last executing test programs: 10.364426012s ago: executing program 0 (id=725): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002680), r1) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000026c0)={0x3c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000040)={0xa, 0x4e20, 0xfff, @dev={0xfe, 0x80, '\x00', 0x12}, 0x3}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="4cffb355d6670f402f803c015a77074a7e17b026ddd2bd9ca67d8d21aab415273a26a47e463b13f17b92f57a9b729aa4f5b66fe3a6658e44f8ffc844b8be2573e9a8bc9911", 0x45}, {&(0x7f00000013c0)="fcd740a7fddf2f7f40b26da102f68f6fe2744869e54140fe4a1866c91c0fd6902e9f0e8f89343a74dbbcd2d6d7e7714d746904ec5cd6a16077bc499fb625cfd11a1a0f654a8381cae6e10cac0889001e1db8b354f59de8802c050ec4d3a99e467bba2ffacc37a99ec5cf5938d5fbb1f52480f7e5ce3fc6f2785ff83df312eb6c12bb28570831eb58d348d95705876c3fd246d2965ee7a27aa231f8a6ef14bc0bbb42a1f26e97eb844b00cbfe", 0xac}, {&(0x7f0000001480)="669b6ad37e9792001205e1d080975a53b521b1201cb314b08c4649465e72645eb262f91d2061c890e2d80e440c91c1e9d00a1a6678376615eb12d0f040d8afc5e1ddc03d0a3e91fa84b8c0d002d0304cc85ef02acf5c37cdc896e8bbe43be75b30f00cb0340d1d1a6da3b1cdacabe8", 0x6f}, {&(0x7f0000001500)="caa373", 0x3}, {&(0x7f0000001540)="a8d4c056a737caded4951e64b1a6114e988dc21b50451294a7a77ccde0df8a1d68635d9e8e4b590c9c4d60a55bb54c64ac8a2536ab91cd94890e3a67b881c4a4e3026210e4d5", 0x46}], 0x6, &(0x7f0000001600)=[@hoplimit={{0x10, 0x29, 0x34, 0x6}}, @rthdrdstopts={{0x64, 0x29, 0x37, {0x6c, 0x9, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x3, 0x4ae1, [0x4, 0x3, 0x3, 0x0]}}, @hao={0xc9, 0x10, @mcast2}, @pad1, @enc_lim={0x4, 0x1, 0xf5}, @enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0x98}, @jumbo]}}}, @dstopts_2292={{0x8c, 0x29, 0x4, {0x33, 0xe, '\x00', [@ra={0x5, 0x2, 0x200}, @calipso={0x7, 0x58, {0x0, 0x14, 0x6, 0xb, [0x3ff, 0xffffffffffffffff, 0xffffffff00000000, 0xffff, 0x4, 0x1, 0x1, 0xffff, 0x1, 0x3]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}]}}}], 0x100}, 0x80) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]}) 10.043071372s ago: executing program 0 (id=729): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES64], &(0x7f0000000300)='GPL\x00', 0x2, 0x24, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff22, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000000c0), 0x0, 0x0, 0x20000cc, 0x0) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000440000000000000010000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="faffff509889682a22f770000000000000000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="030000000400"/28], 0x50) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) sync_file_range(r0, 0x8001, 0x1, 0x1) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x2000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r7, 0x0, 0xffffffdb) 6.535366162s ago: executing program 0 (id=746): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x4, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r3 = epoll_create1(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_emit_ethernet(0xa7, &(0x7f0000000300)={@local, @random="000600", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "aac4e0", 0x54, 0x2c, 0x0, @dev, @local, {[@routing={0x2b}, @routing={0x4, 0x0, 0x2, 0x6}], {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xff}}}}}}}}}, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x800442d2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000040)={r5}) sendmmsg$unix(r6, &(0x7f00000002c0), 0x32, 0x40004) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r9, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r10, 0x1, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x800) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r3, &(0x7f0000000000)={0xa0000001}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r6, {0xffffa595}}, './file0\x00'}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) sendmsg$NL80211_CMD_SET_STATION(r12, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r13, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1d}}}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x704}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x58f}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x50}}, 0x4000080) ppoll(&(0x7f0000000980)=[{r11, 0x1}], 0x1, 0x0, 0x0, 0x0) 5.960064529s ago: executing program 0 (id=756): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES64], &(0x7f0000000300)='GPL\x00', 0x2, 0x24, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff22, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000000c0), 0x0, 0x0, 0x20000cc, 0x0) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000440000000000000010000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="faffff509889682a22f770000000000000000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="030000000400"/28], 0x50) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) sync_file_range(r0, 0x8001, 0x1, 0x1) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x2000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r7, 0x0, 0xffffffdb) 5.270904903s ago: executing program 1 (id=763): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x69, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1ff) (async) syz_open_dev$video4linux(&(0x7f0000001140), 0xffffffffffffffe7, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) r3 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) (async) r4 = creat(&(0x7f0000000180)='./bus\x00', 0xee) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r3], 0x2b) (async) sendfile(r5, r3, 0x0, 0x4000000053d2) (async) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0) (async) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0x40000) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004b0e2001000ffff00000b00000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ff020000000000000000000000000001fe8000000000000000000000000000aa000000000000000800000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000fffffffffffffdff000000000000000000000000000000000000000001000000fe09000000000000feffffffff7f400002000000000000080000000000000000010006024400050000000000000000000000000000000000000000003c0000000a000000ac1414aa0000000000000000000000000600000004030000000000000200000000000000"], 0xfc}}, 0x8000) (async) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x4e1f, 0x7, @mcast2, 0x8}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="7edb68d7c6437b", 0x7}, {&(0x7f0000000380)="9e91d91a92dc7c8fff658bb539d40add91c99223a7dfe52c1f51218206f5abfd2a012470ad76ccc2981d0f319f624bd852a4d9e66ecc7e9213e1ce98bd8b152fea91cc075fd04e3b09e453b5bb582a6cd2db1442de17d518ceda2c4cc8856f08", 0x60}], 0x2}, 0x20008b88) 4.698765935s ago: executing program 1 (id=767): r0 = syz_clone(0x400, &(0x7f0000000300)="15875c88c48d7ae1800eab1ac75e601d10ecc349228ab5b1f89df7882892113d22a5fba6c74152387b4a3a46286e6f5db14b28c22483c517fe80e88a0dfdcaacfae9e804bba955213b53ef2b5edec614dc5644d650952582c2c51ebeac5bbe7078467a9e40a89700b8bb69acdedb345abb4dd737e88a99b367da9642a7f2bc58c252588df3c992d4101235a9893c22cae4434ee1312722dcc3b16247faf6d1f87ae82e96d7824a5f8541bf50467a006d711dc7ca753771d68aa229441cf5511531a88665ca0acb18088792e814e0ff4f2c7c449d1f00a960d2d1", 0xda, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="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") ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001600)={&(0x7f00000014c0)={0x110, 0x1c, 0x200, 0x70bd29, 0x25dfdbfb, {0x1e}, [@nested={0xc, 0xc7, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @u32=0x5}]}, @typed={0x8, 0xfc, 0x0, 0x0, @pid=r0}, @typed={0x8, 0xf7, 0x0, 0x0, @pid=r1}, @typed={0x14, 0x7d, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x10}}, @generic="8d08f9e769fc2649310de9a680279195ff63a66ec5bf4393e90bdce4dadf1bd6945ec000f76c83ffd744989d1d18a73006eb62aa80c99b3e7749fb582dd37113e57a17698aa9c91a7f2d0a1ad0e176b0ff542802cd90f06926d3706e2a657ad6ae346bad062f272175c87146dd288971f340b7cdaeaf83257039b05cce872432c274850dcc45cf4e7c65620b4106ad2b487d7bc8da98a114685e0c2b7682ad27731260da610bf75d8023d9f43533f6135fc94cbbeb06abf599f75efc7a", @typed={0x9, 0xbd, 0x0, 0x0, @str='syz1\x00'}]}, 0x110}, 0x1, 0x0, 0x0, 0x40800}, 0x40010) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x81, 0x4a2589e6e356a595) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r3, &(0x7f0000000b80)=[{&(0x7f00000003c0)="bc", 0x1}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000002, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) 4.340655832s ago: executing program 3 (id=772): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f016, 0x4}) ioctl$KVM_CREATE_VM(r2, 0x40086806, 0x21) read$FUSE(r2, &(0x7f0000002080)={0x2020}, 0x2020) write$P9_RLOCK(r2, &(0x7f0000000000)={0x8, 0x35, 0x1, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r4, 0x64e90, 0x16ac1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BCAST_FLOOD={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) 4.100948486s ago: executing program 2 (id=774): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpriority(0x2, r1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0900000006000000040000"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000000340)={0x40, r3, 0xd0b, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x800004, 0x4}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x26}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040840}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r2}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f0000000040)={0x0, 0x5, 0x248}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x400854d5, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x8, 0x60, 0xfe, 0x7}]}) close_range(r6, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 4.035971376s ago: executing program 2 (id=775): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r0, @ANYBLOB="53a9ca28b072f6c495a68efc2059503fab1c16ab7bed62bbf6b74c2d26162e5d0698417f052dde1a669d7b967210bd04dd3b4b9ab97ef028883ce33c9576e3600ec86993f775f3d3920eed6ca6b0f56a35a37ffe4ab32173df5a743d7a66c0309c25c93ab4a4ac86525f3996f516d80bf0b9a75ffc024d5f216f78356b334da79777864292dc588d9c189f22cdd28788bf6ab0338b44c44b"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r3, 0xc00c6211, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES16], 0x1c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpgid(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0x1ff, 0x80800) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r7, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f00000005c0), r7, 0x2}}, 0x18) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 4.021856455s ago: executing program 0 (id=776): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_usb_connect(0x4, 0x1db, &(0x7f00000008c0)={{0x12, 0x1, 0x110, 0xfe, 0xed, 0x22, 0x40, 0x5c6, 0x9202, 0x859, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c9, 0x1, 0x1, 0x1, 0x0, 0xf8, "", [{{0x9, 0x4, 0xf5, 0x0, 0x8, 0xf, 0x99, 0x27, 0x0, [@uac_as, @generic={0x5b, 0x31, "a09feb55edbae97713953ff9b1349b96912d78b0e7cfad1c88d45393a0f5cf61d011f79df5b612210e919c4fa24517b50ed8d95992d8247adb95887c19a165516944512e49acde35e19a36d669c88ad5309bd6c2d99d24c159"}], [{{0x9, 0x5, 0x5e9139c19563e15c, 0x3, 0x400, 0xd, 0xe0, 0x7f}}, {{0x9, 0x5, 0x2, 0x1, 0x0, 0x6, 0x1, 0x40, [@generic={0x4, 0xc, "f390"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x5}]}}, {{0x9, 0x5, 0x1, 0x2, 0x10, 0x2, 0x9, 0x3, [@generic={0xd5, 0x21, "803a36ca675472f7e081c580a4ede58de2b0406a575b58b5624c0006fecf6728153c4961adc59d4046a58b73bb108b7ea3825de8dc259b356c73c1c7ad6e231160168ccc13a96b85c63ad73d4e631a9f2b29b4cbab37aa83dd1d683086725b2a86493efeac76618162c0bed516f9b33abacef3b531fed04157f5c4db5fbcd97c8ca0549b4ad28cbeab31f7b7a0f2e8ecb35e4866023508d931d17a9ae87d7eaebc53205fe086f4674fddedb6d7b067a04ad215674d9bb32de42ae7ec0294bcde53dfe4a231b1bfa1a5c58960fb15dd7b63c157"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x7f, 0xea, 0x5}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0xff, 0xaf, 0x15}}, {{0x9, 0x5, 0x1, 0x3, 0x10, 0x34, 0x6, 0x2}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x0, 0x9e, 0xfa, [@generic={0x32, 0x4, "15fdb811dcee1c3ce1a441cb9ca3272d6d1c9f4b12e3ef3da324d36f6a2df57843bb84b0146022de481389692eec6604"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x8, 0x3, 0x0, [@generic={0x2, 0xf}]}}]}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x201, 0x0, 0x6, 0x3e, 0xff}, 0x34, &(0x7f0000000bc0)={0x5, 0xf, 0x34, 0x1, [@generic={0x2f, 0x10, 0x8, "5e2715f80bba10ca2f2a525d13b17be28712734e89ebc917e8fb4c9be663a7006a34fdcd3ffcea8fb070948c"}]}}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f00000004c0)=@x86={0x79, 0x43, 0x27, 0x0, 0x2, 0x5, 0x0, 0x8, 0x2, 0x9, 0x2, 0x7, 0x0, 0x96a7, 0x7, 0x9, 0x27, 0x8, 0x3, '\x00', 0x8, 0x5}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x5, 0x0, 0x7, 0x0, 0xdc, 0x4, 0x6, 0x7, 0x7, 0x9, 0x3, 0x9, 0x0, 0x7, 0x100, 0xf7, 0x5, 0xf4, 0xc, '\x00', 0xfe}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = eventfd2(0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000100)={0x4}) io_setup(0x81, &(0x7f0000000400)=0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$FBIOBLANK(r7, 0x4611, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff00000000017c1200040042800c00018006000600800a0000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x20, 0x1, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x69}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x5800) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001a00010026bd70000000000002002000", @ANYRES32=0x0, @ANYBLOB="0000000008000200fcffffff00000000000001c3239430bfc78ec91af71d4b347ac2183657779e7936d3b0b9502aa34504d5b232f87d0c2bf657a300000000971e8ed5667374282f6d1026bf3c040baffd3da021619553181fa981b69ff1a45a970e8d8fcfad6a720014fb23f5205bc61cca2f0f4f8f9cef257174270d49ad0d6c0e47592a9e8746c92e6115815edc46fe82fc694dd807fd48119401fc40268f6fdf3431baaea85376b951693884ee1af9f1ca3af471b24b351f8812ca0fe58594b9aa2f766ef8e348e1f62b094904360388bf4472d521bdd513bdd2e09f10000cf637ec91ddbf503a"], 0x38}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) read$eventfd(r4, &(0x7f0000000000), 0x8) io_submit(r6, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1fd, r4, 0x0, 0x1f, 0x0, 0x0, 0x1, r4}]) 3.728491346s ago: executing program 1 (id=777): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r0, @ANYBLOB="53a9ca28b072f6c495a68efc2059503fab1c16ab7bed62bbf6b74c2d26162e5d0698417f052dde1a669d7b967210bd04dd3b4b9ab97ef028883ce33c9576e3600ec86993f775f3d3920eed6ca6b0f56a35a37ffe4ab32173df5a743d7a66c0309c25c93ab4a4ac86525f3996f516d80bf0b9a75ffc024d5f216f78356b334da79777864292dc588d9c189f22cdd28788bf6ab0338b44c44b"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r3, 0xc00c6211, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES16], 0x1c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpgid(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0x1ff, 0x80800) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r7, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f00000005c0), r7, 0x2}}, 0x18) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3.358984888s ago: executing program 3 (id=778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x7}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x43f, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}]}, @NFT_MSG_DELCHAIN={0xf8, 0x5, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x84, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6erspan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2cd30efb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6_vti0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x273e36a3}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x58, 0xe, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x8c, 0x3, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xdf61}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x248}, 0x1, 0x0, 0x0, 0x851}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) epoll_create1(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0x0, 0x321, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x404c010) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r6, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r7], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {}, {0xf, 0x1}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc8c4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0x0, 0x1a0, 0xe8, 0xffffffff, 0xffffffff, 0x254, 0x254, 0x254, 0xffffffff, 0x4, &(0x7f00000005c0), {[{{@ip={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x22}, 0xff000000, 0xffffffff, 'lo\x00', 'batadv0\x00', {}, {}, 0x73, 0x2, 0x1}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@inet=@set1={{0x24}, {{0x3, 0x1, 0x4}}}, @common=@icmp={{0x24}, {0x8, "de5a", 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x5, 0x6}, {0x4, 0x0, 0x7}, 0x4, 0x5}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0xff000000, 0xffffffff, 'macvlan1\x00', 'ip6gretap0\x00', {}, {0xff}, 0x2e, 0x3, 0x11}, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@inet=@socket2={{0x24}, 0x2}]}, @REJECT={0x24}}, {{@ip={@broadcast, @broadcast, 0xffffffff, 0xff000000, 'nr0\x00', 'ipvlan0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x90, 0xb4, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x727acf97d1b11a7e}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x344) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0xda) ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) r8 = gettid() sched_setaffinity(r8, 0x8, &(0x7f0000000140)=0x100000000) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r1) 2.626541389s ago: executing program 2 (id=779): syz_emit_ethernet(0x7e, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x4, 0x0, 0x0, 0x6, 0x4, 0x11, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x15}, {[@timestamp_addr={0x44, 0x4, 0x0, 0x1, 0x5}, @timestamp_addr={0x44, 0x3c, 0xed, 0x1, 0x0, [{@multicast1, 0x4}, {}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr=0x64010101, 0xffff4af6}, {@multicast2}, {@dev, 0x4}]}]}}}}}}}, 0x0) 2.488026211s ago: executing program 2 (id=780): syz_emit_ethernet(0x8c, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @remote, {0x17, 0x4, 0x0, 0x4, 0x0, 0x65, 0x6, 0x4, 0x84, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x15}, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x5, [{@multicast1, 0x4}]}, @timestamp_addr={0x44, 0x3c, 0xed, 0x1, 0x0, [{@multicast1, 0x4}, {}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr=0x64010101, 0xffff4af6}, {@multicast2}, {@dev, 0x4}]}]}}, "840000004d7f"}}}}}, 0x0) 2.485087809s ago: executing program 3 (id=781): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ip_tables_matches\x00') write$cgroup_pressure(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r5 = openat$ndctl0(0xffffff9c, &(0x7f0000000040), 0x82800, 0x0) ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f00000000c0)=0x7) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.459736052s