last executing test programs: 3.658293548s ago: executing program 2 (id=715): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$P9_RMKNOD(r4, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6}, './file1\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4081, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x24004809) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.921587145s ago: executing program 2 (id=720): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$P9_RMKNOD(r4, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6}, './file1\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4081, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x24004809) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2.526437884s ago: executing program 0 (id=721): sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x6}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x0, 0x0}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x2001, 0x0) keyctl$restrict_keyring(0x3, 0x0, 0x0, 0x0) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x2284, &(0x7f0000000a40)=@copyright) syz_clone(0x800c000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)) getpid() 1.866668973s ago: executing program 2 (id=725): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$P9_RMKNOD(r4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6}, './file1\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4081, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x24004809) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1.52939686s ago: executing program 3 (id=726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xf00, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xb}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004021}, 0x0) 1.495407423s ago: executing program 0 (id=728): shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) add_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="cf", 0x1, 0xfffffffffffffffa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002300)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x80010, 0xffffffffffffffff, 0xffffd000) socket$isdn(0x22, 0x2, 0x26) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000bc0)='./file0\x00', r4}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008000000000000"], 0x48) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="ad4300000000009c260821"], 0x14}}, 0x0) 1.408250742s ago: executing program 1 (id=729): ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000140)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.407784584s ago: executing program 3 (id=730): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000700000000000000000085000000200000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) close(0x3) dup(r0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r2}, 0xa) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$binfmt_misc(r3, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f000000d7c0)={r6, 0x1, 0x6, @broadcast}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x4, {0x0, 0x0, 0x0, r9, {0x10, 0xf}, {0x1, 0xd}, {0x9, 0x8}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000038500000036000000850000002300000095", @ANYRES8=r0, @ANYRES8=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.357625669s ago: executing program 1 (id=731): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xb}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004021}, 0x0) (fail_nth: 7) 1.207267945s ago: executing program 2 (id=732): r0 = syz_open_dev$video(0x0, 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0xe7ff, 0x32315659, 0x780, 0x438}) 1.20695084s ago: executing program 3 (id=733): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$nmem0(0xffffff9c, &(0x7f0000000280), 0x10100, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000180)={[0x4, 0x8, 0x2, 0x6, 0xd, 0x2, 0x800, 0x6, 0x6, 0x6, 0x0, 0x2, 0x490, 0x7fffffff, 0x3, 0x10001], 0x4, 0x2040}) r2 = openat2(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x230000, 0x14, 0x10}, 0x18) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000340)={0xc9, 0x0, 0xc}) r3 = syz_open_dev$evdev(&(0x7f0000000540), 0x1, 0x80000) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000005c0)=""/4096) socket$inet6_sctp(0xa, 0x1, 0x84) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r4, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0xfffffffffffffff5, 0x12000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)) write(0xffffffffffffffff, &(0x7f0000001480)="0f", 0x1) r8 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x3, 0x0, 0x0, r6}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}) io_uring_enter(r8, 0x2def, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x22c65) dup3(r11, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 1.206738486s ago: executing program 2 (id=734): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$nmem0(0xffffff9c, &(0x7f0000000280), 0x10100, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000180)={[0x4, 0x8, 0x2, 0x6, 0xd, 0x2, 0x800, 0x6, 0x6, 0x6, 0x0, 0x2, 0x490, 0x7fffffff, 0x3, 0x10001], 0x4, 0x2040}) r2 = openat2(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x230000, 0x14, 0x10}, 0x18) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000340)={0xc9, 0x0, 0xc}) r3 = syz_open_dev$evdev(&(0x7f0000000540), 0x1, 0x80000) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000005c0)=""/4096) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r5, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0xfffffffffffffff5, 0x12000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r8 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000040)) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r10 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x3, 0x0, 0x0, r7}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}) io_uring_enter(r10, 0x2def, 0x0, 0x0, 0x0, 0x0) r13 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x22c65) dup3(r13, r9, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) r14 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r14, &(0x7f0000000380)=""/186, 0xba) syz_fuse_handle_req(r5, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0xb8, 0x0, 0x0, [{{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, {0x0, 0x0, 0x10, 0x0, '.\',x\x8e\xe6!\xb5\x01\x00\xa0\xb4\x19\xa8\x02\x1c'}}]}, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x5}, 0x8) 1.118060843s ago: executing program 1 (id=735): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r0, 0x200000fe, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)=0xfffffff9) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000140)) fcntl$lock(r6, 0x24, &(0x7f00000000c0)={0x2}) socket$tipc(0x1e, 0x5, 0x0) unshare(0x62040600) 1.117615437s ago: executing program 0 (id=736): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010027bd000000000000020000000800010003000000"], 0x1c}}, 0x4000880) 1.05687952s ago: executing program 3 (id=737): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000a3", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e000000"], 0x30}}, 0x44) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r4], 0x48}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x74, r2, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe4}]}, 0x74}}, 0xc4) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r9) sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010027bd000000000000020000000800010003000000"], 0x1c}}, 0x4000880) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x458, 0xffffffff, 0x0, 0x0, 0xe4, 0xfeffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0x15c, 0x180, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0x1, 0xdd8}}, @common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, @private1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4b4) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r12, &(0x7f0000000040)=0x3, 0x12) r13 = semget(0x2, 0x1, 0x789) semctl$SETALL(r13, 0x0, 0x11, &(0x7f0000000040)=[0x2]) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000100)) 1.056432481s ago: executing program 0 (id=738): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$nmem0(0xffffff9c, &(0x7f0000000280), 0x10100, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000180)={[0x4, 0x8, 0x2, 0x6, 0xd, 0x2, 0x800, 0x6, 0x6, 0x6, 0x0, 0x2, 0x490, 0x7fffffff, 0x3, 0x10001], 0x4, 0x2040}) r2 = openat2(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x230000, 0x14, 0x10}, 0x18) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000340)={0xc9, 0x0, 0xc}) r3 = syz_open_dev$evdev(&(0x7f0000000540), 0x1, 0x80000) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000005c0)=""/4096) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r5, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0xfffffffffffffff5, 0x12000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f00000001c0)) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) write(r8, &(0x7f0000001480)="0f", 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x22c65) dup3(r9, r8, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r10, &(0x7f0000000380)=""/186, 0xba) syz_fuse_handle_req(r5, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0xb8, 0x0, 0x0, [{{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, {0x0, 0x0, 0x10, 0x0, '.\',x\x8e\xe6!\xb5\x01\x00\xa0\xb4\x19\xa8\x02\x1c'}}]}, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x5}, 0x8) 908.082938ms ago: executing program 3 (id=739): sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x6}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x0, 0x7fdfffff}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="00000000010000001c0012000c00010062"], 0x3c}}, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x2001, 0x0) keyctl$restrict_keyring(0x3, 0x0, 0x0, 0x0) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) ioctl$DVD_READ_STRUCT(r7, 0x2284, &(0x7f0000000a40)=@copyright) getpid() 276.255083ms ago: executing program 2 (id=740): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) creat(&(0x7f0000000280)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4081, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x24004809) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 275.703072ms ago: executing program 1 (id=741): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') truncate(&(0x7f0000000000)='./file0\x00', 0xba) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) (fail_nth: 7) 229.475921ms ago: executing program 0 (id=742): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1bbc0000000000ac311c00000400000000000000ea6ee28fc84fc76e7715c2d2e6865e6669329403b1c8429d6660c8b07161dcc51255e54dd30e2d101ba5fd87165446b2f4e2f91c5acc2f7870ec5c8d77f6883bc16debafe728c0ae96fc5c9d62bd5fc9622499b25c4e6aac260e186b695443f72947ae10d675bf", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f00000001c0)={0x5, @pix_mp={0x3, 0x0, 0x31435641, 0x2, 0xc, [{0x200, 0xfffffff9}, {0x0, 0xd9}, {0x8, 0x6}, {0x734, 0xfffffff8}, {0x9, 0x6}, {0x5, 0x1}, {0x7, 0x1}, {0x5, 0x4}], 0xf9, 0x7f, 0x7, 0x0, 0x3}}) 88.214132ms ago: executing program 0 (id=743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) memfd_secret(0x80000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000080), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYRESDEC=r1, @ANYRESHEX, @ANYRES8=r4], 0x28}}, 0x4000000) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r8 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000200100005ae583de0dd7d8319f98af84fda542e718f94b9264531fe1a845f6bb9ade", 0x5d}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000000440)="5f9c7e98aff3035c22938c882597a7b3e0282d22adf62c9cc35a4c1d1350eeeb90fb17f0aaae3ced982c9dacd94391e7cf0efa7a21221b4793727ec25e75a116898b6777d50b2a95f18b468e05d6391edb724e466677b4bac9c11cf5a7c94521380c3d586f800e76ec460cc4e3754d53229a465a6b480d4a6335dc34222d4f13ca1d97df47b356f477310ad9", 0x8c}], 0x3}, 0x0) 7.470298ms ago: executing program 1 (id=744): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, 0x0) 219.84µs ago: executing program 3 (id=745): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$nmem0(0xffffff9c, &(0x7f0000000280), 0x10100, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000180)={[0x4, 0x8, 0x2, 0x6, 0xd, 0x2, 0x800, 0x6, 0x6, 0x6, 0x0, 0x2, 0x490, 0x7fffffff, 0x3, 0x10001], 0x4, 0x2040}) r2 = openat2(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x230000, 0x14, 0x10}, 0x18) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000340)={0xc9, 0x0, 0xc}) r3 = syz_open_dev$evdev(&(0x7f0000000540), 0x1, 0x80000) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000005c0)=""/4096) socket$inet6_sctp(0xa, 0x1, 0x84) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r4, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0xfffffffffffffff5, 0x12000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) write(r7, &(0x7f0000001480)="0f", 0x1) r8 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x3, 0x0, 0x0, r6}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}) io_uring_enter(r8, 0x2def, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x22c65) dup3(r11, r7, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 0s ago: executing program 1 (id=746): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000002) (fail_nth: 7) kernel console output (not intermixed with test programs): 1, probability 0, space 0, times 0 [ 77.244165][ T6750] CPU: 2 UID: 0 PID: 6750 Comm: syz.0.173 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 77.247235][ T6750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.250656][ T6750] Call Trace: [ 77.251752][ T6750] [ 77.252717][ T6750] dump_stack_lvl+0x16c/0x1f0 [ 77.254268][ T6750] should_fail_ex+0x497/0x5b0 [ 77.255957][ T6750] _copy_from_user+0x2e/0xd0 [ 77.257481][ T6750] do_ipv6_setsockopt+0x99f/0x4660 [ 77.259200][ T6750] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 77.260997][ T6750] ? __pfx_mark_lock+0x10/0x10 [ 77.262567][ T6750] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 77.264326][ T6750] ? find_held_lock+0x2d/0x110 [ 77.265884][ T6750] ? __pfx___might_resched+0x10/0x10 [ 77.267632][ T6750] ? aa_sk_perm+0x2f5/0xb20 [ 77.269126][ T6750] ? ipv6_setsockopt+0xcb/0x170 [ 77.270809][ T6750] ipv6_setsockopt+0xcb/0x170 [ 77.272379][ T6750] udpv6_setsockopt+0x7d/0xd0 [ 77.273927][ T6750] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 77.275836][ T6750] do_sock_setsockopt+0x222/0x480 [ 77.277564][ T6750] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 77.279442][ T6750] ? lock_acquire+0x2f/0xb0 [ 77.280964][ T6750] __sys_setsockopt+0x1a0/0x230 [ 77.282561][ T6750] __ia32_sys_setsockopt+0xbc/0x160 [ 77.284351][ T6750] ? lockdep_hardirqs_on+0x7c/0x110 [ 77.286077][ T6750] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 77.288288][ T6750] __do_fast_syscall_32+0x73/0x120 [ 77.290025][ T6750] do_fast_syscall_32+0x32/0x80 [ 77.291668][ T6750] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.293843][ T6750] RIP: 0023:0xf710e579 [ 77.295231][ T6750] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 77.301758][ T6750] RSP: 002b:00000000f510055c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 77.304661][ T6750] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 77.307451][ T6750] RDX: 0000000000000030 RSI: 0000000020000a80 RDI: 000000000000008c [ 77.310188][ T6750] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.313031][ T6750] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 77.315837][ T6750] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.318637][ T6750] [ 77.422129][ T6754] sctp: [Deprecated]: syz.0.174 (pid 6754) Use of int in max_burst socket option. [ 77.422129][ T6754] Use struct sctp_assoc_value instead [ 77.458422][ T6757] befs: Unknown parameter 'b±Fs µÚì' [ 78.052783][ T6778] netlink: 'syz.1.180': attribute type 4 has an invalid length. [ 78.055817][ T6778] netlink: 17 bytes leftover after parsing attributes in process `syz.1.180'. [ 81.111496][ T39] audit: type=1326 audit(1734657429.113:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.1.197" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 81.130158][ T39] audit: type=1326 audit(1734657429.113:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.1.197" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f205a7 code=0x7ffc0000 [ 81.135893][ T39] audit: type=1326 audit(1734657429.113:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.1.197" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 81.144954][ T39] audit: type=1326 audit(1734657429.113:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.1.197" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f205a7 