last executing test programs: 1m25.114710094s ago: executing program 0 (id=205): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, 0x0) 1m23.915479728s ago: executing program 0 (id=210): socket(0x18, 0x3, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0x45d0, 0x1, 0x0, 0x1000000) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) mount$nfs4(0x0, 0x0, 0x0, 0x2, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ipv6_route\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2100) 1m23.914757805s ago: executing program 0 (id=211): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x18b801, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000001900), 0x802, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000030}, 0x44080) 1m23.783507671s ago: executing program 0 (id=213): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='qdisc_create\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000180)=[{0x5, 0x9, 0x3, 0xffffffff}, {0xff80, 0xc, 0x2, 0x3}]}) socket$netlink(0x10, 0x3, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf39, 0x0) splice(r4, 0x0, r7, 0x0, 0x80, 0x4) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) close(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1000, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0xfffff796, 0x0, 0x2, 0x3, 0x9, 0x3}}) 1m22.905175617s ago: executing program 0 (id=219): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008e30000b704000000000000850000005900000095220623d70fd8e66f7b210afd51c109acac8d1d345f1c3fa3e8932c6a5a374f352569dc675a85026ba24433dcb22584b9d0682ba3fa30d9f7fd1967f381d1224a361bc07435b3a16c070c03a115065f759186feb2d458ea30512e"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9866, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) pwritev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='$', 0x1}, {&(0x7f0000000340)="597710d415bd8d2b3f38f82aece0bb85e459c898f9ce0a564ab0fe6020ffb9c7d69613ca726d34126fa1bc04225a6e397b7eca869c78c30540d7cf089e88fe993fd148967967e5b1ead1232705b80f537c60cd736b4747c89f660c78443bd40f9061c609f70ed3b245371cc33018158f3dc8ab2075a9164b7fdf349d90090a02f06120f39d3549093ee5cd", 0x8b}], 0x2, 0x6, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r3) tkill(r3, 0x11) ptrace(0x4208, r3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) signalfd(r0, &(0x7f0000000080)={[0x8, 0x8d]}, 0x8) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000980)) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x2, &(0x7f0000000000)=0x1, 0x4) io_uring_setup(0x4372, &(0x7f0000000440)={0x0, 0xd55d, 0x2, 0xfffffffe, 0x26b}) 1m22.695402384s ago: executing program 0 (id=221): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="3a1d00000000000003e6994cb96589e9e7387c8fc4d544e7ee06464ea0771204a4fd3fa326e443aa297241901cd55a9497b05244d8fbe52662c2b4fe066ce023226d7e2619807312b7d18f8bdfe43a214bcfa515771278af81b1eeed963034f4c02cbb4c837af4c24dd60f8b89cad9850dd0499d9f54b6de2e0aa5ae8cf088cf4e70a93ea37f5c6182a5fcd069b21f1f9cd7f14eed3f5f035998de1b0b6e12e74e6b12aa32bbb2270549a40f3c0bcc6d9e5c2f5eb7acc2138047278590f9d7def695911c1f0bd4cc430546bdae116e2776240ac933796cb122b76037eb2fc31ef9828ee24d1d357c873544957321c74b"], 0xf0) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0xba, &(0x7f0000000540)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) openat$vicodec1(0xffffff9c, &(0x7f00000008c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000440)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) close(r5) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) 1m22.695102607s ago: executing program 32 (id=221): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="3a1d00000000000003e6994cb96589e9e7387c8fc4d544e7ee06464ea0771204a4fd3fa326e443aa297241901cd55a9497b05244d8fbe52662c2b4fe066ce023226d7e2619807312b7d18f8bdfe43a214bcfa515771278af81b1eeed963034f4c02cbb4c837af4c24dd60f8b89cad9850dd0499d9f54b6de2e0aa5ae8cf088cf4e70a93ea37f5c6182a5fcd069b21f1f9cd7f14eed3f5f035998de1b0b6e12e74e6b12aa32bbb2270549a40f3c0bcc6d9e5c2f5eb7acc2138047278590f9d7def695911c1f0bd4cc430546bdae116e2776240ac933796cb122b76037eb2fc31ef9828ee24d1d357c873544957321c74b"], 0xf0) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0xba, &(0x7f0000000540)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) openat$vicodec1(0xffffff9c, &(0x7f00000008c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000440)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) close(r5) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) 3.69485484s ago: executing program 1 (id=791): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x18b801, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000001900), 0x802, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000030}, 0x44080) 3.544244206s ago: executing program 1 (id=793): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000280)='./bus\x00', &(0x7f0000000240)='minix\x00', 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x9) sendto$packet(r1, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb186dd84d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) recvmmsg(r1, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/209, 0xd1}], 0x1}, 0x5}], 0x1, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000540), 0x20008, &(0x7f0000000680)=ANY=[@ANYBLOB="000000aff3321f82997fef932ebca3235f93", @ANYRESHEX, @ANYBLOB="2c726f6f7465653d30303030303030303030b013f1d1d32430dab4226f6b6b4ab7ad04303030303030313230303030ac75736d725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c616c6c6f775f6f746865722c626c6b73697a653d3078303030303030303030303030303030302c6d61785f726561643d3078303030303030303030303030303030332c6d61785f726561643d3078303030303030303030303030303030332c6d61785f726561643d3078303030303030303030303030303034302c6d6561737572652c736d61636b66736465663d5b2d2e2f5c2e3ac65bf25e2c7375626a5f726f6c653d002c7375626a5f747970653d282c686173682c657569643c", @ANYRESDEC=0xee00, @ANYBLOB="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", @ANYRES64=r5, @ANYBLOB="2c6d61736becade90c3ff58a3650454e442c00"]) openat$ttynull(0xffffff9c, &(0x7f0000000000), 0x490940, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x900, 0x12) 3.454748313s ago: executing program 3 (id=794): openat$sndseq(0xffffff9c, &(0x7f00000002c0), 0x170000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="856d6c5953b717226b7512b346146eb181759a8cfe9a4f57abb8185e2eac0704d033dcff15ec083c87b816243ee3be8535da847d6e11538ece052de48cf698f287d4c8c202c566f34815c12c0866f882e39fd0ead225b33bcdb097260823e0f30106b3c608db74a5f197a151f25c4d73242cc964a0864c"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000b00), 0x0, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x20000009) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000000)={0x0, 'veth0_to_batadv\x00', {0x2}, 0x8001}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r6, 0x400455c8, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28008879f3dfb733b1000041080b0027bd7000004000000300000008000200070000000a00018078be49a0dd640000d4da7bedc5a07f06192ff9496d71b1e2709368c1857ba526ca5febbbea1c8c4d9229a4b263da"], 0x28}}, 0x4040080) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0xfffffffe, {}, 0x5, 0x107ffffffe}}}, 0x90) 3.144848452s ago: executing program 2 (id=795): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000280)=0x200, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x1000000}) signalfd(r3, &(0x7f0000000380)={[0x3, 0x1]}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x801) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@typedef={0x2}, @float={0xf, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x61, 0x61, 0x61, 0x5f, 0x30, 0x2e, 0x0, 0x2e, 0x2e, 0x5f]}}, &(0x7f00000002c0)=""/184, 0x3c, 0xb8, 0x1, 0x42c, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6db}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.144273881s ago: executing program 2 (id=796): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040), 0x8) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000400)=""/220) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000300)={0xff, [0x7, 0x5, 0xcd600000], [{0xb8f6, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x8001, 0x4a8817c2, 0x0, 0x0, 0x1, 0x1}, {0x3, 0xa, 0x1, 0x0, 0x0, 0x1}, {0x3ff, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x3ff, 0xb49, 0x0, 0x0, 0x1}, {0x80000000, 0x89, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1, 0x1}, {0x0, 0xffff7fff, 0x1, 0x0, 0x0, 0x1}, {0x10, 0x401, 0x1, 0x1}, {0x200, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x2, 0x1, 0x1}], 0x6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.639291786s ago: executing program 1 (id=798): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x9, [0xd2, 0x7, 0xe7, 0xe, 0x3, 0x8, 0x1, 0x8, 0x9, 0x2, 0xfff5, 0x3, 0x1000, 0x8, 0xd, 0x0, 0x8186, 0x3, 0x403, 0xfff, 0x2, 0x3, 0x1, 0x8bb8, 0x1, 0xfff, 0x8, 0x1, 0x8cc4, 0x7fff, 0x208, 0x6, 0x5, 0x51, 0x3, 0x4, 0x4, 0x9, 0x401, 0x5, 0x5, 0x3, 0x5, 0x2, 0xfff8, 0x9, 0x2, 0x1]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x1000, 0x0) io_uring_enter(0xffffffffffffffff, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x6, {0x1, 0x8000000000000001}, 0x54}, 0x1) kexec_load(0x0, 0x1, &(0x7f00000012c0)=[{0x0, 0x0, 0x80000000, 0x1000000}], 0x160000) mq_open(&(0x7f00005a1ffb)='e\xeeQ\x92o', 0x42, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x7f, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00230000000086dd60f2a40000492f00fe880000000000000000000000000001fe8000000000000000000000000000aa342088be0005000054812cbd3b00000800000086dd430588be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800"], 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2.525027117s ago: executing program 4 (id=799): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='mm_migrate_pages\x00', r0}, 0x10) r1 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x2) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b25, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 2.414930208s ago: executing program 4 (id=800): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x1, 0x1}) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f00000001c0)=0x5, 0x7e, 0x2) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0) 2.414426969s ago: executing program 4 (id=801): socket$alg(0x26, 0x5, 0x0) r0 = syz_socket_connect_nvme_tcp() r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200060018c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0xf, 0x5, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000700000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xf000, 0x0, 0x0, 0x0, 0x5, 0x9}, {0xeeee0000, 0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x4000}, {0x0, 0x10000, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfc}, {0x2000, 0xd000, 0x0, 0x4, 0x0, 0x2}, {0x4, 0x4, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xff}, {}, {0xb000}, 0xddf8ffdb, 0x0, 0x4, 0x0, 0xfffffffffffffffd}) mmap(&(0x7f00001e4000/0x3000)=nil, 0x3000, 0x100000e, 0x200000005c831, 0xffffffffffffffff, 0x3e5f6000) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000040)={0xd000, 0x80a0000}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x218) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000000380)=[0x401, 0x5a9e, 0xffffff80, 0xafe, 0x7, 0xa, 0x80, 0x1, 0x6], &(0x7f0000000300), 0x4) set_mempolicy(0x4003, &(0x7f0000000040)=0x10000000005, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r4], 0x7c}}, 0x4000000) unshare(0x22020400) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800b000100736f636b657400001c000280080002400000000b080001400000800308000300000000010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}}, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r9, &(0x7f0000000280)={0x0, 0x2d, 0x0, 0x3a, 0x0, 0x2c}, 0x48) 1.984706877s ago: executing program 1 (id=802): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x1000, 0x0) io_uring_enter(0xffffffffffffffff, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x6, {0x1, 0x8000000000000001}, 0x54}, 0x1) kexec_load(0x0, 0x1, &(0x7f00000012c0)=[{0x0, 0x0, 0x80000000, 0x1000000}], 0x160000) mq_open(&(0x7f00005a1ffb)='e\xeeQ\x92o', 0x42, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=@newtaction={0x230, 0x30, 0x1, 0x0, 0x0, {}, [{0x148, 0x1, [@m_ctinfo={0xfc, 0xc, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x368d, 0x6, 0x2, 0x5, 0x1}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xc}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xe}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xaf}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x100, 0x4, 0x5, 0x6}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xe}]}, {0x78, 0x6, "9e30a6e1422b2570699cd5bc15dd954971a3d2093eccb743e58dfecdc5904a22339a1f4cdec6fc413701cf80b30118b8708d097ad112d01fffacbb266a3eeb39fdcfd35632b6ea4130432e666cc1d968f4bbc9dad49339b3966aa0dfacfb3275af84fc60f5e6b492ac123f0d49f25989be54a904"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}, {0xd4, 0x1, [@m_nat={0xd0, 0x18, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0xdfc, 0x20000002, 0x1, 0x101}, @rand_addr=0x64010100, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc94, 0xb, 0x1, 0x401, 0x1000}, @multicast2, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x3, 0x3, 0x7, 0x1}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffff00}}]}, {0x30, 0x6, "2d13d8e5a081a23b76718c18bd233c05c33623db1eda82076c041fae5f1729a3d01a36ac73fb474dca80f172"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x7f, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00230000000086dd60f2a40000492f00fe880000000000000000000000000001fe8000000000000000000000000000aa342088be0005000054812cbd3b00000800000086dd430588be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(&(0x7f00000001c0)) 1.704979258s ago: executing program 2 (id=803): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r1 = io_uring_setup(0x30d1, &(0x7f0000000300)={0x0, 0xd27b}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800300000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a801efdf008499d7aca1afac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000480), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r8, 0xc040564a, &(0x7f0000000000)={0x8, 0x0, 0x3017, 0x1, 0x7, 0x2, 0xc, 0x1}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r9, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000100)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 1.444978807s ago: executing program 2 (id=804): socket$inet6(0xa, 0x1, 0x0) socket(0x8000000010, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) pipe2$9p(&(0x7f00000007c0), 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="e57a96c1b73a8771a3e51686ebca0012ebc8"], 0x44}}, 0x0) 1.351107219s ago: executing program 2 (id=805): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="852000000200000100182500"/28, @ANYBLOB="000000001c00"], &(0x7f0000000200)='syzkaller\x00', 0xfffffffd, 0x59, &(0x7f0000000240)=""/89, 0x41100, 0x2, '\x00', r1, 0x25, r0, 0x8, &(0x7f0000000380)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x1, 0x3, 0x2, 0x6}, {0x1, 0x4, 0x2, 0x4}], 0x10, 0x6000000, @void, @value}, 0x94) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000e400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0xa68d7c519ec00fe1, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$binderfs(0xffffff9c, &(0x7f0000000fc0)='./binderfs2/binder1\x00', 0x0, 0x0) r7 = getgid() fstat(r2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000380)=@gcm_128={{0x304}, "818dc18800", "41e2fb32493a3c8b87d32b0793542b77", "197423c0", "3d04e7aa8b5b921c"}, 0x28) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2020, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000f40)={&(0x7f00000004c0)={0x50, 0x0, 0x3, {0x7, 0x29, 0x1ff, 0x2002008, 0x1, 0x40b, 0xfff, 0x7, 0x0, 0x0, 0x100, 0x6}}, &(0x7f0000000540)={0x18, 0xffffffffffffffda, 0x800000000000, {0x5}}, &(0x7f0000000580)={0x18, 0x0, 0x0, {0x3}}, &(0x7f00000005c0)={0x18, 0x0, 0x0, {0x6}}, &(0x7f0000000600)={0x18, 0xfffffffffffffffe, 0x9, {0x9}}, &(0x7f0000000640)={0x28, 0xffffffffffffffda, 0x3, {{0x4, 0x8, 0x0, r6}}}, &(0x7f0000000680)={0x60, 0x0, 0x9b9f, {{0x7, 0xe195, 0x3a, 0x8, 0x2, 0xff, 0xbfff, 0x1}}}, &(0x7f0000000700)={0x18, 0x0, 0x8, {0x2}}, &(0x7f0000000740)={0x1a, 0xfffffffffffffffe, 0x0, {'/dev/fuse\x00'}}, &(0x7f0000000780)={0x20, 0x0, 0x6, {0x0, 0x1c}}, &(0x7f00000007c0)={0x78, 0xffffffffffffffda, 0x4, {0x4, 0x2, 0x0, {0x5, 0x6, 0x5, 0xffffffffffffffff, 0x8001, 0xb07, 0x0, 0x5, 0x2, 0x4000, 0xf4, r4, r7, 0x6, 0x3d}}}, &(0x7f0000000840)={0x90, 0x0, 0x4, {0x6, 0x3, 0x19, 0x3f, 0x4, 0x4, {0x6, 0xff, 0x1, 0x9, 0x0, 0x760000000, 0xfffffffe, 0x57, 0x7f, 0x8000, 0x1ff, r4, r5, 0x1, 0x4}}}, &(0x7f0000000900)={0x78, 0x0, 0xfffffffffffffff8, [{0x1, 0x6}, {0x0, 0x7, 0xa, 0x9, 'syzkaller\x00'}, {0x3, 0x5, 0xa, 0x8, '\x04\x00\x00\x00\x8b\x12\xb9\xe1\xab\x00'}]}, &(0x7f0000000a40)={0x288, 0xffffffffffffffda, 0x1000, [{{0x4, 0x0, 0x9, 0x58, 0x7, 0xffff, {0x4, 0x4, 0x2, 0x8, 0x6, 0x4, 0xd, 0x8, 0x7, 0x2000, 0xaf, r4, r5, 0x2, 0x80000001}}, {0x4, 0x9, 0x3, 0x7, '[/{'}}, {{0x0, 0x1, 0x9e66, 0x2, 0x2, 0x1ff, {0x6, 0x2, 0xc4, 0x6, 0xa, 0xa8c, 0x7, 0x7fffffff, 0x100, 0xa000, 0x7ff, r4, r5, 0x61, 0x2}}, {0x4, 0x96a, 0x2, 0x80000001, '])'}}, {{0x2, 0x1, 0x3, 0x18d, 0x5, 0xfffffbff, {0x0, 0x8, 0x4, 0x0, 0x0, 0x5, 0xfffffffb, 0x5, 0x6, 0x18000, 0x1, r4, r7, 0x8fe, 0xb}}, {0x4, 0x2, 0x1, 0x41b, '\x00'}}, {{0x0, 0x2, 0x7, 0x5, 0x40, 0x5, {0x4, 0x36, 0x2, 0x1000, 0x8, 0xcf, 0xb, 0xf7, 0x6dde, 0x4000, 0x5b0, r4, 0x0, 0x7ff, 0x5}}, {0x3, 0x8, 0x0, 0x401}}]}, &(0x7f0000000d00)={0xa0, 0x0, 0x21, {{0x0, 0x3, 0x2, 0x8000000000000001, 0x0, 0x538, {0x4, 0x3, 0x6, 0x800, 0x7f, 0x400000000000000, 0x0, 0x0, 0x8, 0xa000, 0x3fe9, 0xee01, r5, 0x99f2, 0x44d}}, {0x0, 0x6}}}, &(0x7f0000000dc0)={0x20, 0xfffffffffffffffe, 0x9, {0x19c, 0x4, 0xf5, 0x400}}, &(0x7f0000000e00)={0x130, 0xfffffffffffffffe, 0x20000000000000, {0x0, 0x6d, 0x0, '\x00', {0x441, 0xae7, 0xb9, 0x8, r4, r5, 0x4000, '\x00', 0x8, 0xe, 0xc5fe, 0x8, {0x8000000000000000, 0x8}, {0x81}, {0x8, 0xff}, {0x652, 0x7fff}, 0x79a, 0x2, 0x100, 0x1081f419}}}}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101401, 0x0) poll(&(0x7f00000001c0)=[{r8}], 0x1, 0x8) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100), 0x0) socket(0x10, 0x80002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r9, 0xc0182101, &(0x7f0000000180)={r10}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f0000000080)={r11, 0x3, r9, 0x5}) dup(r9) 1.191016731s ago: executing program 3 (id=806): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000280)='./bus\x00', &(0x7f0000000240)='minix\x00', 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x9) sendto$packet(r1, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb186dd84d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) recvmmsg(r1, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/209, 0xd1}], 0x1}, 0x5}], 0x1, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000540), 0x20008, &(0x7f0000000680)=ANY=[@ANYBLOB="000000aff3321f82997fef932ebca3235f93fdac08", @ANYRESHEX, @ANYBLOB="2c726f6f7465653d30303030303030303030b013f1d1d32430dab4226f6b6b4ab7ad04303030303030313230303030ac75736d725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c616c6c6f775f6f746865722c626c6b73697a653d3078303030303030303030303030303030302c6d61785f726561643d3078303030303030303030303030303030332c6d61785f726561643d3078303030303030303030303030303030332c6d61785f726561643d3078303030303030303030303030303034302c6d6561737572652c736d61636b66736465663d5b2d2e2f5c2e3ac65bf25e2c7375626a5f726f6c653d002c7375626a5f747970653d282c686173682c657569643c", @ANYRESDEC=0xee00, @ANYBLOB="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", @ANYRES64=r5, @ANYBLOB="2c6d61736becade90c3ff58a3650454e442c00"]) openat$ttynull(0xffffff9c, &(0x7f0000000000), 0x490940, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x900, 0x12) 1.084867899s ago: executing program 1 (id=807): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x8000000, @empty, 