ago: executing program 2 (id=782): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x3, 0x0, 0x40, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x7, 0x3, 0x1}, 0x50) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) getpriority(0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000000)='./file0\x00', 0x108) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYRESDEC=r3, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRES8, @ANYRES16=r3, @ANYRESDEC=r2, @ANYRES64=r0]) read$FUSE(r5, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000280)={0x50, 0x0, r6, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x28) write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r7, r5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x5, r1}, 0x38) r8 = openat$cgroup_root(0xffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r8, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r1}, 0x38) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000340), 0x80080) 1.998860207s ago: executing program 1 (id=783): accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x79}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe2}, 0x94) write$cgroup_pid(r3, &(0x7f0000000000), 0xfdef) recvmsg$unix(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000c80)=""/139}], 0x0, 0x0, 0x40}, 0x40002102) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x3, 0x0, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc044560f, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) dup(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000580)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f0000000c40), 0x0, 0x40000102, 0x0) 1.445820352s ago: executing program 2 (id=784): r0 = syz_io_uring_setup(0x10024fe, &(0x7f0000000300)={0x0, 0xeac1, 0x10300}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000400)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/\x00\x00'], 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') read$FUSE(r2, &(0x7f0000002180)={0x2020}, 0x2020) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000380)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) shutdown(r6, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x2a, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4c800}, 0x4040) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) 870.675485ms ago: executing program 3 (id=785): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2f, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xfff4, 0x1, {0x0, 0xb, 0x7ffffffe}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x3c000001}, 0xc0c4) 866.482956ms ago: executing program 3 (id=786): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000002040)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000280)="89068b1b", 0x4}, {&(0x7f00000002c0)="fff10b108e741b1002db3390f9e23e2059421b889ba3286222a6a3db37b615a91c5a7b76e6a990be346c5e22e1b31d4effc50d51e868a9cdd283dc82d25ad91b10ad8330b3fca64774c66798d55f0dc1e3fab27482217fc533de", 0x5a}, {&(0x7f0000000680)="d7fce111f79b5bcdb44444608ab2417b9721cb3dd16cb2d09480a3ae034bd83dc669c25aeb9f81dca191", 0x2a}], 0x3, 0x0, 0x0, 0x20000000}], 0x1, 0x4080) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000600)=""/83, 0x53}], 0x2}, 0x100) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002c00000018000180140002006e657464657673696d30"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r9 = epoll_create1(0x0) r10 = eventfd2(0x0, 0x0) epoll_pwait2(r9, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r10, &(0x7f0000000180)={0x20000005}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r8, @ANYBLOB="05005b"], 0x24}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x24, r13, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, 'k'}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="000229bd7000fbdbdf2517000000700001800800030001000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f626174616476001400020069703665727370616e300000000000000800030003000000150002006970766c616e3100000000000000000008000100", @ANYRES32=r5, @ANYBLOB="0800030002000000"], 0x84}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) 179.908928ms ago: executing program 3 (id=787): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000002040)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000280)="89068b1b", 0x4}, {&(0x7f00000002c0)="fff10b108e741b1002db3390f9e23e2059421b889ba3286222a6a3db37b615a91c5a7b76e6a990be346c5e22e1b31d4effc50d51e868a9cdd283dc82d25ad91b10ad8330b3fca64774c66798d55f0dc1e3fab27482217fc533de", 0x5a}, {&(0x7f0000000680)="d7fce111f79b5bcdb44444608ab2417b9721cb3dd16cb2d09480a3ae034bd83dc669c25aeb9f81dca191", 0x2a}], 0x3, 0x0, 0x0, 0x20000000}], 0x1, 0x4080) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000600)=""/83, 0x53}], 0x2}, 0x100) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002c00000018000180140002006e657464657673696d30"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r9 = epoll_create1(0x0) r10 = eventfd2(0x0, 0x0) epoll_pwait2(r9, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r10, &(0x7f0000000180)={0x20000005}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r8, @ANYBLOB="05005b"], 0x24}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="000229bd7000fbdbdf2517000000700001800800030001000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f626174616476001400020069703665727370616e300000000000000800030003000000150002006970766c616e3100000000000000000008000100", @ANYRES32=r5, @ANYBLOB="0800030002000000"], 0x84}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) 135.048961ms ago: executing program 0 (id=788): r0 = syz_io_uring_setup(0xd02, &(0x7f0000002900)={0x0, 0x10f24e, 0x0, 0x1, 0x290}, &(0x7f0000000440)=0x0, &(0x7f0000001080)=0x0, &(0x7f0000001040)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10021) io_uring_enter(r0, 0x1, 0x20, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0) (fail_nth: 3) 61.038336ms ago: executing program 1 (id=789): sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x8}]}}}]}, 0x3c}}, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) 0s ago: executing program 1 (id=790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x7}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x43f, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}]}, @NFT_MSG_DELCHAIN={0xf8, 0x5, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x84, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6erspan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2cd30efb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6_vti0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x273e36a3}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x58, 0xe, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x8c, 0x3, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xdf61}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x248}, 0x1, 0x0, 0x0, 0x851}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) epoll_create1(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0x0, 0x321, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x404c010) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r6, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r7], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {}, {0xf, 0x1}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc8c4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0x0, 0x1a0, 0xe8, 0xffffffff, 0xffffffff, 0x254, 0x254, 0x254, 0xffffffff, 0x4, &(0x7f00000005c0), {[{{@ip={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x22}, 0xff000000, 0xffffffff, 'lo\x00', 'batadv0\x00', {}, {}, 0x73, 0x2, 0x1}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@inet=@set1={{0x24}, {{0x3, 0x1, 0x4}}}, @common=@icmp={{0x24}, {0x8, "de5a", 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x5, 0x6}, {0x4, 0x0, 0x7}, 0x4, 0x5}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0xff000000, 0xffffffff, 'macvlan1\x00', 'ip6gretap0\x00', {}, {0xff}, 0x2e, 0x3, 0x11}, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@inet=@socket2={{0x24}, 0x2}]}, @REJECT={0x24}}, {{@ip={@broadcast, @broadcast, 0xffffffff, 0xff000000, 'nr0\x00', 'ipvlan0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x90, 0xb4, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x727acf97d1b11a7e}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x344) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0xda) ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) r8 = gettid() sched_setaffinity(r8, 0x8, &(0x7f0000000140)=0x100000000) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r1) kernel console output (not intermixed with test programs): kmem_cache_alloc_noprof+0x7b/0x6e0 [ 178.310691][ T7724] ? dst_alloc+0x99/0x1a0 [ 178.310708][ T7724] ? __pfx_ip6_dst_gc+0x10/0x10 [ 178.310727][ T7724] dst_alloc+0x99/0x1a0 [ 178.310742][ T7724] ip6_rt_cache_alloc+0x1ea/0x8e0 [ 178.310754][ T7724] ? __pfx_ip6_rt_cache_alloc+0x10/0x10 [ 178.310777][ T7724] ip6_pol_route+0xd59/0x1230 [ 178.310791][ T7724] ? __pfx_ip6_pol_route+0x10/0x10 [ 178.310802][ T7724] ? __pfx_widen_string+0x10/0x10 [ 178.310822][ T7724] ? unwind_get_return_address+0x59/0xa0 [ 178.310842][ T7724] ? string+0x201/0x4d0 [ 178.310853][ T7724] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 178.310866][ T7724] fib6_rule_lookup+0x24c/0x720 [ 178.310884][ T7724] ? put_dec+0x2e/0xc0 [ 178.310899][ T7724] ? put_dec_trunc8+0x28b/0x370 [ 178.310915][ T7724] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 178.310938][ T7724] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 178.310956][ T7724] ip6_route_output_flags+0x1d0/0x650 [ 178.310976][ T7724] ip6_dst_lookup_tail.constprop.0+0x95b/0x2110 [ 178.310993][ T7724] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 178.311014][ T7724] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 178.311031][ T7724] ? __lock_acquire+0x4a5/0x2630 [ 178.311049][ T7724] ? snprintf+0xc7/0x100 [ 178.311061][ T7724] ? __pfx_snprintf+0x10/0x10 [ 178.311075][ T7724] ip6_dst_lookup_flow+0x122/0x240 [ 178.311088][ T7724] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 178.311100][ T7724] ? find_held_lock+0x2b/0x80 [ 178.311113][ T7724] ? rawv6_sendmsg+0xb3c/0x4420 [ 178.311131][ T7724] ? rawv6_sendmsg+0xb3c/0x4420 [ 178.311149][ T7724] rawv6_sendmsg+0xe61/0x4420 [ 178.311168][ T7724] ? __pfx_aa_label_sk_perm+0x1/0x10 [ 178.311184][ T7724] ? psi_trigger_poll+0x51/0x140 [ 178.311200][ T7724] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 178.311237][ T7724] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 178.311254][ T7724] ? inet_sendmsg+0x11c/0x140 [ 178.311267][ T7724] inet_sendmsg+0x11c/0x140 [ 178.311280][ T7724] ____sys_sendmsg+0x98d/0xb70 [ 178.311292][ T7724] ? __pfx_inet_sendmsg+0x10/0x10 [ 178.311306][ T7724] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.311324][ T7724] ___sys_sendmsg+0x190/0x1e0 [ 178.311337][ T7724] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.311361][ T7724] ? find_held_lock+0x2b/0x80 [ 178.311383][ T7724] __sys_sendmsg+0x170/0x220 [ 178.311399][ T7724] ? __pfx___sys_sendmsg+0x10/0x10 [ 178.311414][ T7724] ? __fget_files+0x21f/0x3d0 [ 178.311436][ T7724] ? ksys_write+0x1ac/0x250 [ 178.311454][ T7724] ? rcu_is_watching+0x12/0xc0 [ 178.311468][ T7724] __do_fast_syscall_32+0xe7/0x950 [ 178.311483][ T7724] ? lockdep_hardirqs_on+0x78/0x100 [ 178.311498][ T7724] do_fast_syscall_32+0x32/0x70 [ 178.311514][ T7724] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 178.311529][ T7724] RIP: 0023:0xf700efcc [ 178.311539][ T7724] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 178.311550][ T7724] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 178.311562][ T7724] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 178.311569][ T7724] RDX: 00000000200089b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 178.311576][ T7724] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 178.311582][ T7724] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 178.311588][ T7724] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 178.311602][ T7724] [ 178.555129][ T7730] syzkaller0: entered promiscuous mode [ 178.557096][ T7730] syzkaller0: entered allmulticast mode [ 180.080774][ T7737] fuse: Unknown parameter 'group_id00000000000000000000' [ 180.464373][ T7748] syzkaller0: entered promiscuous mode [ 180.466663][ T7748] syzkaller0: entered allmulticast mode [ 180.962146][ T7752] FAULT_INJECTION: forcing a failure. [ 180.962146][ T7752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.967565][ T7752] CPU: 3 UID: 0 PID: 7752 Comm: syz.2.473 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.967694][ T7752] Tainted: [L]=SOFTLOCKUP [ 180.967699][ T7752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.967708][ T7752] Call Trace: [ 180.967715][ T7752] [ 180.967722][ T7752] dump_stack_lvl+0x100/0x190 [ 180.967761][ T7752] should_fail_ex.cold+0x5/0xa [ 180.967788][ T7752] _copy_from_user+0x2e/0xd0 [ 180.967810][ T7752] bpf_test_init.isra.0+0xaf/0x100 [ 180.967839][ T7752] bpf_prog_test_run_flow_dissector+0x236/0x980 [ 180.967861][ T7752] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 180.967889][ T7752] ? find_held_lock+0x2b/0x80 [ 180.967909][ T7752] ? __fget_files+0x215/0x3d0 [ 180.967938][ T7752] ? __fget_files+0x21f/0x3d0 [ 180.967964][ T7752] ? fput+0x79/0x100 [ 180.967984][ T7752] ? __bpf_prog_get+0x97/0x2a0 [ 180.968005][ T7752] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 180.968033][ T7752] __sys_bpf+0x1725/0x4b90 [ 180.968061][ T7752] ? __pfx___sys_bpf+0x10/0x10 [ 180.968090][ T7752] ? get_pid_task+0x106/0x250 [ 180.968117][ T7752] ? proc_fail_nth_write+0x9f/0x220 [ 180.968138][ T7752] ? find_held_lock+0x2b/0x80 [ 180.968163][ T7752] ? find_held_lock+0x2b/0x80 [ 180.968181][ T7752] ? ksys_write+0x190/0x250 [ 180.968206][ T7752] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 180.968223][ T7752] ? kernel_write+0x693/0x6c0 [ 180.968249][ T7752] ? fput+0x79/0x100 [ 180.968261][ T7752] ? ksys_write+0x1ac/0x250 [ 180.968280][ T7752] __ia32_sys_bpf+0x79/0xf0 [ 180.968290][ T7752] ? lockdep_hardirqs_on+0x78/0x100 [ 180.968304][ T7752] __do_fast_syscall_32+0xe7/0x950 [ 180.968319][ T7752] ? lockdep_hardirqs_on+0x78/0x100 [ 180.968334][ T7752] do_fast_syscall_32+0x32/0x70 [ 180.968349][ T7752] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 180.968364][ T7752] RIP: 0023:0xf7f97fcc [ 180.968375][ T7752] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 180.968386][ T7752] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 180.968399][ T7752] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000340 [ 180.968406][ T7752] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 180.968412][ T7752] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 180.968418][ T7752] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 180.968425][ T7752] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 180.968439][ T7752] [ 181.214653][ T78] Bluetooth: hci4: Frame reassembly failed (-90) [ 181.321864][ T7762] Bluetooth: hci4: Frame reassembly failed (-84) [ 181.336604][ T7762] binder: 7753:7762 ioctl c0285840 80000000 returned -22 [ 182.609692][ T7773] net_ratelimit: 44 callbacks suppressed [ 182.609719][ T7773] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 182.615475][ T7773] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 182.618657][ T7773] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 182.621765][ T7773] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 182.624431][ T7773] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 182.626736][ T7773] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 182.629069][ T7773] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 182.631433][ T7773] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 182.634161][ T7773] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 182.637524][ T7773] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 182.659854][ T7773] netlink: 'syz.1.477': attribute type 1 has an invalid length. [ 182.662762][ T7773] netlink: 384 bytes leftover after parsing attributes in process `syz.1.477'. [ 182.667676][ T7773] ./file0: Can't lookup blockdev [ 182.899106][ T7426] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 183.088934][ T7426] usb 7-1: Using ep0 maxpacket: 16 [ 183.097289][ T7426] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 183.105944][ T7426] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 183.116005][ T7426] usb 7-1: Product: syz [ 183.120407][ T7426] usb 7-1: Manufacturer: syz [ 183.126488][ T7426] usb 7-1: SerialNumber: syz [ 183.141531][ T7426] usb 7-1: config 0 descriptor?? [ 183.221641][ T62] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 183.330293][ T7781] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 183.332591][ T7781] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 183.335725][ T7781] vhci_hcd vhci_hcd.0: Device attached [ 183.380299][ T7775] tipc: Enabling of bearer rejected, failed to enable media [ 183.385786][ T39] usb 7-1: USB disconnect, device number 11 [ 183.979388][ T7788] ./file0: Can't lookup blockdev [ 184.147736][ T7790] fuse: Unknown parameter 'group_id00000000000000000000' [ 184.559282][ T7426] usb 40-1: SetAddress Request (2) to port 0 [ 184.559360][ T7426] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 184.967917][ T7782] vhci_hcd: connection reset by peer [ 184.972694][ T224] vhci_hcd vhci_hcd.1: stop threads [ 184.976269][ T224] vhci_hcd vhci_hcd.1: release socket [ 184.979205][ T224] vhci_hcd vhci_hcd.1: disconnect device [ 185.061841][ T7800] binder: 7799:7800 ioctl c0306201 80000640 returned -22 [ 185.064940][ T7800] binder: 7799:7800 ioctl 80104132 80000000 returned -22 [ 185.068406][ T7800] comedi comedi1: pcl730: I/O port conflict (0xcf7,4) [ 185.161329][ T7804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.486'. [ 186.258965][ T5952] Bluetooth: hci0: command 0x0406 tx timeout [ 186.261772][ T5952] Bluetooth: hci2: command 0x0406 tx timeout [ 186.264170][ T5960] Bluetooth: hci1: command 0x0406 tx timeout [ 186.572100][ T7825] netlink: 'syz.2.490': attribute type 1 has an invalid length. [ 186.619882][ T7813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.488'. [ 186.672280][ T7825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.680096][ T7826] bond1: entered allmulticast mode [ 186.719782][ T7825] bond1: (slave ip6gretap1): making interface the new active one [ 186.730457][ T7825] ip6gretap1: entered allmulticast mode [ 186.734829][ T7825] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 187.104299][ T7839] netlink: 47 bytes leftover after parsing attributes in process `syz.0.493'. [ 187.108637][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.493'. [ 187.112917][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'. [ 187.282764][ T7842] ADFS-fs (loop1): error: unable to read block 3, try 0 [ 188.124353][ T7853] fuse: Bad value for 'user_id' [ 188.126568][ T7853] fuse: Bad value for 'user_id' [ 188.971190][ T7864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.499'. [ 189.152538][ T7870] binder: 7869:7870 ioctl c00c6211 ffffffff returned -14 [ 189.189687][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 189.359393][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 189.369566][ T10] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 189.376226][ T10] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 189.382681][ T10] usb 6-1: Product: syz [ 189.385753][ T10] usb 6-1: Manufacturer: syz [ 189.388382][ T10] usb 6-1: SerialNumber: syz [ 189.397468][ T10] usb 6-1: config 0 descriptor?? [ 189.552294][ T7878] 9pnet_fd: p9_fd_create_tcp (7878): problem connecting socket to 127.0.0.1 [ 189.566051][ T7878] 9pnet_fd: p9_fd_create_tcp (7878): problem connecting socket to 127.0.0.1 [ 189.572463][ T7878] 9pnet_fd: p9_fd_create_tcp (7878): problem connecting socket to 127.0.0.1 [ 189.578730][ T7878] 9pnet_fd: p9_fd_create_tcp (7878): problem connecting socket to 127.0.0.1 [ 189.587041][ T7878] 9pnet_fd: p9_fd_create_tcp (7878): problem connecting socket to 127.0.0.1 [ 189.594837][ T7878] 9pnet_fd: p9_fd_create_tcp (7878): problem connecting socket to 127.0.0.1 [ 189.602835][ T7878] 9pnet_fd: p9_fd_create_tcp (7878): problem connecting socket to 127.0.0.1 [ 189.615461][ T7878] 9pnet_fd: p9_fd_create_tcp (7878): problem connecting socket to 127.0.0.1 [ 189.621395][ T7878] 9pnet_fd: p9_fd_create_tcp (7878): problem connecting socket to 127.0.0.1 [ 189.629136][ T7426] usb 40-1: device descriptor read/8, error -110 [ 189.635946][ T7878] 9pnet_fd: p9_fd_create_tcp (7878): problem connecting socket to 127.0.0.1 [ 189.642541][ T7878] 9pnet_fd: p9_fd_create_tcp (7878): problem connecting socket to 127.0.0.1 [ 189.653852][ T7878] 9pnet_fd: p9_fd_create_tcp (7878): problem connecting socket to 127.0.0.1 [ 189.661302][ T7878] 9pnet_fd: p9_fd_create_tcp (7878): problem connecting socket to 127.0.0.1 [ 189.671113][ T7878] 9pnet_fd: p9_fd_create_tcp (7878): problem connecting socket to 127.0.0.1 [ 189.676974][ T7878] 9pnet_fd: p9_fd_create_tcp (7878): problem connecting socket to 127.0.0.1 [ 189.684366][ T7878] 9pnet_fd: p9_fd_create_tcp (7878): problem connecting socket to 127.0.0.1 [ 189.691641][ T7878] 9pnet_fd: p9_fd_create_tcp (7878): problem connecting socket to 127.0.0.1 [ 189.699321][ T7878] 9pnet_fd: p9_fd_create_tcp (7878): problem connecting socket to 127.0.0.1 [ 189.705199][ T7878] 9pnet_fd: p9_fd_create_tcp (7878): problem connecting socket to 127.0.0.1 [ 189.715098][ T7878] 9pnet_fd: p9_fd_create_tcp (7878): problem connecting socket to 127.0.0.1 [ 189.722056][ T7878] 9pnet_fd: p9_fd_create_tcp (7878): problem connecting socket to 127.0.0.1 [ 189.732235][ T29] usb 6-1: USB disconnect, device number 12 [ 190.039445][ T7426] usb usb40-port1: attempt power cycle [ 190.359218][ T7886] net_ratelimit: 98 callbacks suppressed [ 190.359250][ T7886] netlink: zone id is out of range [ 190.364450][ T7886] netlink: zone id is out of range [ 190.367302][ T7886] netlink: zone id is out of range [ 190.371505][ T7886] netlink: zone id is out of range [ 190.375886][ T7886] netlink: zone id is out of range [ 190.379020][ T7886] netlink: zone id is out of range [ 190.382971][ T7886] netlink: zone id is out of range [ 190.387922][ T7886] netlink: zone id is out of range [ 190.393437][ T7886] netlink: zone id is out of range [ 190.396349][ T7886] netlink: zone id is out of range [ 190.612011][ T7426] usb usb40-port1: unable to enumerate USB device [ 190.803153][ T7903] binder: 7902:7903 ioctl c00c6211 ffffffff returned -14 [ 190.836856][ T7894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.508'. [ 191.004947][ T7908] netlink: 16 bytes leftover after parsing attributes in process `syz.2.513'. [ 191.865028][ T7921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.516'. [ 191.910924][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.517'. [ 192.142421][ T62] Bluetooth: hci3: link tx timeout [ 192.144278][ T62] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 192.183864][ T7927] 9pnet_fd: p9_fd_create_tcp (7927): problem connecting socket to 127.0.0.1 [ 192.295194][ T7929] FAULT_INJECTION: forcing a failure. [ 192.295194][ T7929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.299984][ T7929] CPU: 3 UID: 0 PID: 7929 Comm: syz.2.521 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.300004][ T7929] Tainted: [L]=SOFTLOCKUP [ 192.300008][ T7929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.300015][ T7929] Call Trace: [ 192.300020][ T7929] [ 192.300025][ T7929] dump_stack_lvl+0x100/0x190 [ 192.300052][ T7929] should_fail_ex.cold+0x5/0xa [ 192.300067][ T7929] _copy_from_iter+0x1f4/0x1690 [ 192.300084][ T7929] ? __asan_memset+0x23/0x50 [ 192.300102][ T7929] ? __pfx__copy_from_iter+0x10/0x10 [ 192.300115][ T7929] ? __pfx___alloc_skb+0x10/0x10 [ 192.300138][ T7929] netlink_sendmsg+0x808/0xda0 [ 192.300152][ T7929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.300165][ T7929] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 192.300187][ T7929] ____sys_sendmsg+0x9e1/0xb70 [ 192.300199][ T7929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.300211][ T7929] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.300228][ T7929] ___sys_sendmsg+0x190/0x1e0 [ 192.300241][ T7929] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.300259][ T7929] ? find_held_lock+0x2b/0x80 [ 192.300286][ T7929] __sys_sendmsg+0x170/0x220 [ 192.300304][ T7929] ? __pfx___sys_sendmsg+0x10/0x10 [ 192.300319][ T7929] ? __fget_files+0x21f/0x3d0 [ 192.300353][ T7929] ? ksys_write+0x1ac/0x250 [ 192.300372][ T7929] ? rcu_is_watching+0x12/0xc0 [ 192.300386][ T7929] __do_fast_syscall_32+0xe7/0x950 [ 192.300404][ T7929] ? lockdep_hardirqs_on+0x78/0x100 [ 192.300419][ T7929] do_fast_syscall_32+0x32/0x70 [ 192.300434][ T7929] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.300448][ T7929] RIP: 0023:0xf7f97fcc [ 192.300458][ T7929] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 192.300469][ T7929] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 192.300481][ T7929] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000240 [ 192.300489][ T7929] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.300499][ T7929] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.300505][ T7929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.300514][ T7929] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.300527][ T7929] [ 192.529546][ T7931] FAULT_INJECTION: forcing a failure. [ 192.529546][ T7931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.541730][ T7931] CPU: 2 UID: 0 PID: 7931 Comm: syz.2.522 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.541755][ T7931] Tainted: [L]=SOFTLOCKUP [ 192.541759][ T7931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.541766][ T7931] Call Trace: [ 192.541770][ T7931] [ 192.541775][ T7931] dump_stack_lvl+0x100/0x190 [ 192.541804][ T7931] should_fail_ex.cold+0x5/0xa [ 192.541820][ T7931] _copy_from_iter+0x1f4/0x1690 [ 192.541839][ T7931] ? __pfx__copy_from_iter+0x10/0x10 [ 192.541852][ T7931] ? __asan_memset+0x23/0x50 [ 192.541869][ T7931] ? __alloc_skb+0x4e9/0x710 [ 192.541887][ T7931] ? __pfx___alloc_skb+0x10/0x10 [ 192.541903][ T7931] ? __pfx__copy_from_iter+0x10/0x10 [ 192.541918][ T7931] skb_copy_datagram_from_iter+0x11f/0x720 [ 192.541938][ T7931] tun_get_user+0x1889/0x3c20 [ 192.541966][ T7931] ? __pfx_tun_get_user+0x10/0x10 [ 192.541984][ T7931] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 192.542005][ T7931] ? find_held_lock+0x2b/0x80 [ 192.542020][ T7931] ? tun_get+0x191/0x370 [ 192.542034][ T7931] ? tun_get+0x191/0x370 [ 192.542053][ T7931] tun_chr_write_iter+0xdc/0x200 [ 192.542072][ T7931] vfs_write+0x6ac/0x1070 [ 192.542090][ T7931] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 192.542108][ T7931] ? __pfx_vfs_write+0x10/0x10 [ 192.542125][ T7931] ? find_held_lock+0x2b/0x80 [ 192.542147][ T7931] ksys_write+0x12a/0x250 [ 192.542165][ T7931] ? __pfx_ksys_write+0x10/0x10 [ 192.542182][ T7931] ? ksys_write+0x1ac/0x250 [ 192.542200][ T7931] ? rcu_is_watching+0x12/0xc0 [ 192.542216][ T7931] __do_fast_syscall_32+0xe7/0x950 [ 192.542233][ T7931] ? lockdep_hardirqs_on+0x78/0x100 [ 192.542249][ T7931] do_fast_syscall_32+0x32/0x70 [ 192.542265][ T7931] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.542280][ T7931] RIP: 0023:0xf7f97fcc [ 192.542291][ T7931] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 192.542303][ T7931] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 192.542412][ T7931] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440 [ 192.542425][ T7931] RDX: 0000000000000046 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.542432][ T7931] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.542439][ T7931] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 192.542446][ T7931] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.542461][ T7931] [ 193.097871][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 193.097894][ T40] audit: type=1326 audit(1776457823.344:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.1.523" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fcc code=0x7ffc0000 [ 193.132043][ T40] audit: type=1326 audit(1776457823.354:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.1.523" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fcc code=0x7ffc0000 [ 193.194055][ T40] audit: type=1326 audit(1776457823.354:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.1.523" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f32fcc code=0x7ffc0000 [ 193.218047][ T40] audit: type=1326 audit(1776457823.354:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.1.523" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fcc code=0x7ffc0000 [ 193.236169][ T40] audit: type=1326 audit(1776457823.354:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.1.523" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f32fcc code=0x7ffc0000 [ 193.264685][ T40] audit: type=1326 audit(1776457823.354:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.1.523" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fcc code=0x7ffc0000 [ 193.294814][ T40] audit: type=1326 audit(1776457823.374:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.1.523" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f32fcc code=0x7ffc0000 [ 193.316202][ T40] audit: type=1326 audit(1776457823.374:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.1.523" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fcc code=0x7ffc0000 [ 193.330538][ T40] audit: type=1326 audit(1776457823.384:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.1.523" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fcc code=0x7ffc0000 [ 193.346258][ T40] audit: type=1326 audit(1776457823.384:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.1.523" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f32fcc code=0x7ffc0000 [ 193.387829][ T7945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.526'. [ 193.418984][ T6030] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 193.501364][ T7947] pimreg: entered allmulticast mode [ 193.520252][ T7947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.527'. [ 193.579019][ T6030] usb 5-1: Using ep0 maxpacket: 32 [ 193.586158][ T6030] usb 5-1: unable to get BOS descriptor or descriptor too short [ 193.594158][ T6030] usb 5-1: config 8 has an invalid interface number: 188 but max is 0 [ 193.600656][ T6030] usb 5-1: config 8 has no interface number 0 [ 193.608936][ T6030] usb 5-1: config 8 interface 188 has no altsetting 0 [ 193.614176][ T6030] usb 5-1: string descriptor 0 read error: -22 [ 193.616927][ T6030] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 193.626884][ T6030] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.639468][ T6030] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 193.645482][ T6030] dw2102: su3000_power_ctrl: 1, initialized 0 [ 193.658411][ T6030] dvb-usb: bulk message failed: -22 (2/0) [ 193.672631][ T6030] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 193.689627][ T6030] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 193.696975][ T6030] usb 5-1: media controller created [ 193.698986][ T6030] dvb-usb: bulk message failed: -22 (6/0) [ 193.711147][ T6030] dw2102: i2c transfer failed. [ 193.725181][ T6030] dvb-usb: bulk message failed: -22 (6/0) [ 193.727435][ T6030] dw2102: i2c transfer failed. [ 193.738882][ T6030] dvb-usb: bulk message failed: -22 (6/0) [ 193.740966][ T6030] dw2102: i2c transfer failed. [ 193.742689][ T6030] dvb-usb: bulk message failed: -22 (6/0) [ 193.744745][ T6030] dw2102: i2c transfer failed. [ 193.746327][ T6030] dvb-usb: bulk message failed: -22 (6/0) [ 193.748182][ T6030] dw2102: i2c transfer failed. [ 193.752602][ T6030] dvb-usb: bulk message failed: -22 (6/0) [ 193.759108][ T6030] dw2102: i2c transfer failed. [ 193.768933][ T6030] dvb-usb: MAC address: 02:02:02:02:02:02 [ 193.776302][ T6030] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.794765][ T6030] dvb-usb: bulk message failed: -22 (3/0) [ 193.810998][ T6030] dw2102: command 0x0e transfer failed. [ 193.813625][ T6030] dvb-usb: bulk message failed: -22 (3/0) [ 193.816193][ T6030] dw2102: command 0x0e transfer failed. [ 194.073331][ T7955] FAULT_INJECTION: forcing a failure. [ 194.073331][ T7955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.078315][ T7955] CPU: 2 UID: 0 PID: 7955 Comm: syz.1.529 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.078344][ T7955] Tainted: [L]=SOFTLOCKUP [ 194.078350][ T7955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 194.078360][ T7955] Call Trace: [ 194.078367][ T7955] [ 194.078375][ T7955] dump_stack_lvl+0x100/0x190 [ 194.078410][ T7955] should_fail_ex.cold+0x5/0xa [ 194.078432][ T7955] _copy_from_iter+0x1f4/0x1690 [ 194.078455][ T7955] ? __asan_memset+0x23/0x50 [ 194.078477][ T7955] ? __pfx__copy_from_iter+0x10/0x10 [ 194.078499][ T7955] ? __pfx___alloc_skb+0x10/0x10 [ 194.078532][ T7955] netlink_sendmsg+0x808/0xda0 [ 194.078553][ T7955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.078571][ T7955] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 194.078602][ T7955] ____sys_sendmsg+0x9e1/0xb70 [ 194.078618][ T7955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.078635][ T7955] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.078661][ T7955] ___sys_sendmsg+0x190/0x1e0 [ 194.078680][ T7955] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.078697][ T7955] ? __pte_offset_map+0x179/0x310 [ 194.078746][ T7955] ? find_held_lock+0x2b/0x80 [ 194.078781][ T7955] __sys_sendmsg+0x170/0x220 [ 194.078805][ T7955] ? __pfx___sys_sendmsg+0x10/0x10 [ 194.078835][ T7955] ? rcu_is_watching+0x12/0xc0 [ 194.078855][ T7955] __do_fast_syscall_32+0xe7/0x950 [ 194.078882][ T7955] do_fast_syscall_32+0x32/0x70 [ 194.078903][ T7955] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 194.078923][ T7955] RIP: 0023:0xf7f32fcc [ 194.078937][ T7955] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 194.078952][ T7955] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 194.078971][ T7955] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 194.078980][ T7955] RDX: 0000000020004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 194.078990][ T7955] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 194.078998][ T7955] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 194.079007][ T7955] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 194.079026][ T7955] [ 194.267935][ T5951] Bluetooth: hci3: command 0x0406 tx timeout [ 194.345281][ T7963] 9p: Bad value for 'rfdno' [ 194.356684][ T7963] /dev/nullb0: Can't open blockdev [ 194.941538][ T6030] dvb-usb: bulk message failed: -22 (3/0) [ 194.944306][ T6030] dw2102: command 0x0e transfer failed. [ 194.946284][ T6030] dvb-usb: bulk message failed: -22 (3/0) [ 194.948197][ T6030] dw2102: command 0x0e transfer failed. [ 194.958506][ T6030] dvb-usb: bulk message failed: -22 (1/0) [ 194.960752][ T6030] dw2102: command 0x51 transfer failed. [ 194.994804][ T6030] DVB: Unable to find symbol ds3000_attach() [ 194.999375][ T6030] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 195.048949][ T6030] rc_core: IR keymap rc-su3000 not found [ 195.050855][ T6030] Registered IR keymap rc-empty [ 195.063917][ T6030] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 195.070401][ T6030] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input5 [ 195.089123][ T6030] dvb-usb: schedule remote query interval to 150 msecs. [ 195.093693][ T6030] dw2102: su3000_power_ctrl: 0, initialized 1 [ 195.101109][ T6030] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 195.110554][ T6030] usb 5-1: USB disconnect, device number 6 [ 195.239032][ T6034] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 195.334817][ T1156] Bluetooth: hci4: Frame reassembly failed (-84) [ 195.350532][ T8001] Bluetooth: hci4: Frame reassembly failed (-90) [ 195.605496][ T6034] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 195.612757][ T6034] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 195.627833][ T6034] usb 8-1: config 0 interface 0 has no altsetting 0 [ 195.652092][ T6034] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 195.663711][ T6034] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 195.675814][ T6034] usb 8-1: Product: syz [ 195.687284][ T6034] usb 8-1: Manufacturer: syz [ 195.698894][ T6034] usb 8-1: SerialNumber: syz [ 196.098622][ T6034] usb 8-1: config 0 descriptor?? [ 196.255024][ T6034] hub 8-1:0.0: bad descriptor, ignoring hub [ 196.263676][ T6034] hub 8-1:0.0: probe with driver hub failed with error -5 [ 196.529701][ T6034] usb 8-1: selecting invalid altsetting 0 [ 197.379594][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 197.384087][ T62] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 197.905421][ T8025] netlink: 200 bytes leftover after parsing attributes in process `syz.3.538'. [ 197.979093][ T8030] binder: Unknown parameter 'sta4Eglo!j3;u.bal' [ 198.183155][ T6030] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 198.399387][ T6034] usb 8-1: USB disconnect, device number 8 [ 198.792422][ T6153] udevd[6153]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.541079][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.544670][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.258969][ T62] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 200.320985][ T8047] sctp: [Deprecated]: syz.1.545 (pid 8047) Use of int in max_burst socket option. [ 200.320985][ T8047] Use struct sctp_assoc_value instead [ 200.509558][ T8055] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 2, id = 0 [ 200.785177][ T8056] ADFS-fs (loop0): error: unable to read block 3, try 0 [ 203.306124][ T8076] netlink: 'syz.3.551': attribute type 10 has an invalid length. [ 203.309025][ T8076] netlink: 40 bytes leftover after parsing attributes in process `syz.3.551'. [ 203.312718][ T8076] dummy0: entered promiscuous mode [ 203.318698][ T8076] bridge0: port 3(dummy0) entered