last executing test programs: 5.820481035s ago: executing program 1 (id=1678): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$udambuf(0xffffff9c, 0x0, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x14, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) syz_usb_connect$uac1(0x6, 0x82, &(0x7f0000000000)=ANY=[], 0x0) 2.71053452s ago: executing program 1 (id=1695): timer_create(0x7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x1e00, 0x700, 0x2c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x2b, 0x9, 0x0, 0x0, 0x0, 0x3}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r4, &(0x7f0000000a40)=[{&(0x7f0000000e00)='t', 0x1}, {0x0}, {&(0x7f0000001000)="d6", 0x1}], 0x3) 2.530379056s ago: executing program 2 (id=1696): timer_create(0x7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x1e00, 0x700, 0x2c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x2b, 0x9, 0x0, 0x0, 0x0, 0x3}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r4, &(0x7f0000000a40)=[{&(0x7f0000000e00)='t', 0x1}, {0x0}, {&(0x7f0000001000)="d6", 0x1}], 0x3) 2.310538813s ago: executing program 1 (id=1697): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x16, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2.310173249s ago: executing program 1 (id=1698): r0 = socket(0x2a, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1beddddff023180007000000000004000000", @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%(,:', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x8, 0xe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x81}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x10001}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x4}]}}]}, 0x48}}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.977869578s ago: executing program 2 (id=1701): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="524826a73f8223225aebe6074daa38f80e1c0281f94b9641cc086a1e62f43981e02280ffe57c006b188a07f9179df3"], 0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000003000000040122000b00000001000000", @ANYRES32, @ANYRES8, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)="44ccfd0a79618b3164aac21bc9eb0bfa18d2eaf860a05130853f3df6ea5b383e19f7994f7e6b82049b", &(0x7f0000001400), 0x20000002, r0}, 0x38) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r1, 0x40045108, &(0x7f0000001b80)) setrlimit(0x1, &(0x7f0000000380)={0x1, 0x713}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/56, 0x38}, {&(0x7f0000000500)=""/137, 0x89}, {&(0x7f00000005c0)=""/153, 0x99}, {&(0x7f0000000300)=""/81, 0x51}], 0x4}, 0x22) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x42ab00) close_range(0xffffffffffffffff, r2, 0x2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0xd4) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x32315258, 0x0, 0x6, [{0x0, 0x1000000}, {0x12, 0xd5a}, {0x4000000}, {0x100}, {0x0, 0x7}, {0x0, 0x9}, {}, {0x0, 0xc}], 0x20}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000090) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000020c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f0, 0x1f0, 0x94, 0x284, 0x284, 0x144, 0x35c, 0x35c, 0x35c, 0x35c, 0x35c, 0x6, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'vlan0\x00', 'veth1\x00'}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x4}}}, {{@ip={@rand_addr, @empty, 0x0, 0x0, 'dummy0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0xac}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0x70, 0x94}, @TTL={0x24}}, {{@ip={@empty, @multicast1, 0x0, 0x0, 'caif0\x00', 'rose0\x00'}, 0x0, 0xb4, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x24}}]}, @TTL={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x44c) 1.910075163s ago: executing program 0 (id=1703): r0 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x2b, 0x9, 0x0, 0x0, 0x0, 0x3}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r4, &(0x7f0000000a40)=[{&(0x7f0000000e00)='t', 0x1}, {0x0}, {&(0x7f0000001000)="d6", 0x1}], 0x3) 1.538943413s ago: executing program 2 (id=1706): r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setfsgid(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r2 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}}) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x800) recvmmsg$unix(r8, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r9 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x80c0, 0x4) fchown(r9, 0x0, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000901, 0xee00, 0x0) 1.290151814s ago: executing program 0 (id=1707): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xc, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x6, 0x1000, 0x3a}, 0x1c) r2 = socket$kcm(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x5424, 0x0, &(0x7f0000000180), 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="695600008d605833562430020301030000000092f800000000000000000040000000150800054000000007080001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f0300", 0x4}], 0x1}, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUMINPUT(r5, 0xc050561a, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r3, 0x80811501, &(0x7f0000000240)={0x80}) bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) ioctl$sock_bt_hci(r0, 0x400448e1, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 1.289791485s ago: executing program 1 (id=1708): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) r3 = syz_io_uring_setup(0x917, &(0x7f0000000300)={0x0, 0x400, 0x1, 0x1000001, 0xf7fffffc}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="c50a0000000000006113b800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000a80)={&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f00000006c0)=""/231, 0xe7}, {&(0x7f00000001c0)=""/56, 0x38}, {&(0x7f0000000640)=""/120, 0x78}, {&(0x7f0000000dc0)=""/227, 0xe3}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f00000002c0)=""/12, 0xc}, {&(0x7f0000000840)=""/155, 0x9b}, {&(0x7f0000000900)=""/133, 0x85}], 0x9, &(0x7f0000000ac0)=""/16, 0x10}, 0x0, 0x140, 0x0, {0x1, r6}}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) r7 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e5, 0x2, 0x2, 0xf2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, &(0x7f0000000080)=[0x5, 0xa22], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448cb, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x3, 0x2e, &(0x7f0000000e80)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x2, 0x0, 0x0, 0x45057bf4ccb05c67, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$dsp(r10, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETFMT(r10, 0x40045010, &(0x7f0000000300)=0x3) bind$bt_hci(r9, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000040)="05000000010000", 0x7) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) 1.110165776s ago: executing program 2 (id=1709): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) r3 = syz_io_uring_setup(0x917, &(0x7f0000000300)={0x0, 0x400, 0x1, 0x1000001, 0xf7fffffc}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="c50a0000000000006113b800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000a80)={&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f00000006c0)=""/231, 0xe7}, {&(0x7f0000000580)=""/162, 0xa2}, {0x0}, {&(0x7f0000000640)=""/120, 0x78}, {&(0x7f0000000dc0)=""/227, 0xe3}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f00000002c0)=""/12, 0xc}, {&(0x7f0000000840)=""/155, 0x9b}, {&(0x7f0000000900)=""/133, 0x85}], 0xa, &(0x7f0000000ac0)=""/16, 0x10}, 0x0, 0x140, 0x0, {0x1, r6}}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) r7 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e5, 0x2, 0x2, 0xf2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, &(0x7f0000000080)=[0x5, 0xa22], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448cb, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x3, 0x2e, &(0x7f0000000e80)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x2, 0x0, 0x0, 0x45057bf4ccb05c67, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$dsp(r10, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETFMT(r10, 0x40045010, &(0x7f0000000300)=0x3) bind$bt_hci(r9, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000040)="05000000010000", 0x7) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) 810.402452ms ago: executing program 3 (id=1712): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10ec0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(r0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000071401000000000000000000050060"], 0x18}}, 0x0) (async) ioctl$sock_ifreq(r1, 0x8913, &(0x7f0000000000)={'vlan0\x00', @ifru_hwaddr=@broadcast}) 749.38926ms ago: executing program 3 (id=1713): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = add_key$user(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffb) r5 = add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="ac", 0x1, 0xfffffffffffffffb) r6 = add_key$user(0x0, &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="759eb684925480ece0d6b7a863aee6fccf482cd89876aa12e74c6e0c0e938b7734d19d6de7adc6fb03ecd2c7500d029474418daaa2d76e5098f355bab9bba0bd37130e4219bea1c7d4e6eecaa759e3a6ddeb2829385415bd6718702a03b6333890f5dfdab29d3686f4d5e4ad902a1cf836805a50ad3973bf582ac779239217dce86b0361809ff653b7cf2e655af672c3b9e1a7204a95ff", 0x97, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00000004c0)={r5, r6, r4}, 0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={'md5-generic\x00'}}) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500, 0x20}}], 0x600, 0x0, 0x0) 540.452085ms ago: executing program 0 (id=1714): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 540.14427ms ago: executing program 0 (id=1715): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$binfmt_script(r2, &(0x7f00000006c0)={'#! ', './bus'}, 0x9) copy_file_range(r2, &(0x7f00000001c0), r1, 0x0, 0xfffffff7a003e45c, 0x10000000000000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 450.019749ms ago: executing program 0 (id=1716): r0 = socket(0x2a, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1beddddff023180007000000000004000000", @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%(,:', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x8, 0xe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x81}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x10001}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x4}]}}]}, 0x48}}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) socket$netlink(0x10, 0x3, 0x0) 389.795442ms ago: executing program 1 (id=1717): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000340)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)={0x3, 0x0, [{0xeeef0000, 0xe1, &(0x7f0000000580)=""/225}, {0xd000, 0x24, &(0x7f00000003c0)=""/36}, {0x0, 0x97, &(0x7f0000000700)=""/151}]}) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x501483, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r5, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000396240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x205000, 0x0) fchown(r6, 0x0, 0xee01) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000040)={0x7ffc}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x46108101}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x40800}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 282.587667ms ago: executing program 3 (id=1718): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x3e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_io_uring_setup(0x24fa, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x0, 0x1c5}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24844}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000040)={0xc0, 0x0, 0x8000}) openat$vga_arbiter(0xffffff9c, &(0x7f00000000c0), 0x80, 0x0) 271.261173ms ago: executing program 2 (id=1719): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) r1 = syz_io_uring_setup(0x78f, &(0x7f0000000100)={0x0, 0xcbcc, 0x2000, 0x1, 0x18e}, &(0x7f0000000180), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)=""/56, 0x38}, {&(0x7f00000003c0)=""/145, 0x91}, {&(0x7f0000000480)=""/137, 0x89}, {&(0x7f0000000600)=""/226, 0xe2}, {&(0x7f0000000300)=""/16, 0x10}, {&(0x7f0000000740)=""/202, 0xca}, {&(0x7f0000000540)=""/98, 0x62}, {&(0x7f0000000840)=""/181, 0xb5}], &(0x7f0000000940)=[0x6, 0x80, 0x3188de5e], 0x8}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x4, &(0x7f0000006680)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x110, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x100, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x110}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(r7, &(0x7f0000002080)={0xfc, {"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", 0xa75}}, 0x1006) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r6, 0x2}, 0x18) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x8, @local, 0x8}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000280)="db93d76ea4543c29c8f9bfbdfada2e2573e89d2e721858113df49fbcdab432e79b1f08d655531aaf42a320517ca47a78328a", 0x32}, {&(0x7f0000000340)="c8cead219296c86ea8bd9fb96a16ee4dad6373654f914636a2950fba3d616d0fd9331233bba3e78f5f90b87f5e359631a1171d65e32c1ea1d464a2a0a16410e6f9d51c157939ca0b07e6c372477571f4dc71c80ab6514d0265a2388942f6bd12", 0x60}], 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="010000806f3c952d7f0000004000"], 0x18}}], 0x1, 0x0) 223.097493ms ago: executing program 2 (id=1720): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)=ANY=[@ANYRES32]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) read(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="cf00"]) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) syz_emit_vhci(&(0x7f0000002640)=ANY=[@ANYBLOB="043e1a0d011a00"], 0x1d) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000c40)={0x0, 0x9, 0x0, 'queue0\x00', 0x6}) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000a0a050000e9ca000000000001000000"], 0x14}}, 0x0) io_setup(0x23, &(0x7f0000000280)=0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000040)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) ioctl$BINDER_WRITE_READ(r8, 0x40046208, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="ec00000010dd1c0001000000000000000000ac1414aa000000000000000000000000ac1414aa00"/66, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe88000000000000000000000000000100000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000"], 0xec}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0xff80, @any, 0x4}, 0xe) openat$hpet(0xffffff9c, &(0x7f0000000040), 0x401080, 0x0) listen(r10, 0x3) getsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f0000000140)=0x4) 150.107272ms ago: executing program 3 (id=1721): r0 = syz_open_dev$usbfs(&(0x7f0000000380), 0xc, 0x8401) fcntl$dupfd(r0, 0x406, r0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x2000020, &(0x7f0000000300)=ANY=[]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) mkdir(&(0x7f0000000100)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001400020077673000000000000000000000000000340008803080f8"], 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) getpid() (async) openat$binfmt_register(0xffffff9c, &(0x7f00000005c0), 0x1, 0x0) (async) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) mknod(0x0, 0xc000, 0x0) (async) r4 = socket$inet(0x2, 0x2, 0x1) bind$unix(r4, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e22}, 0x6e) mount(&(0x7f0000000000)=@nullb, 0x0, &(0x7f0000000100)='xfs\x00', 0x400080, &(0x7f00000001c0)='discard') (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) socket(0x23, 0x2, 0xfff) (async) write$P9_RGETLOCK(r3, &(0x7f0000000040)=ANY=[], 0xffffff6a) (async) fcntl$setstatus(r3, 0x4, 0x2000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x181900, 0x0) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0xe) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="64010000210001000000000000000000ac1e0001000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x164}}, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) 60.202457ms ago: executing program 3 (id=1722): getrlimit(0xb, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x7, 0x1, 0xfffff9bd, 0x1, {{0xb, 0x4, 0x1, 0x3f, 0x2c, 0x67, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010100, @multicast2, {[@cipso={0x86, 0x13, 0x0, [{0x5, 0xd, "ff926cc26fb4ab45b9eb35"}]}, @ra={0x94, 0x4}]}}}}}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x2, r1, 0x1, 0x40, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) write$binfmt_misc(r0, &(0x7f0000000080), 0x2000011a) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x2ce9}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x100, 0x400002, 0x0, {{}, {}, {0x8, 0x11, 0x5}}}, 0x24}}, 0x0) 0s ago: executing program 3 (id=1723): r0 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYRES64=r0, @ANYRES32, @ANYRES64=0x0, @ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x8, 0xaf, &(0x7f0000000140)=""/175, 0x82200, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24088052}, 0x20048041) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000000120001002bbd7000ffdbdf25001f0000", @ANYRES32=0x0, @ANYBLOB="c0e200000020000008001c00", @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40014}, 0x40) (async) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000000040)=0x700) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000180c200f3ff0702000026e37626c39713b7eaf5891c4c27769d8f6898390b21b4d79600", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000e0290780000"], 0x0) (async) mknod(&(0x7f0000000100)='./file1/file3\x00', 0xc000, 0x7) (async) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) kernel console output (not intermixed with test programs): T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.530332][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.533411][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 