163.409406][ T7545] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 163.409423][ T7545] __ia32_compat_sys_openat+0x12d/0x210 [ 163.409436][ T7545] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 163.409453][ T7545] do_int80_emulation+0x166/0x650 [ 163.409469][ T7545] asm_int80_emulation+0x1a/0x20 [ 163.409481][ T7545] RIP: 0023:0xf71f75ab [ 163.409491][ T7545] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 163.409502][ T7545] RSP: 002b:00000000f54ad4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 163.409513][ T7545] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f72c1b71 [ 163.409520][ T7545] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.409527][ T7545] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.409534][ T7545] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 163.409540][ T7545] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.409555][ T7545] [ 163.409754][ T7545] FAULT_INJECTION: forcing a failure. [ 163.409754][ T7545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.409768][ T7545] CPU: 2 UID: 0 PID: 7545 Comm: syz.2.476 Not tainted syzkaller #0 PREEMPT(full) [ 163.409780][ T7545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.409787][ T7545] Call Trace: [ 163.409790][ T7545] [ 163.409795][ T7545] dump_stack_lvl+0x100/0x190 [ 163.409811][ T7545] should_fail_ex.cold+0x5/0xa [ 163.409832][ T7545] _copy_from_user+0x2e/0xd0 [ 163.409850][ T7545] __sys_bpf+0x2f5/0x4a30 [ 163.409867][ T7545] ? __pfx___sys_bpf+0x10/0x10 [ 163.409879][ T7545] ? lock_acquire+0x1d1/0x380 [ 163.409896][ T7545] ? get_pid_task+0x2a/0x250 [ 163.409909][ T7545] ? find_held_lock+0x2b/0x80 [ 163.409922][ T7545] ? get_pid_task+0xfc/0x250 [ 163.409932][ T7545] ? get_pid_task+0xfc/0x250 [ 163.409947][ T7545] ? proc_fail_nth_write+0x9f/0x220 [ 163.409961][ T7545] ? find_held_lock+0x2b/0x80 [ 163.409977][ T7545] ? rcu_read_lock_any_held+0x6a/0x90 [ 163.409991][ T7545] ? find_held_lock+0x2b/0x80 [ 163.410004][ T7545] ? ksys_write+0x190/0x250 [ 163.410016][ T7545] ? ksys_write+0x190/0x250 [ 163.410029][ T7545] ? lock_acquire+0x1d1/0x380 [ 163.410054][ T7545] ? fput+0x7c/0x100 [ 163.410071][ T7545] ? __ia32_sys_bpf+0xcc/0x170 [ 163.410083][ T7545] __ia32_sys_bpf+0xcc/0x170 [ 163.410097][ T7545] ? __do_fast_syscall_32+0xb3/0x8b0 [ 163.410112][ T7545] __do_fast_syscall_32+0x13a/0x8b0 [ 163.410126][ T7545] ? lockdep_hardirqs_on+0x7d/0x110 [ 163.410141][ T7545] do_fast_syscall_32+0x32/0x70 [ 163.410155][ T7545] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.410169][ T7545] RIP: 0023:0xf70befec [ 163.410181][ T7545] Code: Unable to access opcode bytes at 0xf70befc2. [ 163.410186][ T7545] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 163.410196][ T7545] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 0000000080000180 [ 163.410203][ T7545] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 163.410211][ T7545] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.410217][ T7545] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 163.410224][ T7545] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.410237][ T7545] [ 163.691235][ T7547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.477'. [ 163.706212][ T7556] veth1_macvtap: left allmulticast mode [ 164.633603][ T7563] FAULT_INJECTION: forcing a failure. [ 164.633603][ T7563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.633635][ T7563] CPU: 0 UID: 0 PID: 7563 Comm: syz.2.479 Not tainted syzkaller #0 PREEMPT(full) [ 164.633656][ T7563] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.633667][ T7563] Call Trace: [ 164.633674][ T7563] [ 164.633682][ T7563] dump_stack_lvl+0x100/0x190 [ 164.633712][ T7563] should_fail_ex.cold+0x5/0xa [ 164.633737][ T7563] save_fsave_header+0x14c/0x2f0 [ 164.633763][ T7563] ? __pfx_save_fsave_header+0x10/0x10 [ 164.633797][ T7563] ? copy_fpstate_to_sigframe+0x2b8/0xae0 [ 164.633823][ T7563] ? __local_bh_enable_ip+0xa5/0x120 [ 164.633854][ T7563] copy_fpstate_to_sigframe+0x755/0xae0 [ 164.633879][ T7563] ? do_raw_spin_lock+0x128/0x260 [ 164.633902][ T7563] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 164.633932][ T7563] ? rcu_is_watching+0x13/0xc0 [ 164.633953][ T7563] ? irqentry_exit+0x24d/0xa10 [ 164.633975][ T7563] ? x86_task_fpu+0x5f/0x90 [ 164.633999][ T7563] get_sigframe+0x3fb/0x940 [ 164.634029][ T7563] ? __pfx_get_sigframe+0x10/0x10 [ 164.634055][ T7563] ? _raw_spin_unlock_irq+0x29/0x50 [ 164.634074][ T7563] ? siginfo_layout+0x156/0x290 [ 164.634106][ T7563] ia32_setup_rt_frame+0xe7/0xaf0 [ 164.634130][ T7563] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 164.634156][ T7563] arch_do_signal_or_restart+0x459/0x7a0 [ 164.634182][ T7563] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 164.634214][ T7563] ? fput+0x7c/0x100 [ 164.634245][ T7563] exit_to_user_mode_loop+0x139/0x700 [ 164.634263][ T7563] ? rcu_is_watching+0x13/0xc0 [ 164.634284][ T7563] do_int80_emulation+0x555/0x650 [ 164.634310][ T7563] asm_int80_emulation+0x1a/0x20 [ 164.634334][ T7563] RIP: 0023:0xf71f75ab [ 164.634349][ T7563] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 164.634367][ T7563] RSP: 002b:00000000f548c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 164.634385][ T7563] RAX: 0000000000000002 RBX: 0000000000000004 RCX: 00000000f548c5d0 [ 164.634397][ T7563] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 164.634407][ T7563] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 164.634418][ T7563] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 164.634430][ T7563] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 164.634454][ T7563] [ 164.734516][ T7569] openvswitch: netlink: Duplicate key (type 6). [ 164.741796][ T7575] /dev/sg0: Can't lookup blockdev [ 165.271075][ T7571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.482'. [ 165.423549][ T7594] netlink: 20 bytes leftover after parsing attributes in process `syz.2.487'. [ 165.443239][ T7595] netlink: 20 bytes leftover after parsing attributes in process `syz.1.488'. [ 166.297388][ T5741] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 167.047053][ T7614] netlink: 16 bytes leftover after parsing attributes in process `syz.0.494'. [ 167.362737][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.495'. [ 167.423956][ T7622] binder: 7621:7622 ioctl c0306201 80000080 returned -14 [ 167.485593][ T7624] binder: 7621:7624 ioctl c0306201 800003c0 returned -14 [ 167.632641][ T7628] binder: 7574:7628 ioctl 4048587b 80002e40 returned -22 [ 167.697329][ T7629] openvswitch: netlink: Duplicate key (type 6). [ 167.829734][ T7614] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input99 [ 169.793223][ T5752] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 169.794209][ T5752] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 169.794819][ T5752] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 169.795995][ T5752] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 169.796608][ T5752] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 170.349547][ T5745] Bluetooth: hci0: command 0x0406 tx timeout [ 170.350006][ T5752] Bluetooth: hci2: command 0x0406 tx timeout [ 170.350013][ T5754] Bluetooth: hci1: command 0x0406 tx timeout [ 171.539887][ T12] bridge_slave_1: left allmulticast mode [ 171.539936][ T12] bridge_slave_1: left promiscuous mode [ 171.541603][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.554768][ T12] bridge_slave_0: left allmulticast mode [ 171.554803][ T12] bridge_slave_0: left promiscuous mode [ 171.555161][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.572741][ T7682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.507'. [ 171.708211][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.710144][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.710720][ T12] bond0 (unregistering): Released all slaves [ 171.723475][ T5452] 8021q: adding VLAN 0 to HW filter on device eth2 [ 171.768597][ T12] IPVS: stopping master sync thread 5926 ... [ 171.838150][ T5097] Bluetooth: hci3: command tx timeout [ 172.049651][ T12] hsr_slave_0: left promiscuous mode [ 172.085474][ T12] hsr_slave_1: left promiscuous mode [ 172.086139][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.104025][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.129671][ T7682] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input101 [ 172.157899][ T5839] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 172.308456][ T5839] usb 6-1: Invalid ep0 maxpacket: 32 [ 172.349934][ T12] team0 (unregistering): Port device team_slave_1 removed [ 172.363491][ T12] team0 (unregistering): Port device team_slave_0 removed [ 172.438075][ T5839] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 172.458203][ T7701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.509'. [ 172.462721][ T5452] 8021q: adding VLAN 0 to HW filter on device eth4 [ 172.464448][ T7708] overlay: Unknown parameter '/' [ 172.565406][ T7648] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.565488][ T7648] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.565543][ T7648] bridge_slave_0: entered allmulticast mode [ 172.566226][ T7648] bridge_slave_0: entered promiscuous mode [ 172.567774][ T7648] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.567873][ T7648] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.567930][ T7648] bridge_slave_1: entered allmulticast mode [ 172.568660][ T7648] bridge_slave_1: entered promiscuous mode [ 172.580964][ T7648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.582390][ T7648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.627297][ T5839] usb 6-1: Invalid ep0 maxpacket: 32 [ 172.631681][ T5839] usb usb6-port1: attempt power cycle [ 172.641009][ T7648] team0: Port device