last executing test programs: 3m40.80694945s ago: executing program 0 (id=410): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101101, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket(0x1, 0x5, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000010000002159000"/20, @ANYRES32=0x0, @ANYBLOB="b5faa4384028430b1550c389cc8f883ba0b392ce714e1664dd4b87fe4b872ac98dd62bab973d0200d3a72fac038a2a6f"], 0x20}, 0x1, 0x0, 0x0, 0x20048044}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000006640)={0x0, 0x0, &(0x7f0000006600)={&(0x7f0000006400)=ANY=[@ANYBLOB="02f8ff020200000028bd700640553213"], 0x10}}, 0x20000800) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000500)={0xe000200c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r6, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x2f000}], 0x1, 0x5, 0xa, 0x14) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r1, &(0x7f0000000040)={0x80002017}) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000100)) r7 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r7, 0x7ff) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) epoll_pwait(r5, &(0x7f0000000080)=[{}], 0x1, 0x3f0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000200)={[{@name={'name', 0x3d, 'noprefix'}}, {}], [{@dont_hash}]}) 3m39.187147241s ago: executing program 0 (id=411): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) 3m36.719908387s ago: executing program 0 (id=419): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101101, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket(0x1, 0x5, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000010000002159000"/20, @ANYRES32=0x0, @ANYBLOB="b5faa4384028430b1550c389cc8f883ba0b392ce714e1664dd4b87fe4b872ac98dd62bab973d0200d3a72fac038a2a6f"], 0x20}, 0x1, 0x0, 0x0, 0x20048044}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000006640)={0x0, 0x0, &(0x7f0000006600)={&(0x7f0000006400)=ANY=[@ANYBLOB="02f8ff020200000028bd700640553213"], 0x10}}, 0x20000800) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000500)={0xe000200c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r6, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x2f000}], 0x1, 0x5, 0xa, 0x14) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r1, &(0x7f0000000040)={0x80002017}) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000100)) r7 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r7, 0x7ff) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) epoll_pwait(r5, &(0x7f0000000080)=[{}], 0x1, 0x3f0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000200)={[{@name={'name', 0x3d, 'noprefix'}}, {}], [{@dont_hash}]}) 3m35.609974642s ago: executing program 0 (id=426): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x115002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff, 0x2}, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x262) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000440)=""/82, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x6133bfa3592641fe}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7030000070400008500000021000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x268783, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r5, 0x20}, {r5, 0x13}], 0x2, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r5, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x4000) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0xe8, 0x3ff, 0x4, "098ee42621b50c2d4e95a4197b1d2056ed757aebaa86ecdfb92ebb6294a50f54fc8c513af4a0167e3317f4e2f4fc066804fce6437048fe87ed07bf22e52ca776cc4d4be3bdb24ad6947fd85072c1d6cb16b253f915296055e9a06a59a4f81566cc1c1d32d493a60d41a98655f4811f0dbebcea0398a4b98a72e516f5e84b9cc471f8297d7c6188e402910817db84412b578acd08287f8bdfa2551d5529e46cccc2f940b0c5b6f68a507f978762fef76eb6720ec8a9080a96a60804503c5a4d739ee553796d333859d3a5e1eaaf9f02eafaf0d58ee66e45ce1a1f38b2692a06cfc8fcc6d29abc8810"}) syz_open_dev$vim2m(&(0x7f0000000500), 0x0, 0x2) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) 3m35.409976628s ago: executing program 0 (id=428): capset(&(0x7f0000000000)={0x2aa80550}, &(0x7f0000000040)={0x200000, 0x1fffff, 0xffffffff, 0x0, 0xfffffbff, 0xfffffffc}) prctl$PR_CAPBSET_DROP(0x18, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$full(0xffffff9c, &(0x7f0000000140), 0x214000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000001c0)=@req3={0xbdf7, 0x3, 0xa19, 0x0, 0x5ba, 0x0, 0x7580}, 0x1c) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r3, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) socket(0x1e, 0x4, 0x0) (async) syz_io_uring_setup(0x7b9d, 0x0, &(0x7f0000000380), &(0x7f0000000280), 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x12a) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@verity_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0/file1'}}], [], 0x2c}) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x0, 0xc3) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ix\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x113) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000200)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r5, &(0x7f0000001340)=""/4096, 0x1000) 3m35.088871246s ago: executing program 0 (id=431): socket$key(0xf, 0x3, 0x2) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)="188a31fd3a9eadb3789c44099e0bf161425f3bdbac6bf2b22c6a482de3a7f53e955a903d44e8b2ad3a5b9acb5497844452926d993d9005f6914857", 0x3b) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0x40000000015, 0x5, 0x0) dup3(r0, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x13, &(0x7f0000000000)=0x80002, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x7}, 0x40095) 3m34.957484572s ago: executing program 32 (id=431): socket$key(0xf, 0x3, 0x2) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)="188a31fd3a9eadb3789c44099e0bf161425f3bdbac6bf2b22c6a482de3a7f53e955a903d44e8b2ad3a5b9acb5497844452926d993d9005f6914857", 0x3b) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0x40000000015, 0x5, 0x0) dup3(r0, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x13, &(0x7f0000000000)=0x80002, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x7}, 0x40095) 5.621013709s ago: executing program 2 (id=1541): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_ublk_setup_io_uring(0x223c, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') read$FUSE(r2, &(0x7f0000006040)={0x2020}, 0x17a9) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f0000000140)=""/153, 0x99, 0x0, &(0x7f0000000240)=""/206, 0xce}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000001900000000400000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r5, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f00000003c0)) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r5, 0x4) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r6, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 5.248801051s ago: executing program 4 (id=1544): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRESDEC=r0, @ANYBLOB="79a9"], 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) r2 = openat$vmci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@host, 0x1}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) timer_delete(r3) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0xfffffff3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$usbfs(0x0, 0x7, 0x220100) ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4008550d, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xcc1, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x7c1) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x396, 0x0, 0x8000000000000000}]}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0xf2}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c6370fef5aeb64f08abe7cd7610435b4675c1b5d50b5d47e80e7e2e7327b451a94ab277b2db8cb7eae77aa7bdb2d69cc40663722e43db66cc55bcef1ab933b90bcaf0991cb7303d1a3292e182434d7467cf1522236a24a86b1df56aa2d13bd61cde71e98016ea33ee868a2451297a49198c8ef8b3e5928b5ff53ce2372b651afbd621bb8c40e7be31e4bdfb917f04e5277c77e7fb7306fda20b97e83e2336fee04cd2d1327097f004530c79a7987b23aa0c819c077f5179531a2bcbbbed11db6dde7a0c8130b542ad44f768c003558e0b26bc2006bed69065fe3b7dbf3a2a831720", @ANYRES16=r10, @ANYBLOB="370625bd7000fddbdf25210000001c002d800500040001000000080002000200000005000100020000000c0006000100000001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c010}, 0x4004800) write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) syz_open_dev$usbmon(&(0x7f0000000080), 0x8002, 0xa2000) 4.747451946s ago: executing program 2 (id=1545): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x20000000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000f00)={0x20, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4048040) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000), 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="ec030000", @ANYRES16=r3, @ANYBLOB="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"], 0x3ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000081) 4.50054902s ago: executing program 2 (id=1546): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_ublk_setup_io_uring(0x223c, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') read$FUSE(r2, &(0x7f0000006040)={0x2020}, 0x17a9) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f0000000140)=""/153, 0x99, 0x0, &(0x7f0000000240)=""/206, 0xce}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000001900000000400000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r5, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f00000003c0)) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r5, 0x4) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r6, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 4.011511454s ago: executing program 4 (id=1547): open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x18, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) inotify_init1(0x80000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpu.stat\x00', 0x275a, 0x0) pidfd_send_signal(r3, 0x23, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}]}, @CTA_STATUS={0x8}]}, 0x60}}, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)={0x1}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x60, r8, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x60}}, 0x20000400) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x200000003, 0x4100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2, 0xfffffffffffffffd], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.607598467s ago: executing program 4 (id=1549): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x20000000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000f00)={0x20, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4048040) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000), 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="ec030000", @ANYRES16=r3, @ANYBLOB="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"], 0x3ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000081) 3.354497394s ago: executing program 4 (id=1554): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 3.279142979s ago: executing program 4 (id=1556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0x8000000008]}, 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=']) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1a4, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1c0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x96e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x559}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000000}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x195524b5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x39, 0x3, "255498cce19bbbb823c4e476e40f47680006bd925e06000066658237ab8692ec8dd179dcd32551fa643fca7bde43459f831ea9e237"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1a6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x5f, 0x3, "9d40f2fc9cf6b16a2fe11e7a1c956ff53c77f14ae8d94ad0800f18099ff438d4256bd95d5b79b2e05cd8ea4e586ebda60fa8e0f2bfe30dc09bb8f2493dfb3254bd13e3c588b99d36c75c5a68d6fd12b643d5738495dddf11354c6b"}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40000}, 0xc014) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000091fbb1b47e201000010000000000000000000f00000a180000000c0a010100000000000000000a0000060421a4b3710000001100010000000000000000000000000a"], 0x40}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0, 0x80}, 0x28) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000280)='.\x00', 0x0, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="cc000000110010002bbd7000fedbdf25fc010000000000000000000000000001000004d50a006c000c001c00", @ANYRES32=0x0, @ANYBLOB="020000000a00100000000000000000008a0002006563622d63617374352d617678000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100200002f2703a0886bf770741835d0baeeb7a09491c050662fa7475c97299f003b8b997f996cdc9cc9037277eaa55f76061e4adf53f624d278e8cc64a4ecd6ba7536aa889700007c9ef3c32aceb56b87856dc187e071c1009938a3deccde8a276654846bb9b38b18a060e3da2d32a78407"], 0xcc}, 0x1, 0x0, 0x0, 0x20000115}, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) gettimeofday(0x0, 0x0) mlockall(0x3) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040)=0x200) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setuid(0xee01) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) creat(0x0, 0x59) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) 3.145141203s ago: executing program 2 (id=1557): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000140)=""/106, 0x6a, 0x1000007) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000080)=""/24, 0x18}, {&(0x7f00000001c0)=""/116, 0x74}, {&(0x7f0000000500)=""/145, 0x91}, {&(0x7f0000001880)=""/4109, 0x100d}, {&(0x7f0000001780)=""/69, 0x45}], 0x5}, 0x20) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r5 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r5, 0xc0404807, &(0x7f0000000080)={0x5, "1f7f67491b5a90eeaddb94a4031a82687063ba6e44f7b91d902d0008424ad04b9634bef178be4ba64223a1d6da6d232b4ea6a453724e5a9c45a204ec36715596"}) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000140)={0xa, {0x1, 0x3, 0xff}}, 0xa) ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f0000000100)=ANY=[@ANYRES32=r5]) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8983, &(0x7f0000000180)={0x9, 'vlan1\x00'}) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc01c586a, &(0x7f00000002c0)={r1, &(0x7f00000001c0)='/dev/hidraw#\x00', 0x0, &(0x7f0000000200)={@_ha_fsid={[0x4]}, {0x7, 0x0, 0x65eabd06, 0xa}}, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x8}) ioctl$BLKCRYPTOIMPORTKEY(r7, 0xc0401289, &(0x7f0000000380)={&(0x7f0000000300)="ac3e944af9efa76070db2702c0721da4c30f2d1bc622ebf8a5b478740aa9a6830eccb9af1db79e200d6eed3334c0f6", 0x2f, &(0x7f0000000340)=""/44, 0x2c}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) creat(0x0, 0x100) 1.609008232s ago: executing program 1 (id=1560): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_virtio(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000480), 0x9, &(0x7f0000000000)={'trans=virtio,', {[{@access_any}]}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x8000, 0x102) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x113) 1.509209093s ago: executing program 1 (id=1561): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001300), 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.398982859s ago: executing program 3 (id=1562): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/usb/usbmon/0s\x00', 0x4120, 0x0) 1.398713663s ago: executing program 3 (id=1563): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.338670548s ago: executing program 3 (id=1564): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 1.178990143s ago: executing program 1 (id=1565): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$cgroup_devices(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="6220136682d178fc9fb1a564cbcbd1aa3a2820776d0019e89b08cff27e65854eec97fe2d765ccb7f36475408b048131db3c178b7d7b1f1c57546a1ff8381b6c80b93fdad5fd8b6b4c72e7f45ca8e7a69f27229eec6ccbd0f8dbeba6c247bce5f7e73669281d8b1f1cb21b6b2d631c83d2caa23cae3e95049ffbdbdaf38051c0303cb898b8980d0bffef25dfb95fe6c7fc20518ff134084050f911aa7790f9dd2c66bacc2068e07c3ebfd4d5b"], 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES32=r1], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5e, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = epoll_create1(0x0) r4 = socket$unix(0x1, 0x1, 0x0) close(r4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x3e000, 0x1000}, 0x20) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000500)={0x0, 0xa355, 0x1, 0xffffffff, 0x15a, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000780)={0x2e, 0x34, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r13, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x6, 0x3, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x2, 0x142, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8256, 0x2, 0x3, 0x1e9}}], 0x1, &(0x7f0000000a80)={0x2e, 0x8, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r12, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000300), 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r5, &(0x7f00000003c0)={0x2c, 0x18, r16}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0xa002803f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r17 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r17, 0xc138fd1f, &(0x7f0000000100)="04000000") mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) 918.389498ms ago: executing program 3 (id=1566): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x204, 0x6, 0xcb, 0x6, 0x8, @broadcast}, 0x10) listen(r0, 0xfffffe01) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendto(r1, 0x0, 0x0, 0xc005, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x8000, &(0x7f0000000480)={[{@name={'name', 