blocking state [ 203.321611][ T8076] bridge0: port 3(dummy0) entered disabled state [ 203.323965][ T8076] dummy0: entered allmulticast mode [ 203.327196][ T8076] bridge0: port 3(dummy0) entered blocking state [ 203.331586][ T8076] bridge0: port 3(dummy0) entered forwarding state [ 203.404968][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.552'. [ 204.442301][ T8088] binder: 8087:8088 ioctl c00c6211 ffffffff returned -14 [ 204.812415][ T8097] netlink: 'syz.2.556': attribute type 10 has an invalid length. [ 204.815545][ T8097] netlink: 40 bytes leftover after parsing attributes in process `syz.2.556'. [ 204.819478][ T8097] dummy0: entered promiscuous mode [ 204.828304][ T8097] bridge0: port 3(dummy0) entered blocking state [ 204.831672][ T8097] bridge0: port 3(dummy0) entered disabled state [ 204.834509][ T8097] dummy0: entered allmulticast mode [ 204.844942][ T8097] bridge0: port 3(dummy0) entered blocking state [ 204.848311][ T8097] bridge0: port 3(dummy0) entered forwarding state [ 205.335676][ T8105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.339321][ T8105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.343668][ T8105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.346828][ T8105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.318270][ T8119] CIFS: iocharset name too long [ 207.102736][ T224] Bluetooth: hci4: Frame reassembly failed (-90) [ 207.245078][ T8144] netlink: 600 bytes leftover after parsing attributes in process `syz.0.567'. [ 208.276510][ T8157] fuse: Bad value for 'fd' [ 208.739025][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 208.744901][ T62] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 208.873158][ T8163] binder: 8162:8163 ioctl c00c6211 ffffffff returned -14 [ 209.558476][ T8171] fuse: Bad value for 'fd' [ 209.844472][ T8177] sp0: Synchronizing with TNC [ 210.007005][ T8167] sp0: Found TNC [ 210.482907][ T8179] net_ratelimit: 44 callbacks suppressed [ 210.482939][ T8179] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 210.489040][ T8179] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 210.491864][ T8179] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 210.494605][ T8179] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 210.497300][ T8179] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 210.500425][ T8179] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 210.503599][ T8179] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 210.507253][ T8179] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 210.511841][ T8179] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 210.515464][ T8179] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 210.531868][ T8179] ./file0: Can't lookup blockdev [ 210.849270][ T8166] [U] ` [ 211.275594][ T8191] FAULT_INJECTION: forcing a failure. [ 211.275594][ T8191] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 211.288938][ T8191] CPU: 3 UID: 0 PID: 8191 Comm: syz.0.580 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.288962][ T8191] Tainted: [L]=SOFTLOCKUP [ 211.288966][ T8191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.288973][ T8191] Call Trace: [ 211.288979][ T8191] [ 211.288984][ T8191] dump_stack_lvl+0x100/0x190 [ 211.289014][ T8191] should_fail_ex.cold+0x5/0xa [ 211.289027][ T8191] ? prepare_alloc_pages+0x16d/0x5f0 [ 211.289042][ T8191] should_fail_alloc_page+0xeb/0x140 [ 211.289055][ T8191] prepare_alloc_pages+0x1f0/0x5f0 [ 211.289070][ T8191] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 211.289092][ T8191] ? __lock_acquire+0x4a5/0x2630 [ 211.289113][ T8191] ? lock_acquire+0x1b1/0x370 [ 211.289130][ T8191] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 211.289147][ T8191] ? __lock_acquire+0x4a5/0x2630 [ 211.289164][ T8191] ? ip4_datagram_release_cb+0x1fa/0xc90 [ 211.289179][ T8191] ? ip4_datagram_release_cb+0x1fa/0xc90 [ 211.289196][ T8191] ? reacquire_held_locks+0xce/0x1e0 [ 211.289212][ T8191] ? release_sock+0x21/0x280 [ 211.289230][ T8191] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 211.289248][ T8191] ? policy_nodemask+0xed/0x4f0 [ 211.289260][ T8191] alloc_pages_mpol+0x1fb/0x540 [ 211.289272][ T8191] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 211.289281][ T8191] ? raw_sendmsg+0xd62/0x35f0 [ 211.289298][ T8191] folio_alloc_mpol_noprof+0x36/0x260 [ 211.289313][ T8191] vma_alloc_folio_noprof+0xed/0x1d0 [ 211.289326][ T8191] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 211.289338][ T8191] ? rcu_read_unlock+0x2d/0xb0 [ 211.289354][ T8191] ? rcu_read_unlock+0x2d/0xb0 [ 211.289379][ T8191] do_wp_page+0xd75/0x4380 [ 211.289396][ T8191] ? __pfx_do_wp_page+0x10/0x10 [ 211.289410][ T8191] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 211.289425][ T8191] __handle_mm_fault+0x1ab6/0x2a00 [ 211.289443][ T8191] ? mt_find+0x45e/0x8e0 [ 211.289460][ T8191] ? __pfx___handle_mm_fault+0x10/0x10 [ 211.289474][ T8191] ? __pfx_mt_find+0x10/0x10 [ 211.289496][ T8191] ? find_vma+0xbf/0x140 [ 211.289506][ T8191] ? __pfx_find_vma+0x10/0x10 [ 211.289518][ T8191] handle_mm_fault+0x36d/0xa20 [ 211.289535][ T8191] do_user_addr_fault+0x74c/0x12f0 [ 211.289551][ T8191] ? trace_page_fault_kernel+0x7a/0x200 [ 211.289565][ T8191] exc_page_fault+0x6f/0xd0 [ 211.289580][ T8191] asm_exc_page_fault+0x26/0x30 [ 211.289591][ T8191] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 211.289606][ T8191] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 d7 d7 03 00 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 211.289617][ T8191] RSP: 0018:ffffc90007c27cb8 EFLAGS: 00050293 [ 211.289628][ T8191] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000008000525c [ 211.289635][ T8191] RDX: 0000000080005240 RSI: ffffffff895767e3 RDI: ffff888029a2ca00 [ 211.289641][ T8191] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 211.289648][ T8191] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000080040000 [ 211.289655][ T8191] R13: 00000000000003ff R14: 0000000000000400 R15: 0000000080005240 [ 211.289666][ T8191] ? __sys_sendmmsg+0x313/0x430 [ 211.289685][ T8191] __sys_sendmmsg+0x323/0x430 [ 211.289704][ T8191] ? __pfx___sys_sendmmsg+0x10/0x10 [ 211.289725][ T8191] ? __fget_files+0x215/0x3d0 [ 211.289750][ T8191] ? fput+0x79/0x100 [ 211.289763][ T8191] ? ksys_write+0x1ac/0x250 [ 211.289782][ T8191] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 211.289802][ T8191] ? lockdep_hardirqs_on+0x78/0x100 [ 211.289815][ T8191] __do_fast_syscall_32+0xe7/0x950 [ 211.289830][ T8191] ? lockdep_hardirqs_on+0x78/0x100 [ 211.289844][ T8191] do_fast_syscall_32+0x32/0x70 [ 211.289859][ T8191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.289873][ T8191] RIP: 0023:0xf700efcc [ 211.289882][ T8191] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 211.289892][ T8191] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 211.289902][ T8191] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080005240 [ 211.289908][ T8191] RDX: 0000000004000095 RSI: 0000000000000000 RDI: 0000000000000000 [ 211.289914][ T8191] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 211.289920][ T8191] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 211.289926][ T8191] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.289940][ T8191] [ 211.563182][ T8200] netlink: 'syz.0.582': attribute type 12 has an invalid length. [ 211.580744][ T8201] fuse: Bad value for 'fd' [ 211.912833][ T8208] Bluetooth: hci4: Frame reassembly failed (-90) [ 211.922173][ T8208] binder: 8205:8208 ioctl c0285840 80000000 returned -22 [ 211.980127][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 212.738152][ T8215] ./file0: Can't lookup blockdev [ 212.967599][ T8217] binder: 8216:8217 ioctl c00c6211 ffffffff returned -14 [ 213.379225][ T7426] page_pool_release_retry() stalled pool shutdown: id 40, 50 inflight 60 sec [ 213.940675][ T62] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 214.133189][ T8226] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 214.590860][ T8233] capability: warning: `syz.3.592' uses deprecated v2 capabilities in a way that may be insecure [ 215.095162][ T8240] fuse: Bad value for 'fd' [ 216.066045][ T8247] ./file0: Can't lookup blockdev [ 217.000714][ T8251] nbd: must specify at least one socket [ 218.248393][ T8261] block nbd0: not configured, cannot reconfigure [ 218.311445][ T8259] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 218.320294][ T8259] program syz.0.598 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.479081][ T39] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 218.495202][ T8273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.571406][ T8273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.576474][ T8273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.648969][ T39] usb 8-1: Using ep0 maxpacket: 16 [ 218.656144][ T39] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 218.668926][ T39] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 218.672812][ T39] usb 8-1: Product: syz [ 218.674686][ T39] usb 8-1: Manufacturer: syz [ 218.676648][ T39] usb 8-1: SerialNumber: syz [ 218.680978][ T39] usb 8-1: config 0 descriptor?? [ 218.934068][ T53] usb 8-1: USB disconnect, device number 9 [ 219.656738][ T8288] FAULT_INJECTION: forcing a failure. [ 219.656738][ T8288] name failslab, interval 1, probability 0, space 0, times 0 [ 219.661350][ T8288] CPU: 3 UID: 0 PID: 8288 Comm: syz.3.607 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.661370][ T8288] Tainted: [L]=SOFTLOCKUP [ 219.661377][ T8288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.661384][ T8288] Call Trace: [ 219.661389][ T8288] [ 219.661394][ T8288] dump_stack_lvl+0x100/0x190 [ 219.661420][ T8288] should_fail_ex.cold+0x5/0xa [ 219.661436][ T8288] should_failslab+0xc2/0x120 [ 219.661449][ T8288] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 219.661466][ T8288] ? __alloc_skb+0x140/0x710 [ 219.661482][ T8288] ? __alloc_skb+0x5b7/0x710 [ 219.661498][ T8288] __alloc_skb+0x140/0x710 [ 219.661512][ T8288] ? __alloc_skb+0x5b7/0x710 [ 219.661526][ T8288] ? __pfx___alloc_skb+0x10/0x10 [ 219.661541][ T8288] ? __pfx___might_resched+0x10/0x10 [ 219.661557][ T8288] netlink_alloc_large_skb+0x69/0x150 [ 219.661570][ T8288] netlink_sendmsg+0x680/0xda0 [ 219.661584][ T8288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.661596][ T8288] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 219.661620][ T8288] ____sys_sendmsg+0x9e1/0xb70 [ 219.661631][ T8288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.661643][ T8288] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.661660][ T8288] ___sys_sendmsg+0x190/0x1e0 [ 219.661674][ T8288] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.661692][ T8288] ? find_held_lock+0x2b/0x80 [ 219.661714][ T8288] __sys_sendmsg+0x170/0x220 [ 219.661730][ T8288] ? __pfx___sys_sendmsg+0x10/0x10 [ 219.661745][ T8288] ? __fget_files+0x21f/0x3d0 [ 219.661767][ T8288] ? ksys_write+0x1ac/0x250 [ 219.661785][ T8288] ? rcu_is_watching+0x12/0xc0 [ 219.661799][ T8288] __do_fast_syscall_32+0xe7/0x950 [ 219.661815][ T8288] ? lockdep_hardirqs_on+0x78/0x100 [ 219.661830][ T8288] do_fast_syscall_32+0x32/0x70 [ 219.661844][ T8288] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 219.661859][ T8288] RIP: 0023:0xf7f95fcc [ 219.661869][ T8288] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 219.661880][ T8288] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 219.661892][ T8288] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000e40 [ 219.661899][ T8288] RDX: 0000000000004844 RSI: 0000000000000000 RDI: 0000000000000000 [ 219.661905][ T8288] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 219.661911][ T8288] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 219.661918][ T8288] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 219.661931][ T8288] [ 219.901327][ T8295] FAULT_INJECTION: forcing a failure. [ 219.901327][ T8295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.915852][ T8295] CPU: 2 UID: 0 PID: 8295 Comm: syz.1.609 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.915892][ T8295] Tainted: [L]=SOFTLOCKUP [ 219.915914][ T8295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.915927][ T8295] Call Trace: [ 219.915935][ T8295] [ 219.915942][ T8295] dump_stack_lvl+0x100/0x190 [ 219.915986][ T8295] should_fail_ex.cold+0x5/0xa [ 219.916013][ T8295] _copy_from_user+0x2e/0xd0 [ 219.916039][ T8295] bpf_test_init.isra.0+0xaf/0x100 [ 219.916074][ T8295] bpf_prog_test_run_skb+0x497/0x3540 [ 219.916113][ T8295] ? find_held_lock+0x2b/0x80 [ 219.916139][ T8295] ? __fget_files+0x1b1/0x3d0 [ 219.916176][ T8295] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 219.916211][ T8295] ? fput+0x79/0x100 [ 219.916236][ T8295] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 219.916268][ T8295] __sys_bpf+0x1725/0x4b90 [ 219.916304][ T8295] ? __pfx___sys_bpf+0x10/0x10 [ 219.916331][ T8295] ? get_pid_task+0x106/0x250 [ 219.916365][ T8295] ? proc_fail_nth_write+0x9f/0x220 [ 219.916391][ T8295] ? find_held_lock+0x2b/0x80 [ 219.916419][ T8295] ? find_held_lock+0x2b/0x80 [ 219.916442][ T8295] ? ksys_write+0x190/0x250 [ 219.916476][ T8295] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 219.916503][ T8295] ? kernel_write+0x693/0x6c0 [ 219.916547][ T8295] ? fput+0x79/0x100 [ 219.916567][ T8295] ? ksys_write+0x1ac/0x250 [ 219.916600][ T8295] __ia32_sys_bpf+0x79/0xf0 [ 219.916618][ T8295] ? lockdep_hardirqs_on+0x78/0x100 [ 219.916643][ T8295] __do_fast_syscall_32+0xe7/0x950 [ 219.916667][ T8295] ? lockdep_hardirqs_on+0x78/0x100 [ 219.916693][ T8295] do_fast_syscall_32+0x32/0x70 [ 219.916722][ T8295] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 219.916771][ T8295] RIP: 0023:0xf7f32fcc [ 219.916789][ T8295] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 219.916809][ T8295] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 219.916830][ T8295] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800002c0 [ 219.916843][ T8295] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 219.916854][ T8295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 219.916864][ T8295] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 219.916875][ T8295] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 219.916902][ T8295] [ 220.328924][ T7426] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 220.497419][ T8299] tipc: Failed to remove unknown binding: 66,0,0/0:3676529318/3676529320 [ 220.502623][ T8299] tipc: Failed to remove unknown binding: 66,0,0/0:3676529318/3676529319 [ 220.509651][ T8299] tipc: Failed to remove unknown binding: 66,0,0/0:3676529318/3676529320 [ 220.514063][ T8299] tipc: Failed to remove unknown binding: 66,0,0/0:3676529318/3676529319 [ 220.546808][ T7426] usb 8-1: unable to get BOS descriptor or descriptor too short [ 220.556881][ T7426] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 220.561511][ T7426] usb 8-1: can't read configurations, error -71 [ 221.624465][ T8316] net_ratelimit: 99 callbacks suppressed [ 221.624488][ T8316] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 221.631581][ T8316] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 221.634474][ T8316] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 221.637133][ T8316] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 221.640174][ T8316] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 221.643028][ T8316] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 221.645999][ T8316] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 221.649256][ T8316] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 221.652524][ T8316] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 221.655180][ T8316] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 221.658899][ T8317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.669229][ T8316] ./file0: Can't lookup blockdev [ 221.724015][ T8317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.730244][ T8317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.836162][ T8321] FAULT_INJECTION: forcing a failure. [ 221.836162][ T8321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.841893][ T8321] CPU: 2 UID: 0 PID: 8321 Comm: syz.3.619 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.841916][ T8321] Tainted: [L]=SOFTLOCKUP [ 221.841920][ T8321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 221.841928][ T8321] Call Trace: [ 221.841933][ T8321] [ 221.841938][ T8321] dump_stack_lvl+0x100/0x190 [ 221.841968][ T8321] should_fail_ex.cold+0x5/0xa [ 221.841985][ T8321] _copy_from_user+0x2e/0xd0 [ 221.842002][ T8321] bpf_test_init.isra.0+0xaf/0x100 [ 221.842024][ T8321] bpf_prog_test_run_skb+0x497/0x3540 [ 221.842053][ T8321] ? find_held_lock+0x2b/0x80 [ 221.842075][ T8321] ? __fget_files+0x1b1/0x3d0 [ 221.842108][ T8321] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 221.842142][ T8321] ? fput+0x79/0x100 [ 221.842166][ T8321] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 221.842199][ T8321] __sys_bpf+0x1725/0x4b90 [ 221.842233][ T8321] ? __pfx___sys_bpf+0x10/0x10 [ 221.842253][ T8321] ? get_pid_task+0x106/0x250 [ 221.842271][ T8321] ? proc_fail_nth_write+0x9f/0x220 [ 221.842288][ T8321] ? find_held_lock+0x2b/0x80 [ 221.842306][ T8321] ? find_held_lock+0x2b/0x80 [ 221.842320][ T8321] ? ksys_write+0x190/0x250 [ 221.842347][ T8321] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 221.842366][ T8321] ? kernel_write+0x693/0x6c0 [ 221.842394][ T8321] ? fput+0x79/0x100 [ 221.842406][ T8321] ? ksys_write+0x1ac/0x250 [ 221.842427][ T8321] __ia32_sys_bpf+0x79/0xf0 [ 221.842438][ T8321] ? lockdep_hardirqs_on+0x78/0x100 [ 221.842454][ T8321] __do_fast_syscall_32+0xe7/0x950 [ 221.842471][ T8321] ? lockdep_hardirqs_on+0x78/0x100 [ 221.842488][ T8321] do_fast_syscall_32+0x32/0x70 [ 221.842505][ T8321] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 221.842523][ T8321] RIP: 0023:0xf7f95fcc [ 221.842535][ T8321] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 221.842547][ T8321] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 221.842561][ T8321] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000640 [ 221.842569][ T8321] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 221.842576][ T8321] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 221.842583][ T8321] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 221.842591][ T8321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 221.842606][ T8321] [ 222.000835][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.622'. [ 222.019898][ T8327] netlink: 16 bytes leftover after parsing attributes in process `syz.1.622'. [ 222.141445][ T8332] syzkaller0: entered promiscuous mode [ 222.143337][ T8332] syzkaller0: entered allmulticast mode [ 222.186817][ T8336] ./file0: Can't lookup blockdev [ 222.392842][ T8340] netlink: 84 bytes leftover after parsing attributes in process `syz.2.628'. [ 222.396543][ T8340] block nbd0: not configured, cannot reconfigure [ 223.353709][ T8350] FAULT_INJECTION: forcing a failure. [ 223.353709][ T8350] name failslab, interval 