code=0x7ffc0000 [ 81.152486][ T39] audit: type=1326 audit(1734657429.113:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.1.197" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 81.158230][ T39] audit: type=1326 audit(1734657429.113:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.1.197" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f205a7 code=0x7ffc0000 [ 81.164182][ T39] audit: type=1326 audit(1734657429.113:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.1.197" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 81.169616][ T39] audit: type=1326 audit(1734657429.113:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.1.197" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f205a7 code=0x7ffc0000 [ 81.177832][ T39] audit: type=1326 audit(1734657429.113:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.1.197" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 81.185659][ T39] audit: type=1326 audit(1734657429.113:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.1.197" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f205a7 code=0x7ffc0000 [ 81.407294][ T6852] Invalid option length (1022761) for dns_resolver key [ 81.460067][ T5958] Bluetooth: hci4: sending frame failed (-49) [ 81.463901][ T5293] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 81.505140][ T6856] FAULT_INJECTION: forcing a failure. [ 81.505140][ T6856] name failslab, interval 1, probability 0, space 0, times 0 [ 81.517189][ T6856] CPU: 1 UID: 0 PID: 6856 Comm: syz.0.203 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 81.520902][ T6856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.524579][ T6856] Call Trace: [ 81.525730][ T6856] [ 81.526745][ T6856] dump_stack_lvl+0x16c/0x1f0 [ 81.528357][ T6856] should_fail_ex+0x497/0x5b0 [ 81.529938][ T6856] ? fs_reclaim_acquire+0xae/0x150 [ 81.531687][ T6856] should_failslab+0xc2/0x120 [ 81.533310][ T6856] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 81.535215][ T6856] ? sock_alloc_inode+0x25/0x1c0 [ 81.536934][ T6856] ? __pfx_sock_alloc_inode+0x10/0x10 [ 81.538777][ T6856] sock_alloc_inode+0x25/0x1c0 [ 81.540544][ T6856] alloc_inode+0x5d/0x230 [ 81.542056][ T6856] sock_alloc+0x40/0x280 [ 81.543551][ T6856] __sock_create+0xc1/0x8d0 [ 81.545124][ T6856] __sys_socketpair+0x25d/0x5a0 [ 81.546756][ T6856] ? __pfx___sys_socketpair+0x10/0x10 [ 81.548555][ T6856] ? __might_fault+0xe3/0x190 [ 81.550183][ T6856] ? __might_fault+0xe3/0x190 [ 81.551838][ T6856] __do_compat_sys_socketcall+0x3f8/0x700 [ 81.553786][ T6856] ? __fget_files+0x206/0x3a0 [ 81.555400][ T6856] ? __pfx___do_compat_sys_socketcall+0x10/0x10 [ 81.557286][ T6856] ? fput+0x67/0x440 [ 81.558561][ T6856] __do_fast_syscall_32+0x73/0x120 [ 81.560338][ T6856] do_fast_syscall_32+0x32/0x80 [ 81.561690][ T6856] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 81.563305][ T6856] RIP: 0023:0xf710e579 [ 81.564426][ T6856] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 81.569162][ T6856] RSP: 002b:00000000f5100490 EFLAGS: 00000286 ORIG_RAX: 0000000000000066 [ 81.571159][ T6856] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f51004ac [ 81.573375][ T6856] RDX: 00000000f7443ff4 RSI: 00000000f7474f00 RDI: 0000000000000000 [ 81.575450][ T6856] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 81.577445][ T6856] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 81.579557][ T6856] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 81.581569][ T6856] [ 81.584338][ T6856] socket: no more sockets [ 82.795800][ T6882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.211'. [ 83.570889][ T6897] netlink: 'syz.1.217': attribute type 13 has an invalid length. [ 83.582412][ T6897] gretap0: refused to change device tx_queue_len [ 83.584418][ T6897] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 84.095389][ T6922] FAULT_INJECTION: forcing a failure. [ 84.095389][ T6922] name failslab, interval 1, probability 0, space 0, times 0 [ 84.099378][ T6922] CPU: 3 UID: 0 PID: 6922 Comm: syz.1.222 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 84.102433][ T6922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.105571][ T6922] Call Trace: [ 84.106569][ T6922] [ 84.107458][ T6922] dump_stack_lvl+0x16c/0x1f0 [ 84.108872][ T6922] should_fail_ex+0x497/0x5b0 [ 84.110120][ T6922] ? fs_reclaim_acquire+0xae/0x150 [ 84.111465][ T6922] should_failslab+0xc2/0x120 [ 84.112830][ T6922] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 84.114425][ T6922] ? __alloc_skb+0x2b3/0x380 [ 84.115696][ T6922] __alloc_skb+0x2b3/0x380 [ 84.116823][ T6922] ? __pfx___alloc_skb+0x10/0x10 [ 84.117928][ T6922] ? genl_rcv_msg+0x4bd/0x800 [ 84.119046][ T6922] netlink_ack+0x164/0xb20 [ 84.120095][ T6922] netlink_rcv_skb+0x327/0x410 [ 84.121214][ T6922] ? __pfx_genl_rcv_msg+0x10/0x10 [ 84.122358][ T6922] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 84.123614][ T6922] ? down_read+0xc9/0x330 [ 84.124654][ T6922] ? __pfx_down_read+0x10/0x10 [ 84.125778][ T6922] ? netlink_deliver_tap+0x1ae/0xca0 [ 84.127302][ T6922] genl_rcv+0x28/0x40 [ 84.128282][ T6922] netlink_unicast+0x53c/0x7f0 [ 84.129380][ T6922] ? __pfx_netlink_unicast+0x10/0x10 [ 84.130568][ T6922] ? __phys_addr_symbol+0x30/0x80 [ 84.131726][ T6922] ? __check_object_size+0x488/0x710 [ 84.132933][ T6922] netlink_sendmsg+0x8b8/0xd70 [ 84.134032][ T6922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.135231][ T6922] ____sys_sendmsg+0x9ae/0xb40 [ 84.136340][ T6922] ? __pfx_____sys_sendmsg+0x10/0x10 [ 84.137808][ T6922] ? get_compat_msghdr+0x11b/0x170 [ 84.139042][ T6922] ___sys_sendmsg+0x135/0x1e0 [ 84.140147][ T6922] ? __pfx____sys_sendmsg+0x10/0x10 [ 84.141364][ T6922] ? __pfx_lock_release+0x10/0x10 [ 84.142532][ T6922] ? trace_lock_acquire+0x14e/0x1f0 [ 84.143893][ T6922] ? __fget_files+0x206/0x3a0 [ 84.145310][ T6922] __sys_sendmsg+0x16e/0x220 [ 84.146676][ T6922] ? __pfx___sys_sendmsg+0x10/0x10 [ 84.148265][ T6922] __do_fast_syscall_32+0x73/0x120 [ 84.149808][ T6922] do_fast_syscall_32+0x32/0x80 [ 84.151239][ T6922] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.153136][ T6922] RIP: 0023:0xf7f20579 [ 84.154369][ T6922] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 84.159803][ T6922] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 84.162072][ T6922] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000300 [ 84.163929][ T6922] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.165730][ T6922] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.167722][ T6922] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 84.169896][ T6922] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.171822][ T6922] [ 84.258338][ T6927] kvm: kvm [6926]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000006f) = 0x0 [ 84.270829][ T6927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.223'. [ 84.472368][ T6945] random: crng reseeded on system resumption [ 84.662729][ T6960] tmpfs: Bad value for 'nr_blocks' [ 84.690224][ T35] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 84.868948][ T6972] misc userio: Begin command sent, but we're already running [ 85.346167][ T6992] pim6reg: entered allmulticast mode [ 85.348921][ T6989] netlink: 'syz.0.233': attribute type 4 has an invalid length. [ 85.351250][ T6992] pim6reg: left allmulticast mode [ 85.369940][ T6989] netlink: 'syz.0.233': attribute type 4 has an invalid length. [ 85.468746][ T7000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.477449][ T7000] bond0: (slave rose0): Enslaving as an active interface with an up link [ 85.498078][ T7000] binder: 6999:7000 ioctl 400454dc 20000000 returned -22 [ 86.059011][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.239'. [ 86.442249][ T7043] netlink: 'syz.2.243': attribute type 10 has an invalid length. [ 86.510787][ T7045] netlink: 'syz.1.245': attribute type 10 has an invalid length. [ 86.527313][ T7045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.533285][ T7045] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 86.591874][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.246'. [ 86.594210][ T7049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.596250][ T7049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.599139][ T7049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.602877][ T7049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.612221][ T7049] bond0: (slave batadv0): Releasing backup interface [ 87.247340][ T7071] netlink: 'syz.2.253': attribute type 10 has an invalid length. [ 87.305461][ T7075] FAULT_INJECTION: forcing a failure. [ 87.305461][ T7075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.309776][ T7075] CPU: 0 UID: 0 PID: 7075 Comm: syz.0.255 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 87.313298][ T7075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.316705][ T7075] Call Trace: [ 87.317803][ T7075] [ 87.318806][ T7075] dump_stack_lvl+0x16c/0x1f0 [ 87.320369][ T7075] should_fail_ex+0x497/0x5b0 [ 87.321945][ T7075] strncpy_from_user+0x3b/0x2d0 [ 87.323597][ T7075] bpf_prog_load+0x1c3f/0x2670 [ 87.325219][ T7075] ? __pfx_bpf_prog_load+0x10/0x10 [ 87.326932][ T7075] ? find_held_lock+0x2d/0x110 [ 87.328554][ T7075] ? __might_fault+0x13b/0x190 [ 87.330162][ T7075] ? __might_fault+0xe3/0x190 [ 87.331811][ T7075] __sys_bpf+0x5677/0x57a0 [ 87.333328][ T7075] ? __pfx_lock_release+0x10/0x10 [ 87.334891][ T7075] ? __pfx___sys_bpf+0x10/0x10 [ 87.336475][ T7075] ? vfs_write+0x306/0x1150 [ 87.338006][ T7075] ? __mutex_unlock_slowpath+0x164/0x690 [ 87.339859][ T7075] ? fput+0x67/0x440 [ 87.341138][ T7075] ? ksys_write+0x1ba/0x250 [ 87.342658][ T7075] ? __pfx_ksys_write+0x10/0x10 [ 87.344286][ T7075] __ia32_sys_bpf+0x76/0xe0 [ 87.345824][ T7075] __do_fast_syscall_32+0x73/0x120 [ 87.347580][ T7075] do_fast_syscall_32+0x32/0x80 [ 87.349209][ T7075] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 87.351410][ T7075] RIP: 0023:0xf710e579 [ 87.352866][ T7075] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 87.359404][ T7075] RSP: 002b:00000000f510055c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 87.362143][ T7075] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200002c0 [ 87.364697][ T7075] RDX: 00000000000000a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.367321][ T7075] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 87.369938][ T7075] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 87.372533][ T7075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.375153][ T7075] [ 87.376287][ C0] vkms_vblank_simulate: vblank timer overrun [ 87.649500][ T7080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.676652][ T7082] netlink: 'syz.2.254': attribute type 4 has an invalid length. [ 87.679370][ T7082] netlink: 17 bytes leftover after parsing attributes in process `syz.2.254'. [ 87.748465][ T7086] netlink: 'syz.1.257': attribute type 4 has an invalid length. [ 87.750753][ T7086] netlink: 17 bytes leftover after parsing attributes in process `syz.1.257'. [ 88.290389][ T7085] delete_channel: no stack [ 88.647595][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.260'. [ 88.845162][ T7102] netlink: 'syz.2.262': attribute type 10 has an invalid length. [ 89.570190][ T57] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.720341][ T57] usb 5-1: Using ep0 maxpacket: 32 [ 89.723807][ T57] usb 5-1: config 7 has an invalid interface number: 26 but max is 3 [ 89.725920][ T57] usb 5-1: config 7 has an invalid interface number: 30 but max is 3 [ 89.728523][ T57] usb 5-1: config 7 has an invalid interface number: 55 but max is 3 [ 89.731317][ T57] usb 5-1: config 7 has an invalid interface number: 40 but max is 3 [ 89.734224][ T57] usb 5-1: config 7 has an invalid interface number: 222 but max is 3 [ 89.736589][ T57] usb 5-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 89.738780][ T57] usb 5-1: config 7 has an invalid interface number: 131 but max is 3 [ 89.742753][ T57] usb 5-1: config 7 has 6 interfaces, different from the descriptor's value: 4 [ 89.745139][ T57] usb 5-1: config 7 has no interface number 0 [ 89.746769][ T57] usb 5-1: config 7 has no interface number 1 [ 89.748385][ T57] usb 5-1: config 7 has no interface number 2 [ 89.751790][ T57] usb 5-1: config 7 has no interface number 3 [ 89.754002][ T57] usb 5-1: config 7 has no interface number 4 [ 89.755621][ T57] usb 5-1: config 7 has no interface number 5 [ 89.757236][ T57] usb 5-1: config 7 interface 26 altsetting 14 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 89.760249][ T57] usb 5-1: config 7 interface 26 altsetting 14 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 89.763224][ T57] usb 5-1: config 7 interface 26 altsetting 14 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 89.766102][ T57] usb 5-1: config 7 interface 30 altsetting 1 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 89.769002][ T57] usb 5-1: config 7 interface 30 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 89.772685][ T57] usb 5-1: config 7 interface 30 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 13 [ 89.777313][ T57] usb 5-1: too many endpoints for config 7 interface 55 altsetting 25: 98, using maximum allowed: 30 [ 89.793008][ T57] usb 5-1: config 7 interface 55 altsetting 25 has 1 endpoint descriptor, different from the interface descriptor's value: 98 [ 89.797749][ T57] usb 5-1: config 7 interface 40 altsetting 154 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 89.801998][ T57] usb 5-1: config 7 interface 40 altsetting 154 has a duplicate endpoint with address 0xD, skipping [ 89.805272][ T57] usb 5-1: config 7 interface 40 altsetting 154 endpoint 0x6 has an invalid bInterval 142, changing to 11 [ 89.808523][ T57] usb 5-1: config 7 interface 40 altsetting 154 has an invalid descriptor for endpoint zero, skipping [ 89.817796][ T57] usb 5-1: config 7 interface 40 altsetting 154 has a duplicate endpoint with address 0x8A, skipping [ 89.821135][ T57] usb 5-1: config 7 interface 40 altsetting 154 has an invalid descriptor for endpoint zero, skipping [ 89.824078][ T57] usb 5-1: config 7 interface 40 altsetting 154 has an invalid descriptor for endpoint zero, skipping [ 89.826984][ T57] usb 5-1: config 7 interface 40 altsetting 154 has a duplicate endpoint with address 0xD, skipping [ 89.829765][ T57] usb 5-1: config 7 interface 40 altsetting 154 has a duplicate endpoint with address 0xB, skipping [ 89.833269][ T57] usb 5-1: config 7 interface 40 altsetting 154 has a duplicate endpoint with address 0xF, skipping [ 89.836423][ T57] usb 5-1: config 7 interface 40 altsetting 154 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 89.840267][ T57] usb 5-1: config 7 interface 222 altsetting 11 has a duplicate endpoint with address 0x6, skipping [ 89.843203][ T57] usb 5-1: config 7 interface 222 altsetting 11 has a duplicate endpoint with address 0xF, skipping [ 89.846139][ T57] usb 5-1: config 7 interface 222 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 89.848996][ T57] usb 5-1: config 7 interface 222 altsetting 11 endpoint 0x7 has invalid wMaxPacketSize 0 [ 89.852256][ T57] usb 5-1: config 7 interface 222 altsetting 11 has a duplicate endpoint with address 0x6, skipping [ 89.855186][ T57] usb 5-1: config 7 interface 222 altsetting 11 has a duplicate endpoint with address 0x7, skipping [ 89.859012][ T57] usb 5-1: config 7 interface 222 altsetting 11 has a duplicate endpoint with address 0xA, skipping [ 89.860692][ T7136] netlink: 'syz.1.271': attribute type 4 has an invalid length. [ 89.862788][ T57] usb 5-1: config 7 interface 131 altsetting 148 has a duplicate endpoint with address 0x5, skipping [ 89.864934][ T7136] netlink: 17 bytes leftover after parsing attributes in process `syz.1.271'. [ 89.868441][ T57] usb 5-1: config 7 interface 131 altsetting 148 has a duplicate endpoint with address 0xE, skipping [ 89.875067][ T57] usb 5-1: config 7 interface 131 altsetting 148 has a duplicate endpoint with address 0x5, skipping [ 89.878929][ T57] usb 5-1: config 7 interface 131 altsetting 148 has a duplicate endpoint with address 0x6, skipping [ 89.882794][ T57] usb 5-1: config 7 interface 131 altsetting 148 has a duplicate endpoint with address 0x2, skipping [ 89.884195][ T7134] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 89.886527][ T57] usb 5-1: config 7 interface 131 altsetting 148 has a duplicate endpoint with address 0xD, skipping [ 89.888382][ T7134] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 89.894833][ T7133] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 89.897240][ T7133] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 89.920493][ T57] usb 5-1: config 7 interface 