last executing test programs: 6.703432733s ago: executing program 1 (id=2027): syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1000000}}}}}}, 0x0) 6.703090047s ago: executing program 1 (id=2028): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014"], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000001c0), &(0x7f0000000240)=0xffffffffffffff00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$qrtr(0x2a, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0xfff, 0x4) write$nbd(0xffffffffffffffff, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x40, 0x9, "82b0cfc4337965941538be09000000000000000000007400a391793ba70d0000000000fdf700000000baffda6e4a4d83"}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001880)={0xffffffffffffffff, &(0x7f0000000880)="4ac6a6728c7057c003ef14ffac9a8ede36268acefa248ac0847fbd52a6b941d0056b15e142d1ace4efd6bd4e5e6af46cbfb203b1bb8f4cbbb6c93d2830ff33bdf8e772619bb8b597ff939dbe3f8450766f786bfc46329bdc255d2df667412e93f8d31d81ede15db8f94b45131aab7201f29866b2dc17511e9ad3d73233b27a2c6b762e19ae058e19b3211efd5dd379afabd9337ac8f6fa6a048c3393a6833ef97932f4c845825fcacaab0629e420cabac4c87239f6212888881ae6169d2bb1506e06b00afb65f7f1b142496b2bd919266190d34c3e3a00dd2ba7953ac030d74abea09cc2780b61a88e83c46e9a8a605e3f8fa28f23e15ed5329eedd31ec396688a155467e318d0b8ba34c7d191a4ddd14ceb3a6c337de63d36c303233b0818b2a8481a602a5230d5e601905f07c1fed05d7605737b3d37cbac980494997f85e61c510a70d4ce705a7badc197c700c9a2b2d506decaf301983361b57ecc4f64f89bbfc552400a0b7eae787607e32a0cf985813cca32ea18dee39da4bc4ded12ec983eb9b5b51fdb94f11da9eb87b86756d2f6c2df637ef6a89432c68ebff0e7826efe9e633f072a1e29de97fcff16b30693dd1df20e1a89dc4ca728073bf0edfce4644da3b48468a1c2433636f4d2e48db8ddb3d942496bb11d9ac7c388ae2062916018b4eaf8843465c40962e1b7cb062d32db236020e99d8de18a70862885532a4dd17ad383cc1db443f23c6e5ab44ddb5fcfebe1225dcaed0595194f179db455d7e5efe5df5961b437293a8f2436a90cf94a64c07e86bf1989bbc7044c4e15021f9c33c31740a8ae7a073e8b507341b70896b44fd00af117e601635a8d9613695848934e22b30587476062185a2d9a1f258dbf77cacb8ffe6cca1cc024fb11659a637e9bdfcf07b5a1ec0226425ad19e9bf0744501db925d2f46daebba755f3e44585e981816f53c32f105130f6757fad9fae496dbe4507c56d4ff3e2eaaacdab05e0bd46bd2822791ba43b2adf2e0954a1629ba06a30374997669e96ffe5003e7f661ded0631fd23c982496025dcb3cc5dbe1aae56389c09958b0e620b0453921fa21a6bfeab349930a6e9051e2491b9c87c89bfb0c54389a5a90671fab22538b6acb50d9140f0d3770c0f2683dfe442823242ae5bc84084971e96a666ff449a9bcc27022271443def7565264aa8ea5a4afbf1421ec72469c4d260122b8fd560b6f7acd2089c526deb89207375ee2ffa4c47b103560eac98b6b9b6a300dd6e23986b711a8a0b1918fccd2debef558886a0edebbd3ab7ba0b9368582ac287623a90cc443b55b563f1ec60edbb45d2734452222519ab04957f2b0bd5577080216c02c3aefa15a92c8f35eb72a4a282f2d167b91f5ec4ab61fcb4d0831c49a8a1e4e00cb48959a95211e85fd2150c5d046c5c759e0d579f75198cb57157e84cccadb281be9d4038d67589558c69a2743225713093c2f9b365b719b465f7e4dc7ae68403b4d049dce986ed04f624cac63ff0664ac14bc8a32aad5faf86f12cbce5e5ddd0d1daf1a224912ac53a0366d9c2725cc1ce359bfb5f5cd4e7d7ed8b7d5db761f8343e03fa1b638d8bc81b66f945d26f7519d2aeb77cabcf707a9a5ecb4b9e593aa5a6a961421f3c5fac0a1da1ad02d9e47369867ba3a4c57d01e2cd4f778249dd1f5fc7b59f5a7f8c1d6f5ede07fb95d5c954ea7723d4181219b71c8c7807cd87144049f3890b754c81882112827a37fa305ba3159fe920f1fdc255c8dc991941771c5f4ff580bce744a8b9639260ec345cd2328f8c467f970b897af04159f235f72f6cab529429ede677cd57fa6c5bfbff6cd2480e33c57d486714601f48162e8750fb1c2c815b54df3525ee311c591fa41f00812680fd7b9be619caf4af568437d77db5c6e42fa91facdde0893393e87f28039dabba1c29273517ca7bd224773dbcd0d0849003cdfcf6122d372623eba7e4f35773b11c840db2cd8c220c7f1482ab139f8ae3a7cea70e7a430dddc09be9017ee9f5e92dc3061309624c38cef0f695eacaa9932a2a935c8ba799c28e4b2f3e16fc2f643cef9e48ff344ecee342a7c1e13ce51f5d48958f954c76b45f8e9a7a4ee69c4fb53bff92659f461ae5b914ba66cc2e8ca64edded17de4f8d86f50ea1c4094b88e9151217302b9e233d306fb297a67178a75d52416bfe44938c174f9233f22a7d9fff3556f7eeb40d200af605160ec7342f3811faea07418701358d4bfc6d18e161ee6128edd7d321291da90dc852930ed0cf8098431e375124f4919f66f2cf539990f0f7f99a8e3bc55275cf60ea03251f9892d9b959efed12b84a27604687ae4469b5d1c28d03cb29e8cbf1b1ecde50c612b8c8890d8c985740604b4e3e4cea832ecfd3bb5038dbaea276eaa3938b20be57d66ceccbd4990a8d3682913a277e7b02181ec9d96f0bbab2892338326facfff4fb05323506be340d1556795dd8a49fd7d2f45ad0dadffef52533eb9105c89f61461d440292100f59229b260a70e3f9b831ab2c9f60996a9644d6676363cb05068460f538173408f6854a39bb7a999ab1047eddd3f6122aa0679995cd0dafca218766698a68fbf75056991ab5e7f8362cfa67b3c6a05ad87841dc8be1edd5d8a6972a8c7038cf6585ffdb8d549902a5dc58fb98847829871c23fe4ab996e9417018be5ff3f6da37b4cf48176f1dd8a257ffa739d8a2061baa1935439cd7e2f313aedbb003a96cdace07cc72d86dcbcc61f8c2938dbce32c9f17ddf115126c83a2dbadb44493dcc42dca8a785f5d9759e59cfe2758ae0910384a076325ca2b3c67f83a3c010f82f762978c8aabe38c30fdb7b881644175c2b6a828f60431707336d64d3768aeab7bd806a42dd18a239b95745f7f803b6110f5ef0d65dfad9b1e8d04bd42c651eee489d46bd296c790aaa34f739534070a76b0b876871edac7d2304099bb54884590b51aa680220cc2dbc9c3ecf5bf954eb51c1acd6549329e47140a1245f344274fd72a05d5c76ac6faeabdc7561aa375ffc54887720ecd405ff82dc4f9ed27f440d6be57f0653736e876d7109d03f126d52dc9d546eea34d00b442e9be7b5fa33b98e605926c8e39c1644c9cb39334d28a83cbc02f05e73e9b5d0a3be0caded1e7be2e7ed0b078bc0d749ac5483270692f39ed2b648b847d2fecbf56581745c0c15a6faa5dfac40e94f249cac74fcc297bb3645969590cb99ee9b630c61e0ca8c622f1f66732eec4af330a91ad60444d4de2c2aa47a902488b6202511b542935ee478880378d4e18ad26abde96a1c21c917dbd0c9e4233b79595a871b8abe23b078c1721d45fb36a9fa5249b7a9624774ac5e8f64785fa9c2421d717ff97cfa497d7b730d7d62d2c4678bf36a1a69cbecd94bd916949827fcd7f4ba30f7d5ebc6c851f7232fc98680154770b98e00f5294a87044150e0501686fdd409b060fe8773bc6e48b3ed6d96a0b2c06b05ed6382b8d6571e7704256e0589ec91cec529a587a6f5924c8089d1af458a2c058f465ee0bac693867a9ba3c1622eab93f0cb82dee81f49a825426c52f93e92efa2d516ada9fb34735ddc72243de09de60aca6e7738fd731d724d91b97ac59ce73012937de00f31b899f62677ae0ced6413d087b087d4af995305c2e286039b9c96d397e285eeba5f1b88a809550d7df9634b98f38fa37b881ce74b54d5e39e5fa21b4f1bfb50d2615d026a175f26bf41931905f416a16d7c1b98631987156982af8d09a86d51d1075614bb94b35f1fd039571489200902830da3d130ce2e0e70687c57d150ba6810db46a9841fe22502135a007bf5ef07621c0e0cb3c5cd2f02044b50481f92c2dcdcd2ded742d6209f476160f55934b4952474d31ae2fe4e3c062526f90f1d157e218689548b9428fe85d353c9c53acce7fae82211326cffeaa55e1d5f7b3d8d33ddf64db181942648ead68fa50d0221fc56faf2b6ee0819d0343272ab343aeed2915c03615d39d149d44e8d7665ce1a38435acd7024028f156ba5c325833d1c67e026048ed7eb8510f9a2e93ddd2bcd67a005d8cca6018179bcfa06ce3926390c53b6d5e7b8e1457e292e7e7e3b61c4004ea8f69bc07afcc38668f7321fbb1bfda0a34f833f99cbac160d71813070c9a6e8e0e726519dc93bf2036eef5aeaed26bf87fc2cb8eab8cd9418f518446dff64478541fcced68c874a88075f0a5968670bde512a2444c6abfd4dc8cbbc2d1025afa13a69caadf1896b343bacce6fc84dbc214bc8d512f62327cced78f1334dde05a19cd0c4442229f3af1ddace078aad37106f20e53b1c5fe92dd2dacdc4f07ba07397ff72ec9913ab6c8e66fc2c7a2622c4ff7ba27fd7def9dab918a0c7876f5b620b48eb893e608f332f483cf85594d3e71b309fcf9580e0ee83ac45cce642aa4d79fecc6ada27e6104f9238119e2b43122a15ac43e88c442a723eccac43ab5ae47050ac54c87590bdab5f8d6c195ef67520a4a7aedf10930e197f06cf546e036385d587db366180adf0f670ebd0e42e91ea3d33cf972d878af7fe93d6720a0d0adcd20f57495ae9e334f06916ce5d67b19da0228d1820a14f7c1d0077d683ff6ff8d93f8ec7753906f6351c8d34663a6b35edc9ea7d2be17fbe5cb5d1f3d6f08e511af7e4835e9f7f9d3e3259432924ae25bbb3ea463683f42a12cad569a7bb43c335ee153e21aa3a76f16d90a1cd4d7f4bd9d6928ce1750c62e79ab0c19e9af5dfe17af1bbdd041fd3c936b546a8f5e5b796dc1488c433e3fdf58309df4f7df6f84e9c9fba3bdffe4dffe9d300c339f8fffb92f3b3c4fe75b55c955a0ef42536c8181dc6131dbfb7d6a779ba7fd4075d46cd8a7e9e9dc41e33102da8a55db8c4e544a636c34ab557339dbc2337359508f15dc00ceb300469eace213e5271e9065e903fb54953288e593024cce2c6c0e3f295b354d57389686270512d171d055d4c5d1b1e519f8899829cd81b7577274ef337720b3ade83aa8826a6e5341d472191878b9326702e506f1847a2f7b25eedba0a04b0b118779497e1ab31be8bae65abf492407291be8a54346c333c75860c6de779b4c13b6e7305331e7db6506e88e91587c81bf816b1b9315763fd7ebfe6beb4f47014e3a9f198c4fc83944b4991b57cdbff3d7c7351becbfc0db7175fec16dd89b9fea469b1d81bc4da4ea137d0f871e72c065f318ddcb289108030b924b26b97f4a40df779cf766e0029da3713a53156c9de2ed0f3666f09833d7844d4f485143cb7a3393904796aa365e1830f06bec89b34d24053fc23e0bf699683131b0ad327418d7e9acc25dd67783cab30349ee97cca653034c7f0dc6b8b0e922602f30bfa2ee5ada218886b2d8a79daad247a13a96dba8c74a1f91176ca62ae315ec45622c0adfb254e02efbaac05bd3abfca614e0b9bfbab8500f87a8f253c4b06cd81ab6013e03ba854ac42b73ce47ee6ad75412afa4265a822c153e3f0bba475b20004f3fc77d40d6e024a3aed0c1101b59878ceb4624730ca1e3facb8fa6f4c69672235c0709d6488a166b5725a232105f3c8daa9dedfa345ab65a89c2082aace03740e7b6c947576624aae1b2698062d5c53d2a82dca42062cb4a91ebfeea98245df8d1211cde8e979e9d2ba6e3c229124ce7896a18639ed4c6a669ed9830a99b17b603248f5b0927deeb48ecd4c2c39d0e7440044544246e05c3c809af1febe1c881a8f846345f59881c843d2786aa82acf45e43ce13fd5aba3632081cc0be486ffd971247642c33764e7b4690cc29d7a9f76e83b"}, 0x1c) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000640)={0x0, 0x1, 0x200000c, 0xf, 0x0, &(0x7f0000000240)="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"}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) preadv(0xffffffffffffffff, &(0x7f00000039c0)=[{&(0x7f0000000540)=""/131, 0x83}, {&(0x7f0000000600)=""/169, 0xa9}, {&(0x7f00000006c0)=""/80, 0x50}, {&(0x7f0000000740)=""/61, 0x3d}, {&(0x7f0000000780)=""/152, 0x98}, {&(0x7f00000018c0)=""/41, 0x29}, {&(0x7f0000001900)=""/30, 0x1e}, {&(0x7f0000001940)=""/31, 0x1f}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/204, 0xcc}], 0xa, 0x9, 0x8001) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000440)={0x5, @win={{0x735, 0x9, 0xe1, 0xfffffff9}, 0x1, 0x8, 0x0, 0x6, 0x0, 0xcf}}) 5.800861073s ago: executing program 1 (id=2031): memfd_create(0x0, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) removexattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=@known='com.apple.system.Security\x00') (async) unshare(0x6a040000) (async, rerun: 32) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x10080a8, &(0x7f0000000580)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d6673634b6368652c76657273696f75b23915dc288612a26860e365dd932b3f3bba752732791caba22f9a3b13a88d2b69c3eb95f1d84ca0ab3dbfb0fad0f6e601fb83e1c862a4481ad827e2c06ea01f58ee93d6fca797d44dd11e0b7af9e26fe07e33c6a7bdde9a261692ac8721d52218c307cb70bfc7244985dee1daac54a58311c0948475d1555c12df1c22c3ed5d44960d2a5540ee2e5cfdfb16b5c84f1ececb0099be6d4cff41f18e22cd36cca03df869b996037c0dbd5ef11e62d288c6e58d3815fa6438"]) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x308440d, 0x89) write$cgroup_int(r4, &(0x7f0000000300)=0x8, 0x12) (async, rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000400)) (rerun: 32) 2.895412491s ago: executing program 1 (id=2040): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@rand_addr=0x64010101, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@local}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x2f, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 2.68082206s ago: executing program 1 (id=2042): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0x3c4, 0x14, 0x2, 0x3, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x0, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x5, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf56, 0x6]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f0000000480), 0x0, 0x0, 0x71008, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x5) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/184, 0xb8}], 0x1, 0xc6, 0x3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e22, 0x513700, @private1, 0x4}}, 0x7ff, 0x0, 0x2, 0x0, 0x72}, 0x9c) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x364, 0x20, 0x11, 0x148, 0x1d4, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff000000, 'hsr0\x00', 'vcan0\x00', {0xff}, {0xff}, 0x6, 0x2, 0x46}, 0x0, 0x18c, 0x1d4, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc4}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xcc, 0xfc, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3c0) 2.668165581s ago: executing program 3 (id=2043): setrlimit(0x7, &(0x7f0000000380)={0x1, 0x9}) socket$pptp(0x18, 0x1, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a40)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800140003000401a80009000900024004000000035c044dc1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e03a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4efef3d9300"/216, 0xd8}], 0x1}, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000240)={0xff, 0x0, r1}) getsockopt$inet_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000280)=""/202, &(0x7f0000000380)=0xca) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x406, 0x80801) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000100)={0x1, r5}) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x1}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x101080, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x38, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x6}]}]}]}, 0x38}}, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f00000003c0)) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, 0xffffffffffffffff, 0xb}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000400)=@req={0xda, 0x10001, 0x401, 0x81}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r10, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xfffffffe}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8, 0x20}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r10}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.667977041s ago: executing program 2 (id=2044): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="8800000010000d040400fdf200000000000000", @ANYRES32=0x0, @ANYBLOB="0010000019500000540012800c0001006d6163766c616e0044000280080009000800000008000700d1ae0000080001000200000008000300020000000800010002000000080007000600000008000700060000000600020001000000140035006d6163766c616e30"], 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x10) 2.612915572s ago: executing program 3 (id=2045): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x0) syz_open_dev$usbmon(0x0, 0x7, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0xffffff9e, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.059050947s ago: executing program 2 (id=2046): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x33) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x4, @loopback, 0x4}, 0x1c) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000040038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 2.058727242s ago: executing program 3 (id=2047): syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0704230c"], 0xa) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x10200, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) socket(0x10, 0x80002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 2.055695364s ago: executing program 3 (id=2048): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x183001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001980)={0x14, 0x1, 0xa, 0x5, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x840) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) read(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) syz_open_procfs(r1, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8, 0x0, 0x6, 0x0, @broadcast, @loopback}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') write(r0, &(0x7f0000000000)="25a9a36b49066088dd07e06c3ec22bd8cc13cd80aa5e8631efbba05a1dbe6e9e94919869b63f0a206346e40799993375a87988a6ba38bfd61551da2876ce3ca788a7e1743ae8696328fbb4a5a17009bb57535d0da6e48665899d9b61a36190ababc812c9a1bdb6b08bc33ee5ba612b5bdd773d4564ce510d1cf97ad9b10c1e2eb39c341631cce135c10231f144791224e240d654b5489d92be3b21dd711246417f6170f9e4a6815977594e2982fd0243", 0xb0) ioctl$SNAPSHOT_FREE(r0, 0x3314) 2.054629072s ago: executing program 2 (id=2049): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1c0) r0 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x284182, 0x0) sendmmsg$unix(r1, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x18, 0x1, 0x1, [r3, r2]}}], 0x18}}], 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x8}, 0x1c) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x111102) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x2) sendmmsg(r0, &(0x7f0000001940)=[{{&(0x7f0000000000)=@qipcrtr={0x2a, 0x4, 0x7fff}, 0x80, 0x0, 0x0, &(0x7f0000001c00)=[{0xc, 0x117, 0x400000}, {0xc, 0x10b, 0x81}], 0x18}}], 0x1, 0x45) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000040)) 1.582376604s ago: executing program 2 (id=2050): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000069c0)=[{{&(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="4e238eb017dfc702bb7f48b2cf5345969c0782c2703da23f8a99418029658dbd0ce7f1f600773c9b47eefa0d70a01b893dd68f7499001ad6bbb9a50f9015dda8a7611aa98fbd1e3bfc0d99223f2a93a027ed6ba60d59b44e89c4835d10ddbeaa274fbf59482721e2eeb2937f357a2c432482df9b7f773b320ddbbd", 0x7b}, {&(0x7f0000000500)="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", 0x14e}, {&(0x7f0000001900)="e035ff8b1d272f7e190ee2d0c2e928bec70a5119e200571107895ea3dfc8eeb55bb7efdb8fadb428114835942ee4206e73cfe73c617fb3a60306ee8801ffeada1c3e43945467e92b2eccabc64e1e001ce4114a5a6c3610cb8c9f3cf8660845ca900a8d95c525aca39539bcd03669afc817a3e37451d05b1d86d2e8d49634d14123de71957e47bd6d0b746115a5d5071a127f388a46437a4b79bc70f3b59459862ea86a34803063ab3d61ebf252987a9c7374ae86fabcaace9ab4853b2d908fc5e9f143ce48f07fd589fd6bc690889c36ed902d160b4b3b8e14067a00619166298941c03246d2c368fe2c6b37ed6d84de21a4a886436a8dd9", 0xf8}, {&(0x7f0000001a00)="6ffccf05f339e9d64661da89fa7e0abd00fdaeae37a8106c26e10e852c210f7f754c100db66edfea191c9d7fa0c3d6dca3397ccf7177cbf4921b1a47f5a83badc3513acb1264734724d8a86daeb474a609113fd67a4fb63f5d6b10218f3bbfe1896ff6801ac574cf69956844a9eecbc9cf998df5b1719d6342e44eea2f01a6177b7b5db86f215fcb05563f83ee9cbc4c1518bbb7b0dda256adc78b237abff035e259609960093df0838b96c9ec57bd3e42cdaffb0dc71ffdc3f440d8c821512efd06aa25f5f9f3ed4c752b7eb55a378172ca62e23955a5f3d0e6bfc423fa8172d0ed7f50916d9aa0884f3d912cf4b8d1f89b", 0xf2}, {&(0x7f0000001b00)}, {&(0x7f0000001b40)="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", 0xfe}, {&(0x7f0000001c40)="cbca890be965ac868cf54fe95b08f97fdda32cff1e6b8ba5b15b83a858a06d634c04203aa9b8382669e2b68839dfd9447f231d6db7d9ba80d00dd7cf1211174f8fb1e4cb11cf12e56d3562fbe7e7de7962f023ee7029431f49c9ea3e95fb4614cc55c0f9c3249c3efccd57c9ae1f67ddb529e83b7da0bb2c6a7751e0c71c75236a0ac6b14a1d93dcb4804d23271030aa4fea8d3d220ff1a82567f9ba1c5df3940d388e203726fa8c802bad319f862d74d5f2b99afa9b95558dea7ce58a2e7ea2bc3640f21128f4267a817542f141be2cc5ff46502155634f3240c5eb297c979911d3d0e51518", 0xe6}], 0x8, 0x0, 0x0, 0x1}}, {{&(0x7f0000001d80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003040)=[{&(0x7f0000001e00)="a76f7402fd3a1eecc0cd3ef1783f56a39f0129b07c94b7e0c827a77a368802170859ccedbfb66b4e514c689150d6507c9b46ece28fcab97a722b2a02894b1b0c2e2dafbf03434618ef29aaa7ff209f446ab299678c20ded984e2c7aeaf28e800c0e6941efa24ada387c34224067eaddc24ff8ba0666d4bf2f6bcfdef2f9b15f3d4aa", 0x82}, {&(0x7f0000001ec0)="99e3562e6de82ccd4cf934e10a60eb7922141cc3cefa6214262674cf59a05e653f2e4b4955", 0x25}, {&(0x7f0000001f00)="42594b7aedbfbb7befb8c04d7953c2f00ff0f6521b61cd6291659d562a565e6fc5a12d34cc8a033c4b71de10a0cc67bd2fc99a5a7ff2281a3f4b789d91fefbd774912d4ca36f883189cf481c505eb9388e4a649c379068c96427b47104226c2669323ba2de1a89b4b58c65577751404cf5bdc7f8365ee44cdeea42747eccf28db0141b6cbd1cb58da3256d2c73b1ce48c312ea5a03840ab3d8ce41bd7d43d19e2e5033d3699fc7633013de748741509d9983b0e9", 0xb4}, {&(0x7f0000001fc0)="32152cc73e316954a3ff124409ba6572c12724cb0e1269f3808926057c9262d7a486a7f5aa2ee367d2e5244fd2aeef2c2e43069a30e8edb83aa41b0c45f85af09d5eee25ebd6b4689876210e5cadd3024e892e9f758d7435ff9e80ef47c0028c113be97b", 0x64}, {&(0x7f0000002040)="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", 0x1000}], 