1, probability 0, space 0, times 0 [ 223.358945][ T8350] CPU: 1 UID: 0 PID: 8350 Comm: syz.0.631 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.358968][ T8350] Tainted: [L]=SOFTLOCKUP [ 223.358972][ T8350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.358978][ T8350] Call Trace: [ 223.358984][ T8350] [ 223.358988][ T8350] dump_stack_lvl+0x100/0x190 [ 223.359016][ T8350] should_fail_ex.cold+0x5/0xa [ 223.359032][ T8350] should_failslab+0xc2/0x120 [ 223.359045][ T8350] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 223.359063][ T8350] ? alloc_vmap_area+0x640/0x2b70 [ 223.359076][ T8350] alloc_vmap_area+0x640/0x2b70 [ 223.359092][ T8350] ? __pfx_alloc_vmap_area+0x10/0x10 [ 223.359106][ T8350] __get_vm_area_node+0x1ca/0x330 [ 223.359121][ T8350] __vmalloc_node_range_noprof+0x228/0x1630 [ 223.359135][ T8350] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 223.359150][ T8350] ? process_measurement+0x1f4/0x2350 [ 223.359171][ T8350] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 223.359186][ T8350] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 223.359200][ T8350] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 223.359214][ T8350] ? __lock_acquire+0x4a5/0x2630 [ 223.359233][ T8350] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 223.359248][ T8350] ? __lock_acquire+0x4a5/0x2630 [ 223.359269][ T8350] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 223.359281][ T8350] __vmalloc_node_noprof+0xad/0xf0 [ 223.359294][ T8350] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 223.359309][ T8350] __vmalloc_noprof+0xa3/0x120 [ 223.359324][ T8350] ? __pfx___vmalloc_noprof+0x10/0x10 [ 223.359345][ T8350] ? rcu_is_watching+0x12/0xc0 [ 223.359357][ T8350] ? apparmor_capable+0x1d7/0x4d0 [ 223.359371][ T8350] bpf_prog_alloc_no_stats+0x58/0x640 [ 223.359384][ T8350] ? security_capable+0x80/0x260 [ 223.359404][ T8350] bpf_prog_alloc+0x3b/0x200 [ 223.359416][ T8350] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 223.359434][ T8350] bpf_prog_load+0x494/0x2c30 [ 223.359451][ T8350] ? _parse_integer_limit+0x17f/0x1d0 [ 223.359471][ T8350] ? __pfx_bpf_prog_load+0x10/0x10 [ 223.359487][ T8350] ? __lock_acquire+0x4a5/0x2630 [ 223.359515][ T8350] ? bpf_lsm_bpf+0x9/0x10 [ 223.359527][ T8350] __sys_bpf+0x223a/0x4b90 [ 223.359547][ T8350] ? __pfx___sys_bpf+0x10/0x10 [ 223.359563][ T8350] ? get_pid_task+0x106/0x250 [ 223.359579][ T8350] ? proc_fail_nth_write+0x9f/0x220 [ 223.359594][ T8350] ? find_held_lock+0x2b/0x80 [ 223.359609][ T8350] ? find_held_lock+0x2b/0x80 [ 223.359622][ T8350] ? ksys_write+0x190/0x250 [ 223.359641][ T8350] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 223.359657][ T8350] ? kernel_write+0x693/0x6c0 [ 223.359681][ T8350] ? fput+0x79/0x100 [ 223.359693][ T8350] ? ksys_write+0x1ac/0x250 [ 223.359712][ T8350] __ia32_sys_bpf+0x79/0xf0 [ 223.359722][ T8350] ? lockdep_hardirqs_on+0x78/0x100 [ 223.359735][ T8350] __do_fast_syscall_32+0xe7/0x950 [ 223.359751][ T8350] ? lockdep_hardirqs_on+0x78/0x100 [ 223.359765][ T8350] do_fast_syscall_32+0x32/0x70 [ 223.359781][ T8350] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.359802][ T8350] RIP: 0023:0xf700efcc [ 223.359816][ T8350] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 223.359831][ T8350] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 223.359849][ T8350] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800054c0 [ 223.359859][ T8350] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 223.359866][ T8350] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 223.359872][ T8350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.359879][ T8350] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.359893][ T8350] [ 223.359915][ T8350] syz.0.631: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 223.495332][ T8350] CPU: 2 UID: 0 PID: 8350 Comm: syz.0.631 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.495352][ T8350] Tainted: [L]=SOFTLOCKUP [ 223.495357][ T8350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.495363][ T8350] Call Trace: [ 223.495370][ T8350] [ 223.495377][ T8350] dump_stack_lvl+0x100/0x190 [ 223.495403][ T8350] warn_alloc.cold+0x95/0x1c1 [ 223.495416][ T8350] ? __pfx_warn_alloc+0x10/0x10 [ 223.495433][ T8350] ? lockdep_hardirqs_on+0x78/0x100 [ 223.495450][ T8350] ? __get_vm_area_node+0x2c5/0x330 [ 223.495465][ T8350] ? __get_vm_area_node+0x208/0x330 [ 223.495479][ T8350] __vmalloc_node_range_noprof+0xccd/0x1630 [ 223.495493][ T8350] ? process_measurement+0x1f4/0x2350 [ 223.495515][ T8350] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 223.495530][ T8350] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 223.495544][ T8350] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 223.495559][ T8350] ? __lock_acquire+0x4a5/0x2630 [ 223.495578][ T8350] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 223.495592][ T8350] ? __lock_acquire+0x4a5/0x2630 [ 223.495613][ T8350] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 223.495626][ T8350] __vmalloc_node_noprof+0xad/0xf0 [ 223.495639][ T8350] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 223.495653][ T8350] __vmalloc_noprof+0xa3/0x120 [ 223.495666][ T8350] ? __pfx___vmalloc_noprof+0x10/0x10 [ 223.495680][ T8350] ? rcu_is_watching+0x12/0xc0 [ 223.495693][ T8350] ? apparmor_capable+0x1d7/0x4d0 [ 223.495706][ T8350] bpf_prog_alloc_no_stats+0x58/0x640 [ 223.495719][ T8350] ? security_capable+0x80/0x260 [ 223.495738][ T8350] bpf_prog_alloc+0x3b/0x200 [ 223.495750][ T8350] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 223.495766][ T8350] bpf_prog_load+0x494/0x2c30 [ 223.495784][ T8350] ? _parse_integer_limit+0x17f/0x1d0 [ 223.495803][ T8350] ? __pfx_bpf_prog_load+0x10/0x10 [ 223.495819][ T8350] ? __lock_acquire+0x4a5/0x2630 [ 223.495847][ T8350] ? bpf_lsm_bpf+0x9/0x10 [ 223.495859][ T8350] __sys_bpf+0x223a/0x4b90 [ 223.495878][ T8350] ? __pfx___sys_bpf+0x10/0x10 [ 223.495894][ T8350] ? get_pid_task+0x106/0x250 [ 223.495910][ T8350] ? proc_fail_nth_write+0x9f/0x220 [ 223.495924][ T8350] ? find_held_lock+0x2b/0x80 [ 223.495940][ T8350] ? find_held_lock+0x2b/0x80 [ 223.495952][ T8350] ? ksys_write+0x190/0x250 [ 223.495972][ T8350] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 223.495986][ T8350] ? kernel_write+0x693/0x6c0 [ 223.496010][ T8350] ? fput+0x79/0x100 [ 223.496022][ T8350] ? ksys_write+0x1ac/0x250 [ 223.496040][ T8350] __ia32_sys_bpf+0x79/0xf0 [ 223.496050][ T8350] ? lockdep_hardirqs_on+0x78/0x100 [ 223.496064][ T8350] __do_fast_syscall_32+0xe7/0x950 [ 223.496080][ T8350] ? lockdep_hardirqs_on+0x78/0x100 [ 223.496095][ T8350] do_fast_syscall_32+0x32/0x70 [ 223.496109][ T8350] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.496124][ T8350] RIP: 0023:0xf700efcc [ 223.496135][ T8350] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 223.496145][ T8350] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 223.496157][ T8350] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800054c0 [ 223.496164][ T8350] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 223.496177][ T8350] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 223.496183][ T8350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.496189][ T8350] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.496205][ T8350] [ 223.496210][ T8350] Mem-Info: [ 223.615808][ T8350] active_anon:12610 inactive_anon:30 isolated_anon:0 [ 223.615808][ T8350] active_file:17368 inactive_file:24146 isolated_file:0 [ 223.615808][ T8350] unevictable:1768 dirty:361 writeback:0 [ 223.615808][ T8350] slab_reclaimable:8023 slab_unreclaimable:54803 [ 223.615808][ T8350] mapped:28790 shmem:5026 pagetables:1181 [ 223.615808][ T8350] sec_pagetables:299 bounce:0 [ 223.615808][ T8350] kernel_misc_reclaimable:0 [ 223.615808][ T8350] free:40417 free_pcp:19432 free_cma:0 [ 223.643993][ T8350] Node 0 active_anon:280kB inactive_anon:28kB active_file:472kB inactive_file:156kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7916kB pagetables:1660kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 223.659899][ T8350] Node 1 active_anon:50160kB inactive_anon:92kB active_file:69000kB inactive_file:96428kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:115136kB dirty:1436kB writeback:0kB shmem:16568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5252kB pagetables:3064kB sec_pagetables:64kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 223.675269][ T8350] Node 0 DMA free:2048kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:692kB local_pcp:192kB free_cma:0kB [ 223.689110][ T8350] lowmem_reserve[]: 0 284 284 284 284 [ 223.691665][ T8350] Node 0 DMA32 free:16284kB boost:0kB min:13052kB low:16312kB high:19572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:280kB inactive_anon:28kB active_file:472kB inactive_file:20kB unevictable:3536kB writepending:8kB zspages:0kB present:1032196kB managed:291004kB mlocked:0kB bounce:0kB free_pcp:12352kB local_pcp:2656kB free_cma:0kB [ 223.706925][ T8350] lowmem_reserve[]: 0 0 0 0 0 [ 223.709231][ T8350] Node 1 DMA32 free:143336kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50460kB inactive_anon:92kB active_file:69000kB inactive_file:96428kB unevictable:3536kB writepending:1436kB zspages:2180kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:65188kB local_pcp:19832kB free_cma:0kB [ 223.723824][ T8350] lowmem_reserve[]: 0 0 0 0 0 [ 223.726053][ T8350] Node 0 DMA: 146*4kB (UM) 7*8kB (UM) 12*16kB (UM) 20*32kB (UM) 5*64kB (UM) 0*128kB 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2048kB [ 223.732715][ T8350] Node 0 DMA32: 277*4kB (UM) 49*8kB (UM) 24*16kB (UM) 56*32kB (UME) 35*64kB (UM) 15*128kB (UM) 11*256kB (M) 5*512kB (UM) 3*1024kB (UM) 0*2048kB 0*4096kB = 16284kB [ 223.740647][ T8350] Node 1 DMA32: 1672*4kB (UM) 896*8kB (UME) 398*16kB (UME) 271*32kB (ME) 115*64kB (UME) 164*128kB (UME) 98*256kB (UME) 41*512kB (UME) 15*1024kB (UM) 6*2048kB (UM) 3*4096kB (UM) = 143264kB [ 223.748905][ T8350] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 223.753421][ T8350] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 223.757763][ T8350] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 223.761761][ T8350] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 223.765679][ T8350] 47375 total pagecache pages [ 223.767649][ T8350] 839 pages in swap cache [ 223.769913][ T8350] Free swap = 116544kB [ 223.772402][ T8350] Total swap = 124996kB [ 223.775041][ T8350] 524155 pages RAM [ 223.777037][ T8350] 0 pages HighMem/MovableOnly [ 223.779496][ T8350] 210511 pages reserved [ 223.781315][ T8350] 0 pages cma reserved [ 224.237405][ T8361] ./file0: Can't lookup blockdev [ 224.412980][ T7426] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 224.569546][ T7426] usb 7-1: Using ep0 maxpacket: 16 [ 224.575491][ T7426] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 224.581799][ T7426] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 224.588037][ T7426] usb 7-1: Product: syz [ 224.590198][ T7426] usb 7-1: Manufacturer: syz [ 224.592249][ T7426] usb 7-1: SerialNumber: syz [ 224.600101][ T7426] usb 7-1: config 0 descriptor?? [ 224.760126][ T8371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.639'. [ 224.774176][ T8374] smc: net device vcan0 applied user defined pnetid SYZ1 [ 224.848269][ T5979] usb 7-1: USB disconnect, device number 12 [ 224.896930][ T8379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.640'. [ 224.901335][ T8380] binder: 8377:8380 ioctl c00c6211 ffffffff returned -14 [ 224.903205][ T8378] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.949634][ T8379] team_slave_0: entered promiscuous mode [ 224.954358][ T8379] team_slave_1: entered promiscuous mode [ 224.959328][ T8379] macvtap1: entered promiscuous mode [ 224.961943][ T8379] team0: entered promiscuous mode [ 224.965086][ T8379] macvtap1: entered allmulticast mode [ 224.967316][ T8379] team0: entered allmulticast mode [ 224.969545][ T8379] team_slave_0: entered allmulticast mode [ 224.970310][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.640'. [ 224.973286][ T8379] team_slave_1: entered allmulticast mode [ 224.984036][ T8379] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 225.029575][ T8381] team0: left allmulticast mode [ 225.031527][ T8381] team_slave_0: left allmulticast mode [ 225.039871][ T8381] team_slave_1: left allmulticast mode [ 225.042427][ T8381] team0: left promiscuous mode [ 225.045120][ T8381] team_slave_0: left promiscuous mode [ 225.050355][ T8381] team_slave_1: left promiscuous mode [ 225.112977][ T8378] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.201190][ T8378] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.336086][ T8378] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.676399][ T1202] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.681757][ T1202] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.704825][ T8393] netlink: 16 bytes leftover after parsing attributes in process `syz.1.646'. [ 225.710362][ T1202] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.720887][ T1202] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.415734][ T8402] binder: 8401:8402 ioctl c00c6211 ffffffff returned -14 [ 226.916485][ T8405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.650'. [ 227.308972][ T7426] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 227.458915][ T7426] usb 5-1: Using ep0 maxpacket: 16 [ 227.469642][ T7426] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 227.473908][ T7426] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 227.477542][ T7426] usb 5-1: Product: syz [ 227.479607][ T7426] usb 5-1: Manufacturer: syz [ 227.481690][ T7426] usb 5-1: SerialNumber: syz [ 227.493626][ T7426] usb 5-1: config 0 descriptor?? [ 227.772067][ T6030] usb 5-1: USB disconnect, device number 7 [ 227.979545][ T8412] fuse: Bad value for 'rootmode' [ 228.147397][ T8423] net_ratelimit: 44 callbacks suppressed [ 228.147490][ T8423] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 229.122855][ T8437] netlink: 'syz.1.660': attribute type 10 has an invalid length. [ 229.126583][ T8437] netlink: 40 bytes leftover after parsing attributes in process `syz.1.660'. [ 229.132744][ T8437] dummy0: entered promiscuous mode [ 229.135628][ T8437] bridge0: port 3(dummy0) entered blocking state [ 229.138102][ T8437] bridge0: port 3(dummy0) entered disabled state [ 229.143183][ T8437] dummy0: entered allmulticast mode [ 229.147536][ T8437] bridge0: port 3(dummy0) entered blocking state [ 229.150352][ T8437] bridge0: port 3(dummy0) entered forwarding state [ 229.435678][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'. [ 229.471537][ T8443] bridge11: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 229.481627][ T8443] bridge11: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 229.502453][ T8443] bridge11: entered promiscuous mode [ 229.718129][ T8450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.664'. [ 229.742116][ T8450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.664'. [ 229.924757][ T8456] fuse: Bad value for 'rootmode' [ 230.242287][ T8461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.668'. [ 230.293005][ T8464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.669'. [ 230.786635][ T8470] netlink: 'syz.0.670': attribute type 10 has an invalid length. [ 230.790238][ T8470] netlink: 40 bytes leftover after parsing attributes in process `syz.0.670'. [ 230.794157][ T8470] dummy0: entered promiscuous mode [ 230.797209][ T8470] bridge0: port 3(dummy0) entered blocking state [ 230.800035][ T8470] bridge0: port 3(dummy0) entered disabled state [ 230.802268][ T8470] dummy0: entered allmulticast mode [ 230.807321][ T8470] bridge0: port 3(dummy0) entered blocking state [ 230.810764][ T8470] bridge0: port 3(dummy0) entered forwarding state [ 230.882314][ T8472] syzkaller0: entered promiscuous mode [ 230.884657][ T8472] syzkaller0: entered allmulticast mode [ 232.332595][ T8479] FAULT_INJECTION: forcing a failure. [ 232.332595][ T8479] name failslab, interval 1, probability 0, space 0, times 0 [ 232.342388][ T8479] CPU: 2 UID: 0 PID: 8479 Comm: syz.3.672 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.342425][ T8479] Tainted: [L]=SOFTLOCKUP [ 232.342431][ T8479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.342443][ T8479] Call Trace: [ 232.342453][ T8479] [ 232.342461][ T8479] dump_stack_lvl+0x100/0x190 [ 232.342501][ T8479] should_fail_ex.cold+0x5/0xa [ 232.342518][ T8479] should_failslab+0xc2/0x120 [ 232.342531][ T8479] __kmalloc_cache_noprof+0x7a/0x6f0 [ 232.342547][ T8479] ? fl_create+0x104/0xd10 [ 232.342564][ T8479] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 232.342584][ T8479] fl_create+0x104/0xd10 [ 232.342599][ T8479] ? __lock_acquire+0x4a5/0x2630 [ 232.342620][ T8479] ? __pfx_fl_create+0x10/0x10 [ 232.342636][ T8479] ? __lock_acquire+0x4a5/0x2630 [ 232.342661][ T8479] ? find_held_lock+0x2b/0x80 [ 232.342674][ T8479] ? __might_fault+0xc5/0x140 [ 232.342691][ T8479] ? __might_fault+0xc5/0x140 [ 232.342712][ T8479] ipv6_flowlabel_opt+0x519/0x2d40 [ 232.342733][ T8479] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 232.342755][ T8479] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 232.342780][ T8479] ? __local_bh_enable_ip+0x9e/0x120 [ 232.342812][ T8479] ? do_ipv6_setsockopt+0x1926/0x43b0 [ 232.342836][ T8479] do_ipv6_setsockopt+0x1926/0x43b0 [ 232.342861][ T8479] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 232.342878][ T8479] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 232.342914][ T8479] ? find_held_lock+0x2b/0x80 [ 232.342943][ T8479] ? __pfx___might_resched+0x10/0x10 [ 232.342965][ T8479] ? __lock_acquire+0x4a5/0x2630 [ 232.342996][ T8479] ? aa_sk_perm+0x309/0xaa0 [ 232.343019][ T8479] ? ksys_write+0x190/0x250 [ 232.343051][ T8479] ? __pfx_aa_sk_perm+0x10/0x10 [ 232.343085][ T8479] ? ipv6_setsockopt+0xcb/0x170 [ 232.343096][ T8479] ipv6_setsockopt+0xcb/0x170 [ 232.343110][ T8479] tcp_setsockopt+0xa7/0x100 [ 232.343211][ T8479] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 232.343226][ T8479] do_sock_setsockopt+0xf3/0x1d0 [ 232.343250][ T8479] __sys_setsockopt+0x119/0x190 [ 232.343270][ T8479] __ia32_sys_setsockopt+0xbc/0x160 [ 232.343286][ T8479] ? __do_fast_syscall_32+0x98/0x950 [ 232.343304][ T8479] ? lockdep_hardirqs_on+0x78/0x100 [ 232.343321][ T8479] __do_fast_syscall_32+0xe7/0x950 [ 232.343338][ T8479] ? lockdep_hardirqs_on+0x78/0x100 [ 232.343354][ T8479] do_fast_syscall_32+0x32/0x70 [ 232.343370][ T8479] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.343388][ T8479] RIP: 0023:0xf7f95fcc [ 232.343400][ T8479] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 232.343412][ T8479] RSP: 002b:00000000f543550c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 232.343426][ T8479] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 232.343434][ T8479] RDX: 0000000000000020 RSI: 0000000080000040 RDI: 0000000000000020 [ 232.343441][ T8479] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 232.343448][ T8479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.343454][ T8479] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 232.343469][ T8479] [ 233.373683][ T8491] netlink: 'syz.0.676': attribute type 10 has an invalid length. [ 233.377152][ T8491] netlink: 40 bytes leftover after parsing attributes in process `syz.0.676'. [ 233.441441][ T8495] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.455978][ T8497] fuse: Unknown parameter 'use00000000000000000000' [ 233.497116][ T8498] binder: 8494:8498 ioctl c00c6211 ffffffff returned -14 [ 233.551950][ T8495] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.646459][ T8495] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.701675][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 233.735622][ T8495] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.855607][ T78] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.867922][ T78] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.889519][ T78] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.920642][ T78] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.055568][ T8513] FAULT_INJECTION: forcing a failure. [ 234.055568][ T8513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.060130][ T8513] CPU: 2 UID: 0 PID: 8513 Comm: syz.3.682 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.060203][ T8513] Tainted: [L]=SOFTLOCKUP [ 234.060208][ T8513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.060214][ T8513] Call Trace: [ 234.060218][ T8513] [ 234.060223][ T8513] dump_stack_lvl+0x100/0x190 [ 234.060252][ T8513] should_fail_ex.cold+0x5/0xa [ 234.060268][ T8513] _copy_from_iter+0x1f4/0x1690 [ 234.060286][ T8513] ? __asan_memset+0x23/0x50 [ 234.060302][ T8513] ? __pfx__copy_from_iter+0x10/0x10 [ 234.060314][ T8513] ? __pfx___alloc_skb+0x10/0x10 [ 234.060340][ T8513] netlink_sendmsg+0x808/0xda0 [ 234.060358][ T8513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.060373][ T8513] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 234.060400][ T8513] ____sys_sendmsg+0x9e1/0xb70 [ 234.060413][ T8513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.060427][ T8513] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.060448][ T8513] ___sys_sendmsg+0x190/0x1e0 [ 234.060464][ T8513] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.060487][ T8513] ? find_held_lock+0x2b/0x80 [ 234.060513][ T8513] __sys_sendmsg+0x170/0x220 [ 234.060533][ T8513] ? __pfx___sys_sendmsg+0x10/0x10 [ 234.060551][ T8513] ? __fget_files+0x21f/0x3d0 [ 234.060577][ T8513] ? ksys_write+0x1ac/0x250 [ 234.060599][ T8513] ? rcu_is_watching+0x12/0xc0 [ 234.060617][ T8513] __do_fast_syscall_32+0xe7/0x950 [ 234.060635][ T8513] ? lockdep_hardirqs_on+0x78/0x100 [ 234.060653][ T8513] do_fast_syscall_32+0x32/0x70 [ 234.060671][ T8513] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 234.060726][ T8513] RIP: 0023:0xf7f95fcc [ 234.060738][ T8513] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 234.060751][ T8513] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 234.060766][ T8513] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 234.060774][ T8513] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 234.060781][ T8513] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 234.060789][ T8513] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 234.060796][ T8513] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 234.060812][ T8513] [ 234.493331][ T8519] syzkaller0: entered promiscuous mode [ 234.495376][ T8519] syzkaller0: entered allmulticast mode [ 234.499239][ T8519] FAULT_INJECTION: forcing a failure. [ 234.499239][ T8519] name failslab, interval 1, probability 0, space 0, times 0 [ 234.503681][ T8519] CPU: 2 UID: 0 PID: 8519 Comm: syz.2.685 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.503706][ T8519] Tainted: [L]=SOFTLOCKUP [ 234.503711][ T8519] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.503719][ T8519] Call Trace: [ 234.503726][ T8519] [ 234.503732][ T8519] dump_stack_lvl+0x100/0x190 [ 234.503764][ T8519] should_fail_ex.cold+0x5/0xa [ 234.503785][ T8519] should_failslab+0xc2/0x120 [ 234.503800][ T8519] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 234.503822][ T8519] ? __alloc_skb+0x140/0x710 [ 234.503843][ T8519] ? __alloc_skb+0x5b7/0x710 [ 234.503864][ T8519] __alloc_skb+0x140/0x710 [ 234.503882][ T8519] ? __alloc_skb+0x5b7/0x710 [ 234.503900][ T8519] ? __pfx___alloc_skb+0x10/0x10 [ 234.503920][ T8519] ? up_write+0x28c/0x4f0 [ 234.503937][ T8519] alloc_skb_with_frags+0xdd/0x760 [ 234.503966][ T8519] sock_alloc_send_pskb+0x801/0x980 [ 234.503986][ T8519] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 234.504012][ T8519] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 234.504031][ T8519] ? find_held_lock+0x2b/0x80 [ 234.504050][ T8519] ? dev_get_by_index+0x180/0x380 [ 234.504069][ T8519] ? dev_get_by_index+0x180/0x380 [ 234.504093][ T8519] packet_sendmsg+0x20b8/0x51c0 [ 234.504111][ T8519] ? __print_lock_name+0x20/0x80 [ 234.504134][ T8519] ? __pfx___might_resched+0x10/0x10 [ 234.504148][ T8519] ? __lock_acquire+0x4a5/0x2630 [ 234.504172][ T8519] ? aa_sk_perm+0x309/0xaa0 [ 234.504196][ T8519] ? __pfx_packet_sendmsg+0x10/0x10 [ 234.504209][ T8519] ? __pfx_aa_sk_perm+0x10/0x10 [ 234.504230][ T8519] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 234.504258][ T8519] ____sys_sendmsg+0x9e1/0xb70 [ 234.504273][ T8519] ? __pfx_packet_sendmsg+0x10/0x10 [ 234.504295][ T8519] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.504318][ T8519] ___sys_sendmsg+0x190/0x1e0 [ 234.504335][ T8519] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.504360][ T8519] ? find_held_lock+0x2b/0x80 [ 234.504387][ T8519] __sys_sendmsg+0x170/0x220 [ 234.504408][ T8519] ? __pfx___sys_sendmsg+0x10/0x10 [ 234.504427][ T8519] ? __fget_files+0x21f/0x3d0 [ 234.504462][ T8519] ? ksys_write+0x1ac/0x250 [ 234.504494][ T8519] ? rcu_is_watching+0x12/0xc0 [ 234.504519][ T8519] __do_fast_syscall_32+0xe7/0x950 [ 234.504550][ T8519] ? lockdep_hardirqs_on+0x78/0x100 [ 234.504578][ T8519] do_fast_syscall_32+0x32/0x70 [ 234.504604][ T8519] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 234.504633][ T8519] RIP: 0023:0xf7f97fcc [ 234.504654][ T8519] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 234.504674][ T8519] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 234.504727][ T8519] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 234.504741][ T8519] RDX: 000000000404481c RSI: 0000000000000000 RDI: 0000000000000000 [ 234.504755][ T8519] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 234.504768][ T8519] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 234.504779][ T8519] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 234.504809][ T8519] [ 234.833972][ T8522] netlink: 20 bytes leftover after parsing attributes in process `syz.3.686'. [ 235.188930][ T973] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 235.341299][ T973] usb 6-1: unable to get BOS descriptor or descriptor too short [ 235.345083][ T973] usb 6-1: config 129 has an invalid interface number: 135 but max is 0 [ 235.348089][ T973] usb 6-1: config 129 has an invalid interface number: 5 but max is 0 [ 235.351635][ T973] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 235.355110][ T973] usb 6-1: config 129 has no interface number 0 [ 235.357267][ T973] usb 6-1: config 129 has no interface number 1 [ 235.360108][ T973] usb 6-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 235.365046][ T973] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 235.369614][ T973] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 235.374533][ T973] usb 6-1: config 129 interface 135 has no altsetting 0 [ 235.377053][ T973] usb 6-1: config 129 interface 5 has no altsetting 0 [ 235.391957][ T973] usb 6-1: string descriptor 0 read error: -22 [ 235.396154][ T973] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 235.403872][ T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.437334][ T973] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 235.445492][ T973] usb 6-1: MIDIStreaming interface descriptor not found [ 236.953544][ T8539] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20001 [ 237.187042][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 237.187065][ T40] audit: type=1326 audit(1776457867.444:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8538 comm="syz.2.691" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f97fcc code=0x0 [ 237.805991][ T8547] fuse: Unknown parameter 'use00000000000000000000' [ 237.967148][ T5999] usb 6-1: USB disconnect, device number 13 [ 238.020228][ T8560] netlink: 20 bytes leftover after parsing attributes in process `syz.1.696'. [ 238.128150][ T8564] netlink: 'syz.2.699': attribute type 10 has an invalid length. [ 238.131721][ T8564] netlink: 40 bytes leftover after parsing attributes in process `syz.2.699'. [ 238.394267][ T8570] syzkaller0: entered promiscuous mode [ 238.396065][ T8570] syzkaller0: entered allmulticast mode [ 238.680153][ T8576] syzkaller0: entered promiscuous mode [ 238.682775][ T8576] syzkaller0: entered allmulticast mode [ 238.687775][ T8578] netlink: 'syz.0.705': attribute type 1 has an invalid length. [ 238.691426][ T8578] netlink: 60 bytes leftover after parsing attributes in process `syz.0.705'. [ 238.696191][ T8576] FAULT_INJECTION: forcing a failure. [ 238.696191][ T8576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.702298][ T8576] CPU: 2 UID: 0 PID: 8576 Comm: syz.3.704 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.702332][ T8576] Tainted: [L]=SOFTLOCKUP [ 238.702338][ T8576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 238.702349][ T8576] Call Trace: [ 238.702355][ T8576] [ 238.702364][ T8576] dump_stack_lvl+0x100/0x190 [ 238.702401][ T8576] should_fail_ex.cold+0x5/0xa [ 238.702423][ T8576] _copy_from_iter+0x1f4/0x1690 [ 238.702453][ T8576] ? __pfx__copy_from_iter+0x10/0x10 [ 238.702473][ T8576] ? find_held_lock+0x2b/0x80 [ 238.702495][ T8576] ? dev_get_by_index+0x180/0x380 [ 238.702520][ T8576] ? dev_get_by_index+0x180/0x380 [ 238.702548][ T8576] packet_sendmsg+0x1d95/0x51c0 [ 238.702568][ T8576] ? __print_lock_name+0x2a/0x80 [ 238.702597][ T8576] ? __pfx___might_resched+0x10/0x10 [ 238.702615][ T8576] ? __lock_acquire+0x4a5/0x2630 [ 238.702643][ T8576] ? aa_sk_perm+0x309/0xaa0 [ 238.702666][ T8576] ? __pfx_packet_sendmsg+0x10/0x10 [ 238.702681][ T8576] ? __pfx_aa_sk_perm+0x10/0x10 [ 238.702711][ T8576] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 238.702742][ T8576] ____sys_sendmsg+0x9e1/0xb70 [ 238.702759][ T8576] ? __pfx_packet_sendmsg+0x10/0x10 [ 238.702776][ T8576] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.702809][ T8576] ___sys_sendmsg+0x190/0x1e0 [ 238.702830][ T8576] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.702858][ T8576] ? find_held_lock+0x2b/0x80 [ 238.702895][ T8576] __sys_sendmsg+0x170/0x220 [ 238.702921][ T8576] ? __pfx___sys_sendmsg+0x10/0x10 [ 238.702943][ T8576] ? __fget_files+0x21f/0x3d0 [ 238.702974][ T8576] ? ksys_write+0x1ac/0x250 [ 238.703002][ T8576] ? rcu_is_watching+0x12/0xc0 [ 238.703025][ T8576] __do_fast_syscall_32+0xe7/0x950 [ 238.703053][ T8576] ? lockdep_hardirqs_on+0x78/0x100 [ 238.703077][ T8576] do_fast_syscall_32+0x32/0x70 [ 238.703103][ T8576] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 238.703127][ T8576] RIP: 0023:0xf7f95fcc [ 238.703143][ T8576] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 238.703164][ T8576] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 238.703184][ T8576] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000280 [ 238.703195][ T8576] RDX: 0000000000004005 RSI: 0000000000000000 RDI: 0000000000000000 [ 238.703205][ T8576] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 238.703215][ T8576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.703226][ T8576] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 238.703248][ T8576] [ 239.278928][ T8593] ./file0: Can't lookup blockdev [ 239.663650][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'. [ 239.669002][ T8602] netlink: 148 bytes leftover after parsing attributes in process `syz.2.712'. [ 239.736076][ T8610] program syz.0.715 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.860543][ T8614] tipc: Started in network mode [ 239.862571][ T8614] tipc: Node identity 2e377bcda188, cluster identity 4711 [ 239.865362][ T8614] tipc: Enabled bearer , priority 0 [ 239.868590][ T8614] syzkaller0: entered promiscuous mode [ 239.870669][ T8614] syzkaller0: entered allmulticast mode [ 239.900825][ T8614] tipc: Resetting bearer [ 239.915539][ T8613] tipc: Resetting bearer [ 239.956762][ T8613] tipc: Disabling bearer [ 239.973817][ T8620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.717'. [ 239.980268][ T8620] team_slave_0: entered promiscuous mode [ 239.982509][ T8620] team_slave_1: entered promiscuous mode [ 239.984758][ T8620] team0: entered allmulticast mode [ 239.986659][ T8620] team_slave_0: entered allmulticast mode [ 239.988567][ T8620] team_slave_1: entered allmulticast mode [ 239.990876][ T8620] team0: entered promiscuous mode [ 239.994894][ T8620] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 240.000480][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.717'. [ 240.043604][ T8620] team0: left allmulticast mode [ 240.048600][ T8620] team_slave_0: left allmulticast mode [ 240.053819][ T8620] team_slave_1: left allmulticast mode [ 240.056934][ T8620] team0: left promiscuous mode [ 240.060141][ T8620] team_slave_0: left promiscuous mode [ 240.063043][ T8620] team_slave_1: left promiscuous mode [ 240.333154][ T8629] netlink: 'syz.3.721': attribute type 1 has an invalid length. [ 240.336074][ T8629] netlink: 60 bytes leftover after parsing attributes in process `syz.3.721'. [ 240.352883][ T8630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.413277][ T8630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.421203][ T8630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.451008][ T8632] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 240.454578][ T8632] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 240.457368][ T8632] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 240.460445][ T8632] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 240.464008][ T8632] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 240.467068][ T8632] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 240.470239][ T8632] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 240.474046][ T8632] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 240.477244][ T8632] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 240.480163][ T8632] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 240.511837][ T8632] ./file0: Can't lookup blockdev [ 241.121188][ T8645] netlink: 'syz.3.724': attribute type 1 has an invalid length. [ 242.141786][ T8645] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 242.217724][ T8649] loop6: detected capacity change from 0 to 7 [ 242.235728][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.239593][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.249827][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.253608][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.258272][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.261919][ T8654] netlink: 'syz.2.728': attribute type 1 has an invalid length. [ 242.262238][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.267917][ T8658] FAULT_INJECTION: forcing a failure. [ 242.267917][ T8658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.270705][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.275351][ T8658] CPU: 3 UID: 0 PID: 8658 Comm: syz.1.727 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.275383][ T8658] Tainted: [L]=SOFTLOCKUP [ 242.275391][ T8658] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.275402][ T8658] Call Trace: [ 242.275408][ T8658] [ 242.275417][ T8658] dump_stack_lvl+0x100/0x190 [ 242.275459][ T8658] should_fail_ex.cold+0x5/0xa [ 242.275488][ T8658] _copy_to_user+0x32/0xd0 [ 242.275514][ T8658] simple_read_from_buffer+0xcb/0x170 [ 242.275548][ T8658] proc_fail_nth_read+0x1af/0x230 [ 242.275574][ T8658] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.275600][ T8658] ? rw_verify_area+0xce/0x6d0 [ 242.275641][ T8658] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.275666][ T8658] vfs_read+0x1e4/0xb30 [ 242.275698][ T8658] ? __pfx_vfs_read+0x10/0x10 [ 242.275722][ T8658] ? find_held_lock+0x2b/0x80 [ 242.275747][ T8658] ? __fget_files+0x215/0x3d0 [ 242.275779][ T8658] ? __fget_files+0x21f/0x3d0 [ 242.275813][ T8658] ksys_read+0x12a/0x250 [ 242.275839][ T8658] ? __pfx_ksys_read+0x10/0x10 [ 242.275867][ T8658] ? rcu_is_watching+0x12/0xc0 [ 242.275889][ T8658] ? rcu_is_watching+0x12/0xc0 [ 242.275913][ T8658] do_int80_emulation+0x141/0x700 [ 242.275945][ T8658] asm_int80_emulation+0x1a/0x20 [ 242.275964][ T8658] RIP: 0023:0xf7135cab [ 242.275981][ T8658] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 242.275999][ T8658] RSP: 002b:00000000f53d54bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 242.276019][ T8658] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53d55d0 [ 242.276031][ T8658] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 242.276042][ T8658] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 242.276054][ T8658] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 242.276065][ T8658] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 242.276088][ T8658] [ 242.339547][ T8654] 8021q: adding VLAN 0 to HW filter on device bond2 [ 242.340471][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.356178][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.362363][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.368003][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.369959][ T8660] bridge0: port 3(dummy0) entered disabled state [ 242.371532][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.371896][ T8649] ldm_validate_partition_table(): Disk read failed. [ 242.376603][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.381027][ T8654] FAULT_INJECTION: forcing a failure. [ 242.381027][ T8654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.381986][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.384324][ T8660] dummy0: left allmulticast mode [ 242.384372][ T8660] dummy0: left promiscuous mode [ 242.385866][ T8654] CPU: 2 UID: 0 PID: 8654 Comm: syz.2.728 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.385892][ T8654] Tainted: [L]=SOFTLOCKUP [ 242.385898][ T8654] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.385907][ T8654] Call Trace: [ 242.385914][ T8654] [ 242.385921][ T8654] dump_stack_lvl+0x100/0x190 [ 242.385956][ T8654] should_fail_ex.cold+0x5/0xa [ 242.385979][ T8654] _copy_from_iter+0x1f4/0x1690 [ 242.386004][ T8654] ? __asan_memset+0x23/0x50 [ 242.386027][ T8654] ? __pfx__copy_from_iter+0x10/0x10 [ 242.386045][ T8654] ? __pfx___alloc_skb+0x10/0x10 [ 242.386078][ T8654] netlink_sendmsg+0x808/0xda0 [ 242.386101][ T8654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.386121][ T8654] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 242.386152][ T8654] ____sys_sendmsg+0x9e1/0xb70 [ 242.386169][ T8654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.386188][ T8654] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.386215][ T8654] ___sys_sendmsg+0x190/0x1e0 [ 242.386235][ T8654] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.386263][ T8654] ? find_held_lock+0x2b/0x80 [ 242.386297][ T8654] __sys_sendmsg+0x170/0x220 [ 242.386326][ T8654] ? __pfx___sys_sendmsg+0x10/0x10 [ 242.386347][ T8654] ? __fget_files+0x21f/0x3d0 [ 242.386380][ T8654] ? ksys_write+0x1ac/0x250 [ 242.386405][ T8654] ? rcu_is_watching+0x12/0xc0 [ 242.386426][ T8654] __do_fast_syscall_32+0xe7/0x950 [ 242.386450][ T8654] ? lockdep_hardirqs_on+0x78/0x100 [ 242.386470][ T8654] do_fast_syscall_32+0x32/0x70 [ 242.386492][ T8654] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 242.386513][ T8654] RIP: 0023:0xf7f97fcc [ 242.386527][ T8654] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 242.386543][ T8654] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 242.386561][ T8654] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 242.386571][ T8654] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 242.386580][ T8654] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 242.386590][ T8654] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 242.386599][ T8654] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 242.386620][ T8654] [ 242.386972][ T8660] bridge0: port 3(dummy0) entered disabled state [ 242.390799][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.502099][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.511459][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.515378][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.524391][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.528747][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.532367][ T8649] Dev loop6: unable to read RDB block 0 [ 242.539487][ T8660] bond2: (slave dummy0): making interface the new active one [ 242.545386][ T8660] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 242.550232][ T8649] loop6: unable to read partition table [ 242.552236][ T8649] loop6: partition table beyond EOD, truncated [ 242.554736][ T8649] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 242.652132][ T8666] ./file0: Can't lookup blockdev [ 243.288054][ T8687] FAULT_INJECTION: forcing a failure. [ 243.288054][ T8687] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 243.293365][ T8687] CPU: 3 UID: 0 PID: 8687 Comm: syz.1.738 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.293399][ T8687] Tainted: [L]=SOFTLOCKUP [ 243.293405][ T8687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 243.293416][ T8687] Call Trace: [ 243.293423][ T8687] [ 243.293430][ T8687] dump_stack_lvl+0x100/0x190 [ 243.293469][ T8687] should_fail_ex.cold+0x5/0xa [ 243.293490][ T8687] ? prepare_alloc_pages+0x16d/0x5f0 [ 243.293514][ T8687] should_fail_alloc_page+0xeb/0x140 [ 243.293535][ T8687] prepare_alloc_pages+0x1f0/0x5f0 [ 243.293554][ T8687] ? __lock_acquire+0x4a5/0x2630 [ 243.293583][ T8687] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 243.293613][ T8687] ? __lock_acquire+0x4a5/0x2630 [ 243.293641][ T8687] ? find_held_lock+0x2b/0x80 [ 243.293661][ T8687] ? is_bpf_text_address+0x8a/0x1a0 [ 243.293683][ T8687] ? is_bpf_text_address+0x8a/0x1a0 [ 243.293707][ T8687] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 243.293735][ T8687] ? find_held_lock+0x2b/0x80 [ 243.293755][ T8687] ? get_il_weight+0xea/0x290 [ 243.293781][ T8687] ? get_il_weight+0xea/0x290 [ 243.293812][ T8687] ? get_il_weight+0xf4/0x290 [ 243.293840][ T8687] ? weighted_interleave_nodes+0x274/0x560 [ 243.293873][ T8687] ? policy_nodemask+0xed/0x4f0 [ 243.293892][ T8687] alloc_pages_mpol+0x1fb/0x540 [ 243.293911][ T8687] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 243.293927][ T8687] ? kasan_save_stack+0x30/0x50 [ 243.293951][ T8687] ? __kasan_kmalloc+0xaa/0xb0 [ 243.293974][ T8687] ? __get_vm_area_node+0x101/0x330 [ 243.293991][ T8687] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 243.294017][ T8687] alloc_pages_noprof+0x1a/0x160 [ 243.294045][ T8687] get_free_pages_noprof+0x10/0xb0 [ 243.294062][ T8687] __kasan_populate_vmalloc+0xa0/0x210 [ 243.294092][ T8687] alloc_vmap_area+0x95d/0x2b70 [ 243.294114][ T8687] ? __pfx_alloc_vmap_area+0x10/0x10 [ 243.294130][ T8687] __get_vm_area_node+0x1ca/0x330 [ 243.294146][ T8687] __vmalloc_node_range_noprof+0x228/0x1630 [ 243.294161][ T8687] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 243.294179][ T8687] ? process_measurement+0x1f4/0x2350 [ 243.294214][ T8687] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 243.294237][ T8687] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 243.294260][ T8687] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 243.294284][ T8687] ? __lock_acquire+0x4a5/0x2630 [ 243.294312][ T8687] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 243.294335][ T8687] ? __lock_acquire+0x4a5/0x2630 [ 243.294368][ T8687] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 243.294389][ T8687] __vmalloc_node_noprof+0xad/0xf0 [ 243.294410][ T8687] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 243.294434][ T8687] __vmalloc_noprof+0xa3/0x120 [ 243.294526][ T8687] ? __pfx___vmalloc_noprof+0x10/0x10 [ 243.294549][ T8687] ? rcu_is_watching+0x12/0xc0 [ 243.294570][ T8687] ? apparmor_capable+0x1d7/0x4d0 [ 243.294592][ T8687] bpf_prog_alloc_no_stats+0x58/0x640 [ 243.294613][ T8687] ? security_capable+0x80/0x260 [ 243.294645][ T8687] bpf_prog_alloc+0x3b/0x200 [ 243.294665][ T8687] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 243.294692][ T8687] bpf_prog_load+0x494/0x2c30 [ 243.294717][ T8687] ? _parse_integer_limit+0x17f/0x1d0 [ 243.294748][ T8687] ? __pfx_bpf_prog_load+0x10/0x10 [ 243.294772][ T8687] ? __lock_acquire+0x4a5/0x2630 [ 243.294822][ T8687] ? bpf_lsm_bpf+0x9/0x10 [ 243.294842][ T8687] __sys_bpf+0x223a/0x4b90 [ 243.294871][ T8687] ? __pfx___sys_bpf+0x10/0x10 [ 243.294895][ T8687] ? get_pid_task+0x106/0x250 [ 243.294920][ T8687] ? proc_fail_nth_write+0x9f/0x220 [ 243.294968][ T8687] ? find_held_lock+0x2b/0x80 [ 243.294992][ T8687] ? find_held_lock+0x2b/0x80 [ 243.295014][ T8687] ? ksys_write+0x190/0x250 [ 243.295053][ T8687] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 243.295080][ T8687] ? kernel_write+0x693/0x6c0 [ 243.295119][ T8687] ? fput+0x79/0x100 [ 243.295137][ T8687] ? ksys_write+0x1ac/0x250 [ 243.295157][ T8687] __ia32_sys_bpf+0x79/0xf0 [ 243.295169][ T8687] ? lockdep_hardirqs_on+0x78/0x100 [ 243.295184][ T8687] __do_fast_syscall_32+0xe7/0x950 [ 243.295201][ T8687] ? lockdep_hardirqs_on+0x78/0x100 [ 243.295218][ T8687] do_fast_syscall_32+0x32/0x70 [ 243.295234][ T8687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.295251][ T8687] RIP: 0023:0xf7f32fcc [ 243.295263][ T8687] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 243.295276][ T8687] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 243.295292][ T8687] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000008000e000 [ 243.295300][ T8687] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 243.295307][ T8687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 243.295314][ T8687] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 243.295321][ T8687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.295336][ T8687] [ 243.295418][ T8687] syz.1.738: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 243.486189][ T8687] CPU: 3 UID: 0 PID: 8687 Comm: syz.1.738 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.486208][ T8687] Tainted: [L]=SOFTLOCKUP [ 243.486212][ T8687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 243.486219][ T8687] Call Trace: [ 243.486225][ T8687] [ 243.486231][ T8687] dump_stack_lvl+0x100/0x190 [ 243.486258][ T8687] warn_alloc.cold+0x95/0x1c1 [ 243.486271][ T8687] ? __pfx_warn_alloc+0x10/0x10 [ 243.486288][ T8687] ? lockdep_hardirqs_on+0x78/0x100 [ 243.486305][ T8687] ? __get_vm_area_node+0x2c5/0x330 [ 243.486321][ T8687] ? __get_vm_area_node+0x208/0x330 [ 243.486335][ T8687] __vmalloc_node_range_noprof+0xccd/0x1630 [ 243.486349][ T8687] ? process_measurement+0x1f4/0x2350 [ 243.486371][ T8687] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 243.486386][ T8687] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 243.486401][ T8687] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 243.486417][ T8687] ? __lock_acquire+0x4a5/0x2630 [ 243.486436][ T8687] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 243.486451][ T8687] ? __lock_acquire+0x4a5/0x2630 [ 243.486472][ T8687] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 243.486485][ T8687] __vmalloc_node_noprof+0xad/0xf0 [ 243.486499][ T8687] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 243.486513][ T8687] __vmalloc_noprof+0xa3/0x120 [ 243.486526][ T8687] ? __pfx___vmalloc_noprof+0x10/0x10 [ 243.486541][ T8687] ? rcu_is_watching+0x12/0xc0 [ 243.486554][ T8687] ? apparmor_capable+0x1d7/0x4d0 [ 243.486568][ T8687] bpf_prog_alloc_no_stats+0x58/0x640 [ 243.486581][ T8687] ? security_capable+0x80/0x260 [ 243.486601][ T8687] bpf_prog_alloc+0x3b/0x200 [ 243.486613][ T8687] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 243.486631][ T8687] bpf_prog_load+0x494/0x2c30 [ 243.486649][ T8687] ? _parse_integer_limit+0x17f/0x1d0 [ 243.486668][ T8687] ? __pfx_bpf_prog_load+0x10/0x10 [ 243.486684][ T8687] ? __lock_acquire+0x4a5/0x2630 [ 243.486713][ T8687] ? bpf_lsm_bpf+0x9/0x10 [ 243.486727][ T8687] __sys_bpf+0x223a/0x4b90 [ 243.486746][ T8687] ? __pfx___sys_bpf+0x10/0x10 [ 243.486763][ T8687] ? get_pid_task+0x106/0x250 [ 243.486779][ T8687] ? proc_fail_nth_write+0x9f/0x220 [ 243.486794][ T8687] ? find_held_lock+0x2b/0x80 [ 243.486809][ T8687] ? find_held_lock+0x2b/0x80 [ 243.486822][ T8687] ? ksys_write+0x190/0x250 [ 243.486843][ T8687] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 243.486857][ T8687] ? kernel_write+0x693/0x6c0 [ 243.486881][ T8687] ? fput+0x79/0x100 [ 243.486893][ T8687] ? ksys_write+0x1ac/0x250 [ 243.486911][ T8687] __ia32_sys_bpf+0x79/0xf0 [ 243.486920][ T8687] ? lockdep_hardirqs_on+0x78/0x100 [ 243.486934][ T8687] __do_fast_syscall_32+0xe7/0x950 [ 243.486950][ T8687] ? lockdep_hardirqs_on+0x78/0x100 [ 243.486964][ T8687] do_fast_syscall_32+0x32/0x70 [ 243.486978][ T8687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.486996][ T8687] RIP: 0023:0xf7f32fcc [ 243.487005][ T8687] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 243.487016][ T8687] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 243.487032][ T8687] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000008000e000 [ 243.487039][ T8687] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 243.487045][ T8687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 243.487051][ T8687] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 243.487057][ T8687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.487070][ T8687] [ 243.487074][ T8687] Mem-Info: [ 243.645599][ T8687] active_anon:18334 inactive_anon:42 isolated_anon:0 [ 243.645599][ T8687] active_file:17364 inactive_file:24158 isolated_file:0 [ 243.645599][ T8687] unevictable:1768 dirty:694 writeback:0 [ 243.645599][ T8687] slab_reclaimable:7954 slab_unreclaimable:54137 [ 243.645599][ T8687] mapped:34570 shmem:10765 pagetables:1211 [ 243.645599][ T8687] sec_pagetables:299 bounce:0 [ 243.645599][ T8687] kernel_misc_reclaimable:0 [ 243.645599][ T8687] free:45441 free_pcp:9913 free_cma:0 [ 243.656058][ T8688] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 243.662572][ T8687] Node 0 active_anon:1224kB inactive_anon:32kB active_file:472kB inactive_file:172kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:80kB dirty:8kB writeback:0kB shmem:4432kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8052kB pagetables:1756kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 243.664723][ T8688] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 243.667283][ T8688] vhci_hcd vhci_hcd.0: Device attached [ 243.678252][ T8687] Node 1 active_anon:71112kB inactive_anon:136kB active_file:68984kB inactive_file:96460kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:126864kB dirty:2768kB writeback:0kB shmem:37528kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5360kB pagetables:3088kB sec_pagetables:64kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 243.695500][ T8687] Node 0 DMA free:2076kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:668kB local_pcp:192kB free_cma:0kB [ 243.705856][ T8687] lowmem_reserve[]: 0 284 284 284 284 [ 243.707909][ T8687] Node 0 DMA32 free:16144kB boost:0kB min:13052kB low:16312kB high:19572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:388kB inactive_anon:32kB active_file:472kB inactive_file:36kB unevictable:3536kB writepending:8kB zspages:0kB present:1032196kB managed:291004kB mlocked:0kB bounce:0kB free_pcp:12004kB local_pcp:2960kB free_cma:0kB [ 243.718227][ T8687] lowmem_reserve[]: 0 0 0 0 0 [ 243.719951][ T8687] Node 1 DMA32 free:170052kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:63112kB inactive_anon:136kB active_file:69436kB inactive_file:96460kB unevictable:3536kB writepending:3028kB zspages:2180kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:29952kB local_pcp:3212kB free_cma:0kB [ 243.731328][ T8687] lowmem_reserve[]: 0 0 0 0 0 [ 243.732884][ T8687] Node 0 DMA: 141*4kB (UM) 7*8kB (UM) 13*16kB (UM) 21*32kB (UM) 5*64kB (UM) 0*128kB 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2076kB [ 243.737518][ T8687] Node 0 DMA32: 234*4kB (UE) 7*8kB (UE) 41*16kB (U) 23*32kB (UM) 39*64kB (UME) 18*128kB (UM) 11*256kB (M) 6*512kB (UM) 3*1024kB (UM) 0*2048kB 0*4096kB = 16144kB [ 243.744165][ T8687] Node 1 DMA32: 2122*4kB (UME) 1423*8kB (UME) 647*16kB (UME) 116*32kB (UME) 136*64kB (UME) 156*128kB (UME) 110*256kB (UME) 52*512kB (UME) 21*1024kB (UM) 9*2048kB (UM) 3*4096kB (UM) = 169616kB [ 243.751019][ T8687] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 243.755485][ T8687] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 243.759637][ T8687] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 243.763044][ T8687] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 243.766485][ T8687] 50564 total pagecache pages [ 243.768118][ T8687] 842 pages in swap cache [ 243.769765][ T8687] Free swap = 116548kB [ 243.771259][ T8687] Total swap = 124996kB [ 243.772765][ T8687] 524155 pages RAM [ 243.774070][ T8687] 0 pages HighMem/MovableOnly [ 243.775652][ T8687] 210511 pages reserved [ 243.777122][ T8687] 0 pages cma reserved [ 244.033891][ T8695] fuse: Unknown parameter 'user_i00000000000000000000' [ 244.483515][ T8678] ieee802154 phy0 wpan0: encryption failed: -22 [ 244.739137][ T54] usb 44-1: SetAddress Request (2) to port 0 [ 244.744046][ T54] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 244.952111][ T8702] FAULT_INJECTION: forcing a failure. [ 244.952111][ T8702] name failslab, interval 1, probability 0, space 0, times 0 [ 244.957785][ T8702] CPU: 3 UID: 0 PID: 8702 Comm: syz.1.742 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.957819][ T8702] Tainted: [L]=SOFTLOCKUP [ 244.957827][ T8702] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.957838][ T8702] Call Trace: [ 244.957847][ T8702] [ 244.957856][ T8702] dump_stack_lvl+0x100/0x190 [ 244.957898][ T8702] should_fail_ex.cold+0x5/0xa [ 244.957924][ T8702] should_failslab+0xc2/0x120 [ 244.957945][ T8702] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 244.957970][ T8702] ? do_getname_kernel+0x5d/0x250 [ 244.957992][ T8702] ? __pfx_tomoyo_unix_entry+0x10/0x10 [ 244.958022][ T8702] do_getname_kernel+0x5d/0x250 [ 244.958046][ T8702] kern_path+0x1f/0x50 [ 244.958073][ T8702] unix_find_other+0x120/0xb10 [ 244.958100][ T8702] ? __pfx_unix_find_other+0x10/0x10 [ 244.958122][ T8702] ? __pfx_tomoyo_socket_connect_permission+0x10/0x10 [ 244.958155][ T8702] unix_dgram_connect+0x1ea/0xbf0 [ 244.958189][ T8702] ? __pfx_unix_dgram_connect+0x10/0x10 [ 244.958209][ T8702] __sys_connect_file+0x141/0x1a0 [ 244.958237][ T8702] __sys_connect+0x141/0x170 [ 244.958260][ T8702] ? __pfx___sys_connect+0x10/0x10 [ 244.958293][ T8702] ? ksys_write+0x1ac/0x250 [ 244.958324][ T8702] __ia32_sys_connect+0x71/0xb0 [ 244.958346][ T8702] ? lockdep_hardirqs_on+0x78/0x100 [ 244.958369][ T8702] __do_fast_syscall_32+0xe7/0x950 [ 244.958389][ T8702] ? lockdep_hardirqs_on+0x78/0x100 [ 244.958410][ T8702] do_fast_syscall_32+0x32/0x70 [ 244.958435][ T8702] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.958457][ T8702] RIP: 0023:0xf7f32fcc [ 244.958470][ T8702] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 244.958483][ T8702] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 000000000000016a [ 244.958497][ T8702] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 244.958505][ T8702] RDX: 000000000000006e RSI: 0000000000000000 RDI: 0000000000000000 [ 244.958512][ T8702] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.958519][ T8702] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 244.958526][ T8702] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.958542][ T8702] [ 245.013407][ T8689] vhci_hcd: connection reset by peer [ 245.059408][ T1156] vhci_hcd vhci_hcd.3: stop threads [ 245.061702][ T1156] vhci_hcd vhci_hcd.3: release socket [ 245.066822][ T1156] vhci_hcd vhci_hcd.3: disconnect device [ 245.306988][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.745'. [ 245.311095][ T8710] team_slave_0: entered promiscuous mode [ 245.313980][ T8710] team_slave_1: entered promiscuous mode [ 245.317293][ T8710] team0: entered allmulticast mode [ 245.320414][ T8710] team_slave_0: entered allmulticast mode [ 245.322903][ T8710] team_slave_1: entered allmulticast mode [ 245.325247][ T8710] team0: entered promiscuous mode [ 245.330819][ T8710] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 245.343103][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.745'. [ 245.347780][ T8710] team0: left allmulticast mode [ 245.350335][ T8710] team_slave_0: left allmulticast mode [ 245.353221][ T8710] team_slave_1: left allmulticast mode [ 245.356158][ T8710] team0: left promiscuous mode [ 245.358984][ T8710] team_slave_0: left promiscuous mode [ 245.361404][ T8710] team_slave_1: left promiscuous mode [ 245.518047][ T8713] netlink: 'syz.0.746': attribute type 1 has an invalid length. [ 245.663412][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.747'. [ 245.673455][ T8717] erspan0: entered promiscuous mode [ 245.679622][ T8717] macvtap1: entered promiscuous mode [ 245.682695][ T8717] macvtap1: entered allmulticast mode [ 245.685111][ T8717] erspan0: entered allmulticast mode [ 245.692682][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.747'. [ 245.734245][ T8723] netlink: 'syz.2.749': attribute type 10 has an invalid length. [ 245.737681][ T8723] netlink: 40 bytes leftover after parsing