0x3d, 'nfs\x00'}}]}) 911.933013ms ago: executing program 2 (id=1567): mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r0, r1+10000000}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="23000000ffffffffe27f00000100000001010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000000005000000f44fe2dd8410fddc00"/28], 0x50) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x13, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000a00)={0x0, 0x0}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000880), 0x8e5b, r6}, 0x38) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRES32=r4, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303130303030302c757365725f6964765b0bad65b6e2902a11b5c01e0663548b208fa1bada265e84b461f7fa338afa9cfdffb6bb21164222fff6438efe9f7d8395ccb6fae0a37ab7ce4e110eef924d7b27180bde11b30b8773f3e7379c8401c8e63da0e4ae2e24692803fcc15d34fb6cae6cbe0000000001fb0671b586e668433bfe69755109e01903485b4ed2e825773746d1b081cf50a5ecd51fa4dbb94ed9be3c4cc1578b1c8f35d1d7bea9a566046ef58986d6f021264da59749399de15fcc527611d0b0e18c5fc513f8b43564312f7f38fc5773d34f357b", @ANYRESDEC=0x0]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) socket$inet6_mptcp(0xa, 0x1, 0x106) write(r2, &(0x7f0000000600)='1', 0x1) 911.487268ms ago: executing program 1 (id=1568): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x20000000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000f00)={0x20, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4048040) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000700)={&(0x7f0000000000), 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="ec030000", @ANYRES16=r3, @ANYBLOB="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"], 0x3ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000081) 669.042313ms ago: executing program 1 (id=1569): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (fail_nth: 5) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x4b564d05, 0x0, 0x1}]}) 389.178975ms ago: executing program 1 (id=1570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0x8000000008]}, 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1a4, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1c0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x96e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x559}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000000}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x195524b5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x39, 0x3, "255498cce19bbbb823c4e476e40f47680006bd925e06000066658237ab8692ec8dd179dcd32551fa643fca7bde43459f831ea9e237"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1a6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x5f, 0x3, "9d40f2fc9cf6b16a2fe11e7a1c956ff53c77f14ae8d94ad0800f18099ff438d4256bd95d5b79b2e05cd8ea4e586ebda60fa8e0f2bfe30dc09bb8f2493dfb3254bd13e3c588b99d36c75c5a68d6fd12b643d5738495dddf11354c6b"}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40000}, 0xc014) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000091fbb1b47e201000010000000000000000000f00000a180000000c0a010100000000000000000a0000060421a4b3710000001100010000000000000000000000000a"], 0x40}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0, 0x80}, 0x28) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000280)='.\x00', 0x0, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="cc000000110010002bbd7000fedbdf25fc010000000000000000000000000001000004d50a006c000c001c00", @ANYRES32=0x0, @ANYBLOB="020000000a00100000000000000000008a0002006563622d63617374352d617678000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100200002f2703a0886bf770741835d0baeeb7a09491c050662fa7475c97299f003b8b997f996cdc9cc9037277eaa55f76061e4adf53f624d278e8cc64a4ecd6ba7536aa889700007c9ef3c32aceb56b87856dc187e071c1009938a3deccde8a276654846bb9b38b18a060e3da2d32a78407"], 0xcc}, 0x1, 0x0, 0x0, 0x20000115}, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) gettimeofday(0x0, 0x0) mlockall(0x3) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040)=0x200) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setuid(0xee01) r6 = creat(0x0, 0x59) quotactl_fd$Q_GETNEXTQUOTA(r6, 0xffffffff80000900, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) 47.730312ms ago: executing program 4 (id=1571): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = syz_clone(0x40184000, &(0x7f00000000c0)="e008151e7ce440f6df6c8c4d975b53817e70954ab25abf9adaf979895c68d67b8131ba461c6e192e9c2e6069f129be35b666021bef1e1a679f26b6287b838477557d90c00569827ebb37f5a3c39b414e29bfadb70ccbc24b07ef1574ca07ac1f03ff5a5688369f73c63aab36bd8563d7bc6949d746c7e8dd00206ff4441c72fb8bb81abcf4bc512943de9fe13fa4ebc227d50902f730617e10604475f8f87ece699cb23cf94665a1cf928b099ff218d2254dc1fd47df413a65a4beb5d69dbf57620ae051b28a8a4452f67fb2236968e1", 0xd0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="2d3c8a00bada100990b2a4ac94455895fb70d7cc9fb72928db5e458e70a8f0bf10df9265b244f0fca60c8f762dbea57fc70c12d993e48b9b8e903345a8038dd1605afd3e6625dc2e684aebed8c18b2b5419721a7a9787db1a7a40ef718d161786583cea926deb0cd18d82f0ec7885f087eab76a093bedb42a33910070b51d72816b794b1b0bdc3edcd0ec27b93fa90259515082b0f8d86998ad9e7df7dd3b2178eacd16d5741cd490019c409eeddd8d373092fc9e847ad91c45c") r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2, 0x7, 0x7, 0x0, 0x2, 0x0, 0x70bd26, 0x25dfdbfd}, 0x10}}, 0x24048084) migrate_pages(r1, 0x1ff, &(0x7f0000000300)=0x7, &(0x7f0000000340)=0x80000001) write(r0, &(0x7f0000000080)='4', 0x1) 47.602423ms ago: executing program 3 (id=1572): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 456.524µs ago: executing program 2 (id=1573): syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x38, 0x3a, 0xff, @private0, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0x0, '\x00', {0x2, 0x6, "832772", 0x8, 0x2c, 0xff, @empty, @mcast2, [@fragment={0x84, 0x0, 0xa, 0x1, 0x0, 0x2, 0x65}]}}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x16f) move_pages(0x0, 0x1ffffffffffffca8, &(0x7f0000000080), 0x0, &(0x7f0000000040)=[0x0], 0x2) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x4, @void}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x10b) read(r5, &(0x7f0000000400)=""/1000, 0xfdef) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) writev(r3, &(0x7f00000006c0), 0x0) 0s ago: executing program 3 (id=1574): mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r0, r1+10000000}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="23000000ffffffffe27f00000100000001010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000000005000000f44fe2dd8410fddc00"/28], 0x50) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x13, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000a00)={0x0, 0x0}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000880), 0x8e5b, r6}, 0x38) syz_open_dev$sg(&(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) socket$inet6_mptcp(0xa, 0x1, 0x106) write(r2, &(0x7f0000000600)='1', 0x1) kernel console output (not intermixed with test programs): m_int80_emulation+0x1a/0x20 [ 317.155131][T10571] RIP: 0023:0xf6ffefec [ 317.155156][T10571] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 317.155164][T10571] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000135 [ 317.155181][T10571] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000000000001 [ 317.155192][T10571] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 317.155201][T10571] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 317.155210][T10571] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 317.155221][T10571] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 317.155242][T10571] [ 317.555352][T10579] 9p: Bad value for 'rfdno' [ 317.718596][ T5745] Bluetooth: hci1: command 0x0c1a tx timeout [ 317.722605][ T5736] Bluetooth: hci3: command 0x0406 tx timeout [ 317.728702][ T5748] Bluetooth: hci2: command 0x0406 tx timeout [ 319.431556][T10639] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1292'. [ 319.575341][T10641] cgroup: Unknown subsys name 'dont_hash' [ 319.797234][ T5736] Bluetooth: hci1: command 0x0c1a tx timeout [ 319.838375][T10644] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1294'. [ 320.066058][ T6564] udevd[6564]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 320.226174][T10655] cgroup: Unknown subsys name 'dont_hash' [ 320.837730][T10665] FAULT_INJECTION: forcing a failure. [ 320.837730][T10665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.844550][T10665] CPU: 0 UID: 0 PID: 10665 Comm: syz.4.1300 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.844569][T10665] Tainted: [L]=SOFTLOCKUP [ 320.844572][T10665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 320.844579][T10665] Call Trace: [ 320.844583][T10665] [ 320.844588][T10665] dump_stack_lvl+0x100/0x190 [ 320.844606][T10665] should_fail_ex.cold+0x5/0xa [ 320.844620][T10665] _copy_from_user+0x2e/0xd0 [ 320.844638][T10665] get_compat_msghdr+0xb3/0x480 [ 320.844650][T10665] ? __pfx_get_compat_msghdr+0x10/0x10 [ 320.844662][T10665] ? __lock_acquire+0x49f/0x1a40 [ 320.844676][T10665] ___sys_recvmsg+0x193/0x1a0 [ 320.844690][T10665] ? __pfx____sys_recvmsg+0x10/0x10 [ 320.844703][T10665] ? find_held_lock+0x2b/0x80 [ 320.844725][T10665] __sys_recvmsg+0x15d/0x210 [ 320.844741][T10665] ? __pfx___sys_recvmsg+0x10/0x10 [ 320.844761][T10665] ? __pfx_ksys_write+0x10/0x10 [ 320.844775][T10665] __do_fast_syscall_32+0xe7/0x970 [ 320.844790][T10665] ? lockdep_hardirqs_on+0x78/0x100 [ 320.844804][T10665] do_fast_syscall_32+0x32/0x70 [ 320.844818][T10665] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.844843][T10665] RIP: 0023:0xf709efec [ 320.844860][T10665] Code: Unable to access opcode bytes at 0xf709efc2. [ 320.844866][T10665] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000174 [ 320.844878][T10665] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 320.844884][T10665] RDX: 0000000000006020 RSI: 0000000000000000 RDI: 0000000000000000 [ 320.844890][T10665] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 320.844895][T10665] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 320.844901][T10665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.844915][T10665] [ 320.877174][ T6238] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 321.131085][T10670] cgroup: Unknown subsys name 'dont_hash' [ 321.149605][ T6238] usb 7-1: device descriptor read/64, error -71 [ 321.339075][T10676] fuse: Unknown parameter 'f0x0000000000000004' [ 321.345254][T10676] netlink: 'syz.4.1306': attribute type 1 has an invalid length. [ 321.351919][T10676] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1306'. [ 321.388084][ T6238] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 321.393834][T10678] FAULT_INJECTION: forcing a failure. [ 321.393834][T10678] name failslab, interval 1, probability 0, space 0, times 0 [ 321.402942][T10678] CPU: 3 UID: 0 PID: 10678 Comm: syz.1.1305 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.402962][T10678] Tainted: [L]=SOFTLOCKUP [ 321.402966][T10678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 321.402973][T10678] Call Trace: [ 321.402978][T10678] [ 321.402982][T10678] dump_stack_lvl+0x100/0x190 [ 321.403015][T10678] should_fail_ex.cold+0x5/0xa [ 321.403029][T10678] should_failslab+0xc2/0x120 [ 321.403046][T10678] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 321.403061][T10678] ? __alloc_skb+0x5b7/0x710 [ 321.403076][T10678] ? __alloc_skb+0x140/0x710 [ 321.403092][T10678] __alloc_skb+0x140/0x710 [ 321.403105][T10678] ? __alloc_skb+0x5b7/0x710 [ 321.403119][T10678] ? __pfx___alloc_skb+0x10/0x10 [ 321.403133][T10678] ? find_held_lock+0x2b/0x80 [ 321.403147][T10678] ? is_bpf_text_address+0x8a/0x1a0 [ 321.403162][T10678] ? is_bpf_text_address+0x8a/0x1a0 [ 321.403177][T10678] ? bpf_ksym_find+0x124/0x1c0 [ 321.403190][T10678] alloc_skb_with_frags+0xdd/0x760 [ 321.403211][T10678] sock_alloc_send_pskb+0x801/0x980 [ 321.403230][T10678] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 321.403247][T10678] ? __lock_acquire+0x49f/0x1a40 [ 321.403259][T10678] __ip_append_data+0x20d3/0x44d0 [ 321.403279][T10678] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 321.403292][T10678] ? find_held_lock+0x2b/0x80 [ 321.403309][T10678] ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750 [ 321.403327][T10678] ? __pfx___ip_append_data+0x10/0x10 [ 321.403341][T10678] ? dst_alloc+0xc0/0x1a0 [ 321.403360][T10678] ip_make_skb+0x28b/0x310 [ 321.403376][T10678] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 321.403392][T10678] ? __pfx_ip_make_skb+0x10/0x10 [ 321.403405][T10678] ? ip_route_output_key_hash+0x14c/0x2b0 [ 321.403425][T10678] ? udp_sendmsg+0x171c/0x2720 [ 321.403439][T10678] udp_sendmsg+0x171c/0x2720 [ 321.403457][T10678] ? __pfx_udp_sendmsg+0x10/0x10 [ 321.403470][T10678] ? __lock_acquire+0x49f/0x1a40 [ 321.403484][T10678] ? __pfx___might_resched+0x10/0x10 [ 321.403504][T10678] ? aa_sk_perm+0x309/0xaa0 [ 321.403521][T10678] ? __pfx_aa_sk_perm+0x10/0x10 [ 321.403538][T10678] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 321.403550][T10678] ? __pfx_udp_sendmsg+0x10/0x10 [ 321.403564][T10678] inet_sendmsg+0x105/0x140 [ 321.403581][T10678] ____sys_sendmsg+0x9c9/0xbe0 [ 321.403592][T10678] ? __pfx_inet_sendmsg+0x10/0x10 [ 321.403609][T10678] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.403624][T10678] ? _kstrtoull+0x13c/0x1f0 [ 321.403637][T10678] ? __pfx__kstrtoull+0x10/0x10 [ 321.403650][T10678] ___sys_sendmsg+0x190/0x1e0 [ 321.403663][T10678] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.403674][T10678] ? __lock_acquire+0x49f/0x1a40 [ 321.403700][T10678] __sys_sendmmsg+0x309/0x440 [ 321.403718][T10678] ? __pfx___sys_sendmmsg+0x10/0x10 [ 321.403732][T10678] ? find_held_lock+0x2b/0x80 [ 321.403749][T10678] ? __mutex_unlock_slowpath+0x35d/0x930 [ 321.403772][T10678] ? fput+0x79/0x100 [ 321.403785][T10678] ? ksys_write+0x1ac/0x250 [ 321.403797][T10678] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 321.403808][T10678] ? lockdep_hardirqs_on+0x78/0x100 [ 321.403822][T10678] __do_fast_syscall_32+0xe7/0x970 [ 321.403835][T10678] ? lockdep_hardirqs_on+0x78/0x100 [ 321.403853][T10678] do_fast_syscall_32+0x32/0x70 [ 321.403867][T10678] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.403881][T10678] RIP: 0023:0xf6ffefec [ 321.403895][T10678] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 321.403900][T10678] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 321.403911][T10678] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080004d00 [ 321.403917][T10678] RDX: 0000000000000300 RSI: 0000000000000fa6 RDI: 0000000000000000 [ 321.403923][T10678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 321.403929][T10678] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 321.403935][T10678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 321.403948][T10678] [ 321.668589][ T6238] usb 7-1: device descriptor read/64, error -71 [ 321.777319][ T6238] usb usb7-port1: attempt power cycle [ 322.126984][ T6238] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 322.147729][ T6238] usb 7-1: device descriptor read/8, error -71 [ 322.313246][T10704] fuse: Unknown parameter 'f0x0000000000000004' [ 322.319275][T10704] netlink: 'syz.3.1315': attribute type 1 has an invalid length. [ 322.323328][T10704] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1315'. [ 322.379123][T10706] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1316'. [ 322.400478][ T6238] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 322.418202][ T6238] usb 7-1: device descriptor read/8, error -71 [ 322.527300][ T6238] usb usb7-port1: unable to enumerate USB device [ 322.687392][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 322.687684][ T42] audit: type=1326 audit(322.589:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10710 comm="syz.4.1318" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709efec code=0x0 [ 322.744540][T10713] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 324.027013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 325.084823][T10735] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!