0x5, &(0x7f0000005480)=ANY=[@ANYBLOB="2c0000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c0013000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="280000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="180000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0c0000000100000001000000180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x10c, 0x4010}}, {{&(0x7f00000063c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000068c0)=[{&(0x7f0000006440)="312a55e66e2d2b4641e82c0d03aace791d99233212c40ffb15fd13890181b51010d0669aaeccfbb4044d0b84f0968253cbf245df96142c173667ce86d0aafa591aab2718131338394838659c0a8eb74efe9e81a4740eda686ab3505dba088626725ab523524af30152eec8e0cdd93b671126a12989f4b1c953dcbfd9915a0e877cebb771c445ba51d8971beff3a93a5b564ff6280ed84bcea3cff080424165d7ff8bcb80b5fc4055e930e0b01b256c48db8c1115711289b18206f9e1125b94deb9456769aaa87953a4daed57990b348088", 0xd1}, {&(0x7f0000006540)="4b8cae723bd089bb6bf56e032df8808ad06c27c828079bc3a197f9b6076e9ad8d9b9426757fc7f14", 0x28}, {&(0x7f0000006580)="eb7e2f4e18758674778b68fc788ef48ab806c48b7781b5195c5d9723ccce3052a24d596120bb20e33b4017fa54b73280257097fb22c95964271cb2f68355dfd2c7e3ab95bd6403ccc6756d70f3b24df2dad8ffac9b828c634853e1098bc2bea383f40907063ad30840e44bf4fc586af0768097f77bffc7833cb475ab41841f19dec7be406ecc27ef51522b6942116a21418a19ae3876c39b8d755fbbdf44ee9ae3c8ce52d77b7bc5d0d62f6a0064aac3ae60a35b863dcf8a8d69dfcf7fedfbb2f2b44195759139237957a6354d9e60efa20b618d1aea973eea7df3cb3732a6663d59ed8e9318f5a944811277", 0xec}, {&(0x7f0000006680)="bc847d285355e79bcf60fe1e9dce259221a953de10afb09e6ef86d980b2fdd3bedb2d6fd6e870afc347d252586c8d60f9946f95d2c8b2f027ade785c4d38989273e3905c510df958fd814160a8add5f9f9b57be94f1988ada8bcc98d2eb4ac72136557a7", 0x64}, {&(0x7f0000006700)="743b52038f380e0c8e1f23052ee51bc8aed3a53080ee0d359038c01c183b1aca4acf1e3ef7d5f67e0d7a0147e632a648fa7b888ac0fa9cd80672e4d10d9dd683f83f26b820b139ec0cc43cedb131c14baffce4c6dbfcc56dfb3c98814972c7e555e43083268c2508ebd136", 0x6b}, {&(0x7f0000006780)="add130d0dc7b32c09c582962c318566b1e6a430376561780c7a7ade86b8ec3d35260a4e8168198e2bfe16d02bd8c4f159c6b64c34c137192ba651d3bbb1049a8095128f0b891deceb9f491dbfd3564f382c23a50f0ff667a1e8b7219a6f83e6619308450d957137d1fd40b8f2247db857817de75b6af0217b82d0696a0db10e7217921212588dc234945cfb0002415c128d3cb1400b849a23dcf995e9294a6bfef0adfecc7bbff08c703974725e890a567d0e20a303c534cbc3d8833851a7d38f63bad850f3538", 0xc7}, {&(0x7f0000006880)="fe33eb984309fcffac22983a81444f7baace568f66cb02d94fbfb59329146387dee79c3c9a4db44eaf", 0x29}], 0x7, &(0x7f0000006940)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000000000000", @ANYRES32, @ANYRES32, @ANYRES32], 0x48, 0x40800}}], 0x3, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) syz_io_uring_setup(0x110, &(0x7f0000000400)={0x0, 0x40fad7, 0x1000, 0x3}, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000000)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)={0xfffffeff}) close(r5) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r8, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) getsockname$packet(r7, 0x0, &(0x7f0000000200)) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000000)="0a000000010001", 0x7) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32, @ANYBLOB="dc196c174c0f622e019df2d7fcc0c6e67e55dd353e5b54dbb5c89c1e1f4a22120475c8cdd9a545554eab5c90c9583f399da9afac43bb31"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee5", 0x2e}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 682.922375ms ago: executing program 1 (id=2051): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014"], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000001c0), &(0x7f0000000240)=0xffffffffffffff00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$qrtr(0x2a, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0xfff, 0x4) write$nbd(r3, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x40, 0x9, "82b0cfc4337965941538be09000000000000000000007400a391793ba70d0000000000fdf700000000baffda6e4a4d83"}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001880)={r3, &(0x7f0000000880)="4ac6a6728c7057c003ef14ffac9a8ede36268acefa248ac0847fbd52a6b941d0056b15e142d1ace4efd6bd4e5e6af46cbfb203b1bb8f4cbbb6c93d2830ff33bdf8e772619bb8b597ff939dbe3f8450766f786bfc46329bdc255d2df667412e93f8d31d81ede15db8f94b45131aab7201f29866b2dc17511e9ad3d73233b27a2c6b762e19ae058e19b3211efd5dd379afabd9337ac8f6fa6a048c3393a6833ef97932f4c845825fcacaab0629e420cabac4c87239f6212888881ae6169d2bb1506e06b00afb65f7f1b142496b2bd919266190d34c3e3a00dd2ba7953ac030d74abea09cc2780b61a88e83c46e9a8a605e3f8fa28f23e15ed5329eedd31ec396688a155467e318d0b8ba34c7d191a4ddd14ceb3a6c337de63d36c303233b0818b2a8481a602a5230d5e601905f07c1fed05d7605737b3d37cbac980494997f85e61c510a70d4ce705a7badc197c700c9a2b2d506decaf301983361b57ecc4f64f89bbfc552400a0b7eae787607e32a0cf985813cca32ea18dee39da4bc4ded12ec983eb9b5b51fdb94f11da9eb87b86756d2f6c2df637ef6a89432c68ebff0e7826efe9e633f072a1e29de97fcff16b30693dd1df20e1a89dc4ca728073bf0edfce4644da3b48468a1c2433636f4d2e48db8ddb3d942496bb11d9ac7c388ae2062916018b4eaf8843465c40962e1b7cb062d32db236020e99d8de18a70862885532a4dd17ad383cc1db443f23c6e5ab44ddb5fcfebe1225dcaed0595194f179db455d7e5efe5df5961b437293a8f2436a90cf94a64c07e86bf1989bbc7044c4e15021f9c33c31740a8ae7a073e8b507341b70896b44fd00af117e601635a8d9613695848934e22b30587476062185a2d9a1f258dbf77cacb8ffe6cca1cc024fb11659a637e9bdfcf07b5a1ec0226425ad19e9bf0744501db925d2f46daebba755f3e44585e981816f53c32f105130f6757fad9fae496dbe4507c56d4ff3e2eaaacdab05e0bd46bd2822791ba43b2adf2e0954a1629ba06a30374997669e96ffe5003e7f661ded0631fd23c982496025dcb3cc5dbe1aae56389c09958b0e620b0453921fa21a6bfeab349930a6e9051e2491b9c87c89bfb0c54389a5a90671fab22538b6acb50d9140f0d3770c0f2683dfe442823242ae5bc84084971e96a666ff449a9bcc27022271443def7565264aa8ea5a4afbf1421ec72469c4d260122b8fd560b6f7acd2089c526deb89207375ee2ffa4c47b103560eac98b6b9b6a300dd6e23986b711a8a0b1918fccd2debef558886a0edebbd3ab7ba0b9368582ac287623a90cc443b55b563f1ec60edbb45d2734452222519ab04957f2b0bd5577080216c02c3aefa15a92c8f35eb72a4a282f2d167b91f5ec4ab61fcb4d0831c49a8a1e4e00cb48959a95211e85fd2150c5d046c5c759e0d579f75198cb57157e84cccadb281be9d4038d67589558c69a2743225713093c2f9b365b719b465f7e4dc7ae68403b4d049dce986ed04f624cac63ff0664ac14bc8a32aad5faf86f12cbce5e5ddd0d1daf1a224912ac53a0366d9c2725cc1ce359bfb5f5cd4e7d7ed8b7d5db761f8343e03fa1b638d8bc81b66f945d26f7519d2aeb77cabcf707a9a5ecb4b9e593aa5a6a961421f3c5fac0a1da1ad02d9e47369867ba3a4c57d01e2cd4f778249dd1f5fc7b59f5a7f8c1d6f5ede07fb95d5c954ea7723d4181219b71c8c7807cd87144049f3890b754c81882112827a37fa305ba3159fe920f1fdc255c8dc991941771c5f4ff580bce744a8b9639260ec345cd2328f8c467f970b897af04159f235f72f6cab529429ede677cd57fa6c5bfbff6cd2480e33c57d486714601f48162e8750fb1c2c815b54df3525ee311c591fa41f00812680fd7b9be619caf4af568437d77db5c6e42fa91facdde0893393e87f28039dabba1c29273517ca7bd224773dbcd0d0849003cdfcf6122d372623eba7e4f35773b11c840db2cd8c220c7f1482ab139f8ae3a7cea70e7a430dddc09be9017ee9f5e92dc3061309624c38cef0f695eacaa9932a2a935c8ba799c28e4b2f3e16fc2f643cef9e48ff344ecee342a7c1e13ce51f5d48958f954c76b45f8e9a7a4ee69c4fb53bff92659f461ae5b914ba66cc2e8ca64edded17de4f8d86f50ea1c4094b88e9151217302b9e233d306fb297a67178a75d52416bfe44938c174f9233f22a7d9fff3556f7eeb40d200af605160ec7342f3811faea07418701358d4bfc6d18e161ee6128edd7d321291da90dc852930ed0cf8098431e375124f4919f66f2cf539990f0f7f99a8e3bc55275cf60ea03251f9892d9b959efed12b84a27604687ae4469b5d1c28d03cb29e8cbf1b1ecde50c612b8c8890d8c985740604b4e3e4cea832ecfd3bb5038dbaea276eaa3938b20be57d66ceccbd4990a8d3682913a277e7b02181ec9d96f0bbab2892338326facfff4fb05323506be340d1556795dd8a49fd7d2f45ad0dadffef52533eb9105c89f61461d440292100f59229b260a70e3f9b831ab2c9f60996a9644d6676363cb05068460f538173408f6854a39bb7a999ab1047eddd3f6122aa0679995cd0dafca218766698a68fbf75056991ab5e7f8362cfa67b3c6a05ad87841dc8be1edd5d8a6972a8c7038cf6585ffdb8d549902a5dc58fb98847829871c23fe4ab996e9417018be5ff3f6da37b4cf48176f1dd8a257ffa739d8a2061baa1935439cd7e2f313aedbb003a96cdace07cc72d86dcbcc61f8c2938dbce32c9f17ddf115126c83a2dbadb44493dcc42dca8a785f5d9759e59cfe2758ae0910384a076325ca2b3c67f83a3c010f82f762978c8aabe38c30fdb7b881644175c2b6a828f60431707336d64d3768aeab7bd806a42dd18a239b95745f7f803b6110f5ef0d65dfad9b1e8d04bd42c651eee489d46bd296c790aaa34f739534070a76b0b876871edac7d2304099bb54884590b51aa680220cc2dbc9c3ecf5bf954eb51c1acd6549329e47140a1245f344274fd72a05d5c76ac6faeabdc7561aa375ffc54887720ecd405ff82dc4f9ed27f440d6be57f0653736e876d7109d03f126d52dc9d546eea34d00b442e9be7b5fa33b98e605926c8e39c1644c9cb39334d28a83cbc02f05e73e9b5d0a3be0caded1e7be2e7ed0b078bc0d749ac5483270692f39ed2b648b847d2fecbf56581745c0c15a6faa5dfac40e94f249cac74fcc297bb3645969590cb99ee9b630c61e0ca8c622f1f66732eec4af330a91ad60444d4de2c2aa47a902488b6202511b542935ee478880378d4e18ad26abde96a1c21c917dbd0c9e4233b79595a871b8abe23b078c1721d45fb36a9fa5249b7a9624774ac5e8f64785fa9c2421d717ff97cfa497d7b730d7d62d2c4678bf36a1a69cbecd94bd916949827fcd7f4ba30f7d5ebc6c851f7232fc98680154770b98e00f5294a87044150e0501686fdd409b060fe8773bc6e48b3ed6d96a0b2c06b05ed6382b8d6571e7704256e0589ec91cec529a587a6f5924c8089d1af458a2c058f465ee0bac693867a9ba3c1622eab93f0cb82dee81f49a825426c52f93e92efa2d516ada9fb34735ddc72243de09de60aca6e7738fd731d724d91b97ac59ce73012937de00f31b899f62677ae0ced6413d087b087d4af995305c2e286039b9c96d397e285eeba5f1b88a809550d7df9634b98f38fa37b881ce74b54d5e39e5fa21b4f1bfb50d2615d026a175f26bf41931905f416a16d7c1b98631987156982af8d09a86d51d1075614bb94b35f1fd039571489200902830da3d130ce2e0e70687c57d150ba6810db46a9841fe22502135a007bf5ef07621c0e0cb3c5cd2f02044b50481f92c2dcdcd2ded742d6209f476160f55934b4952474d31ae2fe4e3c062526f90f1d157e218689548b9428fe85d353c9c53acce7fae82211326cffeaa55e1d5f7b3d8d33ddf64db181942648ead68fa50d0221fc56faf2b6ee0819d0343272ab343aeed2915c03615d39d149d44e8d7665ce1a38435acd7024028f156ba5c325833d1c67e026048ed7eb8510f9a2e93ddd2bcd67a005d8cca6018179bcfa06ce3926390c53b6d5e7b8e1457e292e7e7e3b61c4004ea8f69bc07afcc38668f7321fbb1bfda0a34f833f99cbac160d71813070c9a6e8e0e726519dc93bf2036eef5aeaed26bf87fc2cb8eab8cd9418f518446dff64478541fcced68c874a88075f0a5968670bde512a2444c6abfd4dc8cbbc2d1025afa13a69caadf1896b343bacce6fc84dbc214bc8d512f62327cced78f1334dde05a19cd0c4442229f3af1ddace078aad37106f20e53b1c5fe92dd2dacdc4f07ba07397ff72ec9913ab6c8e66fc2c7a2622c4ff7ba27fd7def9dab918a0c7876f5b620b48eb893e608f332f483cf85594d3e71b309fcf9580e0ee83ac45cce642aa4d79fecc6ada27e6104f9238119e2b43122a15ac43e88c442a723eccac43ab5ae47050ac54c87590bdab5f8d6c195ef67520a4a7aedf10930e197f06cf546e036385d587db366180adf0f670ebd0e42e91ea3d33cf972d878af7fe93d6720a0d0adcd20f57495ae9e334f06916ce5d67b19da0228d1820a14f7c1d0077d683ff6ff8d93f8ec7753906f6351c8d34663a6b35edc9ea7d2be17fbe5cb5d1f3d6f08e511af7e4835e9f7f9d3e3259432924ae25bbb3ea463683f42a12cad569a7bb43c335ee153e21aa3a76f16d90a1cd4d7f4bd9d6928ce1750c62e79ab0c19e9af5dfe17af1bbdd041fd3c936b546a8f5e5b796dc1488c433e3fdf58309df4f7df6f84e9c9fba3bdffe4dffe9d300c339f8fffb92f3b3c4fe75b55c955a0ef42536c8181dc6131dbfb7d6a779ba7fd4075d46cd8a7e9e9dc41e33102da8a55db8c4e544a636c34ab557339dbc2337359508f15dc00ceb300469eace213e5271e9065e903fb54953288e593024cce2c6c0e3f295b354d57389686270512d171d055d4c5d1b1e519f8899829cd81b7577274ef337720b3ade83aa8826a6e5341d472191878b9326702e506f1847a2f7b25eedba0a04b0b118779497e1ab31be8bae65abf492407291be8a54346c333c75860c6de779b4c13b6e7305331e7db6506e88e91587c81bf816b1b9315763fd7ebfe6beb4f47014e3a9f198c4fc83944b4991b57cdbff3d7c7351becbfc0db7175fec16dd89b9fea469b1d81bc4da4ea137d0f871e72c065f318ddcb289108030b924b26b97f4a40df779cf766e0029da3713a53156c9de2ed0f3666f09833d7844d4f485143cb7a3393904796aa365e1830f06bec89b34d24053fc23e0bf699683131b0ad327418d7e9acc25dd67783cab30349ee97cca653034c7f0dc6b8b0e922602f30bfa2ee5ada218886b2d8a79daad247a13a96dba8c74a1f91176ca62ae315ec45622c0adfb254e02efbaac05bd3abfca614e0b9bfbab8500f87a8f253c4b06cd81ab6013e03ba854ac42b73ce47ee6ad75412afa4265a822c153e3f0bba475b20004f3fc77d40d6e024a3aed0c1101b59878ceb4624730ca1e3facb8fa6f4c69672235c0709d6488a166b5725a232105f3c8daa9dedfa345ab65a89c2082aace03740e7b6c947576624aae1b2698062d5c53d2a82dca42062cb4a91ebfeea98245df8d1211cde8e979e9d2ba6e3c229124ce7896a18639ed4c6a669ed9830a99b17b603248f5b0927deeb48ecd4c2c39d0e7440044544246e05c3c809af1febe1c881a8f846345f59881c843d2786aa82acf45e43ce13fd5aba3632081cc0be486ffd971247642c33764e7b4690cc29d7a9f76e83b"}, 0x1c) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000640)={0x0, 0x1, 0x200000c, 0xf, 0x0, &(0x7f0000000240)="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"}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) preadv(r3, &(0x7f00000039c0)=[{&(0x7f0000000540)=""/131, 0x83}, {&(0x7f0000000600)=""/169, 0xa9}, {&(0x7f00000006c0)=""/80, 0x50}, {&(0x7f0000000740)=""/61, 0x3d}, {&(0x7f0000000780)=""/152, 0x98}, {&(0x7f00000018c0)=""/41, 0x29}, {&(0x7f0000001900)=""/30, 0x1e}, {&(0x7f0000001940)=""/31, 0x1f}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/204, 0xcc}], 0xa, 0x9, 0x8001) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000440)={0x5, @win={{0x735, 0x9, 0xe1, 0xfffffff9}, 0x1, 0x8, 0x0, 0x6, 0x0, 0xcf}}) 655.495606ms ago: executing program 0 (id=2052): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x107, 0xa000) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="0000000000000000000000000085000000290000009502000000000400"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="2f0000000000000000000000d2faf6761e83550606e089b5b62c96ffba59c8d8846721758d60720300000028d4a1e73ee9ee5fd001b6bdeed7a063da0d6422e98e", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) setreuid(0xee01, 0xffffffffffffffff) setreuid(0xee00, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x1000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 651.788252ms ago: executing program 0 (id=2053): setrlimit(0x7, &(0x7f0000000380)={0x1, 0x9}) socket$pptp(0x18, 0x1, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a40)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800140003000401a80009000900024004000000035c044dc1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e03a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4efef3d9300"/216, 0xd8}], 0x1}, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000240)={0xff, 0x0, r1}) getsockopt$inet_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000280)=""/202, &(0x7f0000000380)=0xca) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) eventfd2(0x406, 0x80801) 490.571775ms ago: executing program 0 (id=2054): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xbc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x82}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 490.36645ms ago: executing program 0 (id=2055): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r1, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0401"], 0x6) 448.1203ms ago: executing program 3 (id=2056): syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0704230c"], 0xa) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x10200, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) socket(0x10, 0x80002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 369.550571ms ago: executing program 0 (id=2057): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100026bd7000ffdbdf250e0000002c000280080008000600000005000d008c22e552a85693c1dcb1f9adf4bc0000000005000d"], 0x40}, 0x1, 0x0, 0x0, 0x1d58078d8c26741e}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x80801, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9fa0}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 181.5099ms ago: executing program 0 (id=2058): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, r1, 0x200000000000000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/30, 0x1e}], 0x1}, 0x12142) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x98}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x90) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_extract_tcp_res(&(0x7f0000000100)={0x41424344}, 0x3, 0x3f) syz_emit_ethernet(0x8f, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb080049260081006400ff07069078ffffffff64010102830b9d64010101ac1e010194040100004e244e22", @ANYRES32=r5, @ANYRES32=0x41424344, @ANYBLOB="41200005907800061312954436079d175c26e76d1a4228ee537d220bafcebea53c381bb8ab01220d30cbd6d39cdc696bd7515e010303aa080a00000000000000010000004bc35a5cf754563b741c95ef18"], 0x0) mount$9p_unix(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10000, &(0x7f0000000440)) r6 = syz_open_dev$vim2m(&(0x7f0000000500), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x1000, 0x2, {0x2, @sliced={0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001]}}}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x4, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xe) sendmmsg(r0, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c000) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, &(0x7f0000000540)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 181.222107ms ago: executing program 2 (id=2059): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x2, 0x4}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="4d7e00fffd00000000002a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES32=r6, @ANYBLOB="0600060000000000060004000000c000d4d425a49653b80535241cc9fb0a48"], 0x50}, 0x4, 0x700000000000000}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, 0x0, 0x800) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070625bd7000000000002d0000000c000500000000000000000006000600ffff000008002f002a64afbc05002b00000000000a0001007770616e3000000006000400a1aa000008002f00000000000c002d"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0xc8800}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x14, 0x1, 0x3, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r11, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r8, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r12, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r11}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd27, 0x700, {0x0, 0x0, 0x0, 0x0, 0x6000, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010100}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x40}}, 0x440b0) 101.240642ms ago: executing program 3 (id=2060): msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000080)=""/103) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xfffffe01]}]}, 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x200088a0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) write$cgroup_int(r6, &(0x7f0000000140), 0xfffffdef) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="9c00030002060108000034e4000000000500000005000100060000000500040000000000680007800c00018008000140ffffffff0800124000902217fd63bd6da4220000060004404e22000008001740000000061800018014000240fe8000000000000000000000000000aa060004404e230000180002801400024000000000000000000000ffff7f00afbb8102f54b6cfa00000500050001000000763daa2c932b59bfe0a7d58964c26826228c3a930cda01b33f71f5b6a1321331e19940f7458583d7c32d0fe9e9aa9dafae2a4df78ad66684fbaa13c678ff5fa9ab70667eda24d72e4ff48aa2410d70681605a107784e4ccd16f599a44f77545f4d46b3e322ce2fd7176e85c90926d995c0699d4e19b8fd2b8435c936db681045a1d66bc9208196c3130108afcdba26816b311e3972f48566a9ef783c3cbe0690cc52c191e943"], 0x9c}}, 0x2) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, 0x0, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) r8 = syz_io_uring_setup(0x400c, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r8, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x1100, 'gcm(arc4-generic)\x00'}, 0x58) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x23ee, &(0x7f0000000300)={0x0, 0xc2dc, 0x2000, 0x2, 0x1cb, 0x0, r0}, &(0x7f0000000380), &(0x7f0000000480), &(0x7f00000004c0)) sendmsg$IPSET_CMD_ADD(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) read(r4, &(0x7f0000000140)=""/87, 0x57) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=2061): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd000111000486dd00a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) kernel console output (not intermixed with test programs): hook_file_ioctl_common+0x140/0x440 [ 255.700255][T10417] ? __fget_files+0x21f/0x3d0 [ 255.700276][T10417] tty_compat_ioctl+0x2b3/0x420 [ 