attributes in process `syz.2.749'. [ 245.742221][ T8723] dummy0: entered promiscuous mode [ 245.753279][ T8723] bond2: (slave dummy0): Releasing active interface [ 245.765426][ T8723] bridge0: port 3(dummy0) entered blocking state [ 245.768576][ T8723] bridge0: port 3(dummy0) entered disabled state [ 245.772387][ T8723] dummy0: entered allmulticast mode [ 245.946566][ T8737] loop5: detected capacity change from 0 to 7 [ 246.527361][ T12] bond0: (slave bond_slave_0): interface is now down [ 246.538704][ T12] bond0: (slave bond_slave_1): interface is now down [ 246.550492][ T12] bond0: now running without any active interface! [ 246.605802][ T8737] Dev loop5: unable to read RDB block 7 [ 246.608356][ T8737] loop5: unable to read partition table [ 246.679098][ T8737] loop5: partition table beyond EOD, truncated [ 246.681720][ T8737] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 246.770161][ T8750] FAULT_INJECTION: forcing a failure. [ 246.770161][ T8750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.775014][ T8750] CPU: 3 UID: 0 PID: 8750 Comm: syz.3.757 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.775038][ T8750] Tainted: [L]=SOFTLOCKUP [ 246.775043][ T8750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 246.775051][ T8750] Call Trace: [ 246.775057][ T8750] [ 246.775063][ T8750] dump_stack_lvl+0x100/0x190 [ 246.775095][ T8750] should_fail_ex.cold+0x5/0xa [ 246.775113][ T8750] _copy_from_iter+0x1f4/0x1690 [ 246.775132][ T8750] ? __asan_memset+0x23/0x50 [ 246.775151][ T8750] ? __pfx__copy_from_iter+0x10/0x10 [ 246.775182][ T8750] ? __pfx___alloc_skb+0x10/0x10 [ 246.775222][ T8750] netlink_sendmsg+0x808/0xda0 [ 246.775247][ T8750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.775274][ T8750] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 246.775317][ T8750] ____sys_sendmsg+0x9e1/0xb70 [ 246.775338][ T8750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.775354][ T8750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.775375][ T8750] ___sys_sendmsg+0x190/0x1e0 [ 246.775391][ T8750] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.775414][ T8750] ? find_held_lock+0x2b/0x80 [ 246.775441][ T8750] __sys_sendmsg+0x170/0x220 [ 246.775461][ T8750] ? __pfx___sys_sendmsg+0x10/0x10 [ 246.775479][ T8750] ? __fget_files+0x21f/0x3d0 [ 246.775505][ T8750] ? ksys_write+0x1ac/0x250 [ 246.775527][ T8750] ? rcu_is_watching+0x12/0xc0 [ 246.775544][ T8750] __do_fast_syscall_32+0xe7/0x950 [ 246.775563][ T8750] ? lockdep_hardirqs_on+0x78/0x100 [ 246.775581][ T8750] do_fast_syscall_32+0x32/0x70 [ 246.775599][ T8750] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 246.775618][ T8750] RIP: 0023:0xf7f95fcc [ 246.775630][ T8750] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 246.775645][ T8750] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 246.775660][ T8750] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 246.775668][ T8750] RDX: 00000000200088c2 RSI: 0000000000000000 RDI: 0000000000000000 [ 246.775676][ T8750] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.775683][ T8750] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 246.775691][ T8750] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.775707][ T8750] [ 246.931436][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.759'. [ 246.941233][ T8756] erspan0: entered promiscuous mode [ 246.943832][ T8756] macvtap1: entered promiscuous mode [ 246.946416][ T8756] macvtap1: entered allmulticast mode [ 246.948944][ T8756] erspan0: entered allmulticast mode [ 246.955912][ T8756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.759'. [ 247.435978][ T8774] netlink: 47 bytes leftover after parsing attributes in process `syz.3.764'. [ 247.440576][ T8774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.764'. [ 247.446897][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.764'. [ 247.896464][ T8785] macvtap2: entered promiscuous mode [ 247.899513][ T8785] macvtap2: entered allmulticast mode [ 248.080428][ T8791] FAULT_INJECTION: forcing a failure. [ 248.080428][ T8791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.085856][ T8791] CPU: 2 UID: 0 PID: 8791 Comm: syz.2.770 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.085878][ T8791] Tainted: [L]=SOFTLOCKUP [ 248.085882][ T8791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 248.085889][ T8791] Call Trace: [ 248.085894][ T8791] [ 248.085899][ T8791] dump_stack_lvl+0x100/0x190 [ 248.085926][ T8791] should_fail_ex.cold+0x5/0xa [ 248.085942][ T8791] _copy_to_user+0x32/0xd0 [ 248.085958][ T8791] simple_read_from_buffer+0xcb/0x170 [ 248.085978][ T8791] proc_fail_nth_read+0x1af/0x230 [ 248.085993][ T8791] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 248.086009][ T8791] ? rw_verify_area+0xce/0x6d0 [ 248.086028][ T8791] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 248.086043][ T8791] vfs_read+0x1e4/0xb30 [ 248.086062][ T8791] ? __pfx_vfs_read+0x10/0x10 [ 248.086077][ T8791] ? find_held_lock+0x2b/0x80 [ 248.086091][ T8791] ? __fget_files+0x215/0x3d0 [ 248.086111][ T8791] ? __fget_files+0x21f/0x3d0 [ 248.086132][ T8791] ksys_read+0x12a/0x250 [ 248.086150][ T8791] ? __pfx_ksys_read+0x10/0x10 [ 248.086166][ T8791] ? rcu_is_watching+0x12/0xc0 [ 248.086179][ T8791] ? rcu_is_watching+0x12/0xc0 [ 248.086193][ T8791] do_int80_emulation+0x141/0x700 [ 248.086211][ T8791] asm_int80_emulation+0x1a/0x20 [ 248.086222][ T8791] RIP: 0023:0xf7195cab [ 248.086233][ T8791] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 248.086244][ T8791] RSP: 002b:00000000f54354bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 248.086259][ T8791] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54355d0 [ 248.086268][ T8791] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 248.086277][ T8791] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 248.086286][ T8791] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 248.086296][ T8791] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 248.086319][ T8791] [ 248.233680][ T8793] ./file0: Can't lookup blockdev [ 248.298902][ T39] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 248.326791][ T8799] ata3.00: invalid multi_count 16 ignored [ 248.462346][ T39] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 248.466002][ T39] usb 6-1: config 1 has an invalid descriptor of length 83, skipping remainder of the config [ 248.470283][ T39] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 248.473303][ T39] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 229, changing to 11 [ 248.476956][ T39] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33203, setting to 1024 [ 248.484009][ T39] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 248.487189][ T39] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 248.490040][ T39] usb 6-1: Product: syz [ 248.491366][ T39] usb 6-1: Manufacturer: syz [ 248.502350][ T39] cdc_wdm 6-1:1.0: skipping garbage [ 248.504793][ T39] cdc_wdm 6-1:1.0: skipping garbage [ 248.536665][ T39] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 248.539420][ T39] cdc_wdm 6-1:1.0: Unknown control protocol [ 248.570335][ T8808] binder: 8807:8808 ioctl c00c6211 ffffffff returned -14 [ 248.744712][ T5999] usb 6-1: USB disconnect, device number 14 [ 249.117260][ T8813] binder: 8812:8813 ioctl c00c6211 ffffffff returned -14 [ 249.185364][ T8815] smc: net device vcan0 applied user defined pnetid SYZ1 [ 249.300928][ T8818] team_slave_0: entered promiscuous mode [ 249.303190][ T8818] team_slave_1: entered promiscuous mode [ 249.305676][ T8818] macvtap2: entered promiscuous mode [ 249.307458][ T8818] team0: entered promiscuous mode [ 249.309662][ T8818] macvtap2: entered allmulticast mode [ 249.311505][ T8818] team0: entered allmulticast mode [ 249.313113][ T8818] team_slave_0: entered allmulticast mode [ 249.314865][ T8818] team_slave_1: entered allmulticast mode [ 249.317716][ T8818] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 249.332071][ T8818] team0: left allmulticast mode [ 249.333714][ T8818] team_slave_0: left allmulticast mode [ 249.335738][ T8818] team_slave_1: left allmulticast mode [ 249.337489][ T8818] team0: left promiscuous mode [ 249.339418][ T8818] team_slave_0: left promiscuous mode [ 249.341309][ T8818] team_slave_1: left promiscuous mode [ 249.780850][ T54] usb 44-1: device descriptor read/8, error -110 [ 250.169750][ T54] usb usb44-port1: attempt power cycle [ 250.355935][ T8830] fuse: Bad value for 'fd' [ 250.751585][ T54] usb usb44-port1: unable to enumerate USB device [ 251.463391][ T8841] nbd: must specify at least one socket [ 251.703256][ T8845] netlink: 'syz.3.786': attribute type 10 has an invalid length. [ 251.706503][ T8845] __nla_validate_parse: 6 callbacks suppressed [ 251.706517][ T8845] netlink: 40 bytes leftover after parsing attributes in process `syz.3.786'. [ 252.342999][ T8852] netlink: 'syz.3.787': attribute type 10 has an invalid length. [ 252.346306][ T8852] netlink: 40 bytes leftover after parsing attributes in process `syz.3.787'. [ 252.493979][ T8861] FAULT_INJECTION: forcing a failure. [ 252.493979][ T8861] name failslab, interval 1, probability 0, space 0, times 0 [ 252.506169][ T8861] CPU: 1 UID: 0 PID: 8861 Comm: syz.0.788 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.506194][ T8861] Tainted: [L]=SOFTLOCKUP [ 252.506198][ T8861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 252.506204][ T8861] Call Trace: [ 252.506208][ T8861] [ 252.506214][ T8861] dump_stack_lvl+0x100/0x190 [ 252.506247][ T8861] should_fail_ex.cold+0x5/0xa [ 252.506263][ T8861] should_failslab+0xc2/0x120 [ 252.506275][ T8861] __kmalloc_cache_noprof+0x7a/0x6f0 [ 252.506290][ T8861] ? __io_uring_add_tctx_node+0x1ac/0x4c0 [ 252.506381][ T8861] __io_uring_add_tctx_node+0x1ac/0x4c0 [ 252.506393][ T8861] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 252.506405][ T8861] ? __fget_files+0x21f/0x3d0 [ 252.506425][ T8861] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 252.506438][ T8861] __do_sys_io_uring_enter+0x1656/0x1b50 [ 252.506456][ T8861] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 252.506475][ T8861] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 252.506488][ T8861] ? __fget_files+0x21f/0x3d0 [ 252.506508][ T8861] ? fput+0x79/0x100 [ 252.506520][ T8861] ? ksys_write+0x1ac/0x250 [ 252.506538][ T8861] ? rcu_is_watching+0x12/0xc0 [ 252.506552][ T8861] __do_fast_syscall_32+0xe7/0x950 [ 252.506567][ T8861] ? lockdep_hardirqs_on+0x78/0x100 [ 252.506582][ T8861] do_fast_syscall_32+0x32/0x70 [ 252.506596][ T8861] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 252.506611][ T8861] RIP: 0023:0xf700efcc [ 252.506621][ T8861] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 252.506632][ T8861] RSP: 002b:00000000f537750c EFLAGS: 00000292 ORIG_RAX: 00000000000001aa [ 252.506644][ T8861] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000006516 [ 252.506651][ T8861] RDX: 0000000000006d93 RSI: 0000000000000008 RDI: 0000000000000000 [ 252.506730][ T8861] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 252.506738][ T8861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.506746][ T8861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.506765][ T8861] [ 252.508417][ T8861] ------------[ cut here ]------------ [ 252.587523][ T8861] !test_bit(IO_WQ_BIT_EXIT, &wq->state) [ 252.587541][ T8861] WARNING: io_uring/io-wq.c:1396 at io_wq_put_and_exit+0x8a7/0x9d0, CPU#1: syz.0.788/8861 [ 252.592570][ T8861] Modules linked in: [ 252.594132][ T8861] CPU: 1 UID: 0 PID: 8861 Comm: syz.0.788 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.597451][ T8861] Tainted: [L]=SOFTLOCKUP [ 252.599326][ T8861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 252.603159][ T8861] RIP: 0010:io_wq_put_and_exit+0x8a7/0x9d0 [ 252.605539][ T8861] Code: ff e8 9d 18 18 fd 44 0f b6 74 24 78 31 ff 44 89 f6 e8 dd 12 18 fd 45 84 f6 0f 85 1a fd ff ff e9 67 fd ff ff e8 7a 18 18 fd 90 <0f> 0b 90 e9 00 f8 ff ff e8 2c dc 83 fd e9 72 f8 ff ff 48 8b 3c 24 [ 252.613934][ T8861] RSP: 0018:ffffc9000721fbb8 EFLAGS: 00010293 [ 252.616720][ T8861] RAX: 0000000000000000 RBX: ffff888043d1d000 RCX: ffffffff84effe06 [ 252.620012][ T8861] RDX: ffff888027e2a500 RSI: ffffffff84f00606 RDI: ffff888027e2a500 [ 252.622548][ T8861] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 252.625018][ T8861] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000e43f99 [ 252.627454][ T8861] R13: 0000000000000000 R14: ffff888027e2ae68 R15: ffff88806cdbdc18 [ 252.630374][ T8861] FS: 0000000000000000(0000) GS:ffff8880971fb000(0063) knlGS:00000000f5377b40 [ 252.633675][ T8861] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 252.636161][ T8861] CR2: 00000000f5376ff4 CR3: 000000004e35f000 CR4: 0000000000352ef0 [ 252.639216][ T8861] Call Trace: [ 252.640368][ T8861] [ 252.641307][ T8861] ? dump_stack_lvl+0x17c/0x190 [ 252.643034][ T8861] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 252.644758][ T8861] ? rcu_is_watching+0x12/0xc0 [ 252.646217][ T8861] ? trace_kmalloc+0xe3/0x110 [ 252.647765][ T8861] ? __kmalloc_cache_noprof+0x298/0x6f0 [ 252.650266][ T8861] ? __io_uring_add_tctx_node+0x1ac/0x4c0 [ 252.652396][ T8861] __io_uring_add_tctx_node+0x3e8/0x4c0 [ 252.654214][ T8861] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 252.656094][ T8861] ? __fget_files+0x21f/0x3d0 [ 252.657640][ T8861] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 252.660422][ T8861] __do_sys_io_uring_enter+0x1656/0x1b50 [ 252.662755][ T8861] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 252.664862][ T8861] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 252.666782][ T8861] ? __fget_files+0x21f/0x3d0 [ 252.668377][ T8861] ? fput+0x79/0x100 [ 252.669732][ T8861] ? ksys_write+0x1ac/0x250 [ 252.671199][ T8861] ? rcu_is_watching+0x12/0xc0 [ 252.672798][ T8861] __do_fast_syscall_32+0xe7/0x950 [ 252.674408][ T8861] ? lockdep_hardirqs_on+0x78/0x100 [ 252.676074][ T8861] do_fast_syscall_32+0x32/0x70 [ 252.677739][ T8861] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 252.680344][ T8861] RIP: 0023:0xf700efcc [ 252.682004][ T8861] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 252.688876][ T8861] RSP: 002b:00000000f537750c EFLAGS: 00000292 ORIG_RAX: 00000000000001aa [ 252.691531][ T8861] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000006516 [ 252.694100][ T8861] RDX: 0000000000006d93 RSI: 0000000000000008 RDI: 0000000000000000 [ 252.696641][ T8861] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 252.699409][ T8861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.702764][ T8861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.706610][ T8861] [ 252.706993][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.790'. [ 252.707980][ T8861] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 252.708003][ T8861] CPU: 1 UID: 0 PID: 8861 Comm: syz.0.788 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.708029][ T8861] Tainted: [L]=SOFTLOCKUP [ 252.708036][ T8861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 252.708047][ T8861] Call Trace: [ 252.708055][ T8861] [ 252.708063][ T8861] dump_stack_lvl+0x100/0x190 [ 252.708103][ T8861] vpanic+0x552/0x970 [ 252.708122][ T8861] ? __pfx_vpanic+0x10/0x10 [ 252.708147][ T8861] panic+0xd1/0xe0 [ 252.708163][ T8861] ? __pfx_panic+0x10/0x10 [ 252.708187][ T8861] ? check_panic_on_warn+0x1f/0x90 [ 252.708221][ T8861] check_panic_on_warn.cold+0x19/0x34 [ 252.708248][ T8861] ? io_wq_put_and_exit+0x8a7/0x9d0 [ 252.708271][ T8861] __warn.cold+0x191/0x328 [ 252.708293][ T8861] __report_bug+0x296/0x3d0 [ 252.708373][ T8861] ? io_wq_put_and_exit+0x8a7/0x9d0 [ 252.708397][ T8861] ? __pfx___report_bug+0x10/0x10 [ 252.708420][ T8861] ? _printk+0xcf/0x110 [ 252.708439][ T8861] ? __pfx__printk+0x10/0x10 [ 252.708456][ T8861] ? find_held_lock+0x2b/0x80 [ 252.708479][ T8861] ? is_bpf_text_address+0x8a/0x1a0 [ 252.708503][ T8861] ? bpf_ksym_find+0x124/0x1c0 [ 252.708521][ T8861] ? io_wq_put_and_exit+0x8a7/0x9d0 [ 252.708545][ T8861] report_bug+0xb2/0x220 [ 252.708567][ T8861] ? io_wq_put_and_exit+0x8a7/0x9d0 [ 252.708591][ T8861] handle_bug+0x16a/0x2a0 [ 252.708645][ T8861] exc_invalid_op+0x17/0x50 [ 252.708671][ T8861] asm_exc_invalid_op+0x1a/0x20 [ 252.708690][ T8861] RIP: 0010:io_wq_put_and_exit+0x8a7/0x9d0 [ 252.708714][ T8861] Code: ff e8 9d 18 18 fd 44 0f b6 74 24 78 31 ff 44 89 f6 e8 dd 12 18 fd 45 84 f6 0f 85 1a fd ff ff e9 67 fd ff ff e8 7a 18 18 fd 90 <0f> 0b 90 e9 00 f8 ff ff e8 2c dc 83 fd e9 72 f8 ff ff 48 8b 3c 24 [ 252.708733][ T8861] RSP: 0018:ffffc9000721fbb8 EFLAGS: 00010293 [ 252.708750][ T8861] RAX: 0000000000000000 RBX: ffff888043d1d000 RCX: ffffffff84effe06 [ 252.708763][ T8861] RDX: ffff888027e2a500 RSI: ffffffff84f00606 RDI: ffff888027e2a500 [ 252.708775][ T8861] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 252.708801][ T8861] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000e43f99 [ 252.708813][ T8861] R13: 0000000000000000 R14: ffff888027e2ae68 R15: ffff88806cdbdc18 [ 252.708830][ T8861] ? io_wq_put_and_exit+0xa6/0x9d0 [ 252.708850][ T8861] ? io_wq_put_and_exit+0x8a6/0x9d0 [ 252.708875][ T8861] ? io_wq_put_and_exit+0x8a6/0x9d0 [ 252.708895][ T8861] ? dump_stack_lvl+0x17c/0x190 [ 252.708926][ T8861] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 252.708947][ T8861] ? rcu_is_watching+0x12/0xc0 [ 252.708967][ T8861] ? trace_kmalloc+0xe3/0x110 [ 252.708988][ T8861] ? __kmalloc_cache_noprof+0x298/0x6f0 [ 252.709010][ T8861] ? __io_uring_add_tctx_node+0x1ac/0x4c0 [ 252.709036][ T8861] __io_uring_add_tctx_node+0x3e8/0x4c0 [ 252.709056][ T8861] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 252.709076][ T8861] ? __fget_files+0x21f/0x3d0 [ 252.709109][ T8861] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 252.709131][ T8861] __do_sys_io_uring_enter+0x1656/0x1b50 [ 252.709161][ T8861] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 252.709189][ T8861] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 252.709212][ T8861] ? __fget_files+0x21f/0x3d0 [ 252.709250][ T8861] ? fput+0x79/0x100 [ 252.709270][ T8861] ? ksys_write+0x1ac/0x250 [ 252.709299][ T8861] ? rcu_is_watching+0x12/0xc0 [ 252.709321][ T8861] __do_fast_syscall_32+0xe7/0x950 [ 252.709343][ T8861] ? lockdep_hardirqs_on+0x78/0x100 [ 252.709368][ T8861] do_fast_syscall_32+0x32/0x70 [ 252.709390][ T8861] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 252.709412][ T8861] RIP: 0023:0xf700efcc [ 252.709429][ T8861] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 252.709445][ T8861] RSP: 002b:00000000f537750c EFLAGS: 00000292 ORIG_RAX: 00000000000001aa [ 252.709462][ T8861] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000006516 [ 252.709474][ T8861] RDX: 0000000000006d93 RSI: 0000000000000008 RDI: 0000000000000000 [ 252.709485][ T8861] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 252.709497][ T8861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.709509][ T8861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.709531][ T8861] [ 252.712664][ T8861] Kernel Offset: disabled