0xfffffffc}, 0x1c) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x9, 0xb00) r2 = syz_open_dev$loop(0x0, 0x2, 0x42000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000012c0)={r2, 0x1, {0x0, 0x0, 0x0, 0xacf, 0x4, 0x0, 0x12, 0x12, 0x15, "0ec9ca987001c9b3b74a569a8680c703387ac35943e26f3c3989ca552f41500193a9b2a28635c684c3dfa8e4badf50411007f3cd1aac51be6a90dc60b04755d8", "7e1d9d46927bf821af93f142a7ed0bf58bccf920358472b13257497fe28b76e043923b0661aba95030097138f91da909a843b8c6557b95ff3e57a3441f01380f", "2859085424a29910a1e0b137d45569deafb313a78f938cb62b9b7e53b00d544d", [0x8]}}) sendmmsg$inet6(r0, 0x0, 0x0, 0x40000) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x2) read(r5, &(0x7f0000000200)=""/209, 0xd1) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r8, 0x0, 0x20008800) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00'}, 0x1c) syz_open_dev$tty20(0xc, 0x4, 0x1) write(r7, &(0x7f0000000380)="ecc31b33", 0x4) writev(r6, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0x40045304, &(0x7f0000000300)={0xbf00, 0x0, 0x0, 'queue1\x00'}) tkill(r4, 0x7) listen(r0, 0x5) setsockopt$sock_linger(r3, 0x1, 0xd, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, 0x0) connect$inet(r3, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.084525373s ago: executing program 4 (id=808): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x7, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r6 = dup(r5) sendfile(r6, r5, 0x0, 0x8000fffffffe) (fail_nth: 3) r7 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendfile(r7, r7, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 454.448675ms ago: executing program 2 (id=809): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d06}]}) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x206, 0x0, 0x0, 0x2, 0x72, 0x400, 0x3, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 293.274204ms ago: executing program 3 (id=810): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r0, 0x0) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r2, 0x800455ca, 0x20000000008) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0/../file0/../file0/../file0\x00', 0x12) 245.079272ms ago: executing program 3 (id=811): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::/', 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e21, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @encap={0x1c, 0x4, {0x2}}]}, 0x170}}, 0x0) fchdir(r3) mkdirat(r2, &(0x7f0000000380)='./file0\x00', 0x100) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setregid(0x0, 0x0) write$sndseq(r2, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x80}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x68) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x3}, {0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0xffffffffffffffff, 0x1}}, 0x48) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000003c0)={0x2, 0x0, [{0xc0000000, 0x1, 0x8, 0x7, 0x40}, {0xa, 0x1, 0x6, 0x7f, 0x8}]}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01ef1700"/19], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x11, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r5, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x3b, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r6}}, 0x18) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[{0x22f, 0x6, 0x3, 0x6}, {0x0, 0x4, 0x0, 0xc}, {0x3, 0x4, 0x32, 0x3}, {0x4, 0x9, 0x2, 0x9}, {0x9, 0x7, 0x9, 0x7}]}) readahead(r7, 0x8, 0xffff) close_range(r1, 0xffffffffffffffff, 0x0) 244.766951ms ago: executing program 1 (id=812): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000041fd4b5c5b6b658f0b000000050000000800020001000000"], 0x1c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0x4004480c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x690a, 0x0, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r4, 0x0, 0x0, 0x4c004, &(0x7f0000002880)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x7c, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4, 0x20}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, 0xffffffffffffffff, &(0x7f0000000700)=0x12) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="e9070000000000000000010000001c0002800c00018008000100030000000c0001800800010001000000"], 0x30}}, 0x0) (fail_nth: 13) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x3, 0x0, @empty}}, 0xfffffffc, 0x3, 0x989, 0x0, 0x84, 0x8000}, 0x9c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020) 240.164705ms ago: executing program 3 (id=813): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[], 0x76) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="0403"], 0x2, 0x0) dup3(r2, r1, 0x0) finit_module(r2, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x10, 0x800, 0x3ff, 0x0, 0x0, 0x0, {0x4}, {}, {0x0, 0x4}, {0x0, 0x0, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xc}) 239.024599ms ago: executing program 4 (id=814): socket$inet6(0xa, 0x1, 0x0) socket(0x8000000010, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) pipe2$9p(&(0x7f00000007c0), 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="e57a96c1b73a8771a3e51686ebca0012ebc8"], 0x44}}, 0x0) 164.984835ms ago: executing program 3 (id=815): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x1000, 0x0) io_uring_enter(0xffffffffffffffff, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x6, {0x1, 0x8000000000000001}, 0x54}, 0x1) kexec_load(0x0, 0x1, &(0x7f00000012c0)=[{0x0, 0x0, 0x80000000, 0x1000000}], 0x160000) mq_open(&(0x7f00005a1ffb)='e\xeeQ\x92o', 0x42, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=@newtaction={0x230, 0x30, 0x1, 0x0, 0x0, {}, [{0x148, 0x1, [@m_ctinfo={0xfc, 0xc, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x368d, 0x6, 0x2, 0x5, 0x1}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xc}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xe}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xaf}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x100, 0x4, 0x5, 0x6}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xe}]}, {0x78, 0x6, "9e30a6e1422b2570699cd5bc15dd954971a3d2093eccb743e58dfecdc5904a22339a1f4cdec6fc413701cf80b30118b8708d097ad112d01fffacbb266a3eeb39fdcfd35632b6ea4130432e666cc1d968f4bbc9dad49339b3966aa0dfacfb3275af84fc60f5e6b492ac123f0d49f25989be54a904"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}, {0xd4, 0x1, [@m_nat={0xd0, 0x18, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0xdfc, 0x20000002, 0x1, 0x101}, @rand_addr=0x64010100, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc94, 0xb, 0x1, 0x401, 0x1000}, @multicast2, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x3, 0x3, 0x7, 0x1}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffff00}}]}, {0x30, 0x6, "2d13d8e5a081a23b76718c18bd233c05c33623db1eda82076c041fae5f1729a3d01a36ac73fb474dca80f172"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x7f, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00230000000086dd60f2a40000492f00fe880000000000000000000000000001fe8000000000000000000000000000aa342088be0005000054812cbd3b00000800000086dd430588be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(&(0x7f00000001c0)) 0s ago: executing program 4 (id=816): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x44}, 0x1, 0xffffffea, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000080)={0xd, 0x800}) r4 = dup(r3) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x400003, 0x4) r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r7, 0x2000009) sendfile(r6, r7, 0x0, 0x7ffff000) lstat(&(0x7f00000002c0)='./file0\x00', 0x0) (fail_nth: 6) clock_gettime(0x0, 0x0) utimes(&(0x7f0000000180)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): 0 [ 76.058096][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.074858][ T5310] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 76.142265][ T6925] FAULT_INJECTION: forcing a failure. [ 76.142265][ T6925] name failslab, interval 1, probability 0, space 0, times 0 [ 76.146262][ T6925] CPU: 1 UID: 0 PID: 6925 Comm: syz.4.222 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 76.149115][ T6925] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.151893][ T6925] Call Trace: [ 76.152780][ T6925] [ 76.153560][ T6925] dump_stack_lvl+0x16c/0x1f0 [ 76.154826][ T6925] should_fail_ex+0x497/0x5b0 [ 76.156104][ T6925] ? fs_reclaim_acquire+0xae/0x150 [ 76.157424][ T6925] should_failslab+0xc2/0x120 [ 76.158659][ T6925] __kmalloc_cache_noprof+0x68/0x420 [ 76.160049][ T6925] ? __get_fs_type+0x21/0x170 [ 76.161261][ T6925] alloc_fs_context+0x57/0x9c0 [ 76.162503][ T6925] path_mount+0xbfb/0x1f10 [ 76.163675][ T6925] ? kmem_cache_free+0x152/0x4c0 [ 76.165053][ T6925] ? __pfx_path_mount+0x10/0x10 [ 76.166339][ T6925] ? putname+0x13c/0x180 [ 76.167486][ T6925] __ia32_sys_mount+0x292/0x310 [ 76.168775][ T6925] ? __pfx___ia32_sys_mount+0x10/0x10 [ 76.170171][ T6925] ? rcu_is_watching+0x12/0xc0 [ 76.171430][ T6925] __do_fast_syscall_32+0x73/0x120 [ 76.172786][ T6925] do_fast_syscall_32+0x32/0x80 [ 76.174101][ T6925] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 76.175791][ T6925] RIP: 0023:0xf7f53579 [ 76.176898][ T6925] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 76.181895][ T6925] RSP: 002b:00000000f508555c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 76.184051][ T6925] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000200000c0 [ 76.186106][ T6925] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000020000400 [ 76.188188][ T6925] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 76.190245][ T6925] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 76.192303][ T6925] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.194387][ T6925] [ 76.213677][ T6933] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 76.292488][ T5310] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 76.295884][ T5310] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 76.298459][ T5310] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 76.301048][ T5310] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.306624][ T6904] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 76.315576][ T5310] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 76.457883][ T6950] syz.4.226: attempt to access beyond end of device [ 76.457883][ T6950] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 76.986738][ T5310] usb 7-1: USB disconnect, device number 9 [ 77.264846][ T5309] Bluetooth: hci3: command tx timeout [ 77.414791][ T56] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 77.550386][ T39] audit: type=1800 audit(1734910442.606:8): pid=6989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.234" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 77.564900][ T56] usb 9-1: Using ep0 maxpacket: 8 [ 77.572253][ T56] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 77.575114][ T56] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 77.577609][ T56] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.580094][ T56] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.583649][ T56] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 77.586399][ T56] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.643381][ T6995] tmpfs: Unknown parameter 'Opol' [ 77.653335][ T6993] dummy0: entered promiscuous mode [ 77.655423][ T6993] macsec1: entered promiscuous mode [ 77.656918][ T6993] macsec1: entered allmulticast mode [ 77.658312][ T6993] dummy0: entered allmulticast mode [ 77.660757][ T6993] dummy0: left allmulticast mode [ 77.662259][ T6993] dummy0: left promiscuous mode [ 77.765355][ T7001] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 77.791809][ T56] usb 9-1: usb_control_msg returned -32 [ 77.793222][ T56] usbtmc 9-1:16.0: can't read capabilities [ 77.796767][ T56] usb 9-1: USB disconnect, device number 2 [ 78.037605][ T7004] syz.2.237: attempt to access beyond end of device [ 78.037605][ T7004] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 78.320821][ T7012] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 78.542395][ T7016] syz.4.239: attempt to access beyond end of device [ 78.542395][ T7016] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 78.808664][ T7028] netlink: 'syz.3.243': attribute type 7 has an invalid length. [ 78.811152][ T7028] netlink: 244 bytes leftover after parsing attributes in process `syz.3.243'. [ 78.966553][ T39] audit: type=1800 audit(1734910444.026:9): pid=7033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.245" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 79.064978][ T25] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 79.216198][ T25] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 79.219295][ T25] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 79.222487][ T25] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 79.231929][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.237977][ T7028] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 79.241614][ T25] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 79.344894][ T5309] Bluetooth: hci3: command tx timeout [ 79.475454][ T6912] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 79.624857][ T6912] usb 9-1: Using ep0 maxpacket: 8 [ 79.627344][ T6912] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 79.630116][ T6912] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 79.632678][ T6912] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 79.639446][ T6912] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.642865][ T6912] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 79.645271][ T6912] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.755783][ T5310] usb 8-1: USB disconnect, device number 7 [ 79.852992][ T6912] usb 9-1: usb_control_msg returned -32 [ 79.854405][ T6912] usbtmc 9-1:16.0: can't read capabilities [ 79.862922][ T25] usb 9-1: USB disconnect, device number 3 [ 80.132415][ T7053] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 80.346192][ T7057] syz.1.250: attempt to access beyond end of device [ 80.346192][ T7057] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 80.580018][ T7071] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 80.800903][ T7078] syz.4.255: attempt to access beyond end of device [ 80.800903][ T7078] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 81.395227][ T39] audit: type=1800 audit(1734910446.456:10): pid=7089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.259" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 81.421532][ T7092] netlink: 'syz.1.260': attribute type 7 has an invalid length. [ 81.423561][ T7092] netlink: 244 bytes leftover after parsing attributes in process `syz.1.260'. [ 81.435004][ T5309] Bluetooth: hci3: command tx timeout [ 81.665035][ T5980] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 81.816377][ T5980] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 81.819155][ T5980] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 81.821563][ T5980] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 81.823809][ T5980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.828703][ T7092] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 81.831414][ T5980] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 82.331218][ T72] usb 6-1: USB disconnect, device number 6 [ 82.517653][ T7120] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 82.881565][ T7134] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 83.007357][ T39] audit: type=1800 audit(1734910448.046:11): pid=7139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.271" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 83.132889][ T7145] syz.2.269: attempt to access beyond end of device [ 83.132889][ T7145] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 83.505529][ T5309] Bluetooth: hci3: command tx timeout [ 84.111316][ T7174] netlink: 'syz.2.279': attribute type 7 has an invalid length. [ 84.113231][ T7174] netlink: 244 bytes leftover after parsing attributes in process `syz.2.279'. [ 84.350050][ T7181] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 84.401169][ T5980] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 84.429711][ T7186] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 84.533546][ T7188] syz.3.281: attempt to access beyond end of device [ 84.533546][ T7188] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 84.577209][ T5980] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 84.584865][ T5980] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 84.588201][ T5980] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 84.591245][ T5980] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.595714][ T7174] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 84.599526][ T5980] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 84.610805][ T7190] syz.4.283: attempt to access beyond end of device [ 84.610805][ T7190] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 84.987433][ T72] usb 7-1: USB disconnect, device number 10 [ 86.279397][ T7228] netlink: 36 bytes leftover after parsing attributes in process `syz.2.292'. [ 86.345213][ T7236] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 86.412174][ T7238] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 86.639552][ T7252] syz.4.296: attempt to access beyond end of device [ 86.639552][ T7252] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 86.642858][ T7245] syz.2.295: attempt to access beyond end of device [ 86.642858][ T7245] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 86.823354][ T7257] netlink: 'syz.3.298': attribute type 7 has an invalid length. [ 86.825509][ T7257] netlink: 244 bytes leftover after parsing attributes in process `syz.3.298'. [ 87.095844][ T72] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 87.276296][ T72] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 87.279080][ T72] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 87.281693][ T72] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 87.283983][ T72] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.292138][ T7257] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 87.300558][ T72] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 87.484300][ T7292] netlink: 36 bytes leftover after parsing attributes in process `syz.4.303'. [ 87.764497][ T25] usb 8-1: USB disconnect, device number 8 [ 88.474260][ T7340] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 88.706721][ T7348] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 88.776127][ T7350] syz.3.309: attempt to access beyond end of device [ 88.776127][ T7350] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 88.932075][ T7357] syz.1.312: attempt to access beyond end of device [ 88.932075][ T7357] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 88.970140][ T7354] netlink: 36 bytes leftover after parsing attributes in process `syz.4.313'. [ 89.768024][ T7369] netlink: 'syz.1.317': attribute type 7 has an invalid length. [ 89.770684][ T7369] netlink: 244 bytes leftover after parsing attributes in process `syz.1.317'. [ 90.004936][ T25] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 90.167647][ T7384] dummy0: entered promiscuous mode [ 90.169506][ T7384] macsec1: entered promiscuous mode [ 90.171417][ T7384] macsec1: entered allmulticast mode [ 90.173127][ T7384] dummy0: entered allmulticast mode [ 90.176293][ T7384] dummy0: left allmulticast mode [ 90.178831][ T7384] dummy0: left promiscuous mode [ 90.309006][ T25] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 90.313415][ T25] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 90.316733][ T25] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 90.319760][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.324301][ T7369] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 90.326294][ T7392] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 90.331085][ T25] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 90.409319][ T7390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.322'. [ 90.488545][ T7400] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 90.549305][ T7399] syz.2.323: attempt to access beyond end of device [ 90.549305][ T7399] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 90.653285][ T7404] syz.4.325: attempt to access beyond end of device [ 90.653285][ T7404] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 90.768798][ T72] usb 6-1: USB disconnect, device number 7 [ 91.934605][ T7428] netlink: 28 bytes leftover after parsing attributes in process `syz.3.332'. [ 92.079614][ T7439] dummy0: entered promiscuous mode [ 92.081192][ T7439] macsec1: entered promiscuous mode [ 92.082607][ T7439] macsec1: entered allmulticast mode [ 92.084068][ T7439] dummy0: entered allmulticast mode [ 92.086602][ T7439] dummy0: left allmulticast mode [ 92.088159][ T7439] dummy0: left promiscuous mode [ 92.158123][ T7445] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 92.216746][ T7447] netlink: 'syz.4.338': attribute type 7 has an invalid length. [ 92.218741][ T7447] netlink: 244 bytes leftover after parsing attributes in process `syz.4.338'. [ 92.397670][ T7454] syz.3.337: attempt to access beyond end of device [ 92.397670][ T7454] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 92.465083][ T5997] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 92.560961][ T7460] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 92.666651][ T5997] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 92.670691][ T5997] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 92.674205][ T5997] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 92.678028][ T5997] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.682423][ T7447] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 92.686990][ T5997] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 92.773141][ T7462] syz.2.341: attempt to access beyond end of device [ 92.773141][ T7462] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 93.103300][ T5310] usb 9-1: USB disconnect, device number 4 [ 93.838160][ T7477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.343'. [ 94.030332][ T7483] dummy0: entered promiscuous mode [ 94.031659][ T7483] macsec1: entered promiscuous mode [ 94.033014][ T7483] macsec1: entered allmulticast mode [ 94.034330][ T7483] dummy0: entered allmulticast mode [ 94.037376][ T7483] dummy0: left allmulticast mode [ 94.038751][ T7483] dummy0: left promiscuous mode [ 94.527060][ T7504] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 94.673574][ T7507] netlink: 'syz.2.353': attribute type 7 has an invalid length. [ 94.676330][ T7507] netlink: 244 bytes leftover after parsing attributes in process `syz.2.353'. [ 94.777010][ T7509] syz.4.352: attempt to access beyond end of device [ 94.777010][ T7509] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 94.916190][ T5997] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 94.950715][ T7518] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 95.076638][ T5997] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 95.079583][ T5997] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 95.081846][ T5997] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 95.084074][ T5997] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.089872][ T7507] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 95.092591][ T5997] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 95.280513][ T7523] syz.3.356: attempt to access beyond end of device [ 95.280513][ T7523] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 95.548211][ T72] usb 7-1: USB disconnect, device number 11 [ 95.732637][ T7533] macsec1: entered promiscuous mode [ 95.734134][ T7533] dummy0: entered promiscuous mode [ 95.735790][ T7533] macsec1: entered allmulticast mode [ 95.737293][ T7533] dummy0: entered allmulticast mode [ 95.739537][ T7533] dummy0: left allmulticast mode [ 95.740870][ T7533] dummy0: left promiscuous mode [ 95.812436][ T7529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.358'. [ 96.333819][ T7559] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 96.477100][ T7565] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 96.640161][ T7568] syz.3.367: attempt to access beyond end of device [ 96.640161][ T7568] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 96.762225][ T7569] syz.2.368: attempt to access beyond end of device [ 96.762225][ T7569] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 97.217868][ T7577] netlink: 'syz.3.371': attribute type 7 has an invalid length. [ 97.220326][ T7577] netlink: 244 bytes leftover after parsing attributes in process `syz.3.371'. [ 97.403047][ T7578] netlink: 20 bytes leftover after parsing attributes in process `syz.4.370'. [ 97.464865][ T6004] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 97.478384][ T7581] dummy0: entered promiscuous mode [ 97.480086][ T7581] macsec1: entered promiscuous mode [ 97.481794][ T7581] macsec1: entered allmulticast mode [ 97.483131][ T7581] dummy0: entered allmulticast mode [ 97.485667][ T7581] dummy0: left allmulticast mode [ 97.487040][ T7581] dummy0: left promiscuous mode [ 97.795843][ T6004] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 97.798728][ T6004] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 97.801318][ T6004] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 97.803705][ T6004] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.806677][ T7577] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.809415][ T6004] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 97.813301][ T7602] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 98.135149][ T72] usb 8-1: USB disconnect, device number 9 [ 98.194965][ T7605] syz.1.379: attempt to access beyond end of device [ 98.194965][ T7605] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 98.495573][ T7614] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 98.704405][ T7618] syz.2.380: attempt to access beyond end of device [ 98.704405][ T7618] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 98.961123][ T7623] netlink: 20 bytes leftover after parsing attributes in process `syz.3.382'. [ 99.058654][ T7633] macsec1: entered promiscuous mode [ 99.060284][ T7633] dummy0: entered promiscuous mode [ 99.063277][ T7633] macsec1: entered allmulticast mode [ 99.065552][ T7633] dummy0: entered allmulticast mode [ 99.078910][ T7633] dummy0: left allmulticast mode [ 99.081247][ T7633] dummy0: left promiscuous mode [ 99.509319][ T7650] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 99.781431][ T7658] syz.3.391: attempt to access beyond end of device [ 99.781431][ T7658] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 99.884598][ T7661] netlink: 'syz.4.392': attribute type 7 has an invalid length. [ 99.887299][ T7661] netlink: 244 bytes leftover after parsing attributes in process `syz.4.392'. [ 100.134836][ T35] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 100.248323][ T7663] loop2: detected capacity change from 0 to 61 [ 100.296792][ T35] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.299849][ T35] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 100.302563][ T35] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 100.305478][ T35] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.310096][ T7661] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 100.315607][ T35] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 100.439682][ T7680] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 100.600523][ T5310] usb 9-1: USB disconnect, device number 5 [ 100.616133][ T7689] syz.3.399: attempt to access beyond end of device [ 100.616133][ T7689] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 101.541148][ T7712] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 101.816702][ T7716] syz.2.407: attempt to access beyond end of device [ 101.816702][ T7716] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 102.178874][ T7728] netlink: 'syz.3.411': attribute type 7 has an invalid length. [ 102.180919][ T7728] netlink: 244 bytes leftover after parsing attributes in process `syz.3.411'. [ 102.424832][ T5997] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 102.575882][ T5997] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 102.579018][ T5997] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 102.581752][ T5997] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 102.584255][ T5997] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.587894][ T7728] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 102.591118][ T5997] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 102.633820][ T7748] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 102.798758][ T7754] syz.2.417: attempt to access beyond end of device [ 102.798758][ T7754] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 102.872840][ T5310] usb 8-1: USB disconnect, device number 10 [ 103.690588][ T7766] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 103.790052][ T7770] dummy0: entered promiscuous mode [ 103.791858][ T7770] macsec1: entered promiscuous mode [ 103.793666][ T7770] macsec1: entered allmulticast mode [ 103.795645][ T7770] dummy0: entered allmulticast mode [ 103.798431][ T7770] dummy0: left allmulticast mode [ 103.800199][ T7770] dummy0: left promiscuous mode [ 104.006078][ T7774] syz.3.422: attempt to access beyond end of device [ 104.006078][ T7774] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 104.284078][ T7793] netlink: 'syz.2.428': attribute type 7 has an invalid length. [ 104.286791][ T7793] netlink: 244 bytes leftover after parsing attributes in process `syz.2.428'. [ 104.524845][ T5310] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 104.886233][ T5310] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 104.889706][ T5310] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 104.893110][ T5310] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 104.895922][ T5310] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.899610][ T7793] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 104.903034][ T5310] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 104.903085][ T7804] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 105.078131][ T7813] syz.4.432: attempt to access beyond end of device [ 105.078131][ T7813] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 105.078969][ T7812] macsec1: entered promiscuous mode [ 105.083306][ T7812] dummy0: entered promiscuous mode [ 105.084725][ T7812] macsec1: entered allmulticast mode [ 105.086187][ T7812] dummy0: entered allmulticast mode [ 105.088414][ T7812] dummy0: left allmulticast mode [ 105.089717][ T7812] dummy0: left promiscuous mode [ 105.295560][ T5978] usb 7-1: USB disconnect, device number 12 [ 105.950263][ T7829] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 106.200511][ T7841] syz.3.438: attempt to access beyond end of device [ 106.200511][ T7841] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 106.703597][ T7855] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 106.762191][ T7856] dummy0: entered promiscuous mode [ 106.764313][ T7856] macsec1: entered promiscuous mode [ 106.766330][ T7856] macsec1: entered allmulticast mode [ 106.768095][ T7856] dummy0: entered allmulticast mode [ 106.770939][ T7856] dummy0: left allmulticast mode [ 106.772887][ T7856] dummy0: left promiscuous mode [ 106.867797][ T7862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.447'. [ 106.870522][ T7862] FAULT_INJECTION: forcing a failure. [ 106.870522][ T7862] name failslab, interval 1, probability 0, space 0, times 0 [ 106.873882][ T7862] CPU: 3 UID: 0 PID: 7862 Comm: syz.4.447 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 106.876682][ T7862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.879463][ T7862] Call Trace: [ 106.880347][ T7862] [ 106.881133][ T7862] dump_stack_lvl+0x16c/0x1f0 [ 106.882483][ T7862] should_fail_ex+0x497/0x5b0 [ 106.883751][ T7862] ? fs_reclaim_acquire+0xae/0x150 [ 106.885103][ T7862] should_failslab+0xc2/0x120 [ 106.886380][ T7862] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 106.887931][ T7862] ? is_bpf_text_address+0x30/0x1a0 [ 106.889272][ T7862] ? __alloc_skb+0x2b3/0x380 [ 106.890506][ T7862] ? is_bpf_text_address+0x30/0x1a0 [ 106.891897][ T7862] __alloc_skb+0x2b3/0x380 [ 106.893088][ T7862] ? __pfx___alloc_skb+0x10/0x10 [ 106.894403][ T7862] ? kernel_text_address+0x8d/0x100 [ 106.895855][ T7862] ? kernel_text_address+0x30/0x100 [ 106.897251][ T7862] netlink_alloc_large_skb+0x69/0x130 [ 106.898667][ T7862] netlink_sendmsg+0x689/0xd70 [ 106.899948][ T7862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.901358][ T7862] ____sys_sendmsg+0x9ae/0xb40 [ 106.902628][ T7862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.904034][ T7862] ? get_compat_msghdr+0x11b/0x170 [ 106.905387][ T7862] ? rcu_is_watching+0x12/0xc0 [ 106.906658][ T7862] ? lock_release+0x4e2/0x6f0 [ 106.907912][ T7862] ? get_pid_task+0xfc/0x250 [ 106.909145][ T7862] ___sys_sendmsg+0x135/0x1e0 [ 106.910398][ T7862] ? get_pid_task+0x35/0x250 [ 106.911641][ T7862] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.913014][ T7862] ? lock_release+0x4e2/0x6f0 [ 106.914260][ T7862] ? __pfx_lock_release+0x10/0x10 [ 106.915593][ T7862] ? trace_lock_acquire+0x14e/0x1f0 [ 106.916994][ T7862] ? __fget_files+0x206/0x3a0 [ 106.918272][ T7862] __sys_sendmsg+0x16e/0x220 [ 106.919554][ T7862] ? __pfx___sys_sendmsg+0x10/0x10 [ 106.920904][ T7862] ? rcu_is_watching+0x12/0xc0 [ 106.922186][ T7862] __do_fast_syscall_32+0x73/0x120 [ 106.923559][ T7862] do_fast_syscall_32+0x32/0x80 [ 106.924855][ T7862] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.926325][ T7864] syz.1.445: attempt to access beyond end of device [ 106.926325][ T7864] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 106.926524][ T7862] RIP: 0023:0xf7f53579 [ 106.930907][ T7862] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 106.930920][ T7862] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 106.938322][ T7862] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 106.940413][ T7862] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.942501][ T7862] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.944588][ T7862] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 106.946682][ T7862] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.948760][ T7862] [ 106.965263][ T7867] netlink: 'syz.4.448': attribute type 7 has an invalid length. [ 106.967332][ T7867] netlink: 244 bytes leftover after parsing attributes in process `syz.4.448'. [ 107.225206][ T5980] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 107.385885][ T5980] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 107.389223][ T5980] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 107.391760][ T5980] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 107.394094][ T5980] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.398062][ T7867] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 107.400780][ T5980] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 107.947315][ T5978] usb 9-1: USB disconnect, device number 6 [ 107.991949][ T7890] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 108.054535][ T7893] dummy0: entered promiscuous mode [ 108.056568][ T7893] macsec1: entered promiscuous mode [ 108.058036][ T7893] macsec1: entered allmulticast mode [ 108.059453][ T7893] dummy0: entered allmulticast mode [ 108.061710][ T7893] dummy0: left allmulticast mode [ 108.063068][ T7893] dummy0: left promiscuous mode [ 108.230355][ T7898] syz.1.455: attempt to access beyond end of device [ 108.230355][ T7898] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 108.386904][ T7905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.459'. [ 108.404007][ T7907] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 108.576056][ T7914] syz.4.460: attempt to access beyond end of device [ 108.576056][ T7914] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 109.051313][ T7931] netlink: 'syz.1.467': attribute type 7 has an invalid length. [ 109.054888][ T7931] netlink: 244 bytes leftover after parsing attributes in process `syz.1.467'. [ 109.294926][ T25] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 109.402077][ T7937] dummy0: entered promiscuous mode [ 109.404004][ T7937] macsec1: entered promiscuous mode [ 109.406094][ T7937] macsec1: entered allmulticast mode [ 109.408051][ T7937] dummy0: entered allmulticast mode [ 109.411110][ T7937] dummy0: left allmulticast mode [ 109.412535][ T7937] dummy0: left promiscuous mode [ 109.446063][ T25] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 109.449918][ T25] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 109.453416][ T25] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 109.456741][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.461108][ T7931] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.464369][ T25] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 109.842738][ T5978] usb 6-1: USB disconnect, device number 8 [ 109.921925][ T7948] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 110.148977][ T7954] syz.2.471: attempt to access beyond end of device [ 110.148977][ T7954] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 110.528100][ T7967] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 110.600302][ T7971] dummy0: entered promiscuous mode [ 110.601703][ T7971] macsec1: entered promiscuous mode [ 110.603106][ T7971] macsec1: entered allmulticast mode [ 110.604548][ T7971] dummy0: entered allmulticast mode [ 110.607201][ T7971] dummy0: left allmulticast mode [ 110.608573][ T7971] dummy0: left promiscuous mode [ 110.762429][ T7977] syz.1.476: attempt to access beyond end of device [ 110.762429][ T7977] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 111.479631][ T7987] netlink: 'syz.4.482': attribute type 7 has an invalid length. [ 111.482018][ T7987] netlink: 244 bytes leftover after parsing attributes in process `syz.4.482'. [ 111.734819][ T35] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 111.765278][ T7993] /dev/sr0: Can't open blockdev [ 111.896352][ T35] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 111.900216][ T35] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 111.903380][ T35] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 111.906349][ T35] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.910405][ T7987] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 111.914324][ T35] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 111.919484][ T7997] /dev/sr0: Can't open blockdev [ 111.988331][ T8006] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 112.318169][ T5978] usb 9-1: USB disconnect, device number 7 [ 112.518479][ T8019] macsec1: entered promiscuous mode [ 112.519953][ T8019] dummy0: entered promiscuous mode [ 112.521354][ T8019] macsec1: entered allmulticast mode [ 112.522727][ T8019] dummy0: entered allmulticast mode [ 112.525060][ T8019] dummy0: left allmulticast mode [ 112.526435][ T8019] dummy0: left promiscuous mode [ 112.665356][ T8021] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 112.878151][ T8028] syz.1.492: attempt to access beyond end of device [ 112.878151][ T8028] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 113.206494][ T8038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.209400][ T8038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.496'. [ 113.731300][ T8051] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 113.963433][ T8058] syz.1.501: attempt to access beyond end of device [ 113.963433][ T8058] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 114.022259][ T8060] netlink: 'syz.3.503': attribute type 7 has an invalid length. [ 114.024287][ T8060] netlink: 244 bytes leftover after parsing attributes in process `syz.3.503'. [ 114.294881][ T25] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 114.446830][ T25] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 114.449658][ T25] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 114.452227][ T25] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 114.454555][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.457678][ T8060] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 114.459452][ T8068] dummy0: entered promiscuous mode [ 114.460417][ T25] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 114.460967][ T8068] macsec1: entered promiscuous mode [ 114.464225][ T8068] macsec1: entered allmulticast mode [ 114.465896][ T8068] dummy0: entered allmulticast mode [ 114.469301][ T8068] dummy0: left allmulticast mode [ 114.470685][ T8068] dummy0: left promiscuous mode [ 114.606982][ T8074] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 114.924375][ T5978] usb 8-1: USB disconnect, device number 11 [ 115.588833][ T8105] dummy0: entered promiscuous mode [ 115.590709][ T8105] macsec1: entered promiscuous mode [ 115.592706][ T8105] macsec1: entered allmulticast mode [ 115.594628][ T8105] dummy0: entered allmulticast mode [ 115.598170][ T8105] dummy0: left allmulticast mode [ 115.600181][ T8105] dummy0: left promiscuous mode [ 115.744177][ T8108] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 115.928762][ T8117] syz.2.516: attempt to access beyond end of device [ 115.928762][ T8117] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 116.667256][ T8127] netlink: 'syz.2.521': attribute type 7 has an invalid length. [ 116.669859][ T8127] netlink: 244 bytes leftover after parsing attributes in process `syz.2.521'. [ 116.699441][ T8136] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 116.912393][ T8145] dummy0: entered promiscuous mode [ 116.913819][ T8145] macsec1: entered promiscuous mode [ 116.915671][ T8145] macsec1: entered allmulticast mode [ 116.917245][ T8145] dummy0: entered allmulticast mode [ 116.920402][ T8145] dummy0: left allmulticast mode [ 116.921810][ T8145] dummy0: left promiscuous mode [ 116.963409][ T8143] syz.4.523: attempt to access beyond end of device [ 116.963409][ T8143] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 117.019279][ T35] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 117.165829][ T35] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 117.169584][ T35] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 117.172918][ T35] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 117.176032][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.179721][ T8127] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 117.182963][ T35] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 117.585016][ T5978] usb 7-1: USB disconnect, device number 13 [ 117.616788][ T8158] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 117.775424][ T8166] netlink: 'syz.4.532': attribute type 2 has an invalid length. [ 117.865510][ T8172] syz.1.529: attempt to access beyond end of device [ 117.865510][ T8172] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 118.829507][ T8197] random: crng reseeded on system resumption [ 118.948401][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.540'. [ 118.950776][ T8202] bridge_slave_1: left allmulticast mode [ 118.952329][ T8202] bridge_slave_1: left promiscuous mode [ 118.954252][ T8202] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.956243][ T8202] FAULT_INJECTION: forcing a failure. [ 118.956243][ T8202] name failslab, interval 1, probability 0, space 0, times 0 [ 118.959514][ T8202] CPU: 0 UID: 0 PID: 8202 Comm: syz.4.540 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 118.962263][ T8202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.965061][ T8202] Call Trace: [ 118.965942][ T8202] [ 118.966748][ T8202] dump_stack_lvl+0x16c/0x1f0 [ 118.967992][ T8202] should_fail_ex+0x497/0x5b0 [ 118.969235][ T8202] ? br_dev_delete+0x99/0x1a0 [ 118.970474][ T8202] ? rtnl_dellink+0x3c3/0xaa0 [ 118.971722][ T8202] should_failslab+0xc2/0x120 [ 118.972956][ T8202] __kmalloc_noprof+0xce/0x4f0 [ 118.974206][ T8202] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.975961][ T8202] ? switchdev_deferred_enqueue+0x2b/0x2b0 [ 118.977508][ T8202] ? __pfx_switchdev_port_obj_del_deferred+0x10/0x10 [ 118.979254][ T8202] switchdev_deferred_enqueue+0x2b/0x2b0 [ 118.980717][ T8202] switchdev_port_obj_del+0xfb/0x180 [ 118.982111][ T8202] br_switchdev_mdb_notify+0x234/0x5c0 [ 118.983541][ T8202] ? __pfx_br_switchdev_mdb_notify+0x10/0x10 [ 118.985107][ T8202] ? __rhashtable_lookup.isra.0+0x28e/0x6a0 [ 118.986661][ T8202] br_mdb_notify+0x69/0x6b0 [ 118.987854][ T8202] br_multicast_del_pg+0x227/0xc20 [ 118.989187][ T8202] ? br_mdb_ip_get+0x7f/0x290 [ 118.990419][ T8202] br_multicast_find_del_pg+0x12d/0x180 [ 118.991869][ T8202] __br_multicast_disable_port_ctx+0x406/0x5f0 [ 118.993476][ T8202] br_multicast_disable_port+0x3f/0x80 [ 118.994902][ T8202] br_stp_disable_port+0x120/0x1d0 [ 118.996326][ T8202] del_nbp+0x13c/0xd30 [ 118.997433][ T8202] br_dev_delete+0x99/0x1a0 [ 118.998658][ T8202] rtnl_dellink+0x3c3/0xaa0 [ 118.999968][ T8202] ? __pfx_br_dev_delete+0x10/0x10 [ 119.001392][ T8202] ? kasan_save_stack+0x42/0x60 [ 119.002817][ T8202] ? kasan_save_stack+0x33/0x60 [ 119.004120][ T8202] ? __pfx_rtnl_dellink+0x10/0x10 [ 119.005472][ T8202] ? kmem_cache_free+0x152/0x4c0 [ 119.006948][ T8202] ? nlmon_xmit+0xa5/0xe0 [ 119.008052][ T8202] ? dev_hard_start_xmit+0x9a/0x7b0 [ 119.009397][ T8202] ? aa_get_newest_label+0x376/0x680 [ 119.010852][ T8202] ? __pfx_aa_get_newest_label+0x10/0x10 [ 119.012288][ T8202] ? lock_release+0x4e2/0x6f0 [ 119.013503][ T8202] ? __dev_queue_xmit+0x89b/0x43e0 [ 119.014826][ T8202] ? rcu_is_watching+0x12/0xc0 [ 119.016071][ T8202] ? lock_release+0x4e2/0x6f0 [ 119.017376][ T8202] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 119.018708][ T8202] ? __pfx_lock_release+0x10/0x10 [ 119.019999][ T8202] ? trace_lock_acquire+0x14e/0x1f0 [ 119.021366][ T8202] ? bpf_lsm_capable+0x9/0x10 [ 119.022587][ T8202] ? security_capable+0x7e/0x260 [ 119.023891][ T8202] ? rtnetlink_rcv_msg+0x205/0xea0 [ 119.025216][ T8202] ? lock_acquire+0x2f/0xb0 [ 119.026467][ T8202] ? rtnetlink_rcv_msg+0x205/0xea0 [ 119.027779][ T8202] ? __pfx_rtnl_dellink+0x10/0x10 [ 119.029022][ T8202] rtnetlink_rcv_msg+0x95b/0xea0 [ 119.030244][ T8202] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 119.031617][ T8202] ? __pfx___dev_queue_xmit+0x10/0x10 [ 119.032940][ T8202] netlink_rcv_skb+0x165/0x410 [ 119.034111][ T8202] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 119.035461][ T8202] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 119.036817][ T8202] ? lock_release+0x4e2/0x6f0 [ 119.037967][ T8202] ? netlink_deliver_tap+0x1ae/0xca0 [ 119.039291][ T8202] netlink_unicast+0x53c/0x7f0 [ 119.040469][ T8202] ? __pfx_netlink_unicast+0x10/0x10 [ 119.041806][ T8202] ? __phys_addr_symbol+0x30/0x80 [ 119.043074][ T8202] ? __check_object_size+0x4a1/0x710 [ 119.044355][ T8202] netlink_sendmsg+0x8b8/0xd70 [ 119.045568][ T8202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.046878][ T8202] sock_write_iter+0x4fe/0x5b0 [ 119.048041][ T8202] ? __pfx_sock_write_iter+0x10/0x10 [ 119.049358][ T8202] ? bpf_lsm_file_permission+0x9/0x10 [ 119.050708][ T8202] ? security_file_permission+0x71/0x210 [ 119.052192][ T8202] vfs_write+0x5ae/0x1150 [ 119.053342][ T8202] ? __pfx_sock_write_iter+0x10/0x10 [ 119.054780][ T8202] ? __pfx_vfs_write+0x10/0x10 [ 119.056125][ T8202] ? __fget_files+0x40/0x3a0 [ 119.057379][ T8202] ksys_write+0x207/0x250 [ 119.058545][ T8202] ? __pfx_ksys_write+0x10/0x10 [ 119.059872][ T8202] ? rcu_is_watching+0x12/0xc0 [ 119.061177][ T8202] __do_fast_syscall_32+0x73/0x120 [ 119.062555][ T8202] do_fast_syscall_32+0x32/0x80 [ 119.063898][ T8202] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.065574][ T8202] RIP: 0023:0xf7f53579 [ 119.066696][ T8202] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 119.071844][ T8202] RSP: 002b:00000000f508555c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 119.074085][ T8202] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000000 [ 119.076147][ T8202] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.078105][ T8202] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 119.080226][ T8202] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 119.082283][ T8202] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.084253][ T8202] [ 119.135442][ T8202] bridge_slave_0: left allmulticast mode [ 119.138203][ T8202] bridge_slave_0: left promiscuous mode [ 119.140187][ T8202] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.328355][ T8206] netlink: 'syz.1.542': attribute type 7 has an invalid length. [ 119.330632][ T8206] netlink: 244 bytes leftover after parsing attributes in process `syz.1.542'. [ 119.574857][ T5978] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 119.644327][ T8214] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 119.652159][ T8212] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 119.654564][ T8212] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 119.657073][ T8212] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 119.697034][ T8212] overlayfs: missing 'workdir' [ 119.705391][ T8216] FAULT_INJECTION: forcing a failure. [ 119.705391][ T8216] name failslab, interval 1, probability 0, space 0, times 0 [ 119.708741][ T8216] CPU: 2 UID: 0 PID: 8216 Comm: syz.4.546 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 119.711466][ T8216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.714293][ T8216] Call Trace: [ 119.715174][ T8216] [ 119.715915][ T8216] dump_stack_lvl+0x16c/0x1f0 [ 119.717147][ T8216] should_fail_ex+0x497/0x5b0 [ 119.718377][ T8216] ? fs_reclaim_acquire+0xae/0x150 [ 119.719692][ T8216] should_failslab+0xc2/0x120 [ 119.720899][ T8216] __kmalloc_noprof+0xce/0x4f0 [ 119.722140][ T8216] ? tomoyo_realpath_from_path+0xbf/0x710 [ 119.723626][ T8216] tomoyo_realpath_from_path+0xbf/0x710 [ 119.725030][ T8216] ? tomoyo_path_number_perm+0x235/0x5b0 [ 119.725854][ T5978] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 119.726463][ T8216] tomoyo_path_number_perm+0x248/0x5b0 [ 119.729366][ T5978] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 119.730769][ T8216] ? tomoyo_path_number_perm+0x235/0x5b0 [ 119.733254][ T5978] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 119.734694][ T8216] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 119.737528][ T5978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.738529][ T8216] ? rcu_is_watching+0x12/0xc0 [ 119.738545][ T8216] ? preempt_count_add+0x76/0x150 [ 119.743978][ T8216] ? __pfx_lock_release+0x10/0x10 [ 119.745288][ T8216] ? trace_lock_acquire+0x14e/0x1f0 [ 119.745432][ T8206] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 119.746657][ T8216] ? __fget_files+0x40/0x3a0 [ 119.749711][ T8216] ? lock_acquire+0x2f/0xb0 [ 119.749864][ T5978] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 119.750902][ T8216] ? __fget_files+0x40/0x3a0 [ 119.753895][ T8216] ? __fget_files+0x206/0x3a0 [ 119.755138][ T8216] security_file_ioctl_compat+0x9b/0x240 [ 119.756641][ T8216] __do_compat_sys_ioctl+0x4e/0x2c0 [ 119.757995][ T8216] __do_fast_syscall_32+0x73/0x120 [ 119.759334][ T8216] do_fast_syscall_32+0x32/0x80 [ 119.760607][ T8216] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.762274][ T8216] RIP: 0023:0xf7f53579 [ 119.763359][ T8216] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 119.768057][ T8216] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 119.770161][ T8216] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c2c85513 [ 119.772156][ T8216] RDX: 0000000020000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.774192][ T8216] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 119.776206][ T8216] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 119.778219][ T8216] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.780272][ T8216] [ 119.782153][ T8216] ERROR: Out of memory at tomoyo_realpath_from_path. [ 119.862269][ T8224] syz.3.545: attempt to access beyond end of device [ 119.862269][ T8224] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 120.074073][ T5978] usb 6-1: USB disconnect, device number 9 [ 120.710044][ T8254] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 120.881372][ T8259] syz.2.557: attempt to access beyond end of device [ 120.881372][ T8259] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 121.147746][ T8264] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 121.342951][ T8266] syz.4.559: attempt to access beyond end of device [ 121.342951][ T8266] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 121.577680][ T8268] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 121.748880][ T8273] syz.2.560: attempt to access beyond end of device [ 121.748880][ T8273] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 122.486027][ T8286] capability: warning: `syz.1.565' uses deprecated v2 capabilities in a way that may be insecure [ 122.974622][ T8295] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 123.193662][ T8307] syz.4.568: attempt to access beyond end of device [ 123.193662][ T8307] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 123.296229][ T8314] netlink: 'syz.2.573': attribute type 7 has an invalid length. [ 123.298184][ T8314] netlink: 244 bytes leftover after parsing attributes in process `syz.2.573'. [ 123.545240][ T8] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 123.695917][ T8] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 123.698827][ T8] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 123.701405][ T8] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 123.703773][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.707177][ T8314] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 123.709895][ T8] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 123.843538][ T8316] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 123.955599][ T8318] FAULT_INJECTION: forcing a failure. [ 123.955599][ T8318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.958774][ T8318] CPU: 1 UID: 0 PID: 8318 Comm: syz.4.575 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 123.961437][ T8318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.964121][ T8318] Call Trace: [ 123.965006][ T8318] [ 123.965768][ T8318] dump_stack_lvl+0x16c/0x1f0 [ 123.966996][ T8318] should_fail_ex+0x497/0x5b0 [ 123.968155][ T8318] _copy_from_user+0x2e/0xd0 [ 123.969356][ T8318] do_sys_poll+0x1d6/0xde0 [ 123.970527][ T8318] ? kernel_text_address+0x8d/0x100 [ 123.971889][ T8318] ? __pfx_do_sys_poll+0x10/0x10 [ 123.973180][ T8318] ? rcu_is_watching+0x12/0xc0 [ 123.974398][ T8318] ? kstrtouint+0xde/0x130 [ 123.975532][ T8318] ? __pfx_timespec64_add_safe+0x10/0x10 [ 123.976939][ T8318] ? trace_irq_enable.constprop.0+0xea/0x140 [ 123.978487][ T8318] ? read_tsc+0x9/0x20 [ 123.979570][ T8318] ? ktime_get_ts64+0x256/0x400 [ 123.980852][ T8318] __ia32_sys_poll+0x1ab/0x460 [ 123.982112][ T8318] ? __pfx___ia32_sys_poll+0x10/0x10 [ 123.983471][ T8318] ? rcu_is_watching+0x12/0xc0 [ 123.984670][ T8318] __do_fast_syscall_32+0x73/0x120 [ 123.985961][ T8318] do_fast_syscall_32+0x32/0x80 [ 123.987274][ T8318] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 123.988835][ T8318] RIP: 0023:0xf7f53579 [ 123.989857][ T8318] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 123.994617][ T8318] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 00000000000000a8 [ 123.996802][ T8318] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 0000000000000001 [ 123.998855][ T8318] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.000865][ T8318] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 124.002881][ T8318] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 124.004820][ T8318] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 124.007020][ T8318] [ 124.090209][ T72] usb 7-1: USB disconnect, device number 14 [ 124.112122][ T8324] syz.1.574: attempt to access beyond end of device [ 124.112122][ T8324] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 124.724400][ T8331] ======================================================= [ 124.724400][ T8331] WARNING: The mand mount option has been deprecated and [ 124.724400][ T8331] and is ignored by this kernel. Remove the mand [ 124.724400][ T8331] option from the mount to silence this warning. [ 124.724400][ T8331] ======================================================= [ 124.733789][ T8331] syz.4.578: attempt to access beyond end of device [ 124.733789][ T8331] nbd4: rw=0, sector=1, nr_sectors = 1 limit=0 [ 124.740651][ T8331] VFS: could not find a valid V7 on nbd4. [ 125.472013][ T8358] vivid-007: disconnect [ 125.532220][ T8361] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 125.656360][ T8362] overlay: Unknown parameter '/' [ 125.839752][ T8363] syz.1.587: attempt to access beyond end of device [ 125.839752][ T8363] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 126.312534][ T8357] vivid-007: reconnect [ 126.314823][ T5978] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 126.441674][ T8385] random: crng reseeded on system resumption [ 126.464949][ T5978] usb 8-1: Using ep0 maxpacket: 8 [ 126.467506][ T5978] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 126.470300][ T5978] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 126.472772][ T5978] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 126.475911][ T5978] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.479239][ T5978] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 126.481520][ T5978] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.594785][ T25] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 126.691530][ T5978] usb 8-1: GET_CAPABILITIES returned 0 [ 126.694633][ T5978] usbtmc 8-1:16.0: can't read capabilities [ 126.736775][ T8390] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 126.754841][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 126.757436][ T25] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 126.760440][ T25] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 126.763087][ T25] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 126.767744][ T25] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.771663][ T25] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 126.774062][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.893909][ T73] usb 8-1: USB disconnect, device number 12 [ 126.924507][ T8392] syz.4.596: attempt to access beyond end of device [ 126.924507][ T8392] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 126.978330][ T25] usb 7-1: GET_CAPABILITIES returned 0 [ 126.979854][ T25] usbtmc 7-1:16.0: can't read capabilities [ 127.177972][ T8394] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 127.181837][ T8376] FAULT_INJECTION: forcing a failure. [ 127.181837][ T8376] name failslab, interval 1, probability 0, space 0, times 0 [ 127.186536][ T8376] CPU: 2 UID: 0 PID: 8376 Comm: syz.2.593 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 127.190065][ T8376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.193108][ T8376] Call Trace: [ 127.193983][ T8376] [ 127.194787][ T8376] dump_stack_lvl+0x16c/0x1f0 [ 127.196024][ T8376] should_fail_ex+0x497/0x5b0 [ 127.197291][ T8376] ? fs_reclaim_acquire+0xae/0x150 [ 127.198664][ T8376] should_failslab+0xc2/0x120 [ 127.199894][ T8376] __kmalloc_noprof+0xce/0x4f0 [ 127.201158][ T8376] ? d_absolute_path+0x137/0x1b0 [ 127.202445][ T8376] ? tomoyo_encode2+0x100/0x3e0 [ 127.203731][ T8376] tomoyo_encode2+0x100/0x3e0 [ 127.204957][ T8376] tomoyo_realpath_from_path+0x1a7/0x710 [ 127.206486][ T8376] tomoyo_path_number_perm+0x248/0x5b0 [ 127.207931][ T8376] ? tomoyo_path_number_perm+0x235/0x5b0 [ 127.209415][ T8376] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 127.210995][ T8376] ? rcu_is_watching+0x12/0xc0 [ 127.212248][ T8376] ? preempt_count_add+0x76/0x150 [ 127.213565][ T8376] ? __pfx_lock_release+0x10/0x10 [ 127.214895][ T8376] ? trace_lock_acquire+0x14e/0x1f0 [ 127.216277][ T8376] ? __fget_files+0x40/0x3a0 [ 127.217484][ T8376] ? lock_acquire+0x2f/0xb0 [ 127.218706][ T8376] ? __fget_files+0x40/0x3a0 [ 127.219965][ T8376] ? __fget_files+0x206/0x3a0 [ 127.221220][ T8376] security_file_ioctl_compat+0x9b/0x240 [ 127.222703][ T8376] __do_compat_sys_ioctl+0x4e/0x2c0 [ 127.224072][ T8376] __do_fast_syscall_32+0x73/0x120 [ 127.225413][ T8376] do_fast_syscall_32+0x32/0x80 [ 127.226700][ T8376] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 127.228372][ T8376] RIP: 0023:0xf7fc1579 [ 127.229455][ T8376] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 127.234432][ T8376] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 127.236604][ T8376] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005b23 [ 127.238670][ T8376] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 127.240725][ T8376] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.242825][ T8376] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 127.244881][ T8376] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.246941][ T8376] [ 127.248095][ T8376] ERROR: Out of memory at tomoyo_realpath_from_path. [ 127.251204][ T73] usb 7-1: USB disconnect, device number 15 [ 127.418051][ T8397] syz.1.597: attempt to access beyond end of device [ 127.418051][ T8397] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 127.692043][ T8404] netlink: 'syz.4.599': attribute type 7 has an invalid length. [ 127.694672][ T8404] netlink: 244 bytes leftover after parsing attributes in process `syz.4.599'. [ 127.781922][ T8406] Bluetooth: MGMT ver 1.23 [ 127.944800][ T73] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 127.972295][ T8414] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 128.112728][ T73] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 128.115629][ T73] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 128.118342][ T73] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 128.120565][ T73] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.123917][ T8404] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 128.126811][ T73] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 128.166854][ T8418] syz.2.602: attempt to access beyond end of device [ 128.166854][ T8418] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 128.452649][ T72] usb 9-1: USB disconnect, device number 8 [ 129.069295][ T8438] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 129.296172][ T8447] syz.1.607: attempt to access beyond end of device [ 129.296172][ T8447] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 129.408356][ T8451] netlink: 20 bytes leftover after parsing attributes in process `syz.3.611'. [ 130.195031][ T5980] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 130.324797][ T5980] usb 6-1: device descriptor read/64, error -71 [ 130.365068][ T8460] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 130.528854][ T8462] syz.3.614: attempt to access beyond end of device [ 130.528854][ T8462] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 130.574819][ T5980] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 130.714815][ T5980] usb 6-1: device descriptor read/64, error -71 [ 130.825168][ T5980] usb usb6-port1: attempt power cycle [ 131.174828][ T5980] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 131.195179][ T5980] usb 6-1: device descriptor read/8, error -71 [ 131.299510][ T8473] dummy0: entered promiscuous mode [ 131.300893][ T8473] macsec1: entered promiscuous mode [ 131.302269][ T8473] macsec1: entered allmulticast mode [ 131.303828][ T8473] dummy0: entered allmulticast mode [ 131.306431][ T8473] dummy0: left allmulticast mode [ 131.307797][ T8473] dummy0: left promiscuous mode [ 131.445225][ T5980] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 131.465281][ T5980] usb 6-1: device descriptor read/8, error -71 [ 131.504835][ T5943] Bluetooth: hci3: command 0x0405 tx timeout [ 131.574991][ T5980] usb usb6-port1: unable to enumerate USB device [ 131.650261][ T8482] syzkaller0: entered promiscuous mode [ 131.651687][ T8482] syzkaller0: entered allmulticast mode [ 131.763186][ T8486] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 131.930166][ T8488] syz.2.622: attempt to access beyond end of device [ 131.930166][ T8488] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 132.104336][ T8490] netlink: 'syz.4.623': attribute type 7 has an invalid length. [ 132.107265][ T8490] netlink: 244 bytes leftover after parsing attributes in process `syz.4.623'. [ 132.145960][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.148323][ T1412] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.344813][ T6004] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 132.506287][ T6004] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 132.509704][ T6004] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 132.512346][ T6004] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 132.515320][ T6004] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.518946][ T8490] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 132.521963][ T6004] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 132.886848][ T72] usb 9-1: USB disconnect, device number 9 [ 132.988845][ T8505] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 133.212596][ T8511] syz.1.627: attempt to access beyond end of device [ 133.212596][ T8511] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 134.197966][ T8533] process 'syz.1.634' launched '/dev/fd/8' with NULL argv: empty string added [ 134.574697][ T8553] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 135.484982][ T73] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 135.634908][ T73] usb 6-1: Using ep0 maxpacket: 8 [ 135.638080][ T73] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.641565][ T73] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.644654][ T73] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 135.647493][ T73] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.652102][ T73] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.655466][ T73] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.862108][ T73] usb 6-1: GET_CAPABILITIES returned 0 [ 135.864196][ T73] usbtmc 6-1:16.0: can't read capabilities [ 136.004133][ T8589] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 136.064232][ T8] usb 6-1: USB disconnect, device number 14 [ 136.112767][ T8591] FAULT_INJECTION: forcing a failure. [ 136.112767][ T8591] name failslab, interval 1, probability 0, space 0, times 0 [ 136.116484][ T8591] CPU: 1 UID: 0 PID: 8591 Comm: syz.3.649 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 136.119784][ T8591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 136.122763][ T8591] Call Trace: [ 136.123926][ T8591] [ 136.124985][ T8591] dump_stack_lvl+0x16c/0x1f0 [ 136.126629][ T8591] should_fail_ex+0x497/0x5b0 [ 136.128283][ T8591] ? fs_reclaim_acquire+0xae/0x150 [ 136.129885][ T8591] should_failslab+0xc2/0x120 [ 136.131483][ T8591] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 136.133354][ T8591] ? rcu_is_watching+0x12/0xc0 [ 136.134974][ T8591] ? vm_area_dup+0x53/0x300 [ 136.136497][ T8591] vm_area_dup+0x53/0x300 [ 136.138000][ T8591] __split_vma+0x181/0x1210 [ 136.139619][ T8591] ? vma_merge_existing_range+0x931/0x1fa0 [ 136.141693][ T8591] ? __pfx___split_vma+0x10/0x10 [ 136.143427][ T8591] ? trace_irq_enable.constprop.0+0x60/0x140 [ 136.145511][ T8591] vma_modify.constprop.0+0x1f9/0x3b0 [ 136.147421][ T8591] vma_modify_flags_name+0x21b/0x2d0 [ 136.149279][ T8591] ? __pfx_vma_modify_flags_name+0x10/0x10 [ 136.151326][ T8591] ? rcu_is_watching+0x12/0xc0 [ 136.153012][ T8591] madvise_update_vma+0x14c/0xbb0 [ 136.154801][ T8591] ? __pfx_madvise_update_vma+0x10/0x10 [ 136.156734][ T8591] ? __sanitizer_cov_trace_switch+0x16/0x90 [ 136.158801][ T8591] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 136.160859][ T8591] madvise_vma_behavior+0x79a/0x1da0 [ 136.162728][ T8591] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 136.164729][ T8591] ? find_vma_prev+0xdb/0x160 [ 136.166045][ T8591] ? __pfx_find_vma_prev+0x10/0x10 [ 136.167412][ T8591] ? trace_lock_acquire+0x14e/0x1f0 [ 136.169157][ T8591] ? rcu_is_watching+0x12/0xc0 [ 136.170548][ T8591] ? trace_lock_acquire+0x14e/0x1f0 [ 136.171858][ T8591] ? do_madvise+0x1ff/0x770 [ 136.173425][ T8591] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 136.175420][ T8591] madvise_walk_vmas+0x1cf/0x2c0 [ 136.177156][ T8591] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 136.179070][ T8591] do_madvise+0x30e/0x770 [ 136.180595][ T8591] ? __pfx_do_madvise+0x10/0x10 [ 136.182242][ T8591] ? ksys_write+0x1ba/0x250 [ 136.183395][ T8591] __ia32_sys_madvise+0xa7/0x110 [ 136.184621][ T8591] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 136.186246][ T8591] __do_fast_syscall_32+0x73/0x120 [ 136.187756][ T8591] do_fast_syscall_32+0x32/0x80 [ 136.189470][ T8591] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.191701][ T8591] RIP: 0023:0xf705e579 [ 136.193154][ T8591] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 136.198960][ T8591] RSP: 002b:00000000f500e55c EFLAGS: 00000296 ORIG_RAX: 00000000000000db [ 136.201582][ T8591] RAX: ffffffffffffffda RBX: 0000000020bdc000 RCX: 0000000000004000 [ 136.203654][ T8591] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 136.205694][ T8591] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.207885][ T8591] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 136.210553][ T8591] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.212618][ T8591] [ 136.271415][ T8592] syz.2.650: attempt to access beyond end of device [ 136.271415][ T8592] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 136.304911][ T5943] Bluetooth: hci3: command 0x0405 tx timeout [ 136.482634][ T8599] loop2: detected capacity change from 0 to 61 [ 136.484488][ T8599] FAULT_INJECTION: forcing a failure. [ 136.484488][ T8599] name failslab, interval 1, probability 0, space 0, times 0 [ 136.488270][ T8599] CPU: 0 UID: 0 PID: 8599 Comm: syz.4.652 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 136.490940][ T8599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 136.493685][ T8599] Call Trace: [ 136.494567][ T8599] [ 136.495391][ T8599] dump_stack_lvl+0x16c/0x1f0 [ 136.496644][ T8599] should_fail_ex+0x497/0x5b0 [ 136.497961][ T8599] ? fs_reclaim_acquire+0xae/0x150 [ 136.499374][ T8599] should_failslab+0xc2/0x120 [ 136.500601][ T8599] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 136.502090][ T8599] ? proc_alloc_inode+0x25/0x200 [ 136.503383][ T8599] ? __pfx_proc_alloc_inode+0x10/0x10 [ 136.504770][ T8599] proc_alloc_inode+0x25/0x200 [ 136.506020][ T8599] alloc_inode+0x5d/0x230 [ 136.507159][ T8599] new_inode+0x22/0x210 [ 136.508270][ T8599] proc_pid_make_inode+0x22/0x160 [ 136.509580][ T8599] proc_pident_instantiate+0x85/0x320 [ 136.510984][ T8599] proc_tgid_base_lookup+0x214/0x280 [ 136.512366][ T8599] __lookup_slow+0x24f/0x460 [ 136.513572][ T8599] ? __pfx___lookup_slow+0x10/0x10 [ 136.514917][ T8599] ? walk_component+0x342/0x5b0 [ 136.516377][ T8599] ? lookup_fast+0x155/0x540 [ 136.517577][ T8599] walk_component+0x350/0x5b0 [ 136.518856][ T8599] link_path_walk.part.0.constprop.0+0x669/0xd40 [ 136.520497][ T8599] path_openat+0x228/0x2d60 [ 136.521693][ T8599] ? __ia32_compat_sys_openat+0x16e/0x210 [ 136.523177][ T8599] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.524857][ T8599] ? __pfx_path_openat+0x10/0x10 [ 136.526158][ T8599] do_filp_open+0x20c/0x470 [ 136.527352][ T8599] ? __pfx_do_filp_open+0x10/0x10 [ 136.528812][ T8599] ? __pfx_kfree_link+0x10/0x10 [ 136.530050][ T8599] ? alloc_fd+0x41f/0x760 [ 136.531153][ T8599] do_sys_openat2+0x17a/0x1e0 [ 136.532304][ T8599] ? __pfx_do_sys_openat2+0x10/0x10 [ 136.533547][ T8599] ? __fget_files+0x206/0x3a0 [ 136.534725][ T8599] __ia32_compat_sys_openat+0x16e/0x210 [ 136.536126][ T8599] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 136.537632][ T8599] ? ksys_write+0x1ba/0x250 [ 136.538839][ T8599] ? rcu_is_watching+0x12/0xc0 [ 136.540044][ T8599] __do_fast_syscall_32+0x73/0x120 [ 136.541324][ T8599] do_fast_syscall_32+0x32/0x80 [ 136.542546][ T8599] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.544150][ T8599] RIP: 0023:0xf7f53579 [ 136.545166][ T8599] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 136.550127][ T8599] RSP: 002b:00000000f50a6490 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 136.552231][ T8599] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f50a64e0 [ 136.554210][ T8599] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f73e3ff4 [ 136.556139][ T8599] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 136.558301][ T8599] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 136.560888][ T8599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.563518][ T8599] [ 136.744219][ T8612] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 137.012083][ T8618] syz.1.656: attempt to access beyond end of device [ 137.012083][ T8618] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 137.685568][ T8637] macsec1: entered promiscuous mode [ 137.687006][ T8637] team0: entered promiscuous mode [ 137.688424][ T8637] team_slave_0: entered promiscuous mode [ 137.689936][ T8637] team_slave_1: entered promiscuous mode [ 137.691482][ T8637] macsec1: entered allmulticast mode [ 137.692835][ T8637] team0: entered allmulticast mode [ 137.694106][ T8637] team_slave_0: entered allmulticast mode [ 137.695805][ T8637] team_slave_1: entered allmulticast mode [ 137.697408][ T8637] team0: Device macsec1 is already an upper device of the team interface [ 137.701015][ T8637] team0: left allmulticast mode [ 137.702327][ T8637] team_slave_0: left allmulticast mode [ 137.703781][ T8637] team_slave_1: left allmulticast mode [ 137.705472][ T8637] team0: left promiscuous mode [ 137.706763][ T8637] team_slave_0: left promiscuous mode [ 137.708246][ T8637] team_slave_1: left promiscuous mode [ 137.779652][ T8645] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 137.827056][ T8660] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 138.047027][ T8667] fuse: Bad value for 'fd' [ 138.353226][ T39] audit: type=1326 audit(1734910503.406:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8673 comm="syz.4.675" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 138.359257][ T39] audit: type=1326 audit(1734910503.406:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8673 comm="syz.4.675" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 138.364905][ T39] audit: type=1326 audit(1734910503.406:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8673 comm="syz.4.675" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 138.372179][ T39] audit: type=1326 audit(1734910503.416:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8673 comm="syz.4.675" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 138.377744][ T39] audit: type=1326 audit(1734910503.416:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8673 comm="syz.4.675" exe="/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 138.382942][ T39] audit: type=1326 audit(1734910503.416:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8673 comm="syz.4.675" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 138.389420][ T39] audit: type=1326 audit(1734910503.416:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8673 comm="syz.4.675" exe="/syz-executor" sig=0 arch=40000003 syscall=313 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 138.396918][ T39] audit: type=1326 audit(1734910503.416:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8673 comm="syz.4.675" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 138.402364][ T39] audit: type=1326 audit(1734910503.416:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8673 comm="syz.4.675" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 138.408110][ T39] audit: type=1326 audit(1734910503.416:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8673 comm="syz.4.675" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 138.626138][ T8676] macsec1: entered promiscuous mode [ 138.628002][ T8676] team0: entered promiscuous mode [ 138.629775][ T8676] team_slave_0: entered promiscuous mode [ 138.631845][ T8676] team_slave_1: entered promiscuous mode [ 138.633904][ T8676] macsec1: entered allmulticast mode [ 138.636317][ T8676] team0: entered allmulticast mode [ 138.638106][ T8676] team_slave_0: entered allmulticast mode [ 138.640096][ T8676] team_slave_1: entered allmulticast mode [ 138.642522][ T8676] team0: Device macsec1 is already an upper device of the team interface [ 138.646599][ T8676] team0: left allmulticast mode [ 138.648486][ T8676] team_slave_0: left allmulticast mode [ 138.650414][ T8676] team_slave_1: left allmulticast mode [ 138.652337][ T8676] team0: left promiscuous mode [ 138.653994][ T8676] team_slave_0: left promiscuous mode [ 138.656078][ T8676] team_slave_1: left promiscuous mode [ 138.764627][ T8680] trusted_key: syz.3.677 sent an empty control message without MSG_MORE. [ 138.774683][ T8678] sch_fq: defrate 0 ignored. [ 139.024232][ T8704] random: crng reseeded on system resumption [ 139.103189][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.681'. [ 139.107127][ T8706] bridge_slave_1: left allmulticast mode [ 139.109170][ T8706] bridge_slave_1: left promiscuous mode [ 139.113384][ T8706] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.122346][ T8706] bridge_slave_0: left allmulticast mode [ 139.123844][ T8706] bridge_slave_0: left promiscuous mode [ 139.126669][ T8706] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.143793][ T8700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.680'. [ 139.674351][ T8685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.983462][ T8721] netlink: 'syz.1.684': attribute type 7 has an invalid length. [ 139.985680][ T8721] netlink: 244 bytes leftover after parsing attributes in process `syz.1.684'. [ 140.065288][ T8723] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 140.235301][ T5980] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 140.288611][ T8735] syz.4.685: attempt to access beyond end of device [ 140.288611][ T8735] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 140.550149][ T5980] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 140.553804][ T5980] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 140.557215][ T5980] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 140.560120][ T5980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.563421][ T8721] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 140.566332][ T5980] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 140.948822][ T5980] usb 6-1: USB disconnect, device number 15 [ 141.011771][ T8747] hsr0: entered promiscuous mode [ 141.831686][ T8766] FAULT_INJECTION: forcing a failure. [ 141.831686][ T8766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.836348][ T8766] CPU: 2 UID: 0 PID: 8766 Comm: syz.1.696 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 141.839528][ T8766] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.842353][ T8766] Call Trace: [ 141.843231][ T8766] [ 141.844006][ T8766] dump_stack_lvl+0x16c/0x1f0 [ 141.845203][ T8766] should_fail_ex+0x497/0x5b0 [ 141.846769][ T8766] _copy_from_user+0x2e/0xd0 [ 141.848318][ T8766] kstrtouint_from_user+0xd7/0x1c0 [ 141.849635][ T8766] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 141.851042][ T8766] ? __mutex_trylock_common+0xea/0x250 [ 141.852363][ T8766] proc_fail_nth_write+0x84/0x250 [ 141.853606][ T8766] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 141.855044][ T8766] ? ksys_write+0x12b/0x250 [ 141.856282][ T8766] ? lock_acquire+0x2f/0xb0 [ 141.857426][ T8766] ? ksys_write+0x12b/0x250 [ 141.858536][ T8766] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 141.859951][ T8766] vfs_write+0x24c/0x1150 [ 141.861067][ T8766] ? __fget_files+0x1fc/0x3a0 [ 141.862257][ T8766] ? __pfx___mutex_lock+0x10/0x10 [ 141.863538][ T8766] ? __pfx_vfs_write+0x10/0x10 [ 141.864762][ T8766] ? __fget_files+0x206/0x3a0 [ 141.866120][ T8766] ksys_write+0x12b/0x250 [ 141.867223][ T8766] ? __pfx_ksys_write+0x10/0x10 [ 141.868418][ T8766] ? rcu_is_watching+0x12/0xc0 [ 141.869599][ T8766] __do_fast_syscall_32+0x73/0x120 [ 141.870659][ T8768] openvswitch: netlink: Missing valid actions attribute. [ 