255.700295][T10417] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 255.700315][T10417] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 255.700331][T10417] __do_fast_syscall_32+0xe7/0x970 [ 255.700349][T10417] do_fast_syscall_32+0x32/0x70 [ 255.700365][T10417] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 255.700384][T10417] RIP: 0023:0xf70befec [ 255.700396][T10417] Code: Unable to access opcode bytes at 0xf70befc2. [ 255.700401][T10417] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 255.700413][T10417] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000005414 [ 255.700423][T10417] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 255.700432][T10417] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 255.700440][T10417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.700449][T10417] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 255.700463][T10417] [ 255.700526][T10417] Mem-Info: [ 255.700576][T10417] active_anon:6621 inactive_anon:1517 isolated_anon:0 [ 255.700576][T10417] active_file:1298 inactive_file:13366 isolated_file:0 [ 255.700576][T10417] unevictable:2968 dirty:380 writeback:0 [ 255.700576][T10417] slab_reclaimable:6270 slab_unreclaimable:57363 [ 255.700576][T10417] mapped:25295 shmem:5649 pagetables:1387 [ 255.700576][T10417] sec_pagetables:301 bounce:0 [ 255.700576][T10417] kernel_misc_reclaimable:0 [ 255.700576][T10417] free:22887 free_pcp:7159 free_cma:0 [ 255.700616][T10417] Node 0 active_anon:0kB inactive_anon:16kB active_file:4kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7776kB pagetables:1452kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 255.700657][T10417] Node 1 active_anon:26484kB inactive_anon:6052kB active_file:5188kB inactive_file:53464kB unevictable:8336kB isolated(anon):0kB isolated(file):0kB mapped:101152kB dirty:1516kB writeback:0kB shmem:19060kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8164kB pagetables:4096kB sec_pagetables:92kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 255.700695][T10417] Node 0 DMA free:2528kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 255.700738][T10417] lowmem_reserve[]: 0 284 284 284 284 [ 255.700762][T10417] Node 0 DMA32 free:26112kB boost:28672kB min:41744kB low:45012kB high:48280kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:16kB active_file:4kB inactive_file:0kB unevictable:3536kB writepending:4kB zspages:1756kB present:1032196kB managed:291416kB mlocked:0kB bounce:0kB free_pcp:1960kB local_pcp:52kB free_cma:0kB [ 255.700812][T10417] lowmem_reserve[]: 0 0 0 0 0 [ 255.700835][T10417] Node 1 DMA32 free:62908kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26484kB inactive_anon:6052kB active_file:5188kB inactive_file:53464kB unevictable:8336kB writepending:1516kB zspages:3644kB present:1048432kB managed:948212kB mlocked:4800kB bounce:0kB free_pcp:26644kB local_pcp:1024kB free_cma:0kB [ 255.700881][T10417] lowmem_reserve[]: 0 0 0 0 0 [ 255.700909][T10417] Node 0 DMA: 46*4kB (U) 9*8kB (U) 2*16kB (U) 10*32kB (UM) 2*64kB (UM) 0*128kB 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2528kB [ 255.701016][T10417] Node 0 DMA32: 510*4kB (UM) 139*8kB (UME) 75*16kB (UME) 184*32kB (UME) 52*64kB (UME) 18*128kB (UME) 6*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 0*4096kB = 26112kB [ 255.701133][T10417] Node 1 DMA32: 223*4kB (UME) 469*8kB (UME) 149*16kB (UE) 193*32kB (UE) 70*64kB (UE) 44*128kB (UME) 23*256kB (UE) 8*512kB (U) 9*1024kB (UM) 4*2048kB (UM) 3*4096kB (UM) = 62996kB [ 255.701253][T10417] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 255.701261][T10417] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 255.701270][T10417] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 255.701278][T10417] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 255.701286][T10417] 21707 total pagecache pages [ 255.701291][T10417] 1395 pages in swap cache [ 255.701296][T10417] Free swap = 102124kB [ 255.701300][T10417] Total swap = 124996kB [ 255.701304][T10417] 524155 pages RAM [ 255.701308][T10417] 0 pages HighMem/MovableOnly [ 255.701311][T10417] 210408 pages reserved [ 255.701315][T10417] 0 pages cma reserved [ 255.865843][T10427] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1356'. [ 255.971327][T10429] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1124: comm modprobe: iget: checksum invalid [ 256.045744][T10433] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1124: comm modprobe: iget: checksum invalid [ 256.050739][T10432] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1124: comm modprobe: iget: checksum invalid [ 256.059185][T10434] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1124: comm modprobe: iget: checksum invalid [ 256.075460][ T5749] Bluetooth: hci0: Malformed LE Event: 0x0b [ 256.454177][T10455] FAULT_INJECTION: forcing a failure. [ 256.454177][T10455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.459142][T10455] CPU: 1 UID: 0 PID: 10455 Comm: syz.0.1363 Not tainted syzkaller #0 PREEMPT(full) [ 256.459161][T10455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 256.459167][T10455] Call Trace: [ 256.459171][T10455] [ 256.459175][T10455] dump_stack_lvl+0x100/0x190 [ 256.459189][T10455] should_fail_ex.cold+0x5/0xa [ 256.459202][T10455] _copy_from_user+0x2e/0xd0 [ 256.459220][T10455] get_compat_msghdr+0xb3/0x480 [ 256.459237][T10455] ? __pfx_get_compat_msghdr+0x10/0x10 [ 256.459254][T10455] ? rcu_is_watching+0x12/0xc0 [ 256.459265][T10455] ? ___sys_sendmsg+0x19d/0x1e0 [ 256.459276][T10455] ? kfree+0x1e5/0x6c0 [ 256.459290][T10455] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 256.459303][T10455] ? rcu_is_watching+0x12/0xc0 [ 256.459315][T10455] ___sys_sendmsg+0x1b6/0x1e0 [ 256.459326][T10455] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.459336][T10455] ? lock_release+0x24d/0x310 [ 256.459354][T10455] ? irqentry_exit+0x24d/0xa00 [ 256.459372][T10455] ? __pfx___might_resched+0x10/0x10 [ 256.459388][T10455] ? __sys_sendmmsg+0x31d/0x440 [ 256.459403][T10455] __sys_sendmmsg+0x309/0x440 [ 256.459433][T10455] ? __pfx___sys_sendmmsg+0x10/0x10 [ 256.459450][T10455] ? ksys_write+0x190/0x250 [ 256.459466][T10455] ? __mutex_unlock_slowpath+0x35d/0x930 [ 256.459481][T10455] ? fput+0x79/0x100 [ 256.459489][T10455] ? ksys_write+0x1ac/0x250 [ 256.459504][T10455] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 256.459521][T10455] __do_fast_syscall_32+0xe7/0x970 [ 256.459535][T10455] do_fast_syscall_32+0x32/0x70 [ 256.459546][T10455] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.459560][T10455] RIP: 0023:0xf70befec [ 256.459572][T10455] Code: Unable to access opcode bytes at 0xf70befc2. [ 256.459577][T10455] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 256.459588][T10455] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080003dc0 [ 256.459594][T10455] RDX: 0000000000000299 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.459601][T10455] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 256.459607][T10455] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 256.459613][T10455] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 256.459622][T10455] [ 256.658227][T10462] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1366'. [ 256.779146][T10463] usb usb8: usbfs: process 10463 (syz.1.1364) did not claim interface 0 before use [ 256.845367][T10463] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 256.848455][T10463] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -74 [ 256.851716][T10463] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 256.975772][T10466] input: syz0 as /devices/virtual/input/input13 [ 256.978623][T10466] FAULT_INJECTION: forcing a failure. [ 256.978623][T10466] name failslab, interval 1, probability 0, space 0, times 0 [ 256.983322][T10466] CPU: 1 UID: 0 PID: 10466 Comm: syz.0.1367 Not tainted syzkaller #0 PREEMPT(full) [ 256.983352][T10466] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 256.983359][T10466] Call Trace: [ 256.983363][T10466] [ 256.983367][T10466] dump_stack_lvl+0x100/0x190 [ 256.983382][T10466] should_fail_ex.cold+0x5/0xa [ 256.983394][T10466] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 256.983406][T10466] should_failslab+0xc2/0x120 [ 256.983419][T10466] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 256.983429][T10466] ? __kernfs_new_node+0xd2/0xa10 [ 256.983443][T10466] ? kstrdup+0xb3/0xe0 [ 256.983453][T10466] __kernfs_new_node+0xd2/0xa10 [ 256.983469][T10466] ? __pfx___kernfs_new_node+0x10/0x10 [ 256.983483][T10466] ? rcu_is_watching+0x12/0xc0 [ 256.983495][T10466] ? rcu_is_watching+0x12/0xc0 [ 256.983506][T10466] ? kernfs_root+0xee/0x2a0 [ 256.983518][T10466] ? rcu_is_watching+0x12/0xc0 [ 256.983528][T10466] ? kernfs_root+0xee/0x2a0 [ 256.983540][T10466] ? lock_release+0x24d/0x310 [ 256.983559][T10466] kernfs_new_node+0x117/0x150 [ 256.983574][T10466] kernfs_create_link+0xcc/0x240 [ 256.983585][T10466] sysfs_do_create_link_sd+0x90/0x140 [ 256.983599][T10466] sysfs_create_link+0x61/0xc0 [ 256.983611][T10466] device_add+0x675/0x1970 [ 256.983629][T10466] ? __pfx_device_add+0x10/0x10 [ 256.983646][T10466] ? kobject_get+0xbb/0x150 [ 256.983660][T10466] cdev_device_add+0x12b/0x270 [ 256.983689][T10466] evdev_connect+0x3a8/0x4b0 [ 256.983701][T10466] input_attach_handler.isra.0+0x177/0x1e0 [ 256.983713][T10466] input_register_device.cold+0x139/0x375 [ 256.983728][T10466] uinput_ioctl_handler.isra.0+0x8d8/0x1d20 [ 256.983743][T10466] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 256.983756][T10466] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 256.983771][T10466] ? rcu_is_watching+0x12/0xc0 [ 256.983782][T10466] ? __fget_files+0x215/0x3d0 [ 256.983798][T10466] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 256.983813][T10466] ? __pfx_uinput_compat_ioctl+0x10/0x10 [ 256.983827][T10466] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 256.983841][T10466] __do_fast_syscall_32+0xe7/0x970 [ 256.983854][T10466] do_fast_syscall_32+0x32/0x70 [ 256.983866][T10466] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.983880][T10466] RIP: 0023:0xf70befec [ 256.983893][T10466] Code: Unable to access opcode bytes at 0xf70befc2. [ 256.983898][T10466] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 256.983908][T10466] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005501 [ 256.983915][T10466] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.983921][T10466] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 256.983927][T10466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.983933][T10466] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 256.983942][T10466] [ 256.984883][T10466] input: failed to attach handler evdev to device input13, error: -12 [ 257.182687][T10468] 9p: Bad value for 'wfdno' [ 257.520026][ T5824] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 257.826122][ T5815] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 259.511266][T10501] syzkaller0: entered promiscuous mode [ 259.514276][T10501] syzkaller0: entered allmulticast mode [ 260.500589][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.891224][ T5146] EXT4-fs error: 9 callbacks suppressed [ 260.891235][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 260.909144][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 260.912919][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 260.968674][T10518] syz_tun: refused to change device tx_queue_len [ 260.971579][T10518] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 262.081924][T10529] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1388'. [ 262.266672][T10543] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:63: iget: checksum invalid [ 262.273406][T10544] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:63: iget: checksum invalid [ 262.280345][T10540] ip6gre0: entered promiscuous mode [ 262.283249][T10540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1392'. [ 262.292803][T10547] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:63: iget: checksum invalid [ 262.298114][T10548] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:63: iget: checksum invalid [ 262.304816][T10550] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:63: iget: checksum invalid [ 262.311277][T10551] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:63: iget: checksum invalid [ 262.320707][T10540] 8021q: adding VLAN 0 to HW filter on device bond4 [ 262.323750][T10540] bond0: (slave bond4): Enslaving as an active interface with an up link [ 262.356096][T10554] syz_tun: refused to change device tx_queue_len [ 262.360098][T10554] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 263.350742][T10568] sch_fq: defrate 5 ignored. [ 263.397806][T10572] FAULT_INJECTION: forcing a failure. [ 263.397806][T10572] name failslab, interval 1, probability 0, space 0, times 0 [ 263.426041][T10572] CPU: 3 UID: 0 PID: 10572 Comm: syz.0.1399 Not tainted syzkaller #0 PREEMPT(full) [ 263.426058][T10572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 263.426064][T10572] Call Trace: [ 263.426068][T10572] [ 263.426072][T10572] dump_stack_lvl+0x100/0x190 [ 263.426086][T10572] should_fail_ex.cold+0x5/0xa [ 263.426111][T10572] ? kmem_cache_alloc_node_noprof+0x5b/0x6f0 [ 263.426124][T10572] should_failslab+0xc2/0x120 [ 263.426137][T10572] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 263.426148][T10572] ? __alloc_skb+0x140/0x710 [ 263.426161][T10572] ? __alloc_skb+0x5b7/0x710 [ 263.426175][T10572] __alloc_skb+0x140/0x710 [ 263.426188][T10572] ? __alloc_skb+0x5b7/0x710 [ 263.426201][T10572] ? __pfx___alloc_skb+0x10/0x10 [ 263.426213][T10572] ? netlink_autobind.isra.0+0x160/0x370 [ 263.426226][T10572] netlink_alloc_large_skb+0x69/0x150 [ 263.426238][T10572] netlink_sendmsg+0x680/0xda0 [ 263.426249][T10572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.426261][T10572] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 263.426275][T10572] ____sys_sendmsg+0xa4d/0xbe0 [ 263.426290][T10572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.426301][T10572] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.426312][T10572] ? kstrtouint_from_user+0x13c/0x1d0 [ 263.426326][T10572] ___sys_sendmsg+0x190/0x1e0 [ 263.426338][T10572] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.426351][T10572] ? rcu_is_watching+0x12/0xc0 [ 263.426366][T10572] __sys_sendmsg+0x160/0x210 [ 263.426381][T10572] ? __pfx___sys_sendmsg+0x10/0x10 [ 263.426397][T10572] ? __pfx_ksys_write+0x10/0x10 [ 263.426412][T10572] ? rcu_is_watching+0x12/0xc0 [ 263.426423][T10572] __do_fast_syscall_32+0xe7/0x970 [ 263.426436][T10572] do_fast_syscall_32+0x32/0x70 [ 263.426448][T10572] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 263.426463][T10572] RIP: 0023:0xf70befec [ 263.426475][T10572] Code: Unable to access opcode bytes at 0xf70befc2. [ 263.426480][T10572] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 263.426491][T10572] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 263.426498][T10572] RDX: 0000000000008084 RSI: 0000000000000000 RDI: 0000000000000000 [ 263.426504][T10572] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 263.426510][T10572] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 263.426516][T10572] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 263.426526][T10572] [ 263.955926][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 264.605276][T10605] openvswitch: netlink: Missing key (keys=40, expected=100) [ 264.712958][T10608] loop5: detected capacity change from 0 to 7 [ 264.715372][T10608] buffer_io_error: 12 callbacks suppressed [ 264.715381][T10608] Buffer I/O error on dev loop5, logical block 0, async page read [ 264.719751][T10608] Buffer I/O error on dev loop5, logical block 0, async page read [ 264.722829][T10608] Buffer I/O error on dev loop5, logical block 0, async page read [ 264.725761][T10608] Buffer I/O error on dev loop5, logical block 0, async page read [ 264.728375][T10608] Buffer I/O error on dev loop5, logical block 0, async page read [ 264.731357][T10608] Buffer I/O error on dev loop5, logical block 0, async page read [ 264.739148][T10608] Buffer I/O error on dev loop5, logical block 0, async page read [ 264.745064][T10608] ldm_validate_partition_table(): Disk read failed. [ 264.747230][T10608] Buffer I/O error on dev loop5, logical block 0, async page read [ 264.749665][T10608] Buffer I/O error on dev loop5, logical block 0, async page read [ 264.752596][T10608] Buffer I/O error on dev loop5, logical block 0, async page read [ 264.755259][T10608] Dev loop5: unable to read RDB block 0 [ 264.757118][T10608] loop5: unable to read partition table [ 264.758940][T10608] loop5: partition table beyond EOD, truncated [ 264.761661][T10608] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 265.360023][T10607] loop5: detected capacity change from 7 to 0 [ 265.485631][T10618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1415'. [ 265.595318][T10624] pim6reg: entered allmulticast mode [ 265.672816][T10624] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 266.517744][T10654] EXT4-fs error: 6 callbacks suppressed [ 266.517759][T10654] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:19: iget: checksum invalid [ 266.528790][T10655] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:19: iget: checksum invalid [ 266.770121][ T40] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 266.777131][T10659] Unknown options in mask b7f2 [ 266.919994][ T40] usb 6-1: Using ep0 maxpacket: 16 [ 266.924344][ T40] usb 6-1: config 4 has an invalid descriptor of length 97, skipping remainder of the config [ 266.930714][ T40] usb 6-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 266.937495][ T40] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 266.941551][ T40] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.944750][ T40] usb 6-1: Product: syz [ 266.946411][ T40] usb 6-1: Manufacturer: syz [ 266.948376][ T40] usb 6-1: SerialNumber: syz [ 266.988157][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 266.991854][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 266.995861][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 267.158779][ T40] usb 6-1: USB disconnect, device number 15 [ 268.325834][T10691] netlink: 'syz.2.1441': attribute type 10 has an invalid length. [ 268.329263][T10691] bond1: (slave veth0_to_bond): Releasing active interface [ 268.332817][T10691] veth0_to_bond: left promiscuous mode [ 269.171704][T10700] EXT4-fs error (device sda1): ext4_lookup:1785: inode #13: comm dhcpcd: iget: checksum invalid [ 269.261862][T10702] EXT4-fs error (device sda1): ext4_lookup:1785: inode #13: comm dhcpcd: iget: checksum invalid [ 269.328227][T10697] FAULT_INJECTION: forcing a failure. [ 269.328227][T10697] name failslab, interval 1, probability 0, space 0, times 0 [ 269.333067][T10697] CPU: 2 UID: 0 PID: 10697 Comm: syz.0.1443 Not tainted syzkaller #0 PREEMPT(full) [ 269.333105][T10697] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 269.333115][T10697] Call Trace: [ 269.333122][T10697] [ 269.333127][T10697] dump_stack_lvl+0x100/0x190 [ 269.333149][T10697] should_fail_ex.cold+0x5/0xa [ 269.333167][T10697] ? fs_reclaim_acquire+0x70/0x100 [ 269.333193][T10697] ? tomoyo_realpath_from_path+0xb6/0x690 [ 269.333218][T10697] should_failslab+0xc2/0x120 [ 269.333236][T10697] __kmalloc_noprof+0xe0/0x840 [ 269.333259][T10697] ? kfree+0x1e5/0x6c0 [ 269.333282][T10697] tomoyo_realpath_from_path+0xb6/0x690 [ 269.333310][T10697] tomoyo_path_number_perm+0x23c/0x580 [ 269.333331][T10697] ? tomoyo_path_number_perm+0x22e/0x580 [ 269.333352][T10697] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 269.333373][T10697] ? get_pid_task+0x106/0x250 [ 269.333393][T10697] ? ksys_write+0x12a/0x250 [ 269.333414][T10697] ? lock_release+0x24d/0x310 [ 269.333445][T10697] ? rcu_is_watching+0x12/0xc0 [ 269.333462][T10697] ? __fget_files+0x215/0x3d0 [ 269.333484][T10697] ? hook_file_ioctl_common+0x140/0x440 [ 269.333506][T10697] ? lock_release+0x24d/0x310 [ 269.333529][T10697] ? __fget_files+0x21f/0x3d0 [ 269.333551][T10697] security_file_ioctl_compat+0xd3/0x230 [ 269.333574][T10697] __ia32_compat_sys_ioctl+0xc2/0x360 [ 269.333594][T10697] __do_fast_syscall_32+0xe7/0x970 [ 269.333614][T10697] do_fast_syscall_32+0x32/0x70 [ 269.333632][T10697] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 269.333653][T10697] RIP: 0023:0xf70befec [ 269.333669][T10697] Code: Unable to access opcode bytes at 0xf70befc2. [ 269.333676][T10697] RSP: 002b:00000000f548c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 269.333692][T10697] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000008949 [ 269.333702][T10697] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 269.333712][T10697] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 269.333722][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.333731][T10697] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 269.333746][T10697] [ 269.333769][T10697] ERROR: Out of memory at tomoyo_realpath_from_path. [ 269.445223][T10704] EXT4-fs error (device sda1): ext4_lookup:1785: inode #13: comm dhcpcd: iget: checksum invalid [ 269.652818][T10706] program syz.1.1445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.858174][T10710] ubi: mtd0 is already attached to ubi16 [ 270.619049][T10723] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 270.646896][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 270.660139][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 271.641232][ T6437] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 271.647810][ T5448] EXT4-fs error: 1 callbacks suppressed [ 271.647823][ T5448] EXT4-fs error (device sda1): ext4_lookup:1785: inode #125: comm dhcpcd: iget: checksum invalid [ 271.655867][T10724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #13: comm dhcpcd: iget: checksum invalid [ 272.934626][ T5448] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm dhcpcd: iget: checksum invalid [ 273.695318][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 273.700427][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 273.705276][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 275.482502][T10728] EXT4-fs error (device sda1): ext4_lookup:1785: inode #13: comm dhcpcd: iget: checksum invalid [ 277.763707][ T5448] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm dhcpcd: iget: checksum invalid [ 277.770682][T10733] EXT4-fs error (device sda1): ext4_lookup:1785: inode #13: comm dhcpcd: iget: checksum invalid [ 286.121165][T10739] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:63: iget: checksum invalid [ 286.127184][T10740] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:15: iget: checksum invalid [ 286.136548][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 286.141044][ T34] libceph: connect (1)[c::]:6789 error -101 [ 286.143531][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 286.149352][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 286.155232][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 286.161475][T10747] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1454'. [ 286.206683][T10752] netlink: 'syz.1.1455': attribute type 4 has an invalid length. [ 286.288134][T10738] ceph: No mds server is up or the cluster is laggy [ 286.337256][T10755] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 286.349996][T10755] block device autoloading is deprecated and will be removed. [ 287.213509][T10761] netlink: 'syz.3.1458': attribute type 1 has an invalid length. [ 287.238261][T10761] 8021q: adding VLAN 0 to HW filter on device bond4 [ 287.321887][T10761] bond4: (slave veth5): Enslaving as an active interface with a down link [ 287.452480][T10761] vlan2: entered allmulticast mode [ 287.454747][T10761] veth0_to_bond: entered allmulticast mode [ 287.457603][T10761] veth0_to_bond: entered promiscuous mode [ 287.460109][T10761] veth0_to_bond: left promiscuous mode [ 287.463112][T10761] bond4: (slave vlan2): making interface the new active one [ 287.465753][T10761] veth0_to_bond: entered promiscuous mode [ 287.468084][T10761] vlan2: entered promiscuous mode [ 287.470445][T10761] bond4: (slave vlan2): Enslaving as an active interface with an up link [ 287.697230][T10774] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 287.702890][T10774] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 287.709823][T10774] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 287.725676][T10774] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 288.065085][T10770] ceph: No mds server is up or the cluster is laggy [ 288.707863][T10796] batadv_slave_0: Caught tx_queue_len zero misconfig [ 289.097898][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1467'. [ 289.730145][T10802] loop5: detected capacity change from 0 to 7 [ 289.737516][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 289.741736][T10802] Dev loop5: unable to read RDB block 7 [ 289.746190][T10802] loop5: unable to read partition table [ 289.751426][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 289.757733][T10802] loop5: partition table beyond EOD, truncated [ 289.760527][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 289.760577][T10802] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 289.930049][ T5749] Bluetooth: hci3: unexpected event for opcode 0x0c23 [ 289.980258][T10807] syz_tun: refused to change device tx_queue_len [ 290.000758][T10807] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 290.445004][T10817] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 290.447623][T10817] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 290.449756][T10817] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 290.776955][T10822] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:18: iget: checksum invalid [ 290.784675][T10823] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:18: iget: checksum invalid [ 290.790727][T10821] could not allocate digest TFM handle md5 [ 291.038672][T10829] netlink: 'syz.3.1475': attribute type 2 has an invalid length. [ 291.044179][T10829] : entered promiscuous mode [ 291.098356][T10832] IPv6: A: Disabled Multicast RS [ 291.192594][T10834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1477'. [ 291.222577][T10836] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1478'. [ 291.249363][T10836] 9p: Bad value for 'rfdno' [ 291.342865][T10840] lo: Caught tx_queue_len zero misconfig [ 291.880458][T10842] binder: BINDER_SET_CONTEXT_MGR already set [ 291.882478][T10842] binder: 10841:10842 ioctl 4018620d 80000100 returned -16 [ 291.888314][T10842] binder: BINDER_SET_CONTEXT_MGR already set [ 291.890276][T10842] binder: 10841:10842 ioctl 4018620d 800002c0 returned -16 [ 292.242679][T10845] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 292.245055][T10845] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 292.246979][T10845] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 292.974379][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 292.982826][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 292.992378][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 293.428983][T10882] tipc: Enabling of bearer rejected, already enabled [ 294.086093][T10895] netlink: 'syz.2.1495': attribute type 2 has an invalid length. [ 294.088678][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1495'. [ 294.289983][ T5743] Bluetooth: hci1: command 0x0419 tx timeout [ 294.292358][ T63] Bluetooth: hci2: command 0x0419 tx timeout [ 294.294946][ T5749] Bluetooth: hci3: command 0x0419 tx timeout [ 294.531566][T10910] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 294.534641][T10910] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 294.537557][T10910] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 295.534720][T10943] siw: device registration error -23 [ 295.889810][ T7186] Bluetooth: hci4: Frame reassembly failed (-84) [ 295.893117][T10948] Bluetooth: hci4: Frame reassembly failed (-90) [ 295.909945][ T41] kauditd_printk_skb: 438 callbacks suppressed [ 295.910026][ T41] audit: type=1400 audit(1782149674.582:1085): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=10947 comm="syz.3.1512" [ 296.437550][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 296.448463][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 296.452954][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 296.520588][ T63] Bluetooth: hci1: command 0x0419 tx timeout [ 296.555459][T10959] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:15: iget: checksum invalid [ 296.560929][T10960] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:15: iget: checksum invalid [ 296.562759][T10956] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 296.567112][T10956] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 296.568969][T10962] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:15: iget: checksum invalid [ 296.569706][T10956] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 296.699116][T10963] fuse: Unknown parameter 'f' [ 297.960016][ T63] Bluetooth: hci4: command 0x1003 tx timeout [ 297.960221][ T5749] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 298.093768][T10984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1521'. [ 298.599951][ T5749] Bluetooth: hci3: command 0x0419 tx timeout [ 298.600001][ T63] Bluetooth: hci2: command 0x0419 tx timeout [ 298.601964][ T5749] Bluetooth: hci1: command 0x0419 tx timeout [ 298.815607][T10996] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 298.817994][T10996] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 298.820198][T10996] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 298.850532][ T9137] vlan2: left promiscuous mode [ 299.549141][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 299.557424][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 299.564016][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 300.507852][T11040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1541'. [ 300.850159][ T5743] Bluetooth: hci2: command 0x0419 tx timeout [ 300.852723][ T5749] Bluetooth: hci1: command 0x0419 tx timeout [ 300.855268][ T63] Bluetooth: hci3: command 0x0419 tx timeout [ 302.500612][ T6515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.503098][ T6515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.624718][T11078] IPv6: addrconf: prefix option has invalid lifetime [ 302.686082][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 302.689536][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 302.694125][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 302.750547][ C2] sr 2:0:0:0: [sr0] tag#24 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 302.754748][ C2] sr 2:0:0:0: [sr0] tag#24 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 303.383771][T11096] 9pnet_virtio: no channels available for device syz [ 303.708693][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1560'. [ 303.816981][T11108] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:15: iget: checksum invalid [ 303.819060][T11106] could not allocate digest TFM handle md5 [ 303.820798][T11109] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:63: iget: checksum invalid [ 304.409817][T11120] syz.1.1562: attempt to access beyond end of device [ 304.409817][T11120] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 304.415256][T11120] gfs2: error -5 reading superblock [ 304.507400][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1562'. [ 305.862313][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 305.870525][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 305.878515][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 307.042440][T11160] openvswitch: netlink: Actions may not be safe on all matching packets [ 307.324707][T11166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1579'. [ 307.328936][T11166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1579'. [ 307.368484][T11168] ufs: You didn't specify the type of your ufs filesystem [ 307.368484][T11168] [ 307.368484][T11168] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 307.368484][T11168] [ 307.368484][T11168] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 307.379476][T11168] ufs: ufs_fill_super(): bad magic number [ 307.418037][T11170] kernel read not supported for file /eth0 (pid: 11170 comm: syz.2.1581) [ 307.420955][ T41] audit: type=1800 audit(1782149686.122:1086): pid=11170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1581" name="eth0" dev="mqueue" ino=23214 res=0 errno=0 [ 307.480162][T11172] netlink: 'syz.2.1581': attribute type 61 has an invalid length. [ 307.939673][T11185] siw: device registration error -23 [ 308.273395][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1587'. [ 308.350966][T11190] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 308.353671][T11190] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 308.356246][T11190] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 308.703600][T11206] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 308.705919][T11206] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 308.708084][T11206] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 309.117440][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 309.123179][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 309.128137][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 309.361157][T11225] syzkaller0: entered promiscuous mode [ 309.363058][T11225] syzkaller0: entered allmulticast mode [ 310.023865][T11249] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 310.025770][T11249] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 310.027694][T11249] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 310.175516][T11263] syzkaller0: left promiscuous mode [ 310.177811][T11263] syzkaller0: left allmulticast mode [ 310.182538][T11263] tc action pedit 'at' offset 20 out of bounds [ 310.635090][T11274] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:18: iget: checksum invalid [ 310.639844][T11276] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:18: iget: checksum invalid [ 310.646525][T11278] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:18: iget: checksum invalid [ 310.655365][T11279] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:18: iget: checksum invalid [ 311.144041][T11292] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1622'. [ 311.160342][T11291] PM: Enabling pm_trace changes system date and time during resume. [ 311.160342][T11291] PM: Correct system time has to be restored manually after resume. [ 311.421706][T11272] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 311.423747][T11272] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 311.427572][T11272] vhci_hcd vhci_hcd.0: Device attached [ 311.511194][T11307] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 311.516394][T11304] support for the xor transformation has been removed. [ 311.516838][T11307] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 311.523173][T11307] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 311.537197][T11316] siw: device registration error -23 [ 311.575735][T11310] vhci_hcd: connection closed [ 311.576076][ T7514] vhci_hcd vhci_hcd.2: stop threads [ 311.581648][ T7514] vhci_hcd vhci_hcd.2: release socket [ 311.584329][ T7514] vhci_hcd vhci_hcd.2: disconnect device [ 312.177677][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 312.181241][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 312.184880][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 312.192045][T11318] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1631'. [ 312.714071][T11339] 9p: Bad value for 'version' [ 312.722725][T11336] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:48: iget: checksum invalid [ 312.727356][T11340] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:48: iget: checksum invalid [ 312.883229][T11348] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 312.891346][T11348] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 312.898905][T11348] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 312.907576][T11348] overlayfs: conflicting lowerdir path [ 313.222079][T11353] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1640'. [ 313.225889][T11353] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1640'. [ 313.358132][T11356] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 313.361196][T11356] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 313.363169][T11356] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 313.443649][T11361] netlink: 'syz.0.1638': attribute type 1 has an invalid length. [ 313.444115][T11362] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:18: iget: checksum invalid [ 313.461061][T11350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1638'. [ 313.543480][T11365] siw: device registration error -23 [ 313.620586][T11350] ptrace attach of ""[11366] was attempted by "/syz-executor exec"[11350] [ 313.647697][ T41] audit: type=1800 audit(1782149692.342:1087): pid=11350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1638" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 314.082541][T11369] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:19: iget: checksum invalid [ 314.095032][T11370] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:19: iget: checksum invalid [ 314.099375][T11368] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1645'. [ 314.120420][T11373] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:19: iget: checksum invalid [ 314.126927][T11374] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:19: iget: checksum invalid [ 314.131876][T11372] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1646'. [ 314.606813][T11396] FAULT_INJECTION: forcing a failure. [ 314.606813][T11396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.606836][T11396] CPU: 2 UID: 0 PID: 11396 Comm: syz.1.1653 Not tainted syzkaller #0 PREEMPT(full) [ 314.606849][T11396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 314.606855][T11396] Call Trace: [ 314.606859][T11396] [ 314.606863][T11396] dump_stack_lvl+0x100/0x190 [ 314.606877][T11396] should_fail_ex.cold+0x5/0xa [ 314.606890][T11396] _copy_from_user+0x2e/0xd0 [ 314.606907][T11396] get_compat_msghdr+0xb3/0x480 [ 314.606924][T11396] ? __pfx_get_compat_msghdr+0x10/0x10 [ 314.606941][T11396] ? rcu_is_watching+0x12/0xc0 [ 314.606952][T11396] ? ___sys_sendmsg+0x19d/0x1e0 [ 314.606963][T11396] ? kfree+0x1e5/0x6c0 [ 314.606978][T11396] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 314.606990][T11396] ? rcu_is_watching+0x12/0xc0 [ 314.607004][T11396] ___sys_sendmsg+0x1b6/0x1e0 [ 314.607015][T11396] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.607026][T11396] ? lock_release+0x24d/0x310 [ 314.607043][T11396] ? irqentry_exit+0x24d/0xa00 [ 314.607057][T11396] ? __pfx___might_resched+0x10/0x10 [ 314.607072][T11396] ? __sys_sendmmsg+0x31d/0x440 [ 314.607087][T11396] __sys_sendmmsg+0x309/0x440 [ 314.607102][T11396] ? __pfx___sys_sendmmsg+0x10/0x10 [ 314.607117][T11396] ? ksys_write+0x190/0x250 [ 314.607144][T11396] ? __mutex_unlock_slowpath+0x35d/0x930 [ 314.607158][T11396] ? fput+0x79/0x100 [ 314.607167][T11396] ? ksys_write+0x1ac/0x250 [ 314.607182][T11396] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 314.607199][T11396] __do_fast_syscall_32+0xe7/0x970 [ 314.607212][T11396] do_fast_syscall_32+0x32/0x70 [ 314.607224][T11396] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 314.607238][T11396] RIP: 0023:0xf7f23fec [ 314.607249][T11396] Code: Unable to access opcode bytes at 0xf7f23fc2. [ 314.607254][T11396] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 314.607265][T11396] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080003dc0 [ 314.607271][T11396] RDX: 0000000000000299 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.607278][T11396] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 314.607284][T11396] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 314.607290][T11396] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.607299][T11396] [ 315.283615][T11406] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1656'. [ 