`lü1&›b¯Þ0xUÐÏ”ÎÜr$åG—•µ [ 325.333337][T10741] wg2 speed is unknown, defaulting to 1000 [ 325.339525][T10741] wg2 speed is unknown, defaulting to 1000 [ 325.345641][T10741] wg2 speed is unknown, defaulting to 1000 [ 325.433976][T10741] infiniband syz0: set down [ 325.436498][T10741] infiniband syz0: added wg2 [ 325.450598][T10741] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 325.458604][T10741] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 325.467856][T10741] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 325.497054][T10741] RDS/IB: syz0: added [ 325.499834][T10741] smc: adding ib device syz0 with port count 1 [ 325.503144][T10741] smc: ib device syz0 port 1 has no pnetid [ 325.508970][T10741] wg2 speed is unknown, defaulting to 1000 [ 325.595827][T10741] wg2 speed is unknown, defaulting to 1000 [ 325.624617][ T42] audit: type=1326 audit(325.519:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10752 comm="syz.2.1330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 325.643025][ T42] audit: type=1326 audit(325.519:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10752 comm="syz.2.1330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 325.654500][ T42] audit: type=1326 audit(325.529:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10752 comm="syz.2.1330" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf706efec code=0x7ffc0000 [ 325.666133][ T42] audit: type=1326 audit(325.539:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10752 comm="syz.2.1330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 325.679086][ T42] audit: type=1326 audit(325.539:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10752 comm="syz.2.1330" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf706efec code=0x7ffc0000 [ 325.689376][T10741] wg2 speed is unknown, defaulting to 1000 [ 325.705275][ T42] audit: type=1326 audit(325.539:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10752 comm="syz.2.1330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 325.725452][ T42] audit: type=1326 audit(325.539:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10752 comm="syz.2.1330" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf706efec code=0x7ffc0000 [ 325.743244][ T42] audit: type=1326 audit(325.539:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10752 comm="syz.2.1330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 325.755077][ T42] audit: type=1326 audit(325.539:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10752 comm="syz.2.1330" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706efec code=0x7ffc0000 [ 325.770317][ T9] wg2 speed is unknown, defaulting to 1000 [ 325.774547][ T9] wg2 speed is unknown, defaulting to 1000 [ 325.818877][T10741] wg2 speed is unknown, defaulting to 1000 [ 326.821517][T10765] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 326.848154][ T9] kernel read not supported for file /rfkill (pid: 9 comm: kworker/0:0) [ 327.010910][T10776] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1337'. [ 327.019393][T10774] vlan2: entered promiscuous mode [ 327.022278][T10774] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 327.891507][ T6238] IPVS: starting estimator thread 0... [ 327.987016][T10797] IPVS: using max 27 ests per chain, 64800 per kthread [ 328.766653][T10801] FAULT_INJECTION: forcing a failure. [ 328.766653][T10801] name failslab, interval 1, probability 0, space 0, times 0 [ 328.775077][T10801] CPU: 2 UID: 0 PID: 10801 Comm: syz.4.1342 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.775097][T10801] Tainted: [L]=SOFTLOCKUP [ 328.775101][T10801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 328.775108][T10801] Call Trace: [ 328.775112][T10801] [ 328.775117][T10801] dump_stack_lvl+0x100/0x190 [ 328.775138][T10801] should_fail_ex.cold+0x5/0xa [ 328.775152][T10801] should_failslab+0xc2/0x120 [ 328.775169][T10801] __kmalloc_noprof+0xfc/0x820 [ 328.775183][T10801] ? rcu_is_watching+0x12/0xc0 [ 328.775198][T10801] ? tomoyo_encode2+0xfb/0x3c0 [ 328.775218][T10801] tomoyo_encode2+0xfb/0x3c0 [ 328.775236][T10801] tomoyo_encode+0x29/0x50 [ 328.775252][T10801] tomoyo_realpath_from_path+0x18c/0x690 [ 328.775275][T10801] tomoyo_path_perm+0x276/0x460 [ 328.775289][T10801] ? tomoyo_path_perm+0x262/0x460 [ 328.775304][T10801] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 328.775338][T10801] security_inode_getattr+0x116/0x280 [ 328.775353][T10801] vfs_statx+0x11f/0x3f0 [ 328.775368][T10801] ? __pfx_vfs_statx+0x10/0x10 [ 328.775385][T10801] do_statx+0xf1/0x170 [ 328.775400][T10801] ? __pfx_do_statx+0x10/0x10 [ 328.775423][T10801] ? strncpy_from_user+0x19d/0x2d0 [ 328.775442][T10801] ? do_getname+0x191/0x390 [ 328.775458][T10801] __ia32_sys_statx+0x140/0x1f0 [ 328.775475][T10801] __do_fast_syscall_32+0xe7/0x970 [ 328.775491][T10801] ? lockdep_hardirqs_on+0x78/0x100 [ 328.775506][T10801] do_fast_syscall_32+0x32/0x70 [ 328.775521][T10801] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.775535][T10801] RIP: 0023:0xf709efec [ 328.775550][T10801] Code: Unable to access opcode bytes at 0xf709efc2. [ 328.775556][T10801] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 000000000000017f [ 328.775567][T10801] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800001c0 [ 328.775574][T10801] RDX: 0000000000002000 RSI: 0000000000000800 RDI: 0000000000000000 [ 328.775581][T10801] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 328.775587][T10801] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 328.775593][T10801] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 328.775612][T10801] [ 328.775629][T10801] ERROR: Out of memory at tomoyo_realpath_from_path. [ 329.005748][T10810] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1345'. [ 329.011017][T10808] fuse: Bad value for 'fd' [ 329.119050][T10816] ehci-pci 0000:00:1d.7: remove, state 1 [ 329.128153][T10816] usb usb2: USB disconnect, device number 1 [ 329.133399][T10816] usb 2-1: USB disconnect, device number 2 [ 329.261659][T10816] FAULT_INJECTION: forcing a failure. [ 329.261659][T10816] name failslab, interval 1, probability 0, space 0, times 0 [ 329.269732][T10816] CPU: 2 UID: 0 PID: 10816 Comm: syz.3.1346 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.269750][T10816] Tainted: [L]=SOFTLOCKUP [ 329.269754][T10816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 329.269761][T10816] Call Trace: [ 329.269765][T10816] [ 329.269770][T10816] dump_stack_lvl+0x100/0x190 [ 329.269789][T10816] should_fail_ex.cold+0x5/0xa [ 329.269806][T10816] should_failslab+0xc2/0x120 [ 329.269823][T10816] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 329.269838][T10816] ? __pfx_vsnprintf+0x10/0x10 [ 329.269851][T10816] ? stack_depot_save_flags+0x479/0x9d0 [ 329.269870][T10816] ? kasprintf+0xc7/0x100 [ 329.269883][T10816] kvasprintf+0xbc/0x150 [ 329.269893][T10816] ? __pfx_kvasprintf+0x10/0x10 [ 329.269910][T10816] kasprintf+0xc7/0x100 [ 329.269919][T10816] ? __pfx_kasprintf+0x10/0x10 [ 329.269931][T10816] ? check_prev_add+0xfe/0xe60 [ 329.269948][T10816] ? check_prev_add+0xfe/0xe60 [ 329.269967][T10816] ? __pfx_input_devnode+0x10/0x10 [ 329.269983][T10816] device_get_devnode+0x166/0x2c0 [ 329.270102][T10816] devtmpfs_delete_node+0xc8/0x1d0 [ 329.270129][T10816] ? __pfx_devtmpfs_delete_node+0x10/0x10 [ 329.270154][T10816] ? kobject_put+0xb9/0x640 [ 329.270171][T10816] ? __pfx_klist_children_put+0x10/0x10 [ 329.270184][T10816] ? klist_children_put+0x49/0x60 [ 329.270197][T10816] ? klist_put+0x10a/0x1d0 [ 329.270212][T10816] device_del+0x717/0x9b0 [ 329.270228][T10816] ? __pfx_device_del+0x10/0x10 [ 329.270247][T10816] cdev_device_del+0x1d/0x110 [ 329.270273][T10816] mousedev_disconnect+0x1c2/0x380 [ 329.270292][T10816] __input_unregister_device+0x1da/0x4d0 [ 329.270310][T10816] input_unregister_device+0xc2/0x110 [ 329.270321][T10816] hidinput_disconnect+0x8d/0x2e0 [ 329.270349][T10816] hid_disconnect+0x14d/0x1b0 [ 329.270363][T10816] hid_device_remove+0x1b2/0x270 [ 329.270377][T10816] ? __pfx_hid_device_remove+0x10/0x10 [ 329.270392][T10816] device_remove+0xcb/0x180 [ 329.270408][T10816] device_release_driver_internal+0x44e/0x620 [ 329.270428][T10816] bus_remove_device+0x2bc/0x560 [ 329.270443][T10816] ? __pfx_bus_remove_device+0x10/0x10 [ 329.270456][T10816] ? __pfx_device_remove_attrs+0x10/0x10 [ 329.270475][T10816] device_del+0x376/0x9b0 [ 329.270491][T10816] ? __pfx_device_del+0x10/0x10 [ 329.270505][T10816] ? do_raw_spin_lock+0x128/0x260 [ 329.270517][T10816] ? find_held_lock+0x2b/0x80 [ 329.270533][T10816] hid_destroy_device+0x19c/0x240 [ 329.270549][T10816] usbhid_disconnect+0xa0/0xe0 [ 329.270563][T10816] usb_unbind_interface+0x1dd/0x9e0 [ 329.270610][T10816] ? __pfx_usb_unbind_interface+0x10/0x10 [ 329.270630][T10816] device_remove+0x12a/0x180 [ 329.270645][T10816] device_release_driver_internal+0x44e/0x620 [ 329.270665][T10816] bus_remove_device+0x2bc/0x560 [ 329.270679][T10816] ? __pfx_bus_remove_device+0x10/0x10 [ 329.270692][T10816] ? __pfx_device_remove_attrs+0x10/0x10 [ 329.270711][T10816] device_del+0x376/0x9b0 [ 329.270727][T10816] ? __pfx_device_del+0x10/0x10 [ 329.270741][T10816] ? kobject_put+0xb9/0x640 [ 329.270760][T10816] usb_disable_device+0x367/0x810 [ 329.270781][T10816] usb_disconnect+0x2e2/0x9a0 [ 329.270795][T10816] ? _raw_spin_unlock_irq+0x23/0x50 [ 329.270812][T10816] usb_disconnect+0x28e/0x9a0 [ 329.270830][T10816] usb_remove_hcd.cold+0x1ae/0x401 [ 329.270846][T10816] ? __pfx_usb_remove_hcd+0x10/0x10 [ 329.270858][T10816] ? for_each_companion+0x1d6/0x240 [ 329.270874][T10816] ? __pfx_ehci_remove+0x10/0x10 [ 329.270892][T10816] usb_hcd_pci_remove+0x22a/0x300 [ 329.270910][T10816] pci_device_remove+0xb2/0x1d0 [ 329.270930][T10816] ? __pfx_pci_device_remove+0x10/0x10 [ 329.270944][T10816] device_remove+0xcb/0x180 [ 329.270958][T10816] device_release_driver_internal+0x44e/0x620 [ 329.270978][T10816] unbind_store+0xf8/0x110 [ 329.270990][T10816] ? __pfx_unbind_store+0x10/0x10 [ 329.271003][T10816] drv_attr_store+0x74/0xb0 [ 329.271014][T10816] ? __pfx_drv_attr_store+0x10/0x10 [ 329.271025][T10816] sysfs_kf_write+0xf2/0x150 [ 329.271043][T10816] kernfs_fop_write_iter+0x3e0/0x5f0 [ 329.271056][T10816] ? __pfx_sysfs_kf_write+0x10/0x10 [ 329.271073][T10816] vfs_write+0x6ac/0x1050 [ 329.271085][T10816] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 329.271100][T10816] ? __pfx_vfs_write+0x10/0x10 [ 329.271110][T10816] ? find_held_lock+0x2b/0x80 [ 329.271133][T10816] ksys_write+0x12a/0x250 [ 329.271143][T10816] ? __pfx_ksys_write+0x10/0x10 [ 329.271153][T10816] ? ksys_write+0x1ac/0x250 [ 329.271163][T10816] ? __pfx_ksys_write+0x10/0x10 [ 329.271176][T10816] __do_fast_syscall_32+0xe7/0x970 [ 329.271190][T10816] ? lockdep_hardirqs_on+0x78/0x100 [ 329.271205][T10816] do_fast_syscall_32+0x32/0x70 [ 329.271219][T10816] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 329.271233][T10816] RIP: 0023:0xf7f67fec [ 329.271249][T10816] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 329.271254][T10816] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 329.271265][T10816] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000240 [ 329.271271][T10816] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 329.271277][T10816] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 329.271282][T10816] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 329.271288][T10816] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 329.271307][T10816] [ 329.611838][T10825] binder: 10824:10825 unknown command 4294967295 [ 329.615534][T10825] binder: 10824:10825 ioctl c0306201 80004a40 returned -22 [ 329.664030][ T5735] udevd[5735]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 329.712235][ T6564] udevd[6564]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 329.854478][T10816] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 329.869392][T10828] cgroup: Unknown subsys name 'dont_hash' [ 329.896152][T10813] uhci_hcd 0000:00:1d.0: remove, state 1 [ 329.996922][ T9] hub 1-0:1.0: activate --> -108 [ 330.004164][T10813] usb usb1: USB disconnect, device number 1 [ 330.072277][T10813] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 330.736998][ T6238] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 330.742000][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'. [ 330.749589][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'. [ 330.755045][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'. [ 330.761241][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'. [ 330.767728][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'. [ 330.777409][T10836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'. [ 330.887005][ T6238] usb 9-1: device descriptor read/64, error -71 [ 331.125733][T10850] 9p: Bad value for 'rfdno' [ 331.137897][ T6238] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 331.286935][ T6238] usb 9-1: device descriptor read/64, error -71 [ 331.408924][ T6238] usb usb9-port1: attempt power cycle [ 331.747341][ T6238] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 331.765235][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 331.765253][ T42] audit: type=1800 audit(331.659:59): pid=10846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1355" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0 [ 331.796958][ T6238] usb 9-1: device descriptor read/8, error -71 [ 331.864390][T10854] FAULT_INJECTION: forcing a failure. [ 331.864390][T10854] name failslab, interval 1, probability 0, space 0, times 0 [ 331.877167][T10854] CPU: 1 UID: 0 PID: 10854 Comm: syz.3.1358 Tainted: G L syzkaller #0 PREEMPT(full) [ 331.877187][T10854] Tainted: [L]=SOFTLOCKUP [ 331.877191][T10854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 331.877197][T10854] Call Trace: [ 331.877202][T10854] [ 331.877207][T10854] dump_stack_lvl+0x100/0x190 [ 331.877226][T10854] should_fail_ex.cold+0x5/0xa [ 331.877239][T10854] should_failslab+0xc2/0x120 [ 331.877255][T10854] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 331.877270][T10854] ? __kasan_kmalloc+0xaa/0xb0 [ 331.877284][T10854] ? unix_domain_find+0xad/0x200 [ 331.877303][T10854] kstrdup+0x51/0xe0 [ 331.877316][T10854] unix_domain_find+0xad/0x200 [ 331.877331][T10854] ip_map_parse+0x2db/0x470 [ 331.877346][T10854] ? __pfx_ip_map_parse+0x10/0x10 [ 331.877365][T10854] ? find_held_lock+0x2b/0x80 [ 331.877379][T10854] ? __might_fault+0xc5/0x140 [ 331.877397][T10854] cache_do_downcall+0xc3/0x130 [ 331.877413][T10854] cache_write_procfs+0xfb/0x170 [ 331.877428][T10854] ? __pfx_cache_write_procfs+0x10/0x10 [ 331.877443][T10854] proc_reg_write+0x240/0x330 [ 331.877457][T10854] vfs_write+0x2aa/0x1050 [ 331.877469][T10854] ? __pfx_proc_reg_write+0x10/0x10 [ 331.877481][T10854] ? __pfx_vfs_write+0x10/0x10 [ 331.877490][T10854] ? find_held_lock+0x2b/0x80 [ 331.877504][T10854] ? __fget_files+0x215/0x3d0 [ 331.877518][T10854] ? __fget_files+0x21f/0x3d0 [ 331.877532][T10854] ksys_write+0x12a/0x250 [ 331.877542][T10854] ? __pfx_ksys_write+0x10/0x10 [ 331.877551][T10854] ? ksys_write+0x1ac/0x250 [ 331.877561][T10854] ? __pfx_ksys_write+0x10/0x10 [ 331.877574][T10854] __do_fast_syscall_32+0xe7/0x970 [ 331.877589][T10854] ? lockdep_hardirqs_on+0x78/0x100 [ 331.877604][T10854] do_fast_syscall_32+0x32/0x70 [ 331.877618][T10854] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.877631][T10854] RIP: 0023:0xf7f67fec [ 331.877645][T10854] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 331.877650][T10854] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 331.877661][T10854] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440 [ 331.877668][T10854] RDX: 0000000000000022 RSI: 0000000000000000 RDI: 0000000000000000 [ 331.877674][T10854] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 331.877679][T10854] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 331.877685][T10854] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 331.877699][T10854] [ 332.079825][T10861] FAULT_INJECTION: forcing a failure. [ 332.079825][T10861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.086608][T10861] CPU: 1 UID: 0 PID: 10861 Comm: syz.2.1360 Tainted: G L syzkaller #0 PREEMPT(full) [ 332.086635][T10861] Tainted: [L]=SOFTLOCKUP [ 332.086640][T10861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 332.086650][T10861] Call Trace: [ 332.086655][T10861] [ 332.086659][T10861] dump_stack_lvl+0x100/0x190 [ 332.086677][T10861] should_fail_ex.cold+0x5/0xa [ 332.086690][T10861] _copy_from_user+0x2e/0xd0 [ 332.086709][T10861] get_compat_msghdr+0xb3/0x480 [ 332.086722][T10861] ? __pfx_get_compat_msghdr+0x10/0x10 [ 332.086737][T10861] ___sys_sendmsg+0x1b6/0x1e0 [ 332.086752][T10861] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.086782][T10861] ? find_held_lock+0x2b/0x80 [ 332.086808][T10861] __sys_sendmsg+0x160/0x210 [ 332.086824][T10861] ? __pfx___sys_sendmsg+0x10/0x10 [ 332.086843][T10861] ? __pfx_ksys_write+0x10/0x10 [ 332.086857][T10861] __do_fast_syscall_32+0xe7/0x970 [ 332.086872][T10861] ? lockdep_hardirqs_on+0x78/0x100 [ 332.086886][T10861] do_fast_syscall_32+0x32/0x70 [ 332.086900][T10861] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 332.086918][T10861] RIP: 0023:0xf706efec [ 332.086932][T10861] Code: Unable to access opcode bytes at 0xf706efc2. [ 332.086937][T10861] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 332.086948][T10861] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000540 [ 332.086954][T10861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 332.086960][T10861] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 332.086966][T10861] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 332.086972][T10861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 332.086985][T10861] [ 332.097013][ T6238] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 332.218290][T10867] 9pnet_virtio: no channels available for device syz [ 332.218303][ T6238] usb 9-1: device descriptor read/8, error -71 [ 332.222774][T10867] xt_policy: output policy not valid in PREROUTING and INPUT [ 332.269552][T10870] cgroup: Unknown subsys name 'dont_hash' [ 332.339101][ T6238] usb usb9-port1: unable to enumerate USB device [ 332.405534][T10879] syz.2.1367 (10879) used greatest stack depth: 19104 bytes left [ 333.379467][T10890] FAULT_INJECTION: forcing a failure. [ 333.379467][T10890] name failslab, interval 1, probability 0, space 0, times 0 [ 333.390674][T10890] CPU: 1 UID: 0 PID: 10890 Comm: syz.2.1372 Tainted: G L syzkaller #0 PREEMPT(full) [ 333.390703][T10890] Tainted: [L]=SOFTLOCKUP [ 333.390709][T10890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 333.390719][T10890] Call Trace: [ 333.390725][T10890] [ 333.390732][T10890] dump_stack_lvl+0x100/0x190 [ 333.390759][T10890] should_fail_ex.cold+0x5/0xa [ 333.390779][T10890] should_failslab+0xc2/0x120 [ 333.390804][T10890] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 333.390829][T10890] ? nvmf_parse_options+0x3e5/0x1f80 [ 333.390855][T10890] kstrdup+0x51/0xe0 [ 333.390876][T10890] nvmf_parse_options+0x3e5/0x1f80 [ 333.390910][T10890] ? __pfx_nvmf_parse_options+0x10/0x10 [ 333.390963][T10890] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 333.390983][T10890] ? nvmf_dev_write+0x14c/0xb60 [ 333.391011][T10890] nvmf_dev_write+0x16c/0xb60 [ 333.391039][T10890] vfs_write+0x2aa/0x1050 [ 333.391057][T10890] ? __pfx_nvmf_dev_write+0x10/0x10 [ 333.391082][T10890] ? __pfx_vfs_write+0x10/0x10 [ 333.391096][T10890] ? find_held_lock+0x2b/0x80 [ 333.391117][T10890] ? __fget_files+0x215/0x3d0 [ 333.391132][T10890] ? __fget_files+0x215/0x3d0 [ 333.391152][T10890] ? __fget_files+0x21f/0x3d0 [ 333.391173][T10890] ksys_write+0x12a/0x250 [ 333.391189][T10890] ? __pfx_ksys_write+0x10/0x10 [ 333.391203][T10890] ? ksys_write+0x1ac/0x250 [ 333.391217][T10890] ? __pfx_ksys_write+0x10/0x10 [ 333.391238][T10890] __do_fast_syscall_32+0xe7/0x970 [ 333.391261][T10890] ? lockdep_hardirqs_on+0x78/0x100 [ 333.391283][T10890] do_fast_syscall_32+0x32/0x70 [ 333.391304][T10890] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 333.391326][T10890] RIP: 0023:0xf706efec [ 333.391346][T10890] Code: Unable to access opcode bytes at 0xf706efc2. [ 333.391359][T10890] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 333.391371][T10890] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000800 [ 333.391377][T10890] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.391383][T10890] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 333.391389][T10890] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 333.391395][T10890] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 333.391409][T10890] [ 333.820522][T10897] cgroup: Unknown subsys name 'dont_hash' [ 333.878972][T10899] fuse: Unknown parameter 'fd0x0000000000000004' [ 333.896426][T10899] netlink: 'syz.3.1375': attribute type 1 has an invalid length. [ 333.902336][T10899] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1375'. [ 334.384161][T10904] FAULT_INJECTION: forcing a failure. [ 334.384161][T10904] name failslab, interval 1, probability 0, space 0, times 0 [ 334.391723][T10904] CPU: 2 UID: 0 PID: 10904 Comm: syz.1.1377 Tainted: G L syzkaller #0 PREEMPT(full) [ 334.391742][T10904] Tainted: [L]=SOFTLOCKUP [ 334.391746][T10904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 334.391752][T10904] Call Trace: [ 334.391756][T10904] [ 334.391761][T10904] dump_stack_lvl+0x100/0x190 [ 334.391779][T10904] should_fail_ex.cold+0x5/0xa [ 334.391792][T10904] should_failslab+0xc2/0x120 [ 334.391809][T10904] kmem_cache_alloc_noprof+0x91/0x6a0 [ 334.391823][T10904] ? trace_kmem_cache_alloc+0xdd/0x100 [ 334.391838][T10904] ? security_file_alloc+0x34/0x2c0 [ 334.391856][T10904] security_file_alloc+0x34/0x2c0 [ 334.391870][T10904] init_file+0x95/0x480 [ 334.391883][T10904] alloc_empty_file+0x79/0x1c0 [ 334.391897][T10904] path_openat+0xe7/0x4280 [ 334.391908][T10904] ? kasan_save_track+0x14/0x30 [ 334.391921][T10904] ? __kasan_slab_alloc+0x89/0x90 [ 334.391934][T10904] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 334.391947][T10904] ? do_getname+0x35/0x390 [ 334.391959][T10904] ? do_sys_openat2+0xc7/0x1e0 [ 334.391972][T10904] ? __ia32_compat_sys_openat+0x12d/0x210 [ 334.391986][T10904] ? __do_fast_syscall_32+0xe7/0x970 [ 334.392006][T10904] ? __pfx_path_openat+0x10/0x10 [ 334.392020][T10904] do_file_open+0x20e/0x430 [ 334.392030][T10904] ? __lock_acquire+0x49f/0x1a40 [ 334.392042][T10904] ? __pfx_do_file_open+0x10/0x10 [ 334.392062][T10904] ? _raw_spin_unlock+0x28/0x50 [ 334.392073][T10904] ? alloc_fd+0x471/0x7a0 [ 334.392087][T10904] do_sys_openat2+0x10f/0x1e0 [ 334.392102][T10904] ? __pfx_do_sys_openat2+0x10/0x10 [ 334.392118][T10904] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 334.392134][T10904] __ia32_compat_sys_openat+0x12d/0x210 [ 334.392150][T10904] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 334.392165][T10904] ? fput+0x79/0x100 [ 334.392177][T10904] ? ksys_write+0x1ac/0x250 [ 334.392187][T10904] ? __pfx_ksys_write+0x10/0x10 [ 334.392199][T10904] __do_fast_syscall_32+0xe7/0x970 [ 334.392212][T10904] ? lockdep_hardirqs_on+0x78/0x100 [ 334.392226][T10904] do_fast_syscall_32+0x32/0x70 [ 334.392241][T10904] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 334.392254][T10904] RIP: 0023:0xf6ffefec [ 334.392268][T10904] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 334.392273][T10904] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 334.392284][T10904] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000380 [ 334.392291][T10904] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 334.392297][T10904] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 334.392302][T10904] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 334.392308][T10904] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 334.392321][T10904] [ 334.580995][T10906] 9pnet_virtio: no channels available for device syz [ 335.035418][T10916] tipc: Started in network mode [ 335.038783][T10916] tipc: Node identity 264e2797cbd8, cluster identity 4711 [ 335.043659][T10916] tipc: Enabled bearer , priority 0 [ 335.048276][T10916] syzkaller0: entered promiscuous mode [ 335.051499][T10916] syzkaller0: entered allmulticast mode [ 335.069218][T10916] FAULT_INJECTION: forcing a failure. [ 335.069218][T10916] name failslab, interval 1, probability 0, space 0, times 0 [ 335.075789][T10916] CPU: 3 UID: 0 PID: 10916 Comm: syz.4.1382 Tainted: G L syzkaller #0 PREEMPT(full) [ 335.075809][T10916] Tainted: [L]=SOFTLOCKUP [ 335.075813][T10916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 335.075819][T10916] Call Trace: [ 335.075824][T10916] [ 335.075829][T10916] dump_stack_lvl+0x100/0x190 [ 335.075849][T10916] should_fail_ex.cold+0x5/0xa [ 335.075862][T10916] should_failslab+0xc2/0x120 [ 335.075879][T10916] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 335.075894][T10916] ? __alloc_skb+0x140/0x710 [ 335.075912][T10916] __alloc_skb+0x140/0x710 [ 335.075926][T10916] ? __alloc_skb+0x5b7/0x710 [ 335.075940][T10916] ? __pfx___alloc_skb+0x10/0x10 [ 335.075954][T10916] ? if_nlmsg_size+0x4b/0xd80 [ 335.075973][T10916] rtmsg_ifinfo_build_skb+0x81/0x260 [ 335.075987][T10916] rtnetlink_event+0x137/0x1f0 [ 335.076000][T10916] notifier_call_chain+0x99/0x3f0 [ 335.076018][T10916] call_netdevice_notifiers_info+0xbe/0x110 [ 335.076032][T10916] netif_set_mtu_ext+0x48b/0x7b0 [ 335.076048][T10916] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 335.076065][T10916] ? __lock_acquire+0x49f/0x1a40 [ 335.076079][T10916] netif_set_mtu+0x9c/0x130 [ 335.076093][T10916] ? __pfx_netif_set_mtu+0x10/0x10 [ 335.076107][T10916] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 335.076126][T10916] ? full_name_hash+0xbc/0x100 [ 335.076142][T10916] dev_set_mtu+0xb2/0x260 [ 335.076152][T10916] dev_ifsioc+0x21b/0x1f10 [ 335.076169][T10916] ? __pfx_dev_ifsioc+0x10/0x10 [ 335.076184][T10916] ? __pfx___mutex_lock+0x10/0x10 [ 335.076204][T10916] ? dev_load+0x8e/0x240 [ 335.076217][T10916] ? dev_load+0x8e/0x240 [ 335.076243][T10916] dev_ioctl+0x342/0x1070 [ 335.076259][T10916] sock_do_ioctl+0x1a0/0x280 [ 335.076271][T10916] ? __pfx_sock_do_ioctl+0x10/0x10 [ 335.076285][T10916] ? do_vfs_ioctl+0x226/0x13e0 [ 335.076301][T10916] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 335.076318][T10916] compat_sock_ioctl+0x568/0x760 [ 335.076333][T10916] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 335.076348][T10916] ? hook_file_ioctl_common+0x140/0x440 [ 335.076368][T10916] ? __fget_files+0x21f/0x3d0 [ 335.076381][T10916] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 335.076394][T10916] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 335.076412][T10916] __do_fast_syscall_32+0xe7/0x970 [ 335.076426][T10916] ? lockdep_hardirqs_on+0x78/0x100 [ 335.076440][T10916] do_fast_syscall_32+0x32/0x70 [ 335.076454][T10916] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 335.076468][T10916] RIP: 0023:0xf709efec [ 335.076500][T10916] Code: Unable to access opcode bytes at 0xf709efc2. [ 335.076505][T10916] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 335.076516][T10916] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000008922 [ 335.076523][T10916] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 335.076528][T10916] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 335.076534][T10916] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 335.076540][T10916] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 335.076554][T10916] [ 335.241184][T10916] tipc: Resetting bearer [ 335.246372][T10915] tipc: Resetting bearer [ 335.268817][T10915] tipc: Disabling bearer [ 335.621511][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1383'. [ 335.807031][T10913] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 335.842918][T10926] 9p: Bad value for 'rfdno' [ 336.517165][T10938] cgroup: Unknown subsys name 'dont_hash' [ 336.996938][ T5736] Bluetooth: hci3: command 0x0406 tx timeout [ 337.481513][T10948] netlink: 'syz.4.1389': attribute type 4 has an invalid length. [ 337.517390][T10948] netlink: 'syz.4.1389': attribute type 4 has an invalid length. [ 337.580307][T10948] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.584294][T10948] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.677814][T10948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.690407][T10948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.823476][T10948] vlan2: left promiscuous mode [ 337.826101][T10948] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 337.850621][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.859867][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.881548][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.895882][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.953296][T10953] tipc: Enabled bearer , priority 0 [ 337.989382][T10953] syzkaller0: entered promiscuous mode [ 337.993160][T10953] syzkaller0: entered allmulticast mode [ 338.021761][T10952] tipc: Resetting bearer [ 338.201834][T10952] tipc: Disabling bearer [ 340.802521][T10991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1404'. [ 340.854799][T10990] tipc: Started in network mode [ 340.857704][T10990] tipc: Node identity dac41ca163da, cluster identity 4711 [ 340.861560][T10990] tipc: Enabled bearer , priority 0 [ 340.866178][T10990] syzkaller0: entered promiscuous mode [ 340.869843][T10990] syzkaller0: entered allmulticast mode [ 340.907811][T10990] tipc: Resetting bearer [ 340.918392][T10989] tipc: Resetting bearer [ 340.942934][T10989] tipc: Disabling bearer [ 341.900532][T11010] FAULT_INJECTION: forcing a failure. [ 341.900532][T11010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.910059][T11010] CPU: 2 UID: 0 PID: 11010 Comm: syz.1.1410 Tainted: G L syzkaller #0 PREEMPT(full) [ 341.910080][T11010] Tainted: [L]=SOFTLOCKUP [ 341.910084][T11010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 341.910091][T11010] Call Trace: [ 341.910096][T11010] [ 341.910101][T11010] dump_stack_lvl+0x100/0x190 [ 341.910120][T11010] should_fail_ex.cold+0x5/0xa [ 341.910134][T11010] strncpy_from_user+0x3b/0x2d0 [ 341.910155][T11010] do_getname+0x78/0x390 [ 341.910171][T11010] __ia32_sys_renameat2+0xd8/0x140 [ 341.910187][T11010] __do_fast_syscall_32+0xe7/0x970 [ 341.910203][T11010] ? lockdep_hardirqs_on+0x78/0x100 [ 341.910218][T11010] do_fast_syscall_32+0x32/0x70 [ 341.910233][T11010] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 341.910248][T11010] RIP: 0023:0xf6ffefec [ 341.910274][T11010] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 341.910281][T11010] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000161 [ 341.910293][T11010] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000480 [ 341.910300][T11010] RDX: 00000000ffffff9c RSI: 00000000800004c0 RDI: 0000000000000002 [ 341.910306][T11010] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 341.910313][T11010] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 341.910319][T11010] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 341.910334][T11010] [ 342.187637][T11018] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 342.191084][T11018] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 342.194580][T11018] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 342.198444][T11018] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 342.446342][T11024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1415'. [ 342.556154][T11026] fuse: Unknown parameter 'fd0x0000000000000004' [ 342.570095][T11026] netlink: 'syz.1.1416': attribute type 1 has an invalid length. [ 342.582343][T11026] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1416'. [ 342.668341][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 342.682705][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 342.694166][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x8c9d instead [ 342.702963][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x8278 instead [ 342.710650][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 342.719327][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 342.727877][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 342.747696][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 342.752847][T11033] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 342.756488][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 342.772009][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 342.779742][T11028] jffs2: Further such events for this erase block will not be printed [ 342.786383][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 342.801588][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 342.815167][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x8c9d instead [ 342.823017][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x8278 instead [ 342.830795][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 342.840439][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 342.848341][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 342.855914][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 342.865513][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 342.871428][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 342.879398][T11028] jffs2: Further such events for this erase block will not be printed [ 342.884257][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 342.890134][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 342.895801][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x8c9d instead [ 342.901624][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x8278 instead [ 342.908276][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 342.913917][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 342.923160][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x8c9d instead [ 342.929379][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x8278 instead [ 342.935166][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 342.941216][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 342.947062][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x8c9d instead [ 342.959995][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x8278 instead [ 342.967749][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 342.976992][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 342.986936][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x8c9d instead [ 342.994069][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x8278 instead [ 343.000714][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 343.008550][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 343.014204][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x8c9d instead [ 343.020098][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x8278 instead [ 343.025732][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 343.033473][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 343.039262][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x8c9d instead [ 343.044944][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x8278 instead [ 343.051272][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 343.064449][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 343.077001][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x8c9d instead [ 343.087287][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x8278 instead [ 343.093251][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 343.099093][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 343.104797][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x8c9d instead [ 343.110704][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x8278 instead [ 343.116326][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 343.122458][T11040] FAULT_INJECTION: forcing a failure. [ 343.122458][T11040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.130406][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 343.136014][T11040] CPU: 1 UID: 0 PID: 11040 Comm: syz.2.1420 Tainted: G L syzkaller #0 PREEMPT(full) [ 343.136032][T11040] Tainted: [L]=SOFTLOCKUP [ 343.136035][T11040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 343.136042][T11040] Call Trace: [ 343.136047][T11040] [ 343.136052][T11040] dump_stack_lvl+0x100/0x190 [ 343.136071][T11040] should_fail_ex.cold+0x5/0xa [ 343.136085][T11040] _copy_from_iter+0x1f4/0x1690 [ 343.136106][T11040] ? __asan_memset+0x23/0x50 [ 343.136120][T11040] ? __pfx__copy_from_iter+0x10/0x10 [ 343.136136][T11040] ? __pfx___alloc_skb+0x10/0x10 [ 343.136157][T11040] netlink_sendmsg+0x808/0xda0 [ 343.136173][T11040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.136188][T11040] ? apparmor_socket_sendmsg+0x15b/0x270 [ 343.136202][T11040] ____sys_sendmsg+0xa4d/0xbe0 [ 343.136214][T11040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.136227][T11040] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.136245][T11040] ___sys_sendmsg+0x190/0x1e0 [ 343.136258][T11040] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.136277][T11040] ? find_held_lock+0x2b/0x80 [ 343.136300][T11040] __sys_sendmsg+0x160/0x210 [ 343.136322][T11040] ? __pfx___sys_sendmsg+0x10/0x10 [ 343.136341][T11040] ? __pfx_ksys_write+0x10/0x10 [ 343.136354][T11040] __do_fast_syscall_32+0xe7/0x970 [ 343.136369][T11040] ? lockdep_hardirqs_on+0x78/0x100 [ 343.136383][T11040] do_fast_syscall_32+0x32/0x70 [ 343.136397][T11040] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 