last executing test programs: 3.170071265s ago: executing program 2 (id=1777): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x8dff, 0xd, 0x0, 0x0, r1, &(0x7f0000000080)='=', 0x11}]) 3.009820908s ago: executing program 2 (id=1779): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) mmap(&(0x7f0000485000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r0, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 2.897641859s ago: executing program 2 (id=1780): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r5, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000240)={"6257dae775af93aff28b7494ac087c229e941ca830c18a911b75938b9ff8608c", r4}) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300006f37709d8500000006000000950d00000000000002c18d52a173c9003ba03b35a997809361d86a3a0e440616dfa371fbfbd93d4eeb5bc3fa68a923436a027e95e6ad22dc13090e078cbff0abed5ee95e32ed9d384bf21c379571b694d39b92756cda77c5f6aa74b3e7a0ee92590755460b9b68f30914731f26df175c3e9ce0e47b54674ac70c3af9f89020e8d4e65a2c39a7a84a51a2b3356a5c5c8980"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = syz_open_procfs(r1, &(0x7f0000000000)='personality\x00') ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000002500)=0x1b) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x8, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1aed6e850ecb3421143c5c4ded0f06affc524dcf3208272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520bd8ac8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284abe90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695efbd649f42f310859122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef7204a12cece59181fcb5bad8c24bd9f8f78d17ab82831325501e80d899e9252f99d3a2666343392fda11504800f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd60ba0f013139929ccfec965c0c769785a4d2333dba1f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1338688ba782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c4cbfcb11a90139264a9ee8081973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) 2.351764962s ago: executing program 0 (id=1782): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000010000000000000000007f00000100000000000000000000000000000000000000000000ffff0a01010100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ffffffff0000000000000004000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffa6ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c71b79750000000000000000000000000000000000000000000000feffffff25bd700000000000020001000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000e9ffffff000000000000000000001c001c00000000000000000000000000000000000000000000000100"], 0x150}}, 0x8080) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x1, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r6, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = getpid() fcntl$setownex(r7, 0xf, &(0x7f0000000100)={0x2, r8}) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r6, 0x8, r9) truncate(&(0x7f0000000040)='./file0\x00', 0x0) syz_fuse_handle_req(r1, &(0x7f0000002140)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0xffc, {0x3, 0x1, 0x9, 0x0, 0x8, 0xe, {0x6, 0x3, 0xfffffffffffffffa, 0x3, 0x6, 0x2000000000000000, 0x0, 0x0, 0x0, 0x1000, 0x4, 0x0, 0xffffffffffffffff, 0x100}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r3}, 0x50) sched_setaffinity(r4, 0x8, &(0x7f00000015c0)=0xe) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008"], 0x38}}, 0x0) recvmsg$can_bcm(r10, &(0x7f0000001580)={&(0x7f0000000140)=@phonet, 0x80, &(0x7f0000001540)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000280)=""/182, 0xb6}, {&(0x7f0000000340)=""/127, 0x7f}, {&(0x7f0000000200)=""/25, 0x19}, {&(0x7f0000001500)=""/14, 0xe}], 0x5}, 0x2102) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r11, 0x5) accept4(r11, 0x0, 0x0, 0x800) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r12, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 2.010058948s ago: executing program 2 (id=1783): r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x80, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000892f16bb774fb35f000000000000000000d30ca651ab58c85f66000000000000"], 0x50) close(0x3) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0x6804, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x7) r8 = syz_open_dev$video(&(0x7f0000001080), 0x7fff, 0x80) ioctl$VIDIOC_S_PARM(r8, 0xc0cc5616, &(0x7f0000000000)={0x9, @capture={0x0, 0x1, {0x34278ff2}, 0x10, 0x6}}) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2) 1.97609577s ago: executing program 3 (id=1784): syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040e060707145f07490840eb0d61f8259369c0ae885cd7fe4c59fcac0217122681a48e73209c91fa3ae307bf44b95d3dde529ab34810cd7913a344b71e747c66c767ddf1075cb82b798f684853a25c8745df292f1549bdef37bb6628fd63eac1426b2e98f0a3000000"], 0xf) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x1ffffffffffffe24, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xa, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7ba0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x74) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000300)=[{&(0x7f0000000000)='|', 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{&(0x7f0000000340)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000580), 0x0, &(0x7f0000001500)=""/4096, 0x1000}, 0x8}], 0x1, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) socket$xdp(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r7, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r6, 0x407, 0x100004) write$eventfd(r6, &(0x7f0000000240)=0x3, 0x8) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000000)=""/170) 1.930082639s ago: executing program 0 (id=1785): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x4}}, 0x50) rmdir(&(0x7f0000000200)='./file0/../file0/file0\x00') r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180), &(0x7f00000001c0)) socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_create(0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) 1.929655839s ago: executing program 2 (id=1786): fanotify_init(0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd74) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x5, 0x1, 0x4c}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x1, r0, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r1, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 1.860194041s ago: executing program 0 (id=1787): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x81800) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x104011, r0, 0xfff000) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) (async) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000140), 0x4) 1.859752247s ago: executing program 0 (id=1788): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x11b801, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000300)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) clock_settime(0x4, &(0x7f0000000280)) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) getpid() syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2, 0xa}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20440, 0x0) openat$ppp(0xffffff9c, &(0x7f00000000c0), 0x102, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) 1.787889887s ago: executing program 0 (id=1789): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f0000000400)={0x107345080, 0x0, 0x0, &(0x7f0000000140), {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000010000100000000000000000001000000000a00000447000c00f3bbd81490f5b7d4971bb845c4894d5f927499fead8eff34e8bd9786fb11757c38daa496016159c046ad9375502563dba8bcec24cdea86fa0e267f94f6a04031be89bd00140000001100010000000000000000000ad4916400000a00"/132], 0x84}, 0x1, 0x0, 0x0, 0x4801}, 0x10) 1.78026601s ago: executing program 2 (id=1790): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x62040080) socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f0000000040)={0x2, 0x6, 0x5991, 0x7, 0x2, 0xc, 0x3, 0xa}, &(0x7f0000000080)={0x8000000000000000, 0x4, 0xff, 0xbc, 0xfffffffffffffffc, 0x1, 0x5, 0x3}, &(0x7f00000000c0)={0x7, 0x8, 0x1, 0x3, 0x3, 0xffffffff, 0x10001, 0xa193}, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3, 0x4]}, 0x8}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x8, 0x0, 0x20}, 0x14}, 0x1, 0x0, 0x0, 0x40804}, 0x20040040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="040000000a004e2300000002fe8000000000000000000000000000aa070000000000000000000000000000000000000000000000190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a004e2100000040fe80000000000000000000000000003e018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/268], 0x10c) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d10009050700003e5b31a388811b80b38b2c6d9845a4bfd6b9e0794befd8e4000000000905899be5ca1edfe25b76283d8f1fc2e9ea47065b4ceab24c6f98931e8b41"], 0x0) mknod$loop(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x134, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x120, 0x1, [@m_ct={0xd4, 0x1c, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7d, 0x20000000, 0x0, 0xf}}]}, {0x93, 0x6, "c84dccf2d7bc25d34106023d140eac8871affc62e621a39e68509a95f1b7b7860a2ded619edaebbf3655c62a9d8a4c8f6306342f34f3f3d5800b5b6edc9778996519a4976bd0243747db971044187ce21a5d67580ed13de5f89c40132497fa5de731b692f2d036284815812cf25010d9e515a091066a2f48e9f7794200005273fdb43e1fc2c823bdd51cd316a66ad0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x804}, 0x0) shmget$private(0x0, 0x2000, 0x20, &(0x7f0000973000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000000c0)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000140)=0xa5b, 0x12) 1.066827215s ago: executing program 3 (id=1791): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'wg1\x00', 0x40001}, 0x18) io_uring_setup(0x3936, 0x0) setpriority(0x2, 0x0, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x84, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_SDP={0x60, 0x13, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [{0xb, 0x1, 'multiq\x00'}, {0x5, 0x1, ','}, {0x8, 0x1, 'syz\x00'}]}, {0x1c, 0x0, 0x0, 0x1, [{0x6, 0x1, '\\#'}, {0x10, 0x1, '/dev/nullb0\x00'}]}, {0x20, 0x0, 0x0, 0x1, [{0x4}, {0x11, 0x1, '/dev/net/tun\x00'}, {0x4}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x8040}, 0x4004894) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xd, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0xfffffffffffffffd, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xa, 0x4}, {0x7, 0xfff1}, {0x5, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4044040) socket$kcm(0x11, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x0, 0xffffff01, 0x34324152, 0x1, 0x0, [{}, {0xfffffffc}, {}, {0x1}, {0x0, 0x7}, {0xfffffffa, 0x6}, {0x0, 0xd65}], 0x6, 0x0, 0x8, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102376, 0x18fe8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f00000003c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x2400c840}, 0x44800) r6 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) io_uring_setup(0x63d8, &(0x7f00000002c0)={0x0, 0x3, 0x400, 0x7ffff, 0xfffffffc, 0x0, r6}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) write$P9_RSTATu(r6, &(0x7f0000000740)=ANY=[], 0x5a) io_submit(r8, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r7, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) 888.535294ms ago: executing program 0 (id=1792): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000680), r0) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c20000000180c200000086dd6001012000083afffe8000020000000000000000000000bbff0200000000000000000000907800000000"], 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r1 = openat$adsp1(0xffffff9c, &(0x7f0000000080), 0x30000, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) ppoll(&(0x7f0000000280)=[{r2, 0x20}], 0x1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000b40)=[{&(0x7f0000000440)="5c8e0a3af6172476eca45f65f61bd56b54fed2950c8a8f8e4e2c92b229b95311469385e83eb42c56de1cf33ed0122b781081c2c5363d29795aa9deaab1d2e1d1130e00c258239e88c43cb223c9baaeaeb1952fee652e9074a8a8a2db0b34f460450bff18a7fb001227093d9e6d1fb760b74bdf68fce2542ed6c51cc850738cb8a9394d5777750e62fb7b9e34241fee5dcdecc0e3bb04e3611cfd42bb2cd2bd75a37a572c33511a0d654b07b6b70bdabde54f2645bd087c25e53a8abf187abc796e31d780ba12f91d2dd80b47b79b92e50c87e6e15e7b73fed185b78859d2dc1c028f8f0b2ad780eb1fad76bfd787079c42a0a64feb4a1b4257426589af27e0bb713ab783a372f609d1be04a705d95698ca6ee32a313b1f2277d089f7a580ba2c010b096d44418dccc7a48345722dd066bd5ed2c7a46b9db8061964f5dab797acdd6d6b231ccba951715430f39566e86951fb797a0e51603ff7226db6e0b76c5055c5bdf357c407e458f0f005082709447e32b3d0f660a8667e94bf3b37b7889c78b548811848967e8f664427a9b7d6508ffed4d0fa594a681ebf78158cff684fecdc46940a5671d4f4f56479afcb00"/443, 0x1bb}], 0x1) close_range(r1, r2, 0x0) r3 = syz_usb_connect(0x4, 0xf7, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r4, 0x0, 0x0) inotify_init1(0x800) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r6, 0x541b, 0x0) listen(r5, 0x3) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e32, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x2}}}}}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x90, 0x9, 0xa, 0x901, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2a}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x6c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}, {0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x34, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xb84b}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xb8}, 0x1, 0x0, 0x0, 0x20000}, 0x8000) 340.070124ms ago: executing program 1 (id=1794): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000544b4b1ee49d6be34ba01a5ca100"/41], 0x50) mkdir(0x0, 0xa1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@rand_addr=0x64010100, @in=@loopback, 0x4e23, 0x4, 0x2000, 0x2, 0x2, 0x0, 0x0, 0x6c, r1}, {0x4, 0x898a00000000000, 0xffff000, 0x5cbc, 0x3, 0x0, 0x9d6, 0x2}, {0x7, 0x7f, 0x4, 0x4b}, 0x9, 0x6e6bbe, 0x2, 0x1, 0x2, 0x2}, {{@in6=@mcast2, 0x4d3, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x3501, 0x0, 0x1, 0x6, 0x401, 0x5, 0xdc}}, 0xe4) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x1407, 0x400, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x3c}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0100000007ff"}) 270.382385ms ago: executing program 1 (id=1795): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x10, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x9d}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) fcntl$getownex(r2, 0x10, &(0x7f0000000280)={0x0, 0x0}) sched_setaffinity(r3, 0x8, &(0x7f0000000380)=0x100000001) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xf3) 269.999425ms ago: executing program 3 (id=1796): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x4c00000000000000, 0x0, 0x4881}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0)={0x5}, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20802}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}]}, 0x48}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x100000000, 0x1, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xeaf]}) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x1000003, @mcast2, 0x5}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 269.727358ms ago: executing program 1 (id=1797): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x11b801, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000300)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) clock_settime(0x4, &(0x7f0000000280)) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, 0x0, 0x0) close(0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) getpid() syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2, 0xa}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20440, 0x0) openat$ppp(0xffffff9c, &(0x7f00000000c0), 0x102, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) 190.149495ms ago: executing program 1 (id=1798): write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '[8(', 0xfe, 0x3a, 0x1, @mcast2, @local, {[@hopopts={0x1d, 0x12, '\x00', [@pad1, @generic={0xda, 0x8c, "9fd16f590a69f2e24c480ef1b4fdb335af21461a7020da189b037ca7c7cf57443131f5d1704add4de9da926a2158579daac6622cf950d6d10dc5a46fd490b233b03803a0843de47ba7fe2c8c2c97a3683ffe59bacd037253ee8c90cfc9db13095ee595dbd96c665034247c3400956b4669c7accdcb179dbe9e9ce98544a6030c0a4bb4105cd0f6098ace1dff"}]}], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x0, 0x0, "5a0e"}, {0x3, 0xa, "a8bc35349766f3bdd1c721dbf210513510d02c755f0fcb8bf90d8565966cf40167ff2d64e022b038b3f54eb38b64895ecb51ac724008c494df44b29a6ac4156ea282c3fa2f0770bfbcbb2faacc9bc240"}]}}}}}}}, 0x138) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000002000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b000300"], 0xfc}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 189.991521ms ago: executing program 1 (id=1799): sync() 166.284168ms ago: executing program 3 (id=1800): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x440101, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000140)=ANY=[@ANYRESHEX=r1, @ANYBLOB="6ebc5b2abcd019baeef75c3322381ede9a85e3b21c7a2bd2399d40b3bc9b86b424e8610c256f33fcde306d2a8d653d7176d5face0350b742ba16807f08b8e770e206e0add17c7054d0caa17392123351aefad408b73dfcf78d3c5d17e12d697734d3f7ca7cda480cb034aaf154146d5b22ebd9c662f32a06ffdadcdf841e18a6abd1224ee8004008325703000062", @ANYRES16=r1]) 118.779691ms ago: executing program 1 (id=1801): socket$nl_generic(0x10, 0x3, 0x10) syz_usbip_server_init(0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/67, 0x43}}], 0x1, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x286, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x5) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba800000", 0x2c}], 0x1}, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000280)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 118.489976ms ago: executing program 3 (id=1802): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) write$binfmt_aout(r4, &(0x7f0000000940)=ANY=[], 0xff2e) ioctl$TCFLSH(r4, 0x540b, 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x3c) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1f, 0x12, r0, 0x0) 0s ago: executing program 3 (id=1803): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x60e0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) kernel console output (not intermixed with test programs): 1 has an invalid length. [ 236.925043][T10543] bond2: entered promiscuous mode [ 236.927346][T10543] 8021q: adding VLAN 0 to HW filter on device bond2 [ 236.954805][T10543] 8021q: adding VLAN 0 to HW filter on device bond2 [ 236.957394][T10543] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 236.960800][T10543] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 236.973081][T10543] bond2: (slave ip6gre1): making interface the new active one [ 236.975604][T10543] ip6gre1: entered promiscuous mode [ 236.979757][T10543] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 237.477544][ T6009] usb 7-1: USB disconnect, device number 14 [ 237.703006][T10564] IPVS: set_ctl: invalid protocol: 204 10.1.1.0:20001 [ 237.835238][T10572] Invalid option length (1025206) for dns_resolver key [ 238.951359][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 238.951372][ T40] audit: type=1326 audit(2000000428.682:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10576 comm="syz.2.1276" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 238.959328][ T40] audit: type=1326 audit(2000000428.682:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10576 comm="syz.2.1276" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 239.094833][ T40] audit: type=1326 audit(2000000428.682:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10576 comm="syz.2.1276" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 239.101299][ T40] audit: type=1326 audit(2000000428.692:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10576 comm="syz.2.1276" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 239.107858][ T40] audit: type=1326 audit(2000000428.692:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10576 comm="syz.2.1276" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 239.113902][ T40] audit: type=1326 audit(2000000428.702:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10576 comm="syz.2.1276" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 239.120258][ T40] audit: type=1326 audit(2000000428.702:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10576 comm="syz.2.1276" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 239.126471][ T40] audit: type=1326 audit(2000000428.702:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10576 comm="syz.2.1276" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 239.132684][ T40] audit: type=1326 audit(2000000428.702:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10576 comm="syz.2.1276" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 239.138724][ T40] audit: type=1326 audit(2000000428.702:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10576 comm="syz.2.1276" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 239.245426][T10581] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.250529][T10581] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.405760][T10581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.417599][T10581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.492455][T10581] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.495900][T10581] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.499062][T10581] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.502244][T10581] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.691391][T10581] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.694836][T10581] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.697903][T10581] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.701095][T10581] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.778832][T10595] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 239.781002][T10595] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 239.785139][T10595] vhci_hcd vhci_hcd.0: Device attached [ 239.919244][T10607] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 240.026368][T10616] netlink: 'syz.3.1280': attribute type 10 has an invalid length. [ 240.237617][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.775557][T10596] vhci_hcd: connection closed [ 240.776894][ T65] vhci_hcd: stop threads [ 240.782720][ T65] vhci_hcd: release socket [ 240.785993][ T65] vhci_hcd: disconnect device [ 240.842563][ T6007] usb 43-1: new low-speed USB device number 13 using vhci_hcd [ 240.845328][ T6007] usb 43-1: enqueue for inactive port 0 [ 240.937134][ T6007] vhci_hcd: vhci_device speed not set [ 241.167388][T10637] netlink: 'syz.1.1285': attribute type 1 has an invalid length. [ 241.194038][T10637] bond2: entered promiscuous mode [ 241.196016][T10637] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.264053][T10637] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.266766][T10637] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 241.269791][T10637] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 241.277012][T10637] bond2: (slave ip6gre1): making interface the new active one [ 241.279183][T10637] ip6gre1: entered promiscuous mode [ 241.282945][T10637] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 241.498262][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1289'. [ 241.588894][T10647] syz.2.1291: attempt to access beyond end of device [ 241.588894][T10647] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 241.596189][T10647] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 242.040811][T10666] FAULT_INJECTION: forcing a failure. [ 242.040811][T10666] name failslab, interval 1, probability 0, space 0, times 0 [ 242.046828][T10666] CPU: 0 UID: 0 PID: 10666 Comm: syz.0.1296 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 242.046852][T10666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 242.046863][T10666] Call Trace: [ 242.046868][T10666] [ 242.046875][T10666] dump_stack_lvl+0x16c/0x1f0 [ 242.046904][T10666] should_fail_ex+0x50a/0x650 [ 242.046921][T10666] ? fs_reclaim_acquire+0xae/0x150 [ 242.046950][T10666] ? tomoyo_encode2+0x100/0x3e0 [ 242.046973][T10666] should_failslab+0xc2/0x120 [ 242.046990][T10666] __kmalloc_noprof+0xcb/0x510 [ 242.047015][T10666] ? d_absolute_path+0x137/0x1b0 [ 242.047034][T10666] ? rcu_is_watching+0x12/0xc0 [ 242.047053][T10666] tomoyo_encode2+0x100/0x3e0 [ 242.047079][T10666] tomoyo_encode+0x29/0x50 [ 242.047099][T10666] tomoyo_realpath_from_path+0x19d/0x720 [ 242.047127][T10666] tomoyo_path_number_perm+0x248/0x590 [ 242.047145][T10666] ? tomoyo_path_number_perm+0x235/0x590 [ 242.047167][T10666] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 242.047208][T10666] ? __pfx_lock_release+0x10/0x10 [ 242.047231][T10666] ? trace_lock_acquire+0x14e/0x1f0 [ 242.047254][T10666] ? lock_acquire+0x2f/0xb0 [ 242.047274][T10666] ? __fget_files+0x40/0x3a0 [ 242.047301][T10666] ? __fget_files+0x206/0x3a0 [ 242.047328][T10666] security_file_ioctl_compat+0x9b/0x240 [ 242.047352][T10666] __do_compat_sys_ioctl+0x4e/0x2c0 [ 242.047375][T10666] __do_fast_syscall_32+0x73/0x120 [ 242.047401][T10666] do_fast_syscall_32+0x32/0x80 [ 242.047424][T10666] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 242.047451][T10666] RIP: 0023:0xf73ee579 [ 242.047464][T10666] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 242.047481][T10666] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 242.047497][T10666] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000801c581f [ 242.047508][T10666] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 242.047518][T10666] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 242.047527][T10666] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 242.047537][T10666] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 242.047559][T10666] [ 242.047573][T10666] ERROR: Out of memory at tomoyo_realpath_from_path. [ 242.370327][T10672] syzkaller1: entered promiscuous mode [ 242.371908][T10672] syzkaller1: entered allmulticast mode [ 242.900144][T10678] netlink: 'syz.3.1301': attribute type 10 has an invalid length. [ 242.904848][T10678] netlink: 'syz.3.1301': attribute type 10 has an invalid length. [ 242.908905][T10678] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 243.351831][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1303'. [ 243.631806][T10699] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1304'. [ 243.676870][T10703] syzkaller1: entered promiscuous mode [ 243.678473][T10703] syzkaller1: entered allmulticast mode [ 243.693881][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.696150][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.931848][T10703] ptrace attach of "/syz-executor exec"[5950] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x0 [ 244.022093][T10707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.504626][T10715] trusted_key: encrypted_key: key user:syz not found [ 244.727335][T10728] block device autoloading is deprecated and will be removed. [ 244.945879][T10735] syzkaller1: entered promiscuous mode [ 244.947456][T10735] syzkaller1: entered allmulticast mode [ 245.227728][T10737] ptrace attach of "/syz-executor exec"[5941] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x0 [ 245.551807][T10740] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 245.641223][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1320'. [ 245.747794][T10754] No source specified [ 246.617271][T10777] kAFS: unable to lookup cell 'ayz@' [ 246.757613][T10783] FAULT_INJECTION: forcing a failure. [ 246.757613][T10783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.761471][T10783] CPU: 2 UID: 0 PID: 10783 Comm: syz.0.1330 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 246.761493][T10783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 246.761503][T10783] Call Trace: [ 246.761507][T10783] [ 246.761513][T10783] dump_stack_lvl+0x16c/0x1f0 [ 246.761540][T10783] should_fail_ex+0x50a/0x650 [ 246.761558][T10783] _copy_to_user+0x32/0xd0 [ 246.761577][T10783] drm_ioctl+0x5fe/0xc00 [ 246.761598][T10783] ? __pfx_drm_mode_list_lessees_ioctl+0x10/0x10 [ 246.761618][T10783] ? __pfx_drm_ioctl+0x10/0x10 [ 246.761650][T10783] drm_compat_ioctl+0x327/0x460 [ 246.761672][T10783] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 246.761691][T10783] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 246.761713][T10783] __do_fast_syscall_32+0x73/0x120 [ 246.761736][T10783] do_fast_syscall_32+0x32/0x80 [ 246.761756][T10783] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 246.761780][T10783] RIP: 0023:0xf73ee579 [ 246.761793][T10783] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 246.761807][T10783] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 246.761823][T10783] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01064c7 [ 246.761833][T10783] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 246.761842][T10783] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.761851][T10783] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 246.761860][T10783] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.761879][T10783] [ 246.851618][T10790] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 246.853476][T10790] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 246.856257][T10790] vhci_hcd vhci_hcd.0: Device attached [ 246.925922][T10799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1336'. [ 247.102506][ T8119] usb 39-1: new low-speed USB device number 9 using vhci_hcd [ 247.105306][ T5982] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 247.120457][T10802] netlink: 'syz.1.1333': attribute type 10 has an invalid length. [ 247.265564][ T5982] usb 5-1: not running at top speed; connect to a high speed hub [ 247.269389][ T5982] usb 5-1: config 1 has an invalid interface number: 142 but max is 2 [ 247.271725][ T5982] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.275213][ T5982] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.277663][ T5982] usb 5-1: config 1 has no interface number 0 [ 247.279674][ T5982] usb 5-1: config 1 interface 142 altsetting 5 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 247.283017][ T5982] usb 5-1: config 1 interface 142 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 247.286038][ T5982] usb 5-1: config 1 interface 142 altsetting 5 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 247.289059][ T5982] usb 5-1: config 1 interface 142 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 13 [ 247.292697][ T5982] usb 5-1: config 1 interface 142 has no altsetting 0 [ 247.296020][ T5982] usb 5-1: New USB device found, idVendor=0413, idProduct=6a04, bcdDevice=15.86 [ 247.298642][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.300949][ T5982] usb 5-1: Product: ї [ 247.302891][ T5982] usb 5-1: Manufacturer: ᤩ螋涃澷始ꕽ夌颐鄰粯슔ꛑ졇乲뱰࿠琵ꌐѽ촭ℑ먣㩢匌Ƿ贝ଃ뀦ꪈ᧸乼ቦ銜仸톥 [ 247.306925][ T5982] usb 5-1: SerialNumber: 갻꾛룘ℛ熻뺟㽠뜅Ⴡ操石蟵뼂裟泫卮 [ 247.517676][T10795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.522195][T10795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.538829][ T5982] usb 5-1: USB disconnect, device number 9 [ 247.796184][T10791] vhci_hcd: connection reset by peer [ 247.798447][ T12] vhci_hcd: stop threads [ 247.799568][ T12] vhci_hcd: release socket [ 247.800882][ T12] vhci_hcd: disconnect device [ 247.883636][T10812] FAULT_INJECTION: forcing a failure. [ 247.883636][T10812] name failslab, interval 1, probability 0, space 0, times 0 [ 247.888566][T10812] CPU: 1 UID: 0 PID: 10812 Comm: syz.2.1337 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 247.888587][T10812] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 247.888597][T10812] Call Trace: [ 247.888602][T10812] [ 247.888608][T10812] dump_stack_lvl+0x16c/0x1f0 [ 247.888635][T10812] should_fail_ex+0x50a/0x650 [ 247.888654][T10812] should_failslab+0xc2/0x120 [ 247.888670][T10812] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 247.888694][T10812] ? do_raw_spin_lock+0x12d/0x2c0 [ 247.888708][T10812] ? inet_bind2_bucket_create+0x36/0x590 [ 247.888726][T10812] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 247.888743][T10812] inet_bind2_bucket_create+0x36/0x590 [ 247.888763][T10812] __inet_hash_connect+0xfa4/0x1900 [ 247.888788][T10812] ? __pfx___inet6_check_established+0x10/0x10 [ 247.888812][T10812] ? __pfx___inet_hash_connect+0x10/0x10 [ 247.888839][T10812] tcp_v6_connect+0x12d0/0x20e0 [ 247.888857][T10812] ? stack_trace_save+0x95/0xd0 [ 247.888881][T10812] ? __pfx_tcp_v6_connect+0x10/0x10 [ 247.888900][T10812] ? kasan_save_stack+0x33/0x60 [ 247.888923][T10812] ? tcp_sendmsg_fastopen+0x23a/0x700 [ 247.888937][T10812] ? tcp_sendmsg_locked+0x2075/0x37c0 [ 247.888952][T10812] ? tcp_sendmsg+0x2e/0x50 [ 247.888965][T10812] ? inet6_sendmsg+0xb9/0x140 [ 247.888981][T10812] ? __sys_sendto+0x374/0x4f0 [ 247.889002][T10812] ? __ia32_sys_sendto+0xdd/0x1b0 [ 247.889037][T10812] ? __inet_stream_connect+0x3c7/0x1020 [ 247.889061][T10812] __inet_stream_connect+0x3c7/0x1020 [ 247.889089][T10812] ? __pfx___inet_stream_connect+0x10/0x10 [ 247.889123][T10812] tcp_sendmsg_fastopen+0x3d7/0x700 [ 247.889142][T10812] tcp_sendmsg_locked+0x2075/0x37c0 [ 247.889159][T10812] ? hlock_class+0x4e/0x130 [ 247.889180][T10812] ? mark_lock+0xb5/0xc60 [ 247.889198][T10812] ? __pfx___lock_acquire+0x10/0x10 [ 247.889221][T10812] ? __pfx_mark_lock+0x10/0x10 [ 247.889241][T10812] ? lock_acquire.part.0+0x11b/0x380 [ 247.889265][T10812] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 247.889281][T10812] ? tcp_sendmsg+0x20/0x50 [ 247.889294][T10812] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 247.889311][T10812] ? mark_held_locks+0x9f/0xe0 [ 247.889331][T10812] ? __local_bh_enable_ip+0xa4/0x120 [ 247.889356][T10812] tcp_sendmsg+0x2e/0x50 [ 247.889368][T10812] ? __pfx_tcp_sendmsg+0x10/0x10 [ 247.889382][T10812] inet6_sendmsg+0xb9/0x140 [ 247.889399][T10812] __sys_sendto+0x374/0x4f0 [ 247.889420][T10812] ? __pfx___sys_sendto+0x10/0x10 [ 247.889456][T10812] ? ksys_write+0x1ba/0x250 [ 247.889481][T10812] __ia32_sys_sendto+0xdd/0x1b0 [ 247.889499][T10812] ? lockdep_hardirqs_on+0x7c/0x110 [ 247.889518][T10812] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 247.889537][T10812] __do_fast_syscall_32+0x73/0x120 [ 247.889558][T10812] do_fast_syscall_32+0x32/0x80 [ 247.889578][T10812] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 247.889601][T10812] RIP: 0023:0xf7f48579 [ 247.889613][T10812] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 247.889627][T10812] RSP: 002b:00000000f502455c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 247.889641][T10812] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 247.889651][T10812] RDX: 0000000000000000 RSI: 0000000020000841 RDI: 0000000080b63fe4 [ 247.889659][T10812] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 247.889667][T10812] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 247.889676][T10812] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 247.889695][T10812] [ 248.133254][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 248.133266][ T40] audit: type=1326 audit(2000000437.932:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.0.1342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 248.140940][ T40] audit: type=1326 audit(2000000437.932:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.0.1342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 248.146452][ T40] audit: type=1326 audit(2000000437.932:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.0.1342" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 248.151751][ T40] audit: type=1326 audit(2000000437.932:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.0.1342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 248.157744][ T40] audit: type=1326 audit(2000000437.932:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.0.1342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 248.163247][ T40] audit: type=1326 audit(2000000437.932:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.0.1342" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 248.169085][ T40] audit: type=1326 audit(2000000437.932:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.0.1342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 248.175254][ T40] audit: type=1326 audit(2000000437.932:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.0.1342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 248.180572][ T40] audit: type=1326 audit(2000000437.932:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.0.1342" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 248.190312][ T40] audit: type=1326 audit(2000000437.932:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.0.1342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 248.203134][T10827] overlayfs: workdir and upperdir must be separate subtrees [ 248.216419][T10827] netlink: 'syz.3.1344': attribute type 1 has an invalid length. [ 248.218556][T10827] netlink: 'syz.3.1344': attribute type 2 has an invalid length. [ 248.243207][T10827] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 248.293063][T10829] syz.3.1345: attempt to access beyond end of device [ 248.293063][T10829] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 248.297171][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1346'. [ 248.416844][T10838] FAULT_INJECTION: forcing a failure. [ 248.416844][T10838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.420440][T10838] CPU: 3 UID: 0 PID: 10838 Comm: syz.3.1348 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 248.420454][T10838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 248.420460][T10838] Call Trace: [ 248.420464][T10838] [ 248.420468][T10838] dump_stack_lvl+0x16c/0x1f0 [ 248.420487][T10838] should_fail_ex+0x50a/0x650 [ 248.420500][T10838] _copy_from_iter+0x2a1/0x1560 [ 248.420512][T10838] ? trace_lock_acquire+0x14e/0x1f0 [ 248.420524][T10838] ? __alloc_skb+0x1fe/0x380 [ 248.420540][T10838] ? __pfx__copy_from_iter+0x10/0x10 [ 248.420551][T10838] ? __virt_addr_valid+0x1a4/0x590 [ 248.420564][T10838] ? __virt_addr_valid+0x5e/0x590 [ 248.420578][T10838] ? __phys_addr_symbol+0x30/0x80 [ 248.420592][T10838] ? __check_object_size+0x488/0x710 [ 248.420610][T10838] netlink_sendmsg+0x813/0xd70 [ 248.420635][T10838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.420664][T10838] ____sys_sendmsg+0xaaf/0xc90 [ 248.420682][T10838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.420693][T10838] ? get_compat_msghdr+0x11b/0x170 [ 248.420712][T10838] ___sys_sendmsg+0x135/0x1e0 [ 248.420729][T10838] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.420750][T10838] ? __pfx_lock_release+0x10/0x10 [ 248.420765][T10838] ? trace_lock_acquire+0x14e/0x1f0 [ 248.420780][T10838] ? __fget_files+0x206/0x3a0 [ 248.420799][T10838] __sys_sendmsg+0x16e/0x220 [ 248.420815][T10838] ? __pfx___sys_sendmsg+0x10/0x10 [ 248.420839][T10838] __do_fast_syscall_32+0x73/0x120 [ 248.420855][T10838] do_fast_syscall_32+0x32/0x80 [ 248.420871][T10838] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 248.420889][T10838] RIP: 0023:0xf7f53579 [ 248.420897][T10838] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 248.420908][T10838] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 248.420918][T10838] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000c40 [ 248.420924][T10838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 248.420930][T10838] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 248.420936][T10838] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 248.420942][T10838] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 248.420954][T10838] [ 248.664249][T10849] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1351'. [ 248.916107][T10862] netlink: 'syz.1.1354': attribute type 1 has an invalid length. [ 249.270114][T10870] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 249.271966][T10870] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 249.276083][T10870] vhci_hcd vhci_hcd.0: Device attached [ 249.532690][ T5982] usb 37-1: new low-speed USB device number 15 using vhci_hcd [ 249.957922][T10884] netlink: 'syz.3.1361': attribute type 10 has an invalid length. [ 249.960260][T10884] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1361'. [ 249.964166][T10884] dummy0: entered promiscuous mode [ 249.966426][T10884] bridge0: port 3(dummy0) entered blocking state [ 249.968302][T10884] bridge0: port 3(dummy0) entered disabled state [ 249.970064][T10884] dummy0: entered allmulticast mode [ 249.972341][ T5955] Bluetooth: hci1: unexpected event for opcode 0x0c0d [ 250.116860][T10871] vhci_hcd: connection reset by peer [ 250.118824][ T1174] vhci_hcd: stop threads [ 250.120229][ T1174] vhci_hcd: release socket [ 250.121533][ T1174] vhci_hcd: disconnect device [ 250.305567][T10897] netlink: 'syz.1.1363': attribute type 2 has an invalid length. [ 250.949619][T10903] FAULT_INJECTION: forcing a failure. [ 250.949619][T10903] name failslab, interval 1, probability 0, space 0, times 0 [ 250.953172][T10903] CPU: 3 UID: 0 PID: 10903 Comm: syz.3.1367 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 250.953186][T10903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 250.953192][T10903] Call Trace: [ 250.953196][T10903] [ 250.953200][T10903] dump_stack_lvl+0x16c/0x1f0 [ 250.953218][T10903] should_fail_ex+0x50a/0x650 [ 250.953229][T10903] ? trace_contention_end+0xee/0x140 [ 250.953246][T10903] should_failslab+0xc2/0x120 [ 250.953257][T10903] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 250.953274][T10903] ? hci_sock_sendmsg+0xdee/0x25e0 [ 250.953285][T10903] ? __alloc_skb+0x2b1/0x380 [ 250.953300][T10903] ? __pfx___mutex_lock+0x10/0x10 [ 250.953316][T10903] __alloc_skb+0x2b1/0x380 [ 250.953331][T10903] ? __pfx___alloc_skb+0x10/0x10 [ 250.953351][T10903] hci_sock_sendmsg+0x1a47/0x25e0 [ 250.953364][T10903] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 250.953378][T10903] sock_write_iter+0x4fe/0x5b0 [ 250.953391][T10903] ? __pfx_sock_write_iter+0x10/0x10 [ 250.953409][T10903] ? bpf_lsm_file_permission+0x9/0x10 [ 250.953425][T10903] ? security_file_permission+0x71/0x210 [ 250.953440][T10903] ? rw_verify_area+0xcf/0x680 [ 250.953455][T10903] vfs_write+0x5ae/0x1150 [ 250.953470][T10903] ? __pfx_sock_write_iter+0x10/0x10 [ 250.953483][T10903] ? __pfx_vfs_write+0x10/0x10 [ 250.953499][T10903] ? __fget_files+0x40/0x3a0 [ 250.953521][T10903] ksys_write+0x207/0x250 [ 250.953535][T10903] ? __pfx_ksys_write+0x10/0x10 [ 250.953554][T10903] __do_fast_syscall_32+0x73/0x120 [ 250.953570][T10903] do_fast_syscall_32+0x32/0x80 [ 250.953585][T10903] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 250.953602][T10903] RIP: 0023:0xf7f53579 [ 250.953611][T10903] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 250.953621][T10903] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 250.953631][T10903] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 250.953637][T10903] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 250.953643][T10903] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 250.953649][T10903] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 250.953655][T10903] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 250.953668][T10903] [ 251.054728][T10906] FAULT_INJECTION: forcing a failure. [ 251.054728][T10906] name failslab, interval 1, probability 0, space 0, times 0 [ 251.059664][T10906] CPU: 2 UID: 0 PID: 10906 Comm: syz.3.1368 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 251.059685][T10906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 251.059694][T10906] Call Trace: [ 251.059700][T10906] [ 251.059706][T10906] dump_stack_lvl+0x16c/0x1f0 [ 251.059733][T10906] should_fail_ex+0x50a/0x650 [ 251.059748][T10906] ? rcu_is_watching+0x12/0xc0 [ 251.059767][T10906] should_failslab+0xc2/0x120 [ 251.059783][T10906] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 251.059805][T10906] ? lock_acquire+0x2f/0xb0 [ 251.059824][T10906] ? __inet_hash_connect+0x69f/0x1900 [ 251.059843][T10906] ? __inet_hash_connect+0x918/0x1900 [ 251.059871][T10906] __inet_hash_connect+0x918/0x1900 [ 251.059896][T10906] ? __pfx___inet_check_established+0x10/0x10 [ 251.059917][T10906] ? __pfx___inet_hash_connect+0x10/0x10 [ 251.059945][T10906] tcp_v4_connect+0xddc/0x1b80 [ 251.059967][T10906] ? __pfx_tcp_v4_connect+0x10/0x10 [ 251.059990][T10906] ? register_lock_class+0xb1/0x1240 [ 251.060011][T10906] ? register_lock_class+0xb1/0x1240 [ 251.060036][T10906] tcp_v6_connect+0x77f/0x20e0 [ 251.060055][T10906] ? __pfx_register_lock_class+0x10/0x10 [ 251.060082][T10906] ? __pfx_tcp_v6_connect+0x10/0x10 [ 251.060115][T10906] ? __pfx_mark_lock+0x10/0x10 [ 251.060138][T10906] ? __inet_stream_connect+0x3c7/0x1020 [ 251.060162][T10906] __inet_stream_connect+0x3c7/0x1020 [ 251.060184][T10906] ? find_held_lock+0x2d/0x110 [ 251.060215][T10906] ? __pfx___inet_stream_connect+0x10/0x10 [ 251.060241][T10906] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 251.060258][T10906] ? __pfx_inet_stream_connect+0x10/0x10 [ 251.060280][T10906] ? mark_held_locks+0x9f/0xe0 [ 251.060302][T10906] ? __local_bh_enable_ip+0xa4/0x120 [ 251.060326][T10906] ? __pfx_inet_stream_connect+0x10/0x10 [ 251.060348][T10906] inet_stream_connect+0x57/0xa0 [ 251.060373][T10906] __sys_connect_file+0x13e/0x1a0 [ 251.060396][T10906] __sys_connect+0x14f/0x170 [ 251.060415][T10906] ? __pfx___sys_connect+0x10/0x10 [ 251.060444][T10906] ? __pfx_ksys_write+0x10/0x10 [ 251.060470][T10906] __ia32_sys_connect+0x71/0xb0 [ 251.060490][T10906] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 251.060511][T10906] __do_fast_syscall_32+0x73/0x120 [ 251.060533][T10906] do_fast_syscall_32+0x32/0x80 [ 251.060554][T10906] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 251.060578][T10906] RIP: 0023:0xf7f53579 [ 251.060591][T10906] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 251.060606][T10906] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 251.060622][T10906] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 251.060632][T10906] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 251.060642][T10906] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 251.060651][T10906] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 251.060660][T10906] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 251.060680][T10906] [ 251.173965][ T5955] Bluetooth: hci3: command 0x0405 tx timeout [ 251.438600][T10924] netlink: zone id is out of range [ 251.440523][T10924] netlink: zone id is out of range [ 251.442545][T10924] netlink: zone id is out of range [ 251.444775][T10924] netlink: zone id is out of range [ 251.446119][T10924] netlink: zone id is out of range [ 251.449227][T10924] netlink: del zone limit has 4 unknown bytes [ 251.455593][T10924] syz.3.1372: attempt to access beyond end of device [ 251.455593][T10924] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 251.459600][T10924] SQUASHFS error: Failed to read block 0x0: -5 [ 251.461698][T10924] unable to read squashfs_super_block [ 251.718256][T10933] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1376'. [ 251.719519][T10934] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 251.723036][T10934] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 251.727203][T10934] vhci_hcd vhci_hcd.0: Device attached [ 251.888465][T10933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1376'. [ 252.487892][T10933] team0 (unregistering): Port device team_slave_0 removed [ 252.492010][T10933] team0 (unregistering): Port device team_slave_1 removed [ 252.539201][T10944] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 252.544404][T10944] netlink: 'syz.3.1380': attribute type 10 has an invalid length. [ 252.555779][T10935] vhci_hcd: connection reset by peer [ 252.556894][T10944] bridge0: port 3(dummy0) entered blocking state [ 252.557500][ T12] vhci_hcd: stop threads [ 252.559674][T10944] bridge0: port 3(dummy0) entered forwarding state [ 252.561288][ T12] vhci_hcd: release socket [ 252.566840][T10944] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 252.567222][ T12] vhci_hcd: disconnect device [ 252.632459][ T8119] vhci_hcd: vhci_device speed not set [ 252.658848][T10952] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1382'. [ 252.690529][T10955] FAULT_INJECTION: forcing a failure. [ 252.690529][T10955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.696158][T10955] CPU: 0 UID: 0 PID: 10955 Comm: syz.3.1383 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 252.696172][T10955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 252.696179][T10955] Call Trace: [ 252.696182][T10955] [ 252.696186][T10955] dump_stack_lvl+0x16c/0x1f0 [ 252.696205][T10955] should_fail_ex+0x50a/0x650 [ 252.696218][T10955] _copy_from_iter+0x2a1/0x1560 [ 252.696230][T10955] ? trace_lock_acquire+0x14e/0x1f0 [ 252.696243][T10955] ? __alloc_skb+0x1fe/0x380 [ 252.696259][T10955] ? __pfx__copy_from_iter+0x10/0x10 [ 252.696270][T10955] ? __virt_addr_valid+0x1a4/0x590 [ 252.696283][T10955] ? __virt_addr_valid+0x5e/0x590 [ 252.696293][T10955] ? __phys_addr_symbol+0x30/0x80 [ 252.696303][T10955] ? __check_object_size+0x488/0x710 [ 252.696316][T10955] netlink_sendmsg+0x813/0xd70 [ 252.696334][T10955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.696353][T10955] ____sys_sendmsg+0xaaf/0xc90 [ 252.696368][T10955] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.696379][T10955] ? get_compat_msghdr+0x11b/0x170 [ 252.696398][T10955] ___sys_sendmsg+0x135/0x1e0 [ 252.696415][T10955] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.696436][T10955] ? __pfx_lock_release+0x10/0x10 [ 252.696450][T10955] ? trace_lock_acquire+0x14e/0x1f0 [ 252.696466][T10955] ? __fget_files+0x206/0x3a0 [ 252.696485][T10955] __sys_sendmsg+0x16e/0x220 [ 252.696501][T10955] ? __pfx___sys_sendmsg+0x10/0x10 [ 252.696525][T10955] __do_fast_syscall_32+0x73/0x120 [ 252.696542][T10955] do_fast_syscall_32+0x32/0x80 [ 252.696557][T10955] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 252.696574][T10955] RIP: 0023:0xf7f53579 [ 252.696582][T10955] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 252.696593][T10955] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 252.696603][T10955] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 252.696609][T10955] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.696615][T10955] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 252.696620][T10955] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 252.696626][T10955] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.696638][T10955] [ 252.780213][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.802479][ T6084] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 252.953677][ T6084] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 252.956750][ T6084] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 252.959487][ T6084] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 252.967820][ T6084] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.972908][T10946] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 252.976352][ T6084] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 252.989024][T10972] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1388'. [ 253.766250][T10995] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1394'. [ 253.768777][T10995] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1394'. [ 254.492316][ T40] kauditd_printk_skb: 122 callbacks suppressed [ 254.492327][ T40] audit: type=1326 audit(2000000444.282:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.2.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 254.500518][ T40] audit: type=1326 audit(2000000444.282:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.2.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 254.506830][ T40] audit: type=1326 audit(2000000444.292:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.2.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 254.512923][ T40] audit: type=1326 audit(2000000444.292:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.2.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 254.518986][ T40] audit: type=1326 audit(2000000444.292:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.2.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 254.525344][ T40] audit: type=1326 audit(2000000444.292:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.2.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 254.531589][ T40] audit: type=1326 audit(2000000444.292:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.2.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 254.538779][ T40] audit: type=1326 audit(2000000444.292:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.2.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 254.545542][ T40] audit: type=1326 audit(2000000444.292:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.2.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 254.551489][ T40] audit: type=1326 audit(2000000444.292:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.2.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 254.682930][ T5982] vhci_hcd: vhci_device speed not set [ 254.922035][T11011] netlink: 'syz.3.1398': attribute type 1 has an invalid length. [ 255.057430][T11011] bond3: entered promiscuous mode [ 255.059276][T11011] 8021q: adding VLAN 0 to HW filter on device bond3 [ 255.085022][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.087043][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.649157][ T8119] usb 5-1: USB disconnect, device number 10 [ 255.943632][T11026] tap0: tun_chr_ioctl cmd 1074025677 [ 255.945216][T11026] tap0: linktype set to 825 [ 256.002138][T11028] ax25_connect(): syz.0.1401 uses autobind, please contact jreuter@yaina.de [ 256.413827][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1405'. [ 256.669251][T11063] netlink: 'syz.3.1411': attribute type 2 has an invalid length. [ 257.059041][ T5957] Bluetooth: hci2: unexpected event for opcode 0x040d [ 257.203932][T11089] FAULT_INJECTION: forcing a failure. [ 257.203932][T11089] name failslab, interval 1, probability 0, space 0, times 0 [ 257.211754][T11089] CPU: 0 UID: 0 PID: 11089 Comm: syz.1.1420 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 257.211769][T11089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 257.211776][T11089] Call Trace: [ 257.211779][T11089] [ 257.211783][T11089] dump_stack_lvl+0x16c/0x1f0 [ 257.211802][T11089] should_fail_ex+0x50a/0x650 [ 257.211813][T11089] ? fs_reclaim_acquire+0xae/0x150 [ 257.211828][T11089] ? tomoyo_realpath_from_path+0xb9/0x720 [ 257.211843][T11089] should_failslab+0xc2/0x120 [ 257.211854][T11089] __kmalloc_noprof+0xcb/0x510 [ 257.211870][T11089] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 257.211888][T11089] tomoyo_realpath_from_path+0xb9/0x720 [ 257.211902][T11089] ? tomoyo_path_number_perm+0x235/0x590 [ 257.211916][T11089] ? tomoyo_path_number_perm+0x235/0x590 [ 257.211930][T11089] tomoyo_path_number_perm+0x248/0x590 [ 257.211943][T11089] ? tomoyo_path_number_perm+0x235/0x590 [ 257.211958][T11089] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 257.211983][T11089] ? __pfx_lock_release+0x10/0x10 [ 257.211997][T11089] ? trace_lock_acquire+0x14e/0x1f0 [ 257.212016][T11089] ? lock_acquire+0x2f/0xb0 [ 257.212030][T11089] ? __fget_files+0x40/0x3a0 [ 257.212047][T11089] ? __fget_files+0x206/0x3a0 [ 257.212064][T11089] security_file_ioctl_compat+0x9b/0x240 [ 257.212079][T11089] __do_compat_sys_ioctl+0x4e/0x2c0 [ 257.212094][T11089] __do_fast_syscall_32+0x73/0x120 [ 257.212111][T11089] do_fast_syscall_32+0x32/0x80 [ 257.212125][T11089] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.212143][T11089] RIP: 0023:0xf73ce579 [ 257.212151][T11089] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 257.212161][T11089] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 257.212171][T11089] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0403d08 [ 257.212178][T11089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 257.212184][T11089] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.212190][T11089] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 257.212196][T11089] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.212208][T11089] [ 257.212213][T11089] ERROR: Out of memory at tomoyo_realpath_from_path. [ 257.388865][T11092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1421'. [ 257.444680][T11095] Cannot find add_set index 3 as target [ 257.503381][T11097] erofs (device loop2): cannot find valid erofs superblock [ 257.570938][T11099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1422'. [ 257.776547][T11101] sp0: Synchronizing with TNC [ 258.562758][ T5982] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 258.637762][T11129] netlink: 'syz.1.1433': attribute type 30 has an invalid length. [ 258.692552][ T5982] usb 7-1: device descriptor read/64, error -71 [ 258.745615][T11131] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 258.752666][T11131] netlink: 'syz.0.1434': attribute type 19 has an invalid length. [ 258.932710][ T5982] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 259.062481][ T8119] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 259.064677][ T5982] usb 7-1: device descriptor read/64, error -71 [ 259.172854][ T5982] usb usb7-port1: attempt power cycle [ 259.214306][ T8119] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 259.218438][ T8119] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 259.222070][ T8119] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 259.226377][ T8119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.233921][T11138] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 259.238891][ T8119] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 259.446228][ T6007] usb 5-1: USB disconnect, device number 11 [ 259.465450][T11147] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 259.470536][T11147] qnx6: wrong signature (magic) in superblock #1. [ 259.476299][T11147] qnx6: unable to read the first superblock [ 259.512002][T11149] netlink: 'syz.1.1440': attribute type 10 has an invalid length. [ 259.512542][ T5982] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 259.516497][T11149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.520676][T11149] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 259.533810][ T5982] usb 7-1: device descriptor read/8, error -71 [ 259.782532][ T5982] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 259.802950][ T5982] usb 7-1: device descriptor read/8, error -71 [ 259.912488][ T6007] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 259.914163][ T5982] usb usb7-port1: unable to enumerate USB device [ 260.072561][ T6007] usb 5-1: Using ep0 maxpacket: 32 [ 260.076174][ T6007] usb 5-1: unable to get BOS descriptor set [ 260.079430][ T6007] usb 5-1: config 1 has an invalid interface number: 35 but max is 1 [ 260.083455][ T6007] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 260.086893][ T6007] usb 5-1: config 1 has an invalid interface number: 116 but max is 1 [ 260.090007][ T6007] usb 5-1: config 1 has an invalid descriptor of length 159, skipping remainder of the config [ 260.093845][ T6007] usb 5-1: config 1 has no interface number 0 [ 260.096144][ T6007] usb 5-1: config 1 has no interface number 1 [ 260.098492][ T6007] usb 5-1: config 1 interface 35 altsetting 5 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 260.102652][ T6007] usb 5-1: config 1 interface 35 altsetting 5 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 260.106714][ T6007] usb 5-1: config 1 interface 35 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 260.110694][ T6007] usb 5-1: config 1 interface 35 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 260.114857][ T6007] usb 5-1: config 1 interface 35 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 260.119013][ T6007] usb 5-1: config 1 interface 35 altsetting 5 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 260.123018][ T6007] usb 5-1: config 1 interface 35 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 260.125954][ T6007] usb 5-1: config 1 interface 35 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 260.128812][ T6007] usb 5-1: config 1 interface 35 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 260.131638][ T6007] usb 5-1: config 1 interface 116 altsetting 154 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 260.135336][ T6007] usb 5-1: config 1 interface 35 has no altsetting 0 [ 260.137180][ T6007] usb 5-1: config 1 interface 116 has no altsetting 0 [ 260.140614][ T6007] usb 5-1: New USB device found, idVendor=13d3, idProduct=3423, bcdDevice=2a.97 [ 260.143271][ T6007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.145478][ T6007] usb 5-1: Product: ৾鰲٧Ї蠿闫퐱꤄㇃踵넔量幈Ზ閁쳴⍚䶴⺩ꩾ윦骪ꢋ幽㿦䖞ﻖ饆ඳ湼駪䩯୷죛疆窗ᡊ럧棚庝潢ﴩ譐Ꮒ퉯⺔둶北憆浫ᆳꐃ銊룩䜾൓剄䳻畞⭀黉枀狮㻄掹䚨틃吢黑᥾㩏 [ 260.152092][ T6007] usb 5-1: Manufacturer: ᐉ [ 260.153439][ T6007] usb 5-1: SerialNumber: 짽聱眐瓰㘾칫倏み쯑ﴯ媕厞茻ꎘ녩뿑ᛰ찅긞쿯붫曥蘲ꕨꬭ柄燔㜹㵹砚鞦ᙿ鍨┼೹韦 [ 260.382668][ T6007] usb 5-1: USB disconnect, device number 12 [ 260.660390][T11169] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 260.662253][T11169] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 260.665497][T11169] vhci_hcd vhci_hcd.0: Device attached [ 260.922737][ T5982] usb 39-1: new low-speed USB device number 10 using vhci_hcd [ 261.333595][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1448'. [ 261.515584][T11170] vhci_hcd: connection reset by peer [ 261.519207][ T1140] vhci_hcd: stop threads [ 261.520881][ T1140] vhci_hcd: release socket [ 261.522856][ T1140] vhci_hcd: disconnect device [ 261.676242][T11190] netlink: zone id is out of range [ 261.678416][T11190] netlink: zone id is out of range [ 261.680363][T11190] netlink: zone id is out of range [ 261.682177][T11190] netlink: zone id is out of range [ 261.684328][T11190] netlink: zone id is out of range [ 261.687710][T11190] netlink: del zone limit has 4 unknown bytes [ 261.691816][T11190] syz.2.1451: attempt to access beyond end of device [ 261.691816][T11190] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 261.699540][T11190] SQUASHFS error: Failed to read block 0x0: -5 [ 261.701997][T11190] unable to read squashfs_super_block [ 262.166755][T11197] netlink: 'syz.1.1453': attribute type 2 has an invalid length. [ 262.171911][T11197] netlink: 'syz.1.1453': attribute type 1 has an invalid length. [ 262.174886][T11197] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.1453'. [ 262.415589][T11201] FAULT_INJECTION: forcing a failure. [ 262.415589][T11201] name failslab, interval 1, probability 0, space 0, times 0 [ 262.418294][T11203] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 262.420189][T11201] CPU: 2 UID: 0 PID: 11201 Comm: syz.1.1454 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 262.420210][T11201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 262.420220][T11201] Call Trace: [ 262.420225][T11201] [ 262.420231][T11201] dump_stack_lvl+0x16c/0x1f0 [ 262.420257][T11201] should_fail_ex+0x50a/0x650 [ 262.420272][T11201] ? fs_reclaim_acquire+0xae/0x150 [ 262.420292][T11201] should_failslab+0xc2/0x120 [ 262.420307][T11201] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 262.420330][T11201] ? alloc_empty_file+0x73/0x1e0 [ 262.420350][T11201] alloc_empty_file+0x73/0x1e0 [ 262.420366][T11201] path_openat+0xe1/0x2d80 [ 262.420386][T11201] ? lockdep_unlock+0x11a/0x290 [ 262.420402][T11201] ? __lock_acquire+0x2077/0x3c40 [ 262.420429][T11201] ? __pfx_path_openat+0x10/0x10 [ 262.420450][T11201] ? __pfx___lock_acquire+0x10/0x10 [ 262.420474][T11201] do_filp_open+0x20c/0x470 [ 262.420496][T11201] ? __pfx_do_filp_open+0x10/0x10 [ 262.420516][T11201] ? find_held_lock+0x2d/0x110 [ 262.420546][T11201] ? alloc_fd+0x41f/0x760 [ 262.420573][T11201] io_openat2+0x207/0x850 [ 262.420595][T11201] ? __pfx_io_openat2+0x10/0x10 [ 262.420617][T11201] ? getname_flags.part.0+0x1c5/0x550 [ 262.420637][T11201] io_issue_sqe+0x4f5/0x12d0 [ 262.420655][T11201] io_submit_sqes+0x96a/0x2670 [ 262.420682][T11201] __do_sys_io_uring_enter+0xd60/0x1670 [ 262.420703][T11201] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 262.420719][T11201] ? __pfx_lock_release+0x10/0x10 [ 262.420737][T11201] ? trace_lock_acquire+0x14e/0x1f0 [ 262.420757][T11201] ? lock_acquire+0x2f/0xb0 [ 262.420774][T11201] ? __might_fault+0xe3/0x190 [ 262.420794][T11201] ? __might_fault+0xe3/0x190 [ 262.420811][T11201] ? rcu_is_watching+0x12/0xc0 [ 262.420830][T11201] __do_fast_syscall_32+0x73/0x120 [ 262.420852][T11201] do_fast_syscall_32+0x32/0x80 [ 262.420873][T11201] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.420895][T11201] RIP: 0023:0xf73ce579 [ 262.420907][T11201] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 262.420921][T11201] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 262.420935][T11201] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000003516 [ 262.420945][T11201] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 262.420953][T11201] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 262.420961][T11201] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 262.420969][T11201] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.420988][T11201] [ 262.494652][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1455'. [ 262.535573][ T40] kauditd_printk_skb: 68 callbacks suppressed [ 262.535635][ T40] audit: type=1326 audit(2000000452.332:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11209 comm="syz.1.1457" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 262.549449][ T40] audit: type=1326 audit(2000000452.342:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11209 comm="syz.1.1457" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 262.557884][ T40] audit: type=1326 audit(2000000452.342:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11209 comm="syz.1.1457" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 262.564956][ T40] audit: type=1326 audit(2000000452.342:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11209 comm="syz.1.1457" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 262.577278][ T40] audit: type=1326 audit(2000000452.342:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11209 comm="syz.1.1457" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 262.583672][ T40] audit: type=1326 audit(2000000452.372:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11209 comm="syz.1.1457" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 262.590183][ T40] audit: type=1326 audit(2000000452.372:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11209 comm="syz.1.1457" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 262.600706][ T40] audit: type=1326 audit(2000000452.372:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11209 comm="syz.1.1457" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 262.602796][ T5955] Bluetooth: hci3: command 0x0405 tx timeout [ 262.608566][ T40] audit: type=1326 audit(2000000452.372:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11209 comm="syz.1.1457" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 262.620509][ T40] audit: type=1326 audit(2000000452.372:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11209 comm="syz.1.1457" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 262.757816][T11221] netlink: 'syz.2.1459': attribute type 10 has an invalid length. [ 262.760561][T11221] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.762824][T11221] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.767433][T11221] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.769435][T11221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.771632][T11221] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.773672][T11221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.778048][T11221] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.780053][T11221] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.275781][T11237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.286768][T11237] FAULT_INJECTION: forcing a failure. [ 263.286768][T11237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.290787][T11237] CPU: 3 UID: 0 PID: 11237 Comm: syz.2.1465 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 263.290801][T11237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 263.290808][T11237] Call Trace: [ 263.290812][T11237] [ 263.290816][T11237] dump_stack_lvl+0x16c/0x1f0 [ 263.290836][T11237] should_fail_ex+0x50a/0x650 [ 263.290848][T11237] _copy_to_user+0x32/0xd0 [ 263.290861][T11237] simple_read_from_buffer+0xd0/0x160 [ 263.290877][T11237] proc_fail_nth_read+0x198/0x270 [ 263.290891][T11237] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 263.290905][T11237] ? rw_verify_area+0xcf/0x680 [ 263.290918][T11237] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 263.290930][T11237] vfs_read+0x1df/0xbf0 [ 263.290945][T11237] ? __fget_files+0x1fc/0x3a0 [ 263.290966][T11237] ? __pfx___mutex_lock+0x10/0x10 [ 263.290981][T11237] ? __pfx_vfs_read+0x10/0x10 [ 263.290999][T11237] ? __fget_files+0x206/0x3a0 [ 263.291017][T11237] ksys_read+0x12b/0x250 [ 263.291031][T11237] ? __pfx_ksys_read+0x10/0x10 [ 263.291050][T11237] __do_fast_syscall_32+0x73/0x120 [ 263.291065][T11237] do_fast_syscall_32+0x32/0x80 [ 263.291080][T11237] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 263.291098][T11237] RIP: 0023:0xf7f48579 [ 263.291106][T11237] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 263.291117][T11237] RSP: 002b:00000000f5066590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 263.291127][T11237] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f5066620 [ 263.291133][T11237] RDX: 000000000000000f RSI: 00000000f73ccff4 RDI: 0000000000000000 [ 263.291139][T11237] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 263.291145][T11237] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 263.291151][T11237] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 263.291163][T11237] [ 263.300112][T11236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.564892][T11248] netlink: 'syz.2.1468': attribute type 10 has an invalid length. [ 263.618912][T11248] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.620897][T11248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.623146][T11248] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.625247][T11248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.756686][T11248] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.759400][T11248] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.835436][T11227] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.837601][T11227] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.925290][T11227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.930718][T11227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.959663][T11227] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.961982][T11227] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.964459][T11227] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.966754][T11227] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.968086][T11258] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 263.970881][T11258] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 263.975524][T11258] vhci_hcd vhci_hcd.0: Device attached [ 264.194298][T11264] mkiss: ax0: crc mode is auto. [ 264.212510][ T6084] usb 43-1: new low-speed USB device number 14 using vhci_hcd [ 264.467949][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1474'. [ 264.844347][T11260] vhci_hcd: connection reset by peer [ 264.846600][ T1136] vhci_hcd: stop threads [ 264.848308][ T1136] vhci_hcd: release socket [ 264.850236][ T1136] vhci_hcd: disconnect device [ 265.415872][T11289] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 265.748548][T11294] netlink: 'syz.1.1480': attribute type 10 has an invalid length. [ 265.754313][T11294] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 265.862742][ T59] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 266.022438][ T59] usb 8-1: Using ep0 maxpacket: 8 [ 266.025183][ T59] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.028346][ T59] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 266.031420][ T59] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 266.035064][ T5982] vhci_hcd: vhci_device speed not set [ 266.038109][ T59] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 266.040708][ T59] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.043153][ T59] usb 8-1: Product: syz [ 266.044355][ T59] usb 8-1: Manufacturer: syz [ 266.045681][ T59] usb 8-1: SerialNumber: syz [ 266.249930][T11289] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1478'. [ 266.255034][ T59] cdc_ncm 8-1:1.0: bind() failure [ 266.258257][ T59] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 266.260138][ T59] cdc_ncm 8-1:1.1: bind() failure [ 266.263000][ T59] usb 8-1: USB disconnect, device number 17 [ 266.731325][T11305] fuse: Bad value for 'fd' [ 266.775388][T11309] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 266.777231][T11309] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 266.780082][T11309] vhci_hcd vhci_hcd.0: Device attached [ 266.796799][T11313] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 266.799275][T11313] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 266.803101][T11313] vhci_hcd vhci_hcd.0: Device attached [ 267.372707][ T59] usb 41-1: new low-speed USB device number 12 using vhci_hcd [ 267.385241][ T5982] usb 39-1: new low-speed USB device number 11 using vhci_hcd [ 267.643453][T11310] vhci_hcd: connection reset by peer [ 267.645671][ T65] vhci_hcd: stop threads [ 267.647006][ T65] vhci_hcd: release socket [ 267.649400][ T65] vhci_hcd: disconnect device [ 267.748375][T11314] vhci_hcd: connection reset by peer [ 267.750108][ T1140] vhci_hcd: stop threads [ 267.751380][ T1140] vhci_hcd: release socket [ 267.753208][ T1140] vhci_hcd: disconnect device [ 267.878773][T11326] bridge0: port 3(syz_tun) entered disabled state [ 267.882758][T11326] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.886408][T11326] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.096728][T11326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.104777][T11326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.141613][T11326] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.145027][T11326] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.147544][T11326] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.175202][ T40] kauditd_printk_skb: 172 callbacks suppressed [ 268.175213][ T40] audit: type=1326 audit(2000000457.972:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11328 comm="syz.3.1490" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 268.189571][T11326] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.193019][ T40] audit: type=1326 audit(2000000457.972:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11328 comm="syz.3.1490" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 268.198723][ T40] audit: type=1326 audit(2000000457.972:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11328 comm="syz.3.1490" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 268.206959][ T40] audit: type=1326 audit(2000000457.972:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11328 comm="syz.3.1490" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 268.213228][ T40] audit: type=1326 audit(2000000457.972:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11328 comm="syz.3.1490" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 268.219034][ T40] audit: type=1326 audit(2000000457.972:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11328 comm="syz.3.1490" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 268.226997][ T40] audit: type=1326 audit(2000000457.972:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11328 comm="syz.3.1490" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 