315.283640][T11406] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1656'. [ 315.399909][ T5749] Bluetooth: hci1: command 0x0419 tx timeout [ 315.400094][ T5749] Bluetooth: hci3: command 0x0419 tx timeout [ 315.400111][ T5749] Bluetooth: hci2: command 0x0419 tx timeout [ 317.762095][T11452] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 317.782364][T11452] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 317.795354][T11452] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 318.184911][T11467] loop7: detected capacity change from 0 to 16384 [ 318.286490][ T5146] EXT4-fs error: 3 callbacks suppressed [ 318.286502][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 318.305000][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 318.311333][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 318.376859][T11470] netlink: 'syz.2.1677': attribute type 11 has an invalid length. [ 318.407048][T11470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.409725][T11470] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.413068][T11470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.424280][T11470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.427560][T11470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.433143][T11470] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 318.436583][T11470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.441474][T11470] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 318.447270][ T7165] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.449583][ T7165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.452914][ T7165] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.455083][ T7165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.729378][T11492] netlink: 'syz.0.1684': attribute type 9 has an invalid length. [ 319.732442][T11492] netlink: 'syz.0.1684': attribute type 7 has an invalid length. [ 319.738952][T11492] netlink: 'syz.0.1684': attribute type 8 has an invalid length. [ 319.800024][ T5749] Bluetooth: hci2: command 0x0419 tx timeout [ 319.800047][ T5749] Bluetooth: hci1: command 0x0419 tx timeout [ 319.800116][ T63] Bluetooth: hci3: command 0x0419 tx timeout [ 319.819838][T11497] netlink: 'syz.0.1686': attribute type 10 has an invalid length. [ 319.994616][T11505] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:17: iget: checksum invalid [ 320.003854][T11506] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:17: iget: checksum invalid [ 320.010805][T11507] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:17: iget: checksum invalid [ 320.018176][T11508] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:17: iget: checksum invalid [ 320.026773][T11510] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:17: iget: checksum invalid [ 320.033301][T11511] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:17: iget: checksum invalid [ 320.042023][T11512] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:17: iget: checksum invalid [ 320.250147][T11536] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.252529][T11536] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.610001][ T5815] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 320.763896][ T5815] usb 6-1: Using ep0 maxpacket: 32 [ 320.775663][ T5815] usb 6-1: config index 0 descriptor too short (expected 12827, got 27) [ 320.782063][ T5815] usb 6-1: config 32 has too many interfaces: 52, using maximum allowed: 32 [ 320.790064][ T5815] usb 6-1: config 32 has an invalid descriptor of length 107, skipping remainder of the config [ 320.803450][ T5815] usb 6-1: config 32 has 0 interfaces, different from the descriptor's value: 52 [ 320.821613][ T5815] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 320.827897][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 320.834471][ T5815] usb 6-1: Product: syz [ 320.847475][ T5815] usb 6-1: Manufacturer: syz [ 320.857037][ T5815] usb 6-1: SerialNumber: syz [ 321.108277][T11568] syzkaller0: entered promiscuous mode [ 321.110972][T11568] syzkaller0: entered allmulticast mode [ 321.115735][T11568] tc action pedit offset must be on 32 bit boundaries [ 321.145624][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1698'. [ 321.149452][T11572] syz_tun: refused to change device tx_queue_len [ 321.208741][T11576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1700'. [ 321.212001][T11576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1700'. [ 321.428740][ T5815] usb 6-1: USB disconnect, device number 16 [ 321.621377][T11587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1703'. [ 321.880564][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.005848][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1708'. [ 322.008804][T11600] syz_tun: refused to change device tx_queue_len [ 322.353726][ T7165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.358403][ T7165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.645410][T11611] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 322.663694][T11611] geneve2: left allmulticast mode [ 322.671572][T11611] vlan2: left allmulticast mode [ 322.673655][T11611] bridge1: left allmulticast mode [ 323.053189][T11617] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 323.333475][T11620] fuse: Bad value for 'fd' [ 324.850165][ T5146] EXT4-fs error: 30 callbacks suppressed [ 324.850184][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 324.863533][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 324.872648][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 325.001292][T11659] netlink: 'syz.3.1726': attribute type 10 has an invalid length. [ 325.019111][T11659] team0 (unregistering): Port device team_slave_0 removed [ 325.029984][T11659] team0 (unregistering): Port device team_slave_1 removed [ 327.896012][T11704] dlm: plock device version mismatch: kernel (1.2.0), user (3103784961.0.4194304) [ 327.910509][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 327.925429][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 327.938157][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 328.518416][T11714] syzkaller0: entered promiscuous mode [ 328.520345][T11714] syzkaller0: entered allmulticast mode [ 328.522938][T11714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1744'. [ 328.525977][T11714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1744'. [ 328.573078][T11716] Invalid ELF header len 9 [ 328.825193][T11725] xt_ecn: cannot match TCP bits for non-tcp packets [ 328.838292][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1749'. [ 330.856138][ T24] kernel write not supported for file /sequencer (pid: 24 comm: kworker/2:0) [ 330.863485][T11767] netlink: 'syz.3.1763': attribute type 1 has an invalid length. [ 330.936141][T11774] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:15: iget: checksum invalid [ 330.948963][T11776] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:15: iget: checksum invalid [ 331.383071][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 331.390133][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 331.396322][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 331.418009][T11784] netlink: 'syz.3.1766': attribute type 1 has an invalid length. [ 331.450343][T11787] fuse: Unknown parameter 'group_id00000000000000000000' [ 331.455996][T11784] macvtap3: entered allmulticast mode [ 331.464025][T11784] macvtap4: entered allmulticast mode [ 331.479353][T11784] bond5: (slave bridge2): making interface the new active one [ 331.483161][T11784] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 331.545514][T11792] netlink: 'syz.3.1769': attribute type 1 has an invalid length. [ 331.553895][T11792] bond6: entered promiscuous mode [ 331.556400][T11792] 8021q: adding VLAN 0 to HW filter on device bond6 [ 331.584573][T11792] 8021q: adding VLAN 0 to HW filter on device bond6 [ 331.587655][T11792] bond6: (slave gre1): The slave device specified does not support setting the MAC address [ 331.591924][T11792] bond6: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 331.597822][T11792] bond6: (slave gre1): making interface the new active one [ 331.601139][T11792] gre1: entered promiscuous mode [ 331.605940][T11792] bond6: (slave gre1): Enslaving as an active interface with an up link [ 331.637172][T11792] ubi: mtd0 is already attached to ubi16 [ 332.480585][T11806] siw: device registration error -23 [ 332.531496][T11809] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:19: iget: checksum invalid [ 332.554903][T11810] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:19: iget: checksum invalid [ 333.448441][T11824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1777'. [ 333.637056][T11831] netlink: 'syz.0.1780': attribute type 4 has an invalid length. [ 333.870929][T11837] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 333.875433][T11837] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 333.877622][T11837] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 334.642162][T11845] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 334.710038][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 334.718100][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 334.723918][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 335.381673][T11862] xt_SECMARK: invalid mode: 0 [ 335.780512][T11868] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 335.785831][T11868] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 335.790103][T11868] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 336.099786][T11873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1796'. [ 336.123646][T11876] fuse: Bad value for 'user_id' [ 336.125197][T11876] fuse: Bad value for 'user_id' [ 337.578753][T11893] program syz.2.1803 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.800105][ T5743] Bluetooth: hci2: command 0x0419 tx timeout [ 337.804995][ T5749] Bluetooth: hci1: command 0x0419 tx timeout [ 337.807592][ T63] Bluetooth: hci3: command 0x0419 tx timeout [ 338.019528][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 338.024288][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 338.030121][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 338.613879][T11911] Invalid ELF header len 9 [ 338.875441][T11917] fuse: Unknown parameter 'rootmoÓà×dÎ5de' [ 338.986644][T11919] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 338.992300][T11919] Error validating options; rc = [-22] [ 339.055166][T11926] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:17: iget: checksum invalid [ 339.063082][T11928] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:17: iget: checksum invalid [ 339.356388][T11943] 9p: Bad value for 'rfdno' [ 339.387283][T11945] hugetlbfs: Unknown parameter 'nr_' [ 339.694271][T11949] bridge3: port 1(erspan0) entered disabled state [ 339.808186][T11949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.818005][T11949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.020366][ T7514] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.023220][ T7514] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 340.026138][ T7514] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.029132][ T7514] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 340.032386][ T7514] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.035116][ T7514] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 340.037864][ T7514] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.040959][ T7514] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 340.091143][T11960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1826'. [ 340.139811][T11964] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:63: iget: checksum invalid [ 340.146350][T11965] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:63: iget: checksum invalid [ 340.264696][T11974] fuse: Bad value for 'user_id' [ 340.266270][T11974] fuse: Bad value for 'user_id' [ 340.893155][T11989] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:15: iget: checksum invalid [ 340.931027][T11990] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:15: iget: checksum invalid [ 340.937970][T11988] could not allocate digest TFM handle md5 [ 341.406743][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 341.543958][T11998] FAULT_INJECTION: forcing a failure. [ 341.543958][T11998] name failslab, interval 1, probability 0, space 0, times 0 [ 341.544074][T11998] CPU: 3 UID: 0 PID: 11998 Comm: syz.1.1835 Not tainted syzkaller #0 PREEMPT(full) [ 341.544092][T11998] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 341.544099][T11998] Call Trace: [ 341.544103][T11998] [ 341.544121][T11998] dump_stack_lvl+0x100/0x190 [ 341.544136][T11998] should_fail_ex.cold+0x5/0xa [ 341.544148][T11998] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 341.544179][T11998] should_failslab+0xc2/0x120 [ 341.544192][T11998] __kmalloc_cache_noprof+0x7a/0x6e0 [ 341.544213][T11998] ? drm_atomic_commit_alloc+0xb8/0x120 [ 341.544230][T11998] drm_atomic_commit_alloc+0xb8/0x120 [ 341.544244][T11998] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 341.544262][T11998] ? trace_contention_end+0x126/0x160 [ 341.544279][T11998] ? __mutex_lock+0x26d/0x1bd0 [ 341.544290][T11998] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 341.544307][T11998] ? drm_master_internal_acquire+0x21/0x80 [ 341.544322][T11998] ? __mutex_lock+0x26d/0x1bd0 [ 341.544336][T11998] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 341.544349][T11998] drm_client_modeset_commit_locked+0x14d/0x580 [ 341.544367][T11998] drm_fb_helper_pan_display+0x32d/0xa40 [ 341.544383][T11998] ? enable_work+0x24c/0x320 [ 341.544399][T11998] fb_pan_display+0x195/0x820 [ 341.544416][T11998] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 341.544431][T11998] ? fb_videomode_to_var+0x13/0x610 [ 341.544442][T11998] bit_update_start+0x48/0x1f0 [ 341.544453][T11998] fbcon_switch+0x1119/0x19f0 [ 341.544472][T11998] ? __pfx_fbcon_switch+0x10/0x10 [ 341.544491][T11998] ? __pfx_bit_cursor+0x10/0x10 [ 341.544501][T11998] ? fbcon_cursor+0x24c/0x5e0 [ 341.544517][T11998] ? is_console_locked+0x9/0x20 [ 341.544531][T11998] ? con_is_visible+0x65/0x150 [ 341.544542][T11998] redraw_screen+0x2c1/0x760 [ 341.544555][T11998] ? __pfx_redraw_screen+0x10/0x10 [ 341.544569][T11998] fbcon_do_set_font+0x57f/0x7d0 [ 341.544588][T11998] fbcon_set_font+0x4be/0x730 [ 341.544604][T11998] ? __pfx_fbcon_set_font+0x10/0x10 [ 341.544620][T11998] con_font_op+0x9c0/0x1040 [ 341.544635][T11998] ? __pfx_con_font_op+0x10/0x10 [ 341.544650][T11998] ? rcu_is_watching+0x12/0xc0 [ 341.544661][T11998] ? __might_fault+0xc5/0x140 [ 341.544677][T11998] ? lock_release+0x24d/0x310 [ 341.544694][T11998] vt_compat_ioctl+0x228/0x4e0 [ 341.544704][T11998] ? rcu_is_watching+0x12/0xc0 [ 341.544715][T11998] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 341.544725][T11998] ? __fget_files+0x215/0x3d0 [ 341.544739][T11998] ? hook_file_ioctl_common+0x140/0x440 [ 341.544755][T11998] ? __fget_files+0x21f/0x3d0 [ 341.544770][T11998] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 341.544780][T11998] tty_compat_ioctl+0x1b4/0x420 [ 341.544794][T11998] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 341.544808][T11998] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 341.544822][T11998] __do_fast_syscall_32+0xe7/0x970 [ 341.544835][T11998] do_fast_syscall_32+0x32/0x70 [ 341.544846][T11998] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 341.544861][T11998] RIP: 0023:0xf7f23fec [ 341.544874][T11998] Code: Unable to access opcode bytes at 0xf7f23fc2. [ 341.544879][T11998] RSP: 002b:00000000f51c450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 341.544890][T11998] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004b72 [ 341.544896][T11998] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 341.544903][T11998] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 341.544908][T11998] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 341.544915][T11998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 341.544924][T11998] [ 342.272264][T12003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1836'. [ 342.275429][T12003] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1836'. [ 342.369974][T12011] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1841'. [ 342.380330][T12011] overlayfs: missing 'workdir' [ 342.441624][T12017] binder: BINDER_SET_CONTEXT_MGR already set [ 342.443618][T12017] binder: 12014:12017 ioctl 4018620d 80000240 returned -16 [ 342.518804][T12018] FAULT_INJECTION: forcing a failure. [ 342.518804][T12018] name failslab, interval 1, probability 0, space 0, times 0 [ 342.549560][T12018] CPU: 1 UID: 0 PID: 12018 Comm: syz.0.1837 Not tainted syzkaller #0 PREEMPT(full) [ 342.549605][T12018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 342.549623][T12018] Call Trace: [ 342.549627][T12018] [ 342.549632][T12018] dump_stack_lvl+0x100/0x190 [ 342.549647][T12018] should_fail_ex.cold+0x5/0xa [ 342.549659][T12018] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 342.549670][T12018] should_failslab+0xc2/0x120 [ 342.549683][T12018] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 342.549693][T12018] ? __kernfs_new_node+0xd2/0xa10 [ 342.549707][T12018] ? lock_release+0x24d/0x310 [ 342.549726][T12018] __kernfs_new_node+0xd2/0xa10 [ 342.549745][T12018] ? kernfs_add_one+0x214/0xaa0 [ 342.549765][T12018] ? __pfx___kernfs_new_node+0x10/0x10 [ 342.549785][T12018] ? __kernfs_create_file+0x2a9/0x350 [ 342.549802][T12018] ? rcu_is_watching+0x12/0xc0 [ 342.549817][T12018] ? kernfs_root+0xee/0x2a0 [ 342.549834][T12018] ? rcu_is_watching+0x12/0xc0 [ 342.549848][T12018] ? kernfs_root+0xee/0x2a0 [ 342.549866][T12018] ? lock_release+0x24d/0x310 [ 342.549886][T12018] kernfs_new_node+0x117/0x150 [ 342.549902][T12018] kernfs_create_link+0xcc/0x240 [ 342.549913][T12018] sysfs_do_create_link_sd+0x90/0x140 [ 342.549927][T12018] sysfs_create_link+0x61/0xc0 [ 342.549939][T12018] device_add+0x553/0x1970 [ 342.549958][T12018] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 342.549972][T12018] ? __pfx_device_add+0x10/0x10 [ 342.549988][T12018] ? lockdep_init_map_type+0x5c/0x250 [ 342.550006][T12018] ? __init_waitqueue_head+0xca/0x150 [ 342.550025][T12018] netdev_register_kobject+0x1a9/0x3d0 [ 342.550037][T12018] register_netdevice+0x15b6/0x25a0 [ 342.550054][T12018] ? __pfx_register_netdevice+0x10/0x10 [ 342.550071][T12018] register_netdev+0x34/0x50 [ 342.550086][T12018] gprs_attach+0x1d1/0x620 [ 342.550100][T12018] pep_setsockopt+0x379/0x4a0 [ 342.550110][T12018] ? __pfx_pep_setsockopt+0x10/0x10 [ 342.550121][T12018] ? aa_sock_opt_perm+0xfe/0x1b0 [ 342.550132][T12018] ? sock_common_setsockopt+0x2e/0xf0 [ 342.550149][T12018] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 342.550167][T12018] do_sock_setsockopt+0xf3/0x1d0 [ 342.550184][T12018] __sys_setsockopt+0x119/0x190 [ 342.550205][T12018] __ia32_sys_setsockopt+0xbc/0x160 [ 342.550224][T12018] ? trace_irq_enable.constprop.0+0x122/0x160 [ 342.550249][T12018] __do_fast_syscall_32+0xe7/0x970 [ 342.550270][T12018] do_fast_syscall_32+0x32/0x70 [ 342.550287][T12018] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 342.550301][T12018] RIP: 0023:0xf70befec [ 342.550313][T12018] Code: Unable to access opcode bytes at 0xf70befc2. [ 342.550318][T12018] RSP: 002b:00000000f546b50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 342.550329][T12018] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000113 [ 342.550335][T12018] RDX: 0000000000000001 RSI: 0000000080000140 RDI: 0000000000000004 [ 342.550341][T12018] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 342.550347][T12018] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 342.550354][T12018] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 342.550363][T12018] [ 343.410860][T12032] EXT4-fs error: 2 callbacks suppressed [ 343.410901][T12032] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:17: iget: checksum invalid [ 343.427544][T12035] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:48: iget: checksum invalid [ 344.196480][T12046] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:17: iget: checksum invalid [ 344.212382][T12047] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:17: iget: checksum invalid [ 344.383796][T12052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1851'. [ 344.552529][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 344.557220][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 344.560976][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 345.242786][T12063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1855'. [ 347.638434][T12081] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:63: iget: checksum invalid [ 347.648617][T12082] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:63: iget: checksum invalid [ 347.711518][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 348.525359][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1864'. [ 348.573582][T12096] ip6gre1: entered allmulticast mode [ 348.673031][T12105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1867'. [ 348.826923][T12116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1871'. [ 350.381580][T12140] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 350.383997][T12140] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 350.386280][T12140] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 351.590765][ T5146] EXT4-fs error: 2 callbacks suppressed [ 351.590776][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 351.596832][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 351.601595][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 351.642940][T12151] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1881'. [ 351.656932][T12153] fuse: Bad value for 'fd' [ 351.730635][T12161] tipc: Enabling not permitted [ 351.737581][T12161] tipc: Enabling of bearer rejected, failed to enable media [ 351.872879][T12172] fuse: Bad value for 'fd' [ 352.269638][T12179] fuse: Bad value for 'fd' [ 352.337600][T12187] input: syz0 as /devices/virtual/input/input15 [ 352.342796][T12187] FAULT_INJECTION: forcing a failure. [ 352.342796][T12187] name failslab, interval 1, probability 0, space 0, times 0 [ 352.355007][T12187] CPU: 1 UID: 0 PID: 12187 Comm: syz.2.1893 Not tainted syzkaller #0 PREEMPT(full) [ 352.355031][T12187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 352.355041][T12187] Call Trace: [ 352.355046][T12187] [ 352.355053][T12187] dump_stack_lvl+0x100/0x190 [ 352.355081][T12187] should_fail_ex.cold+0x5/0xa [ 352.355100][T12187] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 352.355118][T12187] should_failslab+0xc2/0x120 [ 352.355138][T12187] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 352.355153][T12187] ? __kernfs_new_node+0xd2/0xa10 [ 352.355175][T12187] ? rcu_is_watching+0x12/0xc0 [ 352.355194][T12187] __kernfs_new_node+0xd2/0xa10 [ 352.355215][T12187] ? kernfs_link_sibling+0x5ec/0x850 [ 352.355236][T12187] ? rcu_is_watching+0x12/0xc0 [ 352.355254][T12187] ? __pfx___kernfs_new_node+0x10/0x10 [ 352.355278][T12187] ? rcu_is_watching+0x12/0xc0 [ 352.355294][T12187] ? rcu_is_watching+0x12/0xc0 [ 352.355310][T12187] ? kernfs_root+0xee/0x2a0 [ 352.355328][T12187] ? rcu_is_watching+0x12/0xc0 [ 352.355346][T12187] ? kernfs_root+0xee/0x2a0 [ 352.355365][T12187] ? lock_release+0x24d/0x310 [ 352.355388][T12187] kernfs_new_node+0x117/0x150 [ 352.355412][T12187] kernfs_create_link+0xcc/0x240 [ 352.355428][T12187] sysfs_do_create_link_sd+0x90/0x140 [ 352.355448][T12187] sysfs_create_link+0x61/0xc0 [ 352.355467][T12187] device_add+0x5da/0x1970 [ 352.355495][T12187] ? __pfx_device_add+0x10/0x10 [ 352.355520][T12187] ? kobject_get+0xbb/0x150 [ 352.355539][T12187] cdev_device_add+0x12b/0x270 [ 352.355562][T12187] evdev_connect+0x3a8/0x4b0 [ 352.355580][T12187] input_attach_handler.isra.0+0x177/0x1e0 [ 352.355597][T12187] input_register_device.cold+0x139/0x375 [ 352.355620][T12187] uinput_ioctl_handler.isra.0+0x8d8/0x1d20 [ 352.355642][T12187] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 352.355661][T12187] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 352.355686][T12187] ? rcu_is_watching+0x12/0xc0 [ 352.355704][T12187] ? __fget_files+0x215/0x3d0 [ 352.355727][T12187] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 352.355747][T12187] ? __pfx_uinput_compat_ioctl+0x10/0x10 [ 352.355766][T12187] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 352.355785][T12187] __do_fast_syscall_32+0xe7/0x970 [ 352.355803][T12187] do_fast_syscall_32+0x32/0x70 [ 352.355819][T12187] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 352.355838][T12187] RIP: 0023:0xf6fcefec [ 352.355855][T12187] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 352.355861][T12187] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 352.355877][T12187] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005501 [ 352.355887][T12187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.355896][T12187] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 352.355905][T12187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.355914][T12187] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 352.355927][T12187] [ 352.356556][T12187] input: failed to attach handler evdev to device input15, error: -12 [ 352.411648][T11634] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 352.457783][ T5743] Bluetooth: hci3: command 0x0419 tx timeout [ 352.457813][ T5743] Bluetooth: hci2: command 0x0419 tx timeout [ 352.457832][ T5743] Bluetooth: hci1: command 0x0419 tx timeout [ 352.481879][T11634] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 352.491875][T11634] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 352.521169][T12192] nbd: must specify a size in bytes for the device [ 352.536213][T12195] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:52: iget: checksum invalid [ 352.546261][T12196] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:52: iget: checksum invalid [ 352.559979][T12197] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:52: iget: checksum invalid [ 352.801717][ T5743] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 352.882879][T12200] syz.3.1896 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 352.886842][T12207] fuse: Unknown parameter 'f' [ 352.888611][T12200] CPU: 1 UID: 0 PID: 12200 Comm: syz.3.1896 Not tainted syzkaller #0 PREEMPT(full) [ 352.888639][T12200] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 352.888646][T12200] Call Trace: [ 352.888650][T12200] [ 352.888655][T12200] dump_stack_lvl+0x100/0x190 [ 352.888670][T12200] dump_header+0xfb/0x606 [ 352.888682][T12200] oom_kill_process.cold+0xd/0x330 [ 352.888695][T12200] out_of_memory+0x1256/0x14f0 [ 352.888714][T12200] ? __pfx_out_of_memory+0x10/0x10 [ 352.888742][T12200] __alloc_frozen_pages_noprof+0x24c2/0x2dc0 [ 352.888765][T12200] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 352.888787][T12200] ? rcu_is_watching+0x12/0xc0 [ 352.888799][T12200] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 352.888813][T12200] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 352.888825][T12200] ? policy_nodemask+0xed/0x4f0 [ 352.888839][T12200] alloc_pages_mpol+0x1fb/0x540 [ 352.888858][T12200] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 352.888871][T12200] ? __alloc_skb+0x5b7/0x710 [ 352.888886][T12200] ? __pfx___alloc_skb+0x10/0x10 [ 352.888900][T12200] ? trace_irq_enable.constprop.0+0x122/0x160 [ 352.888919][T12200] alloc_pages_noprof+0x1a/0x160 [ 352.888935][T12200] alloc_skb_with_frags+0x4e7/0x760 [ 352.888951][T12200] ? trace_sched_exit_tp+0x120/0x160 [ 352.888963][T12200] ? __schedule+0x126e/0x6730 [ 352.888980][T12200] ? futex_hash+0x311/0x400 [ 352.888994][T12200] ? lock_release+0x24d/0x310 [ 352.889009][T12200] sock_alloc_send_pskb+0x801/0x980 [ 352.889025][T12200] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 352.889037][T12200] ? rcu_is_watching+0x12/0xc0 [ 352.889048][T12200] ? do_raw_spin_lock+0x128/0x260 [ 352.889058][T12200] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 352.889070][T12200] ? debug_object_assert_init+0x1c4/0x300 [ 352.889087][T12200] ? rcu_is_watching+0x12/0xc0 [ 352.889098][T12200] tun_get_user+0x904/0x3c20 [ 352.889111][T12200] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 352.889124][T12200] ? __pfx_tun_get_user+0x10/0x10 [ 352.889135][T12200] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 352.889147][T12200] ? tun_get+0x191/0x370 [ 352.889156][T12200] ? rcu_is_watching+0x12/0xc0 [ 352.889166][T12200] ? tun_get+0x191/0x370 [ 352.889175][T12200] ? lock_release+0x24d/0x310 [ 352.889190][T12200] tun_chr_write_iter+0xdc/0x200 [ 352.889202][T12200] vfs_write+0x6ac/0x1050 [ 352.889220][T12200] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 352.889233][T12200] ? __pfx_vfs_write+0x10/0x10 [ 352.889247][T12200] ? lock_release+0x24d/0x310 [ 352.889264][T12200] ksys_write+0x12a/0x250 [ 352.889277][T12200] ? __pfx_ksys_write+0x10/0x10 [ 352.889292][T12200] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 352.889309][T12200] do_int80_emulation+0x14b/0x720 [ 352.889322][T12200] asm_int80_emulation+0x1a/0x20 [ 352.889333][T12200] RIP: 0023:0xf71d71eb [ 352.889342][T12200] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 352.889355][T12200] RSP: 002b:00000000f548d44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 352.889366][T12200] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000200 [ 352.889373][T12200] RDX: 000000000000fef3 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.889380][T12200] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 352.889386][T12200] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 352.889393][T12200] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 352.889403][T12200] [ 353.006991][T12200] Mem-Info: [ 353.131735][T12200] active_anon:4130 inactive_anon:9427 isolated_anon:0 [ 353.131735][T12200] active_file:1410 inactive_file:10457 isolated_file:0 [ 353.131735][T12200] unevictable:1768 dirty:249 writeback:0 [ 353.131735][T12200] slab_reclaimable:6317 slab_unreclaimable:57937 [ 353.131735][T12200] mapped:24723 shmem:13280 pagetables:1675 [ 353.131735][T12200] sec_pagetables:356 bounce:0 [ 353.131735][T12200] kernel_misc_reclaimable:0 [ 353.131735][T12200] free:19993 free_pcp:0 free_cma:0 [ 353.146179][T12200] Node 0 active_anon:20kB inactive_anon:16kB active_file:4kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7684kB pagetables:1452kB sec_pagetables:1288kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 353.157895][T12200] Node 0 DMA free:2528kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 353.179040][T12200] lowmem_reserve[]: 0 284 284 284 284 [ 353.186474][T12200] Node 0 DMA32 free:24860kB boost:29412kB min:42484kB low:45752kB high:49020kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20kB inactive_anon:16kB active_file:4kB inactive_file:0kB unevictable:3536kB writepending:0kB zspages:2252kB present:1032196kB managed:291416kB mlocked:0kB bounce:0kB free_pcp:68kB local_pcp:0kB free_cma:0kB [ 353.205763][T12200] lowmem_reserve[]: 0 0 0 0 0 [ 353.209625][T12200] Node 0 DMA: 46*4kB (U) 9*8kB (U) 2*16kB (U) 10*32kB (UM) 2*64kB (UM) 0*128kB 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2528kB [ 353.220971][T12200] Node 0 DMA32: 467*4kB (UME) 154*8kB (UME) 64*16kB (UM) 115*32kB (UME) 65*64kB (UME) 21*128kB (UME) 6*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (U) 0*4096kB = 24892kB [ 353.234482][T12200] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 353.240524][T12200] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 353.248597][T12200] 25694 total pagecache pages [ 353.254064][T12200] 1579 pages in swap cache [ 353.257716][T12200] Free swap = 43816kB [ 353.261313][T12200] Total swap = 124996kB [ 353.269067][T12200] 524155 pages RAM [ 353.271133][T12200] 0 pages HighMem/MovableOnly [ 353.276898][T12200] 210408 pages reserved [ 353.280816][T12200] 0 pages cma reserved [ 353.285685][T12200] Unreclaimable slab info: [ 353.289541][T12200] Name Used Total [ 353.296137][T12200] pid_3 37KB 63KB [ 353.301163][T12200] pid_2 70KB 78KB [ 353.308812][T12200] bio-464 17KB 31KB [ 353.314518][T12200] bio-528 19KB 31KB [ 353.319327][T12200] bio-544 19KB 31KB [ 353.325082][T12200] bio-552 19KB 31KB [ 353.329896][T12200] afs_inode_cache 67KB 90KB [ 353.337096][T12200] zswap_entry 675KB 703KB [ 353.341455][T12200] AF_VSOCK 56KB 153KB [ 353.348928][T12200] batadv_tt_change_cache 12KB 16KB [ 353.354038][T12200] batadv_tl_cache 28KB 32KB [ 353.358372][T12200] ceph_osd_request 8KB 95KB [ 353.364633][T12200] ceph_msg 3KB 30KB [ 353.369339][T12200] IEEE-802.15.4-MAC 46KB 93KB [ 353.376058][T12200] IEEE-802.15.4-RAW 45KB 94KB [ 353.379974][T12200] p9_req_t 11KB 39KB [ 353.389464][T12200] INET_SMC 100KB 187KB [ 353.393455][T12200] SMC6 53KB 187KB [ 353.397782][T12200] SMC 106KB 250KB [ 353.406399][T12200] TIPC 72KB 184KB [ 353.408696][T12200] rds_tcp_connection 42KB 63KB [ 353.415962][T12200] RDS 45KB 123KB [ 353.420625][T12200] rds_connection 26KB 46KB [ 353.426718][T12200] SCTPv6 83KB 150KB [ 353.430469][T12200] SCTP 59KB 153KB [ 353.436050][T12200] sctp_chunk 9KB 39KB [ 353.441314][T12200] sctp_bind_bucket 11KB 16KB [ 353.447105][T12200] PNPIPE 40KB 123KB [ 353.453507][T12200] PHONET 16KB 31KB [ 353.457709][T12200] L2TP/IPv6 63KB 127KB [ 353.464383][T12200] L2TP/IP 54KB 94KB [ 353.468832][T12200] KCM 75KB 124KB [ 353.475306][T12200] kcm_mux 70KB 126KB [ 353.480370][T12200] RXRPC 54KB 160KB [ 353.487034][T12200] rxrpc_call_jar 172KB 258KB [ 353.493863][T12200] can_receiver 25KB 35KB [ 353.500096][T12200] net_bridge_fdb_entry 39KB 47KB [ 353.508034][T12200] nf-frags 9KB 15KB [ 353.515054][T12200] MPTCPv6 66KB 159KB [ 353.521226][T12200] ip6-frags 9KB 15KB [ 353.529863][T12200] fib6_node 91KB 144KB [ 353.535546][T12200] ip6_dst_cache 95KB 320KB [ 353.542279][T12200] mfc6_cache 6KB 8KB [ 353.547976][T12200] PINGv6 63KB 123KB [ 353.553056][T12200] RAWv6 144KB 247KB [ 353.557748][T12200] UDPv6 105KB 220KB [ 353.564083][T12200] tw_sock_TCPv6 17KB 31KB [ 353.569011][T12200] request_sock_TCPv6 21KB 30KB [ 353.575752][T12200] TCPv6 236KB 307KB [ 353.580112][T12200] nf_conntrack 10KB 55KB [ 353.585979][T12200] wg_peer 128KB 148KB [ 353.590078][T12200] allowedips_node 21KB 31KB [ 353.596272][T12200] ubi_wl_entry_slab 2KB 3KB [ 353.598783][T12200] t10_alua_lu_gp_cache 8KB 15KB [ 353.601255][T12200] scsi_sense_cache 60KB 60KB [ 353.606151][T12200] virtio_scsi_cmd 21KB 24KB [ 353.610781][T12200] bio-136 56KB 76KB [ 353.613521][T12200] io_kiocb 0KB 39KB [ 353.616059][T12200] bio-264 20KB 23KB [ 353.618481][T12200] mqueue_inode_cache 52KB 92KB [ 353.620919][T12200] f2fs_bio_post_read_ctx 30KB 31KB [ 353.623884][T12200] jfs_mp 14KB 15KB [ 353.626368][T12200] fuse_request 15KB 46KB [ 353.628799][T12200] cifs_small_rq 28KB 32KB [ 353.631278][T12200] cifs_request 67KB 67KB [ 353.634109][T12200] cifs_mpx_ids 8KB 15KB [ 353.636563][T12200] cifs_io_subrequest 42KB 47KB [ 353.639219][T12200] cifs_io_request 105KB 111KB [ 353.643237][T12200] nfs_commit_data 24KB 31KB [ 353.645873][T12200] nfs_write_data 38KB 63KB [ 353.648368][T12200] ecryptfs_sb_cache 20KB 31KB [ 353.650870][T12200] jbd2_inode 16KB 19KB [ 353.653643][T12200] ext4_system_zone 1KB 3KB [ 353.656101][T12200] ext4_io_end_vec 6KB 15KB [ 353.658502][T12200] kioctx 23KB 159KB [ 353.660893][T12200] aio_kiocb 29KB 62KB [ 353.663604][T12200] fanotify_mark 11KB 11KB [ 353.666053][T12200] dnotify_mark 23KB 23KB [ 353.668460][T12200] dnotify_struct 5KB 7KB [ 353.670885][T12200] fasync_cache 35KB 47KB [ 353.673825][T12200] userfaultfd_ctx_cache 59KB 94KB [ 353.676427][T12200] zspage 200KB 212KB [ 353.678840][T12200] zs_handle 257KB 272KB [ 353.681258][T12200] pid_namespace 43KB 123KB [ 353.684011][T12200] kvm_gmem_inode_cache 14KB 30KB [ 353.686596][T12200] kvm_vcpu 83KB 250KB [ 353.689011][T12200] kvm_mmu_page_header 19KB 31KB [ 353.691486][T12200] pte_list_desc 15KB 19KB [ 353.694573][T12200] x86_emulator 46KB 191KB [ 353.697063][T12200] rpc_buffers 25KB 31KB [ 353.699652][T12200] rpc_tasks 8KB 15KB [ 353.702636][T12200] UNIX-STREAM 70KB 255KB [ 353.705120][T12200] UNIX 142KB 286KB [ 353.707534][T12200] ip4-frags 28KB 47KB [ 353.709948][T12200] MPTCP 70KB 153KB [ 353.713101][T12200] request_sock_subflow_v4 25KB 30KB [ 353.715744][T12200] tcp_bind2_bucket 15KB 28KB [ 353.718333][T12200] tcp_bind_bucket 27KB 44KB [ 353.720766][T12200] inet_peer 21KB 24KB [ 353.723555][T12200] xfrm_dst 21KB 55KB [ 353.726029][T12200] xfrm_state 51KB 191KB [ 353.728534][T12200] ip_fib_trie 23KB 32KB [ 353.731139][T12200] ip_fib_alias 55KB 79KB [ 353.733963][T12200] rtable 37KB 100KB [ 353.736586][T12200] PING 54KB 94KB [ 353.739080][T12200] RAW 73KB 159KB [ 353.741495][T12200] UDP 106KB 191KB [ 353.744196][T12200] tw_sock_TCP 28KB 47KB [ 353.744211][T12200] request_sock_TCP 28KB 46KB [ 353.744222][T12200] TCP 520KB 643KB [ 353.744233][T12200] fs_bio_integrity 7KB 8KB [ 353.744244][T12200] hugetlbfs_inode_cache 49KB 222KB [ 353.744256][T12200] fscache_cookie_jar 24KB 46KB [ 353.744266][T12200] netfs_subrequest 51KB 85KB [ 353.744277][T12200] netfs_request 147KB 207KB [ 353.744288][T12200] bio-288 21KB 23KB [ 353.744300][T12200] ep_head 5KB 20KB [ 353.744311][T12200] eventpoll_pwq 13KB 39KB [ 353.744321][T12200] eventpoll_epi 60KB 78KB [ 353.744333][T12200] inotify_inode_mark 25KB 50KB [ 353.744343][T12200] bpf_fs_inode_cache 24KB 31KB [ 353.744356][T12200] sgpool-128 68KB 267KB [ 353.744369][T12200] sgpool-64 74KB 255KB [ 353.744380][T12200] sgpool-32 32KB 126KB [ 353.744390][T12200] sgpool-16 41KB 125KB [ 353.744401][T12200] sgpool-8 20KB 54KB [ 353.744411][T12200] bio_crypt_ctx 9KB 11KB [ 353.744422][T12200] bio_integrity_data 7KB 8KB [ 353.744432][T12200] request_queue 239KB 272KB [ 353.744443][T12200] blkdev_ioc 23KB 39KB [ 353.744453][T12200] bio-200 64KB 89KB [ 353.744465][T12200] biovec-max 399KB 777KB [ 353.744475][T12200] biovec-128 34KB 159KB [ 353.744486][T12200] biovec-64 52KB 189KB [ 353.744497][T12200] biovec-16 16KB 62KB [ 353.744508][T12200] mm_slot 11KB 15KB [ 353.744518][T12200] ksm_mm_slot 3KB 4KB [ 353.744529][T12200] user_namespace 13KB 30KB [ 353.744539][T12200] uid_cache 23KB 31KB [ 353.744550][T12200] iommu_iova_magazine 999KB 1165KB [ 353.744563][T12200] iommu_iova 240KB 260KB [ 353.744574][T12200] dmaengine-unmap-256 26KB 30KB [ 353.744584][T12200] dmaengine-unmap-128 14KB 30KB [ 353.744595][T12200] dmaengine-unmap-16 7KB 8KB [ 353.744606][T12200] dmaengine-unmap-2 3KB 4KB [ 353.744616][T12200] QIPCRTR 32KB 125KB [ 353.744626][T12200] audit_buffer 23KB 50KB [ 353.744638][T12200] skbuff_ext_cache 15KB 24KB [ 353.744649][T12200] skbuff_small_head 2162KB 2241KB [ 353.744660][T12200] skbuff_fclone_cache 211KB 234KB [ 353.744670][T12200] skbuff_head_cache 1167KB 1195KB [ 353.744681][T12200] configfs_dir_cache 29KB 32KB [ 353.744692][T12200] file_lease_cache 6KB 31KB [ 353.744702][T12200] file_lock_cache 20KB 63KB [ 353.744713][T12200] file_lock_ctx 39KB 47KB [ 353.744725][T12200] fsnotify_inode_mark_connector 21KB 47KB [ 353.744735][T12200] fsnotify_mark_connector 6KB 7KB [ 353.744746][T12200] posix_timers_cache 27KB 48KB [ 353.744758][T12200] taskstats 70KB 127KB [ 353.744769][T12200] mem_cgroup_per_node 88KB 123KB [ 353.744780][T12200] mem_cgroup 120KB 154KB [ 353.744792][T12200] proc_dir_entry 739KB 773KB [ 353.744803][T12200] pde_opener 5KB 15KB [ 353.744816][T12200] seq_file 39KB 78KB [ 353.744827][T12200] sigqueue 68KB 86KB [ 353.744839][T12200] shmem_inode_cache 7403KB 7567KB [ 353.744850][T12200] kernfs_iattrs_cache 26KB 31KB [ 353.744864][T12200] kernfs_node_cache 27489KB 27555KB [ 353.744875][T12200] mnt_cache 103KB 133KB [ 353.744886][T12200] bfilp 34KB 47KB [ 353.744905][T12200] filp 542KB 630KB [ 353.744921][T12200] names_cache 429KB 500KB [ 353.744931][T12200] net_namespace 147KB 294KB [ 353.744942][T12200] ima_iint_cache 22KB 63KB [ 353.744967][T12200] lsm_inode_cache 1515KB 1799KB [ 353.744980][T12200] lsm_file_cache 205KB 253KB [ 353.744992][T12200] key_jar 35KB 70KB [ 