97.537428][ T9] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 97.540174][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.554893][ T9] usb 8-1: config 0 descriptor?? [ 98.073063][ T58] libceph: connect (1)[c::]:6789 error -101 [ 98.075167][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 98.146891][ T9] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 98.226158][ T7147] ceph: No mds server is up or the cluster is laggy [ 98.281835][ T7152] lo speed is unknown, defaulting to 1000 [ 98.284858][ T7154] random: crng reseeded on system resumption [ 98.292387][ T7154] fuse: Bad value for 'fd' [ 98.360652][ T64] usb 8-1: USB disconnect, device number 3 [ 98.369217][ T64] usblp0: removed [ 98.451626][ T7165] syzkaller0: entered promiscuous mode [ 98.455656][ T7165] syzkaller0: entered allmulticast mode [ 99.582100][ T34] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 99.588979][ T7190] netlink: 'syz.2.335': attribute type 10 has an invalid length. [ 99.884200][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.336'. [ 100.115722][ T7200] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 100.197510][ T34] usb 6-1: unable to get BOS descriptor or descriptor too short [ 100.205002][ T34] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 100.207462][ T34] usb 6-1: can't read configurations, error -71 [ 101.442086][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 101.597837][ T9] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 101.602185][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 101.607616][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 101.611349][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.615151][ T9] usb 6-1: Product: syz [ 101.616796][ T9] usb 6-1: Manufacturer: syz [ 101.618276][ T7246] netlink: 'syz.2.353': attribute type 1 has an invalid length. [ 101.618611][ T9] usb 6-1: SerialNumber: syz [ 101.621674][ T7246] netlink: 224 bytes leftover after parsing attributes in process `syz.2.353'. [ 101.629838][ T9] usb 6-1: config 0 descriptor?? [ 101.637963][ T9] usb 6-1: selecting invalid altsetting 0 [ 101.725880][ T7248] fuse: Unknown parameter 'euid' [ 101.840027][ T5986] usb 6-1: USB disconnect, device number 6 [ 102.394119][ T7276] netlink: 'syz.1.362': attribute type 1 has an invalid length. [ 102.396643][ T7276] netlink: 224 bytes leftover after parsing attributes in process `syz.1.362'. [ 102.842051][ T34] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.002015][ T34] usb 5-1: Using ep0 maxpacket: 32 [ 103.005474][ T34] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 103.008117][ T34] usb 5-1: config 0 has no interface number 0 [ 103.010224][ T34] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 103.015771][ T34] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 103.018576][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.021150][ T34] usb 5-1: Product: syz [ 103.022890][ T34] usb 5-1: Manufacturer: syz [ 103.024422][ T34] usb 5-1: SerialNumber: syz [ 103.028309][ T34] usb 5-1: config 0 descriptor?? [ 103.036566][ T34] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 103.045320][ T34] em28xx 5-1:0.132: Video interface 132 found: [ 103.241216][ T7298] netlink: 'syz.2.371': attribute type 1 has an invalid length. [ 103.243746][ T7298] netlink: 224 bytes leftover after parsing attributes in process `syz.2.371'. [ 103.452042][ T34] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 103.518089][ T34] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 103.520870][ T34] em28xx 5-1:0.132: board has no eeprom [ 103.582004][ T34] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 103.584482][ T34] em28xx 5-1:0.132: analog set to bulk mode. [ 103.587924][ T836] em28xx 5-1:0.132: Registering V4L2 extension [ 103.595184][ T34] usb 5-1: USB disconnect, device number 2 [ 103.597515][ T34] em28xx 5-1:0.132: Disconnecting em28xx [ 103.638240][ T836] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 103.641153][ T836] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 103.644418][ T836] em28xx 5-1:0.132: No AC97 audio processor [ 103.649286][ T836] usb 5-1: Decoder not found [ 103.650822][ T836] em28xx 5-1:0.132: failed to create media graph [ 103.653122][ T836] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 103.657263][ T836] em28xx 5-1:0.132: Remote control support is not available for this card. [ 103.659920][ T34] em28xx 5-1:0.132: Closing input extension [ 103.669523][ T34] em28xx 5-1:0.132: Freeing device [ 104.687854][ T7338] netlink: 'syz.1.383': attribute type 1 has an invalid length. [ 104.690258][ T7338] netlink: 224 bytes leftover after parsing attributes in process `syz.1.383'. [ 104.765951][ T7340] tipc: Started in network mode [ 104.767655][ T7340] tipc: Node identity 46a8d6c857c3, cluster identity 4711 [ 104.770542][ T7340] tipc: Enabled bearer , priority 0 [ 104.776018][ T7340] syzkaller0: entered promiscuous mode [ 104.777824][ T7340] syzkaller0: entered allmulticast mode [ 104.789614][ T7340] tipc: Resetting bearer [ 104.797171][ T7339] tipc: Resetting bearer [ 104.804938][ T7339] tipc: Disabling bearer [ 105.390714][ T7366] netlink: 'syz.2.392': attribute type 1 has an invalid length. [ 105.393692][ T7366] netlink: 224 bytes leftover after parsing attributes in process `syz.2.392'. [ 105.630193][ T7372] netlink: 84 bytes leftover after parsing attributes in process `syz.0.394'. [ 106.311295][ T7391] netlink: 'syz.2.401': attribute type 1 has an invalid length. [ 106.314790][ T7391] netlink: 224 bytes leftover after parsing attributes in process `syz.2.401'. [ 106.508351][ T7399] FAULT_INJECTION: forcing a failure. [ 106.508351][ T7399] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 106.514498][ T7399] CPU: 0 UID: 0 PID: 7399 Comm: syz.1.404 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 106.514512][ T7399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.514517][ T7399] Call Trace: [ 106.514521][ T7399] [ 106.514524][ T7399] dump_stack_lvl+0x16c/0x1f0 [ 106.514555][ T7399] should_fail_ex+0x512/0x640 [ 106.514575][ T7399] should_fail_alloc_page+0xe7/0x130 [ 106.514588][ T7399] prepare_alloc_pages+0x3c2/0x610 [ 106.514605][ T7399] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 106.514622][ T7399] ? stack_trace_save+0x8e/0xc0 [ 106.514632][ T7399] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 106.514670][ T7399] ? __alloc_frozen_pages_noprof+0x298/0x23a0 [ 106.514683][ T7399] ? kasan_save_track+0x14/0x30 [ 106.514692][ T7399] ? __kasan_slab_alloc+0x89/0x90 [ 106.514702][ T7399] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 106.514712][ T7399] ? __pmd_alloc+0xc3/0x870 [ 106.514725][ T7399] ? __handle_mm_fault+0x948/0x2a40 [ 106.514733][ T7399] ? handle_mm_fault+0x3fe/0xad0 [ 106.514740][ T7399] ? do_user_addr_fault+0x7a6/0x1370 [ 106.514749][ T7399] ? exc_page_fault+0x5c/0xc0 [ 106.514760][ T7399] ? asm_exc_page_fault+0x26/0x30 [ 106.514769][ T7399] ? __get_user_4+0x14/0x20 [ 106.514778][ T7399] ? do_pages_stat+0x1d1/0x800 [ 106.514788][ T7399] ? kernel_move_pages+0xfd5/0x13a0 [ 106.514800][ T7399] ? __ia32_sys_move_pages+0xdd/0x1b0 [ 106.514813][ T7399] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 106.514827][ T7399] ? policy_nodemask+0xea/0x4e0 [ 106.514839][ T7399] alloc_pages_mpol+0x1fb/0x550 [ 106.514851][ T7399] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 106.514866][ T7399] alloc_pages_noprof+0x131/0x390 [ 106.514882][ T7399] pte_alloc_one+0x19/0x380 [ 106.514893][ T7399] __pte_alloc+0x6d/0x3c0 [ 106.514905][ T7399] ? __pfx___pte_alloc+0x10/0x10 [ 106.514918][ T7399] ? do_raw_spin_lock+0x12c/0x2b0 [ 106.514933][ T7399] ? find_held_lock+0x2b/0x80 [ 106.514942][ T7399] do_pte_missing+0x2925/0x3fb0 [ 106.514953][ T7399] ? _raw_spin_unlock+0x28/0x50 [ 106.514964][ T7399] ? __pmd_alloc+0x3c2/0x870 [ 106.514977][ T7399] ? find_held_lock+0x2b/0x80 [ 106.514986][ T7399] __handle_mm_fault+0x103d/0x2a40 [ 106.514999][ T7399] ? __pfx___handle_mm_fault+0x10/0x10 [ 106.515016][ T7399] ? find_vma+0xbf/0x140 [ 106.515028][ T7399] ? __pfx_find_vma+0x10/0x10 [ 106.515042][ T7399] handle_mm_fault+0x3fe/0xad0 [ 106.515053][ T7399] do_user_addr_fault+0x7a6/0x1370 [ 106.515064][ T7399] ? rcu_is_watching+0x12/0xc0 [ 106.515074][ T7399] exc_page_fault+0x5c/0xc0 [ 106.515086][ T7399] asm_exc_page_fault+0x26/0x30 [ 106.515095][ T7399] RIP: 0010:__get_user_4+0x14/0x20 [ 106.515106][ T7399] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 106.515115][ T7399] RSP: 0018:ffffc90007007af0 EFLAGS: 00050283 [ 106.515123][ T7399] RAX: 0000000080000080 RBX: 0000000000000000 RCX: ffffc90007007a94 [ 106.515129][ T7399] RDX: 00007ffffffff000 RSI: ffffffff821face3 RDI: ffffffff8bf46d20 [ 106.515134][ T7399] RBP: 0000000000000010 R08: f9f0d9a003d2eb8b R09: 0000000000000001 [ 106.515140][ T7399] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 106.515145][ T7399] R13: 000000000000013d R14: 0000000000000000 R15: dffffc0000000000 [ 106.515155][ T7399] ? do_pages_stat+0x1c3/0x800 [ 106.515167][ T7399] do_pages_stat+0x1d1/0x800 [ 106.515179][ T7399] ? __lock_acquire+0x5ca/0x1ba0 [ 106.515194][ T7399] ? __pfx_do_pages_stat+0x10/0x10 [ 106.515207][ T7399] ? __lock_acquire+0x5ca/0x1ba0 [ 106.515227][ T7399] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 106.515239][ T7399] ? lockdep_hardirqs_on+0x7c/0x110 [ 106.515251][ T7399] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 106.515264][ T7399] kernel_move_pages+0xfd5/0x13a0 [ 106.515281][ T7399] ? __pfx_kernel_move_pages+0x10/0x10 [ 106.515295][ T7399] ? __fget_files+0x20e/0x3c0 [ 106.515312][ T7399] ? fput+0x70/0xf0 [ 106.515322][ T7399] ? ksys_write+0x1b9/0x240 [ 106.515331][ T7399] ? __pfx_ksys_write+0x10/0x10 [ 106.515341][ T7399] __ia32_sys_move_pages+0xdd/0x1b0 [ 106.515354][ T7399] ? lockdep_hardirqs_on+0x7c/0x110 [ 106.515366][ T7399] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 106.515380][ T7399] __do_fast_syscall_32+0x73/0x120 [ 106.515394][ T7399] do_fast_syscall_32+0x32/0x80 [ 106.515407][ T7399] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.515419][ T7399] RIP: 0023:0xf7fa4579 [ 106.515426][ T7399] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 106.515434][ T7399] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 000000000000013d [ 106.515443][ T7399] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000001efe [ 106.515448][ T7399] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000080000040 [ 106.515453][ T7399] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.515458][ T7399] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 106.515464][ T7399] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.515475][ T7399] [ 106.872198][ T7416] netlink: 'syz.2.410': attribute type 1 has an invalid length. [ 106.874571][ T7416] netlink: 224 bytes leftover after parsing attributes in process `syz.2.410'. [ 107.297637][ T7433] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.416'. [ 107.301296][ T7433] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.416'. [ 107.550394][ T7440] netlink: 'syz.2.419': attribute type 1 has an invalid length. [ 107.552883][ T7440] netlink: 224 bytes leftover after parsing attributes in process `syz.2.419'. [ 107.877143][ T7449] netlink: 32 bytes leftover after parsing attributes in process `syz.0.421'. [ 108.056548][ T5948] Bluetooth: hci1: unexpected cc 0x2007 length: 100 > 2 [ 108.138238][ T40] audit: type=1326 audit(1746921023.268:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.424" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 108.144951][ T40] audit: type=1326 audit(1746921023.268:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.424" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 108.151459][ T40] audit: type=1326 audit(1746921023.268:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.424" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 108.158285][ T40] audit: type=1326 audit(1746921023.268:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.424" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 108.165524][ T40] audit: type=1326 audit(1746921023.268:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.424" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 108.172555][ T40] audit: type=1326 audit(1746921023.268:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.424" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 108.179003][ T40] audit: type=1326 audit(1746921023.278:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.424" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 108.185831][ T40] audit: type=1326 audit(1746921023.278:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.424" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 108.192363][ T40] audit: type=1326 audit(1746921023.278:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.424" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 108.199101][ T40] audit: type=1326 audit(1746921023.278:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.424" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 108.455410][ T7463] fuse: Bad value for 'group_id' [ 108.456989][ T7463] fuse: Bad value for 'group_id' [ 108.480508][ T7466] netlink: 'syz.2.428': attribute type 1 has an invalid length. [ 108.483351][ T7466] netlink: 224 bytes leftover after parsing attributes in process `syz.2.428'. [ 109.329925][ T7494] netlink: 'syz.2.437': attribute type 1 has an invalid length. [ 109.332391][ T7494] netlink: 224 bytes leftover after parsing attributes in process `syz.2.437'. [ 109.537787][ T7508] netlink: 'syz.3.441': attribute type 10 has an invalid length. [ 109.574142][ T7500] /dev/sr0: Can't open blockdev [ 109.685976][ T7503] fuse: Bad value for 'group_id' [ 109.687590][ T7503] fuse: Bad value for 'group_id' [ 109.886507][ T7522] netlink: 'syz.0.446': attribute type 1 has an invalid length. [ 110.873956][ T7542] tipc: Cannot configure node identity twice [ 110.971709][ T7550] netlink: 'syz.0.455': attribute type 1 has an invalid length. [ 110.975007][ T7550] __nla_validate_parse: 2 callbacks suppressed [ 110.975015][ T7550] netlink: 224 bytes leftover after parsing attributes in process `syz.0.455'. [ 111.208758][ T7558] fuse: Bad value for 'group_id' [ 111.210422][ T7558] fuse: Bad value for 'group_id' [ 111.413412][ T7573] netlink: 68 bytes leftover after parsing attributes in process `syz.3.461'. [ 111.916852][ T7581] netlink: 'syz.0.464': attribute type 1 has an invalid length. [ 111.919494][ T7581] netlink: 224 bytes leftover after parsing attributes in process `syz.0.464'. [ 112.083148][ T5948] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 112.085912][ T5948] Bluetooth: hci1: Injecting HCI hardware error event [ 112.088851][ T5948] Bluetooth: hci1: hardware error 0x00 [ 112.162077][ T7592] overlayfs: overlapping lowerdir path [ 112.538779][ T7598] overlayfs: missing 'workdir' [ 112.859155][ T7608] ip6gre0: entered allmulticast mode [ 112.928382][ T7614] netlink: 'syz.1.474': attribute type 1 has an invalid length. [ 112.930821][ T7614] netlink: 224 bytes leftover after parsing attributes in process `syz.1.474'. [ 113.078715][ T7624] program syz.3.472 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.090861][ T7624] FAULT_INJECTION: forcing a failure. [ 113.090861][ T7624] name failslab, interval 1, probability 0, space 0, times 0 [ 113.094847][ T7624] CPU: 1 UID: 0 PID: 7624 Comm: syz.3.472 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 113.094860][ T7624] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 113.094866][ T7624] Call Trace: [ 113.094870][ T7624] [ 113.094874][ T7624] dump_stack_lvl+0x16c/0x1f0 [ 113.094892][ T7624] should_fail_ex+0x512/0x640 [ 113.094906][ T7624] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 113.094923][ T7624] should_failslab+0xc2/0x120 [ 113.094935][ T7624] __kmalloc_cache_noprof+0x6a/0x3e0 [ 113.094951][ T7624] ? ppp_register_net_channel+0x52/0x530 [ 113.094966][ T7624] ppp_register_net_channel+0x52/0x530 [ 113.094977][ T7624] ? __init_swait_queue_head+0xca/0x150 [ 113.094994][ T7624] ppp_asynctty_open+0x46d/0x620 [ 113.095006][ T7624] ? up_write+0x1b2/0x520 [ 113.095019][ T7624] ? __pfx_ppp_asynctty_open+0x10/0x10 [ 113.095031][ T7624] tty_ldisc_open+0x9c/0x120 [ 113.095042][ T7624] tty_set_ldisc+0x32b/0x780 [ 113.095053][ T7624] tty_ioctl+0xc42/0x1610 [ 113.095065][ T7624] ? __pfx_tty_ioctl+0x10/0x10 [ 113.095082][ T7624] ? find_held_lock+0x2b/0x80 [ 113.095091][ T7624] ? hook_file_ioctl_common+0x145/0x410 [ 113.095105][ T7624] ? __fget_files+0x20e/0x3c0 [ 113.095118][ T7624] ? fput+0x10/0xf0 [ 113.095131][ T7624] tty_compat_ioctl+0x24a/0x4d0 [ 113.095141][ T7624] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 113.095153][ T7624] __ia32_compat_sys_ioctl+0x24c/0x360 [ 113.095168][ T7624] __do_fast_syscall_32+0x73/0x120 [ 113.095183][ T7624] do_fast_syscall_32+0x32/0x80 [ 113.095196][ T7624] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.095209][ T7624] RIP: 0023:0xf70de579 [ 113.095217][ T7624] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 113.095226][ T7624] RSP: 002b:00000000f508c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 113.095235][ T7624] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000000005423 [ 113.095240][ T7624] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.095246][ T7624] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.095251][ T7624] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 113.095256][ T7624] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.095268][ T7624] [ 113.170723][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.790800][ T7644] netlink: 'syz.3.483': attribute type 1 has an invalid length. [ 113.793521][ T7644] netlink: 224 bytes leftover after parsing attributes in process `syz.3.483'. [ 113.899124][ T7654] syz.3.488: attempt