131 altsetting 148 has a duplicate endpoint with address 0xB, skipping [ 89.929828][ T57] usb 5-1: config 7 interface 131 altsetting 148 has a duplicate endpoint with address 0xB, skipping [ 89.933645][ T57] usb 5-1: config 7 interface 26 has no altsetting 0 [ 89.936038][ T57] usb 5-1: config 7 interface 30 has no altsetting 0 [ 89.938485][ T57] usb 5-1: config 7 interface 55 has no altsetting 0 [ 89.943823][ T57] usb 5-1: config 7 interface 40 has no altsetting 0 [ 89.946109][ T57] usb 5-1: config 7 interface 222 has no altsetting 0 [ 89.948423][ T57] usb 5-1: config 7 interface 131 has no altsetting 0 [ 89.953964][ T57] usb 5-1: New USB device found, idVendor=10b8, idProduct=1f90, bcdDevice= 6.82 [ 89.957214][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.968566][ T57] usb 5-1: Product: ጽ就躸囆ड़â³ê©‘礢힖挋﷟蛪惨逹碅垆⛶䇱뎆쯽勇￲茎机騟é翿髳Ɯ賒慭ꦿﺉ䨞ⵊ瀵êœèššé²®æ¿·ã¥ªí€°ä‹”꽉ⷾâ®í›’à¿·ç’éŸä³¶ì®¥ì§æŸì±—홄爃툤᨜ை쫃 [ 89.976007][ T57] usb 5-1: Manufacturer: 㲯♀캰쪆㷢ì¾ê«€ë‘¹éŽ†î¡ˆÑŸæ‰¾î猇ꎋᬭ㙃㌹࿒ǻá§äŠ©ä€­è¢§ì¹ê¬áµ¶áº½çš¾ê‹•ï†²ë—ìˆà¯”梧쭭斒ë°è•¦ìƒšï¶–䆢咗ڣ쾨瑀푛ꀪ䃮쀃ᚺऺ麙숈傮鿡騃咗咴钎롥çµæ‚£ãˆ©éš¢á¯§ì‡‹î¢‘ï°îŸ–늞庿ݓÌä·¿ [ 89.983535][ T57] usb 5-1: SerialNumber: syz [ 90.093120][ T7140] netlink: 'syz.2.273': attribute type 10 has an invalid length. [ 90.263469][ T57] dvb-usb: found a 'DiBcom STK807xP reference design' in cold state, will try to load a firmware [ 90.293113][ T57] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 90.295334][ T57] dib0700: firmware download failed at 7 with -8 [ 90.313294][ T57] dvb-usb: found a 'DiBcom STK807xP reference design' in cold state, will try to load a firmware [ 90.317861][ T57] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 90.320042][ T57] dib0700: firmware download failed at 7 with -8 [ 90.526879][ T57] dvb-usb: found a 'DiBcom STK807xP reference design' in cold state, will try to load a firmware [ 90.530743][ T57] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 90.532994][ T57] dib0700: firmware download failed at 7 with -8 [ 90.537072][ T57] dvb-usb: found a 'DiBcom STK807xP reference design' in cold state, will try to load a firmware [ 90.540927][ T57] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 90.543151][ T57] dib0700: firmware download failed at 7 with -8 [ 90.558284][ T57] dvb-usb: found a 'DiBcom STK807xP reference design' in cold state, will try to load a firmware [ 90.564108][ T57] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 90.566417][ T57] dib0700: firmware download failed at 7 with -8 [ 90.595634][ T57] dvb-usb: found a 'DiBcom STK807xP reference design' in cold state, will try to load a firmware [ 90.603463][ T57] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 90.607944][ T57] dib0700: firmware download failed at 7 with -8 [ 90.644241][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.276'. [ 90.733021][ T57] usb 5-1: USB disconnect, device number 3 [ 91.465447][ T7171] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.476591][ T7171] FAULT_INJECTION: forcing a failure. [ 91.476591][ T7171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.482171][ T7171] CPU: 2 UID: 0 PID: 7171 Comm: syz.2.280 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 91.485476][ T7171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.488111][ T7171] Call Trace: [ 91.488922][ T7171] [ 91.489683][ T7171] dump_stack_lvl+0x16c/0x1f0 [ 91.490810][ T7171] should_fail_ex+0x497/0x5b0 [ 91.492066][ T7171] _copy_from_user+0x2e/0xd0 [ 91.493222][ T7171] get_compat_msghdr+0xa8/0x170 [ 91.494417][ T7171] ? __pfx_get_compat_msghdr+0x10/0x10 [ 91.495808][ T7171] ___sys_recvmsg+0x193/0x1a0 [ 91.497005][ T7171] ? __pfx____sys_recvmsg+0x10/0x10 [ 91.498335][ T7171] ? __fget_files+0x1fc/0x3a0 [ 91.499523][ T7171] ? trace_lock_acquire+0x14e/0x1f0 [ 91.500807][ T7171] ? __fget_files+0x206/0x3a0 [ 91.501996][ T7171] do_recvmmsg+0x55d/0x740 [ 91.503390][ T7171] ? __pfx_do_recvmmsg+0x10/0x10 [ 91.505176][ T7171] ? vfs_write+0x306/0x1150 [ 91.506446][ T7171] ? __fget_files+0x206/0x3a0 [ 91.507651][ T7171] __sys_recvmmsg+0x21e/0x280 [ 91.508852][ T7171] ? __pfx___sys_recvmmsg+0x10/0x10 [ 91.510118][ T7171] ? __pfx_ksys_write+0x10/0x10 [ 91.511347][ T7171] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 91.512925][ T7171] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.514501][ T7171] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 91.516245][ T7171] __do_fast_syscall_32+0x73/0x120 [ 91.517563][ T7171] do_fast_syscall_32+0x32/0x80 [ 91.518796][ T7171] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.520425][ T7171] RIP: 0023:0xf7fc0579 [ 91.521462][ T7171] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 91.526432][ T7171] RSP: 002b:00000000f50f555c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 91.528595][ T7171] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000200048c0 [ 91.530646][ T7171] RDX: 0000000000001003 RSI: 0000000000010122 RDI: 0000000000000000 [ 91.532721][ T7171] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.534842][ T7171] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 91.536921][ T7171] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.538972][ T7171] [ 91.553655][ T7171] warning: `syz.2.280' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.453688][ T7188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.285'. [ 93.097208][ T7205] netlink: 92 bytes leftover after parsing attributes in process `syz.1.290'. [ 93.151610][ T7207] overlay: Bad value for 'workdir' [ 93.555761][ T7208] delete_channel: no stack [ 94.130027][ T7215] delete_channel: no stack [ 94.474121][ T7246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.298'. [ 94.888922][ T7250] random: crng reseeded on system resumption [ 95.140171][ T1461] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.161662][ T7258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.303'. [ 95.571963][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.304'. [ 95.975888][ T7274] capability: warning: `syz.0.308' uses deprecated v2 capabilities in a way that may be insecure [ 96.077918][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.305'. [ 96.605308][ T7299] netlink: 92 bytes leftover after parsing attributes in process `syz.1.313'. [ 96.798630][ T7311] FAULT_INJECTION: forcing a failure. [ 96.798630][ T7311] name failslab, interval 1, probability 0, space 0, times 0 [ 96.802843][ T7311] CPU: 2 UID: 0 PID: 7311 Comm: syz.3.317 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 96.805679][ T7311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.808545][ T7311] Call Trace: [ 96.809452][ T7311] [ 96.810240][ T7311] dump_stack_lvl+0x16c/0x1f0 [ 96.811521][ T7311] should_fail_ex+0x497/0x5b0 [ 96.812841][ T7311] ? fs_reclaim_acquire+0xae/0x150 [ 96.814229][ T7311] should_failslab+0xc2/0x120 [ 96.815011][ T7313] FAULT_INJECTION: forcing a failure. [ 96.815011][ T7313] name failslab, interval 1, probability 0, space 0, times 0 [ 96.815505][ T7311] __kmalloc_cache_noprof+0x68/0x420 [ 96.820819][ T7311] ? rcu_is_watching+0x12/0xc0 [ 96.822111][ T7311] uprobe_register+0x174/0xb40 [ 96.823454][ T7311] bpf_uprobe_multi_link_attach+0x8ec/0x1070 [ 96.825060][ T7311] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 96.826777][ T7311] ? fput+0x67/0x440 [ 96.827845][ T7311] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 96.829411][ T7311] __sys_bpf+0x48af/0x57a0 [ 96.830628][ T7311] ? __pfx_lock_release+0x10/0x10 [ 96.831996][ T7311] ? __pfx___sys_bpf+0x10/0x10 [ 96.833299][ T7311] ? vfs_write+0x306/0x1150 [ 96.834525][ T7311] ? __mutex_unlock_slowpath+0x164/0x690 [ 96.836043][ T7311] ? fput+0x67/0x440 [ 96.837107][ T7311] ? ksys_write+0x1ba/0x250 [ 96.838339][ T7311] ? __pfx_ksys_write+0x10/0x10 [ 96.839681][ T7311] __ia32_sys_bpf+0x76/0xe0 [ 96.840897][ T7311] __do_fast_syscall_32+0x73/0x120 [ 96.842417][ T7311] do_fast_syscall_32+0x32/0x80 [ 96.843760][ T7311] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 96.845465][ T7311] RIP: 0023:0xf7f01579 [ 96.846558][ T7311] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 96.851633][ T7311] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 96.853867][ T7311] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00000000200012c0 [ 96.856019][ T7311] RDX: 000000000000003c RSI: 0000000000000000 RDI: 0000000000000000 [ 96.858144][ T7311] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.860302][ T7311] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 96.862402][ T7311] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.864568][ T7311] [ 96.865416][ T7313] CPU: 3 UID: 0 PID: 7313 Comm: syz.0.318 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 96.868729][ T7313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.872606][ T7313] Call Trace: [ 96.873835][ T7313] [ 96.874917][ T7313] dump_stack_lvl+0x16c/0x1f0 [ 96.876658][ T7313] should_fail_ex+0x497/0x5b0 [ 96.878401][ T7313] ? fs_reclaim_acquire+0xae/0x150 [ 96.880256][ T7313] should_failslab+0xc2/0x120 [ 96.881997][ T7313] __kmalloc_cache_noprof+0x68/0x420 [ 96.883931][ T7313] ? chrdev_open+0x10e/0x6a0 [ 96.885607][ T7313] subdev_open+0x7f/0x560 [ 96.887180][ T7313] v4l2_open+0x222/0x490 [ 96.888345][ T7313] ? __pfx_v4l2_open+0x10/0x10 [ 96.889742][ T7313] chrdev_open+0x237/0x6a0 [ 96.891357][ T7313] ? __pfx_apparmor_file_open+0x10/0x10 [ 96.893384][ T7313] ? __pfx_chrdev_open+0x10/0x10 [ 96.895169][ T7313] do_dentry_open+0xf59/0x1ea0 [ 96.896933][ T7313] ? __pfx_chrdev_open+0x10/0x10 [ 96.898746][ T7313] ? inode_permission+0xdd/0x5f0 [ 96.900566][ T7313] vfs_open+0x82/0x3f0 [ 96.902041][ T7313] ? may_open+0x1f2/0x400 [ 96.903628][ T7313] path_openat+0x1e6a/0x2d60 [ 96.905313][ T7313] ? __pfx_path_openat+0x10/0x10 [ 96.907067][ T7313] ? __pfx___lock_acquire+0x10/0x10 [ 96.908964][ T7313] ? lock_acquire.part.0+0x11b/0x380 [ 96.910555][ T7313] ? find_held_lock+0x2d/0x110 [ 96.911817][ T7313] do_filp_open+0x20c/0x470 [ 96.913337][ T7313] ? __pfx_do_filp_open+0x10/0x10 [ 96.915152][ T7313] ? find_held_lock+0x2d/0x110 [ 96.916925][ T7313] ? alloc_fd+0x41f/0x760 [ 96.918509][ T7313] do_sys_openat2+0x17a/0x1e0 [ 96.920232][ T7313] ? __pfx_do_sys_openat2+0x10/0x10 [ 96.922106][ T7313] ? __fget_files+0x206/0x3a0 [ 96.923835][ T7313] __ia32_compat_sys_openat+0x16e/0x210 [ 96.925856][ T7313] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 96.928054][ T7313] ? ksys_write+0x1ba/0x250 [ 96.929696][ T7313] __do_fast_syscall_32+0x73/0x120 [ 96.931786][ T7313] do_fast_syscall_32+0x32/0x80 [ 96.933545][ T7313] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 96.935860][ T7313] RIP: 0023:0xf710e579 [ 96.937131][ T7313] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 96.943053][ T7313] RSP: 002b:00000000f5100100 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 96.945903][ T7313] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5100150 [ 96.948193][ T7313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7443ff4 [ 96.950141][ T7313] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.952456][ T7313] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 96.954483][ T7313] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.956524][ T7313] [ 97.307523][ T7332] netlink: 92 bytes leftover after parsing attributes in process `syz.0.322'. [ 97.348349][ T7329] syz.1.323: vmalloc error: size 8192, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 97.358160][ T7329] CPU: 3 UID: 0 PID: 7329 Comm: syz.1.323 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 97.361188][ T7329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.363997][ T7329] Call Trace: [ 97.364877][ T7329] [ 97.365659][ T7329] dump_stack_lvl+0x16c/0x1f0 [ 97.366889][ T7329] warn_alloc+0x24d/0x3a0 [ 97.368053][ T7329] ? __pfx_warn_alloc+0x10/0x10 [ 97.369734][ T7329] ? __pfx_lock_release+0x10/0x10 [ 97.371595][ T7329] ? rcu_is_watching+0x12/0xc0 [ 97.373354][ T7329] ? __mod_memcg_state+0x419/0x5d0 [ 97.375162][ T7329] __vmalloc_node_range_noprof+0x12c0/0x1530 [ 97.377322][ T7329] ? kvm_dev_ioctl+0x151/0x1aa0 [ 97.379122][ T7329] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 97.381412][ T7329] ? __pfx_snprintf+0x10/0x10 [ 97.383161][ T7329] ? _raw_spin_unlock+0x28/0x50 [ 97.385169][ T7329] ? alloc_fd+0x41f/0x760 [ 97.386765][ T7329] ? kvm_dev_ioctl+0x151/0x1aa0 [ 97.388561][ T7329] __vmalloc_noprof+0x6d/0x90 [ 97.390269][ T7329] ? kvm_dev_ioctl+0x151/0x1aa0 [ 97.392056][ T7329] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 97.393910][ T7329] kvm_dev_ioctl+0x151/0x1aa0 [ 97.395220][ T7329] ? __pfx_lock_release+0x10/0x10 [ 97.396935][ T7329] ? trace_lock_acquire+0x14e/0x1f0 [ 97.398517][ T7329] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 97.399907][ T7329] ? __fget_files+0x206/0x3a0 [ 97.401561][ T7329] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 97.403330][ T7329] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 97.405177][ T7329] __do_fast_syscall_32+0x73/0x120 [ 97.406760][ T7329] do_fast_syscall_32+0x32/0x80 [ 97.408059][ T7329] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.409709][ T7329] RIP: 0023:0xf7f20579 [ 97.410779][ T7329] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 97.415722][ T7329] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 97.418131][ T7329] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000000000ae01 [ 97.420212][ T7329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.422312][ T7329] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.424396][ T7329] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 97.426476][ T7329] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.428531][ T7329] [ 97.433773][ T7329] Mem-Info: [ 97.434707][ T7329] active_anon:5653 inactive_anon:177 isolated_anon:0 [ 97.434707][ T7329] active_file:4973 inactive_file:34036 isolated_file:0 [ 97.434707][ T7329] unevictable:1768 dirty:605 writeback:0 [ 97.434707][ T7329] slab_reclaimable:8309 slab_unreclaimable:54887 [ 97.434707][ T7329] mapped:25347 shmem:2456 pagetables:788 [ 97.434707][ T7329] sec_pagetables:302 bounce:0 [ 97.434707][ T7329] kernel_misc_reclaimable:0 [ 97.434707][ T7329] free:65511 free_pcp:4133 free_cma:0 [ 97.459152][ T7329] Node 0 active_anon:4644kB inactive_anon:708kB active_file:11296kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:6080kB dirty:0kB writeback:0kB shmem:4832kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9776kB pagetables:904kB sec_pagetables:1152kB all_unreclaimable? yes [ 97.469055][ T7329] Node 1 active_anon:18068kB inactive_anon:0kB active_file:8596kB inactive_file:136144kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:95528kB dirty:2420kB writeback:0kB shmem:5192kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2500kB pagetables:2272kB sec_pagetables:56kB all_unreclaimable? no [ 97.482682][ T7329] Node 0 DMA free:2976kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:400kB inactive_anon:180kB active_file:184kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:512kB local_pcp:68kB free_cma:0kB [ 97.493643][ T7329] lowmem_reserve[]: 0 273 0 0 0 [ 97.495827][ T7329] Node 0 DMA32 free:18888kB boost:0kB min:13904kB low:17380kB high:20856kB reserved_highatomic:4096KB active_anon:4244kB inactive_anon:528kB active_file:11112kB inactive_file:0kB unevictable:3536kB writepending:0kB present:1032196kB managed:306308kB mlocked:0kB bounce:0kB free_pcp:1524kB local_pcp:456kB free_cma:0kB [ 97.507055][ T7329] lowmem_reserve[]: 0 0 0 0 0 [ 97.508973][ T7329] Node 1 DMA32 free:237744kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:19368kB inactive_anon:0kB active_file:8596kB inactive_file:136144kB unevictable:3536kB writepending:2420kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:15100kB local_pcp:1256kB free_cma:0kB [ 97.519658][ T7329] lowmem_reserve[]: 0 0 0 0 0 [ 97.521554][ T7329] Node 0 DMA: 70*4kB (UME) 23*8kB (UME) 35*16kB (UME) 43*32kB (UME) 7*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2976kB [ 97.526961][ T7329] Node 0 DMA32: 146*4kB (UMH) 62*8kB (UMEH) 29*16kB (UMEH) 84*32kB (UMEH) 93*64kB (UMEH) 20*128kB (UME) 6*256kB (UE) 5*512kB (UE) 2*1024kB (UM) 0*2048kB 0*4096kB = 18888kB [ 97.532722][ T7329] Node 1 DMA32: 6*4kB (E) 8*8kB (UM) 79*16kB (UME) 135*32kB (UME) 101*64kB (UME) 22*128kB (UME) 7*256kB (UM) 17*512kB (UME) 7*1024kB (M) 2*2048kB (UM) 49*4096kB (UM) = 237416kB [ 97.537507][ T7329] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 97.540225][ T7329] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 97.544261][ T7329] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 97.546740][ T7329] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 97.549134][ T7329] 41605 total pagecache pages [ 97.550453][ T7329] 0 