268.230111][T11331] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 268.233704][ T40] audit: type=1326 audit(2000000457.972:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11328 comm="syz.3.1490" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 268.235289][T11331] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 268.235486][T11331] vhci_hcd vhci_hcd.0: Device attached [ 268.241226][ T40] audit: type=1326 audit(2000000457.972:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11328 comm="syz.3.1490" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 268.251076][ T40] audit: type=1326 audit(2000000457.972:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11328 comm="syz.3.1490" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 268.277722][T11326] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 4609 - 0 [ 268.281311][T11326] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 4609 - 0 [ 268.285441][T11326] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 4609 - 0 [ 268.395978][T11326] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 4609 - 0 [ 268.471958][T11341] netlink: 'syz.0.1494': attribute type 27 has an invalid length. [ 268.493404][T11341] bridge0: port 3(syz_tun) entered blocking state [ 268.495286][T11341] bridge0: port 3(syz_tun) entered forwarding state [ 268.498478][T11341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.502121][T11341] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.533644][T11341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 268.616971][T11348] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 268.619356][T11348] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 268.622660][T11348] vhci_hcd vhci_hcd.0: Device attached [ 268.766400][T11354] loop6: detected capacity change from 0 to 524287999 [ 268.769260][ C3] blk_print_req_error: 24 callbacks suppressed [ 268.769273][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.774415][ C3] buffer_io_error: 24 callbacks suppressed [ 268.774422][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.779037][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.782334][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.785546][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.788101][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.790497][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.793079][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.797643][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.800184][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.802682][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.805201][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.807556][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.811103][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.814170][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.817509][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.820483][T11354] ldm_validate_partition_table(): Disk read failed. [ 268.823766][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.826460][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.829144][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.832583][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.835639][T11354] Dev loop6: unable to read RDB block 0 [ 268.839341][T11354] loop6: unable to read partition table [ 268.841453][T11354] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 268.872529][ T58] usb 37-1: new low-speed USB device number 16 using vhci_hcd [ 269.042783][ T5358] ldm_validate_partition_table(): Disk read failed. [ 269.044906][ T5358] Dev loop6: unable to read RDB block 0 [ 269.046730][ T5358] loop6: unable to read partition table [ 269.085024][T11332] vhci_hcd: connection closed [ 269.086692][ T12] vhci_hcd: stop threads [ 269.089272][ T12] vhci_hcd: release socket [ 269.090657][ T12] vhci_hcd: disconnect device [ 269.312505][ T6084] vhci_hcd: vhci_device speed not set [ 269.497206][T11349] vhci_hcd: connection reset by peer [ 269.499402][ T44] vhci_hcd: stop threads [ 269.500905][ T44] vhci_hcd: release socket [ 269.503661][ T44] vhci_hcd: disconnect device [ 269.812786][T11372] vlan0: entered promiscuous mode [ 269.814373][T11372] vlan0: entered allmulticast mode [ 269.815864][T11372] hsr_slave_1: entered allmulticast mode [ 269.820098][T11372] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1504'. [ 269.823679][T11372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1504'. [ 269.900988][T11372] hsr_slave_1 (unregistering): left allmulticast mode [ 269.909550][T11372] hsr_slave_1 (unregistering): left promiscuous mode [ 270.076812][T11379] workqueue: name exceeds WQ_NAME_LEN. Truncating to: HcUË+u!8! [ 270.152154][T11386] program syz.3.1509 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.520958][T11409] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1516'. [ 271.234868][T11420] netlink: 'syz.1.1520': attribute type 1 has an invalid length. [ 271.337307][T11422] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 271.406481][T11424] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 271.408344][T11424] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 271.410992][T11424] vhci_hcd vhci_hcd.0: Device attached [ 271.506025][ T8119] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 271.653959][ T8119] usb 6-1: unable to get BOS descriptor or descriptor too short [ 271.656937][ T8119] usb 6-1: config 1 interface 0 altsetting 170 bulk endpoint 0x82 has invalid maxpacket 16 [ 271.659822][ T8119] usb 6-1: config 1 interface 0 has no altsetting 0 [ 271.664296][ T8119] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.666931][ T8119] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.669156][ T8119] usb 6-1: Product: syz [ 271.670324][ T8119] usb 6-1: Manufacturer: syz [ 271.671602][ T8119] usb 6-1: SerialNumber: syz [ 271.677216][T11420] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 272.241635][T11425] vhci_hcd: connection closed [ 272.241871][ T65] vhci_hcd: stop threads [ 272.244301][ T65] vhci_hcd: release socket [ 272.245549][ T65] vhci_hcd: disconnect device [ 272.375828][ T6084] IPVS: starting estimator thread 0... [ 272.383510][T11438] tipc: Started in network mode [ 272.384768][T11438] tipc: Node identity ac1414aa, cluster identity 4711 [ 272.386932][T11438] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 272.388888][T11438] tipc: Enabled bearer , priority 10 [ 272.462627][T11440] IPVS: using max 36 ests per chain, 86400 per kthread [ 272.512538][ T5982] vhci_hcd: vhci_device speed not set [ 272.514319][ T59] vhci_hcd: vhci_device speed not set [ 272.524138][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 272.662471][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 272.802473][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 272.952473][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 273.092446][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 273.232418][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 273.313351][T11459] xt_ecn: cannot match TCP bits for non-tcp packets [ 273.320032][T11459] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 273.340741][T11451] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1529'. [ 273.372438][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 273.514496][ T6084] tipc: Node number set to 2886997162 [ 273.652548][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 273.922465][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 273.952477][ T58] vhci_hcd: vhci_device speed not set [ 274.088708][T11474] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 274.090593][T11474] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 274.093023][T11474] vhci_hcd vhci_hcd.0: Device attached [ 274.374292][ T8119] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 274.401137][ T8119] usb 6-1: USB disconnect, device number 19 [ 274.462433][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 274.722685][ T58] usb 37-1: device descriptor read/64, error -110 [ 274.847443][T11498] IPv6: NLM_F_CREATE should be specified when creating new route [ 274.905252][ T40] kauditd_printk_skb: 153 callbacks suppressed [ 274.905342][ T40] audit: type=1326 audit(2000000464.702:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11503 comm="syz.1.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 274.916783][ T40] audit: type=1326 audit(2000000464.702:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11503 comm="syz.1.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 274.935290][T11475] vhci_hcd: connection closed [ 274.941518][ T40] audit: type=1326 audit(2000000464.702:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11503 comm="syz.1.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 274.941964][ T1174] vhci_hcd: stop threads [ 274.943968][ T40] audit: type=1326 audit(2000000464.702:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11503 comm="syz.1.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 274.953000][ T1174] vhci_hcd: release socket [ 274.959961][ T40] audit: type=1326 audit(2000000464.702:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11503 comm="syz.1.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 274.961154][ T1174] vhci_hcd: disconnect device [ 274.969036][ T40] audit: type=1326 audit(2000000464.702:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11503 comm="syz.1.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 274.975897][ T58] usb 37-1: new low-speed USB device number 17 using vhci_hcd [ 274.978551][ T58] usb 37-1: enqueue for inactive port 0 [ 274.980678][ T40] audit: type=1326 audit(2000000464.702:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11503 comm="syz.1.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 274.989163][ T40] audit: type=1326 audit(2000000464.702:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11503 comm="syz.1.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 275.000629][ T40] audit: type=1326 audit(2000000464.702:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11503 comm="syz.1.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 275.011890][ T40] audit: type=1326 audit(2000000464.702:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11503 comm="syz.1.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=264 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 275.042688][ T58] vhci_hcd: vhci_device speed not set [ 275.328640][T11515] FAULT_INJECTION: forcing a failure. [ 275.328640][T11515] name failslab, interval 1, probability 0, space 0, times 0 [ 275.332224][T11515] CPU: 1 UID: 0 PID: 11515 Comm: syz.1.1546 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 275.332248][T11515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 275.332255][T11515] Call Trace: [ 275.332259][T11515] [ 275.332263][T11515] dump_stack_lvl+0x16c/0x1f0 [ 275.332283][T11515] should_fail_ex+0x50a/0x650 [ 275.332294][T11515] ? fs_reclaim_acquire+0xae/0x150 [ 275.332308][T11515] ? copy_splice_read+0x1a8/0xb80 [ 275.332322][T11515] should_failslab+0xc2/0x120 [ 275.332332][T11515] __kmalloc_noprof+0xcb/0x510 [ 275.332351][T11515] copy_splice_read+0x1a8/0xb80 [ 275.332376][T11515] ? look_up_lock_class+0x6b/0x150 [ 275.332391][T11515] ? __pfx_copy_splice_read+0x10/0x10 [ 275.332407][T11515] ? __pfx_register_lock_class+0x10/0x10 [ 275.332428][T11515] ? __pfx_filemap_splice_read+0x10/0x10 [ 275.332443][T11515] do_splice_read+0x2bd/0x370 [ 275.332458][T11515] splice_direct_to_actor+0x2a4/0xa40 [ 275.332473][T11515] ? __pfx_direct_splice_actor+0x10/0x10 [ 275.332490][T11515] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 275.332506][T11515] ? __fget_files+0x1fc/0x3a0 [ 275.332523][T11515] do_splice_direct+0x178/0x250 [ 275.332537][T11515] ? __pfx_do_splice_direct+0x10/0x10 [ 275.332552][T11515] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 275.332566][T11515] ? bpf_lsm_file_permission+0x9/0x10 [ 275.332583][T11515] ? security_file_permission+0x71/0x210 [ 275.332598][T11515] ? rw_verify_area+0xcf/0x680 [ 275.332612][T11515] do_sendfile+0xafb/0xe40 [ 275.332629][T11515] ? __pfx_do_sendfile+0x10/0x10 [ 275.332642][T11515] ? __pfx___schedule+0x10/0x10 [ 275.332655][T11515] ? __fget_files+0x206/0x3a0 [ 275.332673][T11515] __ia32_compat_sys_sendfile+0x1e7/0x230 [ 275.332683][T11515] ? ksys_write+0x1ba/0x250 [ 275.332697][T11515] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 275.332712][T11515] __do_fast_syscall_32+0x73/0x120 [ 275.332728][T11515] do_fast_syscall_32+0x32/0x80 [ 275.332743][T11515] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 275.332761][T11515] RIP: 0023:0xf73ce579 [ 275.332769][T11515] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 275.332780][T11515] RSP: 002b:00000000f501455c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 275.332790][T11515] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 000000000000000d [ 275.332796][T11515] RDX: 0000000000000000 RSI: 0000000000040008 RDI: 0000000000000000 [ 275.332802][T11515] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 275.332808][T11515] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 275.332814][T11515] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 275.332825][T11515] [ 275.475465][T11518] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1547'. [ 275.479961][T11518] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1547'. [ 275.482456][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 275.502690][T11518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1547'. [ 276.040142][T11541] netlink: 'syz.1.1549': attribute type 1 has an invalid length. [ 276.170307][T11541] bond3: entered promiscuous mode [ 276.172694][T11541] 8021q: adding VLAN 0 to HW filter on device bond3 [ 276.522443][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 276.727340][T11555] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 276.729263][T11555] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 276.734376][T11555] vhci_hcd vhci_hcd.0: Device attached [ 276.972523][ T58] usb 39-1: new low-speed USB device number 12 using vhci_hcd [ 277.562460][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 277.564521][T11556] vhci_hcd: connection reset by peer [ 277.566451][ T1174] vhci_hcd: stop threads [ 277.567765][ T1174] vhci_hcd: release socket [ 277.569200][ T1174] vhci_hcd: disconnect device [ 278.033623][T11582] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 278.037693][T11582] netlink: 'syz.2.1563': attribute type 10 has an invalid length. [ 278.041241][T11582] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.044031][T11582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.046925][T11582] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.049698][T11582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.061800][T11582] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.064810][T11582] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.602473][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 278.692589][ T36] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 278.845518][ T36] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 278.848521][ T36] usb 8-1: config 0 has no interface number 0 [ 278.850775][ T36] usb 8-1: config 0 interface 184 has no altsetting 0 [ 278.862763][ T36] usb 8-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=58.69 [ 278.866000][ T36] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.879180][ T36] usb 8-1: config 0 descriptor?? [ 278.882266][ T36] etas_es58x 8-1:0.184: Starting (null) (null) (Serial Number (null)) [ 279.060507][T11606] netlink: 'syz.0.1569': attribute type 1 has an invalid length. [ 279.204024][T11617] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 279.205962][T11617] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 279.208288][T11617] vhci_hcd vhci_hcd.0: Device attached [ 279.341577][T11624] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 279.345766][T11624] FAULT_INJECTION: forcing a failure. [ 279.345766][T11624] name failslab, interval 1, probability 0, space 0, times 0 [ 279.349727][T11624] CPU: 0 UID: 0 PID: 11624 Comm: syz.0.1575 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 279.349741][T11624] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 279.349747][T11624] Call Trace: [ 279.349751][T11624] [ 279.349755][T11624] dump_stack_lvl+0x16c/0x1f0 [ 279.349774][T11624] should_fail_ex+0x50a/0x650 [ 279.349785][T11624] ? fs_reclaim_acquire+0xae/0x150 [ 279.349800][T11624] ? ovl_lookup+0x116a/0x21f0 [ 279.349810][T11624] should_failslab+0xc2/0x120 [ 279.349846][T11624] __kmalloc_noprof+0xcb/0x510 [ 279.349870][T11624] ovl_lookup+0x116a/0x21f0 [ 279.349882][T11624] ? privileged_wrt_inode_uidgid+0xca/0x1d0 [ 279.349903][T11624] ? __pfx_ovl_lookup+0x10/0x10 [ 279.349912][T11624] ? generic_permission+0xad/0x7d0 [ 279.349925][T11624] ? bpf_lsm_inode_permission+0x9/0x10 [ 279.349940][T11624] ? security_inode_permission+0xbf/0x260 [ 279.349955][T11624] ? inode_permission+0xdd/0x5f0 [ 279.349967][T11624] ? ovl_revert_creds+0x13/0x50 [ 279.349978][T11624] ? ovl_permission+0xce/0x290 [ 279.349993][T11624] ? __pfx_ovl_permission+0x10/0x10 [ 279.350012][T11624] ? bpf_lsm_inode_permission+0x9/0x10 [ 279.350027][T11624] ? security_inode_permission+0xbf/0x260 [ 279.350040][T11624] ? inode_permission+0xdd/0x5f0 [ 279.350052][T11624] ? __pfx_ovl_lookup+0x10/0x10 [ 279.350062][T11624] lookup_open.isra.0+0x4d9/0x1580 [ 279.350079][T11624] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 279.350094][T11624] ? memcg_reparent_list_lrus+0x690/0x790 [ 279.350107][T11624] ? lock_acquire+0x2f/0xb0 [ 279.350122][T11624] ? path_openat+0x15a4/0x2d80 [ 279.350139][T11624] ? memcg_reparent_list_lrus+0x690/0x790 [ 279.350151][T11624] ? __pfx_down_write+0x10/0x10 [ 279.350167][T11624] ? mnt_get_write_access+0x20c/0x300 [ 279.350182][T11624] path_openat+0x904/0x2d80 [ 279.350202][T11624] ? __pfx_path_openat+0x10/0x10 [ 279.350218][T11624] ? __pfx___lock_acquire+0x10/0x10 [ 279.350231][T11624] ? lock_acquire.part.0+0x11b/0x380 [ 279.350246][T11624] ? find_held_lock+0x2d/0x110 [ 279.350259][T11624] do_filp_open+0x20c/0x470 [ 279.350274][T11624] ? __pfx_do_filp_open+0x10/0x10 [ 279.350289][T11624] ? find_held_lock+0x2d/0x110 [ 279.350309][T11624] ? alloc_fd+0x41f/0x760 [ 279.350328][T11624] do_sys_openat2+0x17a/0x1e0 [ 279.350339][T11624] ? __pfx_do_sys_openat2+0x10/0x10 [ 279.350352][T11624] ? __fget_files+0x206/0x3a0 [ 279.350370][T11624] __ia32_compat_sys_openat+0x16e/0x210 [ 279.350382][T11624] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 279.350394][T11624] ? ksys_write+0x1ba/0x250 [ 279.350413][T11624] __do_fast_syscall_32+0x73/0x120 [ 279.350429][T11624] do_fast_syscall_32+0x32/0x80 [ 279.350444][T11624] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 279.350462][T11624] RIP: 0023:0xf73ee579 [ 279.350472][T11624] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 