to access beyond end of device [ 113.899124][ T7654] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 113.903371][ T7654] hfsplus: unable to find HFS+ superblock [ 114.172054][ T5948] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 114.172124][ T5954] Bluetooth: hci3: command 0x0405 tx timeout [ 114.224917][ T7663] program syz.2.489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.420261][ T7668] sctp: [Deprecated]: syz.1.492 (pid 7668) Use of struct sctp_assoc_value in delayed_ack socket option. [ 114.420261][ T7668] Use struct sctp_sack_info instead [ 114.821509][ T7682] netlink: 'syz.3.496': attribute type 1 has an invalid length. [ 114.828432][ T7682] netlink: 224 bytes leftover after parsing attributes in process `syz.3.496'. [ 115.437184][ T7704] netlink: 'syz.1.505': attribute type 1 has an invalid length. [ 115.440214][ T7704] netlink: 224 bytes leftover after parsing attributes in process `syz.1.505'. [ 115.539331][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'. [ 115.543494][ T7710] netlink: 'syz.1.506': attribute type 5 has an invalid length. [ 115.545925][ T7710] netlink: 20 bytes leftover after parsing attributes in process `syz.1.506'. [ 115.557993][ T7710] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 115.560876][ T7710] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 115.564205][ T7710] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 115.567696][ T7710] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 115.570606][ T7710] geneve2: entered promiscuous mode [ 115.572368][ T7710] geneve2: entered allmulticast mode [ 115.729120][ T7713] program syz.0.507 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.227599][ T7728] sp0: Synchronizing with TNC [ 116.302511][ T7727] [U] è [ 116.351583][ T7736] netlink: 'syz.2.514': attribute type 1 has an invalid length. [ 116.354049][ T7736] netlink: 224 bytes leftover after parsing attributes in process `syz.2.514'. [ 117.943515][ T7768] netlink: 'syz.2.524': attribute type 1 has an invalid length. [ 117.946309][ T7768] netlink: 224 bytes leftover after parsing attributes in process `syz.2.524'. [ 118.543909][ T7782] lo speed is unknown, defaulting to 1000 [ 119.096998][ T7796] netlink: 'syz.1.533': attribute type 1 has an invalid length. [ 119.099493][ T7796] netlink: 224 bytes leftover after parsing attributes in process `syz.1.533'. [ 119.170029][ T7801] netlink: 'syz.1.535': attribute type 6 has an invalid length. [ 119.226712][ T7804] lo speed is unknown, defaulting to 1000 [ 119.573276][ T7825] netlink: 'syz.0.542': attribute type 1 has an invalid length. [ 119.575812][ T7825] netlink: 224 bytes leftover after parsing attributes in process `syz.0.542'. [ 119.665270][ T7830] lo speed is unknown, defaulting to 1000 [ 119.762024][ T7835] FAULT_INJECTION: forcing a failure. [ 119.762024][ T7835] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 119.767146][ T7835] CPU: 3 UID: 0 PID: 7835 Comm: syz.3.545 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 119.767160][ T7835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.767166][ T7835] Call Trace: [ 119.767169][ T7835] [ 119.767174][ T7835] dump_stack_lvl+0x16c/0x1f0 [ 119.767191][ T7835] should_fail_ex+0x512/0x640 [ 119.767207][ T7835] _copy_from_user+0x2e/0xd0 [ 119.767222][ T7835] sg_new_write.isra.0+0x3dd/0xab0 [ 119.767238][ T7835] ? __pfx_sg_new_write.isra.0+0x10/0x10 [ 119.767260][ T7835] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.767274][ T7835] ? do_vfs_ioctl+0x512/0x1990 [ 119.767290][ T7835] sg_ioctl+0x189c/0x27f0 [ 119.767306][ T7835] ? __pfx_sg_ioctl+0x10/0x10 [ 119.767321][ T7835] ? find_held_lock+0x2b/0x80 [ 119.767330][ T7835] ? hook_file_ioctl_common+0x145/0x410 [ 119.767344][ T7835] ? __fget_files+0x20e/0x3c0 [ 119.767358][ T7835] ? fput+0x10/0xf0 [ 119.767369][ T7835] ? __pfx_sg_ioctl+0x10/0x10 [ 119.767381][ T7835] compat_ptr_ioctl+0x6b/0xa0 [ 119.767393][ T7835] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 119.767405][ T7835] __ia32_compat_sys_ioctl+0x24c/0x360 [ 119.767419][ T7835] __do_fast_syscall_32+0x73/0x120 [ 119.767434][ T7835] do_fast_syscall_32+0x32/0x80 [ 119.767447][ T7835] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.767459][ T7835] RIP: 0023:0xf70de579 [ 119.767468][ T7835] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 119.767477][ T7835] RSP: 002b:00000000f50ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 119.767487][ T7835] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000002285 [ 119.767492][ T7835] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.767498][ T7835] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 119.767503][ T7835] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 119.767508][ T7835] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.767520][ T7835] [ 119.814658][ T7831] lo speed is unknown, defaulting to 1000 [ 119.884640][ T7840] tmpfs: Bad value for 'mpol' [ 120.022793][ T7841] fuse: Unknown parameter 'grou00000000000000000000' [ 120.239883][ T7851] netlink: 'syz.2.550': attribute type 4 has an invalid length. [ 120.244181][ T7851] netlink: 152 bytes leftover after parsing attributes in process `syz.2.550'. [ 120.251861][ T7851] : renamed from bond0 (while UP) [ 120.261385][ T7851] 9pnet: Found fid 0 not clunked [ 120.353797][ T7857] netlink: 'syz.1.551': attribute type 1 has an invalid length. [ 120.356222][ T7857] netlink: 224 bytes leftover after parsing attributes in process `syz.1.551'. [ 120.414676][ T7863] netlink: 'syz.0.555': attribute type 10 has an invalid length. [ 120.420319][ T7863] team0: Device ipvlan1 failed to register rx_handler [ 121.164784][ T7879] fuse: Unknown parameter 'grou00000000000000000000' [ 121.272057][ T3228] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 121.389741][ T7892] netlink: 'syz.0.562': attribute type 1 has an invalid length. [ 121.392281][ T7892] netlink: 224 bytes leftover after parsing attributes in process `syz.0.562'. [ 121.433689][ T3228] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 121.438471][ T3228] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 121.442933][ T3228] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.449477][ T3228] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 121.453646][ T3228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.456206][ T3228] usb 6-1: Product: syz [ 121.457704][ T3228] usb 6-1: Manufacturer: syz [ 121.459546][ T3228] usb 6-1: SerialNumber: syz [ 121.666748][ T3228] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 121.808086][ T7908] syzkaller0: entered promiscuous mode [ 121.809956][ T7908] syzkaller0: entered allmulticast mode [ 121.932552][ T7909] syz.0.567: attempt to access beyond end of device [ 121.932552][ T7909] sr0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 122.450408][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 122.524948][ T7918] fuse: Bad value for 'fd' [ 122.702979][ T7925] program syz.0.573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.739014][ T29] usb 6-1: USB disconnect, device number 7 [ 122.743702][ T29] usblp0: removed [ 123.217010][ T7951] netlink: 'syz.3.581': attribute type 1 has an invalid length. [ 123.219526][ T7951] netlink: 224 bytes leftover after parsing attributes in process `syz.3.581'. [ 123.261339][ T7946] fuse: Unknown parameter 'grou00000000000000000000' [ 123.621731][ T7970] syzkaller0: entered promiscuous mode [ 123.623612][ T7970] syzkaller0: entered allmulticast mode [ 123.999473][ T7982] netlink: 'syz.0.591': attribute type 1 has an invalid length. [ 124.003780][ T7982] netlink: 224 bytes leftover after parsing attributes in process `syz.0.591'. [ 124.284716][ T7986] fuse: Unknown parameter 'group_i00000000000000000000' [ 124.561692][ T7991] program syz.3.593 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.633292][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.595'. [ 124.781846][ T8008] netlink: 'syz.0.600': attribute type 1 has an invalid length. [ 124.784527][ T8008] netlink: 224 bytes leftover after parsing attributes in process `syz.0.600'. [ 125.752062][ T8039] syzkaller0: entered promiscuous mode [ 125.753994][ T8039] syzkaller0: entered allmulticast mode [ 125.818198][ T8043] netlink: 'syz.2.611': attribute type 1 has an invalid length. [ 125.820659][ T8043] netlink: 224 bytes leftover after parsing attributes in process `syz.2.611'. [ 125.848531][ T8035] fuse: Unknown parameter 'group_i00000000000000000000' [ 126.249923][ T8056] program syz.3.614 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.825061][ T8074] netlink: 'syz.3.621': attribute type 1 has an invalid length. [ 126.827506][ T8074] netlink: 224 bytes leftover after parsing attributes in process `syz.3.621'. [ 127.827011][ T8094] fuse: Unknown parameter 'group_i00000000000000000000' [ 127.880113][ T8100] syzkaller0: entered promiscuous mode [ 127.883151][ T8100] syzkaller0: entered allmulticast mode [ 128.223101][ T8115] program syz.3.629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.303311][ T8118] netlink: 'syz.0.634': attribute type 1 has an invalid length. [ 128.305857][ T8118] netlink: 224 bytes leftover after parsing attributes in process `syz.0.634'. [ 129.102728][ T8141] netlink: 32 bytes leftover after parsing attributes in process `syz.1.639'. [ 129.359394][ T8151] netlink: 'syz.0.643': attribute type 1 has an invalid length. [ 129.362048][ T8151] netlink: 224 bytes leftover after parsing attributes in process `syz.0.643'. [ 129.402264][ T8144] fuse: Unknown parameter 'group_id00000000000000000000' [ 129.639954][ T8158] syzkaller0: entered promiscuous mode [ 129.641730][ T8158] syzkaller0: entered allmulticast mode [ 129.712571][ T8161] program syz.0.644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.830801][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.650'. [ 130.358471][ T8178] netlink: 'syz.0.652': attribute type 1 has an invalid length. [ 130.361953][ T8178] netlink: 224 bytes leftover after parsing attributes in process `syz.0.652'. [ 130.625097][ T8181] fuse: Unknown parameter 'group_id00000000000000000000' [ 131.095764][ T8209] netlink: 'syz.0.661': attribute type 1 has an invalid length. [ 131.098369][ T8209] netlink: 224 bytes leftover after parsing attributes in process `syz.0.661'. [ 131.473940][ T8217] syzkaller0: entered promiscuous mode [ 131.475832][ T8217] syzkaller0: entered allmulticast mode [ 131.747136][ T8221] program syz.1.664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.001206][ T8226] fuse: Unknown parameter 'group_id00000000000000000000' [ 132.189184][ T8238] netlink: 'syz.2.671': attribute type 1 has an invalid length. [ 132.191601][ T8238] netlink: 224 bytes leftover after parsing attributes in process `syz.2.671'. [ 132.255456][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.070872][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'. [ 133.152582][ T8276] netlink: 'syz.0.682': attribute type 1 has an invalid length. [ 133.154919][ T8276] netlink: 224 bytes leftover after parsing attributes in process `syz.0.682'. [ 133.216065][ T8279] syzkaller0: entered promiscuous mode [ 133.217769][ T8279] syzkaller0: entered allmulticast mode [ 133.474603][ T8277] fuse: Bad value for 'user_id' [ 133.476753][ T8277] fuse: Bad value for 'user_id' [ 133.649955][ T8287] program syz.0.684 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.182567][ T8304] netlink: 24 bytes leftover after parsing attributes in process `syz.3.690'. [ 134.580893][ T8319] netlink: 'syz.1.695': attribute type 1 has an invalid length. [ 134.586321][ T8319] netlink: 224 bytes leftover after parsing attributes in process `syz.1.695'. [ 134.910427][ T8321] fuse: Bad value for 'user_id' [ 134.913146][ T8321] fuse: Bad value for 'user_id' [ 135.126527][ T8333] program syz.1.696 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.337436][ T8346] Driver unsupported XDP return value 0 on prog (id 191) dev N/A, expect packet loss! [ 135.427513][ T8348] syzkaller0: entered promiscuous mode [ 135.430041][ T8348] syzkaller0: entered allmulticast mode [ 135.654805][ T8355] fuse: Bad value for 'user_id' [ 135.656546][ T8355] fuse: Bad value for 'user_id' [ 135.673161][ T8359] netlink: 'syz.1.706': attribute type 1 has an invalid length. [ 135.675639][ T8359] netlink: 224 bytes leftover after parsing attributes in process `syz.1.706'. [ 136.315931][ T8370] FAT-fs (nullb0): bogus number of reserved sectors [ 136.318765][ T8370] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 136.835808][ T8382] program syz.1.714 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.930382][ T8385] netlink: 'syz.1.715': attribute type 1 has an invalid length. [ 136.932851][ T8385] netlink: 224 bytes leftover after parsing attributes in process `syz.1.715'. [ 137.189676][ T8390] fuse: Bad value for 'fd' [ 137.436177][ T8403] syzkaller0: entered promiscuous mode [ 137.437966][ T8403] syzkaller0: entered allmulticast mode [ 137.668629][ T8408] program syz.0.723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.745471][ T8411] netlink: 'syz.3.724': attribute type 1 has an invalid length. [ 137.747966][ T8411] netlink: 224 bytes leftover after parsing attributes in process `syz.3.724'. [ 138.084969][ T8429] ======================================================= [ 138.084969][ T8429] WARNING: The mand mount option has been deprecated and [ 138.084969][ T8429] and is ignored by this kernel. Remove the mand [ 138.084969][ T8429] option from the mount to silence this warning. [ 138.084969][ T8429] ======================================================= [ 138.100654][ T8429] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 138.115954][ T8429] CIFS mount error: No usable UNC path provided in device string! [ 138.115954][ T8429] [ 138.122524][ T8429] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 138.295273][ T8427] fuse: Bad value for 'fd' [ 138.797276][ T8452] netlink: 'syz.0.736': attribute type 1 has an invalid length. [ 138.800019][ T8452] netlink: 224 bytes leftover after parsing attributes in process `syz.0.736'. [ 138.803255][ T8442] program syz.3.733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.390545][ T8462] fuse: Bad value for 'fd' [ 139.625422][ T8481] netlink: 'syz.1.745': attribute type 1 has an invalid length. [ 139.628337][ T8481] netlink: 224 bytes leftover after parsing attributes in process `syz.1.745'. [ 139.992238][ T8493] program syz.3.747 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.489439][ T8505] fuse: Bad value for 'fd' [ 140.588156][ T8513] Invalid logical block size (1048576) [ 140.799971][ T8520] netlink: 'syz.0.758': attribute type 1 has an invalid length. [ 140.802995][ T8520] netlink: 224 bytes leftover after parsing attributes in process `syz.0.758'. [ 141.156602][ T8529] program syz.3.759 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.670292][ T8552] fuse: Bad value for 'fd' [ 141.869914][ T8557] netlink: 'syz.1.769': attribute type 1 has an invalid length. [ 141.872399][ T8557] netlink: 224 bytes leftover after parsing attributes in process `syz.1.769'. [ 142.175224][ T8570] program syz.3.773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.633876][ T8581] fuse: Bad value for 'fd' [ 142.823099][ T8592] netlink: 'syz.1.780': attribute type 1 has an invalid length. [ 142.825850][ T8592] netlink: 224 bytes leftover after parsing attributes in process `syz.1.780'. [ 142.860003][ T8593] netlink: 48 bytes leftover after parsing attributes in process `syz.2.779'. [ 143.528590][ T8613] program syz.3.784 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.696266][ T8620] netlink: 'syz.2.789': attribute type 1 has an invalid length. [ 143.698755][ T8620] netlink: 224 bytes leftover after parsing attributes in process `syz.2.789'. [ 144.214671][ T8635] fuse: Invalid rootmode [ 144.443606][ T8639] fuse: Bad value for 'fd' [ 144.853751][ T8647] netlink: 'syz.1.798': attribute type 1 has an invalid length. [ 144.857044][ T8647] netlink: 224 bytes leftover after parsing attributes in process `syz.1.798'. [ 145.609276][ T8664] program syz.2.803 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.974835][ T8667] fuse: Invalid rootmode [ 146.343764][ T8679] netlink: 'syz.3.807': attribute type 1 has an invalid length. [ 146.347039][ T8679] netlink: 224 bytes leftover after parsing attributes in process `syz.3.807'. [ 146.428727][ T8681] fuse: Bad value for 'fd' [ 146.636670][ T8689] program syz.0.811 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.071851][ T8702] fuse: Invalid rootmode [ 147.110192][ T8703] program syz.1.814 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.298812][ T8709] netlink: 'syz.3.816': attribute type 1 has an invalid length. [ 147.302365][ T8709] netlink: 224 bytes leftover after parsing attributes in process `syz.3.816'. [ 147.521111][ T8714] lo speed is unknown, defaulting to 1000 [ 147.524475][ T8714] lo speed is unknown, defaulting to 1000 [ 147.527882][ T8714] lo speed is unknown, defaulting to 1000 [ 147.535834][ T8714] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 147.546606][ T8714] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 147.569083][ T8714] lo speed is unknown, defaulting to 1000 [ 147.576348][ T8714] lo speed is unknown, defaulting to 1000 [ 147.581325][ T8714] lo speed is unknown, defaulting to 1000 [ 147.585760][ T8714] lo speed is unknown, defaulting to 1000 [ 147.817563][ T8735] netlink: 'syz.3.825': attribute type 1 has an invalid length. [ 147.820142][ T8735] netlink: 224 bytes leftover after parsing attributes in process `syz.3.825'. [ 147.882641][ T8737] fuse: Bad value for 'fd' [ 147.994691][ T8732] fuse: Bad value for 'rootmode' [ 148.670073][ T8759] netlink: 'syz.3.834': attribute type 1 has an invalid length. [ 148.675631][ T8759] netlink: 224 bytes leftover after parsing attributes in