141.870852][ T8766] do_fast_syscall_32+0x32/0x80 [ 141.872614][ T8768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.873824][ T8766] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 141.877787][ T8766] RIP: 0023:0xf712e579 [ 141.878818][ T8766] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 141.881466][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.697'. [ 141.883467][ T8766] RSP: 002b:00000000f5120590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 141.883480][ T8766] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5120620 [ 141.883486][ T8766] RDX: 0000000000000001 RSI: 00000000f7463ff4 RDI: 0000000000000000 [ 141.883491][ T8766] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 141.883497][ T8766] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 141.883502][ T8766] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 141.883510][ T8766] [ 141.937004][ T8771] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 142.097524][ T8779] netlink: 88 bytes leftover after parsing attributes in process `syz.2.700'. [ 142.106927][ T8780] syz.3.698: attempt to access beyond end of device [ 142.106927][ T8780] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 142.371042][ T8788] netlink: 'syz.2.703': attribute type 7 has an invalid length. [ 142.373383][ T8788] netlink: 244 bytes leftover after parsing attributes in process `syz.2.703'. [ 142.625325][ T6004] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 142.803656][ T6004] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 142.809143][ T6004] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 142.812085][ T6004] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 142.814589][ T6004] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.871515][ T8788] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 142.900276][ T8798] x_tables: duplicate underflow at hook 2 [ 142.901270][ T6004] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 143.174789][ T5980] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 143.255282][ T35] usb 7-1: USB disconnect, device number 16 [ 143.334794][ T5980] usb 8-1: Using ep0 maxpacket: 8 [ 143.338517][ T5980] usb 8-1: config 1 interface 0 altsetting 240 bulk endpoint 0x1 has invalid maxpacket 1024 [ 143.341197][ T5980] usb 8-1: config 1 interface 0 altsetting 240 bulk endpoint 0x82 has invalid maxpacket 1024 [ 143.343696][ T5980] usb 8-1: config 1 interface 0 has no altsetting 0 [ 143.347008][ T5980] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 143.349579][ T5980] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.351628][ T5980] usb 8-1: Product: О [ 143.352811][ T5980] usb 8-1: Manufacturer: ゗㏛漞岭痊眃曡凕൑鸐㷗鉺꽶땂쎩싸웆㻷嘘ᡬ繶ు쏕퐽愿汷뮶컳跾誴ٳꚊ籦㮣驱ᬾ殳ᘯ䑮ᗱ斍ꌩ䒋哹ቈ芬䂣ᵑᮄ鼇ก劢➙韒⡖鰧縬嶥‸螕ஐ櫉︕됙Ԉ켱鄳걶ꔹᄇҧޮ璌䁛艻搄汐劎苾繂浛缯厝з䭧䯢⺂㽗绸ᙞ섛薕㵃賟閉䮑扻둓랙ꨄ⃷ꩨ [ 143.364547][ T5980] usb 8-1: SerialNumber: Ꝭ⓵ཱꇬȩ劾ѧꉊ幟ﯴ헸㵱덒㠊皹㇐䭱齺䦪益藛㇖麧هֽဪᰙ阁ᆌ硈㞃曌쭘⢴ᧄ컔貿续滂ৠ⥛댇뿒㏈䝆ﹸ럢쪢廆贀Ԋ蹯䪤迲鑲בֿ殎ꒀ猝 [ 143.378716][ T8798] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 143.381183][ T8798] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 143.589359][ T5980] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 240 proto 3 vid 0x0525 pid 0xA4A8 [ 143.594715][ T5980] usb 8-1: USB disconnect, device number 13 [ 143.597242][ T5980] usblp0: removed [ 143.690593][ T8813] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 143.692371][ T8813] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 143.694817][ T8813] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 143.697181][ T8813] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 143.699119][ T8813] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.700902][ T8813] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.702664][ T8813] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 143.704227][ T8813] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.706571][ T8813] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.708284][ T8813] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 143.709903][ T8813] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 143.711618][ T8813] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 144.004389][ T8820] overlayfs: failed to resolve './file0/file0': -2 [ 144.059938][ T8822] FAULT_INJECTION: forcing a failure. [ 144.059938][ T8822] name failslab, interval 1, probability 0, space 0, times 0 [ 144.063237][ T8822] CPU: 0 UID: 0 PID: 8822 Comm: syz.2.713 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 144.065802][ T8822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.068506][ T8822] Call Trace: [ 144.069335][ T8822] [ 144.070064][ T8822] dump_stack_lvl+0x16c/0x1f0 [ 144.071222][ T8822] should_fail_ex+0x497/0x5b0 [ 144.072432][ T8822] should_failslab+0xc2/0x120 [ 144.073612][ T8822] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 144.074949][ T8822] ? skb_clone+0x190/0x3f0 [ 144.076066][ T8822] skb_clone+0x190/0x3f0 [ 144.077133][ T8822] netlink_deliver_tap+0xafd/0xca0 [ 144.078496][ T8822] netlink_unicast+0x5e1/0x7f0 [ 144.079686][ T8822] ? __pfx_netlink_unicast+0x10/0x10 [ 144.080998][ T8822] ? __phys_addr_symbol+0x30/0x80 [ 144.082345][ T8822] ? __check_object_size+0x488/0x710 [ 144.083952][ T8822] netlink_sendmsg+0x8b8/0xd70 [ 144.085141][ T8822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.086447][ T8822] ____sys_sendmsg+0x9ae/0xb40 [ 144.087673][ T8822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.089076][ T8822] ? get_compat_msghdr+0x11b/0x170 [ 144.090344][ T8822] ? rcu_is_watching+0x12/0xc0 [ 144.091553][ T8822] ? lock_release+0x4e2/0x6f0 [ 144.092742][ T8822] ? get_pid_task+0xfc/0x250 [ 144.093870][ T8822] ___sys_sendmsg+0x135/0x1e0 [ 144.095038][ T8822] ? get_pid_task+0x35/0x250 [ 144.096204][ T8822] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.097494][ T8822] ? lock_release+0x4e2/0x6f0 [ 144.098729][ T8822] ? __pfx_lock_release+0x10/0x10 [ 144.099976][ T8822] ? trace_lock_acquire+0x14e/0x1f0 [ 144.101656][ T8822] ? __fget_files+0x206/0x3a0 [ 144.103310][ T8822] __sys_sendmsg+0x16e/0x220 [ 144.104939][ T8822] ? __pfx___sys_sendmsg+0x10/0x10 [ 144.106830][ T8822] ? rcu_is_watching+0x12/0xc0 [ 144.108517][ T8822] __do_fast_syscall_32+0x73/0x120 [ 144.110307][ T8822] do_fast_syscall_32+0x32/0x80 [ 144.112001][ T8822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 144.114194][ T8822] RIP: 0023:0xf7fc1579 [ 144.115332][ T8822] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 144.120383][ T8822] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 144.122408][ T8822] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000f00 [ 144.124378][ T8822] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.126304][ T8822] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 144.128246][ T8822] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 144.130179][ T8822] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.132072][ T8822] [ 144.232075][ T8831] dummy0: entered promiscuous mode [ 144.234149][ T8831] macsec1: entered promiscuous mode [ 144.236250][ T8831] macsec1: entered allmulticast mode [ 144.238205][ T8831] dummy0: entered allmulticast mode [ 144.241357][ T8831] dummy0: left allmulticast mode [ 144.243180][ T8831] dummy0: left promiscuous mode [ 144.671491][ T8843] netlink: 'syz.1.720': attribute type 7 has an invalid length. [ 144.674265][ T8843] netlink: 244 bytes leftover after parsing attributes in process `syz.1.720'. [ 144.726679][ T8827] mmap: syz.2.715 (8827) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 144.914870][ T8] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 144.937110][ T8845] FAULT_INJECTION: forcing a failure. [ 144.937110][ T8845] name failslab, interval 1, probability 0, space 0, times 0 [ 144.940621][ T8845] CPU: 1 UID: 0 PID: 8845 Comm: syz.2.721 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 144.943432][ T8845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.946233][ T8845] Call Trace: [ 144.947090][ T8845] [ 144.947835][ T8845] dump_stack_lvl+0x16c/0x1f0 [ 144.949119][ T8845] should_fail_ex+0x497/0x5b0 [ 144.950342][ T8845] ? fs_reclaim_acquire+0xae/0x150 [ 144.951732][ T8845] should_failslab+0xc2/0x120 [ 144.952963][ T8845] __kmalloc_cache_noprof+0x68/0x420 [ 144.954292][ T8845] ? mpi_alloc_limb_space+0x31/0x60 [ 144.955687][ T8845] mpi_alloc+0x46/0x230 [ 144.956775][ T8845] mpi_read_raw_data+0x133/0x4a0 [ 144.958060][ T8845] dh_set_secret+0x1d2/0x410 [ 144.959341][ T8845] ? __pfx_dh_set_secret+0x10/0x10 [ 144.960690][ T8845] ? crypto_alloc_tfmmem.isra.0+0xd2/0x110 [ 144.962234][ T8845] ? crypto_alloc_tfm_node+0x126/0x260 [ 144.963714][ T8845] __keyctl_dh_compute+0x4ec/0xf50 [ 144.965010][ T8845] ? get_pid_task+0xfc/0x250 [ 144.966206][ T8845] ? __pfx_lock_release+0x10/0x10 [ 144.967595][ T8845] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 144.969024][ T8845] ? get_pid_task+0x35/0x250 [ 144.970293][ T8845] ? lock_acquire+0x2f/0xb0 [ 144.971500][ T8845] ? rcu_is_watching+0x12/0xc0 [ 144.972708][ T8845] ? rcu_is_watching+0x12/0xc0 [ 144.974026][ T8845] ? __pfx_lock_release+0x10/0x10 [ 144.975265][ T8845] ? trace_lock_acquire+0x14e/0x1f0 [ 144.976585][ T8845] compat_keyctl_dh_compute+0x161/0x1d0 [ 144.978042][ T8845] ? __pfx_compat_keyctl_dh_compute+0x10/0x10 [ 144.979571][ T8845] ? ksys_write+0x1ba/0x250 [ 144.980769][ T8845] ? __pfx_ksys_write+0x10/0x10 [ 144.982047][ T8845] __do_compat_sys_keyctl+0x27b/0x440 [ 144.983371][ T8845] __do_fast_syscall_32+0x73/0x120 [ 144.984743][ T8845] do_fast_syscall_32+0x32/0x80 [ 144.985951][ T8845] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 144.987486][ T8845] RIP: 0023:0xf7fc1579 [ 144.988525][ T8845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 144.993220][ T8845] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000120 [ 144.995276][ T8845] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 0000000020000200 [ 144.997479][ T8845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 145.000089][ T8845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 145.002614][ T8845] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 145.005120][ T8845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 145.007526][ T8845] [ 145.008773][ T72] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 145.116135][ T8] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 145.118835][ T8] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 145.121359][ T8] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 145.123549][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.126721][ T8843] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 145.129953][ T8] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 145.187159][ T72] usb 9-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 145.189476][ T72] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.191564][ T72] usb 9-1: Product: syz [ 145.192667][ T72] usb 9-1: Manufacturer: syz [ 145.193887][ T72] usb 9-1: SerialNumber: syz [ 145.196257][ T72] usb 9-1: config 0 descriptor?? [ 145.419817][ T8837] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 145.424001][ T72] cx82310_eth 9-1:0.0: probe with driver cx82310_eth failed with error -22 [ 145.427462][ T72] cxacru 9-1:0.0: usbatm_usb_probe: bind failed: -19! [ 145.429702][ T72] usb 9-1: USB disconnect, device number 10 [ 145.534800][ T5980] usb 6-1: USB disconnect, device number 16 [ 145.674892][ T5309] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.744850][ T5309] Bluetooth: hci3: command 0x0405 tx timeout [ 145.744916][ T5943] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.744934][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 146.131755][ T8873] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 146.749485][ T8889] FAULT_INJECTION: forcing a failure. [ 146.749485][ T8889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.753916][ T8889] CPU: 2 UID: 0 PID: 8889 Comm: syz.3.734 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 146.757546][ T8889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.760418][ T8889] Call Trace: [ 146.761273][ T8889] [ 146.762043][ T8889] dump_stack_lvl+0x16c/0x1f0 [ 146.763321][ T8889] should_fail_ex+0x497/0x5b0 [ 146.764543][ T8889] strncpy_from_user+0x3b/0x2d0 [ 146.765805][ T8889] strncpy_from_user_nofault+0x7f/0x180 [ 146.767289][ T8889] bpf_probe_read_compat_str+0x131/0x170 [ 146.768799][ T8889] bpf_prog_632764f3a8ec7cf7+0x57/0x64 [ 146.770223][ T8889] bpf_trace_run3+0x240/0x5a0 [ 146.771477][ T8889] ? __pfx_bpf_trace_run3+0x10/0x10 [ 146.772835][ T8889] ? kmem_cache_free+0x152/0x4c0 [ 146.774115][ T8889] ? kfree_skbmem+0x1a4/0x1f0 [ 146.775360][ T8889] ? kfree_skbmem+0x1a4/0x1f0 [ 146.776613][ T8889] ? rcu_is_watching+0x12/0xc0 [ 146.777927][ T8889] ? lock_release+0x4e2/0x6f0 [ 146.779268][ T8889] ? __bpf_trace_kmem_cache_free+0x8e/0xc0 [ 146.780733][ T8889] ? kfree_skbmem+0x1a4/0x1f0 [ 146.781935][ T8889] __traceiter_kmem_cache_free+0x35/0x50 [ 146.783402][ T8889] kmem_cache_free+0x200/0x4c0 [ 146.784646][ T8889] ? skb_release_data+0x565/0x730 [ 146.785961][ T8889] kfree_skbmem+0x1a4/0x1f0 [ 146.787110][ T8889] consume_skb+0xcc/0x100 [ 146.788249][ T8889] nlmon_xmit+0xa5/0xe0 [ 146.789312][ T8889] dev_hard_start_xmit+0x9a/0x7b0 [ 146.790587][ T8889] __dev_queue_xmit+0x7f0/0x43e0 [ 146.791863][ T8889] ? __pfx___dev_queue_xmit+0x10/0x10 [ 146.793287][ T8889] ? rcu_is_watching+0x12/0xc0 [ 146.794556][ T8889] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 146.795935][ T8889] ? __copy_skb_header+0x2e8/0x5b0 [ 146.797253][ T8889] ? __skb_clone+0x570/0x760 [ 146.798479][ T8889] netlink_deliver_tap+0xa61/0xca0 [ 146.799773][ T8889] netlink_unicast+0x5e1/0x7f0 [ 146.801023][ T8889] ? __pfx_netlink_unicast+0x10/0x10 [ 146.802367][ T8889] ? __phys_addr_symbol+0x30/0x80 [ 146.803679][ T8889] ? __check_object_size+0x488/0x710 [ 146.805038][ T8889] netlink_sendmsg+0x8b8/0xd70 [ 146.806243][ T8889] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.807578][ T8889] ____sys_sendmsg+0x9ae/0xb40 [ 146.808832][ T8889] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.810148][ T8889] ? get_compat_msghdr+0x11b/0x170 [ 146.811474][ T8889] ? rcu_is_watching+0x12/0xc0 [ 146.812725][ T8889] ? lock_release+0x4e2/0x6f0 [ 146.813937][ T8889] ? get_pid_task+0xfc/0x250 [ 146.815175][ T8889] ___sys_sendmsg+0x135/0x1e0 [ 146.816405][ T8889] ? get_pid_task+0x35/0x250 [ 146.817577][ T8889] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.818944][ T8889] ? lock_release+0x4e2/0x6f0 [ 146.820154][ T8889] ? __pfx_lock_release+0x10/0x10 [ 146.821433][ T8889] ? trace_lock_acquire+0x14e/0x1f0 [ 146.822784][ T8889] ? __fget_files+0x206/0x3a0 [ 146.824013][ T8889] __sys_sendmsg+0x16e/0x220 [ 146.825210][ T8889] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.826505][ T8889] ? rcu_is_watching+0x12/0xc0 [ 146.827748][ T8889] __do_fast_syscall_32+0x73/0x120 [ 146.829058][ T8889] do_fast_syscall_32+0x32/0x80 [ 146.830302][ T8889] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 146.831858][ T8889] RIP: 0023:0xf705e579 [ 146.832941][ T8889] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 146.837836][ T8889] RSP: 002b:00000000f505055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 146.839968][ T8889] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000800 [ 146.842001][ T8889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.844047][ T8889] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 146.846101][ T8889] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 146.848227][ T8889] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.850194][ T8889] [ 146.851796][ T8889] netlink: 24 bytes leftover after parsing attributes in process `syz.3.734'. [ 147.389600][ T8903] fuse: Bad value for 'group_id' [ 147.391055][ T8903] fuse: Bad value for 'group_id' [ 147.524463][ T8900] 9pnet_fd: Insufficient options for proto=fd [ 147.757498][ T5943] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.827121][ T5943] Bluetooth: hci3: command 0x0405 tx timeout [ 147.834968][ T5943] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.849241][ T8925] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 148.137922][ T5943] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.392508][ T8927] syz.1.744: attempt to access beyond end of device [ 148.392508][ T8927] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 148.600790][ T8945] FAULT_INJECTION: forcing a failure. [ 148.600790][ T8945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.604309][ T8945] CPU: 2 UID: 0 PID: 8945 Comm: syz.2.747 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 148.606975][ T8945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 148.609977][ T8945] Call Trace: [ 148.610832][ T8945] [ 148.611586][ T8945] dump_stack_lvl+0x16c/0x1f0 [ 148.612787][ T8945] should_fail_ex+0x497/0x5b0 [ 148.613968][ T8945] strncpy_from_user+0x3b/0x2d0 [ 148.615179][ T8945] strncpy_from_user_nofault+0x7f/0x180 [ 148.616605][ T8945] bpf_probe_read_compat_str+0x131/0x170 [ 148.618014][ T8945] bpf_prog_632764f3a8ec7cf7+0x57/0x64 [ 148.619383][ T8945] bpf_trace_run3+0x240/0x5a0 [ 148.620591][ T8945] ? __pfx_bpf_trace_run3+0x10/0x10 [ 148.621854][ T8945] ? skb_free_head+0x18a/0x1d0 [ 148.623088][ T8945] ? netlink_rcv_skb+0x331/0x410 [ 148.624309][ T8945] ? __bpf_trace_kmem_cache_free+0x8e/0xc0 [ 148.625751][ T8945] ? skb_free_head+0x18a/0x1d0 [ 148.626927][ T8945] __traceiter_kmem_cache_free+0x35/0x50 [ 148.628296][ T8945] kmem_cache_free+0x200/0x4c0 [ 148.629500][ T8945] skb_free_head+0x18a/0x1d0 [ 148.630708][ T8945] skb_release_data+0x560/0x730 [ 148.631977][ T8945] consume_skb+0xbf/0x100 [ 148.633103][ T8945] netlink_unicast+0x547/0x7f0 [ 148.634345][ T8945] ? __pfx_netlink_unicast+0x10/0x10 [ 148.635718][ T8945] ? __phys_addr_symbol+0x30/0x80 [ 148.637090][ T8945] ? __check_object_size+0x488/0x710 [ 148.638480][ T8945] netlink_sendmsg+0x8b8/0xd70 [ 148.639729][ T8945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.641044][ T8945] ____sys_sendmsg+0x9ae/0xb40 [ 148.642244][ T8945] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.643569][ T8945] ? get_compat_msghdr+0x11b/0x170 [ 148.644823][ T8945] ? rcu_is_watching+0x12/0xc0 [ 148.646041][ T8945] ? lock_release+0x4e2/0x6f0 [ 148.647200][ T8945] ? get_pid_task+0xfc/0x250 [ 148.648315][ T8945] ___sys_sendmsg+0x135/0x1e0 [ 148.649481][ T8945] ? get_pid_task+0x35/0x250 [ 148.650676][ T8945] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.651963][ T8945] ? lock_release+0x4e2/0x6f0 [ 148.653122][ T8945] ? __pfx_lock_release+0x10/0x10 [ 148.654330][ T8945] ? trace_lock_acquire+0x14e/0x1f0 [ 148.655595][ T8945] ? __fget_files+0x206/0x3a0 [ 148.656749][ T8945] __sys_sendmsg+0x16e/0x220 [ 148.657923][ T8945] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.659175][ T8945] ? rcu_is_watching+0x12/0xc0 [ 148.660357][ T8945] __do_fast_syscall_32+0x73/0x120 [ 148.661592][ T8945] do_fast_syscall_32+0x32/0x80 [ 148.662842][ T8945] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 148.664368][ T8945] RIP: 0023:0xf7fc1579 [ 148.665390][ T8945] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 148.670132][ T8945] RSP: 002b:00000000f50d455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 148.672213][ T8945] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000280 [ 148.674140][ T8945] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.676090][ T8945] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 148.678060][ T8945] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 148.680061][ T8945] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 148.682028][ T8945] [ 148.916817][ T8956] input: syz1 as /devices/virtual/input/input5 [ 148.932308][ T5943] Bluetooth: hci0: unexpected event for opcode 0x0c12 [ 148.937717][ T5943] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 149.471669][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.754'. [ 149.796737][ T8981] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 149.891394][ T8983] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 149.898170][ T8983] CIFS mount error: No usable UNC path provided