pages in swap cache [ 97.551824][ T7329] Free swap = 124996kB [ 97.552976][ T7329] Total swap = 124996kB [ 97.554139][ T7329] 524155 pages RAM [ 97.555215][ T7329] 0 pages HighMem/MovableOnly [ 97.556506][ T7329] 206675 pages reserved [ 97.557611][ T7329] 0 pages cma reserved [ 97.722250][ T7349] netlink: 'syz.1.328': attribute type 4 has an invalid length. [ 97.724397][ T7349] netlink: 17 bytes leftover after parsing attributes in process `syz.1.328'. [ 97.739229][ T7350] FAULT_INJECTION: forcing a failure. [ 97.739229][ T7350] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 97.743097][ T7350] CPU: 2 UID: 0 PID: 7350 Comm: syz.2.327 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 97.745868][ T7350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.748653][ T7350] Call Trace: [ 97.749554][ T7350] [ 97.750339][ T7350] dump_stack_lvl+0x16c/0x1f0 [ 97.751604][ T7350] should_fail_ex+0x497/0x5b0 [ 97.752910][ T7350] ? fs_reclaim_acquire+0xae/0x150 [ 97.754262][ T7350] should_fail_alloc_page+0xe7/0x130 [ 97.755686][ T7350] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 97.757308][ T7350] __alloc_pages_noprof+0x190/0x25b0 [ 97.758713][ T7350] ? hlock_class+0x4e/0x130 [ 97.759927][ T7350] ? __lock_acquire+0x15a9/0x3c40 [ 97.761685][ T7350] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 97.763270][ T7350] ? hlock_class+0x4e/0x130 [ 97.764518][ T7350] ? __lock_acquire+0xcc5/0x3c40 [ 97.765828][ T7350] ? __pfx___lock_acquire+0x10/0x10 [ 97.767211][ T7350] ? lock_acquire.part.0+0x11b/0x380 [ 97.768626][ T7350] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 97.770226][ T7350] ? policy_nodemask+0xea/0x4e0 [ 97.771539][ T7350] alloc_pages_mpol_noprof+0x2c9/0x610 [ 97.773011][ T7350] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 97.774612][ T7350] ? __fget_files+0x1fc/0x3a0 [ 97.775876][ T7350] ? __pfx_lock_release+0x10/0x10 [ 97.777207][ T7350] get_free_pages_noprof+0xc/0x40 [ 97.778543][ T7350] __pollwait+0x291/0x4c0 [ 97.779699][ T7350] ? __fget_files+0x206/0x3a0 [ 97.781076][ T7350] pipe_poll+0x28a/0x8a0 [ 97.782190][ T7350] ? __pfx___pollwait+0x10/0x10 [ 97.783503][ T7350] ? __pfx_pipe_poll+0x10/0x10 [ 97.784876][ T7350] do_sys_poll+0x524/0xde0 [ 97.786464][ T7350] ? __pfx_do_sys_poll+0x10/0x10 [ 97.788157][ T7350] ? __pfx___lock_acquire+0x10/0x10 [ 97.790061][ T7350] ? __pfx___pollwait+0x10/0x10 [ 97.791657][ T7350] ? __pfx_pollwake+0x10/0x10 [ 97.793314][ T7350] ? __pfx_pollwake+0x10/0x10 [ 97.794601][ T7350] ? __pfx_pollwake+0x10/0x10 [ 97.795846][ T7350] ? __pfx_pollwake+0x10/0x10 [ 97.797082][ T7350] ? __pfx_pollwake+0x10/0x10 [ 97.798340][ T7350] ? __pfx_pollwake+0x10/0x10 [ 97.799587][ T7350] ? __pfx_pollwake+0x10/0x10 [ 97.800830][ T7350] ? __pfx_pollwake+0x10/0x10 [ 97.802067][ T7350] ? __pfx_pollwake+0x10/0x10 [ 97.803337][ T7350] ? __mutex_unlock_slowpath+0x164/0x690 [ 97.804823][ T7350] ? set_compat_user_sigmask+0x20f/0x2a0 [ 97.806381][ T7350] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 97.807959][ T7350] ? __fget_files+0x206/0x3a0 [ 97.809201][ T7350] __ia32_compat_sys_ppoll_time32+0x24a/0x2c0 [ 97.810797][ T7350] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 97.812543][ T7350] ? ksys_write+0x1ba/0x250 [ 97.813774][ T7350] ? __pfx_ksys_write+0x10/0x10 [ 97.815063][ T7350] __do_fast_syscall_32+0x73/0x120 [ 97.816421][ T7350] do_fast_syscall_32+0x32/0x80 [ 97.817692][ T7350] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.819355][ T7350] RIP: 0023:0xf7fc0579 [ 97.820437][ T7350] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 97.825460][ T7350] RSP: 002b:00000000f50f555c EFLAGS: 00000296 ORIG_RAX: 0000000000000135 [ 97.828086][ T7350] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 000000000000001f [ 97.830224][ T7350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.832295][ T7350] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.834476][ T7350] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 97.836544][ T7350] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.838621][ T7350] [ 98.142479][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.331'. [ 98.791757][ T7391] FAULT_INJECTION: forcing a failure. [ 98.791757][ T7391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.795314][ T7391] CPU: 1 UID: 0 PID: 7391 Comm: syz.2.336 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 98.798068][ T7391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.800898][ T7391] Call Trace: [ 98.801780][ T7391] [ 98.802553][ T7391] dump_stack_lvl+0x16c/0x1f0 [ 98.803812][ T7391] should_fail_ex+0x497/0x5b0 [ 98.805054][ T7391] _copy_from_user+0x2e/0xd0 [ 98.806286][ T7391] compat_copy_ebt_replace_from_user+0x130/0x420 [ 98.807943][ T7391] ? __pfx_compat_copy_ebt_replace_from_user+0x10/0x10 [ 98.809708][ T7391] ? __pfx___schedule+0x10/0x10 [ 98.810987][ T7391] compat_do_replace+0xd5/0x750 [ 98.812263][ T7391] ? __pfx_compat_do_replace+0x10/0x10 [ 98.813683][ T7391] ? aa_get_newest_label+0x376/0x680 [ 98.815061][ T7391] ? __pfx_aa_get_newest_label+0x10/0x10 [ 98.816532][ T7391] ? bpf_lsm_capable+0x9/0x10 [ 98.817809][ T7391] ? security_capable+0x7e/0x260 [ 98.819126][ T7391] do_ebt_set_ctl+0x4af/0x580 [ 98.820383][ T7391] ? sockopt_release_sock+0x52/0x60 [ 98.821743][ T7391] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 98.823135][ T7391] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 98.824546][ T7391] ? trace_contention_end+0xee/0x140 [ 98.825936][ T7391] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 98.827511][ T7391] nf_setsockopt+0x8a/0xf0 [ 98.828686][ T7391] ip_setsockopt+0xcb/0xf0 [ 98.829850][ T7391] tcp_setsockopt+0xa4/0x100 [ 98.831072][ T7391] smc_setsockopt+0x1b4/0xc00 [ 98.832501][ T7391] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 98.834068][ T7391] ? __pfx_smc_setsockopt+0x10/0x10 [ 98.835451][ T7391] ? __pfx_smc_setsockopt+0x10/0x10 [ 98.836827][ T7391] do_sock_setsockopt+0x222/0x480 [ 98.838159][ T7391] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 98.839612][ T7391] ? lock_acquire+0x2f/0xb0 [ 98.840826][ T7391] __sys_setsockopt+0x1a0/0x230 [ 98.842127][ T7391] __ia32_sys_setsockopt+0xbc/0x160 [ 98.843513][ T7391] ? lockdep_hardirqs_on+0x7c/0x110 [ 98.844888][ T7391] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 98.846609][ T7391] __do_fast_syscall_32+0x73/0x120 [ 98.847970][ T7391] do_fast_syscall_32+0x32/0x80 [ 98.849247][ T7391] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.850899][ T7391] RIP: 0023:0xf7fc0579 [ 98.851989][ T7391] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 98.857001][ T7391] RSP: 002b:00000000f50d455c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 98.859188][ T7391] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 98.861257][ T7391] RDX: 0000000000000080 RSI: 0000000020000300 RDI: 00000000000000e0 [ 98.863365][ T7391] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 98.865437][ T7391] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 98.867505][ T7391] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.869563][ T7391] [ 98.910299][ T7395] netlink: 'syz.1.340': attribute type 10 has an invalid length. [ 98.989364][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.339'. [ 99.112855][ T7398] FAULT_INJECTION: forcing a failure. [ 99.112855][ T7398] name failslab, interval 1, probability 0, space 0, times 0 [ 99.116384][ T7398] CPU: 0 UID: 0 PID: 7398 Comm: syz.2.341 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 99.120054][ T7398] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.123437][ T7398] Call Trace: [ 99.124309][ T7398] [ 99.125085][ T7398] dump_stack_lvl+0x16c/0x1f0 [ 99.126318][ T7398] should_fail_ex+0x497/0x5b0 [ 99.127614][ T7398] ? fs_reclaim_acquire+0xae/0x150 [ 99.128938][ T7398] should_failslab+0xc2/0x120 [ 99.130156][ T7398] __kmalloc_cache_noprof+0x68/0x420 [ 99.131521][ T7398] ? bpf_prog_get_type_dev+0x76/0xa0 [ 99.132874][ T7398] __sk_attach_prog+0x46/0x280 [ 99.134131][ T7398] sk_attach_bpf+0xb2/0x110 [ 99.135313][ T7398] sk_setsockopt+0x1924/0x3e40 [ 99.136574][ T7398] ? __pfx_sk_setsockopt+0x10/0x10 [ 99.138011][ T7398] ? __pfx___might_resched+0x10/0x10 [ 99.139752][ T7398] ? aa_sk_perm+0x2f5/0xb20 [ 99.140942][ T7398] ? ksys_write+0x191/0x250 [ 99.142132][ T7398] ? __pfx_aa_sk_perm+0x10/0x10 [ 99.143442][ T7398] ? find_held_lock+0x2d/0x110 [ 99.144689][ T7398] do_sock_setsockopt+0x3f4/0x480 [ 99.145999][ T7398] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 99.148346][ T7398] ? lock_acquire+0x2f/0xb0 [ 99.150024][ T7398] __sys_setsockopt+0x1a0/0x230 [ 99.151755][ T7398] __ia32_sys_setsockopt+0xbc/0x160 [ 99.153491][ T7398] ? lockdep_hardirqs_on+0x7c/0x110 [ 99.155259][ T7398] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 99.157534][ T7398] __do_fast_syscall_32+0x73/0x120 [ 99.159325][ T7398] do_fast_syscall_32+0x32/0x80 [ 99.161128][ T7398] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 99.163359][ T7398] RIP: 0023:0xf7fc0579 [ 99.164777][ T7398] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 99.171402][ T7398] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 99.174317][ T7398] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000001 [ 99.177083][ T7398] RDX: 0000000000000032 RSI: 0000000020000200 RDI: 0000000000000004 [ 99.179870][ T7398] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 99.182559][ T7398] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 99.185289][ T7398] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 99.188055][ T7398] [ 99.189264][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.213567][ T7402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.343'. [ 99.423369][ T7411] netlink: 'syz.0.346': attribute type 4 has an invalid length. [ 99.645674][ T7413] netlink: 'syz.3.347': attribute type 10 has an invalid length. [ 100.528065][ T7442] befs: Unknown parameter 'b±Fs µÚì' [ 100.655966][ T7442] syz.2.356 (7442): /proc/7441/oom_adj is deprecated, please use /proc/7441/oom_score_adj instead. [ 100.762535][ T7450] __nla_validate_parse: 1 callbacks suppressed [ 100.762565][ T7450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.355'. [ 101.062708][ T7456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.358'. [ 101.902885][ T1015] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.050312][ T1015] usb 5-1: Using ep0 maxpacket: 8 [ 102.070662][ T1015] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 102.080289][ T7461] delete_channel: no stack [ 102.088118][ T1015] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 102.106745][ T1015] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 102.139500][ T1015] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 102.166616][ T1015] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 102.167164][ T7483] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.366'. [ 102.200039][ T1015] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 102.224488][ T1015] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 102.238549][ T1015] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 102.251386][ T1015] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 102.260572][ T1015] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 102.265456][ T1015] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 102.269897][ T1015] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 102.273669][ T1015] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 102.276835][ T1015] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 102.279707][ T1015] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 102.286265][ T1015] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 102.288651][ T1015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.290991][ T1015] usb 5-1: Product: syz [ 102.292114][ T1015] usb 5-1: Manufacturer: syz [ 102.293353][ T1015] usb 5-1: SerialNumber: syz [ 102.614962][ T7489] netlink: 'syz.2.367': attribute type 4 has an invalid length. [ 102.617162][ T7489] netlink: 17 bytes leftover after parsing attributes in process `syz.2.367'. [ 102.673030][ T1015] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 102.723041][ T1015] usb 5-1: USB disconnect, device number 5 [ 102.780179][ T25] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 103.193394][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.370'. [ 103.204155][ T7503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.207823][ T7503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.213521][ T7503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.215713][ T7503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.226516][ T7503] bond0: (slave batadv0): Releasing backup interface [ 103.336303][ T7512] netlink: 20 bytes leftover after parsing attributes in process `syz.0.374'. [ 103.559155][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.377'. [ 103.562546][ T7525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.565156][ T7525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.568525][ T7525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.577040][ T7525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.595512][ T7525] bond0: (slave batadv0): Releasing backup interface [ 103.881649][ T7515] delete_channel: no stack [ 103.901524][ T7508] delete_channel: no stack [ 103.930827][ T7532] befs: Unknown parameter 'b±Fs µÚì' [ 104.134927][ T7548] netlink: 20 bytes leftover after parsing attributes in process `syz.0.384'. [ 105.078808][ T7558] delete_channel: no stack [ 105.111268][ T7575] FAULT_INJECTION: forcing a failure. [ 105.111268][ T7575] name failslab, interval 1, probability 0, space 0, times 0 [ 105.115084][ T7575] CPU: 1 UID: 0 PID: 7575 Comm: syz.0.391 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 105.117851][ T7575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.120674][ T7575] Call Trace: [ 105.121569][ T7575] [ 105.122328][ T7575] dump_stack_lvl+0x16c/0x1f0 [ 105.123584][ T7575] should_fail_ex+0x497/0x5b0 [ 105.124848][ T7575] ? fs_reclaim_acquire+0xae/0x150 [ 105.126178][ T7575] should_failslab+0xc2/0x120 [ 105.127423][ T7575] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 105.128899][ T7575] ? __d_alloc+0x35/0x8c0 [ 105.130027][ T7575] __d_alloc+0x35/0x8c0 [ 105.131113][ T7575] d_alloc+0x4a/0x1e0 [ 105.132130][ T7575] d_alloc_parallel+0xe9/0x12b0 [ 105.133373][ T7575] ? __pfx_d_alloc_parallel+0x10/0x10 [ 105.134903][ T7575] ? lockdep_init_map_type+0x16d/0x7d0 [ 105.136776][ T7575] ? lock_acquire.part.0+0x11b/0x380 [ 105.138607][ T7575] ? lockdep_init_map_type+0x16d/0x7d0 [ 105.140117][ T7575] __lookup_slow+0x194/0x460 [ 105.141323][ T7575] ? __pfx___lookup_slow+0x10/0x10 [ 105.142666][ T7575] ? walk_component+0x342/0x5b0 [ 105.143966][ T7575] ? lookup_fast+0x155/0x540 [ 105.145191][ T7575] walk_component+0x350/0x5b0 [ 105.146434][ T7575] link_path_walk.part.0.constprop.0+0x669/0xd40 [ 105.148108][ T7575] path_openat+0x228/0x2d60 [ 105.149285][ T7575] ? hlock_class+0x4e/0x130 [ 105.150593][ T7575] ? __pfx_path_openat+0x10/0x10 [ 105.151838][ T7575] ? __pfx___lock_acquire+0x10/0x10 [ 105.153179][ T7575] ? lock_acquire.part.0+0x11b/0x380 [ 105.154616][ T7575] ? find_held_lock+0x2d/0x110 [ 105.156310][ T7575] do_filp_open+0x20c/0x470 [ 105.157918][ T7575] ? __pfx_do_filp_open+0x10/0x10 [ 105.159462][ T7575] ? find_held_lock+0x2d/0x110 [ 105.160699][ T7575] ? __pfx_kfree_link+0x10/0x10 [ 105.161931][ T7575] ? alloc_fd+0x41f/0x760 [ 105.163072][ T7575] do_sys_openat2+0x17a/0x1e0 [ 105.164334][ T7575] ? __pfx_do_sys_openat2+0x10/0x10 [ 105.165677][ T7575] ? __fget_files+0x206/0x3a0 [ 105.166853][ T7575] __ia32_compat_sys_openat+0x16e/0x210 [ 105.168265][ T7575] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 105.169790][ T7575] ? ksys_write+0x1ba/0x250 [ 105.171037][ T7575] __do_fast_syscall_32+0x73/0x120 [ 105.172445][ T7575] do_fast_syscall_32+0x32/0x80 [ 105.173695][ T7575] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.175692][ T7575] RIP: 0023:0xf710e579 [ 105.177131][ T7575] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 105.182266][ T7575] RSP: 002b:00000000f5100490 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 105.184396][ T7575] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f51004e0 [ 105.186373][ T7575] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f7443ff4 [ 105.188399][ T7575] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 105.190354][ T7575] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 105.192346][ T7575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.194356][ T7575] [ 105.329530][ T7588] FAULT_INJECTION: forcing a failure. [ 105.329530][ T7588] name failslab, interval 