process `syz.3.834'. [ 149.167753][ T8761] program syz.1.828 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.377331][ T8765] fuse: Bad value for 'rootmode' [ 149.509390][ T8785] netlink: 456 bytes leftover after parsing attributes in process `syz.1.841'. [ 149.625824][ T8790] netlink: 'syz.1.844': attribute type 1 has an invalid length. [ 149.628325][ T8790] netlink: 224 bytes leftover after parsing attributes in process `syz.1.844'. [ 150.503359][ T8816] program syz.2.848 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.512412][ T8822] netlink: 20 bytes leftover after parsing attributes in process `syz.1.853'. [ 150.513943][ T8815] fuse: Bad value for 'rootmode' [ 150.516074][ T8822] IPv6: NLM_F_CREATE should be specified when creating new route [ 150.609009][ T8828] netlink: 'syz.3.855': attribute type 1 has an invalid length. [ 150.611371][ T8828] netlink: 224 bytes leftover after parsing attributes in process `syz.3.855'. [ 151.341134][ T8858] netlink: 'syz.0.865': attribute type 1 has an invalid length. [ 151.343930][ T8858] netlink: 224 bytes leftover after parsing attributes in process `syz.0.865'. [ 151.609103][ T8866] fuse: Unknown parameter 'use00000000000000000000' [ 151.899499][ T8873] program syz.3.869 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.746378][ T8903] fuse: Unknown parameter 'use00000000000000000000' [ 153.225601][ T8916] netlink: 'syz.0.881': attribute type 1 has an invalid length. [ 153.228320][ T8916] netlink: 224 bytes leftover after parsing attributes in process `syz.0.881'. [ 153.427848][ T8928] Cannot find set identified by id 0 to match [ 153.502831][ T8937] netlink: 'syz.1.890': attribute type 1 has an invalid length. [ 153.506094][ T8937] netlink: 224 bytes leftover after parsing attributes in process `syz.1.890'. [ 153.697476][ T8940] program syz.2.889 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.483444][ T8953] fuse: Unknown parameter 'use00000000000000000000' [ 155.176767][ T8978] netlink: 'syz.2.899': attribute type 1 has an invalid length. [ 155.180138][ T8978] netlink: 224 bytes leftover after parsing attributes in process `syz.2.899'. [ 155.676390][ T8991] program syz.2.904 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.745372][ T8992] fuse: Unknown parameter 'user_i00000000000000000000' [ 156.403143][ T9013] netlink: 'syz.2.912': attribute type 1 has an invalid length. [ 156.405557][ T9013] netlink: 224 bytes leftover after parsing attributes in process `syz.2.912'. [ 157.013830][ T9028] fuse: Unknown parameter 'user_i00000000000000000000' [ 157.341356][ T9038] netlink: 'syz.2.921': attribute type 1 has an invalid length. [ 157.344302][ T9038] netlink: 224 bytes leftover after parsing attributes in process `syz.2.921'. [ 157.535519][ T9041] program syz.3.920 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.482424][ T9073] netlink: 'syz.2.932': attribute type 1 has an invalid length. [ 158.484948][ T9073] netlink: 224 bytes leftover after parsing attributes in process `syz.2.932'. [ 158.577195][ T9071] fuse: Unknown parameter 'user_i00000000000000000000' [ 159.100121][ T9095] program syz.2.936 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.121004][ T9098] netlink: 'syz.0.941': attribute type 1 has an invalid length. [ 159.124153][ T9098] netlink: 224 bytes leftover after parsing attributes in process `syz.0.941'. [ 159.610045][ T9109] fuse: Unknown parameter 'user_id00000000000000000000' [ 160.003289][ T9115] fuse: Unknown parameter 'user_id00000000000000000000' [ 160.112328][ T9119] 9pnet_fd: Insufficient options for proto=fd [ 160.386252][ T9132] netlink: 'syz.0.951': attribute type 1 has an invalid length. [ 160.388657][ T9132] netlink: 224 bytes leftover after parsing attributes in process `syz.0.951'. [ 160.970508][ T9142] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 161.257835][ T9150] bridge0: port 1(vlan2) entered blocking state [ 161.261325][ T9150] bridge0: port 1(vlan2) entered disabled state [ 161.264530][ T9150] vlan2: entered allmulticast mode [ 161.266222][ T9150] bridge0: entered allmulticast mode [ 161.278910][ T9150] vlan2: left allmulticast mode [ 161.280997][ T9150] bridge0: left allmulticast mode [ 161.407283][ T9148] fuse: Unknown parameter 'user_id00000000000000000000' [ 161.457051][ T9158] netlink: 'syz.2.961': attribute type 1 has an invalid length. [ 161.460884][ T9158] netlink: 224 bytes leftover after parsing attributes in process `syz.2.961'. [ 161.904683][ T9167] fuse: Bad value for 'fd' [ 162.067750][ T3228] libceph: connect (1)[c::]:6789 error -101 [ 162.070054][ T3228] libceph: mon0 (1)[c::]:6789 connect error [ 162.084148][ T9177] ceph: No mds server is up or the cluster is laggy [ 162.694871][ T9195] netlink: 20 bytes leftover after parsing attributes in process `syz.1.972'. [ 162.701002][ T9195] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.703584][ T9195] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.004583][ T9208] fuse: Bad value for 'fd' [ 163.575253][ T9227] lo speed is unknown, defaulting to 1000 [ 163.705114][ T9227] lo speed is unknown, defaulting to 1000 [ 163.725127][ T29] libceph: connect (1)[c::]:6789 error -101 [ 163.728650][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 163.752973][ T9232] ceph: No mds server is up or the cluster is laggy [ 164.211118][ T9258] rdma_rxe: rxe_newlink: failed to add lo [ 165.266245][ T24] IPVS: starting estimator thread 0... [ 165.352040][ T9282] IPVS: using max 44 ests per chain, 105600 per kthread [ 166.738848][ T9313] netlink: 'syz.0.1011': attribute type 1 has an invalid length. [ 166.741423][ T9313] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1011'. [ 167.238236][ T9325] netlink: 'syz.1.1015': attribute type 1 has an invalid length. [ 167.356785][ T9330] netlink: 'syz.2.1017': attribute type 10 has an invalid length. [ 167.360732][ T9330] veth0_macvtap: left promiscuous mode [ 167.367702][ T9330] batman_adv: batadv0: Adding interface: macvtap0 [ 167.370418][ T9330] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.380970][ T9330] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 167.433571][ T9333] sctp: [Deprecated]: syz.2.1018 (pid 9333) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.433571][ T9333] Use struct sctp_sack_info instead [ 167.514795][ T9336] sctp: [Deprecated]: syz.2.1018 (pid 9336) Use of int in max_burst socket option deprecated. [ 167.514795][ T9336] Use struct sctp_assoc_value instead [ 167.540796][ T9336] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.543391][ T9336] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.599744][ T9336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.607159][ T9336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.645568][ T9336] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.648337][ T9336] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.651052][ T9336] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.654486][ T9336] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.681449][ T5954] Bluetooth: hci3: link tx timeout [ 167.683693][ T5954] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 167.687081][ T5954] Bluetooth: hci3: link tx timeout [ 167.688743][ T5954] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 167.713744][ T5954] Bluetooth: hci3: link tx timeout [ 167.715587][ T5954] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 167.754155][ T5954] Bluetooth: hci3: link tx timeout [ 167.755891][ T5954] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 168.020861][ T5954] Bluetooth: hci3: link tx timeout [ 168.022689][ T5954] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 168.104050][ T9366] netlink: 'syz.1.1024': attribute type 1 has an invalid length. [ 168.107155][ T9366] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1024'. [ 168.264185][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 168.409313][ T5948] Bluetooth: hci3: link tx timeout [ 168.468387][ T5948] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 168.512626][ T29] IPVS: starting estimator thread 0... [ 168.565421][ T5948] Bluetooth: hci3: link tx timeout [ 168.567358][ T5948] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 168.612011][ T9386] IPVS: using max 45 ests per chain, 108000 per kthread [ 168.778402][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1032'. [ 168.833284][ T9397] netlink: 'syz.2.1034': attribute type 10 has an invalid length. [ 169.604228][ T5948] Bluetooth: hci3: link tx timeout [ 169.605991][ T5948] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.762959][ T5948] Bluetooth: hci3: command 0x0405 tx timeout [ 170.162040][ T5948] Bluetooth: hci2: command 0x0406 tx timeout [ 170.195128][ T5989] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 170.353198][ T5989] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.356447][ T5989] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 170.360949][ T5989] usb 6-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 170.363955][ T5989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.366559][ T5989] usb 6-1: Product: syz [ 170.367956][ T5989] usb 6-1: Manufacturer: syz [ 170.369506][ T5989] usb 6-1: SerialNumber: syz [ 170.374574][ T5989] usb 6-1: config 0 descriptor?? [ 170.591651][ T9] usb 6-1: USB disconnect, device number 8 [ 170.916075][ T9447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1049'. [ 170.948507][ T9448] program syz.2.1048 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.971648][ T9450] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1050'. [ 171.389018][ T9461] tipc: Cannot configure node identity twice [ 172.418748][ T9494] netlink: 'syz.1.1067': attribute type 1 has an invalid length. [ 172.422126][ T9494] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1067'. [ 172.535253][ T9497] xt_CT: You must specify a L4 protocol and not use inversions on it [ 172.591799][ T9499] netlink: 'syz.1.1068': attribute type 1 has an invalid length. [ 172.597087][ T9499] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1068'. [ 172.741190][ T40] kauditd_printk_skb: 57 callbacks suppressed [ 172.741200][ T40] audit: type=1326 audit(1746921087.868:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.3.1070" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 172.758717][ T40] audit: type=1326 audit(1746921087.878:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.3.1070" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 172.768749][ T40] audit: type=1326 audit(1746921087.878:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.3.1070" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 172.775981][ T40] audit: type=1326 audit(1746921087.878:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.3.1070" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 172.782518][ T40] audit: type=1326 audit(1746921087.878:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.3.1070" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 172.789266][ T40] audit: type=1326 audit(1746921087.878:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.3.1070" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 172.798354][ T40] audit: type=1326 audit(1746921087.878:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.3.1070" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 172.806230][ T40] audit: type=1326 audit(1746921087.878:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.3.1070" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 172.812849][ T40] audit: type=1326 audit(1746921087.888:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.3.1070" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70de5a7 code=0x7ffc0000 [ 172.819499][ T40] audit: type=1326 audit(1746921087.888:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.3.1070" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 172.829893][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1070'. [ 174.138055][ T9538] netlink: 'syz.2.1078': attribute type 1 has an invalid length. [ 174.141021][ T9538] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1078'. [ 174.174717][ T9541] fuse: Bad value for 'fd' [ 174.214305][ T9546] netlink: 'syz.2.1080': attribute type 1 has an invalid length. [ 174.216759][ T9546] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1080'. [ 174.310494][ T9554] sctp: [Deprecated]: syz.3.1083 (pid 9554) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.310494][ T9554] Use struct sctp_sack_info instead [ 174.407585][ T9559] sctp: [Deprecated]: syz.3.1083 (pid 9559) Use of int in max_burst socket option deprecated. [ 174.407585][ T9559] Use struct sctp_assoc_value instead [ 174.630244][ T9559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.637858][ T9559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.662992][ T9559] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.665818][ T9559] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.668596][ T9559] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.671341][ T9559] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.676737][ T9559] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 174.700382][ T1331] lo speed is unknown, defaulting to 1000 [ 174.702774][ T1331] sz1: Port: 1 Link DOWN [ 174.712400][ T1331] lo speed is unknown, defaulting to 1000 [ 175.781114][ T9593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1096'. [ 175.957636][ T3228] IPVS: starting estimator thread 0... [ 176.082213][ T9599] IPVS: using max 28 ests per chain, 67200 per kthread [ 176.502265][ T9613] sctp: [Deprecated]: syz.0.1100 (pid 9613) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.502265][ T9613] Use struct sctp_sack_info instead [ 176.596566][ T9614] sctp: [Deprecated]: syz.0.1100 (pid 9614) Use of int in max_burst socket option deprecated. [ 176.596566][ T9614] Use struct sctp_assoc_value instead [ 176.668101][ T9613] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 176.775617][ T9619] tmpfs: Bad value for 'mpol' [ 176.959041][ T9622] netlink: 'syz.1.1103': attribute type 1 has an invalid length. [ 176.961562][ T9622] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1103'. [ 177.137025][ T9630] netlink: 'syz.1.1106': attribute type 1 has an invalid length. [ 177.179088][ T9630] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 177.191344][ T97] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 177.196443][ T9630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.205054][ T9630] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1106'. [ 177.232872][ T9634] netlink: 'syz.3.1107': attribute type 1 has an invalid length. [ 177.235323][ T9634] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1107'. [ 177.323018][ T46] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 177.765208][ T9656] /dev/sr0: Can't open blockdev [ 178.063489][ T9665] fuse: Unknown parameter 'fd0x0000000000000006' [ 178.159637][ T9676] netlink: 'syz.2.1117': attribute type 10 has an invalid length. [ 178.246758][ T9681] netlink: 'syz.3.1118': attribute type 1 has an invalid length. [ 178.251235][ T9681] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1118'. [ 178.308976][ T9673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1117'. [ 178.580228][ T9694] sctp: [Deprecated]: syz.1.1121 (pid 9694) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.580228][ T9694] Use struct sctp_sack_info instead [ 178.935809][ T9699] tipc: Enabled bearer , priority 0 [ 178.940828][ T9699] syzkaller0: entered promiscuous mode [ 178.942719][ T9699] syzkaller0: entered allmulticast mode [ 178.954722][ T9699] tipc: Resetting bearer [ 178.977006][ T9698] tipc: Resetting bearer [ 179.025786][ T9698] tipc: Disabling bearer [ 180.580334][ T9729] netlink: 'syz.0.1133': attribute type 1 has an invalid length. [ 180.608067][ T9729] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 180.618990][ T9729] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.623008][ T1141] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 180.627001][ T9735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1134'. [ 180.634289][ T9729] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1133'. [ 180.733025][ T1141] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 180.995588][ T9751] netlink: 'syz.2.1144': attribute type 12 has an invalid length. [ 181.418535][ T9754] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1139'. [ 181.421347][ T9754] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1139'. [ 181.517331][ T40] kauditd_printk_skb: 170 callbacks suppressed [ 181.517342][ T40] audit: type=1326 audit(1746921096.648:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.1.1142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 181.530739][ T40] audit: type=1326 audit(1746921096.648:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.1.1142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 181.544753][ T40] audit: type=1326 audit(1746921096.648:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.1.1142" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 181.556688][ T40] audit: type=1326 audit(1746921096.648:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.1.1142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 181.566012][ T40] audit: type=1326 audit(1746921096.648:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.1.1142" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 181.572768][ T40] audit: type=1326 audit(1746921096.648:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.1.1142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 181.579297][ T40] audit: type=1326 audit(1746921096.648:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.1.1142" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 181.592492][ T40] audit: type=1326 audit(1746921096.648:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.1.1142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 