353.745002][T12200] uts_namespace 84KB 108KB [ 353.745013][T12200] nsproxy 6KB 31KB [ 353.745023][T12200] vm_area_struct 1106KB 1125KB [ 353.745036][T12200] fs_cache 36KB 72KB [ 353.745048][T12200] files_cache 129KB 239KB [ 353.745059][T12200] task_exec_state 13KB 28KB [ 353.745074][T12200] signal_cache 1022KB 1817KB [ 353.745090][T12200] sighand_cache 1283KB 2074KB [ 353.745103][T12200] task_struct 5811KB 5932KB [ 353.745118][T12200] cred 161KB 316KB [ 353.745131][T12200] anon_vma_chain 341KB 358KB [ 353.745144][T12200] anon_vma 361KB 455KB [ 353.745158][T12200] pid 166KB 359KB [ 353.745174][T12200] Acpi-Operand 201KB 320KB [ 353.745185][T12200] Acpi-ParseExt 31KB 47KB [ 353.745196][T12200] Acpi-Parse 12KB 23KB [ 353.745207][T12200] Acpi-State 9KB 23KB [ 353.745217][T12200] Acpi-Namespace 31KB 44KB [ 353.745228][T12200] shared_policy_node 10KB 12KB [ 353.745239][T12200] numa_policy 12KB 16KB [ 353.745249][T12200] perf_event 52KB 93KB [ 353.745259][T12200] trace_event_file 540KB 540KB [ 353.745270][T12200] ftrace_event_field 1046KB 1047KB [ 353.745281][T12200] pool_workqueue 2128KB 2176KB [ 353.745291][T12200] task_group 36KB 48KB [ 353.745315][T12200] maple_node 752KB 1584KB [ 353.745327][T12200] mm_struct 395KB 541KB [ 353.745346][T12200] vmap_area 499KB 811KB [ 353.745467][T12200] debug_objects_cache 2422KB 5525KB [ 353.956543][T12200] page->ptl 177KB 192KB [ 353.958492][T12200] kmalloc-cg-8k 2480KB 2624KB [ 353.960497][T12200] kmalloc-cg-4k 14856KB 14984KB [ 353.962692][T12200] kmalloc-cg-2k 9160KB 9344KB [ 353.964660][T12200] kmalloc-cg-1k 2606KB 2848KB [ 353.966604][T12200] kmalloc-cg-512 1319KB 1328KB [ 353.968456][T12200] kmalloc-cg-256 377KB 424KB [ 353.970327][T12200] kmalloc-cg-128 237KB 256KB [ 353.972297][T12200] kmalloc-cg-64 62KB 88KB [ 353.974170][T12200] kmalloc-cg-32 78KB 164KB [ 353.976013][T12200] kmalloc-cg-16 6KB 28KB [ 353.977872][T12200] kmalloc-cg-8 20KB 40KB [ 353.979718][T12200] kmalloc-cg-192 61KB 84KB [ 353.981604][T12200] kmalloc-cg-96 73KB 80KB [ 353.987882][T12200] kmalloc-8k 4928KB 5104KB [ 353.989758][T12200] kmalloc-4k 22328KB 22584KB [ 353.991691][T12200] kmalloc-2k 13672KB 14496KB [ 353.993658][T12200] kmalloc-1k 6962KB 7616KB [ 353.995509][T12200] kmalloc-512 10560KB 10976KB [ 353.997359][T12200] kmalloc-256 4783KB 5084KB [ 353.999196][T12200] kmalloc-128 1518KB 1680KB [ 354.001823][T12200] kmalloc-64 3066KB 3160KB [ 354.003937][T12200] kmalloc-32 1911KB 2104KB [ 354.005808][T12200] kmalloc-16 453KB 792KB [ 354.007692][T12200] kmalloc-8 464KB 484KB [ 354.009599][T12200] kmalloc-192 1619KB 1700KB [ 354.012516][T12200] kmalloc-96 1619KB 1704KB [ 354.014382][T12200] kmem_cache_node 215KB 220KB [ 354.016222][T12200] kmem_cache 179KB 218KB [ 354.018188][T12200] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz3,task=syz.3.1896,pid=12200,uid=0 [ 354.022963][T12200] Out of memory (oom_kill_allocating_task): Killed process 12200 (syz.3.1896) total-vm:102148kB, anon-rss:256kB, file-rss:23912kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 354.242630][T12221] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1900'. [ 354.249263][T12221] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.251514][T12221] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.766143][T12224] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:52: iget: checksum invalid [ 354.822525][T12226] tipc: Enabled bearer , priority 0 [ 354.825968][T12226] syzkaller0: entered promiscuous mode [ 354.829769][T12226] syzkaller0: entered allmulticast mode [ 354.838887][T12226] fuse: Bad value for 'group_id' [ 354.841085][T12226] fuse: Bad value for 'group_id' [ 354.847305][T12226] tipc: Resetting bearer [ 354.850034][T12225] tipc: Resetting bearer [ 354.854162][T12225] tipc: Disabling bearer [ 355.003012][T12231] FAULT_INJECTION: forcing a failure. [ 355.003012][T12231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.011968][T12231] CPU: 0 UID: 0 PID: 12231 Comm: syz.1.1904 Not tainted syzkaller #0 PREEMPT(full) [ 355.011985][T12231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 355.011991][T12231] Call Trace: [ 355.011996][T12231] [ 355.012000][T12231] dump_stack_lvl+0x100/0x190 [ 355.012015][T12231] should_fail_ex.cold+0x5/0xa [ 355.012028][T12231] _copy_to_user+0x32/0xd0 [ 355.012046][T12231] __htab_map_lookup_and_delete_batch+0x1822/0x30a0 [ 355.012064][T12231] ? kernel_text_address+0x8d/0x100 [ 355.012079][T12231] ? unwind_get_return_address+0x59/0xa0 [ 355.012097][T12231] ? __pfx___htab_map_lookup_and_delete_batch+0x10/0x10 [ 355.012114][T12231] ? __pfx_htab_map_lookup_and_delete_batch+0x10/0x10 [ 355.012128][T12231] bpf_map_do_batch+0x2b2/0x6d0 [ 355.012143][T12231] __sys_bpf+0xeb8/0x4e80 [ 355.012161][T12231] ? __pfx___sys_bpf+0x10/0x10 [ 355.012178][T12231] ? rcu_is_watching+0x12/0xc0 [ 355.012189][T12231] ? get_pid_task+0xfc/0x250 [ 355.012200][T12231] ? rcu_is_watching+0x12/0xc0 [ 355.012210][T12231] ? get_pid_task+0xfc/0x250 [ 355.012221][T12231] ? lock_release+0x24d/0x310 [ 355.012237][T12231] ? proc_fail_nth_write+0x9f/0x220 [ 355.012250][T12231] ? lock_release+0x24d/0x310 [ 355.012265][T12231] ? preempt_count_add+0x76/0x150 [ 355.012280][T12231] ? ksys_write+0x190/0x250 [ 355.012294][T12231] ? rcu_is_watching+0x12/0xc0 [ 355.012305][T12231] ? ksys_write+0x190/0x250 [ 355.012318][T12231] ? lock_release+0x24d/0x310 [ 355.012337][T12231] ? fput+0x79/0x100 [ 355.012346][T12231] ? __ia32_sys_bpf+0xcc/0x170 [ 355.012355][T12231] __ia32_sys_bpf+0xcc/0x170 [ 355.012369][T12231] ? trace_irq_enable.constprop.0+0x122/0x160 [ 355.012387][T12231] __do_fast_syscall_32+0xe7/0x970 [ 355.012401][T12231] do_fast_syscall_32+0x32/0x70 [ 355.012413][T12231] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 355.012428][T12231] RIP: 0023:0xf7f23fec [ 355.012439][T12231] Code: Unable to access opcode bytes at 0xf7f23fc2. [ 355.012444][T12231] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 355.012455][T12231] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 0000000080000800 [ 355.012462][T12231] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 355.012468][T12231] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 355.012474][T12231] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 355.012481][T12231] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 355.012490][T12231] [ 355.164948][T12237] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 355.167187][T12237] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 355.181181][T12237] vhci_hcd vhci_hcd.0: Device attached [ 355.211839][T12240] vhci_hcd: unknown pdu 1 [ 355.222168][ T9137] vhci_hcd vhci_hcd.1: stop threads [ 355.223821][ T9137] vhci_hcd vhci_hcd.1: release socket [ 355.225509][ T9137] vhci_hcd vhci_hcd.1: disconnect device [ 355.795784][T12246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1908'. [ 355.881139][T12248] tipc: Enabling of bearer rejected, failed to enable media [ 356.058016][T12255] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 356.061501][T12255] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 356.066251][T12255] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 356.624610][T12276] EXT4-fs error: 3 callbacks suppressed [ 356.624627][T12276] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:63: iget: checksum invalid [ 356.633161][T12277] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:63: iget: checksum invalid [ 356.638019][T12275] could not allocate digest TFM handle md5 [ 356.906263][T12281] fuse: Invalid rootmode [ 357.995787][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 358.044460][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 358.053005][ T5743] Bluetooth: hci1: command 0x0419 tx timeout [ 358.095872][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 358.122361][ T5743] Bluetooth: hci3: command 0x0419 tx timeout [ 358.122713][ T5749] Bluetooth: hci2: command 0x0419 tx timeout [ 358.663182][T12307] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 358.666083][T12307] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 358.668860][T12307] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 359.202159][ T5749] Bluetooth: hci1: unexpected event for opcode 0x0c23 [ 359.312078][T12316] FAULT_INJECTION: forcing a failure. [ 359.312078][T12316] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 359.316997][T12316] CPU: 3 UID: 0 PID: 12316 Comm: syz.2.1928 Not tainted syzkaller #0 PREEMPT(full) [ 359.317014][T12316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 359.317021][T12316] Call Trace: [ 359.317024][T12316] [ 359.317028][T12316] dump_stack_lvl+0x100/0x190 [ 359.317043][T12316] should_fail_ex.cold+0x5/0xa [ 359.317055][T12316] should_fail_alloc_page+0xeb/0x140 [ 359.317069][T12316] prepare_alloc_pages+0x1f0/0x5f0 [ 359.317083][T12316] ? do_fast_syscall_32+0x32/0x70 [ 359.317095][T12316] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 359.317110][T12316] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 359.317131][T12316] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 359.317150][T12316] ? rcu_is_watching+0x12/0xc0 [ 359.317161][T12316] ? trace_kmem_cache_alloc+0xdd/0x100 [ 359.317186][T12316] ? __kasan_slab_alloc+0x89/0x90 [ 359.317199][T12316] ? kmem_cache_alloc_noprof+0x292/0x6d0 [ 359.317209][T12316] ? mempool_alloc_noprof+0x1b7/0x310 [ 359.317220][T12316] ? lock_release+0x24d/0x310 [ 359.317235][T12316] ? mempool_alloc_noprof+0x1ce/0x310 [ 359.317246][T12316] ? __pfx_mempool_alloc_noprof+0x10/0x10 [ 359.317257][T12316] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 359.317271][T12316] ? policy_nodemask+0xed/0x4f0 [ 359.317285][T12316] alloc_pages_mpol+0x1fb/0x540 [ 359.317298][T12316] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 359.317313][T12316] alloc_pages_noprof+0x1a/0x160 [ 359.317328][T12316] blk_rq_map_kern+0x4d0/0x7f0 [ 359.317364][T12316] scsi_execute_cmd+0xbb1/0xe70 [ 359.317379][T12316] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 359.317389][T12316] ? __pfx_widen_string+0x10/0x10 [ 359.317404][T12316] ? __kernel_text_address+0xd/0x30 [ 359.317419][T12316] ? unwind_get_return_address+0x59/0xa0 [ 359.317433][T12316] ? arch_stack_walk+0xa6/0xf0 [ 359.317448][T12316] sr_do_ioctl+0x21a/0x840 [ 359.317459][T12316] ? __pfx_sr_do_ioctl+0x10/0x10 [ 359.317468][T12316] ? __pfx_stack_trace_save+0x10/0x10 [ 359.317481][T12316] ? stack_depot_save_flags+0x27/0x9d0 [ 359.317499][T12316] ? tomoyo_path_number_perm+0x46d/0x580 [ 359.317513][T12316] ? kasan_save_stack+0x3f/0x50 [ 359.317524][T12316] ? kasan_save_stack+0x30/0x50 [ 359.317534][T12316] ? kasan_save_track+0x14/0x30 [ 359.317545][T12316] sr_packet+0xc4/0x1c0 [ 359.317561][T12316] dvd_do_auth+0x763/0xfb0 [ 359.317572][T12316] ? __pfx_dvd_do_auth+0x10/0x10 [ 359.317582][T12316] ? rcu_is_watching+0x12/0xc0 [ 359.317592][T12316] ? __might_fault+0xc5/0x140 [ 359.317608][T12316] ? lock_release+0x24d/0x310 [ 359.317625][T12316] mmc_ioctl_dvd_auth+0x153/0x250 [ 359.317634][T12316] ? __pfx_mmc_ioctl_dvd_auth+0x10/0x10 [ 359.317645][T12316] ? rcu_is_watching+0x12/0xc0 [ 359.317661][T12316] cdrom_ioctl+0x3200/0x3880 [ 359.317677][T12316] ? __pfx_cdrom_ioctl+0x10/0x10 [ 359.317694][T12316] ? rcu_is_watching+0x12/0xc0 [ 359.317709][T12316] ? trace_rpm_return_int+0x78/0x220 [ 359.317733][T12316] ? rpm_resume+0x7eb/0x1320 [ 359.317757][T12316] ? __pfx_rpm_resume+0x10/0x10 [ 359.317771][T12316] ? do_raw_spin_lock+0x128/0x260 [ 359.317781][T12316] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 359.317791][T12316] ? __pm_runtime_resume+0xc3/0x170 [ 359.317806][T12316] ? rcu_is_watching+0x12/0xc0 [ 359.317818][T12316] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 359.317835][T12316] ? __pm_runtime_resume+0xc3/0x170 [ 359.317855][T12316] sr_block_ioctl+0x1ae/0x250 [ 359.317865][T12316] ? __pfx_sr_block_ioctl+0x10/0x10 [ 359.317874][T12316] blkdev_compat_ptr_ioctl+0x9f/0xe0 [ 359.317886][T12316] ? __pfx_blkdev_compat_ptr_ioctl+0x10/0x10 [ 359.317896][T12316] compat_blkdev_ioctl+0x682/0x7b0 [ 359.317908][T12316] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 359.317920][T12316] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 359.317931][T12316] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 359.317945][T12316] __do_fast_syscall_32+0xe7/0x970 [ 359.317957][T12316] do_fast_syscall_32+0x32/0x70 [ 359.317968][T12316] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 359.317983][T12316] RIP: 0023:0xf6fcefec [ 359.317996][T12316] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 359.318000][T12316] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 359.318011][T12316] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005392 [ 359.318018][T12316] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 359.318024][T12316] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 359.318031][T12316] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 359.318037][T12316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 359.318046][T12316] [ 359.482710][T12318] netlink: 'syz.2.1929': attribute type 1 has an invalid length. [ 359.487178][T12318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1929'. [ 359.819577][T12340] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:52: iget: checksum invalid [ 359.835574][T12341] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:52: iget: checksum invalid [ 359.848019][T12339] could not allocate digest TFM handle md5 [ 360.685747][ T5749] Bluetooth: hci3: command 0x0419 tx timeout [ 360.689920][ T5749] Bluetooth: hci2: command 0x0419 tx timeout [ 360.818544][T12348] siw: device registration error -23 [ 361.213990][T12352] siw: device registration error -23 [ 361.283314][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 361.287595][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 361.301670][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 362.077691][T12360] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 362.078679][T12360] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 362.078954][T12360] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 362.358760][T12365] siw: device registration error -23 [ 363.074081][T12377] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:18: iget: checksum invalid [ 363.176240][T12381] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:52: iget: checksum invalid [ 363.268054][T12388] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:52: iget: checksum invalid [ 363.282887][T12380] could not allocate digest TFM handle md5 [ 363.304972][T12389] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:52: iget: checksum invalid [ 363.311201][T12391] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:17: iget: checksum invalid [ 363.315672][T12385] could not allocate digest TFM handle md5 [ 364.043154][ T5743] Bluetooth: hci1: command 0x0419 tx timeout [ 364.123085][ T5743] Bluetooth: hci3: command 0x0419 tx timeout [ 364.123097][ T5749] Bluetooth: hci2: command 0x0419 tx timeout [ 364.318681][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 364.323441][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 364.332786][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 364.407266][T12409] input: syz0 as /devices/virtual/input/input16 [ 364.490784][T12412] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:63: iget: checksum invalid [ 364.586588][T12416] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:63: iget: checksum invalid [ 364.603525][T12411] could not allocate digest TFM handle md5 [ 365.048871][T12422] could not allocate digest TFM handle md5 [ 365.673520][T12421] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 365.675539][T12421] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 365.679734][T12421] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 365.982863][T12439] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1959'. [ 366.369171][T12447] siw: device registration error -23 [ 366.626512][T12449] fuse: Unknown parameter 'user_i00000000000000000000' [ 367.733609][ T5743] Bluetooth: hci3: command 0x0419 tx timeout [ 367.736271][ T5749] Bluetooth: hci2: command 0x0419 tx timeout [ 367.738274][ T5749] Bluetooth: hci1: command 0x0419 tx timeout [ 368.200415][T12487] fuse: Unknown parameter 'user_id00000000000000000000' [ 368.245935][T12494] FAULT_INJECTION: forcing a failure. [ 368.245935][T12494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.251355][T12494] CPU: 0 UID: 0 PID: 12494 Comm: syz.0.1976 Not tainted syzkaller #0 PREEMPT(full) [ 368.251379][T12494] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 368.251389][T12494] Call Trace: [ 368.251396][T12494] [ 368.251403][T12494] dump_stack_lvl+0x100/0x190 [ 368.251424][T12494] should_fail_ex.cold+0x5/0xa [ 368.251443][T12494] _copy_from_iter+0x1f4/0x1690 [ 368.251470][T12494] ? __asan_memset+0x23/0x50 [ 368.251495][T12494] ? __pfx__copy_from_iter+0x10/0x10 [ 368.251520][T12494] ? __pfx___alloc_skb+0x10/0x10 [ 368.251540][T12494] ? netlink_autobind.isra.0+0x160/0x370 [ 368.251562][T12494] netlink_sendmsg+0x808/0xda0 [ 368.251580][T12494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.251597][T12494] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 368.251617][T12494] ____sys_sendmsg+0xa4d/0xbe0 [ 368.251632][T12494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.251649][T12494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 368.251668][T12494] ? kstrtouint_from_user+0x13c/0x1d0 [ 368.251693][T12494] ___sys_sendmsg+0x190/0x1e0 [ 368.251709][T12494] ? __pfx____sys_sendmsg+0x10/0x10 [ 368.251730][T12494] ? rcu_is_watching+0x12/0xc0 [ 368.251754][T12494] __sys_sendmsg+0x160/0x210 [ 368.251775][T12494] ? __pfx___sys_sendmsg+0x10/0x10 [ 368.251799][T12494] ? __pfx_ksys_write+0x10/0x10 [ 368.251821][T12494] ? rcu_is_watching+0x12/0xc0 [ 368.251839][T12494] __do_fast_syscall_32+0xe7/0x970 [ 368.251858][T12494] do_fast_syscall_32+0x32/0x70 [ 368.251876][T12494] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 368.251897][T12494] RIP: 0023:0xf70befec [ 368.251916][T12494] Code: Unable to access opcode bytes at 0xf70befc2. [ 368.251923][T12494] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 368.251940][T12494] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 368.251951][T12494] RDX: 0000000000008084 RSI: 0000000000000000 RDI: 0000000000000000 [ 368.251960][T12494] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 368.251970][T12494] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 368.251979][T12494] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 368.251994][T12494] [ 368.365756][T12492] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 368.370345][T12492] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 368.372809][T12492] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 368.946532][T12505] sch_fq: defrate 5 ignored. [ 369.098688][ T41] audit: type=1326 audit(1782150003.795:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.2.1982" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 369.107388][ T41] audit: type=1326 audit(1782150003.805:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.2.1982" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 369.115966][ T41] audit: type=1326 audit(1782150003.805:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.2.1982" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 369.124656][ T41] audit: type=1326 audit(1782150003.815:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.2.1982" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 369.208167][T12513] fuse: Unknown parameter 'user_id00000000000000000000' [ 369.305487][T12519] netlink: 'syz.2.1982': attribute type 1 has an invalid length. [ 370.453880][ T5743] Bluetooth: hci3: command 0x0419 tx timeout [ 370.456147][ T63] Bluetooth: hci1: command 0x0419 tx timeout [ 370.458141][ T5749] Bluetooth: hci2: command 0x0419 tx timeout [ 370.474619][ T5146] EXT4-fs error: 12 callbacks suppressed [ 370.474631][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 370.781098][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 