team_slave_0 added [ 172.649637][ T7648] team0: Port device team_slave_1 added [ 172.674974][ T7648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.674990][ T7648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.675011][ T7648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.676513][ T7648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.676525][ T7648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.676544][ T7648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.737219][ T7648] hsr_slave_0: entered promiscuous mode [ 172.737632][ T7648] hsr_slave_1: entered promiscuous mode [ 172.737989][ T7648] debugfs: 'hsr0' already exists in 'hsr' [ 172.738001][ T7648] Cannot create hsr debugfs directory [ 173.023109][ T12] IPVS: stop unused estimator thread 0... [ 173.069488][ T5839] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 173.087742][ T5839] usb 6-1: Invalid ep0 maxpacket: 32 [ 173.151044][ T7721] FAULT_INJECTION: forcing a failure. [ 173.151044][ T7721] name failslab, interval 1, probability 0, space 0, times 0 [ 173.151068][ T7721] CPU: 3 UID: 0 PID: 7721 Comm: syz.0.511 Not tainted syzkaller #0 PREEMPT(full) [ 173.151084][ T7721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.151093][ T7721] Call Trace: [ 173.151097][ T7721] [ 173.151102][ T7721] dump_stack_lvl+0x100/0x190 [ 173.151123][ T7721] should_fail_ex.cold+0x5/0xa [ 173.151139][ T7721] should_failslab+0xc2/0x120 [ 173.151159][ T7721] __kmalloc_noprof+0xfc/0x840 [ 173.151175][ T7721] ? ops_init+0x77/0x5f0 [ 173.151190][ T7721] ops_init+0x77/0x5f0 [ 173.151203][ T7721] setup_net+0x118/0x3a0 [ 173.151215][ T7721] ? __pfx_setup_net+0x10/0x10 [ 173.151234][ T7721] copy_net_ns+0x345/0x7a0 [ 173.151253][ T7721] create_new_namespaces+0x3ea/0xac0 [ 173.151275][ T7721] unshare_nsproxy_namespaces+0xf2/0x220 [ 173.151294][ T7721] ksys_unshare+0x4a2/0xa70 [ 173.151306][ T7721] ? __pfx_ksys_unshare+0x10/0x10 [ 173.151323][ T7721] __ia32_sys_unshare+0x30/0x40 [ 173.151336][ T7721] __do_fast_syscall_32+0x13a/0x8b0 [ 173.151354][ T7721] do_fast_syscall_32+0x32/0x70 [ 173.151369][ T7721] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.151384][ T7721] RIP: 0023:0xf703efec [ 173.151398][ T7721] Code: Unable to access opcode bytes at 0xf703efc2. [ 173.151403][ T7721] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 173.151416][ T7721] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 173.151424][ T7721] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.151432][ T7721] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.151441][ T7721] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 173.151449][ T7721] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.151465][ T7721] [ 173.227450][ T5839] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 173.249037][ T5839] usb 6-1: Invalid ep0 maxpacket: 32 [ 173.249224][ T5839] usb usb6-port1: unable to enumerate USB device [ 173.312697][ T7648] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 173.322343][ T7648] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.323121][ T7648] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 173.332618][ T7648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.342129][ T7648] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 173.345493][ T7648] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.346050][ T7648] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 173.352967][ T7648] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.363640][ T7732] binder: 7731:7732 ioctl c018620c 80000200 returned -22 [ 173.395724][ T7648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.406065][ T7648] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.410621][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.410706][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.423655][ T1289] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.423755][ T1289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.716121][ T7648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.753350][ T7648] veth0_vlan: entered promiscuous mode [ 173.758239][ T7648] veth1_vlan: entered promiscuous mode [ 173.786720][ T7648] veth0_macvtap: entered promiscuous mode [ 173.790703][ T7648] veth1_macvtap: entered promiscuous mode [ 173.800734][ T7648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.805930][ T7648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.862453][ T5551] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.862622][ T5551] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.862643][ T5551] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.880364][ T1289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.880384][ T1289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.892667][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.911236][ T1289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.911257][ T1289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.917466][ T5097] Bluetooth: hci3: command tx timeout [ 174.085173][ T7786] tipc: Started in network mode [ 174.085191][ T7786] tipc: Node identity 8ab30736508e, cluster identity 4711 [ 174.085295][ T7786] tipc: Enabled bearer , priority 1 [ 174.123098][ T7785] tipc: Resetting bearer [ 174.131606][ T7785] tipc: Disabling bearer [ 174.566553][ T7798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.521'. [ 175.119774][ T7807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.525'. [ 175.140554][ T7798] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input103 [ 175.298162][ T7811] binder: 7810:7811 ioctl c018620c 80000200 returned -22 [ 175.687335][ T5741] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 175.837327][ T5741] usb 7-1: Using ep0 maxpacket: 32 [ 175.845804][ T7813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.846086][ T7813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.871182][ T7813] block2mtd: erasesize must be a divisor of device size [ 175.873037][ T5741] usb 7-1: unable to get BOS descriptor or descriptor too short [ 175.873064][ T5741] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 175.873690][ T5741] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 175.873706][ T5741] usb 7-1: can't read configurations, error -71 [ 175.997026][ T7822] loop9: detected capacity change from 0 to 16384 [ 176.018842][ T66] Bluetooth: hci3: command tx timeout [ 176.236315][ C1] I/O error, dev loop9, sector 792 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 176.238026][ T7823] loop9: detected capacity change from 16384 to 792 [ 176.379268][ T7831] netlink: 20 bytes leftover after parsing attributes in process `syz.0.531'. [ 176.590991][ T5733] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 176.747371][ T5733] usb 6-1: Using ep0 maxpacket: 16 [ 176.749642][ T5733] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 176.753790][ T5733] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 176.773168][ T5733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.773222][ T5733] usb 6-1: Product: syz [ 176.773259][ T5733] usb 6-1: Manufacturer: syz [ 176.773268][ T5733] usb 6-1: SerialNumber: syz [ 176.797086][ T5733] usb 6-1: config 0 descriptor?? [ 176.830152][ T5733] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 176.830196][ T5733] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 177.130147][ T7840] FAULT_INJECTION: forcing a failure. [ 177.130147][ T7840] name failslab, interval 1, probability 0, space 0, times 0 [ 177.130198][ T7840] CPU: 3 UID: 0 PID: 7840 Comm: syz.2.534 Not tainted syzkaller #0 PREEMPT(full) [ 177.130224][ T7840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.130232][ T7840] Call Trace: [ 177.130236][ T7840] [ 177.130241][ T7840] dump_stack_lvl+0x100/0x190 [ 177.130261][ T7840] should_fail_ex.cold+0x5/0xa [ 177.130276][ T7840] should_failslab+0xc2/0x120 [ 177.130293][ T7840] __kmalloc_noprof+0xfc/0x840 [ 177.130306][ T7840] ? rcu_is_watching+0x13/0xc0 [ 177.130324][ T7840] ? tomoyo_realpath_from_path+0xb6/0x690 [ 177.130342][ T7840] tomoyo_realpath_from_path+0xb6/0x690 [ 177.130360][ T7840] tomoyo_path_number_perm+0x23c/0x580 [ 177.130371][ T7840] ? tomoyo_path_number_perm+0x22e/0x580 [ 177.130384][ T7840] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 177.130397][ T7840] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 177.130419][ T7840] ? __lock_acquire+0x5c0/0x1f40 [ 177.130441][ T7840] ? __fget_files+0x34/0x3d0 [ 177.130456][ T7840] ? find_held_lock+0x2b/0x80 [ 177.130468][ T7840] ? __fget_files+0x215/0x3d0 [ 177.130481][ T7840] ? hook_file_ioctl_common+0x140/0x440 [ 177.130493][ T7840] ? __fget_files+0x215/0x3d0 [ 177.130509][ T7840] ? __fget_files+0x21f/0x3d0 [ 177.130525][ T7840] security_file_ioctl_compat+0xd3/0x230 [ 177.130539][ T7840] __ia32_compat_sys_ioctl+0xc2/0x360 [ 177.130554][ T7840] __do_fast_syscall_32+0x13a/0x8b0 [ 177.130569][ T7840] ? lockdep_hardirqs_on+0x7d/0x110 [ 177.130584][ T7840] do_fast_syscall_32+0x32/0x70 [ 177.130599][ T7840] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.130614][ T7840] RIP: 0023:0xf702efec [ 177.130627][ T7840] Code: Unable to access opcode bytes at 0xf702efc2. [ 177.130632][ T7840] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 177.130644][ T7840] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c02c640e [ 177.130650][ T7840] RDX: 0000000080000400 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.130657][ T7840] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.130663][ T7840] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 177.130670][ T7840] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.130684][ T7840] [ 177.130818][ T7840] ERROR: Out of memory at tomoyo_realpath_from_path. [ 