181.612233][ T40] audit: type=1326 audit(1746921096.658:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.1.1142" exe="/syz-executor" sig=0 arch=40000003 syscall=449 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 181.618818][ T40] audit: type=1326 audit(1746921096.658:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.1.1142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 181.694076][ T9767] netlink: 'syz.2.1145': attribute type 1 has an invalid length. [ 181.723086][ T9767] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 181.733938][ T12] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 181.733943][ T9767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.739936][ T9767] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1145'. [ 181.856104][ T1141] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 181.881872][ T9775] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1146'. [ 181.987705][ T9789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1150'. [ 181.992143][ T9789] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1150'. [ 182.369996][ T9812] netlink: 'syz.3.1159': attribute type 10 has an invalid length. [ 182.556115][ T9820] overlayfs: upper fs does not support tmpfile. [ 182.584891][ T5989] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 182.762635][ T5989] usb 5-1: Using ep0 maxpacket: 32 [ 182.769729][ T5989] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 182.774757][ T5989] usb 5-1: config 0 has no interface number 0 [ 182.778757][ T5989] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 182.792298][ T5989] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 182.814567][ T5989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.824721][ T5989] usb 5-1: Product: syz [ 182.826145][ T5989] usb 5-1: Manufacturer: syz [ 182.827598][ T5989] usb 5-1: SerialNumber: syz [ 182.835542][ T5989] usb 5-1: config 0 descriptor?? [ 182.840892][ T5989] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 182.845326][ T5989] em28xx 5-1:0.132: Video interface 132 found: [ 182.863318][ T9832] Invalid source name [ 182.864595][ T9832] UBIFS error (pid: 9832): cannot open "./file0", error -22 [ 182.884203][ T9834] FAULT_INJECTION: forcing a failure. [ 182.884203][ T9834] name failslab, interval 1, probability 0, space 0, times 0 [ 182.890505][ T9834] CPU: 0 UID: 0 PID: 9834 Comm: syz.1.1168 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 182.890519][ T9834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 182.890525][ T9834] Call Trace: [ 182.890529][ T9834] [ 182.890533][ T9834] dump_stack_lvl+0x16c/0x1f0 [ 182.890551][ T9834] should_fail_ex+0x512/0x640 [ 182.890571][ T9834] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 182.890590][ T9834] should_failslab+0xc2/0x120 [ 182.890609][ T9834] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 182.890626][ T9834] ? ptlock_alloc+0x1f/0x70 [ 182.890644][ T9834] ptlock_alloc+0x1f/0x70 [ 182.890659][ T9834] pte_alloc_one+0x6d/0x380 [ 182.890677][ T9834] __pte_alloc+0x6d/0x3c0 [ 182.890690][ T9834] ? __pfx___pte_alloc+0x10/0x10 [ 182.890704][ T9834] ? do_raw_spin_lock+0x12c/0x2b0 [ 182.890718][ T9834] ? find_held_lock+0x2b/0x80 [ 182.890728][ T9834] do_pte_missing+0x2925/0x3fb0 [ 182.890739][ T9834] ? _raw_spin_unlock+0x28/0x50 [ 182.890750][ T9834] ? __pmd_alloc+0x3c2/0x870 [ 182.890763][ T9834] ? find_held_lock+0x2b/0x80 [ 182.890772][ T9834] __handle_mm_fault+0x103d/0x2a40 [ 182.890786][ T9834] ? __pfx___handle_mm_fault+0x10/0x10 [ 182.890802][ T9834] ? find_vma+0xbf/0x140 [ 182.890814][ T9834] ? __pfx_find_vma+0x10/0x10 [ 182.890829][ T9834] handle_mm_fault+0x3fe/0xad0 [ 182.890840][ T9834] do_user_addr_fault+0x7a6/0x1370 [ 182.890851][ T9834] ? rcu_is_watching+0x12/0xc0 [ 182.890862][ T9834] exc_page_fault+0x5c/0xc0 [ 182.890875][ T9834] asm_exc_page_fault+0x26/0x30 [ 182.890884][ T9834] RIP: 0010:__get_user_4+0x14/0x20 [ 182.890895][ T9834] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 182.890905][ T9834] RSP: 0018:ffffc90007a47af0 EFLAGS: 00050283 [ 182.890914][ T9834] RAX: 0000000080000080 RBX: 0000000000000000 RCX: ffffc90007a47a94 [ 182.890920][ T9834] RDX: 00007ffffffff000 RSI: ffffffff821face3 RDI: ffffffff8bf46d20 [ 182.890925][ T9834] RBP: 0000000000000010 R08: f9f0d9a003d2eb8b R09: 0000000000000001 [ 182.890931][ T9834] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 182.890936][ T9834] R13: 000000000000013d R14: 0000000000000000 R15: dffffc0000000000 [ 182.890946][ T9834] ? do_pages_stat+0x1c3/0x800 [ 182.890958][ T9834] do_pages_stat+0x1d1/0x800 [ 182.890970][ T9834] ? __lock_acquire+0x5ca/0x1ba0 [ 182.890985][ T9834] ? __pfx_do_pages_stat+0x10/0x10 [ 182.890998][ T9834] ? __lock_acquire+0x5ca/0x1ba0 [ 182.891019][ T9834] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 182.891030][ T9834] ? lockdep_hardirqs_on+0x7c/0x110 [ 182.891042][ T9834] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 182.891056][ T9834] kernel_move_pages+0xfd5/0x13a0 [ 182.891073][ T9834] ? __pfx_kernel_move_pages+0x10/0x10 [ 182.891086][ T9834] ? __fget_files+0x20e/0x3c0 [ 182.891103][ T9834] ? fput+0x70/0xf0 [ 182.891114][ T9834] ? ksys_write+0x1b9/0x240 [ 182.891123][ T9834] ? __pfx_ksys_write+0x10/0x10 [ 182.891133][ T9834] __ia32_sys_move_pages+0xdd/0x1b0 [ 182.891146][ T9834] ? lockdep_hardirqs_on+0x7c/0x110 [ 182.891158][ T9834] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 182.891172][ T9834] __do_fast_syscall_32+0x73/0x120 [ 182.891186][ T9834] do_fast_syscall_32+0x32/0x80 [ 182.891200][ T9834] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.891211][ T9834] RIP: 0023:0xf7fa4579 [ 182.891219][ T9834] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 182.891227][ T9834] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 000000000000013d [ 182.891238][ T9834] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000001efe [ 182.891243][ T9834] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000080000040 [ 182.891249][ T9834] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 182.891254][ T9834] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 182.891259][ T9834] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 182.891272][ T9834] [ 183.295308][ T5989] em28xx 5-1:0.132: unknown em28xx chip ID (180) [ 183.381757][ T9842] syz.2.1170 uses obsolete (PF_INET,SOCK_PACKET) [ 183.515649][ T9847] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1171'. [ 183.903884][ T5989] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 183.910576][ T5989] em28xx 5-1:0.132: board has no eeprom [ 183.982591][ T5989] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 183.984937][ T5989] em28xx 5-1:0.132: analog set to bulk mode. [ 183.990650][ T34] em28xx 5-1:0.132: Registering V4L2 extension [ 183.994297][ T5989] usb 5-1: USB disconnect, device number 3 [ 183.996779][ T5989] em28xx 5-1:0.132: Disconnecting em28xx [ 184.061841][ T34] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 184.064746][ T34] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 184.066828][ T34] em28xx 5-1:0.132: No AC97 audio processor [ 184.070985][ T34] usb 5-1: Decoder not found [ 184.072591][ T34] em28xx 5-1:0.132: failed to create media graph [ 184.074510][ T34] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 184.077863][ T34] em28xx 5-1:0.132: Remote control support is not available for this card. [ 184.080865][ T5989] em28xx 5-1:0.132: Closing input extension [ 184.087666][ T5989] em28xx 5-1:0.132: Freeing device [ 184.627118][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1179'. [ 184.744014][ T9879] netlink: 'syz.2.1181': attribute type 1 has an invalid length. [ 184.747473][ T9879] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1181'. [ 185.994288][ T5954] Bluetooth: hci2: unexpected cc 0x2007 length: 100 > 2 [ 185.997476][ T5954] Bluetooth: hci2: unexpected event for opcode 0x2007 [ 186.542584][ T9932] syz.1.1196: attempt to access beyond end of device [ 186.542584][ T9932] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 186.546983][ T9932] hfsplus: unable to find HFS+ superblock [ 188.780786][ T9982] netlink: 'syz.2.1210': attribute type 1 has an invalid length. [ 188.786410][ T9982] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1210'. [ 189.112964][ T9993] FAULT_INJECTION: forcing a failure. [ 189.112964][ T9993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.117044][ T9993] CPU: 0 UID: 0 PID: 9993 Comm: syz.3.1215 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 189.117058][ T9993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 189.117064][ T9993] Call Trace: [ 189.117068][ T9993] [ 189.117072][ T9993] dump_stack_lvl+0x16c/0x1f0 [ 189.117089][ T9993] should_fail_ex+0x512/0x640 [ 189.117105][ T9993] _copy_from_user+0x2e/0xd0 [ 189.117120][ T9993] __sys_bpf+0x21d/0x4d80 [ 189.117135][ T9993] ? __pfx___sys_bpf+0x10/0x10 [ 189.117153][ T9993] ? ksys_write+0x190/0x240 [ 189.117165][ T9993] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 189.117186][ T9993] ? fput+0x70/0xf0 [ 189.117197][ T9993] ? ksys_write+0x1b9/0x240 [ 189.117206][ T9993] ? __pfx_ksys_write+0x10/0x10 [ 189.117219][ T9993] __ia32_sys_bpf+0x76/0xe0 [ 189.117238][ T9993] __do_fast_syscall_32+0x73/0x120 [ 189.117258][ T9993] do_fast_syscall_32+0x32/0x80 [ 189.117276][ T9993] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.117292][ T9993] RIP: 0023:0xf70de579 [ 189.117303][ T9993] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 189.117315][ T9993] RSP: 002b:00000000f50ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 189.117332][ T9993] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000900 [ 189.117340][ T9993] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.117348][ T9993] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.117356][ T9993] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 189.117364][ T9993] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.117384][ T9993] [ 189.287383][T10002] netlink: 'syz.3.1219': attribute type 1 has an invalid length. [ 189.292469][T10002] netlink: 'syz.3.1219': attribute type 1 has an invalid length. [ 189.302973][T10003] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 189.305109][T10003] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 189.307443][T10002] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 189.308290][T10005] FAULT_INJECTION: forcing a failure. [ 189.308290][T10005] name failslab, interval 1, probability 0, space 0, times 0 [ 189.309717][T10002] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 189.315864][T10005] CPU: 2 UID: 0 PID: 10005 Comm: syz.2.1220 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 189.315879][T10005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 189.315885][T10005] Call Trace: [ 189.315888][T10005] [ 189.315892][T10005] dump_stack_lvl+0x16c/0x1f0 [ 189.315910][T10005] should_fail_ex+0x512/0x640 [ 189.315923][T10005] ? fs_reclaim_acquire+0xae/0x150 [ 189.315939][T10005] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 189.315953][T10005] should_failslab+0xc2/0x120 [ 189.315965][T10005] __kmalloc_noprof+0xd2/0x510 [ 189.315979][T10005] tomoyo_realpath_from_path+0xc2/0x6e0 [ 189.315993][T10005] ? tomoyo_profile+0x47/0x60 [ 189.316009][T10005] tomoyo_path_number_perm+0x245/0x580 [ 189.316020][T10005] ? tomoyo_path_number_perm+0x237/0x580 [ 189.316032][T10005] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 189.316057][T10005] ? find_held_lock+0x2b/0x80 [ 189.316075][T10005] ? hook_file_ioctl_common+0x145/0x410 [ 189.316086][T10005] ? __fget_files+0x204/0x3c0 [ 189.316103][T10005] ? __fget_files+0x20e/0x3c0 [ 189.316116][T10005] ? fput+0x10/0xf0 [ 189.316129][T10005] security_file_ioctl_compat+0x9b/0x240 [ 189.316143][T10005] __ia32_compat_sys_ioctl+0xc3/0x360 [ 189.316158][T10005] __do_fast_syscall_32+0x73/0x120 [ 189.316173][T10005] do_fast_syscall_32+0x32/0x80 [ 189.316187][T10005] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.316199][T10005] RIP: 0023:0xf7ff4579 [ 189.316207][T10005] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 189.316217][T10005] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 189.316227][T10005] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000400448cb [ 189.316233][T10005] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.316238][T10005] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.316246][T10005] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 189.316254][T10005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.316272][T10005] [ 189.316278][T10005] ERROR: Out of memory at tomoyo_realpath_from_path. [ 189.324101][T10002] vhci_hcd vhci_hcd.0: Device attached [ 189.324222][T10003] vhci_hcd vhci_hcd.0: Device attached [ 189.324737][T10006] vhci_hcd: cannot find a urb of seqnum 713 max seqnum 0 [ 189.324769][T10008] vhci_hcd: connection closed [ 189.327310][ T12] vhci_hcd: stop threads [ 189.379784][T10012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1221'. [ 189.383867][ T12] vhci_hcd: release socket [ 189.410883][ T12] vhci_hcd: disconnect device [ 189.417557][ T12] vhci_hcd: stop threads [ 189.436700][ T12] vhci_hcd: release socket [ 189.439397][ T12] vhci_hcd: disconnect device [ 190.003224][ T5954] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 190.006040][ T5954] Bluetooth: hci2: Injecting HCI hardware error event [ 190.009649][ T5948] Bluetooth: hci2: hardware error 0x00 [ 190.447610][T10040] syzkaller0: entered promiscuous mode [ 190.449385][T10040] syzkaller0: entered allmulticast mode [ 191.478454][T10057] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1236'. [ 191.625398][T10065] program syz.2.1240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.858101][T10074] netlink: 'syz.3.1242': attribute type 1 has an invalid length. [ 191.860689][T10074] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1242'. [ 192.082004][ T5948] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 193.131519][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 193.131532][ T40] audit: type=1326 audit(1746921108.258:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10096 comm="syz.3.1250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7fc00000 [ 193.153542][ T40] audit: type=1326 audit(1746921108.268:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10096 comm="syz.3.1250" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70de579 code=0x7fc00000 [ 193.684783][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.104138][T10131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1258'. [ 194.402428][T10142] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1262'. [ 194.531467][T10154] lo speed is unknown, defaulting to 1000 [ 194.602451][T10154] lo speed is unknown, defaulting to 1000 [ 194.844284][T10164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1268'. [ 195.411768][ T40] audit: type=1326 audit(1746921110.538:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.2.1271" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 195.419496][ T40] audit: type=1326 audit(1746921110.548:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.2.1271" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 195.426863][ T40] audit: type=1326 audit(1746921110.548:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.2.1271" exe="/syz-executor" sig=0 arch=40000003 syscall=70 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 195.434335][ T40] audit: type=1326 audit(1746921110.548:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.2.1271" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 195.443475][ T40] audit: type=1326 audit(1746921110.548:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.2.1271" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 195.452450][ T40] audit: type=1326 audit(1746921110.548:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.2.1271" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 195.459804][ T40] audit: type=1326 audit(1746921110.548:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.2.1271" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 195.467501][ T40] audit: type=1326 audit(1746921110.548:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.2.1271" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 195.908037][T10190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1277'. [ 196.025564][T10199] 9pnet_fd: Insufficient options for proto=fd [ 196.661993][ T5986] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 196.832023][ T5986] usb 7-1: Using ep0 maxpacket: 32 [ 196.835243][ T5986] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 196.837833][ T5986] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.841037][ T5986] usb 7-1: config 0 has no interfaces? [ 196.843364][ T5986] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 196.846137][ T5986] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.851397][ T5986] usb 7-1: config 0 descriptor?? [ 196.924499][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1282'. [ 196.942881][ T5986] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 197.059612][T10220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.730705][T10238] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1286'. [ 197.733826][T10238] 0ªX¹¦D: renamed from macvtap0 [ 197.736500][T10238] 0ªX¹¦D: entered allmulticast mode [ 197.738289][T10238] veth0_macvtap: entered allmulticast mode [ 197.741074][T10238] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 197.837403][T10244] netlink: 'syz.3.1289': attribute type 1 has an invalid length. [ 197.840324][T10244] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1289'. [ 199.384422][ T1331] usb 7-1: USB disconnect, device number 3 [ 207.423119][T10271] netlink: 'syz.3.1294': attribute type 1 has an invalid length. [ 