370.790395][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 370.910823][T12543] siw: device registration error -23 [ 371.300378][T12555] FAULT_INJECTION: forcing a failure. [ 371.300378][T12555] name failslab, interval 1, probability 0, space 0, times 0 [ 371.304459][T12555] CPU: 1 UID: 0 PID: 12555 Comm: syz.3.1993 Not tainted syzkaller #0 PREEMPT(full) [ 371.304474][T12555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 371.304480][T12555] Call Trace: [ 371.304484][T12555] [ 371.304489][T12555] dump_stack_lvl+0x100/0x190 [ 371.304504][T12555] should_fail_ex.cold+0x5/0xa [ 371.304517][T12555] ? virtqueue_add_split+0x25c/0x1d30 [ 371.304530][T12555] should_failslab+0xc2/0x120 [ 371.304543][T12555] __kmalloc_noprof+0xe0/0x840 [ 371.304559][T12555] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 371.304577][T12555] virtqueue_add_split+0x25c/0x1d30 [ 371.304591][T12555] ? p9pdu_vwritef+0x57f/0x1dc0 [ 371.304607][T12555] ? __pfx_virtqueue_add_split+0x10/0x10 [ 371.304621][T12555] ? rcu_is_watching+0x12/0xc0 [ 371.304632][T12555] ? __virt_addr_valid+0x22a/0x430 [ 371.304651][T12555] ? rcu_is_watching+0x12/0xc0 [ 371.304666][T12555] ? __virt_addr_valid+0x22a/0x430 [ 371.304688][T12555] ? lock_release+0x24d/0x310 [ 371.304709][T12555] virtqueue_add_sgs+0x207/0x2b0 [ 371.304730][T12555] p9_virtio_request+0x26d/0x6d0 [ 371.304754][T12555] ? __pfx_p9_virtio_request+0x10/0x10 [ 371.304768][T12555] ? p9_client_prepare_req+0x112/0x4d0 [ 371.304782][T12555] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 371.304797][T12555] ? __pfx___schedule+0x10/0x10 [ 371.304813][T12555] p9_client_rpc+0x359/0xd60 [ 371.304827][T12555] ? trace_irq_enable.constprop.0+0x122/0x160 [ 371.304844][T12555] ? __pfx_p9_client_rpc+0x10/0x10 [ 371.304856][T12555] ? irqentry_exit+0x24d/0xa00 [ 371.304869][T12555] ? p9_client_create+0x6cc/0xd40 [ 371.304882][T12555] ? write_comp_data+0x3a/0x90 [ 371.304895][T12555] p9_client_create+0x7a6/0xd40 [ 371.304908][T12555] ? __pfx_p9_client_create+0x10/0x10 [ 371.304923][T12555] ? lockdep_init_map_type+0x5c/0x250 [ 371.304939][T12555] ? __raw_spin_lock_init+0x3a/0x110 [ 371.304949][T12555] v9fs_session_init+0x3c/0xdd0 [ 371.304965][T12555] ? kasan_save_track+0x14/0x30 [ 371.304977][T12555] v9fs_get_tree+0xb8/0xb50 [ 371.304992][T12555] ? rcu_is_watching+0x12/0xc0 [ 371.305003][T12555] ? __pfx_v9fs_get_tree+0x10/0x10 [ 371.305020][T12555] ? bpf_lsm_capable+0x9/0x10 [ 371.305029][T12555] ? security_capable+0x80/0x260 [ 371.305041][T12555] vfs_get_tree+0x92/0x320 [ 371.305054][T12555] path_mount+0x7d0/0x23d0 [ 371.305064][T12555] ? __pfx_path_mount+0x10/0x10 [ 371.305073][T12555] ? kasan_quarantine_put+0x95/0x240 [ 371.305084][T12555] ? putname+0xb1/0x110 [ 371.305100][T12555] ? kmem_cache_free+0x127/0x6b0 [ 371.305118][T12555] ? __ia32_sys_mount+0x292/0x310 [ 371.305127][T12555] __ia32_sys_mount+0x292/0x310 [ 371.305137][T12555] ? __pfx___ia32_sys_mount+0x10/0x10 [ 371.305148][T12555] ? rcu_is_watching+0x12/0xc0 [ 371.305158][T12555] ? rcu_is_watching+0x12/0xc0 [ 371.305193][T12555] __do_fast_syscall_32+0xe7/0x970 [ 371.305208][T12555] do_fast_syscall_32+0x32/0x70 [ 371.305220][T12555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 371.305235][T12555] RIP: 0023:0xf709efec [ 371.305251][T12555] Code: Unable to access opcode bytes at 0xf709efc2. [ 371.305255][T12555] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 371.305267][T12555] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000080000480 [ 371.305274][T12555] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 371.305280][T12555] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 371.305287][T12555] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 371.305293][T12555] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 371.305302][T12555] [ 371.944619][T12561] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:17: iget: checksum invalid [ 371.950593][T12563] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:17: iget: checksum invalid [ 372.244432][T12571] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:17: iget: checksum invalid [ 372.250224][T12572] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:17: iget: checksum invalid [ 372.254687][T12570] could not allocate digest TFM handle md5 [ 372.424702][T12579] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 372.428111][T12579] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 372.431505][T12579] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 372.494357][T12580] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.497590][T12580] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.926276][T12580] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.931200][T12580] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.004227][T12580] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.007584][T12580] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.070895][T12580] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.075849][T12580] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.148544][T12593] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:17: iget: checksum invalid [ 373.160004][T12594] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:17: iget: checksum invalid [ 373.182414][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.185656][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.199475][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.205908][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.218004][ T9137] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.221125][ T9137] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.237954][ T9137] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.247342][ T9137] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.267665][T12596] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2005'. [ 373.277398][T12598] netlink: 'syz.1.2004': attribute type 2 has an invalid length. [ 373.505663][T12605] 9p: Bad value for 'wfdno' [ 373.641996][T12607] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 374.215676][T12621] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 374.218308][T12621] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 374.220912][T12621] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 374.225757][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 374.484361][ T5815] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 374.665579][ T5815] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 374.668829][ T5815] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.672380][ T5815] usb 6-1: config 0 has no interface number 0 [ 374.674363][ T5815] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 374.677790][ T5815] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 374.682072][ T5815] usb 6-1: config 0 interface 255 has no altsetting 0 [ 374.685870][ T5815] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 374.689404][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.692548][ T5815] usb 6-1: Product: syz [ 374.694180][ T5815] usb 6-1: Manufacturer: syz [ 374.696379][ T5815] usb 6-1: SerialNumber: syz [ 374.698875][ T5815] usb 6-1: config 0 descriptor?? [ 374.702242][ T5815] streamzap 6-1:0.255: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 374.774788][T12630] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2016'. [ 374.852409][T12639] netlink: 'syz.3.2019': attribute type 1 has an invalid length. [ 374.859344][T12639] 8021q: adding VLAN 0 to HW filter on device bond7 [ 374.872418][T12639] bond7: (slave dummy0): making interface the new active one [ 374.875724][T12639] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 374.886455][T12639] vlan3: entered allmulticast mode [ 374.888665][T12639] bond7: entered allmulticast mode [ 374.890710][T12639] dummy0: entered allmulticast mode [ 374.912642][ T5815] usb 6-1: USB disconnect, device number 17 [ 375.646250][T12659] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2025'. [ 375.781786][T12664] siw: device registration error -23 [ 376.284950][ T5749] Bluetooth: hci1: command 0x0419 tx timeout [ 376.286186][ T5743] Bluetooth: hci3: command 0x0419 tx timeout [ 376.287039][ T5749] Bluetooth: hci2: command 0x0419 tx timeout [ 377.828841][T12691] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2035'. [ 378.080445][ T5146] EXT4-fs error: 7 callbacks suppressed [ 378.080456][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 378.089704][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 378.095318][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 378.250702][T12696] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:18: iget: checksum invalid [ 378.260540][T12697] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:18: iget: checksum invalid [ 378.267130][T12695] could not allocate digest TFM handle md5 [ 379.666511][T12713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2040'. [ 379.670837][T12713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2040'. [ 379.717453][T12716] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2044'. [ 379.907748][T12727] random: crng reseeded on system resumption [ 380.048909][T12729] xt_CT: You must specify a L4 protocol and not use inversions on it [ 380.354995][ T5749] Bluetooth: hci3: unexpected event for opcode 0x0c23 [ 381.675230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 381.842132][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 381.849368][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 381.855582][ T5146] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 381.979039][ T5749] Bluetooth: hci1: unexpected event 0x01 length: 3 > 1 [ 382.006073][T12751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2050'. [ 382.059989][T12753] bond6: invalid ARP target 0.0.0.0 specified for addition [ 382.072369][T12753] bond6: option arp_ip_target: invalid value (0) [ 382.081557][T12753] bond6 (unregistering): Released all slaves [ 382.163250][ T5749] Bluetooth: hci3: unexpected event for opcode 0x0c23 [ 382.214144][T12759] 9pnet_fd: p9_fd_create_unix (12759): problem connecting socket: ./file0/file0: -2 [ 382.299479][T12763] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:63: iget: checksum invalid [ 382.304824][T12764] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:63: iget: checksum invalid [ 382.313377][T12762] netlink: 'syz.2.2059': attribute type 1 has an invalid length. [ 382.323260][T12762] bond3: entered promiscuous mode [ 382.326080][T12762] 8021q: adding VLAN 0 to HW filter on device bond3 [ 382.347221][T12762] 8021q: adding VLAN 0 to HW filter on device bond3 [ 382.349681][T12762] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 382.353303][T12762] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 382.358663][T12762] bond3: (slave vti0): making interface the new active one [ 382.361315][T12762] vti0: entered promiscuous mode [ 382.363592][T12762] bond3: (slave vti0): Enslaving as an active interface with an up link [ 382.441176][ C3] BUG: unable to handle page fault for address: ffffed102e1e5a16 [ 382.443693][ C3] #PF: supervisor read access in kernel mode [ 382.446067][ C3] #PF: error_code(0x0000) - not-present page [ 382.449721][ C3] PGD 7ffd5067 P4D 7ffd5067 PUD 3fffa067 PMD 0 [ 382.451852][ C3] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 382.453640][ C3] CPU: 3 UID: 0 PID: 12769 Comm: syz.2.2061 Not tainted syzkaller #0 PREEMPT(full) [ 382.456477][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 382.459544][ C3] RIP: 0010:qdisc_pkt_len_segs_init+0x37e/0xb30 [ 382.461458][ C3] Code: 03 80 3c 02 00 0f 85 de 06 00 00 48 b8 00 00 00 00 00 fc ff df 44 89 e5 48 03 ab d8 00 00 00 48 8d 7d 0c 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 b5 [ 382.468328][ C3] RSP: 0018:ffffc900005e8710 EFLAGS: 00010a03 [ 382.470910][ C3] RAX: dffffc0000000000 RBX: ffff88806aeda780 RCX: ffffffff8961eeb9 [ 382.474199][ C3] RDX: 1ffff1102e1e5a16 RSI: ffffffff896613a2 RDI: ffff888170f2d0b4 [ 382.477438][ C3] RBP: ffff888170f2d0a8 R08: 0000000000000005 R09: 0000000000000000 [ 382.480694][ C3] R10: 0000000000000030 R11: 000000000000001e R12: 00000000fffffffc [ 382.483873][ C3] R13: ffff88806aeda7a8 R14: 0000000000000010 R15: ffff88806aeda7f4 [ 382.487218][ C3] FS: 0000000000000000(0000) GS:ffff88809741f000(0063) knlGS:00000000f53bdb40 [ 382.490945][ C3] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 382.493676][ C3] CR2: ffffed102e1e5a16 CR3: 000000006be78000 CR4: 0000000000352ef0 [ 382.496964][ C3] Call Trace: [ 382.498407][ C3] [ 382.499637][ C3] __netif_receive_skb_core.constprop.0+0x1132/0x3530 [ 382.502451][ C3] ? rcu_is_watching+0x12/0xc0 [ 382.504429][ C3] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 382.507355][ C3] ? rcu_is_watching+0x12/0xc0 [ 382.509334][ C3] ? rcu_is_watching+0x12/0xc0 [ 382.511342][ C3] ? rcu_is_watching+0x12/0xc0 [ 382.513337][ C3] ? rcu_is_watching+0x12/0xc0 [ 382.515327][ C3] ? drm_crtc_vblank_get_vblank_timeout+0x233/0x570 [ 382.518120][ C3] ? rcu_is_watching+0x12/0xc0 [ 382.520131][ C3] __netif_receive_skb_list_core+0x353/0x940 [ 382.522617][ C3] ? trace_pelt_se_tp+0x143/0x1a0 [ 382.524693][ C3] ? do_raw_spin_lock+0x128/0x260 [ 382.526797][ C3] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 382.529456][ C3] ? lock_acquire+0x301/0x370 [ 382.531461][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 382.533448][ C3] netif_receive_skb_list_internal+0x722/0xd40 [ 382.535980][ C3] ? lock_release+0x24d/0x310 [ 382.538023][ C3] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 382.540699][ C3] ? dev_gro_receive+0x280/0x3060 [ 382.542824][ C3] ? rcu_is_watching+0x12/0xc0 [ 382.544806][ C3] ? dev_gro_receive+0x280/0x3060 [ 382.546935][ C3] ? lock_release+0x24d/0x310 [ 382.548846][ C3] ? dev_gro_receive+0x238/0x3060 [ 382.550504][ C3] napi_complete_done+0x221/0x940 [ 382.552162][ C3] ? __pfx_napi_complete_done+0x10/0x10 [ 382.554078][ C3] ? rcu_is_watching+0x12/0xc0 [ 382.556081][ C3] ? gro_cell_poll+0x441/0x690 [ 382.558129][ C3] ? lock_release+0x24d/0x310 [ 382.560065][ C3] gro_cell_poll+0x46e/0x690 [ 382.562026][ C3] __napi_poll.constprop.0+0xaf/0x450 [ 382.564360][ C3] net_rx_action+0xa40/0xf20 [ 382.566421][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 382.568578][ C3] ? kvm_sched_clock_read+0x11/0x20 [ 382.570711][ C3] ? sched_clock+0x38/0x60 [ 382.572553][ C3] ? sched_clock_cpu+0x6c/0x570 [ 382.574565][ C3] ? ttwu_do_activate+0x219/0x800 [ 382.576642][ C3] ? rcu_is_watching+0x12/0xc0 [ 382.578200][ C3] handle_softirqs+0x1ea/0x9b0 [ 382.579813][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 382.581621][ C3] ? irqtime_account_delta+0x9a/0x110 [ 382.583409][ C3] ? tun_rx_batched.isra.0+0x402/0x750 [ 382.585651][ C3] do_softirq+0xac/0xe0 [ 382.587371][ C3] [ 382.588610][ C3] [ 382.589843][ C3] __local_bh_enable_ip+0xf8/0x120 [ 382.591974][ C3] tun_rx_batched.isra.0+0x407/0x750 [ 382.594182][ C3] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 382.596300][ C3] ? lock_acquire+0x301/0x370 [ 382.597960][ C3] ? tun_get_user+0x1cc8/0x3c20 [ 382.599602][ C3] ? rcu_is_watching+0x12/0xc0 [ 382.601270][ C3] ? tun_get_user+0x1cc8/0x3c20 [ 382.602812][ C3] tun_get_user+0x1e31/0x3c20 [ 382.604338][ C3] ? __pfx_tun_get_user+0x10/0x10 [ 382.605935][ C3] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 382.607611][ C3] ? tun_get+0x191/0x370 [ 382.608963][ C3] ? rcu_is_watching+0x12/0xc0 [ 382.610508][ C3] ? tun_get+0x191/0x370 [ 382.611844][ C3] ? lock_release+0x24d/0x310 [ 382.613361][ C3] tun_chr_write_iter+0xdc/0x200 [ 382.614730][ C3] vfs_write+0x6ac/0x1050 [ 382.615967][ C3] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 382.617805][ C3] ? __pfx_vfs_write+0x10/0x10 [ 382.619485][ C3] ? lock_release+0x24d/0x310 [ 382.621343][ C3] ksys_write+0x12a/0x250 [ 382.622826][ C3] ? __pfx_ksys_write+0x10/0x10 [ 382.624526][ C3] ? rcu_is_watching+0x12/0xc0 [ 382.626499][ C3] __do_fast_syscall_32+0xe7/0x970 [ 382.628609][ C3] ? trace_hardirqs_on_prepare+0x1d/0x30 [ 382.630935][ C3] do_fast_syscall_32+0x32/0x70 [ 382.632781][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 382.634849][ C3] RIP: 0023:0xf6fcefec [ 382.636128][ C3] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 382.638745][ C3] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 382.642071][ C3] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000440 [ 382.645281][ C3] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 382.648498][ C3] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 382.651731][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.654980][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 382.658289][ C3] [ 382.658300][ C3] Modules linked in: [ 382.658314][ C3] CR2: ffffed102e1e5a16 [ 382.658326][ C3] ---[ end trace 0000000000000000 ]--- [ 382.663473][ C3] RIP: 0010:qdisc_pkt_len_segs_init+0x37e/0xb30 [ 382.665345][ C3] Code: 03 80 3c 02 00 0f 85 de 06 00 00 48 b8 00 00 00 00 00 fc ff df 44 89 e5 48 03 ab d8 00 00 00 48 8d 7d 0c 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 b5 [ 382.671081][ C3] RSP: 0018:ffffc900005e8710 EFLAGS: 00010a03 [ 382.672949][ C3] RAX: dffffc0000000000 RBX: ffff88806aeda780 RCX: ffffffff8961eeb9 [ 382.675534][ C3] RDX: 1ffff1102e1e5a16 RSI: ffffffff896613a2 RDI: ffff888170f2d0b4 [ 382.678055][ C3] RBP: ffff888170f2d0a8 R08: 0000000000000005 R09: 0000000000000000 [ 382.680522][ C3] R10: 0000000000000030 R11: 000000000000001e R12: 00000000fffffffc [ 382.683005][ C3] R13: ffff88806aeda7a8 R14: 0000000000000010 R15: ffff88806aeda7f4 [ 382.685535][ C3] FS: 0000000000000000(0000) GS:ffff88809741f000(0063) knlGS:00000000f53bdb40 [ 382.688311][ C3] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 382.690619][ C3] CR2: 00000000f6fcf000 CR3: 000000006be78000 CR4: 0000000000352ef0 [ 382.693167][ C3] Kernel panic - not syncing: Fatal exception in interrupt [ 382.696160][ C3] Kernel Offset: disabled [ 382.697628][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:36:01 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffffff8b94e6f7 RCX=ffff888048ec3bb4 RDX=1ffff1100564786c RSI=ffffffff8c1e6500 RDI=ffffffff8e1ec920 RBP=ffffc90006dcf9e0 RSP=ffffc90006dcf888 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000 R12=0000000000000001 R13=ffff88804a7b0000 R14=ffff888024538000 R15=ffff88802b23b480 RIP=ffffffff8b9503d8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809711f000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080009000 CR3=000000006f257000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000fcb3bc RBX=ffff88801bf22540 RCX=ffffffff8b9412d5 RDX=0000000000000001 RSI=ffffffff8c1e6500 RDI=ffffffff81dda3a7 RBP=ffffed10037e44a8 RSP=ffffc9000046fe00 R8 =0000000000000000 R9 =ffffed100566678d R10=ffff88802b333c6b R11=ffffffff81d4786c R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000 RIP=ffffffff8b93f89f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809721f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f72db1ec CR3=000000006f257000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000005d0f9c RBX=ffff88801bfd4a80 RCX=ffffffff8b9412d5 RDX=0000000000000001 RSI=ffffffff8c1e6500 RDI=ffffffff81dda3a7 RBP=ffffed10037fa950 RSP=ffffc9000047fe00 R8 =0000000000000000 R9 =ffffed100568678d R10=ffff88802b433c6b R11=ffffffff81d4786c R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=dffffc0000000000 RIP=ffffffff8b93f89f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809731f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000563700012f40 CR3=000000005eb00000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8582e750 RDI=ffffffff9b4b6be0 RBP=ffffffff9b4b6ba0 RSP=ffffc900005e7ed0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=0000000000000060 R14=fffffbfff3696dce R15=dffffc0000000000 RIP=ffffffff8582e777 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809741f000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=ffffed102e1e5a16 CR3=000000006be78000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000