177.244993][ T5733] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 177.311014][ T7842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.535'. [ 177.378371][ T7845] FAULT_INJECTION: forcing a failure. [ 177.378371][ T7845] name failslab, interval 1, probability 0, space 0, times 0 [ 177.378392][ T7845] CPU: 1 UID: 0 PID: 7845 Comm: syz.2.536 Not tainted syzkaller #0 PREEMPT(full) [ 177.378405][ T7845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.378412][ T7845] Call Trace: [ 177.378416][ T7845] [ 177.378421][ T7845] dump_stack_lvl+0x100/0x190 [ 177.378440][ T7845] should_fail_ex.cold+0x5/0xa [ 177.378455][ T7845] should_failslab+0xc2/0x120 [ 177.378473][ T7845] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 177.378490][ T7845] ? __d_alloc+0x35/0xa50 [ 177.378509][ T7845] __d_alloc+0x35/0xa50 [ 177.378526][ T7845] path_from_stashed+0x431/0x760 [ 177.378546][ T7845] pidfs_alloc_file+0xf8/0x290 [ 177.378562][ T7845] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 177.378581][ T7845] pidfd_prepare+0x107/0x1b0 [ 177.378593][ T7845] __ia32_sys_pidfd_open+0x105/0x1a0 [ 177.378608][ T7845] ? __pfx___ia32_sys_pidfd_open+0x10/0x10 [ 177.378625][ T7845] __do_fast_syscall_32+0x13a/0x8b0 [ 177.378640][ T7845] ? lockdep_hardirqs_on+0x7d/0x110 [ 177.378655][ T7845] do_fast_syscall_32+0x32/0x70 [ 177.378670][ T7845] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.378684][ T7845] RIP: 0023:0xf702efec [ 177.378697][ T7845] Code: Unable to access opcode bytes at 0xf702efc2. [ 177.378702][ T7845] RSP: 002b:00000000f541d4dc EFLAGS: 00000296 ORIG_RAX: 00000000000001b2 [ 177.378713][ T7845] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000000000 [ 177.378720][ T7845] RDX: 000000003d569700 RSI: 00000000f541d5b0 RDI: 00000000f7051736 [ 177.378727][ T7845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.378734][ T7845] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 177.378740][ T7845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.378754][ T7845] [ 177.384529][ T5733] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 177.384684][ T5733] em28xx 6-1:0.0: board has no eeprom [ 177.527418][ T5733] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 177.527446][ T5733] em28xx 6-1:0.0: dvb set to bulk mode. [ 177.529082][ T5741] em28xx 6-1:0.0: Binding DVB extension [ 177.578395][ T5733] usb 6-1: USB disconnect, device number 13 [ 177.581687][ T5733] em28xx 6-1:0.0: Disconnecting em28xx [ 177.603592][ T5741] em28xx 6-1:0.0: Registering input extension [ 177.603913][ T5733] em28xx 6-1:0.0: Closing input extension [ 177.624549][ T7853] FAULT_INJECTION: forcing a failure. [ 177.624549][ T7853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.624569][ T7853] CPU: 0 UID: 0 PID: 7853 Comm: syz.2.540 Not tainted syzkaller #0 PREEMPT(full) [ 177.624584][ T7853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.624591][ T7853] Call Trace: [ 177.624595][ T7853] [ 177.624600][ T7853] dump_stack_lvl+0x100/0x190 [ 177.624619][ T7853] should_fail_ex.cold+0x5/0xa [ 177.624635][ T7853] _copy_from_user+0x2e/0xd0 [ 177.624652][ T7853] cmsghdr_from_user_compat_to_kern+0x4eb/0x7d0 [ 177.624672][ T7853] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 177.624687][ T7853] ? __import_iovec+0x1d2/0x640 [ 177.624708][ T7853] ____sys_sendmsg+0x607/0xbe0 [ 177.624725][ T7853] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.624745][ T7853] ___sys_sendmsg+0x190/0x1e0 [ 177.624761][ T7853] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.624782][ T7853] ? find_held_lock+0x2b/0x80 [ 177.624805][ T7853] __sys_sendmsg+0x160/0x210 [ 177.624817][ T7853] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.624832][ T7853] ? __pfx_ksys_write+0x10/0x10 [ 177.624848][ T7853] __do_fast_syscall_32+0x13a/0x8b0 [ 177.624864][ T7853] ? lockdep_hardirqs_on+0x7d/0x110 [ 177.624879][ T7853] do_fast_syscall_32+0x32/0x70 [ 177.624901][ T7853] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.624915][ T7853] RIP: 0023:0xf702efec [ 177.624928][ T7853] Code: Unable to access opcode bytes at 0xf702efc2. [ 177.624934][ T7853] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 177.624945][ T7853] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000880 [ 177.624952][ T7853] RDX: 0000000076e37746 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.624959][ T7853] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.624965][ T7853] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 177.624971][ T7853] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.624985][ T7853] [ 177.648323][ T5733] em28xx: Freeing device [ 177.750719][ T7856] overlayfs: failed to resolve '/f»âB¹+tk=Yã.6dVÞ¬dç‚ kÔ®ãr': -2 [ 177.763691][ T7842] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input105 [ 177.988854][ T5097] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 177.997248][ T5097] Bluetooth: hci0: command 0x0406 tx timeout [ 178.067665][ T5097] Bluetooth: hci3: command tx timeout [ 178.477267][ T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 178.627578][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 178.632122][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 178.642116][ T25] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1023 [ 178.642135][ T25] usb 5-1: config 1 interface 0 has no altsetting 0 [ 178.698525][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.698542][ T25] usb 5-1: Product: 鱯ῷ⾵ࠀåµâ¡“锉涕㈦뜛퉊懛셔î—ã€è…›ê–ƒá¡µì•³çµºé¨ºè‡‡ì—€çž©î쬀廭å¡æ«ºé‡¹ê„˜ï©Šæ“£å³ªï¥£ê¡ã¤‘ಓ毆è‚鸜僜㦆ì€é½ï—­éŠŽí™½ã†å´³â²‚í‹ê¨é¹µè­‚êžæŽŠåº«à©œîƒžë‰¸íŸ–㢺ë‹ê¨™í˜ ï¹¡ãŽ°èŠ¼î›¦ä¶Žã›î¿¤á ½çŸ¡ï‰»á½³à á—¯í… æŠ¿ì— å‰†ì¿š [ 178.698558][ T25] usb 5-1: Manufacturer: လ [ 178.698565][ T25] usb 5-1: SerialNumber: 㶾褻淴í¦åºƒå„™é‘“沈㥾æšç³­ã¢™è¡–୽䱰㗤察䚙샮˅î¬å˜ªï¢æ»¬ãˆ¶ë™œâ— ï¼‘ë¡à ¬â段鱳痎ꯦⱅ땦翥柉傠껔酄掸æ™å˜‰î•³â§»æŸ¸ä¬¯ä¯â±¦é”±ì°¢àº«ã²‡èµ”æ“©ä¼î¨Žç°†É¹î°„펅ꗃé´ë   [ 179.034877][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.546'. [ 179.035615][ T7858] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 179.277689][ T42] libceph: connect (1)[c::]:6789 error -101 [ 179.318209][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 179.339260][ T1043] libceph: connect (1)[c::]:6789 error -101 [ 179.339405][ T1043] libceph: mon0 (1)[c::]:6789 connect error [ 179.355747][ T7868] ceph: No mds server is up or the cluster is laggy [ 179.374922][ T7859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.378251][ T7859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.389818][ T7884] FAULT_INJECTION: forcing a failure. [ 179.389818][ T7884] name failslab, interval 1, probability 0, space 0, times 0 [ 179.389869][ T7884] CPU: 2 UID: 0 PID: 7884 Comm: syz.2.548 Not tainted syzkaller #0 PREEMPT(full) [ 179.389896][ T7884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.389905][ T7884] Call Trace: [ 179.389909][ T7884] [ 179.389914][ T7884] dump_stack_lvl+0x100/0x190 [ 179.389950][ T7884] should_fail_ex.cold+0x5/0xa [ 179.389966][ T7884] should_failslab+0xc2/0x120 [ 179.389985][ T7884] kmem_cache_alloc_noprof+0x92/0x6a0 [ 179.390002][ T7884] ? __pfx___schedule+0x10/0x10 [ 179.390015][ T7884] ? do_getname+0x35/0x390 [ 179.390029][ T7884] do_getname+0x35/0x390 [ 179.390042][ T7884] __ia32_sys_mkdirat+0x77/0xc0 [ 179.390059][ T7884] __do_fast_syscall_32+0x13a/0x8b0 [ 179.390075][ T7884] ? lockdep_hardirqs_on+0x7d/0x110 [ 179.390091][ T7884] do_fast_syscall_32+0x32/0x70 [ 179.390107][ T7884] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 179.390122][ T7884] RIP: 0023:0xf702efec [ 179.390138][ T7884] Code: Unable to access opcode bytes at 0xf702efc2. [ 179.390143][ T7884] RSP: 002b:00000000f53ba50c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 179.390156][ T7884] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 179.390164][ T7884] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 179.390171][ T7884] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 179.390178][ T7884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.390185][ T7884] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 179.390200][ T7884] [ 179.412903][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.549'. [ 179.421349][ T7889] bridge_slave_1 (unregistering): left allmulticast mode [ 179.421368][ T7889] bridge_slave_1 (unregistering): left promiscuous mode [ 179.421412][ T7889] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.601862][ T7859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.603752][ T7859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.614436][ T42] libceph: connect (1)[c::]:6789 error -101 [ 179.615148][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 179.629099][ T7858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.635248][ T7858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.978308][ T7880] ceph: No mds server is up or the cluster is laggy [ 180.015365][ T7897] netlink: 16 bytes leftover after parsing attributes in process `syz.1.551'. [ 180.500505][ T25] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 7 proto 2 vid 0x0525 pid 0xA4A8 [ 180.504201][ T25] usb 5-1: USB disconnect, device number 12 [ 180.520664][ T25] usblp0: removed [ 180.629982][ T7897] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input108 [ 180.631560][ T7906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.553'. [ 181.489428][ T7920] libceph: resolve '1270.1' (ret=-3): failed [ 181.554212][ T7925] bond1: Removing last ns target with arp_interval on [ 182.134474][ T7937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.561'. [ 182.184391][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.560'. [ 182.300020][ T30] libceph: connect (1)[c::]:6789 error -101 [ 182.300376][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 