207.465706][T10271] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 207.476075][ T97] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 207.481052][T10271] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.486101][T10271] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1294'. [ 207.582033][ T1254] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 207.814272][ T5948] Bluetooth: hci3: unexpected event for opcode 0x0c1b [ 208.339067][T10295] netlink: 'syz.2.1298': attribute type 10 has an invalid length. [ 208.345107][T10295] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1298'. [ 208.350235][T10295] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.354075][T10295] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.357652][T10295] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.374878][T10295] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 208.381598][T10295] team0: Failed to send options change via netlink (err -105) [ 208.384786][T10295] team0: Port device geneve0 added [ 208.445538][T10292] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.581820][T10292] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.667051][T10292] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.753729][T10292] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.761136][T10292] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.768195][T10292] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.776433][T10292] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.379133][T10348] syz.1.1310: attempt to access beyond end of device [ 210.379133][T10348] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 210.383364][T10348] hfsplus: unable to find HFS+ superblock [ 210.502012][ T5986] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 210.671949][ T5986] usb 5-1: Using ep0 maxpacket: 16 [ 210.674804][ T5986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 215, changing to 11 [ 210.678023][ T5986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25899, setting to 1024 [ 210.681260][ T5986] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.692124][ T5986] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 210.702003][ T5986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.709067][ T5986] usb 5-1: config 0 descriptor?? [ 210.711084][T10339] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 210.715669][ T5986] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input8 [ 210.921657][ T5986] usb 5-1: USB disconnect, device number 4 [ 211.492671][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1317'. [ 212.482019][ T5954] Bluetooth: hci3: command 0x0405 tx timeout [ 212.778255][T10436] program syz.3.1329 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.297636][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1332'. [ 213.302049][T10447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1332'. [ 213.428690][T10455] random: crng reseeded on system resumption [ 213.448401][T10455] Restarting kernel threads ... done. [ 214.940296][T10492] netlink: 'syz.1.1345': attribute type 10 has an invalid length. [ 214.950060][T10492] team0: Device ipvlan1 failed to register rx_handler [ 214.963253][T10482] input: syz1 as /devices/virtual/input/input9 [ 215.288814][T10496] befs: (loop3): No write support. Marking filesystem read-only [ 215.291618][T10496] syz.1.1346: attempt to access beyond end of device [ 215.291618][T10496] loop3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 215.296775][T10496] befs: (loop3): unable to read superblock [ 217.369431][T10534] netlink: 'syz.3.1359': attribute type 1 has an invalid length. [ 217.372756][T10534] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1359'. [ 217.929381][T10560] IPVS: set_ctl: invalid protocol: 192 164.0.0.0:20000 [ 218.374246][T10576] netlink: 'syz.2.1371': attribute type 1 has an invalid length. [ 218.376719][T10576] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1371'. [ 218.411413][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 218.411424][ T40] audit: type=1326 audit(1746921133.538:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.2.1372" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 218.421207][ T40] audit: type=1326 audit(1746921133.538:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.2.1372" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 218.429205][ T40] audit: type=1326 audit(1746921133.548:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.2.1372" exe="/syz-executor" sig=0 arch=40000003 syscall=29 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 218.467380][T10580] binder: 10578:10580 ioctl c0306201 80000640 returned -22 [ 218.939538][T10590] Invalid logical block size (1048576) [ 218.967509][T10581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1364'. [ 219.081226][T10603] netlink: 'syz.1.1380': attribute type 1 has an invalid length. [ 219.086033][T10603] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1380'. [ 219.143590][T10607] syzkaller0: entered promiscuous mode [ 219.145357][T10607] syzkaller0: entered allmulticast mode [ 219.197727][T10616] FAULT_INJECTION: forcing a failure. [ 219.197727][T10616] name failslab, interval 1, probability 0, space 0, times 0 [ 219.201636][T10616] CPU: 2 UID: 0 PID: 10616 Comm: syz.1.1385 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 219.201651][T10616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 219.201657][T10616] Call Trace: [ 219.201661][T10616] [ 219.201665][T10616] dump_stack_lvl+0x16c/0x1f0 [ 219.201699][T10616] should_fail_ex+0x512/0x640 [ 219.201717][T10616] ? __kvmalloc_node_noprof+0x122/0x600 [ 219.201729][T10616] should_failslab+0xc2/0x120 [ 219.201741][T10616] __kvmalloc_node_noprof+0x135/0x600 [ 219.201750][T10616] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 219.201763][T10616] ? lockdep_hardirqs_on+0x7c/0x110 [ 219.201775][T10616] ? copy_regset_to_user+0x101/0x250 [ 219.201790][T10616] ? copy_regset_to_user+0x101/0x250 [ 219.201801][T10616] copy_regset_to_user+0x101/0x250 [ 219.201815][T10616] compat_arch_ptrace+0x217/0x3a0 [ 219.201826][T10616] ? __pfx_compat_arch_ptrace+0x10/0x10 [ 219.201836][T10616] ? mark_held_locks+0x49/0x80 [ 219.201851][T10616] __ia32_compat_sys_ptrace+0x269/0x2e0 [ 219.201867][T10616] __do_fast_syscall_32+0x73/0x120 [ 219.201882][T10616] do_fast_syscall_32+0x32/0x80 [ 219.201908][T10616] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 219.201920][T10616] RIP: 0023:0xf7fa4579 [ 219.201928][T10616] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 219.201938][T10616] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 000000000000001a [ 219.201948][T10616] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000000000437 [ 219.201953][T10616] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000 [ 219.201959][T10616] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 219.201964][T10616] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 219.201974][T10616] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 219.201986][T10616] [ 219.493538][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1388'. [ 219.547122][T10632] xt_limit: Overflow, try lower: 0/0 [ 220.562887][T10652] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1393'. [ 220.565705][T10652] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 220.624406][T10655] netlink: 340 bytes leftover after parsing attributes in process `syz.3.1394'. [ 221.027640][T10668] openvswitch: netlink: Actions may not be safe on all matching packets [ 221.137878][T10672] bond1: (slave ip6gretap1): Removing an active aggregator [ 221.144068][T10672] bond1: (slave ip6gretap1): Releasing backup interface [ 221.516338][T10685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.614007][T10687] program syz.2.1405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.014841][T10690] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 222.078032][T10698] lo speed is unknown, defaulting to 1000 [ 222.224187][T10698] lo speed is unknown, defaulting to 1000 [ 222.237226][T10704] netlink: 'syz.0.1410': attribute type 1 has an invalid length. [ 222.278340][T10704] bond2: entered promiscuous mode [ 222.280467][T10704] 8021q: adding VLAN 0 to HW filter on device bond2 [ 222.402628][T10710] FAULT_INJECTION: forcing a failure. [ 222.402628][T10710] name failslab, interval 1, probability 0, space 0, times 0 [ 222.407066][T10710] CPU: 0 UID: 0 PID: 10710 Comm: syz.1.1411 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 222.407092][T10710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 222.407100][T10710] Call Trace: [ 222.407103][T10710] [ 222.407108][T10710] dump_stack_lvl+0x16c/0x1f0 [ 222.407126][T10710] should_fail_ex+0x512/0x640 [ 222.407140][T10710] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 222.407157][T10710] should_failslab+0xc2/0x120 [ 222.407170][T10710] __kmalloc_cache_noprof+0x6a/0x3e0 [ 222.407184][T10710] ? do_raw_spin_lock+0x12c/0x2b0 [ 222.407199][T10710] ? create_io_worker+0xc9/0x5b0 [ 222.407213][T10710] ? create_io_worker+0x1f/0x5b0 [ 222.407223][T10710] create_io_worker+0xc9/0x5b0 [ 222.407235][T10710] io_wq_enqueue+0x5c4/0xa10 [ 222.407248][T10710] ? __pfx_io_wq_enqueue+0x10/0x10 [ 222.407259][T10710] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 222.407271][T10710] ? io_prep_async_work+0x654/0x770 [ 222.407289][T10710] io_queue_iowq+0x246/0x530 [ 222.407301][T10710] io_req_task_submit+0x142/0x1f0 [ 222.407312][T10710] io_poll_task_func+0x942/0x1320 [ 222.407328][T10710] ? __pfx_io_poll_task_func+0x10/0x10 [ 222.407342][T10710] ? find_held_lock+0x2b/0x80 [ 222.407352][T10710] ? io_handle_tw_list+0x112/0x500 [ 222.407362][T10710] ? __pfx_io_poll_task_func+0x10/0x10 [ 222.407377][T10710] io_handle_tw_list+0x155/0x500 [ 222.407389][T10710] ? __pfx_io_handle_tw_list+0x10/0x10 [ 222.407399][T10710] ? psi_task_switch+0x2c1/0x8e0 [ 222.407411][T10710] tctx_task_work_run+0xac/0x380 [ 222.407422][T10710] tctx_task_work+0x7a/0xd0 [ 222.407432][T10710] ? __pfx_tctx_task_work+0x10/0x10 [ 222.407443][T10710] ? rcu_is_watching+0x12/0xc0 [ 222.407451][T10710] ? _raw_spin_unlock_irq+0x23/0x50 [ 222.407463][T10710] ? lockdep_hardirqs_on+0x7c/0x110 [ 222.407476][T10710] task_work_run+0x14d/0x240 [ 222.407492][T10710] ? __pfx_task_work_run+0x10/0x10 [ 222.407507][T10710] ? __schedule+0x1186/0x5de0 [ 222.407522][T10710] ? proc_fail_nth_write+0x9f/0x250 [ 222.407542][T10710] get_signal+0x1d1/0x26d0 [ 222.407563][T10710] ? __pfx___schedule+0x10/0x10 [ 222.407578][T10710] ? __pfx_get_signal+0x10/0x10 [ 222.407596][T10710] arch_do_signal_or_restart+0x8f/0x7a0 [ 222.407616][T10710] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 222.407639][T10710] ? __ia32_compat_sys_rt_sigsuspend+0xf6/0x160 [ 222.407666][T10710] syscall_exit_to_user_mode+0x150/0x2a0 [ 222.407687][T10710] __do_fast_syscall_32+0x80/0x120 [ 222.407709][T10710] do_fast_syscall_32+0x32/0x80 [ 222.407730][T10710] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.407747][T10710] RIP: 0023:0xf7fa4579 [ 222.407760][T10710] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 222.407773][T10710] RSP: 002b:00000000f50a555c EFLAGS: 00000296 ORIG_RAX: 00000000000000b3 [ 222.407788][T10710] RAX: fffffffffffffdfe RBX: 0000000080000040 RCX: 0000000000000008 [ 222.407802][T10710] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.407811][T10710] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 222.407820][T10710] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 222.407828][T10710] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.407845][T10710] [ 222.806806][T10720] Cannot find set identified by id 0 to match [ 223.331834][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1418'. [ 223.335731][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1418'. [ 223.344011][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1418'. [ 223.790342][T10747] 9pnet: Could not find request transport: virti o [ 223.931495][T10753] FAULT_INJECTION: forcing a failure. [ 223.931495][T10753] name failslab, interval 1, probability 0, space 0, times 0 [ 223.935586][T10753] CPU: 3 UID: 0 PID: 10753 Comm: syz.2.1422 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 223.935600][T10753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 223.935606][T10753] Call Trace: [ 223.935610][T10753] [ 223.935614][T10753] dump_stack_lvl+0x16c/0x1f0 [ 223.935631][T10753] should_fail_ex+0x512/0x640 [ 223.935644][T10753] ? __kmalloc_noprof+0xbf/0x510 [ 223.935657][T10753] ? bpf_test_init.isra.0+0x9e/0x140 [ 223.935667][T10753] should_failslab+0xc2/0x120 [ 223.935679][T10753] __kmalloc_noprof+0xd2/0x510 [ 223.935692][T10753] bpf_test_init.isra.0+0x9e/0x140 [ 223.935703][T10753] bpf_prog_test_run_skb+0x245/0x2280 [ 223.935715][T10753] ? __fget_files+0x204/0x3c0 [ 223.935732][T10753] ? __fget_files+0x20e/0x3c0 [ 223.935746][T10753] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 223.935758][T10753] ? fput+0x70/0xf0 [ 223.935770][T10753] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 223.935781][T10753] __sys_bpf+0x1485/0x4d80 [ 223.935798][T10753] ? __pfx___sys_bpf+0x10/0x10 [ 223.935811][T10753] ? ksys_write+0x190/0x240 [ 223.935822][T10753] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 223.935843][T10753] ? fput+0x70/0xf0 [ 223.935854][T10753] ? ksys_write+0x1b9/0x240 [ 223.935868][T10753] ? __pfx_ksys_write+0x10/0x10 [ 223.935879][T10753] __ia32_sys_bpf+0x76/0xe0 [ 223.935893][T10753] __do_fast_syscall_32+0x73/0x120 [ 223.935908][T10753] do_fast_syscall_32+0x32/0x80 [ 223.935921][T10753] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.935934][T10753] RIP: 0023:0xf7ff4579 [ 223.935942][T10753] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 223.935952][T10753] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 223.935962][T10753] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000240 [ 223.935968][T10753] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 223.935973][T10753] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 223.935978][T10753] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 223.935984][T10753] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.935995][T10753] [ 224.446747][T10780] 9pnet_virtio: no channels available for device syz [ 224.602783][T10780] netfs: Couldn't get user pages (rc=-14) [ 224.757863][T10784] 9pnet_virtio: no channels available for device syz [ 225.687994][T10800] netlink: 'syz.2.1438': attribute type 10 has an invalid length. [ 225.721457][ T5948] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 225.962021][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 226.113934][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 226.117531][ T9] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 226.122082][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 226.126002][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 226.130733][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 226.148209][ T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 226.151794][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 226.189895][ T9] usb 7-1: Product: syz [ 226.191244][ T9] usb 7-1: Manufacturer: syz [ 226.198324][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 226.200041][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 226.204214][ T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 226.206093][ T9] cdc_wdm 7-1:1.0: Unknown control protocol [ 226.267618][T10812] FAULT_INJECTION: forcing a failure. [ 226.267618][T10812] name failslab, interval 1, probability 0, space 0, times 0 [ 226.275979][T10812] CPU: 2 UID: 0 PID: 10812 Comm: syz.0.1444 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 226.276008][T10812] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 226.276024][T10812] Call Trace: [ 226.276030][T10812] [ 226.276037][T10812] dump_stack_lvl+0x16c/0x1f0 [ 226.276069][T10812] should_fail_ex+0x512/0x640 [ 226.276092][T10812] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 226.276117][T10812] should_failslab+0xc2/0x120 [ 226.276136][T10812] __kmalloc_cache_noprof+0x6a/0x3e0 [ 226.276159][T10812] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 226.276177][T10812] ? bpf_prog_alloc_no_stats+0x116/0x630 [ 226.276195][T10812] ? __vmalloc_noprof+0x6d/0x90 [ 226.276221][T10812] bpf_prog_alloc_no_stats+0x116/0x630 [ 226.276242][T10812] bpf_prog_alloc+0x3b/0x230 [ 226.276258][T10812] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 226.276282][T10812] bpf_prog_load+0x1a04/0x2490 [ 226.276310][T10812] ? __pfx_bpf_prog_load+0x10/0x10 [ 226.276350][T10812] ? bpf_lsm_bpf+0x9/0x10 [ 226.276366][T10812] __sys_bpf+0x433c/0x4d80 [ 226.276390][T10812] ? __pfx___sys_bpf+0x10/0x10 [ 226.276411][T10812] ? ksys_write+0x190/0x240 [ 226.276429][T10812] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 226.276463][T10812] ? fput+0x70/0xf0 [ 226.276482][T10812] ? ksys_write+0x1b9/0x240 [ 226.276497][T10812] ? __pfx_ksys_write+0x10/0x10 [ 226.276515][T10812] __ia32_sys_bpf+0x76/0xe0 [ 226.276538][T10812] __do_fast_syscall_32+0x73/0x120 [ 226.276563][T10812] do_fast_syscall_32+0x32/0x80 [ 226.276583][T10812] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 226.276601][T10812] RIP: 0023:0xf7f77579 [ 226.276615][T10812] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 226.276630][T10812] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 226.276646][T10812] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000480 [ 226.276655][T10812] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 226.276665][T10812] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 226.276674][T10812] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 226.276682][T10812] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 226.276702][T10812] [ 226.380783][T10817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1443'. [ 