1, probability 0, space 0, times 0 [ 105.333747][ T7588] CPU: 3 UID: 0 PID: 7588 Comm: syz.1.397 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 105.337296][ T7588] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.338947][ T7583] netlink: 36 bytes leftover after parsing attributes in process `syz.0.395'. [ 105.340963][ T7588] Call Trace: [ 105.340972][ T7588] [ 105.340980][ T7588] dump_stack_lvl+0x16c/0x1f0 [ 105.341006][ T7588] should_fail_ex+0x497/0x5b0 [ 105.341027][ T7588] ? fs_reclaim_acquire+0xae/0x150 [ 105.341048][ T7588] should_failslab+0xc2/0x120 [ 105.341071][ T7588] __kmalloc_cache_noprof+0x68/0x420 [ 105.341097][ T7588] vmci_ctx_enqueue_datagram+0xaf/0x650 [ 105.341125][ T7588] vmci_datagram_dispatch+0x42d/0xd10 [ 105.341148][ T7588] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 105.345092][ T7583] sctp: [Deprecated]: syz.0.395 (pid 7583) Use of int in max_burst socket option. [ 105.345092][ T7583] Use struct sctp_assoc_value instead [ 105.345823][ T7588] ? _copy_from_user+0x59/0xd0 [ 105.366632][ T7588] vmci_host_unlocked_ioctl+0xfbd/0x1fb0 [ 105.368618][ T7588] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 105.370762][ T7588] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 105.372533][ T7588] ? __pfx_lock_release+0x10/0x10 [ 105.374185][ T7588] ? trace_lock_acquire+0x14e/0x1f0 [ 105.376020][ T7588] ? __fget_files+0x206/0x3a0 [ 105.377656][ T7588] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 105.379821][ T7588] compat_ptr_ioctl+0x6b/0xa0 [ 105.381463][ T7588] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 105.383340][ T7588] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 105.385161][ T7588] __do_fast_syscall_32+0x73/0x120 [ 105.386971][ T7588] do_fast_syscall_32+0x32/0x80 [ 105.388693][ T7588] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.390830][ T7588] RIP: 0023:0xf7f20579 [ 105.392272][ T7588] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 105.398969][ T7588] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 105.401751][ T7588] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000000007ab [ 105.404149][ T7588] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.406207][ T7588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.408318][ T7588] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 105.410434][ T7588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.412605][ T7588] [ 105.416975][ T7588] Failed to allocate memory for datagram [ 105.445368][ T7598] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 105.450554][ T7598] binder: 7597:7598 ioctl 400454dc 20000000 returned -22 [ 105.540240][ T4627] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 105.565694][ T7604] netlink: 'syz.0.402': attribute type 4 has an invalid length. [ 105.567844][ T7604] netlink: 17 bytes leftover after parsing attributes in process `syz.0.402'. [ 105.700205][ T4627] usb 8-1: Using ep0 maxpacket: 8 [ 105.704846][ T4627] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 105.707453][ T4627] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 105.710473][ T4627] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.713654][ T4627] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 105.716526][ T4627] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 105.720988][ T4627] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 105.723165][ T4627] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 105.726121][ T4627] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.729183][ T4627] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 105.732168][ T4627] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 105.736501][ T4627] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 105.738682][ T4627] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 105.742462][ T4627] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.745588][ T4627] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 105.748451][ T4627] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 105.757364][ T4627] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 105.759850][ T4627] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.762044][ T4627] usb 8-1: Product: syz [ 105.763327][ T4627] usb 8-1: Manufacturer: syz [ 105.764602][ T4627] usb 8-1: SerialNumber: syz [ 106.013212][ T4627] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 106.021048][ T4627] usb 8-1: USB disconnect, device number 4 [ 106.609172][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.406'. [ 107.123244][ T7631] random: crng reseeded on system resumption [ 107.702430][ T7644] netlink: 'syz.3.413': attribute type 4 has an invalid length. [ 107.704682][ T7644] netlink: 17 bytes leftover after parsing attributes in process `syz.3.413'. [ 108.497065][ T7663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.417'. [ 108.563799][ T7664] random: crng reseeded on system resumption [ 109.888731][ T7679] delete_channel: no stack [ 110.048246][ T7705] random: crng reseeded on system resumption [ 111.147532][ T7732] netlink: 'syz.1.435': attribute type 4 has an invalid length. [ 111.151400][ T7732] netlink: 17 bytes leftover after parsing attributes in process `syz.1.435'. [ 111.566133][ T7724] delete_channel: no stack [ 111.753628][ T7737] netlink: 'syz.2.437': attribute type 4 has an invalid length. [ 111.755978][ T7737] netlink: 17 bytes leftover after parsing attributes in process `syz.2.437'. [ 112.218296][ T7743] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 112.413199][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.438'. [ 112.942612][ T7757] random: crng reseeded on system resumption [ 113.104754][ T7765] befs: Unknown parameter 'b±Fs µÚì' [ 113.306814][ T7774] random: crng reseeded on system resumption [ 113.513691][ T7780] overlay: ./file0 is not a directory [ 113.518782][ T7780] lo speed is unknown, defaulting to 1000 [ 113.535381][ T7780] lo speed is unknown, defaulting to 1000 [ 113.539654][ T7780] lo speed is unknown, defaulting to 1000 [ 113.620749][ T7782] »»»»»»: renamed from lo [ 114.034027][ T57] »»»»»» speed is unknown, defaulting to 1000 [ 114.037194][ T7780] infiniband sz1: set down [ 114.040235][ T7780] infiniband sz1: added »»»»»» [ 114.066591][ T7767] delete_channel: no stack [ 114.103749][ T7780] RDS/IB: sz1: added [ 114.111325][ T7780] smc: adding ib device sz1 with port count 1 [ 114.113547][ T7780] smc: ib device sz1 port 1 has pnetid [ 114.117605][ T57] »»»»»» speed is unknown, defaulting to 1000 [ 114.121344][ T7780] »»»»»» speed is unknown, defaulting to 1000 [ 114.296446][ T7780] »»»»»» speed is unknown, defaulting to 1000 [ 114.369045][ T7780] »»»»»» speed is unknown, defaulting to 1000 [ 114.875753][ T7795] »»»»»» speed is unknown, defaulting to 1000 [ 115.045996][ T7805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.452'. [ 115.338488][ T7780] »»»»»» speed is unknown, defaulting to 1000 [ 115.375604][ T7812] befs: Unknown parameter 'b±Fs µÚì' [ 115.403457][ T7780] »»»»»» speed is unknown, defaulting to 1000 [ 115.430384][ T7816] netlink: 'syz.0.454': attribute type 4 has an invalid length. [ 115.432689][ T7816] netlink: 17 bytes leftover after parsing attributes in process `syz.0.454'. [ 115.991624][ T7825] »»»»»» speed is unknown, defaulting to 1000 [ 116.493752][ T7833] »»»»»» speed is unknown, defaulting to 1000 [ 116.679494][ T7838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.460'. [ 117.310754][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.463'. [ 117.384063][ T7857] netlink: 100 bytes leftover after parsing attributes in process `syz.1.466'. [ 117.540401][ T7865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.464'. [ 117.663859][ T7868] netlink: 'syz.2.468': attribute type 4 has an invalid length. [ 117.668317][ T7868] netlink: 17 bytes leftover after parsing attributes in process `syz.2.468'. [ 118.346457][ T7859] delete_channel: no stack [ 118.445686][ T7878] tc_dump_action: action bad kind [ 118.639929][ T7885] netlink: 'syz.1.473': attribute type 1 has an invalid length. [ 118.669280][ T7885] bond1: (slave gretap1): making interface the new active one [ 118.673143][ T7885] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 118.712293][ T7891] netlink: 100 bytes leftover after parsing attributes in process `syz.3.475'. [ 118.748364][ T7895] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 119.050261][ T6008] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 119.202083][ T6008] usb 6-1: Using ep0 maxpacket: 8 [ 119.209147][ T6008] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 119.217030][ T6008] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 119.223940][ T6008] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 119.228612][ T6008] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 119.233109][ T6008] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 119.239336][ T6008] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 119.259859][ T6008] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 119.265251][ T6008] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 119.269383][ T6008] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 119.273274][ T6008] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 119.277420][ T6008] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 119.279457][ T6008] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 119.282449][ T6008] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 119.285428][ T6008] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 119.289402][ T6008] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 119.294496][ T6008] usb 6-1: string descriptor 0 read error: -22 [ 119.296245][ T6008] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 119.300882][ T6008] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.314726][ T6008] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 119.317783][ T7913] FAULT_INJECTION: forcing a failure. [ 119.317783][ T7913] name failslab, interval 1, probability 0, space 0, times 0 [ 119.330217][ T7913] CPU: 2 UID: 0 PID: 7913 Comm: syz.0.482 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 119.332979][ T7913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.335811][ T7913] Call Trace: [ 119.336691][ T7913] [ 119.337467][ T7913] dump_stack_lvl+0x16c/0x1f0 [ 119.338694][ T7913] should_fail_ex+0x497/0x5b0 [ 119.339896][ T7913] ? fs_reclaim_acquire+0xae/0x150 [ 119.341311][ T7913] should_failslab+0xc2/0x120 [ 119.342490][ T7913] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 119.343990][ T7913] ? __alloc_skb+0x2b3/0x380 [ 119.345178][ T7913] ? bpf_lsm_capable+0x9/0x10 [ 119.346430][ T7913] __alloc_skb+0x2b3/0x380 [ 119.347649][ T7913] ? __pfx___alloc_skb+0x10/0x10 [ 119.348924][ T7913] ? genl_rcv_msg+0x470/0x800 [ 119.350136][ T7913] ? genl_rcv_msg+0x4bd/0x800 [ 119.351350][ T7913] netlink_ack+0x164/0xb20 [ 119.352464][ T7913] netlink_rcv_skb+0x327/0x410 [ 119.353678][ T7913] ? __pfx_genl_rcv_msg+0x10/0x10 [ 119.354977][ T7913] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 119.356357][ T7913] ? down_read+0xc9/0x330 [ 119.357469][ T7913] ? __pfx_down_read+0x10/0x10 [ 119.358722][ T7913] ? netlink_deliver_tap+0x1ae/0xca0 [ 119.360092][ T7913] genl_rcv+0x28/0x40 [ 119.361139][ T7913] netlink_unicast+0x53c/0x7f0 [ 119.362384][ T7913] ? __pfx_netlink_unicast+0x10/0x10 [ 119.363730][ T7913] ? __phys_addr_symbol+0x30/0x80 [ 119.365029][ T7913] ? __check_object_size+0x488/0x710 [ 119.366372][ T7913] netlink_sendmsg+0x8b8/0xd70 [ 119.367589][ T7913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.368930][ T7913] ____sys_sendmsg+0x9ae/0xb40 [ 119.370121][ T7913] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.371472][ T7913] ? get_compat_msghdr+0x11b/0x170 [ 119.372804][ T7913] ___sys_sendmsg+0x135/0x1e0 [ 119.374051][ T7913] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.375416][ T7913] ? __pfx_lock_release+0x10/0x10 [ 119.376712][ T7913] ? trace_lock_acquire+0x14e/0x1f0 [ 119.378075][ T7913] ? __fget_files+0x206/0x3a0 [ 119.379273][ T7913] __sys_sendmsg+0x16e/0x220 [ 119.380487][ T7913] ? __pfx___sys_sendmsg+0x10/0x10 [ 119.381746][ T7913] __do_fast_syscall_32+0x73/0x120 [ 119.383042][ T7913] do_fast_syscall_32+0x32/0x80 [ 119.384368][ T7913] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.385964][ T7913] RIP: 0023:0xf710e579 [ 119.387026][ T7913] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 119.391800][ T7913] RSP: 002b:00000000f510055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 119.394162][ T7913] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000200 [ 119.396207][ T7913] RDX: 0000000000040020 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.398228][ T7913] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 119.400204][ T7913] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 119.402202][ T7913] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.404262][ T7913] [ 119.495721][ T7903] delete_channel: no stack [ 119.521139][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.484'. [ 119.523556][ T7917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.525466][ T7917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.528235][ T7917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.531026][ T7917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.550240][ T7917] bond0: (slave batadv0): Releasing backup interface [ 119.649065][ T7923] block device autoloading is deprecated and will be removed. [ 119.768151][ T7926] netlink: 'syz.3.486': attribute type 4 has an invalid length. [ 119.770271][ T7926] netlink: 17 bytes leftover after parsing attributes in process `syz.3.486'. [ 119.870028][ T7928] netlink: 100 bytes leftover after parsing attributes in process `syz.0.487'. [ 120.811732][ T7953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.495'. [ 121.044466][ T7962] binder: 7958:7962 ioctl c0306201 20000680 returned -14 [ 121.820269][ T6008] usb 6-1: USB disconnect, device number 5 [ 122.066171][ T7978] netlink: 'syz.1.502': attribute type 4 has an invalid length. [ 122.068116][ T7978] netlink: 17 bytes leftover after parsing attributes in process `syz.1.502'. [ 122.345391][ T7989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.505'. [ 122.521223][ T5293] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 122.523618][ T5293] Bluetooth: hci1: Injecting HCI hardware error event [ 122.526750][ T5958] Bluetooth: hci1: hardware error 0x00 [ 122.785334][ T8001] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 123.653392][ T8019] netlink: 28 bytes leftover after parsing attributes in process `syz.3.510'. [ 123.661260][ T8018] netlink: 20 bytes leftover after parsing attributes in process `syz.3.510'. [ 124.279142][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.608967][ T5958] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 124.710996][ T8045] netlink: 'syz.3.515': attribute type 4 has an invalid length. [ 124.713860][ T8045] netlink: 17 bytes leftover after parsing attributes in process `syz.3.515'. [ 125.327477][ T8072] »»»»»» speed is unknown, defaulting to 1000 [ 125.753143][ T8082] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 125.948292][ T8087] vlan0: entered promiscuous mode [ 125.964610][ T8087] team0: Port device vlan0 added [ 126.069628][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.143283][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.180194][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.218139][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.383765][ T8099] netlink: 'syz.0.528': attribute type 4 has an invalid length. [ 126.386606][ T8099] netlink: 17 bytes leftover after parsing attributes in process `syz.0.528'. [ 126.850179][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.917155][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.000203][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.065080][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.347441][ T8101] delete_channel: no stack [ 127.383679][ T8110] hfs: can't find a HFS filesystem on dev sr0 [ 127.394233][ T8117] FAULT_INJECTION: forcing a failure. [ 127.394233][ T8117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.398066][ T8117] CPU: 0 UID: 0 PID: 8117 Comm: syz.0.532 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 127.401777][ T8117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.405206][ T8117] Call Trace: [ 127.406204][ T8117] [ 127.407268][ T8117] dump_stack_lvl+0x16c/0x1f0 [ 127.408955][ T8117] should_fail_ex+0x497/0x5b0 [ 127.410621][ T8117] _copy_to_user+0x32/0xd0 [ 127.412066][ T8117] simple_read_from_buffer+0xd0/0x160 [ 127.413568][ T8117] proc_fail_nth_read+0x198/0x270 [ 127.414940][ T8117] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.416418][ T8117] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.418303][ T8117] vfs_read+0x1df/0xbe0 [ 127.419808][ T8117] ? __fget_files+0x1fc/0x3a0 [ 127.421477][ T8117] ? __pfx___mutex_lock+0x10/0x10 [ 127.423345][ T8117] ? __pfx_vfs_read+0x10/0x10 [ 127.425000][ T8117] ? __fget_files+0x206/0x3a0 [ 127.426290][ T8117] ksys_read+0x12b/0x250 [ 127.427720][ T8117] ? __pfx_ksys_read+0x10/0x10 [ 127.429315][ T8117] __do_fast_syscall_32+0x73/0x120 [ 127.431068][ T8117] do_fast_syscall_32+0x32/0x80 [ 127.432837][ T8117] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 127.435023][ T8117] RIP: 0023:0xf710e579 [ 127.436469][ T8117] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 127.443378][ T8117] RSP: 002b:00000000f5100590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 127.443409][ T8117] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5100620 [ 127.443421][ T8117] RDX: 000000000000000f RSI: 00000000f7443ff4 RDI: 0000000000000000 [ 127.451152][ T8117] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 127.453850][ T8117] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 127.456554][ T8117] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.459297][ T8117] [ 127.460585][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.643990][ T8125] openvswitch: netlink: IP tunnel dst address not specified [ 127.658568][ T8125] xt_CT: No such helper "snmp" [ 128.082311][ T8140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.102750][ T8141] netlink: 'syz.1.539': attribute type 4 has an invalid length. [ 128.104875][ T8141] netlink: 17 bytes leftover after parsing attributes in process `syz.1.539'. [ 129.823689][ T8173] netlink: 80 bytes leftover after parsing attributes in process `syz.2.549'. [ 129.829523][ T8173] netlink: 'syz.2.549': attribute type 10 has an invalid length. [ 129.846379][ T8173] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 129.955023][ T8182] No such timeout policy "syz1" [ 130.025766][ T8185] netlink: 'syz.2.552': attribute type 4 has an invalid length. [ 130.027904][ T8185] netlink: 17 bytes leftover after parsing attributes in process `syz.2.552'. [ 130.358973][ T8188] »»»»»» speed is unknown, defaulting to 1000 [ 131.200244][ T6007] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 131.400263][ T6007] usb 6-1: Using ep0 maxpacket: 8 [ 131.405836][ T6007] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 131.407911][ T6007] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 131.411123][ T6007] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.414041][ T6007] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 131.416784][ T6007] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 131.420885][ T6007] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 131.422859][ T6007] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 131.426012][ T6007] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.429171][ T6007] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 131.432382][ T6007] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 131.442787][ T6007] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 131.444913][ T6007] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 131.447950][ T6007] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.451303][ T6007] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 131.454362][ T6007] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 131.461461][ T6007] usb 6-1: string descriptor 0 read error: -22 [ 131.463402][ T6007] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 131.465960][ T6007] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.478295][ T6007] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 132.212502][ T1410] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.215367][ T1410] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.193217][ T8220] delete_channel: no stack [ 133.275369][ T8233] FAULT_INJECTION: forcing a failure. [ 133.275369][ T8233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.278842][ T8233] CPU: 3 UID: 0 PID: 8233 Comm: syz.3.564 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 133.281589][ T8233] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.284400][ T8233] Call Trace: [ 133.285283][ T8233] [ 133.286065][ T8233] dump_stack_lvl+0x16c/0x1f0 [ 133.287316][ T8233] should_fail_ex+0x497/0x5b0 [ 133.288564][ T8233] _copy_from_user+0x2e/0xd0 [ 133.289734][ T8233] get_compat_msghdr+0xa8/0x170 [ 133.290997][ T8233] ? __pfx_get_compat_msghdr+0x10/0x10 [ 133.292453][ T8233] ___sys_sendmsg+0x1b0/0x1e0 [ 133.293700][ T8233] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.295069][ T8233] ? __pfx_lock_release+0x10/0x10 [ 133.296417][ T8233] ? trace_lock_acquire+0x14e/0x1f0 [ 133.297796][ T8233] ? __fget_files+0x206/0x3a0 [ 133.299063][ T8233] __sys_sendmsg+0x16e/0x220 [ 133.300282][ T8233] ? __pfx___sys_sendmsg+0x10/0x10 [ 133.301636][ T8233] __do_fast_syscall_32+0x73/0x120 [ 133.303003][ T8233] do_fast_syscall_32+0x32/0x80 [ 133.304315][ T8233] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 133.305961][ T8233] RIP: 0023:0xf7f01579 [ 133.307031][ T8233] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 133.312033][ T8233] RSP: 002b:00000000f503555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 133.314217][ T8233] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000280 [ 133.316278][ T8233] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 133.318351][ T8233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 133.320408][ T8233] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 133.322375][ T8233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 133.324442][ T8233] [ 133.456414][ T8241] netlink: 'syz.3.566': attribute type 4 has an invalid length. [ 133.458480][ T8241] netlink: 17 bytes leftover after parsing attributes in process `syz.3.566'. [ 133.926212][ T58] usb 6-1: USB disconnect, device number 6 [ 134.127435][ T1142] Bluetooth: hci4: Frame reassembly failed (-84) [ 134.450470][ T58] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 134.620239][ T58] usb 6-1: Using ep0 maxpacket: 32 [ 134.624533][ T58] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.630086][ T58] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 134.633241][ T58] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 134.636088][ T58] usb 6-1: Product: syz [ 134.637546][ T58] usb 6-1: Manufacturer: syz [ 134.639174][ T58] usb 6-1: SerialNumber: syz [ 134.665677][ T58] usb 6-1: config 0 descriptor?? [ 134.914317][ T58] usb 6-1: USB disconnect, device number 7 [ 135.469222][ T8322] kvm: pic: single mode not supported [ 135.469243][ T8322] kvm: pic: level sensitive irq not supported [ 135.473276][ T8322] kvm: pic: single mode not supported [ 135.474964][ T8322] kvm: pic: level sensitive irq not supported [ 135.476795][ T8322] kvm: pic: single mode not supported [ 135.479043][ T8322] kvm: pic: level sensitive irq not supported [ 135.482599][ T8322] kvm: pic: single mode not supported [ 135.484696][ T8322] kvm: pic: level sensitive irq not supported [ 135.486901][ T8322] kvm: pic: single mode not supported [ 135.488963][ T8322] kvm: pic: level sensitive irq not supported [ 135.491514][ T8322] kvm: pic: single mode not supported [ 135.493667][ T8322] kvm: pic: level sensitive irq not supported [ 135.495932][ T8322] kvm: pic: single mode not supported [ 135.498116][ T8322] kvm: pic: level sensitive irq not supported [ 135.501366][ T8322] kvm: pic: single mode not supported [ 135.503595][ T8322] kvm: pic: level sensitive irq not supported [ 135.506801][ T8317] delete_channel: no stack [ 135.507103][ T8322] kvm: pic: single mode not supported [ 135.510290][ T8322] kvm: pic: level sensitive irq not supported [ 135.513177][ T8322] kvm: pic: single mode not supported [ 135.516967][ T8322] kvm: pic: level sensitive irq not supported [ 135.780528][ T4627] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 135.800941][ T8333] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 135.802845][ T8333] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 135.806579][ T8333] vhci_hcd vhci_hcd.0: Device attached [ 135.821322][ T8339] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 135.930198][ T4627] usb 8-1: Using ep0 maxpacket: 8 [ 135.935375][ T4627] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 135.937424][ T4627] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 135.940426][ T4627] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.944281][ T4627] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 135.947239][ T4627] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 135.952186][ T4627] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 135.954452][ T4627] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 135.957363][ T4627] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.961215][ T4627] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 135.964111][ T4627] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 135.969480][ T4627] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 135.972198][ T4627] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 135.975482][ T4627] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.978613][ T4627] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 135.982875][ T57] vhci_hcd: vhci_device speed not set [ 135.985033][ T4627] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 135.994486][ T4627] usb 8-1: string descriptor 0 read error: -22 [ 135.996437][ T4627] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 135.998852][ T4627] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.028885][ T4627] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 136.040715][ T57] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 136.206755][ T5958] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 136.436914][ T8352] »»»»»» speed is unknown, defaulting to 1000 [ 136.752769][ T8336] vhci_hcd: connection reset by peer [ 136.756202][ T8298] vhci_hcd: stop threads [ 136.757734][ T8298] vhci_hcd: release socket [ 136.762007][ T8298] vhci_hcd: disconnect device [ 136.893316][ T8358] ip6t_srh: unknown srh invflags 6BE9 [ 137.121268][ T8366] netlink: 'syz.1.586': attribute type 4 has an invalid length. [ 137.123404][ T8366] netlink: 17 bytes leftover after parsing attributes in process `syz.1.586'. [ 137.421703][ T8372] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 137.631263][ T8376] FAULT_INJECTION: forcing a failure. [ 137.631263][ T8376] name failslab, interval 1, probability 0, space 0, times 0 [ 137.634693][ T8376] CPU: 3 UID: 0 PID: 8376 Comm: syz.0.591 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 137.637580][ T8376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 137.640398][ T8376] Call Trace: [ 137.641289][ T8376] [ 137.642079][ T8376] dump_stack_lvl+0x16c/0x1f0 [ 137.643403][ T8376] should_fail_ex+0x497/0x5b0 [ 137.644667][ T8376] ? fs_reclaim_acquire+0xae/0x150 [ 137.646083][ T8376] should_failslab+0xc2/0x120 [ 137.647350][ T8376] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 137.648892][ T8376] ? cred_alloc_blank+0x1c/0xa0 [ 137.650183][ T8376] cred_alloc_blank+0x1c/0xa0 [ 137.651450][ T8376] keyctl_session_to_parent+0x55/0xaf0 [ 137.652891][ T8376] __do_compat_sys_keyctl+0x198/0x440 [ 137.654306][ T8376] __do_fast_syscall_32+0x73/0x120 [ 137.655695][ T8376] do_fast_syscall_32+0x32/0x80 [ 137.657359][ T8376] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.659689][ T8376] RIP: 0023:0xf710e579 [ 137.661196][ T8376] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 137.666800][ T8376] RSP: 002b:00000000f510055c EFLAGS: 00000296 ORIG_RAX: 0000000000000120 [ 137.669049][ T8376] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000000000000 [ 137.671274][ T8376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.673351][ T8376] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.675438][ T8376] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 137.677607][ T8376] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.679793][ T8376] [ 137.900037][ T8385] FAULT_INJECTION: forcing a failure. [ 137.900037][ T8385] name failslab, interval 1, probability 0, space 0, times 0 [ 137.903392][ T8385] CPU: 1 UID: 0 PID: 8385 Comm: syz.1.595 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 137.906060][ T8385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 137.908810][ T8385] Call Trace: [ 137.909678][ T8385] [ 137.910452][ T8385] dump_stack_lvl+0x16c/0x1f0 [ 137.911668][ T8385] should_fail_ex+0x497/0x5b0 [ 137.912872][ T8385] ? fs_reclaim_acquire+0xae/0x150 [ 137.914159][ T8385] should_failslab+0xc2/0x120 [ 137.915384][ T8385] __kmalloc_cache_noprof+0x68/0x420 [ 137.916754][ T8385] rtnl_newlink+0x108/0x1d70 [ 137.917955][ T8385] ? hlock_class+0x4e/0x130 [ 137.919104][ T8385] ? __lock_acquire+0xcc5/0x3c40 [ 137.920353][ T8385] ? __pfx_rtnl_newlink+0x10/0x10 [ 137.921615][ T8385] ? __pfx___lock_acquire+0x10/0x10 [ 137.922967][ T8385] ? kmem_cache_free+0x152/0x4c0 [ 137.924264][ T8385] ? aa_get_newest_label+0x376/0x680 [ 137.925622][ T8385] ? find_held_lock+0x2d/0x110 [ 137.926877][ T8385] ? find_held_lock+0x2d/0x110 [ 137.928255][ T8385] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 137.929624][ T8385] ? __pfx_lock_release+0x10/0x10 [ 137.930958][ T8385] ? trace_lock_acquire+0x14e/0x1f0 [ 137.932344][ T8385] ? __pfx_rtnl_newlink+0x10/0x10 [ 137.933694][ T8385] rtnetlink_rcv_msg+0x95b/0xea0 [ 137.935025][ T8385] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 137.936455][ T8385] ? __pfx___dev_queue_xmit+0x10/0x10 [ 137.937891][ T8385] netlink_rcv_skb+0x165/0x410 [ 137.939166][ T8385] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 137.940611][ T8385] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 137.942015][ T8385] ? netlink_deliver_tap+0x1ae/0xca0 [ 137.943450][ T8385] netlink_unicast+0x53c/0x7f0 [ 137.944724][ T8385] ? __pfx_netlink_unicast+0x10/0x10 [ 137.946111][ T8385] ? __phys_addr_symbol+0x30/0x80 [ 137.947447][ T8385] ? __check_object_size+0x488/0x710 [ 137.948837][ T8385] netlink_sendmsg+0x8b8/0xd70 [ 137.950106][ T8385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.951507][ T8385] ____sys_sendmsg+0x9ae/0xb40 [ 137.952772][ T8385] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.954172][ T8385] ? get_compat_msghdr+0x11b/0x170 [ 137.955547][ T8385] ___sys_sendmsg+0x135/0x1e0 [ 137.956801][ T8385] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.958223][ T8385] ? __pfx_lock_release+0x10/0x10 [ 137.959608][ T8385] ? trace_lock_acquire+0x14e/0x1f0 [ 137.960984][ T8385] ? __fget_files+0x206/0x3a0 [ 137.962230][ T8385] __sys_sendmsg+0x16e/0x220 [ 137.963482][ T8385] ? __pfx___sys_sendmsg+0x10/0x10 [ 137.964849][ T8385] __do_fast_syscall_32+0x73/0x120 [ 137.966205][ T8385] do_fast_syscall_32+0x32/0x80 [ 137.967472][ T8385] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.969040][ T8385] RIP: 0023:0xf7f20579 [ 137.970122][ T8385] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 137.975177][ T8385] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 137.977493][ T8385] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 137.979665][ T8385] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.981832][ T8385] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.983984][ T8385] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 137.986136][ T8385] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.988286][ T8385] [ 138.016656][ T1138] Bluetooth: hci4: Frame reassembly failed (-84) [ 138.255553][ T8390] »»»»»» speed is unknown, defaulting to 1000 [ 138.520268][ T1015] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 138.559525][ T25] usb 8-1: USB disconnect, device number 5 [ 138.671026][ T1015] usb 5-1: Using ep0 maxpacket: 32 [ 138.674301][ T1015] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.679319][ T1015] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 138.682001][ T1015] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 138.684125][ T1015] usb 5-1: Product: syz [ 138.685245][ T1015] usb 5-1: Manufacturer: syz [ 138.686779][ T1015] usb 5-1: SerialNumber: syz [ 138.688993][ T1015] usb 5-1: config 0 descriptor?? [ 138.897324][ T1015] usb 5-1: USB disconnect, device number 7 [ 138.959620][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.601'. [ 139.621794][ T8415] delete_channel: no stack [ 139.850440][ T1015] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 140.010622][ T1015] usb 8-1: Using ep0 maxpacket: 8 [ 