182.576246][ T30] libceph: connect (1)[c::]:6789 error -101 [ 182.585076][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 182.723263][ T7937] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input110 [ 182.875865][ T7956] netlink: 16 bytes leftover after parsing attributes in process `syz.3.565'. [ 183.121778][ T30] libceph: connect (1)[c::]:6789 error -101 [ 183.127994][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 183.288482][ T7941] ceph: No mds server is up or the cluster is laggy [ 183.332358][ T7956] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input112 [ 183.405602][ T7963] FAULT_INJECTION: forcing a failure. [ 183.405602][ T7963] name failslab, interval 1, probability 0, space 0, times 0 [ 183.405635][ T7963] CPU: 3 UID: 0 PID: 7963 Comm: syz.1.568 Not tainted syzkaller #0 PREEMPT(full) [ 183.405657][ T7963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.405670][ T7963] Call Trace: [ 183.405677][ T7963] [ 183.405684][ T7963] dump_stack_lvl+0x100/0x190 [ 183.405716][ T7963] should_fail_ex.cold+0x5/0xa [ 183.405740][ T7963] should_failslab+0xc2/0x120 [ 183.405770][ T7963] kmem_cache_alloc_noprof+0x92/0x6a0 [ 183.405796][ T7963] ? alloc_empty_file+0x5b/0x1c0 [ 183.405830][ T7963] alloc_empty_file+0x5b/0x1c0 [ 183.405860][ T7963] dentry_open+0x46/0xd0 [ 183.405889][ T7963] pidfs_alloc_file+0x18e/0x290 [ 183.405915][ T7963] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 183.405948][ T7963] pidfd_prepare+0x107/0x1b0 [ 183.405970][ T7963] __ia32_sys_pidfd_open+0x105/0x1a0 [ 183.405994][ T7963] ? __pfx___ia32_sys_pidfd_open+0x10/0x10 [ 183.406025][ T7963] __do_fast_syscall_32+0x13a/0x8b0 [ 183.406052][ T7963] ? lockdep_hardirqs_on+0x7d/0x110 [ 183.406075][ T7963] do_fast_syscall_32+0x32/0x70 [ 183.406098][ T7963] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.406121][ T7963] RIP: 0023:0xf7f77fec [ 183.406142][ T7963] Code: Unable to access opcode bytes at 0xf7f77fc2. [ 183.406152][ T7963] RSP: 002b:00000000f54364dc EFLAGS: 00000296 ORIG_RAX: 00000000000001b2 [ 183.406173][ T7963] RAX: ffffffffffffffda RBX: 00000000000001bd RCX: 0000000000000000 [ 183.406186][ T7963] RDX: 000000006016c300 RSI: 00000000f54365b0 RDI: 00000000f7061736 [ 183.406197][ T7963] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.406208][ T7963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.406218][ T7963] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.406243][ T7963] [ 183.459232][ T7969] FAULT_INJECTION: forcing a failure. [ 183.459232][ T7969] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 183.459253][ T7969] CPU: 3 UID: 0 PID: 7969 Comm: syz.1.570 Not tainted syzkaller #0 PREEMPT(full) [ 183.459266][ T7969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.459272][ T7969] Call Trace: [ 183.459276][ T7969] [ 183.459280][ T7969] dump_stack_lvl+0x100/0x190 [ 183.459299][ T7969] should_fail_ex.cold+0x5/0xa [ 183.459312][ T7969] ? prepare_alloc_pages+0x16d/0x5b0 [ 183.459330][ T7969] should_fail_alloc_page+0xeb/0x140 [ 183.459348][ T7969] prepare_alloc_pages+0x1f0/0x5b0 [ 183.459366][ T7969] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 183.459381][ T7969] ? stack_trace_save+0x8e/0xc0 [ 183.459396][ T7969] ? __pfx_stack_trace_save+0x10/0x10 [ 183.459413][ T7969] ? __is_module_percpu_address+0x1b8/0x430 [ 183.459431][ T7969] ? save_trace+0x212/0x420 [ 183.459447][ T7969] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 183.459461][ T7969] ? mark_lock+0x44b/0x1020 [ 183.459481][ T7969] ? lock_acquire+0x1d1/0x380 [ 183.459496][ T7969] ? hidp_connection_add+0x347/0x1f80 [ 183.459512][ T7969] ? rcu_is_watching+0x13/0xc0 [ 183.459524][ T7969] ? trace_contention_end+0x126/0x160 [ 183.459542][ T7969] ? __mutex_lock+0x26c/0x1bd0 [ 183.459556][ T7969] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 183.459573][ T7969] ? policy_nodemask+0xed/0x4f0 [ 183.459591][ T7969] alloc_pages_mpol+0x201/0x550 [ 183.459608][ T7969] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 183.459627][ T7969] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 183.459642][ T7969] ___kmalloc_large_node+0xe8/0x130 [ 183.459678][ T7969] __kmalloc_large_noprof+0x1c/0x70 [ 183.459696][ T7969] hidp_connection_add+0x3ff/0x1f80 [ 183.459713][ T7969] hidp_sock_compat_ioctl+0x3cb/0x4e0 [ 183.459726][ T7969] ? __pfx_hidp_sock_compat_ioctl+0x10/0x10 [ 183.459748][ T7969] ? tomoyo_path_number_perm+0x188/0x580 [ 183.459769][ T7969] ? do_vfs_ioctl+0x226/0x13e0 [ 183.459781][ T7969] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 183.459794][ T7969] ? __pfx_hidp_sock_compat_ioctl+0x10/0x10 [ 183.459812][ T7969] compat_sock_ioctl+0x179/0x760 [ 183.459830][ T7969] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 183.459844][ T7969] ? hook_file_ioctl_common+0x140/0x440 [ 183.459860][ T7969] ? __fget_files+0x21f/0x3d0 [ 183.459876][ T7969] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 183.459892][ T7969] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 183.459906][ T7969] __do_fast_syscall_32+0x13a/0x8b0 [ 183.459920][ T7969] ? lockdep_hardirqs_on+0x7d/0x110 [ 183.459935][ T7969] do_fast_syscall_32+0x32/0x70 [ 183.459949][ T7969] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.459964][ T7969] RIP: 0023:0xf7f77fec [ 183.459977][ T7969] Code: Unable to access opcode bytes at 0xf7f77fc2. [ 183.459982][ T7969] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 183.459994][ T7969] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000400448c8 [ 183.460001][ T7969] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.460007][ T7969] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.460013][ T7969] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 183.460020][ T7969] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.460033][ T7969] [ 183.473625][ T7970] overlayfs: failed to resolve '/f»âB¹+tk=Yã.6dVÞ¬dç‚ kÔ®ãr': -2 [ 183.494639][ T7965] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.495964][ T7965] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.606109][ T7976] overlayfs: failed to resolve '/': -2 [ 183.745494][ T7965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.751585][ T7965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.517354][ T5551] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.517406][ T5551] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.517438][ T5551] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.517469][ T5551] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.629313][ T25] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 184.643591][ T7988] netlink: 'syz.3.575': attribute type 10 has an invalid length. [ 184.654021][ T7988] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.655696][ T7988] bond0: (slave team0): Enslaving as an active interface with an up link [ 184.794498][ T8000] FAULT_INJECTION: forcing a failure. [ 184.794498][ T8000] name failslab, interval 1, probability 0, space 0, times 0 [ 184.794519][ T8000] CPU: 1 UID: 0 PID: 8000 Comm: syz.3.578 Not tainted syzkaller #0 PREEMPT(full) [ 184.794532][ T8000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 184.794539][ T8000] Call Trace: [ 184.794544][ T8000] [ 184.794548][ T8000] dump_stack_lvl+0x100/0x190 [ 184.794569][ T8000] should_fail_ex.cold+0x5/0xa [ 184.794584][ T8000] should_failslab+0xc2/0x120 [ 184.794604][ T8000] kmem_cache_alloc_noprof+0x92/0x6a0 [ 184.794619][ T8000] ? __pfx_map_id_range_down+0x10/0x10 [ 184.794637][ T8000] ? security_inode_alloc+0x3b/0x2c0 [ 184.794658][ T8000] security_inode_alloc+0x3b/0x2c0 [ 184.794678][ T8000] inode_init_always_gfp+0xc6f/0xfb0 [ 184.794696][ T8000] alloc_inode+0x8e/0x250 [ 184.794711][ T8000] path_from_stashed+0x25b/0x760 [ 184.794730][ T8000] pidfs_alloc_file+0xf8/0x290 [ 184.794746][ T8000] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 184.794767][ T8000] pidfd_prepare+0x107/0x1b0 [ 184.794787][ T8000] __ia32_sys_pidfd_open+0x105/0x1a0 [ 184.794802][ T8000] ? __pfx___ia32_sys_pidfd_open+0x10/0x10 [ 184.794821][ T8000] __do_fast_syscall_32+0x13a/0x8b0 [ 184.794838][ T8000] ? lockdep_hardirqs_on+0x7d/0x110 [ 184.794855][ T8000] do_fast_syscall_32+0x32/0x70 [ 184.794871][ T8000] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.794886][ T8000] RIP: 0023:0xf6ffefec [ 184.794900][ T8000] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 184.794905][ T8000] RSP: 002b:00000000f53ed4dc EFLAGS: 00000296 ORIG_RAX: 00000000000001b2 [ 184.794919][ T8000] RAX: ffffffffffffffda RBX: 00000000000001ec RCX: 0000000000000000 [ 184.794927][ T8000] RDX: 0000000006ddc200 RSI: 00000000f53ed5b0 RDI: 00000000f7021736 [ 184.794934][ T8000] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 184.794941][ T8000] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 184.794947][ T8000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.794961][ T8000] [ 184.807334][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 184.818458][ T25] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 184.826201][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 184.842009][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.842049][ T25] usb 6-1: Product: syz [ 184.842113][ T25] usb 6-1: Manufacturer: syz [ 184.842176][ T25] usb 6-1: SerialNumber: syz [ 184.873492][ T25] usb 6-1: config 0 descriptor?? [ 184.922257][ T8003] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input113 [ 185.031372][ T25] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 185.031493][ T25] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 185.552414][ T25] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 185.743844][ T8014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.582'. [ 185.971338][ T25] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 185.971508][ T25] em28xx 6-1:0.0: board has no eeprom [ 186.028726][ T7980] em28xx 6-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 186.087520][ T25] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 186.087552][ T25] em28xx 6-1:0.0: dvb set to bulk mode. [ 186.106472][ T25] usb 6-1: USB disconnect, device number 14 [ 186.107290][ T25] em28xx 6-1:0.0: Disconnecting em28xx [ 186.111207][ T5850] em28xx 6-1:0.0: Binding DVB extension [ 186.153818][ T5850] em28xx 6-1:0.0: Registering input extension [ 186.154020][ T25] em28xx 6-1:0.0: Closing input extension [ 186.198811][ T25] em28xx: Freeing device [ 186.421814][ T8030] bonding: no command found in bonding_masters - use +ifname or -ifname [ 186.633784][ T8032] FAULT_INJECTION: forcing a failure. [ 186.633784][ T8032] name failslab, interval 1, probability 0, space 0, times 0 [ 186.633817][ T8032] CPU: 2 UID: 0 PID: 8032 Comm: syz.1.587 Not tainted syzkaller #0 PREEMPT(full) [ 186.633839][ T8032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.633851][ T8032] Call Trace: [ 186.633859][ T8032] [ 186.633868][ T8032] dump_stack_lvl+0x100/0x190 [ 186.633900][ T8032] should_fail_ex.cold+0x5/0xa [ 186.633924][ T8032] should_failslab+0xc2/0x120 [ 186.633951][ T8032] __kmalloc_cache_noprof+0x91/0x6d0 [ 186.633974][ T8032] ? nsim_fib_event_nb+0x1b4/0xe50 [ 186.634005][ T8032] nsim_fib_event_nb+0x1b4/0xe50 [ 186.634031][ T8032] ? lock_acquire+0x1d1/0x380 [ 186.634081][ T8032] ? atomic_notifier_call_chain+0x2f/0x1c0 [ 186.634110][ T8032] notifier_call_chain+0x99/0x3f0 [ 186.634137][ T8032] atomic_notifier_call_chain+0x71/0x1c0 [ 186.634161][ T8032] call_fib_notifiers+0x33/0x70 [ 186.634185][ T8032] fib_notify_alias_delete+0x2b6/0x390 [ 186.634217][ T8032] ? __pfx_fib_notify_alias_delete+0x10/0x10 [ 186.634244][ T8032] ? compat_sock_ioctl+0x568/0x760 [ 186.634278][ T8032] ? lockdep_rtnl_is_held+0x26/0x40 [ 186.634304][ T8032] ? fib_find_node+0x209/0x280 [ 186.634334][ T8032] fib_table_delete+0x5b8/0x8e0 [ 186.634380][ T8032] ? __pfx_fib_table_delete+0x10/0x10 [ 186.634410][ T8032] ? find_held_lock+0x2b/0x80 [ 186.634433][ T8032] ? fib_magic+0x1a7/0x5c0 [ 186.634454][ T8032] ? fib_new_table+0x109/0x5d0 [ 186.634480][ T8032] fib_magic+0x362/0x5c0 [ 186.634503][ T8032] ? __pfx_fib_magic+0x10/0x10 [ 186.634534][ T8032] ? netlink_broadcast_filtered+0x40d/0xf20 [ 186.634570][ T8032] fib_del_ifaddr+0x3b8/0x14d0 [ 186.634595][ T8032] ? inetaddr_event+0xf3/0x150 [ 186.634623][ T8032] ? __pfx_inetaddr_event+0x10/0x10 [ 186.634652][ T8032] fib_inetaddr_event+0xb9/0x270 [ 186.634677][ T8032] notifier_call_chain+0x99/0x3f0 [ 186.634704][ T8032] blocking_notifier_call_chain+0x69/0xa0 [ 186.634730][ T8032] __inet_del_ifa+0x3df/0xf40 [ 186.634760][ T8032] devinet_ioctl+0xa02/0x1f10 [ 186.634786][ T8032] ? __pfx_devinet_ioctl+0x10/0x10 [ 186.634808][ T8032] ? _copy_from_user+0x59/0xd0 [ 186.634836][ T8032] inet_ioctl+0x3aa/0x3f0 [ 186.634855][ T8032] ? __pfx_inet_ioctl+0x10/0x10 [ 186.634878][ T8032] ? kasan_quarantine_put+0x104/0x240 [ 186.634912][ T8032] ? tomoyo_path_number_perm+0x188/0x580 [ 186.634938][ T8032] sock_do_ioctl+0x118/0x280 [ 186.634962][ T8032] ? __pfx_sock_do_ioctl+0x10/0x10 [ 186.634990][ T8032] ? do_vfs_ioctl+0x226/0x13e0 [ 186.635013][ T8032] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 186.635039][ T8032] compat_sock_ioctl+0x568/0x760 [ 186.635068][ T8032] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 186.635092][ T8032] ? hook_file_ioctl_common+0x140/0x440 [ 186.635120][ T8032] ? __fget_files+0x21f/0x3d0 [ 186.635150][ T8032] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 186.635176][ T8032] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 186.635203][ T8032] __do_fast_syscall_32+0x13a/0x8b0 [ 186.635232][ T8032] do_fast_syscall_32+0x32/0x70 [ 186.635258][ T8032] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 186.635282][ T8032] RIP: 0023:0xf7f77fec [ 186.635304][ T8032] Code: Unable to access opcode bytes at 0xf7f77fc2. [ 186.635313][ T8032] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 186.635333][ T8032] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000008916 [ 186.635355][ T8032] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 186.635368][ T8032] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.635381][ T8032] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 186.635392][ T8032] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.635420][ T8032] [ 186.851850][ T8034] FAULT_INJECTION: forcing a failure. [ 186.851850][ T8034] name failslab, interval 1, probability 0, space 0, times 0 [ 186.851872][ T8034] CPU: 3 UID: 0 PID: 8034 Comm: syz.1.588 Not tainted syzkaller #0 PREEMPT(full) [ 186.851885][ T8034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.851892][ T8034] Call Trace: [ 186.851896][ T8034] [ 186.851901][ T8034] dump_stack_lvl+0x100/0x190 [ 186.851920][ T8034] should_fail_ex.cold+0x5/0xa [ 186.851936][ T8034] should_failslab+0xc2/0x120 [ 186.851955][ T8034] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 186.851971][ T8034] ? __d_alloc+0x35/0xa50 [ 186.851991][ T8034] __d_alloc+0x35/0xa50 [ 186.852008][ T8034] path_from_stashed+0x431/0x760 [ 186.852028][ T8034] pidfs_alloc_file+0xf8/0x290 [ 186.852050][ T8034] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 186.852079][ T8034] pidfd_prepare+0x107/0x1b0 [ 186.852098][ T8034] __ia32_sys_pidfd_open+0x105/0x1a0 [ 186.852119][ T8034] ? __pfx___ia32_sys_pidfd_open+0x10/0x10 [ 186.852170][ T8034] __do_fast_syscall_32+0x13a/0x8b0 [ 186.852193][ T8034] ? lockdep_hardirqs_on+0x7d/0x110 [ 186.852209][ T8034] do_fast_syscall_32+0x32/0x70 [ 186.852225][ T8034] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 186.852241][ T8034] RIP: 0023:0xf7f77fec [ 186.852255][ T8034] Code: Unable to access opcode bytes at 0xf7f77fc2. [ 186.852261][ T8034] RSP: 002b:00000000f54364dc EFLAGS: 00000296 ORIG_RAX: 00000000000001b2 [ 186.852272][ T8034] RAX: ffffffffffffffda RBX: 00000000000001cb RCX: 0000000000000000 [ 186.852280][ T8034] RDX: 000000006016c300 RSI: 00000000f54365b0 RDI: 00000000f7061736 [ 186.852287][ T8034] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.852293][ T8034] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 186.852300][ T8034] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.852314][ T8034] [ 186.932257][ T5097] Bluetooth: Wrong link type (-22) [ 186.989792][ T8041] netlink: 16 bytes leftover after parsing attributes in process `syz.3.592'. [ 187.232859][ T8048] FAULT_INJECTION: forcing a failure. [ 187.232859][ T8048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.232906][ T8048] CPU: 1 UID: 0 PID: 8048 Comm: syz.0.591 Not tainted syzkaller #0 PREEMPT(full) [ 187.232920][ T8048] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.232938][ T8048] Call Trace: [ 187.232943][ T8048] [ 187.232948][ T8048] dump_stack_lvl+0x100/0x190 [ 187.232967][ T8048] should_fail_ex.cold+0x5/0xa [ 187.232982][ T8048] _copy_from_user+0x2e/0xd0 [ 187.232999][ T8048] get_compat_msghdr+0xb3/0x480 [ 187.233013][ T8048] ? __pfx_get_compat_msghdr+0x10/0x10 [ 187.233033][ T8048] ___sys_sendmsg+0x1b6/0x1e0 [ 187.233049][ T8048] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.233070][ T8048] ? find_held_lock+0x2b/0x80 [ 187.233093][ T8048] __sys_sendmsg+0x160/0x210 [ 187.233105][ T8048] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.233119][ T8048] ? __pfx_ksys_write+0x10/0x10 [ 187.233135][ T8048] __do_fast_syscall_32+0x13a/0x8b0 [ 187.233150][ T8048] ? lockdep_hardirqs_on+0x7d/0x110 [ 187.233165][ T8048] do_fast_syscall_32+0x32/0x70 [ 187.233180][ T8048] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.233194][ T8048] RIP: 0023:0xf703efec [ 187.233208][ T8048] Code: Unable to access opcode bytes at 0xf703efc2. [ 187.233213][ T8048] RSP: 002b:00000000f53eb50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 187.233225][ T8048] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000280 [ 187.233232][ T8048] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.233238][ T8048] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.233245][ T8048] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 187.233256][ T8048] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.233270][ T8048] [ 187.444946][ T8041] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input116 [ 187.919782][ T25] libceph: connect (1)[c::]:6789 error -101 [ 187.920204][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 188.075219][ T8070] FAULT_INJECTION: forcing a failure. [ 188.075219][ T8070] name failslab, interval 1, probability 0, space 0, times 0 [ 188.075244][ T8070] CPU: 1 UID: 0 PID: 8070 Comm: syz.0.599 Not tainted syzkaller #0 PREEMPT(full) [ 188.075257][ T8070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.075265][ T8070] Call Trace: [ 188.075269][ T8070] [ 188.075274][ T8070] dump_stack_lvl+0x100/0x190 [ 188.075295][ T8070] should_fail_ex.cold+0x5/0xa [ 188.075312][ T8070] should_failslab+0xc2/0x120 [ 188.075331][ T8070] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 188.075347][ T8070] ? __d_alloc+0x35/0xa50 [ 188.075366][ T8070] __d_alloc+0x35/0xa50 [ 188.075383][ T8070] path_from_stashed+0x431/0x760 [ 188.075403][ T8070] pidfs_alloc_file+0xf8/0x290 [ 188.075419][ T8070] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 188.075437][ T8070] pidfd_prepare+0x107/0x1b0 [ 188.075449][ T8070] __ia32_sys_pidfd_open+0x105/0x1a0 [ 188.075464][ T8070] ? __pfx___ia32_sys_pidfd_open+0x10/0x10 [ 188.075482][ T8070] __do_fast_syscall_32+0x13a/0x8b0 [ 188.075497][ T8070] ? lockdep_hardirqs_on+0x7d/0x110 [ 188.075512][ T8070] do_fast_syscall_32+0x32/0x70 [ 188.075527][ T8070] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.075542][ T8070] RIP: 0023:0xf703efec [ 188.075555][ T8070] Code: Unable to access opcode bytes at 0xf703efc2. [ 188.075560][ T8070] RSP: 002b:00000000f542d4dc EFLAGS: 00000296 ORIG_RAX: 00000000000001b2 [ 188.075571][ T8070] RAX: ffffffffffffffda RBX: 00000000000001de RCX: 0000000000000000 [ 188.075578][ T8070] RDX: 000000002f8df600 RSI: 00000000f542d5b0 RDI: 00000000f7061736 [ 188.075585][ T8070] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.075592][ T8070] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 188.075598][ T8070] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.075612][ T8070] [ 188.181143][ T25] libceph: connect (1)[c::]:6789 error -101 [ 188.184612][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 188.698204][ T25] libceph: connect (1)[c::]:6789 error -101 [ 188.698751][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 188.805993][ T8060] ceph: No mds server is up or the cluster is laggy [ 188.884455][ T8083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.601'. [ 188.955008][ T8087] FAULT_INJECTION: forcing a failure. [ 188.955008][ T8087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.955034][ T8087] CPU: 2 UID: 0 PID: 8087 Comm: syz.3.602 Not tainted syzkaller #0 PREEMPT(full) [ 188.955047][ T8087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.955055][ T8087] Call Trace: [ 188.955060][ T8087] [ 188.955065][ T8087] dump_stack_lvl+0x100/0x190 [ 188.955085][ T8087] should_fail_ex.cold+0x5/0xa [ 188.955101][ T8087] _copy_from_iter+0x1f4/0x1690 [ 188.955122][ T8087] ? __pfx__copy_from_iter+0x10/0x10 [ 188.955140][ T8087] ? aa_sk_perm+0x389/0xab0 [ 188.955153][ T8087] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 188.955171][ T8087] ? __pfx_aa_sk_perm+0x10/0x10 [ 188.955185][ T8087] hci_sock_sendmsg+0x4a1/0x26a0 [ 188.955200][ T8087] ? aa_sock_msg_perm+0x11e/0x200 [ 188.955217][ T8087] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 188.955229][ T8087] ? apparmor_socket_sendmsg+0x165/0x280 [ 188.955250][ T8087] sock_write_iter+0x53a/0x5b0 [ 188.955265][ T8087] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 188.955277][ T8087] ? __pfx_sock_write_iter+0x10/0x10 [ 188.955295][ T8087] ? bpf_lsm_file_permission+0x9/0x10 [ 188.955313][ T8087] ? security_file_permission+0x76/0x210 [ 188.955327][ T8087] ? rw_verify_area+0xce/0x6d0 [ 188.955341][ T8087] vfs_write+0x6af/0x1050 [ 188.955355][ T8087] ? __pfx_sock_write_iter+0x10/0x10 [ 188.955371][ T8087] ? __pfx_vfs_write+0x10/0x10 [ 188.955384][ T8087] ? find_held_lock+0x2b/0x80 [ 188.955407][ T8087] ksys_write+0x1f8/0x250 [ 188.955421][ T8087] ? __pfx_ksys_write+0x10/0x10 [ 188.955434][ T8087] ? ksys_write+0x1ac/0x250 [ 188.955447][ T8087] ? __pfx_ksys_write+0x10/0x10 [ 188.955464][ T8087] __do_fast_syscall_32+0x13a/0x8b0 [ 188.955480][ T8087] ? lockdep_hardirqs_on+0x7d/0x110 [ 188.955495][ T8087] do_fast_syscall_32+0x32/0x70 [ 188.955511][ T8087] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.955526][ T8087] RIP: 0023:0xf6ffefec [ 188.955539][ T8087] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 188.955545][ T8087] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 188.955556][ T8087] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000240 [ 188.955564][ T8087] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.955571][ T8087] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.955577][ T8087] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 188.955584][ T8087] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.955598][ T8087] [ 189.770008][ T8101] binder: 8100:8101 ioctl c018620c 80000200 returned -22 [ 190.014739][ T8106] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 190.014758][ T8106] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 190.014944][ T8106] vhci_hcd vhci_hcd.0: Device attached [ 190.241618][ T5826] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 190.307307][ T5826] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 190.512719][ T8117] netlink: 164 bytes leftover after parsing attributes in process `syz.3.610'. [ 190.909291][ T8107] vhci_hcd: connection reset by peer [ 190.932034][ T5551] vhci_hcd vhci_hcd.0: stop threads [ 190.932155][ T5551] vhci_hcd vhci_hcd.0: release socket [ 190.932400][ T5551] vhci_hcd vhci_hcd.0: disconnect device [ 191.029286][ T8127] syz_tun: entered allmulticast mode [ 191.031519][ T8127] FAULT_INJECTION: forcing a failure. [ 191.031519][ T8127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.031540][ T8127] CPU: 3 UID: 0 PID: 8127 Comm: syz.1.614 Not tainted syzkaller #0 PREEMPT(full) [ 191.031552][ T8127] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.031560][ T8127] Call Trace: [ 191.031564][ T8127] [ 191.031569][ T8127] dump_stack_lvl+0x100/0x190 [ 191.031588][ T8127] should_fail_ex.cold+0x5/0xa [ 191.031603][ T8127] _copy_to_user+0x32/0xd0 [ 191.031621][ T8127] simple_read_from_buffer+0xcb/0x170 [ 191.031637][ T8127] proc_fail_nth_read+0x1af/0x230 [ 191.031652][ T8127] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.031666][ T8127] ? rw_verify_area+0xce/0x6d0 [ 191.031678][ T8127] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.031696][ T8127] vfs_read+0x1e4/0xb40 [ 191.031710][ T8127] ? lock_acquire+0x1d1/0x380 [ 191.031738][ T8127] ? __fget_files+0x34/0x3d0 [ 191.031753][ T8127] ? __pfx_vfs_read+0x10/0x10 [ 191.031765][ T8127] ? find_held_lock+0x2b/0x80 [ 191.031778][ T8127] ? __fget_files+0x215/0x3d0 [ 191.031794][ T8127] ? __fget_files+0x21f/0x3d0 [ 191.031812][ T8127] ksys_read+0x12a/0x250 [ 191.031825][ T8127] ? __pfx_ksys_read+0x10/0x10 [ 191.031842][ T8127] do_int80_emulation+0x166/0x650 [ 191.031860][ T8127] asm_int80_emulation+0x1a/0x20 [ 191.031871][ T8127] RIP: 0023:0xf71775ab [ 191.031880][ T8127] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 191.031891][ T8127] RSP: 002b:00000000f54364bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 191.031902][ T8127] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54365d0 [ 191.031910][ T8127] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 191.031916][ T8127] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 191.031922][ T8127] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 191.031928][ T8127] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 191.031942][ T8127] [ 191.041461][ T8126] syz_tun: left allmulticast mode [ 191.624525][ T8136] netlink: 16 bytes leftover after parsing attributes in process `syz.0.616'. [ 192.136826][ T8136] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input118 [ 192.413963][ T8146] FAULT_INJECTION: forcing a failure. [ 192.413963][ T8146] name failslab, interval 1, probability 0, space 0, times 0 [ 192.413986][ T8146] CPU: 2 UID: 0 PID: 8146 Comm: syz.0.620 Not tainted syzkaller #0 PREEMPT(full) [ 192.413999][ T8146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.414006][ T8146] Call Trace: [ 192.414010][ T8146] [ 192.414015][ T8146] dump_stack_lvl+0x100/0x190 [ 192.414036][ T8146] should_fail_ex.cold+0x5/0xa [ 192.414051][ T8146] should_failslab+0xc2/0x120 [ 192.414069][ T8146] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 192.414086][ T8146] ? __d_alloc+0x35/0xa50 [ 192.414104][ T8146] __d_alloc+0x35/0xa50 [ 192.414122][ T8146] path_from_stashed+0x431/0x760 [ 192.414141][ T8146] pidfs_alloc_file+0xf8/0x290 [ 192.414157][ T8146] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 192.414175][ T8146] pidfd_prepare+0x107/0x1b0 [ 192.414187][ T8146] __ia32_sys_pidfd_open+0x105/0x1a0 [ 192.414201][ T8146] ? __pfx___ia32_sys_pidfd_open+0x10/0x10 [ 192.414219][ T8146] __do_fast_syscall_32+0x13a/0x8b0 [ 192.414239][ T8146] ? lockdep_hardirqs_on+0x7d/0x110 [ 192.414254][ T8146] do_fast_syscall_32+0x32/0x70 [ 192.414269][ T8146] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.414284][ T8146] RIP: 0023:0xf703efec [ 192.414297][ T8146] Code: Unable to access opcode bytes at 0xf703efc2. [ 192.414303][ T8146] RSP: 002b:00000000f542d4dc EFLAGS: 00000296 ORIG_RAX: 00000000000001b2 [ 192.414315][ T8146] RAX: ffffffffffffffda RBX: 00000000000001ed RCX: 0000000000000000 [ 192.414322][ T8146] RDX: 000000002f8df600 RSI: 00000000f542d5b0 RDI: 00000000f7061736 [ 192.414329][ T8146] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.414336][ T8146] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 192.414343][ T8146] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.414356][ T8146] [ 192.686386][ T8148] FAULT_INJECTION: forcing a failure. [ 192.686386][ T8148] name failslab, interval 1, probability 0, space 0, times 0 [ 192.686417][ T8148] CPU: 2 UID: 0 PID: 8148 Comm: syz.3.621 Not tainted syzkaller #0 PREEMPT(full) [ 192.686440][ T8148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.686451][ T8148] Call Trace: [ 192.686458][ T8148] [ 192.686466][ T8148] dump_stack_lvl+0x100/0x190 [ 192.686494][ T8148] should_fail_ex.cold+0x5/0xa [ 192.686519][ T8148] should_failslab+0xc2/0x120 [ 192.686549][ T8148] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 192.686575][ T8148] ? __d_alloc+0x35/0xa50 [ 192.686602][ T8148] __d_alloc+0x35/0xa50 [ 192.686632][ T8148] path_from_stashed+0x431/0x760 [ 192.686667][ T8148] pidfs_alloc_file+0xf8/0x290 [ 192.686691][ T8148] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 192.686723][ T8148] pidfd_prepare+0x107/0x1b0 [ 192.686743][ T8148] __ia32_sys_pidfd_open+0x105/0x1a0 [ 192.686766][ T8148] ? __pfx___ia32_sys_pidfd_open+0x10/0x10 [ 192.686794][ T8148] __do_fast_syscall_32+0x13a/0x8b0 [ 192.686824][ T8148] ? lockdep_hardirqs_on+0x7d/0x110 [ 192.686845][ T8148] do_fast_syscall_32+0x32/0x70 [ 192.686865][ T8148] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.686887][ T8148] RIP: 0023:0xf6ffefec [ 192.686907][ T8148] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 192.686915][ T8148] RSP: 002b:00000000f53ed4dc EFLAGS: 00000296 ORIG_RAX: 00000000000001b2 [ 192.686934][ T8148] RAX: ffffffffffffffda RBX: 0000000000000211 RCX: 0000000000000000 [ 192.686946][ T8148] RDX: 0000000006ddc200 RSI: 00000000f53ed5b0 RDI: 00000000f7021736 [ 192.686957][ T8148] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.686967][ T8148] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 192.686978][ T8148] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.687000][ T8148] [ 192.824712][ T8152] FAULT_INJECTION: forcing a failure. [ 192.824712][ T8152] name failslab, interval 1, probability 0, space 0, times 0 [ 192.824734][ T8152] CPU: 0 UID: 0 PID: 8152 Comm: syz.3.622 Not tainted syzkaller #0 PREEMPT(full) [ 192.824747][ T8152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.824754][ T8152] Call Trace: [ 192.824758][ T8152] [ 192.824763][ T8152] dump_stack_lvl+0x100/0x190 [ 192.824785][ T8152] should_fail_ex.cold+0x5/0xa [ 192.824823][ T8152] should_failslab+0xc2/0x120 [ 192.824845][ T8152] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 192.824862][ T8152] ? __d_alloc+0x35/0xa50 [ 192.824882][ T8152] __d_alloc+0x35/0xa50 [ 192.824902][ T8152] path_from_stashed+0x431/0x760 [ 192.824922][ T8152] pidfs_alloc_file+0xf8/0x290 [ 192.824939][ T8152] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 192.824959][ T8152] pidfd_prepare+0x107/0x1b0 [ 192.824971][ T8152] __ia32_sys_pidfd_open+0x105/0x1a0 [ 192.824985][ T8152] ? __pfx___ia32_sys_pidfd_open+0x10/0x10 [ 192.825003][ T8152] __do_fast_syscall_32+0x13a/0x8b0 [ 192.825019][ T8152] ? lockdep_hardirqs_on+0x7d/0x110 [ 192.825034][ T8152] do_fast_syscall_32+0x32/0x70 [ 192.825049][ T8152] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.825064][ T8152] RIP: 0023:0xf6ffefec [ 192.825079][ T8152] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 192.825085][ T8152] RSP: 002b:00000000f53ed4dc EFLAGS: 00000296 ORIG_RAX: 00000000000001b2 [ 192.825097][ T8152] RAX: ffffffffffffffda RBX: 0000000000000213 RCX: 0000000000000000 [ 192.825105][ T8152] RDX: 0000000006ddc200 RSI: 00000000f53ed5b0 RDI: 00000000f7021736 [ 192.825112][ T8152] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.825119][ T8152] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 192.825125][ T8152] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.825139][ T8152] [ 192.924665][ T8157] netlink: 16 bytes leftover after parsing attributes in process `syz.2.624'. [ 192.960084][ T8153] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 192.960340][ T8153] block device autoloading is deprecated and will be removed. [ 193.034283][ T8165] syz_tun: entered allmulticast mode [ 193.067324][ T8164] syz_tun: left allmulticast mode [ 193.392974][ T8157] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input120 [ 193.591496][ T8180] 9p: Bad value for 'rfdno' [ 193.834349][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.835247][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.870436][ T30] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 193.942182][ T8183] FAULT_INJECTION: forcing a failure. [ 193.942182][ T8183] name failslab, interval 1, probability 0, space 0, times 0 [ 193.942205][ T8183] CPU: 0 UID: 0 PID: 8183 Comm: syz.0.632 Not tainted syzkaller #0 PREEMPT(full) [ 193.942218][ T8183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.942224][ T8183] Call Trace: [ 193.942235][ T8183] [ 193.942240][ T8183] dump_stack_lvl+0x100/0x190 [ 193.942260][ T8183] should_fail_ex.cold+0x5/0xa [ 193.942276][ T8183] should_failslab+0xc2/0x120 [ 193.942294][ T8183] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 193.942311][ T8183] ? __d_alloc+0x35/0xa50 [ 193.942329][ T8183] __d_alloc+0x35/0xa50 [ 193.942347][ T8183] path_from_stashed+0x431/0x760 [ 193.942367][ T8183] pidfs_alloc_file+0xf8/0x290 [ 193.942382][ T8183] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 193.942400][ T8183] pidfd_prepare+0x107/0x1b0 [ 193.942412][ T8183] __ia32_sys_pidfd_open+0x105/0x1a0 [ 193.942426][ T8183] ? __pfx___ia32_sys_pidfd_open+0x10/0x10 [ 193.942444][ T8183] __do_fast_syscall_32+0x13a/0x8b0 [ 193.942459][ T8183] ? lockdep_hardirqs_on+0x7d/0x110 [ 193.942474][ T8183] do_fast_syscall_32+0x32/0x70 [ 193.942489][ T8183] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 193.942503][ T8183] RIP: 0023:0xf703efec [ 193.942516][ T8183] Code: Unable to access opcode bytes at 0xf703efc2. [ 193.942521][ T8183] RSP: 002b:00000000f542d4dc EFLAGS: 00000296 ORIG_RAX: 00000000000001b2 [ 193.942532][ T8183] RAX: ffffffffffffffda RBX: 00000000000001fa RCX: 0000000000000000 [ 193.942539][ T8183] RDX: 000000002f8df600 RSI: 00000000f542d5b0 RDI: 00000000f7061736 [ 193.942546][ T8183] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 193.942552][ T8183] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 193.942559][ T8183] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 193.942573][ T8183] [ 194.011131][ T30] usb 7-1: device descriptor read/64, error -71 [ 194.031794][ T8186] netlink: 20 bytes leftover after parsing attributes in process `syz.0.633'. [ 194.277264][ T30] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 194.427259][ T30] usb 7-1: device descriptor read/64, error -71 [ 194.544217][ T30] usb usb7-port1: attempt power cycle [ 194.694905][ T8189] FAULT_INJECTION: forcing a failure. [ 194.694905][ T8189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.694936][ T8189] CPU: 0 UID: 0 PID: 8189 Comm: syz.3.634 Not tainted syzkaller #0 PREEMPT(full) [ 194.694957][ T8189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 194.694967][ T8189] Call Trace: [ 194.694973][ T8189] [ 194.694981][ T8189] dump_stack_lvl+0x100/0x190 [ 194.695010][ T8189] should_fail_ex.cold+0x5/0xa [ 194.695033][ T8189] _copy_from_iter+0x1f4/0x1690 [ 194.695062][ T8189] ? __asan_memset+0x23/0x50 [ 194.695084][ T8189] ? __pfx__copy_from_iter+0x10/0x10 [ 194.695110][ T8189] ? __pfx___alloc_skb+0x10/0x10 [ 194.695148][ T8189] netlink_sendmsg+0x808/0xda0 [ 194.695177][ T8189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.695206][ T8189] ? apparmor_socket_sendmsg+0x165/0x280 [ 194.695237][ T8189] ____sys_sendmsg+0xa4d/0xbe0 [ 194.695258][ T8189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.695286][ T8189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.695318][ T8189] ___sys_sendmsg+0x190/0x1e0 [ 194.695343][ T8189] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.695378][ T8189] ? find_held_lock+0x2b/0x80 [ 194.695414][ T8189] __sys_sendmsg+0x160/0x210 [ 194.695431][ T8189] ? __pfx___sys_sendmsg+0x10/0x10 [ 194.695461][ T8189] __do_fast_syscall_32+0x13a/0x8b0 [ 194.695485][ T8189] ? lockdep_hardirqs_on+0x7d/0x110 [ 194.695508][ T8189] do_fast_syscall_32+0x32/0x70 [ 194.695531][ T8189] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 194.695554][ T8189] RIP: 0023:0xf6ffefec [ 194.695573][ T8189] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 194.695580][ T8189] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 194.695598][ T8189] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000240 [ 194.695609][ T8189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 194.695619][ T8189] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 194.695629][ T8189] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 194.695639][ T8189] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 194.695661][ T8189] [ 194.786136][ T8185] infiniband syz1: set down [ 194.791715][ T8185] infiniband syz1: added veth1_virt_wifi [ 194.814574][ T8185] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 194.814684][ T8185] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 194.814722][ T8185] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 194.844561][ T8185] RDS/IB: syz1: added [ 194.844855][ T8185] smc: adding ib device syz1 with port count 1 [ 194.844929][ T8185] smc: ib device syz1 port 1 has no pnetid [ 194.878153][ T30] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 194.907693][ T30] usb 7-1: device descriptor read/8, error -71 [ 195.137260][ T30] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 195.158138][ T30] usb 7-1: device descriptor read/8, error -71 [ 195.267848][ T30] usb usb7-port1: unable to enumerate USB device [ 195.345637][ T8195] netlink: 'syz.3.636': attribute type 1 has an invalid length. [ 195.364676][ T8195] bond1: entered promiscuous mode [ 195.364906][ T8195] 8021q: adding VLAN 0 to HW filter on device bond1 [ 195.417349][ T5826] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 195.419447][ T8199] FAULT_INJECTION: forcing a failure. [ 195.419447][ T8199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.419467][ T8199] CPU: 2 UID: 0 PID: 8199 Comm: syz.0.637 Not tainted syzkaller #0 PREEMPT(full) [ 195.419480][ T8199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.419486][ T8199] Call Trace: [ 195.419491][ T8199] [ 195.419495][ T8199] dump_stack_lvl+0x100/0x190 [ 195.419514][ T8199] should_fail_ex.cold+0x5/0xa [ 195.419529][ T8199] _copy_to_user+0x32/0xd0 [ 195.419547][ T8199] simple_read_from_buffer+0xcb/0x170 [ 195.419563][ T8199] proc_fail_nth_read+0x1af/0x230 [ 195.419577][ T8199] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.419592][ T8199] ? rw_verify_area+0xce/0x6d0 [ 195.419603][ T8199] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.419617][ T8199] vfs_read+0x1e4/0xb40 [ 195.419630][ T8199] ? lock_acquire+0x1d1/0x380 [ 195.419652][ T8199] ? __fget_files+0x34/0x3d0 [ 195.419666][ T8199] ? __pfx_vfs_read+0x10/0x10 [ 195.419678][ T8199] ? find_held_lock+0x2b/0x80 [ 195.419692][ T8199] ? __fget_files+0x215/0x3d0 [ 195.419708][ T8199] ? __fget_files+0x21f/0x3d0 [ 195.419725][ T8199] ksys_read+0x12a/0x250 [ 195.419738][ T8199] ? __pfx_ksys_read+0x10/0x10 [ 195.419755][ T8199] do_int80_emulation+0x166/0x650 [ 195.419772][ T8199] asm_int80_emulation+0x1a/0x20 [ 195.419783][ T8199] RIP: 0023:0xf71775ab [ 195.419793][ T8199] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 195.419803][ T8199] RSP: 002b:00000000f542d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 195.419814][ T8199] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f542d5d0 [ 195.419821][ T8199] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 195.419828][ T8199] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.419834][ T8199] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 195.419840][ T8199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.419854][ T8199] [ 195.457549][ T8201] syz.0.638 uses obsolete (PF_INET,SOCK_PACKET) [ 196.515816][ T8217] openvswitch: netlink: Flow actions attr not present in new flow. [ 196.549544][ T8219] netlink: 16 bytes leftover after parsing attributes in process `syz.2.644'. [ 196.764234][ T8228] jffs2: notice: (8228) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 196.803916][ T5740] ------------[ cut here ]------------ [ 196.803930][ T5740] kernel BUG at fs/jffs2/nodelist.c:462! [ 196.803949][ T5740] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 196.811785][ T5740] CPU: 3 UID: 0 PID: 5740 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 196.816675][ T5740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.820276][ T5740] RIP: 0010:jffs2_del_ino_cache+0x24f/0x2c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 196.822678][ T5740] Code: 4c 89 e2 49 8b 5e 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 71 49 89 1c 24 e9 42 ff ff ff e8 42 8d 82 fe 90 <0f> 0b e8 3a 0b f5 fe e9 5b fe ff ff e8 00 0b f5 fe e9 59 ff ff ff [ 196.830707][ T5740] RSP: 0000:ffffc9000443fa78 EFLAGS: 00010293 [ 196.833071][ T5740] RAX: 0000000000000000 RBX: ffff888047a3c000 RCX: 0000000000000000 [ 196.836189][ T5740] RDX: ffff888028da2580 RSI: ffffffff838918ae RDI: ffff8880728cdee0 [ 196.839342][ T5740] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffed1008f4786c [ 196.842544][ T5740] R10: ffff888047a3c363 R11: 0000000000000000 R12: ffff88804ff6bc80 [ 196.845736][ T5740] R13: dffffc0000000000 R14: ffff8880728cdec0 R15: ffff88804ff6bd30 [ 196.848926][ T5740] FS: 0000000000000000(0000) GS:ffff888096c52000(0063) knlGS:0000000057643480 [ 196.852455][ T5740] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 196.855010][ T5740] CR2: 000000005765720c CR3: 00000000644f7000 CR4: 0000000000352ef0 [ 196.858218][ T5740] Call Trace: [ 196.859592][ T5740] [ 196.860841][ T5740] jffs2_do_clear_inode+0x3ca/0x470 [ 196.862952][ T5740] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 196.865085][ T5740] evict+0x3c2/0xad0 [ 196.866341][ T5740] ? list_lru_del+0xba/0x2f0 [ 196.867814][ T5740] ? list_lru_del+0xba/0x2f0 [ 196.869280][ T5740] ? __pfx_evict+0x10/0x10 [ 196.870725][ T5740] ? do_raw_spin_unlock+0x145/0x1e0 [ 196.872375][ T5740] ? find_held_lock+0x2b/0x80 [ 196.873864][ T5740] ? find_held_lock+0x2b/0x80 [ 196.875344][ T5740] dispose_list+0x117/0x1e0 [ 196.876779][ T5740] evict_inodes+0x473/0x710 [ 196.878203][ T5740] ? __pfx_evict_inodes+0x10/0x10 [ 196.879770][ T5740] ? sync_blockdev+0x51/0x70 [ 196.881272][ T5740] generic_shutdown_super+0xc8/0x360 [ 196.882916][ T5740] kill_mtd_super+0x1d/0x80 [ 196.884379][ T5740] jffs2_kill_sb+0x7c/0xb0 [ 196.885779][ T5740] deactivate_locked_super+0xbd/0x130 [ 196.887445][ T5740] deactivate_super+0xea/0x110 [ 196.888956][ T5740] cleanup_mnt+0x21f/0x450 [ 196.890364][ T5740] task_work_run+0x150/0x240 [ 196.891787][ T5740] ? __pfx_task_work_run+0x10/0x10 [ 196.893337][ T5740] exit_to_user_mode_loop+0x1d8/0x700 [ 196.895066][ T5740] ? rcu_is_watching+0x13/0xc0 [ 196.896586][ T5740] __do_fast_syscall_32+0x59f/0x8b0 [ 196.898208][ T5740] do_fast_syscall_32+0x32/0x70 [ 196.899737][ T5740] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 196.901746][ T5740] RIP: 0023:0xf6ffefec [ 196.903036][ T5740] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 196.909321][ T5740] RSP: 002b:00000000fffba868 EFLAGS: 00000292 ORIG_RAX: 0000000000000034 [ 196.911968][ T5740] RAX: 0000000000000000 RBX: 00000000fffba910 RCX: 0000000000000009 [ 196.914441][ T5740] RDX: 00000000f73c8ff4 RSI: 00000000f7201699 RDI: 00000000fffbb9a4 [ 196.917114][ T5740] RBP: 00000000fffba910 R08: 0000000000000000 R09: 0000000000000000 [ 196.919733][ T5740] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 196.923224][ T5740] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 196.926654][ T5740] [ 196.927977][ T5740] Modules linked in: [ 196.929936][ T5740] ---[ end trace 0000000000000000 ]--- [ 196.932443][ T5740] RIP: 0010:jffs2_del_ino_cache+0x24f/0x2c0 [ 196.932476][ T5740] Code: 4c 89 e2 49 8b 5e 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 71 49 89 1c 24 e9 42 ff ff ff e8 42 8d 82 fe 90 <0f> 0b e8 3a 0b f5 fe e9 5b fe ff ff e8 00 0b f5 fe e9 59 ff ff ff [ 196.932493][ T5740] RSP: 0000:ffffc9000443fa78 EFLAGS: 00010293 [ 196.932509][ T5740] RAX: 0000000000000000 RBX: ffff888047a3c000 RCX: 0000000000000000 [ 196.932520][ T5740] RDX: ffff888028da2580 RSI: ffffffff838918ae RDI: ffff8880728cdee0 [ 196.932531][ T5740] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffed1008f4786c [ 196.932543][ T5740] R10: ffff888047a3c363 R11: 0000000000000000 R12: ffff88804ff6bc80 [ 196.932554][ T5740] R13: dffffc0000000000 R14: ffff8880728cdec0 R15: ffff88804ff6bd30 [ 196.932565][ T5740] FS: 0000000000000000(0000) GS:ffff888096c52000(0063) knlGS:0000000057643480 [ 196.932627][ T5740] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 196.932641][ T5740] CR2: 000000005765720c CR3: 00000000644f7000 CR4: 0000000000352ef0 [ 196.932654][ T5740] Kernel panic - not syncing: Fatal exception [ 196.972001][ T5740] Kernel Offset: disabled [ 196.974177][ T5740] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:26:07 Registers: info registers vcpu 0 CPU#0 RAX=000000000046b0dc RBX=ffffffff8ea91580 RCX=ffffffff8bd0c215 RDX=0000000000000001 RSI=ffffffff8c624000 RDI=ffffffff81e0122e RBP=fffffbfff1d522b0 RSP=ffffffff8ea07cf0 R8 =0000000000000000 R9 =ffffed10056467bd R10=ffff88802b233deb R11=ffffffff81d6d7f9 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d40fa2 R15=dffffc0000000000 RIP=ffffffff8bd0a74f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096952000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5433edc CR3=00000000524d2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000005edcec RBX=ffff88801cf1cb00 RCX=ffffffff8bd0c215 RDX=0000000000000001 RSI=ffffffff8c624000 RDI=ffffffff81e0122e RBP=ffffed10039e3960 RSP=ffffc9000047fe00 R8 =0000000000000000 R9 =ffffed10056667bd R10=ffff88802b333deb R11=ffffffff81d6d7f9 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=dffffc0000000000 RIP=ffffffff8bd0a74f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7436288 CR3=000000004e0df000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000083c03000 Opmask01=000000000000003f Opmask02=000000001fe7ffbf Opmask03=0000000000000040 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b4697b68d0 000055b4697b68d0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b469671a50 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b469671a50 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9e77f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000ff0000 000000000000ff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 545e565554542d34 27254b09160b0210 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5bfcf3cc544e8da9 646431d5564a6dbe ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007465676461 4720770000302e74 65676461672d7761 723d524556495244 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000049585a595c 471d4a00000d1349 585a595c5a104a5c 4f00524556495244 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b5bee2b7bfe1bfb0 eeafb1e95f9c80e1 ffa097ecbf8ae6a0 85edaf97e18da0e0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00b5a1e18396ea9b 85e8808de3978dee 9485ec9b87e68a89 ed9189ee9b9cebbb ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8aefa688e395b6e6 8994e993a1e290b5 e580a0e0b5bee2b7 bfe1bfb0eeafb1e9 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f9c80e1ffa097ec bf8ae6a085edaf97 e18da0e0b3bde1bb 89efa19fe7bda0e1 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a4bfee819be38eb6 e4a69beebc8ae8b0 8ee3a1b9efa098ed 99a8ea8b81ebbaa2 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000312d002a002d 00002e62322d0933 0000000000000061 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=8000000078d8b867 RCX=8000000078d8b867 RDX=ffff88804c392008 RSI=0000000033801000 RDI=ffff8880257ac980 RBP=ffff88804c392008 RSP=ffffc900036dfa18 R8 =0000000000000001 R9 =0000000000002000 R10=0000000000000000 R11=0000000000000000 R12=ffff8880257ac980 R13=dffffc0000000000 R14=0000000000000001 R15=ffff8880146a4c80 RIP=ffffffff828a8636 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096b52000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000033801ff8 CR3=00000000728ca000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000049 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b00b15 RDI=ffffffff9bc654a0 RBP=ffffffff9bc65460 RSP=ffffc9000443f218 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000049 R14=000000000000000f R15=ffffc9000443f530 RIP=ffffffff85b00b3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096c52000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005765720c CR3=00000000644f7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000