343.136411][T11040] RIP: 0023:0xf706efec [ 343.136427][T11040] Code: Unable to access opcode bytes at 0xf706efc2. [ 343.136432][T11040] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 343.136455][T11040] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080 [ 343.136462][T11040] RDX: 0000000024004804 RSI: 0000000000000000 RDI: 0000000000000000 [ 343.136468][T11040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 343.136473][T11040] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 343.136479][T11040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 343.136493][T11040] [ 343.136664][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x8c9d instead [ 343.266957][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x8278 instead [ 343.274756][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 343.283396][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 343.293110][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x8c9d instead [ 343.300821][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x8278 instead [ 343.324304][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 343.334573][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 343.343114][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x8c9d instead [ 343.352526][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x8278 instead [ 343.407804][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 343.425509][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 343.437164][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x8c9d instead [ 343.443188][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x8278 instead [ 343.457296][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 343.531320][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 343.550209][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x8c9d instead [ 343.555585][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x8278 instead [ 343.562756][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 343.570131][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 343.575691][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x8c9d instead [ 343.582552][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x8278 instead [ 343.602393][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 343.610035][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 343.615495][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x8c9d instead [ 343.642576][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x8278 instead [ 343.650315][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 343.661499][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 343.672381][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x8c9d instead [ 343.684753][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x8278 instead [ 343.696527][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 343.709637][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 343.715234][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x8c9d instead [ 343.727412][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x8278 instead [ 343.734879][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 343.745358][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 343.755870][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x8c9d instead [ 343.768268][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x8278 instead [ 343.775952][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 343.790583][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 343.796783][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x8c9d instead [ 343.809984][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x8278 instead [ 343.816455][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 343.843883][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 343.857880][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x8c9d instead [ 343.863365][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x8278 instead [ 343.898222][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 343.903916][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 343.911063][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x8c9d instead [ 343.916502][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x8278 instead [ 343.923592][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 343.929218][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 343.934702][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x8c9d instead [ 343.941042][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x8278 instead [ 343.946511][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 343.952135][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 343.957686][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x8c9d instead [ 343.963100][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x8278 instead [ 343.968694][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 343.974086][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 343.979655][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x8c9d instead [ 343.985055][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x8278 instead [ 343.985215][T11052] fuse: Bad value for 'fd' [ 343.991104][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 344.000348][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 344.007224][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x8c9d instead [ 344.012896][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x8278 instead [ 344.018763][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 344.024409][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 344.031026][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x8c9d instead [ 344.037817][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x8278 instead [ 344.044207][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 344.050462][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 344.056787][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x8c9d instead [ 344.063540][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x8278 instead [ 344.070253][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 344.076360][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 344.081984][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x8c9d instead [ 344.089518][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x8278 instead [ 344.097062][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 344.106202][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 344.116976][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x8c9d instead [ 344.125726][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x8278 instead [ 344.132146][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 344.139074][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 344.145017][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x8c9d instead [ 344.152036][T11028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x8278 instead [ 344.159000][T11028] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 344.163872][T11028] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 344.196971][ T5736] Bluetooth: hci3: command 0x0406 tx timeout [ 344.200865][ T5748] Bluetooth: hci0: command 0x0406 tx timeout [ 344.205071][ T5094] Bluetooth: hci2: command 0x0406 tx timeout [ 344.277733][ T5748] Bluetooth: hci1: command 0x0c1a tx timeout [ 344.292842][T11055] syz_tun: entered allmulticast mode [ 344.330752][T11055] netlink: Failed to add € helper -22 [ 344.334950][T11055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.366395][T11054] syz_tun: left allmulticast mode [ 344.559879][T11063] fuse: Unknown parameter 'fd0x0000000000000004' [ 344.579104][T11063] netlink: 'syz.2.1425': attribute type 1 has an invalid length. [ 344.592857][T11063] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1425'. [ 344.780988][T11064] cgroup: Unknown subsys name 'dont_hash' [ 345.144942][T11078] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1431'. [ 345.374492][T11088] overlay: ./file1 is not a directory [ 345.597755][T11097] fuse: Unknown parameter 'fd0x0000000000000004' [ 345.603052][T11097] netlink: 'syz.2.1437': attribute type 1 has an invalid length. [ 345.613193][T11097] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1437'. [ 345.728252][T11101] nvme_fabrics: unknown parameter or missing value 'tran%port=fc' in ctrl creation request [ 345.734877][T11101] 9pnet_virtio: no channels available for device 127.0.0.1 [ 345.803837][T11109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1441'. [ 345.856190][ T42] audit: type=1326 audit(345.749:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11110 comm="syz.4.1442" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709efec code=0x0 [ 346.401129][T11120] cgroup: Unknown subsys name 'dont_hash' [ 346.902422][T11130] FAULT_INJECTION: forcing a failure. [ 346.902422][T11130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.915017][T11130] CPU: 0 UID: 0 PID: 11130 Comm: syz.4.1446 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.915048][T11130] Tainted: [L]=SOFTLOCKUP [ 346.915054][T11130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 346.915063][T11130] Call Trace: [ 346.915070][T11130] [ 346.915077][T11130] dump_stack_lvl+0x100/0x190 [ 346.915104][T11130] should_fail_ex.cold+0x5/0xa [ 346.915125][T11130] _copy_from_iter+0x1f4/0x1690 [ 346.915154][T11130] ? __asan_memset+0x23/0x50 [ 346.915176][T11130] ? __pfx__copy_from_iter+0x10/0x10 [ 346.915199][T11130] ? __pfx___alloc_skb+0x10/0x10 [ 346.915240][T11130] netlink_sendmsg+0x808/0xda0 [ 346.915265][T11130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.915287][T11130] ? apparmor_socket_sendmsg+0x15b/0x270 [ 346.915310][T11130] ____sys_sendmsg+0xa4d/0xbe0 [ 346.915328][T11130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.915349][T11130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.915376][T11130] ___sys_sendmsg+0x190/0x1e0 [ 346.915397][T11130] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.915427][T11130] ? find_held_lock+0x2b/0x80 [ 346.915462][T11130] __sys_sendmsg+0x160/0x210 [ 346.915486][T11130] ? __pfx___sys_sendmsg+0x10/0x10 [ 346.915515][T11130] ? __pfx_ksys_write+0x10/0x10 [ 346.915536][T11130] __do_fast_syscall_32+0xe7/0x970 [ 346.915558][T11130] ? lockdep_hardirqs_on+0x78/0x100 [ 346.915580][T11130] do_fast_syscall_32+0x32/0x70 [ 346.915601][T11130] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 346.915621][T11130] RIP: 0023:0xf709efec [ 346.915642][T11130] Code: Unable to access opcode bytes at 0xf709efc2. [ 346.915650][T11130] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 346.915666][T11130] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 346.915677][T11130] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 346.915686][T11130] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 346.915696][T11130] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 346.915704][T11130] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 346.915726][T11130] [ 347.112070][T11140] 9p: Bad value for 'rfdno' [ 348.214341][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1451'. [ 348.219276][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1451'. [ 348.313424][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1451'. [ 348.318284][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1451'. [ 348.364099][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1451'. [ 348.369098][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1451'. [ 349.334152][T11174] FAULT_INJECTION: forcing a failure. [ 349.334152][T11174] name failslab, interval 1, probability 0, space 0, times 0 [ 349.361509][T11174] CPU: 2 UID: 0 PID: 11174 Comm: syz.3.1455 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.361532][T11174] Tainted: [L]=SOFTLOCKUP [ 349.361536][T11174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 349.361543][T11174] Call Trace: [ 349.361548][T11174] [ 349.361554][T11174] dump_stack_lvl+0x100/0x190 [ 349.361573][T11174] should_fail_ex.cold+0x5/0xa [ 349.361585][T11174] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 349.361599][T11174] should_failslab+0xc2/0x120 [ 349.361615][T11174] kmem_cache_alloc_noprof+0x91/0x6a0 [ 349.361630][T11174] ? skb_clone+0x190/0x400 [ 349.361649][T11174] skb_clone+0x190/0x400 [ 349.361665][T11174] netlink_deliver_tap+0xaed/0xcc0 [ 349.361686][T11174] netlink_dump+0x631/0xd00 [ 349.361699][T11174] ? __pfx_netlink_dump+0x10/0x10 [ 349.361710][T11174] ? kasan_quarantine_put+0x104/0x240 [ 349.361730][T11174] ? kfree_skbmem+0x19f/0x210 [ 349.361743][T11174] netlink_recvmsg+0x7dc/0xa90 [ 349.361756][T11174] ? __pfx_netlink_recvmsg+0x10/0x10 [ 349.361768][T11174] ? is_bpf_text_address+0x8a/0x1a0 [ 349.361786][T11174] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 349.361799][T11174] ? __pfx_netlink_recvmsg+0x10/0x10 [ 349.361812][T11174] sock_recvmsg+0x1d5/0x220 [ 349.361825][T11174] ____sys_recvmsg+0x21e/0x670 [ 349.361839][T11174] ? __pfx_____sys_recvmsg+0x10/0x10 [ 349.361857][T11174] ? __lock_acquire+0x49f/0x1a40 [ 349.361870][T11174] ___sys_recvmsg+0x16a/0x1a0 [ 349.361883][T11174] ? __pfx____sys_recvmsg+0x10/0x10 [ 349.361907][T11174] do_recvmmsg+0x54d/0x740 [ 349.361921][T11174] ? __pfx_do_recvmmsg+0x10/0x10 [ 349.361935][T11174] ? find_held_lock+0x2b/0x80 [ 349.361948][T11174] ? ksys_write+0x190/0x250 [ 349.361959][T11174] ? ksys_write+0x190/0x250 [ 349.361975][T11174] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 349.361993][T11174] __sys_recvmmsg+0x21f/0x270 [ 349.362009][T11174] ? __pfx___sys_recvmmsg+0x10/0x10 [ 349.362027][T11174] ? ksys_write+0x1ac/0x250 [ 349.362039][T11174] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 349.362065][T11174] ? __do_fast_syscall_32+0x98/0x970 [ 349.362080][T11174] ? lockdep_hardirqs_on+0x78/0x100 [ 349.362093][T11174] __do_fast_syscall_32+0xe7/0x970 [ 349.362107][T11174] ? lockdep_hardirqs_on+0x78/0x100 [ 349.362121][T11174] do_fast_syscall_32+0x32/0x70 [ 349.362135][T11174] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 349.362150][T11174] RIP: 0023:0xf7f67fec [ 349.362163][T11174] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 349.362168][T11174] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 349.362179][T11174] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002e80 [ 349.362186][T11174] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 349.362192][T11174] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 349.362198][T11174] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 349.362204][T11174] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 349.362218][T11174] [ 349.752582][T11188] Cannot find add_set index 0 as target [ 349.975663][T11196] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 349.996205][T11196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1462'. [ 350.692605][T11199] syz_tun: entered allmulticast mode [ 351.524363][T11198] syz_tun: left allmulticast mode [ 351.535118][T11199] netlink: Failed to add € helper -22 [ 351.541800][T11199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.265710][T11219] gtp0: entered promiscuous mode [ 352.268462][T11219] gtp0: entered allmulticast mode [ 352.402276][T11223] netlink: 'syz.1.1470': attribute type 23 has an invalid length. [ 352.466195][T11228] loop0: detected capacity change from 0 to 3904 [ 352.622397][T11228] FAULT_INJECTION: forcing a failure. [ 352.622397][T11228] name failslab, interval 1, probability 0, space 0, times 0 [ 352.629921][T11228] CPU: 3 UID: 0 PID: 11228 Comm: syz.4.1471 Tainted: G L syzkaller #0 PREEMPT(full) [ 352.629941][T11228] Tainted: [L]=SOFTLOCKUP [ 352.629945][T11228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 352.629952][T11228] Call Trace: [ 352.629956][T11228] [ 352.629961][T11228] dump_stack_lvl+0x100/0x190 [ 352.629980][T11228] should_fail_ex.cold+0x5/0xa [ 352.629995][T11228] should_failslab+0xc2/0x120 [ 352.630012][T11228] __kmalloc_cache_noprof+0x91/0x6c0 [ 352.630023][T11228] ? __lru_add_drain_all+0x441/0x650 [ 352.630036][T11228] ? bdev_disk_changed+0x48d/0x1260 [ 352.630085][T11228] bdev_disk_changed+0x48d/0x1260 [ 352.630107][T11228] ? __pfx_bdev_disk_changed+0x10/0x10 [ 352.630124][T11228] ? loop_set_status+0x53c/0xb50 [ 352.630150][T11228] loop_reread_partitions+0x68/0xe0 [ 352.630163][T11228] loop_set_status+0x60e/0xb50 [ 352.630180][T11228] lo_ioctl+0x5f1/0x1bc0 [ 352.630196][T11228] ? __pfx_lo_ioctl+0x10/0x10 [ 352.630222][T11228] ? blkdev_common_ioctl+0x515/0x2b80 [ 352.630232][T11228] ? tomoyo_path_number_perm+0x188/0x580 [ 352.630249][T11228] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 352.630260][T11228] ? get_pid_task+0x106/0x250 [ 352.630279][T11228] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 352.630300][T11228] ? do_vfs_ioctl+0x226/0x13e0 [ 352.630317][T11228] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 352.630337][T11228] lo_compat_ioctl+0xf3/0x160 [ 352.630352][T11228] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 352.630365][T11228] compat_blkdev_ioctl+0x682/0x7b0 [ 352.630377][T11228] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 352.630391][T11228] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 352.630403][T11228] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 352.630421][T11228] __do_fast_syscall_32+0xe7/0x970 [ 352.630436][T11228] ? lockdep_hardirqs_on+0x78/0x100 [ 352.630451][T11228] do_fast_syscall_32+0x32/0x70 [ 352.630465][T11228] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 352.630480][T11228] RIP: 0023:0xf709efec [ 352.630515][T11228] Code: Unable to access opcode bytes at 0xf709efc2. [ 352.630520][T11228] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 352.630532][T11228] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000004c04 [ 352.630538][T11228] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.630544][T11228] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 352.630550][T11228] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 352.630557][T11228] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 352.630571][T11228] [ 352.893494][T11244] fuse: Bad value for 'fd' [ 353.961214][T11285] cgroup: Unknown subsys name 'dont_hash' [ 354.027349][ T5748] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 354.036114][T11289] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 355.115930][T11343] wg2 speed is unknown, defaulting to 1000 [ 355.568814][T11343] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1490'. [ 355.738379][ T5144] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 355.745679][ T5144] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 355.749594][ T5144] loop0: [ 355.839618][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 355.845352][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 355.853942][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x8c9d instead [ 355.860914][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x8278 instead [ 355.867025][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 355.867352][T11361] cgroup: Unknown subsys name 'dont_hash' [ 355.872552][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 355.884747][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 355.890415][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 355.896651][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 355.900838][T11362] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 355.902455][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 355.916177][T11360] jffs2: Further such events for this erase block will not be printed [ 355.921119][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 355.929516][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 355.935085][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x8c9d instead [ 355.940975][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x8278 instead [ 355.946515][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 355.952382][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 355.958171][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 355.963724][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 355.969493][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 355.975091][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 355.980850][T11360] jffs2: Further such events for this erase block will not be printed [ 355.985468][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 355.990977][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 355.997274][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x8c9d instead [ 356.003890][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x8278 instead [ 356.009757][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 356.015201][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 356.020759][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x8c9d instead [ 356.026196][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x8278 instead [ 356.031762][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 356.037339][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 356.043403][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x8c9d instead [ 356.049155][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x8278 instead [ 356.054715][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 356.060242][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 356.065682][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x8c9d instead [ 356.071377][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x8278 instead [ 356.076976][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 356.082453][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 356.087966][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x8c9d instead [ 356.093354][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x8278 instead [ 356.098864][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 356.104223][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 356.109672][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x8c9d instead [ 356.115008][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x8278 instead [ 356.120522][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 356.125923][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 356.131400][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x8c9d instead [ 356.136825][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x8278 instead [ 356.142309][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 356.147779][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 356.153847][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x8c9d instead [ 356.159363][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x8278 instead [ 356.164765][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 356.170260][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 356.175646][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x8c9d instead [ 356.181270][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x8278 instead [ 356.186717][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 356.192162][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 356.197698][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x8c9d instead [ 356.203137][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x8278 instead [ 356.208710][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 356.214127][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 356.219675][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x8c9d instead [ 356.225093][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x8278 instead [ 356.230588][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 356.235970][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 356.241424][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x8c9d instead [ 356.246801][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x8278 instead [ 356.252287][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 356.257736][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 356.263183][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x8c9d instead [ 356.268759][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x8278 instead [ 356.274190][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 356.279663][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 356.285034][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x8c9d instead [ 356.290625][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x8278 instead [ 356.296072][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 356.301540][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 356.306988][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x8c9d instead [ 356.312345][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x8278 instead [ 356.317831][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 356.323218][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 356.328665][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x8c9d instead [ 356.334049][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x8278 instead [ 356.339588][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 356.345023][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 356.350632][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x8c9d instead [ 356.356021][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x8278 instead [ 356.361526][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 356.367004][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 356.372391][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x8c9d instead [ 356.377852][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x8278 instead [ 356.383267][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 356.388715][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 356.394132][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x8c9d instead [ 356.399786][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x8278 instead [ 356.406641][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 356.412261][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 356.417720][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x8c9d instead [ 356.423237][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x8278 instead [ 356.428757][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 356.434150][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 356.439751][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x8c9d instead [ 356.445185][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x8278 instead [ 356.450667][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 356.456046][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 356.461539][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x8c9d instead [ 356.466997][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x8278 instead [ 356.472423][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 356.477945][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 356.483357][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x8c9d instead [ 356.488863][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x8278 instead [ 356.494318][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 356.499843][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 356.505285][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x8c9d instead [ 356.510927][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x8278 instead [ 356.516449][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 356.522064][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 356.527516][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x8c9d instead [ 356.532915][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x8278 instead [ 356.538441][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 356.543832][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 356.549325][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x8c9d instead [ 356.554797][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x8278 instead [ 356.560336][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 356.565754][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 356.571444][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x8c9d instead [ 356.577051][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x8278 instead [ 356.582568][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 356.589563][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 356.595011][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x8c9d instead [ 356.600694][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x8278 instead [ 356.606129][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 356.611645][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 356.617329][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x8c9d instead [ 356.622807][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x8278 instead [ 356.630783][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 356.636190][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 356.641775][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x8c9d instead [ 356.647207][T11360] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x8278 instead [ 356.652614][T11360] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 356.657581][T11360] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 356.966964][T11366] FAULT_INJECTION: forcing a failure. [ 356.966964][T11366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.975330][T11366] CPU: 3 UID: 0 PID: 11366 Comm: syz.4.1496 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.975360][T11366] Tainted: [L]=SOFTLOCKUP [ 356.975365][T11366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 356.975375][T11366] Call Trace: [ 356.975384][T11366] [ 356.975392][T11366] dump_stack_lvl+0x100/0x190 [ 356.975421][T11366] should_fail_ex.cold+0x5/0xa [ 356.975441][T11366] _copy_to_user+0x32/0xd0 [ 356.975470][T11366] simple_read_from_buffer+0xcb/0x170 [ 356.975499][T11366] proc_fail_nth_read+0x1af/0x230 [ 356.975526][T11366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 356.975550][T11366] ? rw_verify_area+0xce/0x6d0 [ 356.975572][T11366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 356.975595][T11366] vfs_read+0x1e4/0xb40 [ 356.975614][T11366] ? __pfx_vfs_read+0x10/0x10 [ 356.975627][T11366] ? find_held_lock+0x2b/0x80 [ 356.975649][T11366] ? __fget_files+0x215/0x3d0 [ 356.975669][T11366] ? __fget_files+0x21f/0x3d0 [ 356.975692][T11366] ksys_read+0x12a/0x250 [ 356.975708][T11366] ? __pfx_ksys_read+0x10/0x10 [ 356.975730][T11366] do_int80_emulation+0x14b/0x720 [ 356.975755][T11366] asm_int80_emulation+0x1a/0x20 [ 356.975772][T11366] RIP: 0023:0xf71d74eb [ 356.975785][T11366] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 356.975800][T11366] RSP: 002b:00000000f548d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 356.975819][T11366] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f548d5d0 [ 356.975829][T11366] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 356.975838][T11366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 356.975848][T11366] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 356.975858][T11366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 356.975880][T11366] [ 357.135439][ T5144] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 357.146408][ T5144] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 357.152582][ T5144] loop0: [ 357.202108][T11370] syzkaller0: entered promiscuous mode [ 357.205210][T11370] syzkaller0: entered allmulticast mode [ 357.387375][ T6238] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 357.547465][ T6238] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 357.555127][ T6238] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 30357, setting to 1024 [ 357.568083][ T6238] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 357.576063][ T6238] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 357.584781][ T6238] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.598750][ T6238] usb 7-1: config 0 descriptor?? [ 357.604729][T11368] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 357.616184][ T6238] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 357.741010][T11384] cgroup: Unknown subsys name 'dont_hash' [ 358.434782][T11396] 9p: Bad value for 'wfdno' [ 359.186946][ T55] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 359.199985][T11412] fuse: Unknown parameter 'fd0x0000000000000004' [ 359.211122][T11412] netlink: 'syz.3.1509': attribute type 1 has an invalid length. [ 359.225475][T11412] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1509'. [ 359.358095][ T55] usb 9-1: Using ep0 maxpacket: 32 [ 359.366737][ T55] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 359.379858][ T55] usb 9-1: config 0 has no interfaces? [ 359.384971][ T55] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 359.390847][ T55] usb 9-1: Product: syz [ 359.396890][ T55] usb 9-1: Manufacturer: syz [ 359.402377][ T55] usb 9-1: SerialNumber: syz [ 359.411186][ T55] usb 9-1: config 0 descriptor?? [ 359.493977][T11426] bond1: entered allmulticast mode [ 359.674037][ T5748] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 359.978502][ T55] usb 9-1: USB disconnect, device number 16 [ 360.029561][ T6238] usb 7-1: USB disconnect, device number 16 [ 360.252592][T11437] fuse: Bad value for 'fd' [ 360.477430][T11448] netlink: 'syz.2.1518': attribute type 1 has an invalid length. [ 360.519124][T11448] 8021q: adding VLAN 0 to HW filter on device bond2 [ 360.548387][T11448] bond2: (slave gretap1): making interface the new active one [ 360.554089][T11448] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 360.566332][T11448] FAULT_INJECTION: forcing a failure. [ 360.566332][T11448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.578812][T11448] CPU: 2 UID: 0 PID: 11448 Comm: syz.2.1518 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.578832][T11448] Tainted: [L]=SOFTLOCKUP [ 360.578836][T11448] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 360.578843][T11448] Call Trace: [ 360.578848][T11448] [ 360.578853][T11448] dump_stack_lvl+0x100/0x190 [ 360.578872][T11448] should_fail_ex.cold+0x5/0xa [ 360.578886][T11448] _copy_from_iter+0x1f4/0x1690 [ 360.578908][T11448] ? __pfx__copy_from_iter+0x10/0x10 [ 360.578925][T11448] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 360.578941][T11448] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 360.578958][T11448] skb_copy_datagram_from_iter+0x11f/0x720 [ 360.578977][T11448] packet_sendmsg+0x2257/0x4f00 [ 360.578996][T11448] ? __pfx___might_resched+0x10/0x10 [ 360.579023][T11448] ? aa_sk_perm+0x309/0xaa0 [ 360.579046][T11448] ? __pfx_aa_sk_perm+0x10/0x10 [ 360.579066][T11448] ? __pfx_packet_sendmsg+0x10/0x10 [ 360.579083][T11448] ? __might_fault+0xc5/0x140 [ 360.579109][T11448] ? apparmor_socket_sendmsg+0x15b/0x270 [ 360.579124][T11448] __sys_sendto+0x48b/0x4e0 [ 360.579139][T11448] ? __pfx_packet_sendmsg+0x10/0x10 [ 360.579152][T11448] ? __pfx___sys_sendto+0x10/0x10 [ 360.579176][T11448] ? fput+0x79/0x100 [ 360.579190][T11448] ? ksys_write+0x1ac/0x250 [ 360.579202][T11448] __ia32_sys_sendto+0xdd/0x1b0 [ 360.579216][T11448] ? __do_fast_syscall_32+0x98/0x970 [ 360.579231][T11448] ? lockdep_hardirqs_on+0x78/0x100 [ 360.579244][T11448] __do_fast_syscall_32+0xe7/0x970 [ 360.579258][T11448] ? lockdep_hardirqs_on+0x78/0x100 [ 360.579277][T11448] do_fast_syscall_32+0x32/0x70 [ 360.579292][T11448] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 360.579306][T11448] RIP: 0023:0xf706efec [ 360.579320][T11448] Code: Unable to access opcode bytes at 0xf706efc2. [ 360.579325][T11448] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 360.579337][T11448] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 360.579343][T11448] RDX: 000000000000000e RSI: 0000000000048000 RDI: 0000000080000180 [ 360.579350][T11448] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 360.579356][T11448] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 360.579362][T11448] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 360.579376][T11448] [ 360.707169][T11454] cgroup: Unknown subsys name 'dont_hash' [ 360.778421][T11464] fuse: Bad value for 'fd' [ 360.873696][T11469] FAULT_INJECTION: forcing a failure. [ 360.873696][T11469] name failslab, interval 1, probability 0, space 0, times 0 [ 360.880923][T11469] CPU: 2 UID: 0 PID: 11469 Comm: syz.2.1523 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.880954][T11469] Tainted: [L]=SOFTLOCKUP [ 360.880961][T11469] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 360.880972][T11469] Call Trace: [ 360.880982][T11469] [ 360.880990][T11469] dump_stack_lvl+0x100/0x190 [ 360.881020][T11469] should_fail_ex.cold+0x5/0xa [ 360.881043][T11469] should_failslab+0xc2/0x120 [ 360.881070][T11469] __kmalloc_cache_noprof+0x91/0x6c0 [ 360.881093][T11469] ? percpu_ref_init+0xec/0x3f0 [ 360.881119][T11469] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 360.881144][T11469] percpu_ref_init+0xec/0x3f0 [ 360.881170][T11469] io_uring_setup.cold+0x2be/0x1c2e [ 360.881198][T11469] ? rcu_is_watching+0x12/0xc0 [ 360.881223][T11469] ? __pfx_io_uring_setup+0x10/0x10 [ 360.881243][T11469] ? __schedule+0x126e/0x6730 [ 360.881283][T11469] ? fput+0x79/0x100 [ 360.881307][T11469] ? exit_to_user_mode_loop+0x166/0x700 [ 360.881326][T11469] ? rcu_is_watching+0x12/0xc0 [ 360.881351][T11469] __ia32_sys_io_uring_setup+0xc2/0x170 [ 360.881373][T11469] __do_fast_syscall_32+0xe7/0x970 [ 360.881397][T11469] ? lockdep_hardirqs_on+0x78/0x100 [ 360.881422][T11469] do_fast_syscall_32+0x32/0x70 [ 360.881447][T11469] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 360.881470][T11469] RIP: 0023:0xf706efec [ 360.881492][T11469] Code: Unable to access opcode bytes at 0xf706efc2. [ 360.881501][T11469] RSP: 002b:00000000f543c43c EFLAGS: 00000286 ORIG_RAX: 00000000000001a9 [ 360.881521][T11469] RAX: ffffffffffffffda RBX: 000000000000058e RCX: 00000000800007c8 [ 360.881532][T11469] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 360.881543][T11469] RBP: 00000000f543c4fc R08: 0000000000000000 R09: 0000000000000000 [ 360.881553][T11469] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 360.881564][T11469] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 360.881588][T11469] [ 361.207808][T11471] 9pnet_virtio: no channels available for device syz [ 361.499959][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 361.505384][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 361.510845][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x8c9d instead [ 361.516213][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x8278 instead [ 361.521638][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 361.526959][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 361.532421][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 361.537803][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 361.543226][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 361.548600][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 361.553997][T11479] jffs2: Further such events for this erase block will not be printed [ 361.558690][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 361.564221][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 361.569720][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x8c9d instead [ 361.575074][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x8278 instead [ 361.580686][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 361.586060][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 361.591661][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 361.597114][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 361.602690][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 361.608221][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 361.613650][T11479] jffs2: Further such events for this erase block will not be printed [ 361.618308][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 361.623732][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 361.630574][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x8c9d instead [ 361.635973][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x8278 instead [ 361.641562][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 361.647117][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 361.652454][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x8c9d instead [ 361.658042][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x8278 instead [ 361.663446][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 361.669353][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 361.674717][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x8c9d instead [ 361.680319][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x8278 instead [ 361.685696][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 361.691301][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 361.696657][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x8c9d instead [ 361.702249][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x8278 instead [ 361.707734][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 361.713147][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 361.718809][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x8c9d instead [ 361.724274][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x8278 instead [ 361.729861][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 361.735240][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 361.740759][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x8c9d instead [ 361.746326][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x8278 instead [ 361.751741][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 361.758943][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 361.764331][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x8c9d instead [ 361.769923][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x8278 instead [ 361.775338][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 361.780935][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 361.786305][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x8c9d instead [ 361.791849][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x8278 instead [ 361.797451][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 361.802835][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 361.808458][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x8c9d instead [ 361.813809][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x8278 instead [ 361.819388][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 361.824768][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 361.830354][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x8c9d instead [ 361.835718][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x8278 instead [ 361.841258][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 361.846622][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 361.852304][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x8c9d instead [ 361.857832][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x8278 instead [ 361.863256][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 361.868794][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 361.874190][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x8c9d instead [ 361.879747][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x8278 instead [ 361.885724][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 361.891302][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 361.896690][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x8c9d instead [ 361.902227][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x8278 instead [ 361.907743][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 361.913121][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 361.918702][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x8c9d instead [ 361.924128][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x8278 instead [ 361.929821][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 361.935184][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 361.940734][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x8c9d instead [ 361.946092][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x8278 instead [ 361.951665][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 361.957182][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 361.962545][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x8c9d instead [ 361.968171][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x8278 instead [ 361.973567][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 361.979123][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 361.984484][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x8c9d instead [ 361.990154][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x8278 instead [ 361.995600][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 362.001550][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 362.006987][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x8c9d instead [ 362.012316][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x8278 instead [ 362.017757][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 362.023089][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 362.028463][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x8c9d instead [ 362.033765][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x8278 instead [ 362.039081][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 362.044543][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 362.049911][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x8c9d instead [ 362.055260][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x8278 instead [ 362.060705][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 362.065987][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 362.071370][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x8c9d instead [ 362.076667][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x8278 instead [ 362.082187][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 362.087686][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 362.096919][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x8c9d instead [ 362.108991][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x8278 instead [ 362.116934][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 362.127016][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 362.134999][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x8c9d instead [ 362.140459][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x8278 instead [ 362.145886][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 362.152181][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 362.157589][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x8c9d instead [ 362.162979][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x8278 instead [ 362.168465][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 362.174468][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 362.182215][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x8c9d instead [ 362.190221][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x8278 instead [ 362.196253][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 362.201947][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 362.207482][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x8c9d instead [ 362.212813][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x8278 instead [ 362.218847][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 362.224299][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 362.230853][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x8c9d instead [ 362.236262][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x8278 instead [ 362.245707][T11482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.250469][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 362.263095][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 362.270510][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x8c9d instead [ 362.276751][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x8278 instead [ 362.283470][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 362.288902][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 362.294704][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x8c9d instead [ 362.300248][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x8278 instead [ 362.306505][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 362.312347][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 362.318487][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x8c9d instead [ 362.323899][T11479] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x8278 instead [ 362.330429][T11479] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 362.335297][T11479] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 362.415984][T11491] fuse: Bad value for 'fd' [ 363.129799][T11501] fuse: Unknown parameter 'fd0x0000000000000004' [ 363.389151][T11512] cgroup: Unknown subsys name 'dont_hash' [ 363.634529][T11516] 9p: Bad value for 'wfdno' [ 363.656965][ T34] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 363.807422][ T34] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 363.813071][ T34] usb 7-1: config 0 has no interfaces? [ 363.818346][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.823787][ T34] usb 7-1: Product: syz [ 363.826033][ T34] usb 7-1: Manufacturer: syz [ 363.828681][ T34] usb 7-1: SerialNumber: syz [ 363.833079][ T34] usb 7-1: config 0 descriptor?? [ 364.124931][T11521] 9pnet_virtio: no channels available for device syz [ 364.228739][ T9] usb 7-1: USB disconnect, device number 17 [ 364.486890][T11525] FAULT_INJECTION: forcing a failure. [ 364.486890][T11525] name failslab, interval 1, probability 0, space 0, times 0 [ 364.493730][T11525] CPU: 0 UID: 0 PID: 11525 Comm: syz.3.1538 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.493754][T11525] Tainted: [L]=SOFTLOCKUP [ 364.493759][T11525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 364.493766][T11525] Call Trace: [ 364.493771][T11525] [ 364.493776][T11525] dump_stack_lvl+0x100/0x190 [ 364.493795][T11525] should_fail_ex.cold+0x5/0xa [ 364.493809][T11525] should_failslab+0xc2/0x120 [ 364.493826][T11525] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 364.493843][T11525] ? kvasprintf_const+0x66/0x1a0 [ 364.493858][T11525] kvasprintf+0xbc/0x150 [ 364.493868][T11525] ? __pfx_kvasprintf+0x10/0x10 [ 364.493879][T11525] ? lockdep_hardirqs_on+0x78/0x100 [ 364.493894][T11525] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 364.493906][T11525] ? __debug_object_init+0x2de/0x3d0 [ 364.493927][T11525] kvasprintf_const+0x66/0x1a0 [ 364.493938][T11525] kobject_set_name_vargs+0x5a/0x140 [ 364.493956][T11525] dev_set_name+0xc7/0x100 [ 364.493972][T11525] ? __pfx_dev_set_name+0x10/0x10 [ 364.493983][T11525] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 364.494002][T11525] ? lockdep_init_map_type+0x5c/0x250 [ 364.494014][T11525] ? __init_waitqueue_head+0xca/0x150 [ 364.494026][T11525] ? input_allocate_device+0x271/0x350 [ 364.494045][T11525] input_allocate_device+0x293/0x350 [ 364.494062][T11525] uinput_ioctl_handler.isra.0+0x3c8/0x1d20 [ 364.494077][T11525] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 364.494094][T11525] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 364.494110][T11525] ? find_held_lock+0x2b/0x80 [ 364.494124][T11525] ? __fget_files+0x215/0x3d0 [ 364.494140][T11525] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 364.494157][T11525] ? __pfx_uinput_compat_ioctl+0x10/0x10 [ 364.494170][T11525] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 364.494188][T11525] __do_fast_syscall_32+0xe7/0x970 [ 364.494203][T11525] ? lockdep_hardirqs_on+0x78/0x100 [ 364.494217][T11525] do_fast_syscall_32+0x32/0x70 [ 364.494231][T11525] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.494245][T11525] RIP: 0023:0xf7f67fec [ 364.494259][T11525] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 364.494265][T11525] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 364.494276][T11525] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040045569 [ 364.494283][T11525] RDX: 0000000000000113 RSI: 0000000000000000 RDI: 0000000000000000 [ 364.494289][T11525] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 364.494295][T11525] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 364.494301][T11525] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 364.494315][T11525] [ 364.742911][T11528] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1539'. [ 365.171072][T11540] fuse: Unknown parameter 'fd0x0000000000000004' [ 365.457319][ T9] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 365.617657][ T9] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 365.626733][ T9] usb 9-1: config 0 interface 0 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 365.632939][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 365.638279][ T9] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 365.642799][ T9] usb 9-1: Product: syz [ 365.645185][ T9] usb 9-1: Manufacturer: syz [ 365.648592][ T9] usb 9-1: SerialNumber: syz [ 365.653255][ T9] usb 9-1: config 0 descriptor?? [ 365.891235][T11545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1545'. [ 