140.021411][ T1015] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 140.025317][ T1015] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 140.031472][ T1015] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.038778][ T1015] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 140.043454][ T1015] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 140.050222][ T5958] Bluetooth: hci4: command 0xfc11 tx timeout [ 140.053712][ T5293] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 140.055924][ T1015] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 140.058176][ T1015] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 140.061225][ T1015] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.064340][ T1015] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 140.067208][ T1015] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 140.091080][ T1015] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 140.093205][ T1015] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 140.096205][ T1015] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.099242][ T1015] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 140.102300][ T1015] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 140.120526][ T1015] usb 8-1: string descriptor 0 read error: -22 [ 140.122452][ T1015] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 140.125133][ T1015] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.281990][ T1015] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 140.552417][ T8430] tipc: Started in network mode [ 140.553839][ T8430] tipc: Node identity f7, cluster identity 4711 [ 140.555476][ T8430] tipc: Node number set to 247 [ 140.644886][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.610'. [ 140.839306][ T8447] »»»»»» speed is unknown, defaulting to 1000 [ 141.150217][ T57] vhci_hcd: vhci_device speed not set [ 141.233466][ T8461] netlink: 'syz.2.615': attribute type 4 has an invalid length. [ 141.235607][ T8461] netlink: 17 bytes leftover after parsing attributes in process `syz.2.615'. [ 141.636314][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'. [ 141.638843][ T8469] netlink: 32 bytes leftover after parsing attributes in process `syz.1.617'. [ 141.655458][ T8469] gtp0: entered promiscuous mode [ 141.656846][ T8469] gtp0: entered allmulticast mode [ 142.534398][ T8483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.620'. [ 142.603118][ T833] usb 8-1: USB disconnect, device number 6 [ 142.777499][ T8490] kvm: user requested TSC rate below hardware speed [ 142.787384][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'. [ 142.794764][ T8490] netlink: 277 bytes leftover after parsing attributes in process `syz.1.623'. [ 142.798389][ T8490] netlink: 277 bytes leftover after parsing attributes in process `syz.1.623'. [ 142.926210][ T8493] Device name cannot be null; rc = [-22] [ 143.094117][ T8502] netlink: 'syz.1.626': attribute type 4 has an invalid length. [ 143.130077][ T8502] netlink: 17 bytes leftover after parsing attributes in process `syz.1.626'. [ 143.567052][ T8501] »»»»»» speed is unknown, defaulting to 1000 [ 144.574814][ T8524] netlink: 28 bytes leftover after parsing attributes in process `syz.1.631'. [ 144.816252][ T8532] FAULT_INJECTION: forcing a failure. [ 144.816252][ T8532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.820785][ T8532] CPU: 1 UID: 0 PID: 8532 Comm: syz.2.634 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 144.824384][ T8532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.827890][ T8532] Call Trace: [ 144.829058][ T8532] [ 144.830054][ T8532] dump_stack_lvl+0x16c/0x1f0 [ 144.832008][ T8532] should_fail_ex+0x497/0x5b0 [ 144.833636][ T8532] _copy_from_iter+0x29b/0x1400 [ 144.835346][ T8532] ? trace_lock_acquire+0x14e/0x1f0 [ 144.837123][ T8532] ? __alloc_skb+0x200/0x380 [ 144.838731][ T8532] ? __pfx__copy_from_iter+0x10/0x10 [ 144.840576][ T8532] ? __virt_addr_valid+0x1a4/0x590 [ 144.842336][ T8532] ? __virt_addr_valid+0x5e/0x590 [ 144.844092][ T8532] ? __phys_addr_symbol+0x30/0x80 [ 144.845839][ T8532] ? __check_object_size+0x488/0x710 [ 144.847674][ T8532] netlink_sendmsg+0x813/0xd70 [ 144.849323][ T8532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.851131][ T8532] sock_write_iter+0x4fe/0x5b0 [ 144.852811][ T8532] ? __pfx_sock_write_iter+0x10/0x10 [ 144.854487][ T8532] ? bpf_lsm_file_permission+0x9/0x10 [ 144.856360][ T8532] ? security_file_permission+0x71/0x210 [ 144.858292][ T8532] vfs_write+0x5ae/0x1150 [ 144.859810][ T8532] ? __pfx_sock_write_iter+0x10/0x10 [ 144.861595][ T8532] ? __pfx_vfs_write+0x10/0x10 [ 144.863274][ T8532] ? __fget_files+0x40/0x3a0 [ 144.864876][ T8532] ksys_write+0x207/0x250 [ 144.866384][ T8532] ? __pfx_ksys_write+0x10/0x10 [ 144.868073][ T8532] __do_fast_syscall_32+0x73/0x120 [ 144.869819][ T8532] do_fast_syscall_32+0x32/0x80 [ 144.871527][ T8532] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 144.873676][ T8532] RIP: 0023:0xf7fc0579 [ 144.875123][ T8532] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 144.881629][ T8532] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 144.884444][ T8532] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 144.887133][ T8532] RDX: 00000000000000fc RSI: 0000000000000000 RDI: 0000000000000000 [ 144.889698][ T8532] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 144.892281][ T8532] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 144.894885][ T8532] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.896960][ T8532] [ 144.990782][ T8541] netlink: 'syz.2.636': attribute type 4 has an invalid length. [ 144.992872][ T8541] netlink: 17 bytes leftover after parsing attributes in process `syz.2.636'. [ 145.299489][ T8548] pic_ioport_write: 24 callbacks suppressed [ 145.299500][ T8548] kvm: pic: level sensitive irq not supported [ 146.074650][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 146.170237][ T6008] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 146.311638][ T8580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.645'. [ 146.322030][ T6008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.326150][ T6008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.329996][ T6008] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 146.335807][ T6008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.342946][ T6008] usb 5-1: config 0 descriptor?? [ 146.655626][ T8588] netlink: 'syz.1.649': attribute type 4 has an invalid length. [ 146.657862][ T8588] netlink: 17 bytes leftover after parsing attributes in process `syz.1.649'. [ 146.768397][ T6008] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 146.776775][ T6008] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 146.787792][ T6008] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0D8C:0022.0002/input/input7 [ 146.816932][ T6008] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 147.034693][ T8594] FAULT_INJECTION: forcing a failure. [ 147.034693][ T8594] name failslab, interval 1, probability 0, space 0, times 0 [ 147.038179][ T8594] CPU: 3 UID: 0 PID: 8594 Comm: syz.3.652 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 147.040819][ T8594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 147.043593][ T8594] Call Trace: [ 147.044429][ T8594] [ 147.045191][ T8594] dump_stack_lvl+0x16c/0x1f0 [ 147.046618][ T8594] should_fail_ex+0x497/0x5b0 [ 147.047880][ T8594] should_failslab+0xc2/0x120 [ 147.049118][ T8594] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 147.050543][ T8594] ? skb_clone+0x190/0x3f0 [ 147.051720][ T8594] skb_clone+0x190/0x3f0 [ 147.052821][ T8594] netlink_deliver_tap+0xafd/0xca0 [ 147.054220][ T8594] netlink_unicast+0x5e1/0x7f0 [ 147.055572][ T8594] ? __pfx_netlink_unicast+0x10/0x10 [ 147.056909][ T8594] ? __phys_addr_symbol+0x30/0x80 [ 147.058380][ T8594] ? __check_object_size+0x488/0x710 [ 147.059838][ T8594] netlink_sendmsg+0x8b8/0xd70 [ 147.061292][ T8594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.062837][ T8594] ____sys_sendmsg+0x9ae/0xb40 [ 147.064069][ T8594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.065402][ T8594] ? get_compat_msghdr+0x11b/0x170 [ 147.066885][ T8594] ___sys_sendmsg+0x135/0x1e0 [ 147.068500][ T8594] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.070171][ T8594] ? __pfx_lock_release+0x10/0x10 [ 147.071939][ T8594] ? trace_lock_acquire+0x14e/0x1f0 [ 147.073700][ T8594] ? __fget_files+0x206/0x3a0 [ 147.075343][ T8594] __sys_sendmsg+0x16e/0x220 [ 147.076568][ T8594] ? __pfx___sys_sendmsg+0x10/0x10 [ 147.077916][ T8594] __do_fast_syscall_32+0x73/0x120 [ 147.079244][ T8594] do_fast_syscall_32+0x32/0x80 [ 147.080480][ T8594] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.082084][ T8594] RIP: 0023:0xf7f01579 [ 147.083134][ T8594] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 147.088083][ T8594] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 147.090219][ T8594] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 147.092210][ T8594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.094234][ T8594] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.096321][ T8594] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 147.098398][ T8594] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.100446][ T8594] [ 147.105187][ T8596] syz.2.653 uses obsolete (PF_INET,SOCK_PACKET) [ 147.557092][ T8605] kvm: pic: level sensitive irq not supported [ 147.959137][ T8608] delete_channel: no stack [ 147.960723][ T833] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 148.436275][ T8626] netlink: 28 bytes leftover after parsing attributes in process `syz.3.659'. [ 148.610173][ T8630] netlink: 28 bytes leftover after parsing attributes in process `syz.2.661'. [ 149.180286][ T833] usb 5-1: device descriptor read/64, error -71 [ 149.470192][ T833] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 149.472954][ T833] usb 5-1: device reset changed ep0 maxpacket size! [ 149.478625][ T58] usb 5-1: USB disconnect, device number 8 [ 149.614169][ T8649] »»»»»» speed is unknown, defaulting to 1000 [ 149.680201][ T58] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 149.809857][ T8644] »»»»»» speed is unknown, defaulting to 1000 [ 149.830195][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 149.833189][ T58] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 149.835895][ T58] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 149.839739][ T58] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 149.844090][ T58] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 149.847779][ T58] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 149.851786][ T58] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 149.853759][ T58] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 149.856781][ T58] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 149.860207][ T58] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 149.863231][ T58] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 149.866835][ T58] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 149.868894][ T58] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 149.871982][ T58] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 149.875070][ T58] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 149.878099][ T58] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 149.883540][ T58] usb 5-1: string descriptor 0 read error: -22 [ 149.885283][ T58] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 149.887643][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.894117][ T58] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 150.163699][ T8657] kvm: pic: level sensitive irq not supported [ 150.698132][ T8680] netlink: 24 bytes leftover after parsing attributes in process `syz.3.675'. [ 151.756784][ T8704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.681'. [ 151.896865][ T57] usb 5-1: USB disconnect, device number 9 [ 152.091516][ T8709] pic_ioport_write: 24 callbacks suppressed [ 152.091545][ T8709] kvm: pic: single mode not supported [ 152.195298][ T8714] netlink: 'syz.1.686': attribute type 4 has an invalid length. [ 152.198817][ T8714] netlink: 17 bytes leftover after parsing attributes in process `syz.1.686'. [ 152.244018][ T8715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.687'. [ 153.029763][ T8732] overlay: ./file0 is not a directory [ 153.081547][ T8726] syzkaller1: entered promiscuous mode [ 153.083235][ T8726] syzkaller1: entered allmulticast mode [ 153.279853][ T8718] delete_channel: no stack [ 153.540397][ T58] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 153.606867][ T8757] »»»»»» speed is unknown, defaulting to 1000 [ 153.886805][ T8723] delete_channel: no stack [ 154.000230][ T58] usb 6-1: Using ep0 maxpacket: 8 [ 154.003314][ T58] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 154.005931][ T58] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 154.006712][ T8765] kAFS: unparsable volume name [ 154.009418][ T58] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.009443][ T58] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 154.018127][ T58] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 154.023208][ T58] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 154.025127][ T58] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 154.028160][ T58] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.032191][ T58] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 154.035525][ T58] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 154.040450][ T58] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 154.042525][ T58] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 154.045509][ T58] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.048484][ T58] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 154.051887][ T58] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 154.058107][ T58] usb 6-1: string descriptor 0 read error: -22 [ 154.059863][ T58] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 154.062655][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.081199][ T58] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 155.244829][ T8794] delete_channel: no stack [ 155.648039][ T8805] »»»»»» speed is unknown, defaulting to 1000 [ 155.854435][ T8811] »»»»»» speed is unknown, defaulting to 1000 [ 156.304731][ T833] usb 6-1: USB disconnect, device number 8 [ 156.430690][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.717'. [ 156.763371][ T8840] netlink: 24 bytes leftover after parsing attributes in process `syz.1.719'. [ 157.599830][ T8855] »»»»»» speed is unknown, defaulting to 1000 [ 157.678152][ T8859] netlink: 28 bytes leftover after parsing attributes in process `syz.3.723'. [ 157.886974][ T8863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.721'. [ 158.328540][ T8868] kvm: pic: single mode not supported [ 158.328553][ T8868] kvm: pic: level sensitive irq not supported [ 158.332633][ T8868] kvm: pic: non byte write [ 158.379372][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.727'. [ 158.503959][ T8882] hsr0: entered promiscuous mode [ 158.506722][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.730'. [ 158.510803][ T8882] hsr_slave_0: left promiscuous mode [ 158.514378][ T8882] hsr_slave_1: left promiscuous mode [ 158.531764][ T8882] hsr0 (unregistering): left promiscuous mode [ 158.548957][ T8886] FAULT_INJECTION: forcing a failure. [ 158.548957][ T8886] name failslab, interval 1, probability 0, space 0, times 0 [ 158.559260][ T8886] CPU: 0 UID: 0 PID: 8886 Comm: syz.1.731 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 158.563101][ T8886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 158.566702][ T8886] Call Trace: [ 158.567853][ T8886] [ 158.568882][ T8886] dump_stack_lvl+0x16c/0x1f0 [ 158.570515][ T8886] should_fail_ex+0x497/0x5b0 [ 158.571844][ T8886] ? fs_reclaim_acquire+0xae/0x150 [ 158.573154][ T8886] should_failslab+0xc2/0x120 [ 158.574352][ T8886] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 158.575847][ T8886] ? __alloc_skb+0x2b3/0x380 [ 158.577035][ T8886] __alloc_skb+0x2b3/0x380 [ 158.578230][ T8886] ? __pfx___alloc_skb+0x10/0x10 [ 158.579496][ T8886] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 158.580780][ T8886] netlink_ack+0x164/0xb20 [ 158.581896][ T8886] netlink_rcv_skb+0x327/0x410 [ 158.583119][ T8886] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 158.584494][ T8886] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 158.585806][ T8886] ? netlink_deliver_tap+0x1ae/0xca0 [ 158.587137][ T8886] netlink_unicast+0x53c/0x7f0 [ 158.588342][ T8886] ? __pfx_netlink_unicast+0x10/0x10 [ 158.589674][ T8886] ? __phys_addr_symbol+0x30/0x80 [ 158.590990][ T8886] ? __check_object_size+0x488/0x710 [ 158.592345][ T8886] netlink_sendmsg+0x8b8/0xd70 [ 158.593602][ T8886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.594981][ T8886] ____sys_sendmsg+0x9ae/0xb40 [ 158.596183][ T8886] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.597526][ T8886] ? get_compat_msghdr+0x11b/0x170 [ 158.598839][ T8886] ___sys_sendmsg+0x135/0x1e0 [ 158.600031][ T8886] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.601371][ T8886] ? __pfx_lock_release+0x10/0x10 [ 158.602661][ T8886] ? trace_lock_acquire+0x14e/0x1f0 [ 158.603985][ T8886] ? __fget_files+0x206/0x3a0 [ 158.605183][ T8886] __sys_sendmsg+0x16e/0x220 [ 158.606363][ T8886] ? __pfx___sys_sendmsg+0x10/0x10 [ 158.607702][ T8886] __do_fast_syscall_32+0x73/0x120 [ 158.608987][ T8886] do_fast_syscall_32+0x32/0x80 [ 158.610262][ T8886] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.611831][ T8886] RIP: 0023:0xf7f20579 [ 158.612870][ T8886] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 158.617635][ T8886] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 158.619698][ T8886] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200012c0 [ 158.621628][ T8886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.623563][ T8886] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.625466][ T8886] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 158.627448][ T8886] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.629433][ T8886] [ 158.630330][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.760829][ T8878] delete_channel: no stack [ 158.904963][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.737'. [ 158.965398][ T8908] »»»»»» speed is unknown, defaulting to 1000 [ 159.192411][ T8918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.739'. [ 159.699441][ T8923] FAULT_INJECTION: forcing a failure. [ 159.699441][ T8923] name failslab, interval 1, probability 0, space 0, times 0 [ 159.703951][ T8923] CPU: 1 UID: 0 PID: 8923 Comm: syz.1.741 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 159.706721][ T8923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 159.709465][ T8923] Call Trace: [ 159.710251][ T8923] [ 159.710947][ T8923] dump_stack_lvl+0x16c/0x1f0 [ 159.712183][ T8923] should_fail_ex+0x497/0x5b0 [ 159.713373][ T8923] ? fs_reclaim_acquire+0xae/0x150 [ 159.714714][ T8923] should_failslab+0xc2/0x120 [ 159.715929][ T8923] __kmalloc_noprof+0xce/0x4f0 [ 159.717227][ T8923] ? ovl_cache_entry_new+0x38/0x700 [ 159.718596][ T8923] ovl_cache_entry_new+0x38/0x700 [ 159.719884][ T8923] ovl_fill_merge+0x5ee/0xa80 [ 159.721087][ T8923] ? __pfx_ovl_fill_merge+0x10/0x10 [ 159.722426][ T8923] offset_readdir+0x7ab/0xaa0 [ 159.723648][ T8923] ? rwsem_read_trylock+0x12d/0x250 [ 159.724963][ T8923] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 159.726370][ T8923] ? iterate_dir+0x424/0xb40 [ 159.727569][ T8923] ? __pfx_offset_readdir+0x10/0x10 [ 159.728912][ T8923] ? down_read_killable+0xcc/0x380 [ 159.730231][ T8923] ? __pfx_down_read_killable+0x10/0x10 [ 159.731671][ T8923] ? apparmor_file_permission+0x251/0x400 [ 159.733167][ T8923] iterate_dir+0x52f/0xb40 [ 159.734350][ T8923] ovl_dir_read_merged+0x21d/0x5d0 [ 159.735692][ T8923] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 159.737138][ T8923] ? __pfx_ovl_fill_merge+0x10/0x10 [ 159.738488][ T8923] ? kasan_save_track+0x14/0x30 [ 159.739768][ T8923] ovl_iterate+0x865/0xe40 [ 159.740928][ T8923] ? down_read_killable+0xcc/0x380 [ 159.742282][ T8923] ? __pfx_down_read_killable+0x10/0x10 [ 159.743715][ T8923] ? __pfx_ovl_iterate+0x10/0x10 [ 159.744993][ T8923] wrap_directory_iterator+0x9f/0xe0 [ 159.746339][ T8923] iterate_dir+0x52f/0xb40 [ 159.747491][ T8923] __ia32_compat_sys_getdents+0x148/0x2c0 [ 159.748925][ T8923] ? __pfx___ia32_compat_sys_getdents+0x10/0x10 [ 159.750509][ T8923] ? __pfx_compat_filldir+0x10/0x10 [ 159.751864][ T8923] __do_fast_syscall_32+0x73/0x120 [ 159.753212][ T8923] do_fast_syscall_32+0x32/0x80 [ 159.754489][ T8923] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.756147][ T8923] RIP: 0023:0xf7f20579 [ 159.757228][ T8923] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 159.762157][ T8923] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 000000000000008d [ 159.764310][ T8923] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020001fc0 [ 159.766338][ T8923] RDX: 00000000000000b8 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.768337][ T8923] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.770327][ T8923] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 159.772334][ T8923] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.774370][ T8923] [ 159.953261][ T8937] netlink: 'syz.0.743': attribute type 4 has an invalid length. [ 159.955521][ T8937] netlink: 17 bytes leftover after parsing attributes in process `syz.0.743'. [ 159.964963][ T39] kauditd_printk_skb: 354 callbacks suppressed [ 159.964978][ T39] audit: type=1804 audit(1734657507.963:445): pid=8935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.746" name="/newroot/178/file0/cgroup.controllers" dev="9p" ino=39059576 res=1 errno=0 [ 159.977095][ T8935] FAULT_INJECTION: forcing a failure. [ 159.977095][ T8935] name failslab, interval 1, probability 0, space 0, times 0 [ 159.981634][ T8935] CPU: 3 UID: 0 PID: 8935 Comm: syz.1.746 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 159.984624][ T8935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 159.987362][ T8935] Call Trace: [ 159.988226][ T8935] [ 159.988998][ T8935] dump_stack_lvl+0x16c/0x1f0 [ 159.990624][ T8935] should_fail_ex+0x497/0x5b0 [ 159.992316][ T8935] ? fs_reclaim_acquire+0xae/0x150 [ 159.994134][ T8935] should_failslab+0xc2/0x120 [ 159.995822][ T8935] __kmalloc_cache_noprof+0x68/0x420 [ 159.997728][ T8935] ? __pfx___folio_start_writeback+0x10/0x10 [ 159.999871][ T8935] ? do_raw_spin_lock+0x12d/0x2c0 [ 160.001673][ T8935] netfs_buffer_make_space+0x432/0x6b0 [ 160.003594][ T8935] netfs_buffer_append_folio+0x298/0x360 [ 160.005594][ T8935] netfs_write_folio+0x540/0x1930 [ 160.007442][ T8935] netfs_writepages+0x29a/0x8f0 [ 160.009174][ T8935] ? __pfx_netfs_writepages+0x10/0x10 [ 160.010910][ T8935] ? __pfx___lock_acquire+0x10/0x10 [ 160.012281][ T8935] ? __pfx_netfs_writepages+0x10/0x10 [ 160.013718][ T8935] do_writepages+0x1b3/0x820 [ 160.014972][ T8935] ? __pfx_do_writepages+0x10/0x10 [ 160.016236][ T8935] ? wbc_attach_fdatawrite_inode+0x13a/0x190 [ 160.017716][ T8935] ? __pfx_lock_release+0x10/0x10 [ 160.019009][ T8935] ? do_raw_spin_lock+0x12d/0x2c0 [ 160.020272][ T8935] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 160.021600][ T8935] ? lock_acquire+0x2f/0xb0 [ 160.022743][ T8935] ? wbc_attach_fdatawrite_inode+0x24/0x190 [ 160.024355][ T8935] ? do_raw_spin_unlock+0x172/0x230 [ 160.025931][ T8935] filemap_fdatawrite_wbc+0x104/0x160 [ 160.027468][ T8935] __filemap_fdatawrite_range+0xb3/0xf0 [ 160.028815][ T8935] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 160.030322][ T8935] ? rwsem_read_trylock+0x12d/0x250 [ 160.031605][ T8935] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 160.033002][ T8935] ? netfs_start_io_direct+0x25/0x260 [ 160.034485][ T8935] filemap_write_and_wait_range.part.0+0x85/0x100 [ 160.036642][ T8935] kiocb_write_and_wait+0xe0/0x1f0 [ 160.038426][ T8935] netfs_unbuffered_read_iter_locked+0xb1/0x19a0 [ 160.040669][ T8935] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 160.042602][ T8935] ? netfs_start_io_direct+0x8b/0x260 [ 160.044055][ T8935] netfs_unbuffered_read_iter+0xc5/0x100 [ 160.045499][ T8935] v9fs_file_read_iter+0xbf/0x100 [ 160.047273][ T8935] copy_splice_read+0x620/0xb90 [ 160.048517][ T8935] ? __pfx_copy_splice_read+0x10/0x10 [ 160.049887][ T8935] ? __pfx_register_lock_class+0x10/0x10 [ 160.051349][ T8935] ? __pfx_v9fs_file_splice_read+0x10/0x10 [ 160.052871][ T8935] do_splice_read+0x2bd/0x370 [ 160.054084][ T8935] splice_direct_to_actor+0x2a4/0xa40 [ 160.055491][ T8935] ? __pfx_direct_splice_actor+0x10/0x10 [ 160.057212][ T8935] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 160.058781][ T8935] ? __fget_files+0x1fc/0x3a0 [ 160.059998][ T8935] do_splice_direct+0x178/0x250 [ 160.061245][ T8935] ? __pfx_do_splice_direct+0x10/0x10 [ 160.062639][ T8935] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 160.064155][ T8935] ? bpf_lsm_file_permission+0x9/0x10 [ 160.065536][ T8935] ? security_file_permission+0x71/0x210 [ 160.067073][ T8935] do_sendfile+0xaed/0xe30 [ 160.068421][ T8935] ? __pfx_do_sendfile+0x10/0x10 [ 160.070147][ T8935] ? __fget_files+0x206/0x3a0 [ 160.071785][ T8935] __ia32_compat_sys_sendfile+0x1e7/0x230 [ 160.073265][ T8935] ? ksys_write+0x1ba/0x250 [ 160.074415][ T8935] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 160.076008][ T8935] __do_fast_syscall_32+0x73/0x120 [ 160.077345][ T8935] do_fast_syscall_32+0x32/0x80 [ 160.078772][ T8935] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.080623][ T8935] RIP: 0023:0xf7f20579 [ 160.081739][ T8935] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 160.086607][ T8935] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 160.088923][ T8935] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000005 [ 160.091026][ T8935] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 160.093073][ T8935] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.095101][ T8935] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 160.097727][ T8935] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.100034][ T8935] [ 160.110979][ T1134] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 160.114390][ T1134] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 160.117188][ T1134] CPU: 2 UID: 0 PID: 1134 Comm: kworker/u32:6 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 160.121126][ T1134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 160.124766][ T1134] Workqueue: events_unbound netfs_write_collection_worker [ 160.127153][ T1134] RIP: 0010:netfs_write_collection_worker+0x1cd1/0x47d0 [ 160.128969][ T1134] Code: 39 f3 0f 83 37 04 00 00 e8 6c 36 54 ff 44 8b 6c 24 08 41 83 fd 1e 0f 87 79 23 00 00 4a 8d 44 ed 08 48 89 44 24 30 48 c1 e8 03 <42> 80 3c 38 00 0f 85 e4 23 00 00 4a 8b 5c ed 08 48 89 df e8 c7 d4 [ 160.134680][ T1134] RSP: 0018:ffffc900069f7ae8 EFLAGS: 00010202 [ 160.136384][ T1134] RAX: 0000000000000001 RBX: 0000000000000005 RCX: ffffffff824515da [ 160.138727][ T1134] RDX: ffff888024b2a440 RSI: ffffffff82451884 RDI: 0000000000000005 [ 160.140935][ T1134] RBP: 0000000000000000 R08: 0000000000000005 R09: ffff8880654e0980 [ 160.143058][ T1134] R10: 0000000000000000 R11: 0000000000000b8f R12: ffff8880654e0880 [ 160.145102][ T1134] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 160.147207][ T1134] FS: 0000000000000000(0000) GS:ffff88802b600000(0000) knlGS:0000000000000000 [ 160.149563][ T1134] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.151346][ T1134] CR2: 000000000c3a3b8f CR3: 0000000066114000 CR4: 0000000000352ef0 [ 160.154043][ T1134] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 160.156628][ T1134] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 160.159424][ T1134] Call Trace: [ 160.160586][ T1134] [ 160.161556][ T1134] ? die_addr+0x3b/0xa0 [ 160.162679][ T1134] ? exc_general_protection+0x155/0x230 [ 160.164216][ T1134] ? asm_exc_general_protection+0x26/0x30 [ 160.165712][ T1134] ? netfs_write_collection_worker+0x1a0a/0x47d0 [ 160.167401][ T1134] ? netfs_write_collection_worker+0x1cb4/0x47d0 [ 160.169032][ T1134] ? netfs_write_collection_worker+0x1cd1/0x47d0 [ 160.170702][ T1134] ? netfs_write_collection_worker+0x1cb4/0x47d0 [ 160.172615][ T1134] ? __pfx_netfs_write_collection_worker+0x10/0x10 [ 160.174952][ T1134] ? rcu_is_watching+0x12/0xc0 [ 160.176247][ T1134] ? trace_lock_acquire+0x14e/0x1f0 [ 160.177622][ T1134] ? process_one_work+0x8bb/0x1b30 [ 160.178956][ T1134] ? lock_acquire+0x2f/0xb0 [ 160.180126][ T1134] ? process_one_work+0x8bb/0x1b30 [ 160.181550][ T1134] process_one_work+0x958/0x1b30 [ 160.183190][ T1134] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 160.185121][ T1134] ? __pfx_process_one_work+0x10/0x10 [ 160.187038][ T1134] ? rcu_is_watching+0x12/0xc0 [ 160.188733][ T1134] ? assign_work+0x1a0/0x250 [ 160.190361][ T1134] worker_thread+0x6c8/0xf00 [ 160.192070][ T1134] ? __pfx_worker_thread+0x10/0x10 [ 160.193865][ T1134] kthread+0x2c1/0x3a0 [ 160.195362][ T1134] ? _raw_spin_unlock_irq+0x23/0x50 [ 160.197216][ T1134] ? __pfx_kthread+0x10/0x10 [ 160.198861][ T1134] ret_from_fork+0x45/0x80 [ 160.200430][ T1134] ? __pfx_kthread+0x10/0x10 [ 160.202061][ T1134] ret_from_fork_asm+0x1a/0x30 [ 160.203801][ T1134] [ 160.204944][ T1134] Modules linked in: [ 160.206692][ T1134] ---[ end trace 0000000000000000 ]--- [ 160.213687][ T1134] RIP: 0010:netfs_write_collection_worker+0x1cd1/0x47d0 [ 160.215568][ T1134] Code: 39 f3 0f 83 37 04 00 00 e8 6c 36 54 ff 44 8b 6c 24 08 41 83 fd 1e 0f 87 79 23 00 00 4a 8d 44 ed 08 48 89 44 24 30 48 c1 e8 03 <42> 80 3c 38 00 0f 85 e4 23 00 00 4a 8b 5c ed 08 48 89 df e8 c7 d4 [ 160.221593][ T1134] RSP: 0018:ffffc900069f7ae8 EFLAGS: 00010202 [ 160.223273][ T1134] RAX: 0000000000000001 RBX: 0000000000000005 RCX: ffffffff824515da [ 160.228990][ T1134] RDX: ffff888024b2a440 RSI: ffffffff82451884 RDI: 0000000000000005 [ 160.231136][ T1134] RBP: 0000000000000000 R08: 0000000000000005 R09: ffff8880654e0980 [ 160.233409][ T1134] R10: 0000000000000000 R11: 0000000000000b8f R12: ffff8880654e0880 [ 160.235551][ T1134] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 160.238358][ T1134] FS: 0000000000000000(0000) GS:ffff88802b700000(0000) knlGS:0000000000000000 [ 160.241860][ T1134] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.243827][ T1134] CR2: 00000000f7454230 CR3: 000000002a5f6000 CR4: 0000000000352ef0 [ 160.246088][ T1134] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 160.248245][ T1134] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 160.250549][ T1134] Kernel panic - not syncing: Fatal exception [ 160.252673][ T1134] Kernel Offset: disabled [ 160.253817][ T1134] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:18:28 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=1ffff92000000fd8 RCX=ffff888022d40034 RDX=ffffed10045a8006 RSI=ffffffff8bb16e40 RDI=ffff88802b53ed40 RBP=0000000000000000 RSP=ffffc90000007e98 R8 =0000000000000000 R9 =ffffed10045a8086 R10=ffff888022d40437 R11=ffffc90000007ff8 R12=ffff888022d40014 R13=ffff888022d40a00 R14=ffff888022d40000 R15=0000000000000007 RIP=ffffffff816a0fca RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f31cff8 CR3=000000002a5f6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0040000000000000 Opmask01=0000000000400000 Opmask02=0000000000000002 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc74a9f850 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656d616e20657261 7764726148205d35 33393854205b5d34 32363438392e3935 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 202c39482049202b 2035335128204335 20393854205b5d34 32203438392e2035 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 332e36312e312d6e 61696265642d332e 36312e3120534f49 42202c2939303032 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 332036312e312d6e 61000a34312d322e 31302e312020312b 32202c293930302d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffffe8ffac3896c0 RCX=ffffc90007921000 RDX=1ffffd1ff58712e5 RSI=0000002547bd3f4a RDI=ffffe8ffac389700 RBP=0000000000000001 RSP=ffffc90025c576c8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000062 R12=00000000000034e2 R13=fffffbfff1b05f9d R14=ffff888069769000 R15=dffffc0000000000 RIP=ffffffff81724595 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020023000 CR3=0000000066104000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85142575 RDI=ffffffff9a6672c0 RBP=ffffffff9a667280 RSP=ffffc900069f7440 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6b726f776b205043 R12=0000000000000000 R13=0000000000000033 R14=ffffffff85142510 R15=0000000000000000 RIP=ffffffff8514259f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3a3b8f CR3=0000000066114000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffff88801de7b150 RBX=dffffc0000000000 RCX=ffffffff8176c2fd RDX=1ffff11003bcf62a RSI=ffff88806afca700 RDI=ffff88804bac3248 RBP=ffffc900264e7730 RSP=ffffc900264e75f0 R8 =0000000000000001 R9 =fffff52004c9ceac R10=0000000000000003 R11=00000000000a201e R12=ffff88806afca6c0 R13=dead000000000122 R14=0000000000000006 R15=ffff88801de7b150 RIP=ffffffff849dff4b RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5075fac CR3=0000000066114000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000