in device string! [ 149.898170][ T8983] [ 149.900738][ T8983] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 149.904906][ T5943] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.905035][ T5309] Bluetooth: hci3: command 0x0405 tx timeout [ 150.034780][ T73] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 150.126121][ T8992] syz.1.759: attempt to access beyond end of device [ 150.126121][ T8992] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 150.145395][ T5309] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.153685][ T8991] xt_CT: No such helper "snmp_trap" [ 150.324843][ T73] usb 9-1: Using ep0 maxpacket: 8 [ 150.328090][ T73] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 150.330943][ T73] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.334206][ T73] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 150.337905][ T73] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 150.341149][ T73] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.346474][ T73] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 150.349124][ T73] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.555874][ T73] usb 9-1: usb_control_msg returned -32 [ 150.557390][ T73] usbtmc 9-1:16.0: can't read capabilities [ 150.806888][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.764'. [ 150.899098][ T9012] netlink: 'syz.3.765': attribute type 10 has an invalid length. [ 150.902177][ T9012] team0: Device ipvlan1 failed to register rx_handler [ 150.909167][ T35] usb 9-1: USB disconnect, device number 11 [ 151.795894][ T9031] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 151.847619][ T9038] macvlan2: entered promiscuous mode [ 151.849580][ T9038] macvlan2: entered allmulticast mode [ 152.056946][ T9048] syz.1.771: attempt to access beyond end of device [ 152.056946][ T9048] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 152.292988][ T9049] process 'memfd:ndRi5ም[@8 9I=\'LҎ)JtTDqρ1 >\LϑM^T*' started with executable stack [ 152.944835][ T5309] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 152.947364][ T5309] Bluetooth: hci0: Injecting HCI hardware error event [ 152.949543][ T5943] Bluetooth: hci0: hardware error 0x00 [ 152.985134][ T9071] netlink: 84 bytes leftover after parsing attributes in process `syz.4.783'. [ 152.992026][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.783'. [ 153.389020][ T9078] nbd4: detected capacity change from 0 to 12 [ 153.392130][ T5938] block nbd4: Send control failed (result -89) [ 153.394399][ T5938] block nbd4: Request send failed, requeueing [ 153.398439][ T5309] block nbd4: Receive control failed (result -32) [ 153.400881][ T6142] block nbd4: Dead connection, failed to find a fallback [ 153.403419][ T6142] block nbd4: shutting down sockets [ 153.405431][ T6142] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.408649][ T6142] Buffer I/O error on dev nbd4, logical block 0, async page read [ 153.412961][ T5938] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.416551][ T5938] Buffer I/O error on dev nbd4, logical block 0, async page read [ 153.419614][ T5938] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.422978][ T5938] Buffer I/O error on dev nbd4, logical block 0, async page read [ 153.426335][ T5938] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.429521][ T5938] Buffer I/O error on dev nbd4, logical block 0, async page read [ 153.432318][ T5938] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.435868][ T5938] Buffer I/O error on dev nbd4, logical block 0, async page read [ 153.438771][ T5938] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.441983][ T5938] Buffer I/O error on dev nbd4, logical block 0, async page read [ 153.445125][ T5938] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.448302][ T5938] Buffer I/O error on dev nbd4, logical block 0, async page read [ 153.451049][ T5938] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.454094][ T5938] Buffer I/O error on dev nbd4, logical block 0, async page read [ 153.456897][ T5938] ldm_validate_partition_table(): Disk read failed. [ 153.459359][ T5938] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.462497][ T5938] Buffer I/O error on dev nbd4, logical block 0, async page read [ 153.466403][ T5938] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.469803][ T5938] Buffer I/O error on dev nbd4, logical block 0, async page read [ 153.472691][ T5938] Dev nbd4: unable to read RDB block 0 [ 153.475039][ T5938] nbd4: unable to read partition table [ 153.477234][ T5938] nbd4: partition table beyond EOD, truncated [ 153.498946][ T5938] ldm_validate_partition_table(): Disk read failed. [ 153.501660][ T5938] Dev nbd4: unable to read RDB block 0 [ 153.503875][ T5938] nbd4: unable to read partition table [ 153.506476][ T5938] nbd4: partition table beyond EOD, truncated [ 153.548560][ T9081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.786'. [ 153.552846][ T9081] FAULT_INJECTION: forcing a failure. [ 153.552846][ T9081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.557651][ T9081] CPU: 3 UID: 0 PID: 9081 Comm: syz.2.786 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 153.561414][ T9081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 153.565185][ T9081] Call Trace: [ 153.566433][ T9081] [ 153.567643][ T9081] dump_stack_lvl+0x16c/0x1f0 [ 153.569345][ T9081] should_fail_ex+0x497/0x5b0 [ 153.571055][ T9081] strncpy_from_user+0x3b/0x2d0 [ 153.572813][ T9081] strncpy_from_user_nofault+0x7f/0x180 [ 153.574798][ T9081] bpf_probe_read_compat_str+0x131/0x170 [ 153.576814][ T9081] bpf_prog_632764f3a8ec7cf7+0x57/0x64 [ 153.578755][ T9081] bpf_trace_run3+0x240/0x5a0 [ 153.580480][ T9081] ? __pfx_bpf_trace_run3+0x10/0x10 [ 153.582351][ T9081] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 153.584267][ T9081] ? skb_free_head+0x18a/0x1d0 [ 153.586014][ T9081] ? __bpf_trace_kmem_cache_free+0x8e/0xc0 [ 153.588128][ T9081] ? skb_free_head+0x18a/0x1d0 [ 153.589848][ T9081] __traceiter_kmem_cache_free+0x35/0x50 [ 153.591897][ T9081] kmem_cache_free+0x200/0x4c0 [ 153.593625][ T9081] ? security_capable+0x7e/0x260 [ 153.595416][ T9081] ? ns_capable+0xd7/0x110 [ 153.596857][ T9081] skb_free_head+0x18a/0x1d0 [ 153.598309][ T9081] skb_release_data+0x560/0x730 [ 153.599954][ T9081] consume_skb+0xbf/0x100 [ 153.601527][ T9081] netlink_unicast+0x547/0x7f0 [ 153.603289][ T9081] ? __pfx_netlink_unicast+0x10/0x10 [ 153.605182][ T9081] ? __phys_addr_symbol+0x30/0x80 [ 153.607034][ T9081] ? __check_object_size+0x488/0x710 [ 153.608933][ T9081] netlink_sendmsg+0x8b8/0xd70 [ 153.610693][ T9081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.612605][ T9081] ____sys_sendmsg+0x9ae/0xb40 [ 153.614337][ T9081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.616226][ T9081] ? get_compat_msghdr+0x11b/0x170 [ 153.618049][ T9081] ? rcu_is_watching+0x12/0xc0 [ 153.619771][ T9081] ? lock_release+0x4e2/0x6f0 [ 153.621472][ T9081] ? get_pid_task+0xfc/0x250 [ 153.623152][ T9081] ___sys_sendmsg+0x135/0x1e0 [ 153.624850][ T9081] ? get_pid_task+0x35/0x250 [ 153.626528][ T9081] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.628378][ T9081] ? lock_release+0x4e2/0x6f0 [ 153.630062][ T9081] ? __pfx_lock_release+0x10/0x10 [ 153.631865][ T9081] ? trace_lock_acquire+0x14e/0x1f0 [ 153.633726][ T9081] ? __fget_files+0x206/0x3a0 [ 153.635428][ T9081] __sys_sendmsg+0x16e/0x220 [ 153.637140][ T9081] ? __pfx___sys_sendmsg+0x10/0x10 [ 153.638998][ T9081] ? rcu_is_watching+0x12/0xc0 [ 153.640727][ T9081] __do_fast_syscall_32+0x73/0x120 [ 153.642587][ T9081] do_fast_syscall_32+0x32/0x80 [ 153.644328][ T9081] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.646601][ T9081] RIP: 0023:0xf7fc1579 [ 153.648069][ T9081] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 153.654894][ T9081] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 153.657892][ T9081] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000300 [ 153.660716][ T9081] RDX: 0000000004004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.663577][ T9081] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 153.666421][ T9081] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 153.669244][ T9081] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.672081][ T9081] [ 153.777263][ T9089] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 154.002443][ T9091] syz.2.789: attempt to access beyond end of device [ 154.002443][ T9091] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 154.233125][ T9101] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 154.507957][ T9106] Bluetooth: hci4: Frame reassembly failed (-84) [ 154.514882][ T1135] Bluetooth: hci4: Frame reassembly failed (-84) [ 154.520332][ T9107] syz.4.792: attempt to access beyond end of device [ 154.520332][ T9107] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 154.540134][ T9109] syz.1.793: attempt to access beyond end of device [ 154.540134][ T9109] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 154.644054][ T9111] tls_set_device_offload_rx: netdev not found [ 155.024895][ T5943] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 155.499773][ T9132] netlink: 24 bytes leftover after parsing attributes in process `syz.4.801'. [ 155.505684][ T9132] kernel profiling enabled (shift: 0) [ 156.381843][ T9140] team_slave_0: entered promiscuous mode [ 156.383413][ T9140] team_slave_1: entered promiscuous mode [ 156.386037][ T9140] macsec1: entered promiscuous mode [ 156.387463][ T9140] team0: entered promiscuous mode [ 156.388928][ T9140] macsec1: entered allmulticast mode [ 156.390307][ T9140] team0: entered allmulticast mode [ 156.391654][ T9140] team_slave_0: entered allmulticast mode [ 156.393117][ T9140] team_slave_1: entered allmulticast mode [ 156.395217][ T9140] team0: Device macsec1 is already an upper device of the team interface [ 156.397919][ T9140] team0: left allmulticast mode [ 156.399209][ T9140] team_slave_0: left allmulticast mode [ 156.400618][ T9140] team_slave_1: left allmulticast mode [ 156.402040][ T9140] team0: left promiscuous mode [ 156.403428][ T9140] team_slave_0: left promiscuous mode [ 156.404898][ T9140] team_slave_1: left promiscuous mode [ 156.544789][ T5309] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 156.544913][ T5943] Bluetooth: hci4: command 0x1003 tx timeout [ 156.643948][ T9146] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 157.042794][ T9160] FAULT_INJECTION: forcing a failure. [ 157.042794][ T9160] name failslab, interval 1, probability 0, space 0, times 0 [ 157.046656][ T9160] CPU: 1 UID: 0 PID: 9160 Comm: syz.4.808 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 157.049367][ T9160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.052144][ T9160] Call Trace: [ 157.053015][ T9160] [ 157.053790][ T9160] dump_stack_lvl+0x16c/0x1f0 [ 157.055053][ T9160] should_fail_ex+0x497/0x5b0 [ 157.056353][ T9160] ? fs_reclaim_acquire+0xae/0x150 [ 157.057919][ T9160] should_failslab+0xc2/0x120 [ 157.059170][ T9160] __kmalloc_noprof+0xce/0x4f0 [ 157.060423][ T9160] ? copy_splice_read+0x1a8/0xb90 [ 157.061757][ T9160] copy_splice_read+0x1a8/0xb90 [ 157.063040][ T9160] ? rcu_is_watching+0x12/0xc0 [ 157.064482][ T9160] ? __pfx_copy_splice_read+0x10/0x10 [ 157.066068][ T9160] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 157.067474][ T9160] ? lockdep_set_lock_cmp_fn+0x12a/0x1c0 [ 157.068943][ T9160] ? __pfx_copy_splice_read+0x10/0x10 [ 157.070360][ T9160] do_splice_read+0x282/0x370 [ 157.071598][ T9160] splice_direct_to_actor+0x2a4/0xa40 [ 157.072983][ T9160] ? __pfx_direct_splice_actor+0x10/0x10 [ 157.074444][ T9160] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 157.076001][ T9160] ? lock_release+0x4e2/0x6f0 [ 157.077225][ T9160] ? __fget_files+0x1fc/0x3a0 [ 157.078462][ T9160] do_splice_direct+0x178/0x250 [ 157.079747][ T9160] ? __pfx_do_splice_direct+0x10/0x10 [ 157.081153][ T9160] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 157.082694][ T9160] ? bpf_lsm_file_permission+0x9/0x10 [ 157.084095][ T9160] ? security_file_permission+0x71/0x210 [ 157.085551][ T9160] do_sendfile+0xaed/0xe30 [ 157.086741][ T9160] ? __pfx_do_sendfile+0x10/0x10 [ 157.088036][ T9160] ? ksys_write+0x1a3/0x250 [ 157.089226][ T9160] ? ksys_write+0x1ad/0x250 [ 157.090425][ T9160] __ia32_compat_sys_sendfile+0x1e7/0x230 [ 157.091910][ T9160] ? ksys_write+0x1ba/0x250 [ 157.093104][ T9160] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 157.094730][ T9160] ? rcu_is_watching+0x12/0xc0 [ 157.096002][ T9160] __do_fast_syscall_32+0x73/0x120 [ 157.097332][ T9160] do_fast_syscall_32+0x32/0x80 [ 157.098618][ T9160] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.100280][ T9160] RIP: 0023:0xf7f53579 [ 157.101358][ T9160] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 157.106334][ T9160] RSP: 002b:00000000f506455c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 157.108500][ T9160] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000009 [ 157.110553][ T9160] RDX: 0000000000000000 RSI: 00000000fffffffe RDI: 0000000000000000 [ 157.112598][ T9160] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.114625][ T9160] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 157.116691][ T9160] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.118745][ T9160] [ 157.541734][ T9170] netlink: 'syz.3.811': attribute type 32 has an invalid length. [ 157.543841][ T9170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.811'. [ 157.546306][ T9170] netlink: 'syz.3.811': attribute type 32 has an invalid length. [ 157.589882][ T9178] team_slave_0: entered promiscuous mode [ 157.589956][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 157.589965][ T39] audit: type=1804 audit(1734910522.646:24): pid=9179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.813" name="/newroot/201/bus/bus" dev="overlay" ino=1133 res=1 errno=0 [ 157.591433][ T9178] team_slave_1: entered promiscuous mode [ 157.591462][ T9178] macsec1: entered promiscuous mode [ 157.593385][ T9179] evm: overlay not supported [ 157.599045][ T9178] team0: entered promiscuous mode [ 157.602909][ T9179] Invalid ELF header magic: != ELF [ 157.604351][ T9178] macsec1: entered allmulticast mode [ 157.607649][ T9178] team0: entered allmulticast mode [ 157.609148][ T9178] team_slave_0: entered allmulticast mode [ 157.610717][ T9178] team_slave_1: entered allmulticast mode [ 157.612797][ T9178] team0: Device macsec1 is already an upper device of the team interface [ 157.616460][ T9178] team0: left allmulticast mode [ 157.617804][ T9178] team_slave_0: left allmulticast mode [ 157.619341][ T9178] team_slave_1: left allmulticast mode [ 157.620847][ T9178] team0: left promiscuous mode [ 157.622324][ T9178] team_slave_0: left promiscuous mode [ 157.623807][ T9178] team_slave_1: left promiscuous mode [ 157.628621][ T9180] FAULT_INJECTION: forcing a failure. [ 157.628621][ T9180] name failslab, interval 1, probability 0, space 0, times 0 [ 157.632078][ T9180] CPU: 3 UID: 0 PID: 9180 Comm: syz.1.812 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 157.634900][ T9180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.637748][ T9180] Call Trace: [ 157.638646][ T9180] [ 157.639437][ T9180] dump_stack_lvl+0x16c/0x1f0 [ 157.640697][ T9180] should_fail_ex+0x497/0x5b0 [ 157.641981][ T9180] ? fs_reclaim_acquire+0xae/0x150 [ 157.643445][ T9180] should_failslab+0xc2/0x120 [ 157.644688][ T9180] __kmalloc_noprof+0xce/0x4f0 [ 157.645981][ T9180] ? strset_prepare_data+0x60f/0xb70 [ 157.647421][ T9180] strset_prepare_data+0x60f/0xb70 [ 157.648784][ T9180] ethnl_default_dumpit+0x650/0xd50 [ 157.650161][ T9180] genl_dumpit+0x122/0x230 [ 157.651365][ T9180] netlink_dump+0x53c/0xd00 [ 157.652594][ T9180] ? __pfx_netlink_dump+0x10/0x10 [ 157.653938][ T9180] ? rcu_is_watching+0x12/0xc0 [ 157.655364][ T9180] ? ethnl_default_start+0x2dd/0x420 [ 157.656976][ T9180] ? kasan_save_track+0x14/0x30 [ 157.658271][ T9180] ? __pfx_ethnl_default_start+0x10/0x10 [ 157.659761][ T9180] ? genl_start+0x67d/0x960 [ 157.660982][ T9180] __netlink_dump_start+0x6d9/0x980 [ 157.662381][ T9180] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 157.663884][ T9180] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 157.665525][ T9180] ? __pfx_genl_get_cmd+0x10/0x10 [ 157.666885][ T9180] ? __pfx_genl_start+0x10/0x10 [ 157.668178][ T9180] ? __pfx_genl_dumpit+0x10/0x10 [ 157.669496][ T9180] ? __pfx_genl_done+0x10/0x10 [ 157.670781][ T9180] ? kasan_save_track+0x14/0x30 [ 157.672092][ T9180] ? __kasan_slab_alloc+0x89/0x90 [ 157.673426][ T9180] ? __radix_tree_lookup+0x21f/0x2c0 [ 157.674855][ T9180] genl_rcv_msg+0x470/0x800 [ 157.676128][ T9180] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.677512][ T9180] ? __pfx_ethnl_default_start+0x10/0x10 [ 157.679006][ T9180] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 157.680514][ T9180] ? __pfx_ethnl_default_done+0x10/0x10 [ 157.682000][ T9180] netlink_rcv_skb+0x165/0x410 [ 157.683285][ T9180] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.684620][ T9180] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.686023][ T9180] ? down_read+0xc9/0x330 [ 157.687182][ T9180] ? __pfx_down_read+0x10/0x10 [ 157.688459][ T9180] ? netlink_deliver_tap+0x1ae/0xca0 [ 157.689855][ T9180] genl_rcv+0x28/0x40 [ 157.690928][ T9180] netlink_unicast+0x53c/0x7f0 [ 157.692220][ T9180] ? __pfx_netlink_unicast+0x10/0x10 [ 157.693633][ T9180] ? __phys_addr_symbol+0x30/0x80 [ 157.694984][ T9180] ? __check_object_size+0x488/0x710 [ 157.696437][ T9180] netlink_sendmsg+0x8b8/0xd70 [ 157.697711][ T9180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.699132][ T9180] ____sys_sendmsg+0x9ae/0xb40 [ 157.700411][ T9180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.701844][ T9180] ? get_compat_msghdr+0x11b/0x170 [ 157.703212][ T9180] ? rcu_is_watching+0x12/0xc0 [ 157.704512][ T9180] ? lock_release+0x4e2/0x6f0 [ 157.705760][ T9180] ? get_pid_task+0xfc/0x250 [ 157.707018][ T9180] ___sys_sendmsg+0x135/0x1e0 [ 157.708269][ T9180] ? get_pid_task+0x35/0x250 [ 157.709492][ T9180] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.710879][ T9180] ? lock_release+0x4e2/0x6f0 [ 157.712145][ T9180] ? __pfx_lock_release+0x10/0x10 [ 157.713484][ T9180] ? trace_lock_acquire+0x14e/0x1f0 [ 157.714880][ T9180] ? __fget_files+0x206/0x3a0 [ 157.716176][ T9180] __sys_sendmsg+0x16e/0x220 [ 157.717415][ T9180] ? __pfx___sys_sendmsg+0x10/0x10 [ 157.718950][ T9180] ? rcu_is_watching+0x12/0xc0 [ 157.720229][ T9180] __do_fast_syscall_32+0x73/0x120 [ 157.721629][ T9180] do_fast_syscall_32+0x32/0x80 [ 157.722943][ T9180] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.724616][ T9180] RIP: 0023:0xf712e579 [ 157.725696][ T9180] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 157.730779][ T9180] RSP: 002b:00000000f50ff55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 157.732968][ T9180] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000020000280 [ 157.735042][ T9180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.737129][ T9180] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.739216][ T9180] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 157.741299][ T9180] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.743393][ T9180] [ 157.882838][ T9187] FAULT_INJECTION: forcing a failure. [ 157.882838][ T9187] name failslab, interval 1, probability 0, space 0, times 0 [ 157.886201][ T9187] CPU: 1 UID: 0 PID: 9187 Comm: syz.4.816 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 157.888899][ T9187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.891789][ T9187] Call Trace: [ 157.892672][ T9187] [ 157.893452][ T9187] dump_stack_lvl+0x16c/0x1f0 [ 157.894701][ T9187] should_fail_ex+0x497/0x5b0 [ 157.896003][ T9187] ? fs_reclaim_acquire+0xae/0x150 [ 157.897383][ T9187] should_failslab+0xc2/0x120 [ 157.898634][ T9187] __kmalloc_cache_noprof+0x68/0x420 [ 157.900013][ T9187] ? __pfx___folio_start_writeback+0x10/0x10 [ 157.901587][ T9187] ? do_raw_spin_lock+0x12d/0x2c0 [ 157.902960][ T9187] netfs_buffer_make_space+0x432/0x6b0 [ 157.904372][ T9187] netfs_buffer_append_folio+0x298/0x360 [ 157.905836][ T9187] netfs_write_folio+0x540/0x1930 [ 157.907167][ T9187] netfs_writepages+0x29a/0x8f0 [ 157.908444][ T9187] ? __pfx_netfs_writepages+0x10/0x10 [ 157.909836][ T9187] ? tomoyo_path_perm+0x29c/0x480 [ 157.911165][ T9187] ? security_inode_getattr+0x116/0x290 [ 157.912675][ T9187] ? vfs_statx_path+0x2b/0x310 [ 157.913933][ T9187] ? __do_compat_sys_newlstat+0xb1/0x140 [ 157.915399][ T9187] ? __do_fast_syscall_32+0x73/0x120 [ 157.916807][ T9187] ? do_fast_syscall_32+0x32/0x80 [ 157.918120][ T9187] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.919851][ T9187] ? __pfx_netfs_writepages+0x10/0x10 [ 157.921256][ T9187] do_writepages+0x1b3/0x820 [ 157.922521][ T9187] ? __pfx_do_writepages+0x10/0x10 [ 157.923839][ T9187] ? lock_release+0x4e2/0x6f0 [ 157.925059][ T9187] ? wbc_attach_fdatawrite_inode+0x13a/0x190 [ 157.926637][ T9187] ? __pfx_lock_release+0x10/0x10 [ 157.927940][ T9187] ? do_raw_spin_lock+0x12d/0x2c0 [ 157.929255][ T9187] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 157.930647][ T9187] ? lock_acquire+0x2f/0xb0 [ 157.931829][ T9187] ? wbc_attach_fdatawrite_inode+0x24/0x190 [ 157.933387][ T9187] ? do_raw_spin_unlock+0x172/0x230 [ 157.934751][ T9187] ? _raw_spin_unlock+0x28/0x50 [ 157.936025][ T9187] filemap_fdatawrite_wbc+0x104/0x160 [ 157.937406][ T9187] __filemap_fdatawrite_range+0xb3/0xf0 [ 157.938861][ T9187] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 157.940474][ T9187] ? tomoyo_path_perm+0x29c/0x480 [ 157.941805][ T9187] ? end_current_label_crit_section+0xa8/0x1a0 [ 157.943444][ T9187] v9fs_vfs_getattr+0x305/0x400 [ 157.944722][ T9187] ? __pfx_v9fs_vfs_getattr+0x10/0x10 [ 157.946131][ T9187] vfs_getattr_nosec+0x2ae/0x370 [ 157.947572][ T9187] vfs_statx_path+0x52/0x310 [ 157.949312][ T9187] vfs_statx+0x11f/0x1c0 [ 157.950878][ T9187] ? __pfx_vfs_statx+0x10/0x10 [ 157.952456][ T9187] ? getname_flags.part.0+0x1c5/0x550 [ 157.954235][ T9187] __do_compat_sys_newlstat+0xb1/0x140 [ 157.956306][ T9187] ? __pfx___do_compat_sys_newlstat+0x10/0x10 [ 157.958543][ T9187] ? __pfx_ksys_write+0x10/0x10 [ 157.960333][ T9187] ? rcu_is_watching+0x12/0xc0 [ 157.962075][ T9187] ? trace_irq_enable.constprop.0+0xea/0x140 [ 157.964238][ T9187] __do_fast_syscall_32+0x73/0x120 [ 157.966103][ T9187] do_fast_syscall_32+0x32/0x80 [ 157.967882][ T9187] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.970150][ T9187] RIP: 0023:0xf7f53579 [ 157.971637][ T9187] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 157.978480][ T9187] RSP: 002b:00000000f508555c EFLAGS: 00000296 ORIG_RAX: 000000000000006b [ 157.981472][ T9187] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 0000000000000000 [ 157.984311][ T9187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.987141][ T9187] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.989909][ T9187] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 157.992747][ T9187] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.995579][ T9187] [ 157.997732][ T9187] ------------[ cut here ]------------ [ 157.999884][ T9187] WARNING: CPU: 1 PID: 9187 at lib/iov_iter.c:255 _copy_from_iter+0x39b/0x1400 [ 158.003042][ T9187] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 158.004283][ T9187] CPU: 1 UID: 0 PID: 9187 Comm: syz.4.816 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 158.009585][ T9187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 158.013281][ T9187] RIP: 0010:_copy_from_iter+0x39b/0x1400 [ 158.015375][ T9187] Code: 64 fd 0f 01 cb 4c 89 f9 4c 89 f7 48 89 de f3 a4 0f 1f 00 48 89 cb 0f 01 ca 4d 89 fc 49 29 cc e9 1d ff ff ff e8 46 5e 02 fd 90 <0f> 0b 90 e9 ae fd ff ff e8 38 5e 02 fd 89 de bf 01 00 00 00 e8 0c [ 158.022222][ T9187] RSP: 0018:ffffc90004f26fe8 EFLAGS: 00010293 [ 158.024663][ T9187] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8496ee28 [ 158.026801][ T9187] RDX: ffff8880230d0000 RSI: ffffffff8496f10a RDI: 0000000000000001 [ 158.029055][ T9187] RBP: 0000000000007fec R08: 0000000000000001 R09: 0000000000000000 [ 158.031123][ T9187] R10: 0000000000000000 R11: 00000000000a201e R12: ffff888069aeb6e0 [ 158.033176][ T9187] R13: ffff8880128cb490 R14: ffff888069aeb6e0 R15: 0000000000007fec [ 158.035322][ T9187] FS: 0000000000000000(0000) GS:ffff88802b500000(0063) knlGS:00000000f5085b40 [ 158.037873][ T9187] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 158.039620][ T9187] CR2: 00000000f5084fac CR3: 0000000061d3e000 CR4: 0000000000352ef0 [ 158.041709][ T9187] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 158.043771][ T9187] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 158.045862][ T9187] Call Trace: [ 158.046743][ T9187] [ 158.047515][ T9187] ? __warn+0xea/0x3c0 [ 158.048608][ T9187] ? _copy_from_iter+0x39b/0x1400 [ 158.050023][ T9187] ? report_bug+0x3c0/0x580 [ 158.051224][ T9187] ? handle_bug+0x54/0xa0 [ 158.052345][ T9187] ? exc_invalid_op+0x17/0x50 [ 158.053570][ T9187] ? asm_exc_invalid_op+0x1a/0x20 [ 158.055234][ T9187] ? _copy_from_iter+0xb8/0x1400 [ 158.057023][ T9187] ? _copy_from_iter+0x39a/0x1400 [ 158.058806][ T9187] ? _copy_from_iter+0x39b/0x1400 [ 158.060657][ T9187] ? _copy_from_iter+0x39a/0x1400 [ 158.062539][ T9187] ? __pfx_lock_release+0x10/0x10 [ 158.064379][ T9187] ? trace_lock_acquire+0x14e/0x1f0 [ 158.066432][ T9187] ? __virt_addr_valid+0x1a4/0x590 [ 158.068339][ T9187] ? __pfx__copy_from_iter+0x10/0x10 [ 158.070250][ T9187] ? __virt_addr_valid+0x1a4/0x590 [ 158.072174][ T9187] ? __virt_addr_valid+0x5e/0x590 [ 158.073974][ T9187] ? __phys_addr+0xc6/0x150 [ 158.075677][ T9187] ? __phys_addr_symbol+0x30/0x80 [ 158.077590][ T9187] ? __check_object_size+0x488/0x710 [ 158.079466][ T9187] p9pdu_vwritef+0x2cb/0x21d0 [ 158.081191][ T9187] ? p9pdu_writef+0xc4/0x100 [ 158.082975][ T9187] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 158.084911][ T9187] ? __pfx_p9_tag_alloc+0x10/0x10 [ 158.086718][ T9187] ? __pfx_lock_release+0x10/0x10 [ 158.088496][ T9187] ? trace_lock_acquire+0x14e/0x1f0 [ 158.090541][ T9187] ? is_bpf_text_address+0x30/0x1a0 [ 158.092427][ T9187] p9_client_prepare_req+0x244/0x4d0 [ 158.094327][ T9187] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 158.096511][ T9187] ? rcu_is_watching+0x12/0xc0 [ 158.098212][ T9187] ? lock_release+0x4e2/0x6f0 [ 158.099909][ T9187] ? stack_depot_save_flags+0x36d/0x9e0 [ 158.101898][ T9187] p9_client_rpc+0x1c3/0xc10 [ 158.103579][ T9187] ? __pfx_p9_client_rpc+0x10/0x10 [ 158.105490][ T9187] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 158.107588][ T9187] ? stack_depot_save_flags+0x36d/0x9e0 [ 158.109577][ T9187] ? trace_irq_enable.constprop.0+0xea/0x140 [ 158.111715][ T9187] ? kasan_save_stack+0x42/0x60 [ 158.113463][ T9187] ? kasan_save_stack+0x33/0x60 [ 158.115270][ T9187] ? kasan_save_track+0x14/0x30 [ 158.117048][ T9187] ? __kasan_kmalloc+0xaa/0xb0 [ 158.118676][ T9187] ? netfs_buffer_make_space+0x432/0x6b0 [ 158.120571][ T9187] ? netfs_buffer_append_folio+0x298/0x360 [ 158.122556][ T9187] ? netfs_write_folio+0x540/0x1930 [ 158.124326][ T9187] ? do_writepages+0x1b3/0x820 [ 158.125985][ T9187] ? filemap_fdatawrite_wbc+0x104/0x160 [ 158.127845][ T9187] ? __filemap_fdatawrite_range+0xb3/0xf0 [ 158.129764][ T9187] p9_client_write+0x31f/0x680 [ 158.131395][ T9187] ? rcu_is_watching+0x12/0xc0 [ 158.132877][ T9187] ? __pfx_p9_client_write+0x10/0x10 [ 158.134517][ T9187] ? __mod_node_page_state+0xde/0x1d0 [ 158.136244][ T9187] v9fs_issue_write+0xe2/0x180 [ 158.137730][ T9187] ? __pfx_v9fs_issue_write+0x10/0x10 [ 158.139577][ T9187] ? rcu_is_watching+0x12/0xc0 [ 158.141213][ T9187] ? trace_netfs_sreq+0x198/0x220 [ 158.142914][ T9187] netfs_do_issue_write+0x92/0x110 [ 158.144641][ T9187] netfs_advance_write+0x384/0xc80 [ 158.146488][ T9187] ? netfs_buffer_append_folio+0x276/0x360 [ 158.148444][ T9187] netfs_write_folio+0xc19/0x1930 [ 158.150132][ T9187] netfs_writepages+0x29a/0x8f0 [ 158.151781][ T9187] ? __pfx_netfs_writepages+0x10/0x10 [ 158.153571][ T9187] ? tomoyo_path_perm+0x29c/0x480 [ 158.155391][ T9187] ? security_inode_getattr+0x116/0x290 [ 158.157239][ T9187] ? vfs_statx_path+0x2b/0x310 [ 158.158869][ T9187] ? __do_compat_sys_newlstat+0xb1/0x140 [ 158.160776][ T9187] ? __do_fast_syscall_32+0x73/0x120 [ 158.162569][ T9187] ? do_fast_syscall_32+0x32/0x80 [ 158.164276][ T9187] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.166506][ T9187] ? __pfx_netfs_writepages+0x10/0x10 [ 158.168313][ T9187] do_writepages+0x1b3/0x820 [ 158.169874][ T9187] ? __pfx_do_writepages+0x10/0x10 [ 158.171622][ T9187] ? lock_release+0x4e2/0x6f0 [ 158.173219][ T9187] ? wbc_attach_fdatawrite_inode+0x13a/0x190 [ 158.175315][ T9187] ? __pfx_lock_release+0x10/0x10 [ 158.177040][ T9187] ? do_raw_spin_lock+0x12d/0x2c0 [ 158.178744][ T9187] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 158.180549][ T9187] ? lock_acquire+0x2f/0xb0 [ 158.182091][ T9187] ? wbc_attach_fdatawrite_inode+0x24/0x190 [ 158.184096][ T9187] ? do_raw_spin_unlock+0x172/0x230 [ 158.185893][ T9187] ? _raw_spin_unlock+0x28/0x50 [ 158.187537][ T9187] filemap_fdatawrite_wbc+0x104/0x160 [ 158.189340][ T9187] __filemap_fdatawrite_range+0xb3/0xf0 [ 158.191209][ T9187] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 158.193305][ T9187] ? tomoyo_path_perm+0x29c/0x480 [ 158.195055][ T9187] ? end_current_label_crit_section+0xa8/0x1a0 [ 158.197121][ T9187] v9fs_vfs_getattr+0x305/0x400 [ 158.198769][ T9187] ? __pfx_v9fs_vfs_getattr+0x10/0x10 [ 158.200566][ T9187] vfs_getattr_nosec+0x2ae/0x370 [ 158.202252][ T9187] vfs_statx_path+0x52/0x310 [ 158.203822][ T9187] vfs_statx+0x11f/0x1c0 [ 158.205304][ T9187] ? __pfx_vfs_statx+0x10/0x10 [ 158.206935][ T9187] ? getname_flags.part.0+0x1c5/0x550 [ 158.208785][ T9187] __do_compat_sys_newlstat+0xb1/0x140 [ 158.210678][ T9187] ? __pfx___do_compat_sys_newlstat+0x10/0x10 [ 158.212731][ T9187] ? __pfx_ksys_write+0x10/0x10 [ 158.214384][ T9187] ? rcu_is_watching+0x12/0xc0 [ 158.216038][ T9187] ? trace_irq_enable.constprop.0+0xea/0x140 [ 158.218060][ T9187] __do_fast_syscall_32+0x73/0x120 [ 158.219793][ T9187] do_fast_syscall_32+0x32/0x80 [ 158.221452][ T9187] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.223577][ T9187] RIP: 0023:0xf7f53579 [ 158.224993][ T9187] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 158.231496][ T9187] RSP: 002b:00000000f508555c EFLAGS: 00000296 ORIG_RAX: 000000000000006b [ 158.234349][ T9187] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 0000000000000000 [ 158.237102][ T9187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.239749][ T9187] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.242406][ T9187] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 158.245083][ T9187] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.247745][ T9187] [ 158.248804][ T9187] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 158.251281][ T9187] CPU: 1 UID: 0 PID: 9187 Comm: syz.4.816 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 158.254806][ T9187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 158.258382][ T9187] Call Trace: [ 158.259510][ T9187] [ 158.260503][ T9187] dump_stack_lvl+0x3d/0x1f0 [ 158.262075][ T9187] panic+0x71d/0x800 [ 158.263406][ T9187] ? __pfx_panic+0x10/0x10 [ 158.264918][ T9187] ? show_trace_log_lvl+0x29d/0x3d0 [ 158.266691][ T9187] ? check_panic_on_warn+0x1f/0xb0 [ 158.268416][ T9187] ? _copy_from_iter+0x39b/0x1400 [ 158.270110][ T9187] check_panic_on_warn+0xab/0xb0 [ 158.271786][ T9187] __warn+0xf6/0x3c0 [ 158.273106][ T9187] ? _copy_from_iter+0x39b/0x1400 [ 158.274808][ T9187] report_bug+0x3c0/0x580 [ 158.276282][ T9187] handle_bug+0x54/0xa0 [ 158.277686][ T9187] exc_invalid_op+0x17/0x50 [ 158.279230][ T9187] asm_exc_invalid_op+0x1a/0x20 [ 158.280886][ T9187] RIP: 0010:_copy_from_iter+0x39b/0x1400 [ 158.282769][ T9187] Code: 64 fd 0f 01 cb 4c 89 f9 4c 89 f7 48 89 de f3 a4 0f 1f 00 48 89 cb 0f 01 ca 4d 89 fc 49 29 cc e9 1d ff ff ff e8 46 5e 02 fd 90 <0f> 0b 90 e9 ae fd ff ff e8 38 5e 02 fd 89 de bf 01 00 00 00 e8 0c [ 158.289195][ T9187] RSP: 0018:ffffc90004f26fe8 EFLAGS: 00010293 [ 158.291235][ T9187] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8496ee28 [ 158.293881][ T9187] RDX: ffff8880230d0000 RSI: ffffffff8496f10a RDI: 0000000000000001 [ 158.296529][ T9187] RBP: 0000000000007fec R08: 0000000000000001 R09: 0000000000000000 [ 158.299176][ T9187] R10: 0000000000000000 R11: 00000000000a201e R12: ffff888069aeb6e0 [ 158.301818][ T9187] R13: ffff8880128cb490 R14: ffff888069aeb6e0 R15: 0000000000007fec [ 158.304478][ T9187] ? _copy_from_iter+0xb8/0x1400 [ 158.306147][ T9187] ? _copy_from_iter+0x39a/0x1400 [ 158.307859][ T9187] ? _copy_from_iter+0x39a/0x1400 [ 158.309542][ T9187] ? __pfx_lock_release+0x10/0x10 [ 158.311243][ T9187] ? trace_lock_acquire+0x14e/0x1f0 [ 158.312980][ T9187] ? __virt_addr_valid+0x1a4/0x590 [ 158.314712][ T9187] ? __pfx__copy_from_iter+0x10/0x10 [ 158.316476][ T9187] ? __virt_addr_valid+0x1a4/0x590 [ 158.318199][ T9187] ? __virt_addr_valid+0x5e/0x590 [ 158.319895][ T9187] ? __phys_addr+0xc6/0x150 [ 158.321443][ T9187] ? __phys_addr_symbol+0x30/0x80 [ 158.323148][ T9187] ? __check_object_size+0x488/0x710 [ 158.324939][ T9187] p9pdu_vwritef+0x2cb/0x21d0 [ 158.326557][ T9187] ? p9pdu_writef+0xc4/0x100 [ 158.328122][ T9187] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 158.329838][ T9187] ? __pfx_p9_tag_alloc+0x10/0x10 [ 158.331544][ T9187] ? __pfx_lock_release+0x10/0x10 [ 158.333224][ T9187] ? trace_lock_acquire+0x14e/0x1f0 [ 158.334982][ T9187] ? is_bpf_text_address+0x30/0x1a0 [ 158.336749][ T9187] p9_client_prepare_req+0x244/0x4d0 [ 158.338538][ T9187] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 158.340499][ T9187] ? rcu_is_watching+0x12/0xc0 [ 158.342135][ T9187] ? lock_release+0x4e2/0x6f0 [ 158.343719][ T9187] ? stack_depot_save_flags+0x36d/0x9e0 [ 158.345574][ T9187] p9_client_rpc+0x1c3/0xc10 [ 158.347167][ T9187] ? __pfx_p9_client_rpc+0x10/0x10 [ 158.348895][ T9187] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 158.350862][ T9187] ? stack_depot_save_flags+0x36d/0x9e0 [ 158.352726][ T9187] ? trace_irq_enable.constprop.0+0xea/0x140 [ 158.354743][ T9187] ? kasan_save_stack+0x42/0x60 [ 158.356404][ T9187] ? kasan_save_stack+0x33/0x60 [ 158.358039][ T9187] ? kasan_save_track+0x14/0x30 [ 158.359416][ T9187] ? __kasan_kmalloc+0xaa/0xb0 [ 158.360665][ T9187] ? netfs_buffer_make_space+0x432/0x6b0 [ 158.362138][ T9187] ? netfs_buffer_append_folio+0x298/0x360 [ 158.363674][ T9187] ? netfs_write_folio+0x540/0x1930 [ 158.365065][ T9187] ? do_writepages+0x1b3/0x820 [ 158.366355][ T9187] ? filemap_fdatawrite_wbc+0x104/0x160 [ 158.367798][ T9187] ? __filemap_fdatawrite_range+0xb3/0xf0 [ 158.369287][ T9187] p9_client_write+0x31f/0x680 [ 158.370556][ T9187] ? rcu_is_watching+0x12/0xc0 [ 158.371817][ T9187] ? __pfx_p9_client_write+0x10/0x10 [ 158.373209][ T9187] ? __mod_node_page_state+0xde/0x1d0 [ 158.374636][ T9187] v9fs_issue_write+0xe2/0x180 [ 158.375909][ T9187] ? __pfx_v9fs_issue_write+0x10/0x10 [ 158.377315][ T9187] ? rcu_is_watching+0x12/0xc0 [ 158.378587][ T9187] ? trace_netfs_sreq+0x198/0x220 [ 158.379910][ T9187] netfs_do_issue_write+0x92/0x110 [ 158.381257][ T9187] netfs_advance_write+0x384/0xc80 [ 158.382610][ T9187] ? netfs_buffer_append_folio+0x276/0x360 [ 158.384134][ T9187] netfs_write_folio+0xc19/0x1930 [ 158.385473][ T9187] netfs_writepages+0x29a/0x8f0 [ 158.386799][ T9187] ? __pfx_netfs_writepages+0x10/0x10 [ 158.388205][ T9187] ? tomoyo_path_perm+0x29c/0x480 [ 158.389530][ T9187] ? security_inode_getattr+0x116/0x290 [ 158.390986][ T9187] ? vfs_statx_path+0x2b/0x310 [ 158.392247][ T9187] ? __do_compat_sys_newlstat+0xb1/0x140 [ 158.393726][ T9187] ? __do_fast_syscall_32+0x73/0x120 [ 158.395110][ T9187] ? do_fast_syscall_32+0x32/0x80 [ 158.396459][ T9187] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.398139][ T9187] ? __pfx_netfs_writepages+0x10/0x10 [ 158.399548][ T9187] do_writepages+0x1b3/0x820 [ 158.400771][ T9187] ? __pfx_do_writepages+0x10/0x10 [ 158.402105][ T9187] ? lock_release+0x4e2/0x6f0 [ 158.403359][ T9187] ? wbc_attach_fdatawrite_inode+0x13a/0x190 [ 158.404931][ T9187] ? __pfx_lock_release+0x10/0x10 [ 158.406247][ T9187] ? do_raw_spin_lock+0x12d/0x2c0 [ 158.407576][ T9187] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 158.408980][ T9187] ? lock_acquire+0x2f/0xb0 [ 158.410170][ T9187] ? wbc_attach_fdatawrite_inode+0x24/0x190 [ 158.411721][ T9187] ? do_raw_spin_unlock+0x172/0x230 [ 158.413076][ T9187] ? _raw_spin_unlock+0x28/0x50 [ 158.414370][ T9187] filemap_fdatawrite_wbc+0x104/0x160 [ 158.415775][ T9187] __filemap_fdatawrite_range+0xb3/0xf0 [ 158.417233][ T9187] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 158.418876][ T9187] ? tomoyo_path_perm+0x29c/0x480 [ 158.420223][ T9187] ? end_current_label_crit_section+0xa8/0x1a0 [ 158.421845][ T9187] v9fs_vfs_getattr+0x305/0x400 [ 158.423151][ T9187] ? __pfx_v9fs_vfs_getattr+0x10/0x10 [ 158.424561][ T9187] vfs_getattr_nosec+0x2ae/0x370 [ 158.425868][ T9187] vfs_statx_path+0x52/0x310 [ 158.427095][ T9187] vfs_statx+0x11f/0x1c0 [ 158.428218][ T9187] ? __pfx_vfs_statx+0x10/0x10 [ 158.429484][ T9187] ? getname_flags.part.0+0x1c5/0x550 [ 158.430903][ T9187] __do_compat_sys_newlstat+0xb1/0x140 [ 158.432329][ T9187] ? __pfx___do_compat_sys_newlstat+0x10/0x10 [ 158.433922][ T9187] ? __pfx_ksys_write+0x10/0x10 [ 158.435206][ T9187] ? rcu_is_watching+0x12/0xc0 [ 158.436494][ T9187] ? trace_irq_enable.constprop.0+0xea/0x140 [ 158.438064][ T9187] __do_fast_syscall_32+0x73/0x120 [ 158.439423][ T9187] do_fast_syscall_32+0x32/0x80 [ 158.440710][ T9187] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.442378][ T9187] RIP: 0023:0xf7f53579 [ 158.443450][ T9187] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 158.448441][ T9187] RSP: 002b:00000000f508555c EFLAGS: 00000296 ORIG_RAX: 000000000000006b [ 158.450652][ T9187] RAX: ffffffffffffffda RBX: 00000000200002c0 RCX: 0000000000000000 [ 158.452704][ T9187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.454769][ T9187] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.456844][ T9187] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 158.458908][ T9187] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.460969][ T9187] [ 158.462370][ T9187] Kernel Offset: disabled [ 158.463506][ T9187] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:35:23 Registers: info registers vcpu 0 CPU#0 RAX=00000000008e5dac RBX=0000000000000000 RCX=ffffffff8b1a3819 RDX=ffffed1005686fee RSI=ffffffff8bb16f40 RDI=ffffffff81702e79 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20 R8 =0000000000000000 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901ce4d0 R15=0000000000000000 RIP=ffffffff8b1a4bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020000000 CR3=00000000646f2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000004e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85142e65 RDI=ffffffff9a6672c0 RBP=ffffffff9a667280 RSP=ffffc90004f26948 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552031203a555043 R12=0000000000000000 R13=000000000000004e R14=ffffffff85142e00 R15=0000000000000000 RIP=ffffffff85142e8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5084fac CR3=0000000061d3e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81d2c692 RDX=ffff8880218ec880 RSI=0000000000000000 RDI=0000000000000005 RBP=ffffea0001ce62c0 RSP=ffffc900035af768 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffffc900035af858 R14=0000000000000001 R15=ffff88807ffd6540 RIP=ffffffff81995012 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020000000 CR3=0000000061d3e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffffea0001ff8380 RCX=ffffffff81d36773 RDX=1ffffd40003ff070 RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc900035af788 R8 =0000000000000000 R9 =fffff940003ff070 R10=ffffea0001ff8387 R11=0000000000000000 R12=ffff8880404e8048 R13=0000000000020101 R14=0000000000000001 R15=ffff88807ffd6540 RIP=ffffffff81995130 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020000000 CR3=00000000629ac000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000