226.400275][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 226.409511][T10823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1446'. [ 226.454562][T10827] netlink: 'syz.1.1447': attribute type 2 has an invalid length. [ 226.509057][T10833] input: syz1 as /devices/virtual/input/input10 [ 226.520678][T10831] netlink: 'syz.1.1450': attribute type 1 has an invalid length. [ 226.629529][T10839] tipc: Can't bind to reserved service type 2 [ 226.659319][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 226.659426][ T5986] usb 7-1: USB disconnect, device number 4 [ 226.661331][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 226.665408][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 227.031682][T10860] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1458'. [ 228.551550][T10894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1467'. [ 228.764015][T10900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1469'. [ 229.459907][ T5948] Bluetooth: hci3: link tx timeout [ 229.461567][ T5948] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 229.656871][T10928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1476'. [ 229.661980][T10929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1476'. [ 229.666098][T10928] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 229.668963][T10928] macsec1: entered allmulticast mode [ 229.670853][T10928] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 229.678089][T10928] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 229.680598][T10928] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 229.705699][T10929] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 229.710726][T10929] macsec1: entered allmulticast mode [ 229.713725][T10929] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 229.724340][T10929] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 229.727301][T10929] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 229.792923][T10926] 9pnet_fd: Insufficient options for proto=fd [ 229.911187][T10935] program syz.0.1474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.922173][T10935] FAULT_INJECTION: forcing a failure. [ 229.922173][T10935] name failslab, interval 1, probability 0, space 0, times 0 [ 229.926006][T10935] CPU: 1 UID: 0 PID: 10935 Comm: syz.0.1474 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 229.926031][T10935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 229.926038][T10935] Call Trace: [ 229.926042][T10935] [ 229.926045][T10935] dump_stack_lvl+0x16c/0x1f0 [ 229.926063][T10935] should_fail_ex+0x512/0x640 [ 229.926077][T10935] ? fs_reclaim_acquire+0xae/0x150 [ 229.926092][T10935] ? tomoyo_encode2+0x100/0x3e0 [ 229.926105][T10935] should_failslab+0xc2/0x120 [ 229.926117][T10935] __kmalloc_noprof+0xd2/0x510 [ 229.926127][T10935] ? d_absolute_path+0x136/0x1a0 [ 229.926141][T10935] tomoyo_encode2+0x100/0x3e0 [ 229.926156][T10935] tomoyo_encode+0x29/0x50 [ 229.926168][T10935] tomoyo_realpath_from_path+0x18f/0x6e0 [ 229.926185][T10935] tomoyo_path_number_perm+0x245/0x580 [ 229.926196][T10935] ? tomoyo_path_number_perm+0x237/0x580 [ 229.926208][T10935] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 229.926233][T10935] ? find_held_lock+0x2b/0x80 [ 229.926243][T10935] ? hook_file_ioctl_common+0x145/0x410 [ 229.926253][T10935] ? __fget_files+0x204/0x3c0 [ 229.926271][T10935] ? __fget_files+0x20e/0x3c0 [ 229.926284][T10935] ? fput+0x10/0xf0 [ 229.926296][T10935] security_file_ioctl_compat+0x9b/0x240 [ 229.926310][T10935] __ia32_compat_sys_ioctl+0xc3/0x360 [ 229.926325][T10935] __do_fast_syscall_32+0x73/0x120 [ 229.926340][T10935] do_fast_syscall_32+0x32/0x80 [ 229.926354][T10935] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 229.926366][T10935] RIP: 0023:0xf7f77579 [ 229.926374][T10935] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 229.926384][T10935] RSP: 002b:00000000f505455c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 229.926394][T10935] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000002201 [ 229.926400][T10935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 229.926406][T10935] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 229.926411][T10935] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 229.926416][T10935] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 229.926429][T10935] [ 229.926459][T10935] ERROR: Out of memory at tomoyo_realpath_from_path. [ 230.087974][T10944] netlink: 'syz.2.1481': attribute type 1 has an invalid length. [ 230.114979][T10944] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.118653][T10944] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1481'. [ 230.180556][T10948] program syz.3.1478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.094751][T10984] netlink: 'syz.3.1492': attribute type 1 has an invalid length. [ 231.097242][T10984] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1492'. [ 231.216750][T10992] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.1495'. [ 231.369721][ T5954] Bluetooth: hci3: unexpected event for opcode 0x0c1b [ 232.092003][T11039] netlink: 'syz.1.1503': attribute type 1 has an invalid length. [ 232.094356][T11039] __nla_validate_parse: 1 callbacks suppressed [ 232.094363][T11039] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1503'. [ 232.866794][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1511'. [ 232.911697][T11084] netlink: 'syz.0.1513': attribute type 1 has an invalid length. [ 232.914461][T11084] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1513'. [ 233.890321][ T40] audit: type=1326 audit(1746921149.018:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.0.1521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 233.905267][ T40] audit: type=1326 audit(1746921149.018:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.0.1521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 233.923223][ T40] audit: type=1326 audit(1746921149.028:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.0.1521" exe="/syz-executor" sig=0 arch=40000003 syscall=76 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 233.929924][ T40] audit: type=1326 audit(1746921149.028:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.0.1521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 233.945495][ T40] audit: type=1326 audit(1746921149.028:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.0.1521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 233.978437][ T40] audit: type=1326 audit(1746921149.028:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.0.1521" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 233.992044][ T40] audit: type=1326 audit(1746921149.028:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.0.1521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 233.998868][ T40] audit: type=1326 audit(1746921149.028:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.0.1521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 234.011271][ T40] audit: type=1326 audit(1746921149.028:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.0.1521" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 234.024857][ T40] audit: type=1326 audit(1746921149.028:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.0.1521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 234.066586][T11119] netlink: 'syz.0.1523': attribute type 1 has an invalid length. [ 234.069097][T11119] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1523'. [ 235.379822][T11176] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1536'. [ 236.657638][T11224] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.1555'. [ 236.662261][T11224] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1555'. [ 237.533352][T11245] syz.0.1562: attempt to access beyond end of device [ 237.533352][T11245] loop0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 237.538972][T11245] hfsplus: unable to find HFS+ superblock [ 238.296775][ T3228] libceph: connect (1)[c::]:6789 error -101 [ 238.298744][ T3228] libceph: mon0 (1)[c::]:6789 connect error [ 238.335491][T11259] ceph: No mds server is up or the cluster is laggy [ 239.099507][T11283] fuse: Bad value for 'group_id' [ 239.102365][T11283] fuse: Bad value for 'group_id' [ 241.052786][T11323] fuse: Bad value for 'group_id' [ 241.055471][T11323] fuse: Bad value for 'group_id' [ 241.440976][T11335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1587'. [ 241.780036][T11352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1590'. [ 242.348289][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1593'. [ 242.488264][T11366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1594'. [ 242.694627][T11380] Invalid logical block size (1048576) [ 242.766828][T11387] FAULT_INJECTION: forcing a failure. [ 242.766828][T11387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.770834][T11387] CPU: 2 UID: 0 PID: 11387 Comm: syz.3.1602 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 242.770848][T11387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 242.770854][T11387] Call Trace: [ 242.770858][T11387] [ 242.770862][T11387] dump_stack_lvl+0x16c/0x1f0 [ 242.770879][T11387] should_fail_ex+0x512/0x640 [ 242.770896][T11387] _copy_to_user+0x32/0xd0 [ 242.770912][T11387] copy_regset_to_user+0x189/0x250 [ 242.770927][T11387] compat_arch_ptrace+0x217/0x3a0 [ 242.770946][T11387] ? __pfx_compat_arch_ptrace+0x10/0x10 [ 242.770955][T11387] ? mark_held_locks+0x49/0x80 [ 242.770971][T11387] __ia32_compat_sys_ptrace+0x269/0x2e0 [ 242.770986][T11387] __do_fast_syscall_32+0x73/0x120 [ 242.771001][T11387] do_fast_syscall_32+0x32/0x80 [ 242.771015][T11387] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 242.771026][T11387] RIP: 0023:0xf70de579 [ 242.771034][T11387] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 242.771044][T11387] RSP: 002b:00000000f50ce55c EFLAGS: 00000296 ORIG_RAX: 000000000000001a [ 242.771053][T11387] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000000000523 [ 242.771059][T11387] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000 [ 242.771065][T11387] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 242.771070][T11387] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 242.771075][T11387] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 242.771088][T11387] [ 243.932400][T11419] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1608'. [ 243.936100][T11419] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1608'. [ 243.961403][T11421] syzkaller0: entered promiscuous mode [ 243.963335][T11421] syzkaller0: entered allmulticast mode [ 243.965965][T11421] FAULT_INJECTION: forcing a failure. [ 243.965965][T11421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.970262][T11421] CPU: 2 UID: 0 PID: 11421 Comm: syz.1.1610 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 243.970276][T11421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 243.970282][T11421] Call Trace: [ 243.970286][T11421] [ 243.970291][T11421] dump_stack_lvl+0x16c/0x1f0 [ 243.970309][T11421] should_fail_ex+0x512/0x640 [ 243.970325][T11421] _copy_from_iter+0x2a4/0x15b0 [ 243.970340][T11421] ? kmem_cache_free+0x2d4/0x4d0 [ 243.970351][T11421] ? skb_free_head+0x18a/0x1d0 [ 243.970361][T11421] ? __pfx__copy_from_iter+0x10/0x10 [ 243.970376][T11421] ? skb_free_head+0x18a/0x1d0 [ 243.970384][T11421] ? skb_headers_offset_update+0x129/0x260 [ 243.970397][T11421] ? pskb_expand_head+0x617/0x10b0 [ 243.970411][T11421] skb_copy_datagram_from_iter+0x124/0x740 [ 243.970432][T11421] tun_get_user+0x17ac/0x3b10 [ 243.970449][T11421] ? __pfx_tun_get_user+0x10/0x10 [ 243.970458][T11421] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 243.970476][T11421] ? find_held_lock+0x2b/0x80 [ 243.970486][T11421] ? tun_get+0x191/0x370 [ 243.970504][T11421] tun_chr_write_iter+0xdc/0x210 [ 243.970515][T11421] vfs_write+0x5ba/0x1180 [ 243.970525][T11421] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 243.970536][T11421] ? __pfx_vfs_write+0x10/0x10 [ 243.970544][T11421] ? find_held_lock+0x2b/0x80 [ 243.970561][T11421] ksys_write+0x12a/0x240 [ 243.970569][T11421] ? __pfx_ksys_write+0x10/0x10 [ 243.970580][T11421] ? rcu_is_watching+0x12/0xc0 [ 243.970590][T11421] __do_fast_syscall_32+0x73/0x120 [ 243.970606][T11421] do_fast_syscall_32+0x32/0x80 [ 243.970619][T11421] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.970631][T11421] RIP: 0023:0xf7fa4579 [ 243.970640][T11421] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 243.970649][T11421] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 243.970658][T11421] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440 [ 243.970664][T11421] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 243.970670][T11421] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 243.970675][T11421] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 243.970681][T11421] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.970693][T11421] [ 244.389916][T11428] bpf: Bad value for 'gid' [ 245.170996][T11440] bridge_slave_0: left allmulticast mode [ 245.173716][T11440] bridge_slave_0: left promiscuous mode [ 245.175620][T11440] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.179968][T11440] bridge_slave_1: left allmulticast mode [ 245.181760][T11440] bridge_slave_1: left promiscuous mode [ 245.183981][T11440] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.190431][T11440] bond0: (slave bond_slave_0): Releasing backup interface [ 245.203462][T11440] bond0: (slave bond_slave_1): Releasing backup interface [ 245.225480][T11440] team0: Port device team_slave_0 removed [ 245.229271][T11440] team0: Port device team_slave_1 removed [ 245.231478][T11440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.235961][T11440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.240545][T11440] team0: Port device bridge1 removed [ 245.246190][T11440] bond1: (slave ip6gretap1): Removing an active aggregator [ 245.248864][T11440] bond1: (slave ip6gretap1): Releasing backup interface [ 245.272092][T11449] trusted_key: encrypted_key: insufficient parameters specified [ 245.589583][T11466] netlink: 'syz.2.1625': attribute type 4 has an invalid length. [ 245.911268][T11475] lo speed is unknown, defaulting to 1000 [ 246.012517][T11478] program syz.0.1629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.017793][T11475] lo speed is unknown, defaulting to 1000 [ 246.071485][T11480] netlink: 'syz.0.1629': attribute type 3 has an invalid length. [ 247.041381][T11515] FAULT_INJECTION: forcing a failure. [ 247.041381][T11515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.045381][T11515] CPU: 3 UID: 0 PID: 11515 Comm: syz.2.1640 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 247.045396][T11515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 247.045402][T11515] Call Trace: [ 247.045407][T11515] [ 247.045412][T11515] dump_stack_lvl+0x16c/0x1f0 [ 247.045430][T11515] should_fail_ex+0x512/0x640 [ 247.045445][T11515] _copy_from_user+0x2e/0xd0 [ 247.045461][T11515] bpf_test_init.isra.0+0xe2/0x140 [ 247.045473][T11515] bpf_prog_test_run_skb+0x245/0x2280 [ 247.045485][T11515] ? __fget_files+0x204/0x3c0 [ 247.045502][T11515] ? __fget_files+0x20e/0x3c0 [ 247.045516][T11515] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 247.045529][T11515] ? fput+0x70/0xf0 [ 247.045541][T11515] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 247.045552][T11515] __sys_bpf+0x1485/0x4d80 [ 247.045568][T11515] ? __pfx___sys_bpf+0x10/0x10 [ 247.045582][T11515] ? ksys_write+0x190/0x240 [ 247.045593][T11515] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 247.045614][T11515] ? fput+0x70/0xf0 [ 247.045625][T11515] ? ksys_write+0x1b9/0x240 [ 247.045633][T11515] ? __pfx_ksys_write+0x10/0x10 [ 247.045644][T11515] __ia32_sys_bpf+0x76/0xe0 [ 247.045662][T11515] __do_fast_syscall_32+0x73/0x120 [ 247.045677][T11515] do_fast_syscall_32+0x32/0x80 [ 247.045691][T11515] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 247.045703][T11515] RIP: 0023:0xf7ff4579 [ 247.045711][T11515] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 247.045721][T11515] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 247.045730][T11515] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000240 [ 247.045736][T11515] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 247.045742][T11515] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 247.045747][T11515] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 247.045752][T11515] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 247.045765][T11515] [ 247.205856][T11522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1641'. [ 247.423569][T11533] netlink: 'syz.3.1645': attribute type 6 has an invalid length. [ 247.487929][T11529] mkiss: ax0: crc mode is auto. [ 247.627077][T11546] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 247.747432][T11558] overlayfs: missing 'lowerdir' [ 248.142521][T11573] warning: `syz.2.1653' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 248.336025][T11582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1655'. [ 248.506880][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1656'. [ 248.600573][T11590] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1658'. [ 249.041880][T11609] Attempt to restore checkpoint with obsolete wellknown handles [ 249.047228][T11609] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1664'. [ 249.263413][T11621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1666'. [ 249.319465][T11626] lo speed is unknown, defaulting to 1000 [ 249.415695][T11626] lo speed is unknown, defaulting to 1000 [ 249.522023][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 249.675218][ T9] usb 5-1: config 0 has an invalid interface number: 153 but max is 0 [ 249.678564][ T9] usb 5-1: config 0 has no interface number 0 [ 249.684384][ T9] usb 5-1: config 0 interface 153 