279.350482][T11624] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 279.350492][T11624] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000240 [ 279.350498][T11624] RDX: 0000000000000040 RSI: 0000000000000023 RDI: 0000000000000000 [ 279.350504][T11624] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 279.350510][T11624] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 279.350516][T11624] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 279.350528][T11624] [ 279.586081][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1567'. [ 279.642499][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 279.691585][T11629] syz.0.1576: vmalloc error: size 1847640064, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 279.697055][T11629] CPU: 3 UID: 0 PID: 11629 Comm: syz.0.1576 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 279.697072][T11629] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 279.697080][T11629] Call Trace: [ 279.697092][T11629] [ 279.697099][T11629] dump_stack_lvl+0x16c/0x1f0 [ 279.697118][T11629] warn_alloc+0x24d/0x3a0 [ 279.697136][T11629] ? __pfx_warn_alloc+0x10/0x10 [ 279.697151][T11629] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 279.697168][T11629] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 279.697184][T11629] ? kasan_save_stack+0x42/0x60 [ 279.697199][T11629] ? kasan_save_stack+0x33/0x60 [ 279.697213][T11629] ? kasan_save_track+0x14/0x30 [ 279.697226][T11629] ? __kasan_kmalloc+0xaa/0xb0 [ 279.697240][T11629] ? vb2_vmalloc_alloc+0xe2/0x3d0 [ 279.697254][T11629] ? vb2_core_create_bufs+0x55d/0xab0 [ 279.697268][T11629] ? vb2_create_bufs+0x566/0x780 [ 279.697280][T11629] ? vb2_ioctl_create_bufs+0x244/0x3e0 [ 279.697296][T11629] __vmalloc_node_range_noprof+0x10dc/0x1530 [ 279.697315][T11629] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 279.697333][T11629] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 279.697351][T11629] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 279.697366][T11629] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 279.697381][T11629] vmalloc_user_noprof+0x6b/0x90 [ 279.697395][T11629] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 279.697411][T11629] vb2_vmalloc_alloc+0x11e/0x3d0 [ 279.697427][T11629] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 279.697442][T11629] __vb2_queue_alloc+0x896/0x1230 [ 279.697461][T11629] ? vbi_out_queue_setup+0x1e3/0x2b0 [ 279.697478][T11629] vb2_core_create_bufs+0x55d/0xab0 [ 279.697495][T11629] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 279.697511][T11629] ? lock_acquire.part.0+0x11b/0x380 [ 279.697530][T11629] vb2_create_bufs+0x566/0x780 [ 279.697546][T11629] ? __pfx_vb2_create_bufs+0x10/0x10 [ 279.697563][T11629] ? __video_do_ioctl+0x4a2/0xf00 [ 279.697576][T11629] vb2_ioctl_create_bufs+0x244/0x3e0 [ 279.697590][T11629] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 279.697607][T11629] vidioc_create_bufs+0x7d/0xf0 [ 279.697622][T11629] v4l_create_bufs+0x156/0x270 [ 279.697641][T11629] __video_do_ioctl+0xaf0/0xf00 [ 279.697656][T11629] ? __pfx___video_do_ioctl+0x10/0x10 [ 279.697670][T11629] ? __kmalloc_noprof+0x23b/0x510 [ 279.697687][T11629] ? __pfx___sanitizer_cov_trace_const_cmp2+0x1/0x10 [ 279.697706][T11629] video_usercopy+0x4d2/0x1620 [ 279.697720][T11629] ? __pfx___video_do_ioctl+0x10/0x10 [ 279.697733][T11629] ? __pfx_video_usercopy+0x10/0x10 [ 279.697765][T11629] v4l2_ioctl+0x1ba/0x250 [ 279.697777][T11629] ? __fget_files+0x141/0x3a0 [ 279.697794][T11629] v4l2_compat_ioctl32+0x214/0x2c0 [ 279.697831][T11629] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 279.697849][T11629] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 279.697865][T11629] __do_fast_syscall_32+0x73/0x120 [ 279.697883][T11629] do_fast_syscall_32+0x32/0x80 [ 279.697899][T11629] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 279.697916][T11629] RIP: 0023:0xf73ee579 [ 279.697925][T11629] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 279.697936][T11629] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 279.697946][T11629] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c0f8565c [ 279.697953][T11629] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 279.697959][T11629] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 279.697965][T11629] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 279.697971][T11629] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 279.697983][T11629] [ 279.698380][T11629] Mem-Info: [ 279.800150][T11629] active_anon:28305 inactive_anon:7089 isolated_anon:0 [ 279.800150][T11629] active_file:13357 inactive_file:5519 isolated_file:0 [ 279.800150][T11629] unevictable:1768 dirty:310 writeback:0 [ 279.800150][T11629] slab_reclaimable:5914 slab_unreclaimable:60245 [ 279.800150][T11629] mapped:31109 shmem:34595 pagetables:960 [ 279.800150][T11629] sec_pagetables:314 bounce:0 [ 279.800150][T11629] kernel_misc_reclaimable:0 [ 279.800150][T11629] free:45161 free_pcp:2493 free_cma:0 [ 279.812980][T11629] Node 0 active_anon:2156kB inactive_anon:0kB active_file:2516kB inactive_file:112kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:2044kB dirty:0kB writeback:0kB shmem:28040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9520kB pagetables:736kB sec_pagetables:1144kB all_unreclaimable? yes [ 279.821555][T11629] Node 1 active_anon:111072kB inactive_anon:28356kB active_file:50912kB inactive_file:21964kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:122440kB dirty:1240kB writeback:0kB shmem:110340kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3440kB pagetables:3104kB sec_pagetables:112kB all_unreclaimable? no [ 279.830865][T11629] Node 0 DMA free:2824kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:128kB inactive_file:16kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 279.838548][T11629] lowmem_reserve[]: 0 294 294 294 294 [ 279.840105][T11629] Node 0 DMA32 free:27928kB boost:10240kB min:23800kB low:27188kB high:30576kB reserved_highatomic:2048KB active_anon:2148kB inactive_anon:0kB active_file:2388kB inactive_file:96kB unevictable:3536kB writepending:0kB present:1032196kB managed:301716kB mlocked:0kB bounce:0kB free_pcp:2740kB local_pcp:212kB free_cma:0kB [ 279.848397][T11629] lowmem_reserve[]: 0 0 0 0 0 [ 279.849784][T11629] Node 1 DMA32 free:149792kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:2048KB active_anon:111072kB inactive_anon:28356kB active_file:50912kB inactive_file:21964kB unevictable:3536kB writepending:1240kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:7288kB local_pcp:676kB free_cma:0kB [ 279.858183][T11629] lowmem_reserve[]: 0 0 0 0 0 [ 279.859567][T11629] Node 0 DMA: 62*4kB (UE) 32*8kB (UE) 13*16kB (UE) 12*32kB (UE) 7*64kB (UE) 0*128kB 1*256kB (E) 0*512kB 1*1024kB (E) 0*2048kB 0*4096kB = 2824kB [ 279.863988][T11629] Node 0 DMA32: 176*4kB (UME) 135*8kB (UE) 48*16kB (UME) 84*32kB (UE) 88*64kB (UME) 25*128kB (UME) 10*256kB (UME) 8*512kB (UMEH) 3*1024kB (M) 2*2048kB (U) 0*4096kB = 27896kB [ 279.868764][T11629] Node 1 DMA32: 36*4kB (UMEH) 42*8kB (UEH) 126*16kB (UMEH) 64*32kB (UEH) 202*64kB (UMEH) 167*128kB (UME) 113*256kB (UME) 64*512kB (UM) 10*1024kB (UM) 7*2048kB (M) 6*4096kB (UM) = 149696kB [ 279.874295][T11629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 279.876901][T11629] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 279.879479][T11629] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 279.882121][T11629] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 279.885129][T11629] 54538 total pagecache pages [ 279.886472][T11629] 1067 pages in swap cache [ 279.887733][T11629] Free swap = 76820kB [ 279.888823][T11629] Total swap = 124996kB [ 279.890070][T11629] 524155 pages RAM [ 279.891121][T11629] 0 pages HighMem/MovableOnly [ 279.893110][T11629] 207823 pages reserved [ 279.894294][T11629] 0 pages cma reserved [ 279.998513][T11634] bridge_slave_1: left allmulticast mode [ 280.000065][T11634] bridge_slave_1: left promiscuous mode [ 280.003226][T11634] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.010645][T11634] bridge_slave_0: left allmulticast mode [ 280.012132][T11634] bridge_slave_0: left promiscuous mode [ 280.013752][T11634] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.039334][T11618] vhci_hcd: connection closed [ 280.039522][ T1143] vhci_hcd: stop threads [ 280.041757][ T1143] vhci_hcd: release socket [ 280.043002][ T1143] vhci_hcd: disconnect device [ 280.173213][ T31] libceph: connect (1)[c::]:6789 error -101 [ 280.176527][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 280.217972][T11638] ceph: No mds server is up or the cluster is laggy [ 280.682588][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 280.980737][T11650] netlink: 'syz.2.1581': attribute type 10 has an invalid length. [ 281.044970][T11653] xt_CT: No such helper "snmp" [ 281.453592][ T8119] usb 8-1: USB disconnect, device number 18 [ 281.509992][T11658] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 281.722458][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 282.122608][ T58] vhci_hcd: vhci_device speed not set [ 282.391917][T11688] netlink: 'syz.0.1592': attribute type 2 has an invalid length. [ 282.762550][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 282.908962][T11706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1597'. [ 283.278913][T11721] netlink: 'syz.0.1602': attribute type 10 has an invalid length. [ 283.282095][T11721] bridge0: port 3(syz_tun) entered disabled state [ 283.288847][T11721] bridge0: port 3(syz_tun) entered blocking state [ 283.290753][T11721] bridge0: port 3(syz_tun) entered forwarding state [ 283.293936][T11721] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 283.407545][T11728] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1604'. [ 283.499897][T11730] netlink: 'syz.2.1605': attribute type 1 has an invalid length. [ 283.802465][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 284.165510][T11748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1610'. [ 284.531469][T11759] sctp: [Deprecated]: syz.2.1614 (pid 11759) Use of struct sctp_assoc_value in delayed_ack socket option. [ 284.531469][T11759] Use struct sctp_sack_info instead [ 284.842490][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 285.263750][T11781] syz.0.1619: attempt to access beyond end of device [ 285.263750][T11781] nbd0: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 285.268373][T11781] XFS (nbd0): SB validate failed with error -5. [ 285.310395][T11791] FAULT_INJECTION: forcing a failure. [ 285.310395][T11791] name failslab, interval 1, probability 0, space 0, times 0 [ 285.314022][T11791] CPU: 1 UID: 0 PID: 11791 Comm: syz.3.1620 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 285.314038][T11791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 285.314045][T11791] Call Trace: [ 285.314048][T11791] [ 285.314052][T11791] dump_stack_lvl+0x16c/0x1f0 [ 285.314073][T11791] should_fail_ex+0x50a/0x650 [ 285.314084][T11791] ? fs_reclaim_acquire+0xae/0x150 [ 285.314102][T11791] ? tomoyo_realpath_from_path+0xb9/0x720 [ 285.314118][T11791] should_failslab+0xc2/0x120 [ 285.314128][T11791] __kmalloc_noprof+0xcb/0x510 [ 285.314144][T11791] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 285.314163][T11791] tomoyo_realpath_from_path+0xb9/0x720 [ 285.314178][T11791] ? tomoyo_path_number_perm+0x235/0x590 [ 285.314191][T11791] ? tomoyo_path_number_perm+0x235/0x590 [ 285.314206][T11791] tomoyo_path_number_perm+0x248/0x590 [ 285.314218][T11791] ? tomoyo_path_number_perm+0x235/0x590 [ 285.314232][T11791] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 285.314257][T11791] ? __pfx_lock_release+0x10/0x10 [ 285.314271][T11791] ? trace_lock_acquire+0x14e/0x1f0 [ 285.314286][T11791] ? lock_acquire+0x2f/0xb0 [ 285.314302][T11791] ? __fget_files+0x40/0x3a0 [ 285.314321][T11791] ? __fget_files+0x206/0x3a0 [ 285.314338][T11791] security_file_ioctl_compat+0x9b/0x240 [ 285.314354][T11791] __do_compat_sys_ioctl+0x4e/0x2c0 [ 285.314369][T11791] __do_fast_syscall_32+0x73/0x120 [ 285.314385][T11791] do_fast_syscall_32+0x32/0x80 [ 285.314400][T11791] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 285.314418][T11791] RIP: 0023:0xf7f53579 [ 285.314426][T11791] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 285.314437][T11791] RSP: 002b:00000000f505555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 285.314447][T11791] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000040086200 [ 285.314453][T11791] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 285.314459][T11791] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 285.314466][T11791] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 285.314472][T11791] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 285.314484][T11791] [ 285.314488][T11791] ERROR: Out of memory at tomoyo_realpath_from_path. [ 285.882441][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 286.612869][T11817] netlink: 'syz.0.1626': attribute type 21 has an invalid length. [ 286.615003][T11817] IPv6: NLM_F_CREATE should be specified when creating new route [ 286.672533][ T6084] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 286.822507][ T6084] usb 6-1: Using ep0 maxpacket: 8 [ 286.826815][ T6084] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 286.829559][ T6084] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.831785][ T6084] usb 6-1: Product: syz [ 286.833088][ T6084] usb 6-1: Manufacturer: syz [ 286.834397][ T6084] usb 6-1: SerialNumber: syz [ 286.836906][ T6084] usb 6-1: config 0 descriptor?? [ 286.922436][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 287.049014][ T6084] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 287.227198][T11824] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 287.254685][T11809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1627'. [ 287.258311][T11809] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1627'. [ 287.290794][ T6084] gspca_sunplus: reg_w_riv err -71 [ 287.292297][ T6084] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 287.296056][ T6084] usb 6-1: USB disconnect, device number 20 [ 287.870884][T11829] netlink: 4188 bytes leftover after parsing attributes in process `syz.1.1632'. [ 287.972494][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 288.252628][ T8119] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 288.383998][T11837] netlink: zone id is out of range [ 288.385838][T11837] netlink: zone id is out of range [ 288.387637][T11837] netlink: zone id is out of range [ 288.389465][T11837] netlink: zone id is out of range [ 288.391037][T11837] netlink: zone id is out of range [ 288.398836][T11837] syz.2.1634: attempt to access beyond end of device [ 288.398836][T11837] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 288.402465][ T8119] usb 6-1: device descriptor read/64, error -71 [ 288.402876][T11837] SQUASHFS error: Failed to read block 0x0: -5 [ 288.414740][T11837] unable to read squashfs_super_block [ 288.642662][ T8119] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 288.772516][ T8119] usb 6-1: device descriptor read/64, error -71 [ 288.885379][ T8119] usb usb6-port1: attempt power cycle [ 289.035867][T11840] FAULT_INJECTION: forcing a failure. [ 289.035867][T11840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.039448][T11840] CPU: 2 UID: 0 PID: 11840 Comm: syz.2.1635 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 289.039462][T11840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 289.039469][T11840] Call Trace: [ 289.039472][T11840] [ 289.039477][T11840] dump_stack_lvl+0x16c/0x1f0 [ 289.039495][T11840] should_fail_ex+0x50a/0x650 [ 289.039508][T11840] _copy_from_iter+0x2a1/0x1560 [ 289.039520][T11840] ? trace_lock_acquire+0x14e/0x1f0 [ 289.039533][T11840] ? __alloc_skb+0x1fe/0x380 [ 289.039548][T11840] ? __pfx__copy_from_iter+0x10/0x10 [ 289.039559][T11840] ? __virt_addr_valid+0x1a4/0x590 [ 289.039576][T11840] ? __virt_addr_valid+0x5e/0x590 [ 289.039586][T11840] ? __phys_addr_symbol+0x30/0x80 [ 289.039597][T11840] ? __check_object_size+0x488/0x710 [ 289.039610][T11840] netlink_sendmsg+0x813/0xd70 [ 289.039628][T11840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.039648][T11840] ____sys_sendmsg+0xaaf/0xc90 [ 289.039661][T11840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.039673][T11840] ? get_compat_msghdr+0x11b/0x170 [ 289.039692][T11840] ___sys_sendmsg+0x135/0x1e0 [ 289.039709][T11840] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.039730][T11840] ? trace_lock_acquire+0x14e/0x1f0 [ 289.039750][T11840] __sys_sendmmsg+0x2fa/0x420 [ 289.039768][T11840] ? __pfx___sys_sendmmsg+0x10/0x10 [ 289.039784][T11840] ? __pfx___lock_acquire+0x10/0x10 [ 289.039803][T11840] ? find_held_lock+0x2d/0x110 [ 289.039819][T11840] ? lock_acquire+0x2f/0xb0 [ 289.039832][T11840] ? __might_fault+0xe3/0x190 [ 289.039843][T11840] ? __might_fault+0xe3/0x190 [ 289.039855][T11840] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 289.039870][T11840] __do_fast_syscall_32+0x73/0x120 [ 289.039886][T11840] do_fast_syscall_32+0x32/0x80 [ 289.039902][T11840] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 289.039919][T11840] RIP: 0023:0xf7f48579 [ 289.039928][T11840] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 289.039938][T11840] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 289.039948][T11840] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800002c0 [ 289.039955][T11840] RDX: 000000000000009f RSI: 0000000000000000 RDI: 0000000000000000 [ 289.039961][T11840] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 289.039967][T11840] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 289.039973][T11840] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 289.039984][T11840] [ 289.242665][ T8119] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 289.275635][ T8119] usb 6-1: device descriptor read/8, error -71 [ 289.345294][T11848] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=47 (94 ns) > initial count (88 ns). Using initial count to start timer. [ 289.512496][ T8119] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 289.532933][ T8119] usb 6-1: device descriptor read/8, error -71 [ 289.642961][ T8119] usb usb6-port1: unable to enumerate USB device [ 290.042478][ C3] net_ratelimit: 3 callbacks suppressed [ 290.042489][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 290.750197][T11866] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1643'. [ 291.007853][T11871] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 291.010432][T11871] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 291.015448][T11871] vhci_hcd vhci_hcd.0: Device attached [ 291.082461][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 291.262616][ T59] usb 39-1: new low-speed USB device number 13 using vhci_hcd [ 291.840675][T11872] vhci_hcd: connection reset by peer [ 291.845445][ T1143] vhci_hcd: stop threads [ 291.847053][ T1143] vhci_hcd: release socket [ 291.848850][ T1143] vhci_hcd: disconnect device [ 292.132466][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 