365.946138][ T9] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 365.987532][ T6564] udevd[6564]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 366.055742][ T29] usb 9-1: USB disconnect, device number 17 [ 366.084595][ T6177] udevd[6177]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 366.862113][T11561] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 366.879192][T11561] kvm: pic: non byte read [ 367.059213][T11570] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1549'. [ 367.235956][ T6564] udevd[6564]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 367.301863][T11592] 9p: Bad value for 'wfdno' [ 367.539561][ T29] hid_parser_main: 5 callbacks suppressed [ 367.539899][ T29] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 368.134500][ T29] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 369.498597][T11624] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd1f [ 369.838760][T11628] cgroup: No subsys list or none specified [ 369.843753][T11638] fuse: Bad value for 'fd' [ 369.911719][T11640] FAULT_INJECTION: forcing a failure. [ 369.911719][T11640] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 369.918877][T11640] CPU: 2 UID: 0 PID: 11640 Comm: syz.1.1569 Tainted: G L syzkaller #0 PREEMPT(full) [ 369.918908][T11640] Tainted: [L]=SOFTLOCKUP [ 369.918913][T11640] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 369.918920][T11640] Call Trace: [ 369.918925][T11640] [ 369.918930][T11640] dump_stack_lvl+0x100/0x190 [ 369.918949][T11640] should_fail_ex.cold+0x5/0xa [ 369.918961][T11640] ? prepare_alloc_pages+0x16d/0x5f0 [ 369.918978][T11640] should_fail_alloc_page+0xeb/0x140 [ 369.918995][T11640] prepare_alloc_pages+0x1f0/0x5f0 [ 369.919014][T11640] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 369.919029][T11640] ? __lock_acquire+0x49f/0x1a40 [ 369.919039][T11640] ? __css_rstat_updated+0x1ce/0x5a0 [ 369.919057][T11640] ? __pfx___css_rstat_updated+0x10/0x10 [ 369.919078][T11640] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 369.919091][T11640] ? __lock_acquire+0x49f/0x1a40 [ 369.919102][T11640] ? find_held_lock+0x2b/0x80 [ 369.919116][T11640] ? rcu_read_unlock+0x17/0x60 [ 369.919133][T11640] ? find_held_lock+0x2b/0x80 [ 369.919171][T11640] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 369.919189][T11640] ? policy_nodemask+0xed/0x4f0 [ 369.919206][T11640] alloc_pages_mpol+0x1fb/0x540 [ 369.919223][T11640] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 369.919238][T11640] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 369.919253][T11640] ? kernel_text_address+0x8d/0x100 [ 369.919272][T11640] alloc_pages_noprof+0x1a/0x160 [ 369.919283][T11640] kvm_vm_ioctl+0x3a9/0x4180 [ 369.919303][T11640] ? tomoyo_path_number_perm+0x46d/0x580 [ 369.919320][T11640] ? stack_trace_save+0x8e/0xc0 [ 369.919336][T11640] ? __pfx_stack_trace_save+0x10/0x10 [ 369.919353][T11640] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 369.919368][T11640] ? __lock_acquire+0x49f/0x1a40 [ 369.919378][T11640] ? tomoyo_path_number_perm+0x46d/0x580 [ 369.919393][T11640] ? kasan_save_stack+0x3f/0x50 [ 369.919407][T11640] ? kasan_save_stack+0x30/0x50 [ 369.919420][T11640] ? kasan_save_track+0x14/0x30 [ 369.919433][T11640] ? kasan_save_free_info+0x3b/0x70 [ 369.919444][T11640] ? __kasan_slab_free+0x5f/0x80 [ 369.919458][T11640] ? kfree+0x22b/0x6c0 [ 369.919468][T11640] ? tomoyo_path_number_perm+0x46d/0x580 [ 369.919481][T11640] ? security_file_ioctl_compat+0xd3/0x230 [ 369.919495][T11640] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 369.919512][T11640] ? __do_fast_syscall_32+0xe7/0x970 [ 369.919527][T11640] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 369.919546][T11640] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 369.919576][T11640] ? kasan_quarantine_put+0x104/0x240 [ 369.919590][T11640] ? lockdep_hardirqs_on+0x78/0x100 [ 369.919604][T11640] ? find_held_lock+0x2b/0x80 [ 369.919617][T11640] ? tomoyo_path_number_perm+0x28f/0x580 [ 369.919631][T11640] ? tomoyo_path_number_perm+0x28f/0x580 [ 369.919647][T11640] ? tomoyo_path_number_perm+0x188/0x580 [ 369.919662][T11640] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 369.919677][T11640] ? get_pid_task+0x106/0x250 [ 369.919695][T11640] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 369.919712][T11640] ? do_vfs_ioctl+0x226/0x13e0 [ 369.919728][T11640] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 369.919745][T11640] kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 369.919761][T11640] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 369.919777][T11640] ? find_held_lock+0x2b/0x80 [ 369.919791][T11640] ? __fget_files+0x215/0x3d0 [ 369.919801][T11640] ? hook_file_ioctl_common+0x140/0x440 [ 369.919818][T11640] ? __fget_files+0x21f/0x3d0 [ 369.919831][T11640] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 369.919847][T11640] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 369.919866][T11640] __do_fast_syscall_32+0xe7/0x970 [ 369.919880][T11640] ? lockdep_hardirqs_on+0x78/0x100 [ 369.919894][T11640] do_fast_syscall_32+0x32/0x70 [ 369.919909][T11640] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 369.919924][T11640] RIP: 0023:0xf6ffefec [ 369.919938][T11640] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 369.919943][T11640] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 369.919955][T11640] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000ae41 [ 369.919961][T11640] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 369.919967][T11640] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 369.919974][T11640] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 369.919980][T11640] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 369.919993][T11640] [ 370.616162][T11647] wg2 speed is unknown, defaulting to 1000 [ 370.811361][T11662] ================================================================== [ 370.815616][T11662] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0 [ 370.819218][T11662] Read of size 1 at addr ffff8880261c4c60 by task syz.2.1573/11662 [ 370.824863][T11662] [ 370.826082][T11662] CPU: 2 UID: 0 PID: 11662 Comm: syz.2.1573 Tainted: G L syzkaller #0 PREEMPT(full) [ 370.826100][T11662] Tainted: [L]=SOFTLOCKUP [ 370.826105][T11662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 370.826113][T11662] Call Trace: [ 370.826121][T11662] [ 370.826127][T11662] dump_stack_lvl+0x100/0x190 [ 370.826147][T11662] print_report+0x13d/0x4b0 [ 370.826167][T11662] ? __virt_addr_valid+0x239/0x430 [ 370.826182][T11662] ? string+0x471/0x4d0 [ 370.826194][T11662] kasan_report+0xdf/0x1c0 [ 370.826211][T11662] ? string+0x471/0x4d0 [ 370.826225][T11662] string+0x471/0x4d0 [ 370.826239][T11662] ? __pfx_string+0x10/0x10 [ 370.826251][T11662] ? mtree_range_walk+0x72b/0xb70 [ 370.826265][T11662] vsnprintf+0x422/0x1300 [ 370.826279][T11662] ? __pfx_vsnprintf+0x10/0x10 [ 370.826292][T11662] ? __lock_acquire+0x49f/0x1a40 [ 370.826303][T11662] seq_printf+0x1a4/0x250 [ 370.826320][T11662] ? __pfx_num_to_str+0x10/0x10 [ 370.826334][T11662] ? __pfx_seq_printf+0x10/0x10 [ 370.826351][T11662] ? do_raw_spin_lock+0x128/0x260 [ 370.826364][T11662] ? seq_put_decimal_ull_width+0x1db/0x3a0 [ 370.826376][T11662] irq_seq_show+0x390/0x8b0 [ 370.826390][T11662] seq_read_iter+0xbce/0x1270 [ 370.826433][T11662] proc_reg_read_iter+0x220/0x310 [ 370.826448][T11662] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 370.826463][T11662] vfs_read+0x82e/0xb40 [ 370.826477][T11662] ? __pfx_vfs_read+0x10/0x10 [ 370.826489][T11662] ? find_held_lock+0x2b/0x80 [ 370.826507][T11662] ksys_read+0x12a/0x250 [ 370.826518][T11662] ? __pfx_ksys_read+0x10/0x10 [ 370.826532][T11662] __do_fast_syscall_32+0xe7/0x970 [ 370.826552][T11662] do_fast_syscall_32+0x32/0x70 [ 370.826567][T11662] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 370.826582][T11662] RIP: 0023:0xf706efec [ 370.826600][T11662] Code: Unable to access opcode bytes at 0xf706efc2. [ 370.826611][T11662] RSP: 002b:00000000f543c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 370.826625][T11662] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000400 [ 370.826633][T11662] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 370.826641][T11662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 370.826650][T11662] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 370.826658][T11662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 370.826671][T11662] [ 370.826676][T11662] [ 370.947000][T11662] Allocated by task 5733: [ 370.949256][T11662] kasan_save_stack+0x30/0x50 [ 370.951706][T11662] kasan_save_track+0x14/0x30 [ 370.954085][T11662] __kasan_kmalloc+0xaa/0xb0 [ 370.956453][T11662] __kmalloc_node_noprof+0x339/0x830 [ 370.959178][T11662] __vmalloc_node_range_noprof+0x409/0x1630 [ 370.962230][T11662] __vmalloc_node_noprof+0xad/0xf0 [ 370.964874][T11662] compat_get_entries+0x3b0/0x860 [ 370.967461][T11662] do_ip6t_get_ctl+0x5c1/0xb00 [ 370.969921][T11662] nf_getsockopt+0x7c/0xe0 [ 370.972213][T11662] ipv6_getsockopt+0x207/0x2a0 [ 370.974672][T11662] tcp_getsockopt+0xa1/0x110 [ 370.977062][T11662] do_sock_getsockopt+0x50a/0x6e0 [ 370.979694][T11662] __sys_getsockopt+0x133/0x1d0 [ 370.982226][T11662] __ia32_compat_sys_socketcall+0x6af/0x770 [ 370.985271][T11662] __do_fast_syscall_32+0xe7/0x970 [ 370.987911][T11662] do_fast_syscall_32+0x32/0x70 [ 370.990439][T11662] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 370.993698][T11662] [ 370.994907][T11662] Freed by task 5733: [ 370.996963][T11662] kasan_save_stack+0x30/0x50 [ 370.999367][T11662] kasan_save_track+0x14/0x30 [ 371.001758][T11662] kasan_save_free_info+0x3b/0x70 [ 371.004327][T11662] __kasan_slab_free+0x5f/0x80 [ 371.006801][T11662] kfree+0x22b/0x6c0 [ 371.008818][T11662] vfree+0x12e/0x750 [ 371.010857][T11662] compat_get_entries+0x5d2/0x860 [ 371.013448][T11662] do_ip6t_get_ctl+0x5c1/0xb00 [ 371.015923][T11662] nf_getsockopt+0x7c/0xe0 [ 371.018215][T11662] ipv6_getsockopt+0x207/0x2a0 [ 371.020694][T11662] tcp_getsockopt+0xa1/0x110 [ 371.023070][T11662] do_sock_getsockopt+0x50a/0x6e0 [ 371.025662][T11662] __sys_getsockopt+0x133/0x1d0 [ 371.028178][T11662] __ia32_compat_sys_socketcall+0x6af/0x770 [ 371.031215][T11662] __do_fast_syscall_32+0xe7/0x970 [ 371.033852][T11662] do_fast_syscall_32+0x32/0x70 [ 371.036375][T11662] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 371.039661][T11662] [ 371.040864][T11662] The buggy address belongs to the object at ffff8880261c4c60 [ 371.040864][T11662] which belongs to the cache kmalloc-8 of size 8 [ 371.047904][T11662] The buggy address is located 0 bytes inside of [ 371.047904][T11662] freed 8-byte region [ffff8880261c4c60, ffff8880261c4c68) [ 371.054842][T11662] [ 371.056049][T11662] The buggy address belongs to the physical page: [ 371.059361][T11662] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x261c4 [ 371.063870][T11662] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 371.067524][T11662] page_type: f5(slab) [ 371.069647][T11662] raw: 00fff00000000000 ffff88801bc42500 dead000000000100 dead000000000122 [ 371.074061][T11662] raw: 0000000000000000 0000000800800080 00000000f5000000 0000000000000000 [ 371.078501][T11662] page dumped because: kasan: bad access detected [ 371.081826][T11662] page_owner tracks the page as allocated [ 371.084772][T11662] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5200980168, free_ts 0 [ 371.094581][T11662] post_alloc_hook+0xfd/0x120 [ 371.097002][T11662] get_page_from_freelist+0xf48/0x3530 [ 371.099838][T11662] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 371.102884][T11662] new_slab+0xa2/0x640 [ 371.104980][T11662] refill_objects+0xe3/0x410 [ 371.107350][T11662] __pcs_replace_empty_main+0x376/0x680 [ 371.110216][T11662] __kmalloc_node_track_caller_noprof+0x679/0x830 [ 371.113517][T11662] kstrdup+0x51/0xe0 [ 371.115530][T11662] kstrdup_const+0x63/0x80 [ 371.117811][T11662] __kernfs_new_node+0x9b/0xa10 [ 371.120344][T11662] kernfs_new_node+0x117/0x150 [ 371.122803][T11662] kernfs_create_link+0xcc/0x240 [ 371.125323][T11662] sysfs_do_create_link_sd+0x90/0x140 [ 371.128106][T11662] sysfs_create_link+0x61/0xc0 [ 371.130619][T11662] device_add+0xb62/0x1970 [ 371.132901][T11662] tty_register_device_attr+0x388/0x7f0 [ 371.135798][T11662] page_owner free stack trace missing [ 371.138621][T11662] [ 371.139848][T11662] Memory state around the buggy address: [ 371.142743][T11662] ffff8880261c4b00: 07 fc fc fc 06 fc fc fc 05 fc fc fc 05 fc fc fc [ 371.146888][T11662] ffff8880261c4b80: 05 fc fc fc 05 fc fc fc 00 fc fc fc 07 fc fc fc [ 371.151060][T11662] >ffff8880261c4c00: 06 fc fc fc 06 fc fc fc 07 fc fc fc fa fc fc fc [ 371.155199][T11662] ^ [ 371.158923][T11662] ffff8880261c4c80: 07 fc fc fc 06 fc fc fc 04 fc fc fc 07 fc fc fc [ 371.163095][T11662] ffff8880261c4d00: 07 fc fc fc 07 fc fc fc 00 fc fc fc 00 fc fc fc [ 371.167259][T11662] ================================================================== [ 371.171456][T11662] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 371.175118][T11662] CPU: 2 UID: 0 PID: 11662 Comm: syz.2.1573 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.180776][T11662] Tainted: [L]=SOFTLOCKUP [ 371.183014][T11662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 371.188159][T11662] Call Trace: [ 371.189864][T11662] [ 371.191388][T11662] dump_stack_lvl+0x100/0x190 [ 371.193805][T11662] vpanic+0x552/0x970 [ 371.195863][T11662] ? __pfx_vpanic+0x10/0x10 [ 371.198189][T11662] ? __pfx_vprintk_emit+0x10/0x10 [ 371.200787][T11662] ? string+0x471/0x4d0 [ 371.202947][T11662] panic+0xd1/0xe0 [ 371.204868][T11662] ? __pfx_panic+0x10/0x10 [ 371.207147][T11662] ? end_report.part.0+0x23/0x90 [ 371.209725][T11662] ? rcu_is_watching+0x12/0xc0 [ 371.212184][T11662] ? end_report.part.0+0x23/0x90 [ 371.214738][T11662] check_panic_on_warn.cold+0x19/0x34 [ 371.217503][T11662] end_report.part.0+0x3a/0x90 [ 371.219980][T11662] kasan_report.cold+0xe/0x18 [ 371.222388][T11662] ? string+0x471/0x4d0 [ 371.224554][T11662] string+0x471/0x4d0 [ 371.226624][T11662] ? __pfx_string+0x10/0x10 [ 371.228947][T11662] ? mtree_range_walk+0x72b/0xb70 [ 371.231588][T11662] vsnprintf+0x422/0x1300 [ 371.233830][T11662] ? __pfx_vsnprintf+0x10/0x10 [ 371.236291][T11662] ? __lock_acquire+0x49f/0x1a40 [ 371.238906][T11662] seq_printf+0x1a4/0x250 [ 371.241135][T11662] ? __pfx_num_to_str+0x10/0x10 [ 371.243634][T11662] ? __pfx_seq_printf+0x10/0x10 [ 371.246132][T11662] ? do_raw_spin_lock+0x128/0x260 [ 371.248730][T11662] ? seq_put_decimal_ull_width+0x1db/0x3a0 [ 371.251748][T11662] irq_seq_show+0x390/0x8b0 [ 371.254060][T11662] seq_read_iter+0xbce/0x1270 [ 371.256478][T11662] proc_reg_read_iter+0x220/0x310 [ 371.259058][T11662] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 371.261911][T11662] vfs_read+0x82e/0xb40 [ 371.264051][T11662] ? __pfx_vfs_read+0x10/0x10 [ 371.266445][T11662] ? find_held_lock+0x2b/0x80 [ 371.268857][T11662] ksys_read+0x12a/0x250 [ 371.271059][T11662] ? __pfx_ksys_read+0x10/0x10 [ 371.273506][T11662] __do_fast_syscall_32+0xe7/0x970 [ 371.276152][T11662] do_fast_syscall_32+0x32/0x70 [ 371.278659][T11662] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 371.281897][T11662] RIP: 0023:0xf706efec [ 371.284029][T11662] Code: Unable to access opcode bytes at 0xf706efc2. [ 371.287440][T11662] RSP: 002b:00000000f543c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 371.291750][T11662] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000400 [ 371.295831][T11662] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 371.299940][T11662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 371.303986][T11662] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 371.307989][T11662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 371.312087][T11662] [ 371.314197][T11662] Kernel Offset: disabled [ 371.316444][T11662] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:49:31 Registers: info registers vcpu 0 CPU#0 RAX=0000000000080000 RBX=0000000000000002 RCX=ffffc90007352000 RDX=0000000000080000 RSI=ffffffff81fd3d8c RDI=ffff8880229dca80 RBP=ffff88802b441380 RSP=ffffc900061d7260 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed1005688271 R14=0000000000000001 R15=ffff88802b23c9c0 RIP=ffffffff81fd3d8e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096be6000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008002b000 CR3=0000000046575000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000008ad507 RBX=ffff88801c742540 RCX=ffffffff8bb9e345 RDX=0000000000000000 RSI=ffffffff8e1a6b2f RDI=ffffffff8c3fe580 RBP=ffffed10038e84a8 RSP=ffffc9000046fe00 R8 =0000000000000001 R9 =ffffed100566678d R10=ffff88802b333c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000 RIP=ffffffff8bb9c8ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ce6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f02c9397eb8 CR3=0000000059258000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85a0f6f0 RDI=ffffffff9b9f0520 RBP=ffffffff9b9f04e0 RSP=ffffc90006057260 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff373e0f6 R15=dffffc0000000000 RIP=ffffffff85a0f717 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096de6000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000333f9ff8 CR3=0000000046575000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080000001 RBX=ffffc90006b8fa30 RCX=ffffffff81f52edc RDX=0000000000000000 RSI=0000000000000000 RDI=ffff8880229aa540 RBP=0000000000000004 RSP=ffffc90006b8f8e0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff88802b526280 R13=0000000000000000 R14=00000000ffffffff R15=0000000000000000 RIP=ffffffff8209cfeb RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ee6000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080004000 CR3=000000004c8ab000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000