has no altsetting 0 [ 249.692886][ T9] usb 5-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 249.696492][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.699636][ T9] usb 5-1: Product: syz [ 249.706740][ T9] usb 5-1: Manufacturer: syz [ 249.709413][ T9] usb 5-1: SerialNumber: syz [ 249.719296][ T9] usb 5-1: config 0 descriptor?? [ 249.727160][ T9] sierra 5-1:0.153: Sierra USB modem converter detected [ 249.938886][ T9] usb 5-1: USB disconnect, device number 5 [ 249.945408][ T9] sierra 5-1:0.153: device disconnected [ 250.705903][T11660] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1677'. [ 251.128150][T11673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1680'. [ 251.737998][T11668] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 251.826949][T11681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1682'. [ 251.912720][T11689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1684'. [ 252.662013][ T3228] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 252.813107][ T3228] usb 7-1: Using ep0 maxpacket: 16 [ 252.818264][T11702] x_tables: duplicate underflow at hook 3 [ 252.818337][ T3228] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.825845][ T3228] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.829997][ T3228] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.836008][ T3228] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 252.839813][ T3228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.845380][ T3228] usb 7-1: config 0 descriptor?? [ 252.857980][ T3228] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input11 [ 252.864863][ T5338] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 252.868093][ T5338] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 252.871063][ T5338] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 252.876290][ T5338] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 252.881822][ T5338] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 252.886210][T10541] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 252.888923][ T5338] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 252.894246][ T5338] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 252.896969][ T5338] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 253.050661][ T3228] usb 7-1: USB disconnect, device number 5 [ 253.597751][T11710] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 253.786743][ T5948] Bluetooth: hci3: unexpected cc 0x2007 length: 100 > 2 [ 253.789922][ T5948] Bluetooth: hci3: unexpected event for opcode 0x2007 [ 254.456260][T11735] 9pnet_virtio: no channels available for device syz [ 254.460102][T11735] 9pnet_virtio: no channels available for device syz [ 254.462545][T11735] 9pnet_virtio: no channels available for device syz [ 254.464880][T11735] 9pnet_virtio: no channels available for device syz [ 254.467143][T11735] 9pnet_virtio: no channels available for device syz [ 254.469400][T11735] 9pnet_virtio: no channels available for device syz [ 254.472095][T11735] 9pnet_virtio: no channels available for device syz [ 254.474439][T11735] 9pnet_virtio: no channels available for device syz [ 254.476772][T11735] 9pnet_virtio: no channels available for device syz [ 254.479081][T11735] 9pnet_virtio: no channels available for device syz [ 254.481359][T11735] 9pnet_virtio: no channels available for device syz [ 254.483850][T11735] 9pnet_virtio: no channels available for device syz [ 254.486354][T11735] 9pnet_virtio: no channels available for device syz [ 254.488685][T11735] 9pnet_virtio: no channels available for device syz [ 254.490951][T11735] 9pnet_virtio: no channels available for device syz [ 254.493420][T11735] 9pnet_virtio: no channels available for device syz [ 254.495674][T11735] 9pnet_virtio: no channels available for device syz [ 254.499668][T11735] 9pnet_virtio: no channels available for device syz [ 254.502798][T11735] 9pnet_virtio: no channels available for device syz [ 254.505047][T11735] 9pnet_virtio: no channels available for device syz [ 254.507294][T11735] 9pnet_virtio: no channels available for device syz [ 254.510317][T11735] 9pnet_virtio: no channels available for device syz [ 254.516295][T11735] 9pnet_virtio: no channels available for device syz [ 254.518674][T11735] 9pnet_virtio: no channels available for device syz [ 254.521056][T11735] 9pnet_virtio: no channels available for device syz [ 254.523521][T11735] 9pnet_virtio: no channels available for device syz [ 254.525891][T11735] 9pnet_virtio: no channels available for device syz [ 254.528193][T11735] 9pnet_virtio: no channels available for device syz [ 254.530541][T11735] 9pnet_virtio: no channels available for device syz [ 254.537166][T11735] 9pnet_virtio: no channels available for device syz [ 254.544204][T11735] 9pnet_virtio: no channels available for device syz [ 254.551638][T11735] 9pnet_virtio: no channels available for device syz [ 254.554145][T11735] 9pnet_virtio: no channels available for device syz [ 254.556431][T11735] 9pnet_virtio: no channels available for device syz [ 254.558812][T11735] 9pnet_virtio: no channels available for device syz [ 254.561130][T11735] 9pnet_virtio: no channels available for device syz [ 254.563543][T11735] 9pnet_virtio: no channels available for device syz [ 254.565960][T11735] 9pnet_virtio: no channels available for device syz [ 254.568275][T11735] 9pnet_virtio: no channels available for device syz [ 254.570627][T11735] 9pnet_virtio: no channels available for device syz [ 254.573165][T11735] 9pnet_virtio: no channels available for device syz [ 254.575536][T11735] 9pnet_virtio: no channels available for device syz [ 254.577903][T11735] 9pnet_virtio: no channels available for device syz [ 254.580572][T11735] 9pnet_virtio: no channels available for device syz [ 254.586110][T11735] 9pnet_virtio: no channels available for device syz [ 254.589747][T11735] 9pnet_virtio: no channels available for device syz [ 254.593060][T11735] 9pnet_virtio: no channels available for device syz [ 254.596496][T11735] 9pnet_virtio: no channels available for device syz [ 254.600058][T11735] 9pnet_virtio: no channels available for device syz [ 254.605943][T11735] 9pnet_virtio: no channels available for device syz [ 254.606273][T11735] 9pnet_virtio: no channels available for device syz [ 254.611502][T11735] 9pnet_virtio: no channels available for device syz [ 254.611812][T11735] 9pnet_virtio: no channels available for device syz [ 254.616942][T11735] 9pnet_virtio: no channels available for device syz [ 254.617264][T11735] 9pnet_virtio: no channels available for device syz [ 254.851495][T11741] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 254.857590][T11741] xt_TPROXY: Can be used only with -p tcp or -p udp [ 255.125862][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.474566][T11800] No control pipe specified [ 256.527293][ T8548] tipc: Subscription rejected, illegal request [ 256.788867][T11798] ================================================================== [ 256.791459][T11798] BUG: KASAN: vmalloc-out-of-bounds in vrealloc_noprof+0x132/0x320 [ 256.793994][T11798] Write of size 4064 at addr ffffc900040d1020 by task syz.2.1720/11798 [ 256.797645][T11798] [ 256.799121][T11798] CPU: 3 UID: 0 PID: 11798 Comm: syz.2.1720 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 256.799136][T11798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 256.799142][T11798] Call Trace: [ 256.799146][T11798] [ 256.799151][T11798] dump_stack_lvl+0x116/0x1f0 [ 256.799196][T11798] print_report+0xc3/0x670 [ 256.799208][T11798] ? __virt_addr_valid+0x5e/0x590 [ 256.799223][T11798] ? vrealloc_noprof+0x132/0x320 [ 256.799231][T11798] kasan_report+0xe0/0x110 [ 256.799242][T11798] ? vrealloc_noprof+0x132/0x320 [ 256.799252][T11798] kasan_check_range+0xef/0x1a0 [ 256.799265][T11798] __asan_memset+0x23/0x50 [ 256.799281][T11798] vrealloc_noprof+0x132/0x320 [ 256.799290][T11798] push_insn_history+0x2ae/0x6c0 [ 256.799302][T11798] do_check_common+0xbd3/0xc2a0 [ 256.799318][T11798] ? __pfx_do_check_common+0x10/0x10 [ 256.799327][T11798] ? lockdep_hardirqs_on+0x7c/0x110 [ 256.799340][T11798] ? kfree+0x2b6/0x4d0 [ 256.799348][T11798] ? bpf_check+0x6c86/0xb460 [ 256.799357][T11798] ? bpf_check+0x7b2f/0xb460 [ 256.799367][T11798] bpf_check+0x7f51/0xb460 [ 256.799381][T11798] ? __pfx_bpf_check+0x10/0x10 [ 256.799390][T11798] ? pcpu_alloc_noprof+0x949/0x1470 [ 256.799403][T11798] ? __lock_acquire+0xaa4/0x1ba0 [ 256.799419][T11798] ? find_held_lock+0x2b/0x80 [ 256.799428][T11798] ? __asan_memset+0x23/0x50 [ 256.799442][T11798] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 256.799456][T11798] bpf_prog_load+0xe41/0x2490 [ 256.799469][T11798] ? __pfx_bpf_prog_load+0x10/0x10 [ 256.799481][T11798] ? __pfx___futex_wait+0x10/0x10 [ 256.799498][T11798] ? bpf_lsm_bpf+0x9/0x10 [ 256.799508][T11798] __sys_bpf+0x433c/0x4d80 [ 256.799522][T11798] ? __pfx___sys_bpf+0x10/0x10 [ 256.799536][T11798] ? do_futex+0x122/0x350 [ 256.799545][T11798] ? __pfx_do_futex+0x10/0x10 [ 256.799558][T11798] ? xfd_validate_state+0x5d/0x180 [ 256.799573][T11798] ? rcu_is_watching+0x12/0xc0 [ 256.799583][T11798] __ia32_sys_bpf+0x76/0xe0 [ 256.799597][T11798] __do_fast_syscall_32+0x73/0x120 [ 256.799612][T11798] do_fast_syscall_32+0x32/0x80 [ 256.799625][T11798] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.799638][T11798] RIP: 0023:0xf7ff4579 [ 256.799646][T11798] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 256.799656][T11798] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 256.799666][T11798] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800017c0 [ 256.799672][T11798] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.799678][T11798] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 256.799683][T11798] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 256.799689][T11798] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 256.799697][T11798] [ 256.799701][T11798] [ 256.890240][T11798] The buggy address belongs to the virtual mapping at [ 256.890240][T11798] [ffffc900040b1000, ffffc900040d3000) created by: [ 256.890240][T11798] kvrealloc_noprof+0x7d/0xd0 [ 256.896139][T11798] [ 256.896938][T11798] The buggy address belongs to the physical page: [ 256.899004][T11798] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x4c982 [ 256.902606][T11798] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 256.905097][T11798] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 256.908400][T11798] raw: ffff888000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 256.911337][T11798] page dumped because: kasan: bad access detected [ 256.913829][T11798] page_owner tracks the page as allocated [ 256.915622][T11798] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102cc2(GFP_HIGHUSER|__GFP_NOWARN), pid 11798, tgid 11797 (syz.2.1720), ts 256788791151, free_ts 247585116942 [ 256.921110][T11798] post_alloc_hook+0x181/0x1b0 [ 256.922693][T11798] get_page_from_freelist+0x135c/0x3920 [ 256.924434][T11798] __alloc_frozen_pages_noprof+0x5a8/0x23a0 [ 256.926317][T11798] alloc_pages_mpol+0x1fb/0x550 [ 256.927880][T11798] alloc_pages_noprof+0x131/0x390 [ 256.929508][T11798] __vmalloc_node_range_noprof+0x732/0x1540 [ 256.931376][T11798] __kvmalloc_node_noprof+0x2ff/0x600 [ 256.933099][T11798] kvrealloc_noprof+0x7d/0xd0 [ 256.934759][T11798] push_insn_history+0x2ae/0x6c0 [ 256.936530][T11798] do_check_common+0xbd3/0xc2a0 [ 256.938115][T11798] bpf_check+0x7f51/0xb460 [ 256.939839][T11798] bpf_prog_load+0xe41/0x2490 [ 256.941786][T11798] __sys_bpf+0x433c/0x4d80 [ 256.943638][T11798] __ia32_sys_bpf+0x76/0xe0 [ 256.945491][T11798] __do_fast_syscall_32+0x73/0x120 [ 256.947140][T11798] do_fast_syscall_32+0x32/0x80 [ 256.948734][T11798] page last free pid 1171 tgid 1171 stack trace: [ 256.950871][T11798] __free_frozen_pages+0x69d/0xff0 [ 256.952525][T11798] ringbuf_map_free+0xd7/0x130 [ 256.954066][T11798] bpf_map_free_deferred+0x1c7/0x410 [ 256.955744][T11798] process_one_work+0x9cc/0x1b70 [ 256.957350][T11798] worker_thread+0x6c8/0xf10 [ 256.958855][T11798] kthread+0x3c2/0x780 [ 256.960161][T11798] ret_from_fork+0x45/0x80 [ 256.961611][T11798] ret_from_fork_asm+0x1a/0x30 [ 256.963186][T11798] [ 256.963992][T11798] Memory state around the buggy address: [ 256.965857][T11798] ffffc900040d0f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 256.968598][T11798] ffffc900040d0f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 256.971319][T11798] >ffffc900040d1000: 00 00 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 256.974041][T11798] ^ [ 256.975783][T11798] ffffc900040d1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 256.978509][T11798] ffffc900040d1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 256.981147][T11798] ================================================================== [ 256.984277][T11798] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 256.986587][T11798] CPU: 3 UID: 0 PID: 11798 Comm: syz.2.1720 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 256.990385][T11798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 256.993917][T11798] Call Trace: [ 256.995071][T11798] [ 256.996091][T11798] dump_stack_lvl+0x3d/0x1f0 [ 256.997673][T11798] panic+0x71c/0x800 [ 256.999056][T11798] ? __pfx_panic+0x10/0x10 [ 257.000582][T11798] ? rcu_is_watching+0x12/0xc0 [ 257.002241][T11798] ? preempt_schedule_thunk+0x16/0x30 [ 257.004056][T11798] ? vrealloc_noprof+0x132/0x320 [ 257.005764][T11798] ? preempt_schedule_common+0x44/0xc0 [ 257.007576][T11798] ? vrealloc_noprof+0x132/0x320 [ 257.009387][T11798] check_panic_on_warn+0xab/0xb0 [ 257.011268][T11798] end_report+0x107/0x170 [ 257.012901][T11798] kasan_report+0xee/0x110 [ 257.014602][T11798] ? vrealloc_noprof+0x132/0x320 [ 257.016455][T11798] kasan_check_range+0xef/0x1a0 [ 257.018202][T11798] __asan_memset+0x23/0x50 [ 257.019771][T11798] vrealloc_noprof+0x132/0x320 [ 257.021511][T11798] push_insn_history+0x2ae/0x6c0 [ 257.023513][T11798] do_check_common+0xbd3/0xc2a0 [ 257.025368][T11798] ? __pfx_do_check_common+0x10/0x10 [ 257.027055][T11798] ? lockdep_hardirqs_on+0x7c/0x110 [ 257.028728][T11798] ? kfree+0x2b6/0x4d0 [ 257.030039][T11798] ? bpf_check+0x6c86/0xb460 [ 257.031499][T11798] ? bpf_check+0x7b2f/0xb460 [ 257.032968][T11798] bpf_check+0x7f51/0xb460 [ 257.034414][T11798] ? __pfx_bpf_check+0x10/0x10 [ 257.035948][T11798] ? pcpu_alloc_noprof+0x949/0x1470 [ 257.037610][T11798] ? __lock_acquire+0xaa4/0x1ba0 [ 257.039216][T11798] ? find_held_lock+0x2b/0x80 [ 257.040711][T11798] ? __asan_memset+0x23/0x50 [ 257.042198][T11798] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 257.043805][T11798] bpf_prog_load+0xe41/0x2490 [ 257.045319][T11798] ? __pfx_bpf_prog_load+0x10/0x10 [ 257.046952][T11798] ? __pfx___futex_wait+0x10/0x10 [ 257.048568][T11798] ? bpf_lsm_bpf+0x9/0x10 [ 257.049941][T11798] __sys_bpf+0x433c/0x4d80 [ 257.051361][T11798] ? __pfx___sys_bpf+0x10/0x10 [ 257.052884][T11798] ? do_futex+0x122/0x350 [ 257.054271][T11798] ? __pfx_do_futex+0x10/0x10 [ 257.055767][T11798] ? xfd_validate_state+0x5d/0x180 [ 257.057400][T11798] ? rcu_is_watching+0x12/0xc0 [ 257.058803][T11798] __ia32_sys_bpf+0x76/0xe0 [ 257.060205][T11798] __do_fast_syscall_32+0x73/0x120 [ 257.061877][T11798] do_fast_syscall_32+0x32/0x80 [ 257.063448][T11798] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.065474][T11798] RIP: 0023:0xf7ff4579 [ 257.066806][T11798] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 257.072830][T11798] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 257.075488][T11798] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800017c0 [ 257.078043][T11798] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 257.080656][T11798] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.083156][T11798] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 257.085634][T11798] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.088093][T11798] [ 257.089795][T11798] Kernel Offset: disabled [ 257.091162][T11798] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:52:52 Registers: info registers vcpu 0 CPU#0 RAX=00000000005648e9 RBX=0000000000000000 RCX=ffffffff8b6943e9 RDX=0000000000000000 RSI=ffffffff8dbdb841 RDI=ffffffff8bf46d20 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000001 R9 =ffffed10056465bd R10=ffff88802b232deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90851010 R15=0000000000000000 RIP=ffffffff8b692c7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f50adda4 CR3=0000000063664000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=0000000000000000 RCX=ffff888067f114cc RDX=0000000000000000 RSI=ffffffff894149ea RDI=0000000000000001 RBP=ffff888068624800 RSP=ffffc9002700f730 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff89414a3e RFL=00000a07 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880978ec000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f508cda4 CR3=0000000067570000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000002 RCX=0000000000000002 RDX=0000000000000000 RSI=ffff888043910b40 RDI=ffff888043910000 RBP=ffffc9000109f338 RSP=ffffc9000109f2a0 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000008000 R11=ffff88804d3bb7f0 R12=ffff888043910b40 R13=0000000000000004 R14=ffff888043910000 R15=ffff888043910000 RIP=ffffffff81976e6e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000556fada5a000 CR3=00000000697e6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff854c18b5 RDI=ffffffff9addfbc0 RBP=ffffffff9addfb80 RSP=ffffc90003f4ef00 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000074697257 R12=0000000000000000 R13=0000000000000005 R14=ffffffff9addfb80 R15=ffffffff854c1850 RIP=ffffffff854c18df RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097aec000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080020000 CR3=00000000697e6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000