293.162457][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 293.317408][ T5957] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 293.449255][T11948] netlink: 'syz.1.1656': attribute type 10 has an invalid length. [ 293.582321][T11956] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 293.584262][T11956] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 293.587612][T11956] vhci_hcd vhci_hcd.0: Device attached [ 293.881098][T11965] Cannot find add_set index 3 as target [ 294.089034][ T8119] usb 43-1: new low-speed USB device number 15 using vhci_hcd [ 294.212483][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 294.506424][T11957] vhci_hcd: connection reset by peer [ 294.508402][ T1143] vhci_hcd: stop threads [ 294.509637][ T1143] vhci_hcd: release socket [ 294.510995][ T1143] vhci_hcd: disconnect device [ 294.828147][T11975] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 294.831582][T11975] overlayfs: overlapping lowerdir path [ 295.070382][T11977] input: syz1 as /devices/virtual/input/input20 [ 295.242477][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 296.282555][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 296.352618][ T59] vhci_hcd: vhci_device speed not set [ 296.882469][ T5982] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 297.032468][ T5982] usb 7-1: Using ep0 maxpacket: 8 [ 297.035802][ T5982] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 297.039008][ T5982] usb 7-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 297.044663][ T5982] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 297.048130][ T5982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.261857][ T6911] usb 7-1: USB disconnect, device number 19 [ 297.322496][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 297.890619][ T40] kauditd_printk_skb: 80 callbacks suppressed [ 297.890630][ T40] audit: type=1804 audit(2000000487.682:1933): pid=12055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1684" name="/newroot/422/file0/file0" dev="9p" ino=37748779 res=1 errno=0 [ 298.362479][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 299.232599][ T8119] vhci_hcd: vhci_device speed not set [ 299.402594][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 299.531122][T12091] tipc: Started in network mode [ 299.533496][T12091] tipc: Node identity 4, cluster identity 4711 [ 299.535270][T12091] tipc: Node number set to 4 [ 299.993524][T12099] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 299.995579][T12099] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 300.002940][T12099] vhci_hcd vhci_hcd.0: Device attached [ 300.302495][ T59] usb 41-1: new low-speed USB device number 13 using vhci_hcd [ 300.442477][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 300.813610][T12100] vhci_hcd: connection reset by peer [ 300.816088][ T13] vhci_hcd: stop threads [ 300.817391][ T13] vhci_hcd: release socket [ 300.818756][ T13] vhci_hcd: disconnect device [ 301.482482][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 302.007391][T12148] 9pnet_virtio: no channels available for device 127.0.0.1 [ 302.522561][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 302.582499][ T6084] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 302.712509][ T58] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 302.782548][ T6084] usb 6-1: Using ep0 maxpacket: 32 [ 302.789714][ T6084] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 302.794556][ T6084] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 302.797048][ T6084] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 302.799319][ T6084] usb 6-1: Product: syz [ 302.800481][ T6084] usb 6-1: Manufacturer: syz [ 302.801786][ T6084] usb 6-1: SerialNumber: syz [ 302.803965][ T6084] usb 6-1: config 0 descriptor?? [ 302.806733][T12155] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 302.933941][ T58] usb 8-1: config 0 has no interfaces? [ 302.935607][ T58] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 302.938464][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.939296][T12167] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1715'. [ 302.943936][ T58] usb 8-1: config 0 descriptor?? [ 303.046642][T12155] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.049423][T12155] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.051958][T12155] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.054791][T12155] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.057206][T12155] geneve2: entered promiscuous mode [ 303.187186][ T58] usb 6-1: USB disconnect, device number 25 [ 303.250527][T12150] could not allocate digest TFM handle sha256-arm64 [ 303.268515][ T5982] usb 8-1: USB disconnect, device number 19 [ 303.562591][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 303.857803][T12191] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 304.362603][ T6009] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 304.530431][ T6009] usb 6-1: Using ep0 maxpacket: 8 [ 304.535240][ T6009] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.538280][ T6009] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 304.540978][ T6009] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 304.567077][ T6009] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 304.570231][ T6009] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.574801][ T6009] usb 6-1: Product: syz [ 304.576276][ T6009] usb 6-1: Manufacturer: syz [ 304.577650][ T6009] usb 6-1: SerialNumber: syz [ 304.602489][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 304.614729][ T5955] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 304.803336][ T6009] cdc_ncm 6-1:1.0: bind() failure [ 304.806352][ T6009] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 304.808261][ T6009] cdc_ncm 6-1:1.1: bind() failure [ 304.816006][ T6009] usb 6-1: USB disconnect, device number 26 [ 304.839833][T12213] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 304.855997][ T1140] Bluetooth: hci4: Frame reassembly failed (-84) [ 304.880469][ T40] audit: type=1326 audit(2000000494.672:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12209 comm="syz.3.1726" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x0 [ 305.392562][ T59] vhci_hcd: vhci_device speed not set [ 305.642536][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 305.674675][T12235] netlink: 'syz.3.1734': attribute type 10 has an invalid length. [ 305.676822][T12238] syzkaller1: entered promiscuous mode [ 305.679270][T12238] syzkaller1: entered allmulticast mode [ 305.682252][T12235] bridge0: port 3(dummy0) entered disabled state [ 305.990846][ T5957] Bluetooth: hci2: unexpected event for opcode 0x0c24 [ 306.097338][T12262] netlink: 'syz.0.1744': attribute type 10 has an invalid length. [ 306.100280][T12262] bridge0: port 3(syz_tun) entered disabled state [ 306.156817][T12267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1746'. [ 306.159552][T12267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1746'. [ 306.192563][T12270] netlink: 'syz.0.1747': attribute type 9 has an invalid length. [ 306.194844][T12270] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1747'. [ 306.692495][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 306.692928][ T6007] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 306.842637][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 306.868758][ T6007] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 306.874439][ T6007] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 306.878065][ T6007] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 306.881267][ T6007] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.897397][T12276] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 306.901877][ T6007] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 307.106121][ T59] usb 5-1: USB disconnect, device number 13 [ 307.254577][T12292] lo speed is unknown, defaulting to 1000 [ 307.257064][T12292] lo speed is unknown, defaulting to 1000 [ 307.261696][T12292] lo speed is unknown, defaulting to 1000 [ 307.273628][T12292] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 307.282213][T12292] infiniband sy2: RDMA CMA: cma_listen_on_dev, error -98 [ 307.304871][T12292] lo speed is unknown, defaulting to 1000 [ 307.307707][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1752'. [ 307.308201][T12292] lo speed is unknown, defaulting to 1000 [ 307.313309][T12292] lo speed is unknown, defaulting to 1000 [ 307.317875][T12292] lo speed is unknown, defaulting to 1000 [ 307.605278][T12304] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 307.630905][T12308] sctp: [Deprecated]: syz.1.1759 (pid 12308) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.630905][T12308] Use struct sctp_sack_info instead [ 307.647072][T12308] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1759'. [ 307.653238][T12308] netlink: 'syz.1.1759': attribute type 7 has an invalid length. [ 307.732498][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 307.751390][T12314] wg2: entered allmulticast mode [ 307.796627][T12314] lo speed is unknown, defaulting to 1000 [ 307.811403][T12317] sch_tbf: burst 7710 is lower than device lo mtu (65550) ! [ 307.854771][T12321] autofs: Unknown parameter './file1' [ 308.112769][ T59] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 308.132623][T12334] bond0: (slave bond_slave_0): Releasing backup interface [ 308.136770][T12334] bond0: (slave bond_slave_1): Releasing backup interface [ 308.140793][T12334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.146439][T12334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.150560][T12334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.154577][T12334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.165493][T12334] batman_adv: batadv0: Removing interface: vxlan0 [ 308.282926][ T59] usb 6-1: Using ep0 maxpacket: 8 [ 308.293404][ T59] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 308.297095][ T59] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 308.300042][ T59] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 308.303074][ T59] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.306630][ T59] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 308.309152][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.515960][ T59] usb 6-1: GET_CAPABILITIES returned 0 [ 308.517878][ T59] usbtmc 6-1:16.0: can't read capabilities [ 308.721750][ T59] usb 6-1: USB disconnect, device number 27 [ 308.762643][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 308.959711][T12350] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1771'. [ 309.371951][ T40] audit: type=1326 audit(2000000499.162:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12359 comm="syz.0.1776" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x0 [ 309.445109][ T5955] block nbd2: Receive control failed (result -32) [ 309.481667][ T6115] block nbd2: shutting down sockets [ 309.638786][T12369] 9p: Unknown Cache mode or invalid value fscach [ 309.812498][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 310.401483][T12383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1782'. [ 310.633704][T12386] sp0: Synchronizing with TNC [ 310.717724][T12390] fuse: Bad value for 'fd' [ 310.808122][ T40] audit: type=1326 audit(2000000500.602:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12396 comm="syz.0.1788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 310.814298][ T40] audit: type=1326 audit(2000000500.602:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12396 comm="syz.0.1788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 310.820290][ T40] audit: type=1326 audit(2000000500.602:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12396 comm="syz.0.1788" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 310.826553][ T40] audit: type=1326 audit(2000000500.602:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12396 comm="syz.0.1788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 310.832718][ T40] audit: type=1326 audit(2000000500.602:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12396 comm="syz.0.1788" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 310.839276][ T40] audit: type=1326 audit(2000000500.602:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12396 comm="syz.0.1788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 310.845559][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 310.849926][ T40] audit: type=1326 audit(2000000500.602:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12396 comm="syz.0.1788" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 310.856414][ T40] audit: type=1326 audit(2000000500.602:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12396 comm="syz.0.1788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 310.864913][ T40] audit: type=1326 audit(2000000500.602:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12396 comm="syz.0.1788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 310.871094][ T40] audit: type=1326 audit(2000000500.602:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12396 comm="syz.0.1788" exe="/syz-executor" sig=0 arch=40000003 syscall=264 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 310.913490][T12401] lo speed is unknown, defaulting to 1000 [ 311.083520][T12408] lo speed is unknown, defaulting to 1000 [ 311.552535][ T58] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 311.616972][T12413] IPVS: Error connecting to the multicast addr [ 311.722509][ T58] usb 7-1: Using ep0 maxpacket: 16 [ 311.728481][ T58] usb 7-1: config 0 has an invalid descriptor of length 136, skipping remainder of the config [ 311.731321][ T58] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 311.735218][ T58] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.738742][ T58] usb 7-1: config 0 interface 0 has no altsetting 0 [ 311.742654][ T58] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 311.745121][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.747324][ T58] usb 7-1: Product: syz [ 311.748501][ T58] usb 7-1: Manufacturer: syz [ 311.749875][ T58] usb 7-1: SerialNumber: syz [ 311.752811][ T58] usb 7-1: config 0 descriptor?? [ 311.790128][T12418] [U] \ [ 311.791263][T12418] [U] :$v_ekTҕ N,)SF>,V>+x6=)yZު [ 311.793510][T12418] [U] eK ڽO&E|%:zyn1׀- G ^{sхY *׀vׇBOJBWBe'q:r ѾVn*1;"wЉ, mDAǤEr-f^Ǥkdڷmk#˩QqT0fiQyzQ`?"mlPUŽWX' D~2`f~;7xHH~fD'PYJhxhOF [ 311.882489][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 312.368463][T12425] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 312.519077][T12437] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 312.520906][T12437] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 312.524543][T12437] vhci_hcd vhci_hcd.0: Device attached [ 312.547485][T12441] ref_ctr going negative. vaddr: 0x80ffc002, curr val: -29824, delta: 1 [ 312.550351][T12441] ref_ctr increment failed for inode: 0x8fe offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888069793c00 [ 312.633745][T12443] netlink: 'syz.3.1803': attribute type 27 has an invalid length. [ 312.645685][T12443] bridge5: left promiscuous mode [ 312.647699][T12443] vxlan0: left promiscuous mode [ 312.653425][T12443] vxlan0: left allmulticast mode [ 312.655660][T12443] bond2: left promiscuous mode [ 312.657090][T12443] ip6gre1: left promiscuous mode [ 312.659404][T12443] bond3: left promiscuous mode [ 312.671324][T12443] gretap0: entered promiscuous mode [ 312.684764][T12443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.688047][T12443] bridge0: port 3(dummy0) entered blocking state [ 312.689917][T12443] bridge0: port 3(dummy0) entered forwarding state [ 312.692920][ T1140] [ 312.693852][ T1140] ============================= [ 312.695206][ T1140] WARNING: suspicious RCU usage [ 312.696616][ T1140] 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 Not tainted [ 312.700154][ T1140] ----------------------------- [ 312.701803][ T1140] net/sched/sch_generic.c:1251 suspicious rcu_dereference_protected() usage! [ 312.704458][ T1140] [ 312.704458][ T1140] other info that might help us debug this: [ 312.704458][ T1140] [ 312.707292][ T1140] [ 312.707292][ T1140] rcu_scheduler_active = 2, debug_locks = 1 [ 312.709522][ T1140] 3 locks held by kworker/u32:6/1140: [ 312.711133][ T1140] #0: ffff88804d8c9948 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 312.714219][ T1140] #1: ffffc90006de7d18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 312.717587][ T1140] #2: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 [ 312.720284][ T1140] [ 312.720284][ T1140] stack backtrace: [ 312.721929][ T1140] CPU: 2 UID: 0 PID: 1140 Comm: kworker/u32:6 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 312.721944][ T1140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 312.721951][ T1140] Workqueue: bond0 bond_mii_monitor [ 312.721968][ T1140] Call Trace: [ 312.721972][ T1140] [ 312.721977][ T1140] dump_stack_lvl+0x16c/0x1f0 [ 312.721994][ T1140] lockdep_rcu_suspicious+0x210/0x3c0 [ 312.722010][ T1140] dev_activate+0x457/0x12b0 [ 312.722024][ T1140] ? lockdep_hardirqs_on+0x7c/0x110 [ 312.722039][ T1140] ? preempt_schedule_thunk+0x1a/0x30 [ 312.722054][ T1140] ? __pfx_dev_activate+0x10/0x10 [ 312.722066][ T1140] ? preempt_schedule_common+0x44/0xc0 [ 312.722080][ T1140] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 312.722099][ T1140] linkwatch_do_dev+0x13d/0x160 [ 312.722111][ T1140] linkwatch_sync_dev+0x181/0x210 [ 312.722137][ T1140] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 312.722153][ T1140] ethtool_op_get_link+0x1d/0x70 [ 312.722168][ T1140] bond_check_dev_link+0x197/0x490 [ 312.722182][ T1140] ? __pfx_bond_check_dev_link+0x10/0x10 [ 312.722203][ T1140] bond_mii_monitor+0x3c1/0x2d90 [ 312.722223][ T1140] ? __pfx_bond_mii_monitor+0x10/0x10 [ 312.722239][ T1140] ? rcu_is_watching+0x12/0xc0 [ 312.722253][ T1140] ? lock_acquire+0x2f/0xb0 [ 312.722266][ T1140] ? process_one_work+0x921/0x1ba0 [ 312.722282][ T1140] process_one_work+0x9c5/0x1ba0 [ 312.722300][ T1140] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 312.722315][ T1140] ? __pfx_process_one_work+0x10/0x10 [ 312.722333][ T1140] ? assign_work+0x1a0/0x250 [ 312.722347][ T1140] worker_thread+0x6c8/0xf00 [ 312.722380][ T1140] ? __pfx_worker_thread+0x10/0x10 [ 312.722395][ T1140] kthread+0x3af/0x750 [ 312.722408][ T1140] ? __pfx_kthread+0x10/0x10 [ 312.722420][ T1140] ? lock_acquire+0x2f/0xb0 [ 312.722435][ T1140] ? __pfx_kthread+0x10/0x10 [ 312.722448][ T1140] ret_from_fork+0x45/0x80 [ 312.722462][ T1140] ? __pfx_kthread+0x10/0x10 [ 312.722474][ T1140] ret_from_fork_asm+0x1a/0x30 [ 312.722491][ T1140] [ 312.780203][ T1140] [ 312.780916][ T1140] ============================= [ 312.782304][ T1140] WARNING: suspicious RCU usage [ 312.783708][ T1140] 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 Not tainted [ 312.785664][ T1140] ----------------------------- [ 312.787007][ T1140] net/sched/sch_generic.c:1229 suspicious rcu_dereference_protected() usage! [ 312.789425][ T1140] [ 312.789425][ T1140] other info that might help us debug this: [ 312.789425][ T1140] [ 312.792216][ T1140] [ 312.792216][ T1140] rcu_scheduler_active = 2, debug_locks = 1 [ 312.794511][ T1140] 3 locks held by kworker/u32:6/1140: [ 312.795999][ T1140] #0: ffff88804d8c9948 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 312.798962][ T1140] #1: ffffc90006de7d18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 312.802307][ T1140] #2: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 [ 312.804990][ T1140] [ 312.804990][ T1140] stack backtrace: [ 312.806616][ T1140] CPU: 2 UID: 0 PID: 1140 Comm: kworker/u32:6 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 312.806629][ T1140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 312.806637][ T1140] Workqueue: bond0 bond_mii_monitor [ 312.806653][ T1140] Call Trace: [ 312.806657][ T1140] [ 312.806661][ T1140] dump_stack_lvl+0x16c/0x1f0 [ 312.806678][ T1140] lockdep_rcu_suspicious+0x210/0x3c0 [ 312.806695][ T1140] transition_one_qdisc+0x1d4/0x210 [ 312.806708][ T1140] dev_activate+0x211/0x12b0 [ 312.806722][ T1140] ? preempt_schedule_thunk+0x1a/0x30 [ 312.806737][ T1140] ? __pfx_dev_activate+0x10/0x10 [ 312.806750][ T1140] ? preempt_schedule_common+0x44/0xc0 [ 312.806763][ T1140] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 312.806782][ T1140] linkwatch_do_dev+0x13d/0x160 [ 312.806794][ T1140] linkwatch_sync_dev+0x181/0x210 [ 312.806806][ T1140] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 312.806822][ T1140] ethtool_op_get_link+0x1d/0x70 [ 312.806837][ T1140] bond_check_dev_link+0x197/0x490 [ 312.806852][ T1140] ? __pfx_bond_check_dev_link+0x10/0x10 [ 312.806873][ T1140] bond_mii_monitor+0x3c1/0x2d90 [ 312.806893][ T1140] ? __pfx_bond_mii_monitor+0x10/0x10 [ 312.806909][ T1140] ? rcu_is_watching+0x12/0xc0 [ 312.806923][ T1140] ? lock_acquire+0x2f/0xb0 [ 312.806937][ T1140] ? process_one_work+0x921/0x1ba0 [ 312.806952][ T1140] process_one_work+0x9c5/0x1ba0 [ 312.806971][ T1140] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 312.806986][ T1140] ? __pfx_process_one_work+0x10/0x10 [ 312.807004][ T1140] ? assign_work+0x1a0/0x250 [ 312.807018][ T1140] worker_thread+0x6c8/0xf00 [ 312.807037][ T1140] ? __pfx_worker_thread+0x10/0x10 [ 312.807052][ T1140] kthread+0x3af/0x750 [ 312.807065][ T1140] ? __pfx_kthread+0x10/0x10 [ 312.807077][ T1140] ? lock_acquire+0x2f/0xb0 [ 312.807093][ T1140] ? __pfx_kthread+0x10/0x10 [ 312.807106][ T1140] ret_from_fork+0x45/0x80 [ 312.807121][ T1140] ? __pfx_kthread+0x10/0x10 [ 312.807133][ T1140] ret_from_fork_asm+0x1a/0x30 [ 312.807151][ T1140] [ 312.807156][ T1140] [ 312.866472][ T1140] ============================= [ 312.867835][ T1140] WARNING: suspicious RCU usage [ 312.869181][ T1140] 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 Not tainted [ 312.871127][ T1140] ----------------------------- [ 312.872695][ T1140] ./include/linux/rtnetlink.h:162 suspicious rcu_dereference_protected() usage! [ 312.875175][ T1140] [ 312.875175][ T1140] other info that might help us debug this: [ 312.875175][ T1140] [ 312.877961][ T1140] [ 312.877961][ T1140] rcu_scheduler_active = 2, debug_locks = 1 [ 312.880174][ T1140] 3 locks held by kworker/u32:6/1140: [ 312.881667][ T1140] #0: ffff88804d8c9948 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 312.884622][ T1140] #1: ffffc90006de7d18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 312.887985][ T1140] #2: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 [ 312.890662][ T1140] [ 312.890662][ T1140] stack backtrace: [ 312.892300][ T1140] CPU: 2 UID: 0 PID: 1140 Comm: kworker/u32:6 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 312.892313][ T1140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 312.892320][ T1140] Workqueue: bond0 bond_mii_monitor [ 312.892337][ T1140] Call Trace: [ 312.892340][ T1140] [ 312.892345][ T1140] dump_stack_lvl+0x16c/0x1f0 [ 312.892375][ T1140] lockdep_rcu_suspicious+0x210/0x3c0 [ 312.892392][ T1140] dev_activate+0x7eb/0x12b0 [ 312.892407][ T1140] ? preempt_schedule_thunk+0x1a/0x30 [ 312.892422][ T1140] ? __pfx_dev_activate+0x10/0x10 [ 312.892435][ T1140] ? preempt_schedule_common+0x44/0xc0 [ 312.892449][ T1140] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 312.892468][ T1140] linkwatch_do_dev+0x13d/0x160 [ 312.892480][ T1140] linkwatch_sync_dev+0x181/0x210 [ 312.892492][ T1140] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 312.892508][ T1140] ethtool_op_get_link+0x1d/0x70 [ 312.892524][ T1140] bond_check_dev_link+0x197/0x490 [ 312.892539][ T1140] ? __pfx_bond_check_dev_link+0x10/0x10 [ 312.892559][ T1140] bond_mii_monitor+0x3c1/0x2d90 [ 312.892579][ T1140] ? __pfx_bond_mii_monitor+0x10/0x10 [ 312.892595][ T1140] ? rcu_is_watching+0x12/0xc0 [ 312.892609][ T1140] ? lock_acquire+0x2f/0xb0 [ 312.892622][ T1140] ? process_one_work+0x921/0x1ba0 [ 312.892638][ T1140] process_one_work+0x9c5/0x1ba0 [ 312.892656][ T1140] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 312.892671][ T1140] ? __pfx_process_one_work+0x10/0x10 [ 312.892689][ T1140] ? assign_work+0x1a0/0x250 [ 312.892703][ T1140] worker_thread+0x6c8/0xf00 [ 312.892722][ T1140] ? __pfx_worker_thread+0x10/0x10 [ 312.892736][ T1140] kthread+0x3af/0x750 [ 312.892750][ T1140] ? __pfx_kthread+0x10/0x10 [ 312.892762][ T1140] ? lock_acquire+0x2f/0xb0 [ 312.892778][ T1140] ? __pfx_kthread+0x10/0x10 [ 312.892791][ T1140] ret_from_fork+0x45/0x80 [ 312.892804][ T1140] ? __pfx_kthread+0x10/0x10 [ 312.892817][ T1140] ret_from_fork_asm+0x1a/0x30 [ 312.892834][ T1140] [ 312.922597][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 312.923748][ T59] usb 39-1: new low-speed USB device number 14 using vhci_hcd [ 312.950635][ T1140] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523 [ 312.953415][ T1140] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 1140, name: kworker/u32:6 [ 312.955932][ T1140] preempt_count: 0, expected: 0 [ 312.957278][ T1140] RCU nest depth: 1, expected: 0 [ 312.958745][ T1140] 3 locks held by kworker/u32:6/1140: [ 312.960225][ T1140] #0: ffff88804d8c9948 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 312.963165][ T1140] #1: ffffc90006de7d18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 312.966492][ T1140] #2: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 [ 312.969281][ T1140] CPU: 2 UID: 0 PID: 1140 Comm: kworker/u32:6 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 312.969295][ T1140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 312.969304][ T1140] Workqueue: bond0 bond_mii_monitor [ 312.969321][ T1140] Call Trace: [ 312.969325][ T1140] [ 312.969330][ T1140] dump_stack_lvl+0x16c/0x1f0 [ 312.969350][ T1140] __might_resched+0x3c0/0x5e0 [ 312.969368][ T1140] ? __pfx___might_resched+0x10/0x10 [ 312.969388][ T1140] down_read+0x73/0x330 [ 312.969404][ T1140] ? __pfx_down_read+0x10/0x10 [ 312.969420][ T1140] ? dev_map_notification+0x6a/0xaf0 [ 312.969430][ T1140] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 312.969450][ T1140] wireless_nlevent_flush+0x1b/0x100 [ 312.969466][ T1140] wext_netdev_notifier_call+0xe/0x20 [ 312.969479][ T1140] notifier_call_chain+0xb7/0x410 [ 312.969491][ T1140] ? __pfx_wext_netdev_notifier_call+0x10/0x10 [ 312.969522][ T1140] call_netdevice_notifiers_info+0xbe/0x140 [ 312.969538][ T1140] netdev_state_change+0x115/0x150 [ 312.969549][ T1140] ? __pfx_netdev_state_change+0x10/0x10 [ 312.969563][ T1140] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 312.969582][ T1140] linkwatch_do_dev+0x12b/0x160 [ 312.969594][ T1140] linkwatch_sync_dev+0x181/0x210 [ 312.969606][ T1140] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 312.969623][ T1140] ethtool_op_get_link+0x1d/0x70 [ 312.969638][ T1140] bond_check_dev_link+0x197/0x490 [ 312.969653][ T1140] ? __pfx_bond_check_dev_link+0x10/0x10 [ 312.969674][ T1140] bond_mii_monitor+0x3c1/0x2d90 [ 312.969695][ T1140] ? __pfx_bond_mii_monitor+0x10/0x10 [ 312.969712][ T1140] ? rcu_is_watching+0x12/0xc0 [ 312.969726][ T1140] ? lock_acquire+0x2f/0xb0 [ 312.969740][ T1140] ? process_one_work+0x921/0x1ba0 [ 312.969756][ T1140] process_one_work+0x9c5/0x1ba0 [ 312.969774][ T1140] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 312.969789][ T1140] ? __pfx_process_one_work+0x10/0x10 [ 312.969807][ T1140] ? assign_work+0x1a0/0x250 [ 312.969821][ T1140] worker_thread+0x6c8/0xf00 [ 312.969840][ T1140] ? __pfx_worker_thread+0x10/0x10 [ 312.969855][ T1140] kthread+0x3af/0x750 [ 312.969868][ T1140] ? __pfx_kthread+0x10/0x10 [ 312.969880][ T1140] ? lock_acquire+0x2f/0xb0 [ 312.969896][ T1140] ? __pfx_kthread+0x10/0x10 [ 312.969909][ T1140] ret_from_fork+0x45/0x80 [ 312.969923][ T1140] ? __pfx_kthread+0x10/0x10 [ 312.969935][ T1140] ret_from_fork_asm+0x1a/0x30 [ 312.969954][ T1140] [ 312.969958][ T1140] [ 313.034941][ T1140] ============================= [ 313.036287][ T1140] [ BUG: Invalid wait context ] [ 313.037660][ T1140] 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 Tainted: G W [ 313.040018][ T1140] ----------------------------- [ 313.041360][ T1140] kworker/u32:6/1140 is trying to lock: [ 313.042893][ T1140] ffffffff8fee4190 (net_rwsem){++++}-{4:4}, at: wireless_nlevent_flush+0x1b/0x100 [ 313.045397][ T1140] other info that might help us debug this: [ 313.047047][ T1140] context-{5:5} [ 313.048049][ T1140] 3 locks held by kworker/u32:6/1140: [ 313.049523][ T1140] #0: ffff88804d8c9948 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 313.052370][ T1140] #1: ffffc90006de7d18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 313.055664][ T1140] #2: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 [ 313.058325][ T1140] stack backtrace: [ 313.059388][ T1140] CPU: 2 UID: 0 PID: 1140 Comm: kworker/u32:6 Tainted: G W 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 313.059403][ T1140] Tainted: [W]=WARN [ 313.059406][ T1140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 313.059414][ T1140] Workqueue: bond0 bond_mii_monitor [ 313.059431][ T1140] Call Trace: [ 313.059435][ T1140] [ 313.059439][ T1140] dump_stack_lvl+0x116/0x1f0 [ 313.059455][ T1140] __lock_acquire+0x878/0x3c40 [ 313.059471][ T1140] ? __pfx___lock_acquire+0x10/0x10 [ 313.059487][ T1140] lock_acquire.part.0+0x11b/0x380 [ 313.059502][ T1140] ? wireless_nlevent_flush+0x1b/0x100 [ 313.059515][ T1140] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 313.059530][ T1140] ? rcu_is_watching+0x12/0xc0 [ 313.059541][ T1140] ? trace_lock_acquire+0x14e/0x1f0 [ 313.059552][ T1140] ? __might_resched+0x3cc/0x5e0 [ 313.059567][ T1140] ? wireless_nlevent_flush+0x1b/0x100 [ 313.059580][ T1140] ? lock_acquire+0x2f/0xb0 [ 313.059593][ T1140] ? wireless_nlevent_flush+0x1b/0x100 [ 313.059607][ T1140] down_read+0x9a/0x330 [ 313.059622][ T1140] ? wireless_nlevent_flush+0x1b/0x100 [ 313.059634][ T1140] ? __pfx_down_read+0x10/0x10 [ 313.059649][ T1140] ? dev_map_notification+0x6a/0xaf0 [ 313.059659][ T1140] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 313.059676][ T1140] wireless_nlevent_flush+0x1b/0x100 [ 313.059689][ T1140] wext_netdev_notifier_call+0xe/0x20 [ 313.059702][ T1140] notifier_call_chain+0xb7/0x410 [ 313.059713][ T1140] ? __pfx_wext_netdev_notifier_call+0x10/0x10 [ 313.059728][ T1140] call_netdevice_notifiers_info+0xbe/0x140 [ 313.059740][ T1140] netdev_state_change+0x115/0x150 [ 313.059751][ T1140] ? __pfx_netdev_state_change+0x10/0x10 [ 313.059763][ T1140] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 313.059779][ T1140] linkwatch_do_dev+0x12b/0x160 [ 313.059791][ T1140] linkwatch_sync_dev+0x181/0x210 [ 313.059802][ T1140] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 313.059818][ T1140] ethtool_op_get_link+0x1d/0x70 [ 313.059833][ T1140] bond_check_dev_link+0x197/0x490 [ 313.059846][ T1140] ? __pfx_bond_check_dev_link+0x10/0x10 [ 313.059863][ T1140] bond_mii_monitor+0x3c1/0x2d90 [ 313.059880][ T1140] ? __pfx_bond_mii_monitor+0x10/0x10 [ 313.059896][ T1140] ? rcu_is_watching+0x12/0xc0 [ 313.059907][ T1140] ? lock_acquire+0x2f/0xb0 [ 313.059920][ T1140] ? process_one_work+0x921/0x1ba0 [ 313.059934][ T1140] process_one_work+0x9c5/0x1ba0 [ 313.059949][ T1140] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 313.059964][ T1140] ? __pfx_process_one_work+0x10/0x10 [ 313.059979][ T1140] ? assign_work+0x1a0/0x250 [ 313.059991][ T1140] worker_thread+0x6c8/0xf00 [ 313.060007][ T1140] ? __pfx_worker_thread+0x10/0x10 [ 313.060021][ T1140] kthread+0x3af/0x750 [ 313.060033][ T1140] ? __pfx_kthread+0x10/0x10 [ 313.060044][ T1140] ? lock_acquire+0x2f/0xb0 [ 313.060059][ T1140] ? __pfx_kthread+0x10/0x10 [ 313.060071][ T1140] ret_from_fork+0x45/0x80 [ 313.060085][ T1140] ? __pfx_kthread+0x10/0x10 [ 313.060097][ T1140] ret_from_fork_asm+0x1a/0x30 [ 313.060111][ T1140] [ 313.140555][T12443] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 313.143311][T12443] chnl_net:chnl_net_open(): state disconnected [ 313.145015][T12443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 313.152696][ T44] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 313.155194][ T44] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 313.157901][ T44] bond0: (slave wlan1): link status definitely down, disabling slave [ 313.160199][ T44] bond0: (slave netdevsim0): link status definitely down, disabling slave [ 313.373171][T12438] vhci_hcd: connection reset by peer [ 313.374897][ T12] vhci_hcd: stop threads [ 313.376090][ T12] vhci_hcd: release socket [ 313.377388][ T12] vhci_hcd: disconnect device [ 313.922540][ T58] usb 7-1: Can not set alternate setting to 1, error: -71 [ 313.924626][ T58] synaptics_usb 7-1:0.0: probe with driver synaptics_usb failed with error -71 [ 313.928439][ T58] usb 7-1: USB disconnect, device number 20 [ 313.962447][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 314.747116][T12416] [U] Vqdy [ 315.002487][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 316.042835][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 316.524603][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.527099][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.082460][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 318.042764][ T59] vhci_hcd: vhci_device speed not set [ 318.132502][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 319.172478][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 320.202748][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 321.242500][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 322.282613][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available VM DIAGNOSIS: 05:24:28 Registers: info registers vcpu 0 CPU#0 RAX=0000000000b40583 RBX=0000000000000000 RCX=ffffffff8b557469 RDX=0000000000000000 RSI=ffffffff8b6cfc80 RDI=ffffffff8bd359e0 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed1005686f85 R10=ffff88802b437c2b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff90628510 R15=0000000000000000 RIP=ffffffff8b55884f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3fac4b CR3=000000002559c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080000200 Opmask01=0000000000800000 Opmask02=0000000000004000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcfb350b00 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6f2032273020 000a303063333937 3936303838386620 37663020203a656d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000123d2dd RBX=0000000000000001 RCX=ffffffff8b557469 RDX=0000000000000000 RSI=ffffffff8b6cfc80 RDI=ffffffff8bd359e0 RBP=ffffed1003a5e000 RSP=ffffc9000048fe08 R8 =0000000000000001 R9 =ffffed10056a6f85 R10=ffff88802b537c2b R11=0000000000000001 R12=0000000000000001 R13=ffff88801d2f0000 R14=ffffffff90628510 R15=0000000000000000 RIP=ffffffff8b55884f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080000280 CR3=0000000068e70000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88804bceba58 RCX=0000000100000486 RDX=0000000000000006 RSI=ffff88804bceba58 RDI=ffff88802b62a500 RBP=ffff88802b62a500 RSP=ffffc90000558118 R8 =0000000000000006 R9 =0000000100000481 R10=0000000100000481 R11=0000000000000009 R12=0000000100000481 R13=0000000000000001 R14=ffff88802b62a500 R15=0000000100000481 RIP=ffffffff81a6bc10 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f40affc CR3=000000002640a000 CR4=00352ef0 DR0=0000000000000008 DR1=00000000000000ff DR2=fffffffffffffffb DR3=3e00000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000100000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd906b1e80 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6177726f66206465 7265746e65202930 796d6d7564283320 74726f70203a3000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6177726566206465 7265746465202330 7367677564223320 7472657020303000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3834372031313320 202020363c003233 3720372e31313320 2050203631003320 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3834372031000020 202020363c003215 37201e2431313320 2032203603000205 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e6c85749c42128b 42bf729682bd3d31 b59e746ca26afcda b938744e032d020f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 68797f2a57323f5e 2a2a2a51573e3839 3d3e3d243b3b392a 2a51343c360a3937 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff82134ba2 RDX=ffff88802241a440 RSI=ffffffff82134298 RDI=ffffea0001c90340 RBP=ffffea0001c90340 RSP=ffffc90002ae7588 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000002 R12=0000000000003324 R13=0000000000003324 R14=0000000000000000 R15=ffffea0001c90340 RIP=ffffffff82133831 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5f7cd1bd00 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055afddc91000 CR3=000000004a166000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=f43ca6c6f43ca6c6 f43ca6c6f43ca6c6 f43ca6c6f43ca6c6 f43ca6c6f43ca6c6 f43ca6c6f43ca6c6 f43ca6c6f43ca6c6 f43ca6c6f43ca6c6 f43ca6c6f43ca6c6 ZMM22=c6aab4acc6aab4ac c6aab4acc6aab4ac c6aab4acc6aab4ac c6aab4acc6aab4ac c6aab4acc6aab4ac c6aab4acc6aab4ac c6aab4acc6aab4ac c6aab4acc6aab4ac ZMM23=4a509e084a509e08 4a509e084a509e08 4a509e084a509e08 4a509e084a509e08 4a509e084a509e08 4a509e084a509e08 4a509e084a509e08 4a509e084a509e08 ZMM24=32097d5b32097d5b 32097d5b32097d5b 32097d5b32097d5b 32097d5b32097d5b 32097d5b32097d5b 32097d5b32097d5b 32097d5b32097d5b 32097d5b32097d5b ZMM25=e2faad05e2faad05 e2faad05e2faad05 e2faad05e2faad05 e2faad05e2faad05 e2faad05e2faad05 e2faad05e2faad05 e2faad05e2faad05 e2faad05e2faad05 ZMM26=dd68af8edd68af8e dd68af8edd68af8e dd68af8edd68af8e dd68af8edd68af8e dd68af8edd68af8e dd68af8edd68af8e dd68af8edd68af8e dd68af8edd68af8e ZMM27=45fee15145fee151 45fee15145fee151 45fee15145fee151 45fee15145fee151 45fee15145fee151 45fee15145fee151 45fee15145fee151 45fee15145fee151 ZMM28=000001f0000001ef 000001ee000001ed 000001ec000001eb 000001ea000001e9 000001e8000001e7 000001e6000001e5 000001e4000001e3 000001e2000001e1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=ef0c0000ef0c0000 ef0c0000ef0c0000 ef0c0000ef0c0000 ef0c0000ef0c0000 ef0c0000ef0c0000 ef0c0000ef0c0000 ef0c0000ef0c0000 ef0c0000ef0c0000