last executing test programs: 6.0415886s ago: executing program 0 (id=809): socket(0x1f, 0x1, 0x3fd) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x14, 0x22, 0x9, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000040)) timer_create(0x2, &(0x7f0000000140)={0x0, 0x1e, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) pwrite64(r3, &(0x7f00000000c0)="97", 0x1, 0x0) ioperm(0x0, 0x6, 0x2da3b9f3) r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000280)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0xe8) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='virtiofs\x00', 0xd1, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x88, &(0x7f0000000040)=ANY=[]) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r7, &(0x7f0000000040)=""/44, 0x2c) 4.483240131s ago: executing program 2 (id=819): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000200000000000000000000100000490000000080"], 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_emit_vhci(0x0, 0x20) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 3.963112186s ago: executing program 2 (id=823): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0xb}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@deltaction={0x0, 0x31, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'sample\x00'}}, {0x0, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'csum\x00'}}, {0x0, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x6}}, {0x0, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x3}}]}]}, 0xfffffffffffffc4e}}, 0x40) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x6, 0x8000) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000440)=0x37) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr\x00') fchdir(r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000980)={0x1, &(0x7f0000000940)=[{0x6, 0x0, 0x1}]}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xc, 0xf423f, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6}) r4 = socket$caif_stream(0x25, 0x1, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f0000000340)="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", 0x100) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10, 0x800) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 3.103237766s ago: executing program 0 (id=825): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000000002010400000000000058f14da4ca92a056e90d50e90300000000000000"], 0x14}}, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000540)={0x101, 0x3, "fa6123f6fa7e9aaf68221e6cd07d3e6534ff1c58a0a53b609b72eea22482940d", 0x5, 0x6, 0x4, 0xffffffff, 0x140}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="50010000100033b20000000000000000ffffffff000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0001000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004000700"/264], 0x150}}, 0x0) (fail_nth: 2) 3.050996177s ago: executing program 2 (id=827): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = syz_io_uring_setup(0x550a, &(0x7f0000000500)={0x0, 0x8000}, &(0x7f00000001c0), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000000180)={0x200000000000001f, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000080)=[0x4, 0x9]}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x3a, 0x0, &(0x7f00000000c0)="e460cdfbef2408002900119386dd6a000000000711eb3014cd3ec8a774c1e1380081ffad000400e8d50000000100000bb500000500242c108906", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x5f) syz_usb_control_io$hid(r3, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000002480), 0x0, 0x88101) ioctl$HIDIOCGUSAGE(r4, 0x40184810, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.99393786s ago: executing program 3 (id=829): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x401, 0x480002) r1 = syz_pidfd_open(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000080)={{r1}, "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"}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e00cd0214fffffffffffff80765", 0x12) r3 = socket$netlink(0x10, 0x3, 0x15) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x80a, 0x0) munmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}]}}}]}, 0x44}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(authenc(crct10dif-pclmul,cbc(aes)))\x00'}, 0x58) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000000300)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000340)={0x60, 0x0, &(0x7f00009fa000/0x4000)=nil, &(0x7f00009a2000/0x1000)=nil, 0x80000001, 0x0, 0x0, 0x0, 0xa, 0x12, 0x7c3dbfc9d4d4cb5e, 0xba}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) ioctl$UI_DEV_DESTROY(r2, 0x405c5504) 2.722958431s ago: executing program 3 (id=830): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000000002010400000000000058f14da4ca92a056e90d50e90300000000000000"], 0x14}}, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000540)={0x101, 0x3, "fa6123f6fa7e9aaf68221e6cd07d3e6534ff1c58a0a53b609b72eea22482940d", 0x5, 0x6, 0x4, 0xffffffff, 0x140}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="50010000100033b20000000000000000ffffffff000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0001000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004000700"/264], 0x150}}, 0x0) 2.201704422s ago: executing program 0 (id=831): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000200000000000000000000100000490000000080"], 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_emit_vhci(0x0, 0x20) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1.84057078s ago: executing program 3 (id=832): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}], 0x10, 0x37, @void, @value}, 0x94) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000000002010400000000000058f14da4ca92a056e90d50e90300000000000000"], 0x14}}, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000540)={0x101, 0x3, "fa6123f6fa7e9aaf68221e6cd07d3e6534ff1c58a0a53b609b72eea22482940d", 0x5, 0x6, 0x4, 0xffffffff, 0x140}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x8, 0x145, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x28}}, 0x4040040) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000880)={&(0x7f0000000680), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x60, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4091}, 0x2000c080) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000005902"]) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="50010000100033b20000000000000000ffffffff000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0001000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004000700"/264], 0x150}}, 0x0) 1.733229725s ago: executing program 0 (id=833): r0 = socket(0x15, 0x5, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r2, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/222, 0xde}, {&(0x7f0000000840)=""/134, 0x86}, {&(0x7f0000000400)=""/90, 0x5a}, {&(0x7f00000000c0)=""/32, 0x20}, {&(0x7f00000004c0)=""/21, 0x15}], 0x5}}], 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() r4 = getpid() sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) sched_setaffinity(r4, 0xffdf, &(0x7f00000002c0)=0x1a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockopt(r0, 0x200000000114, 0x271d, 0x0, &(0x7f0000000000)) 1.352691066s ago: executing program 2 (id=835): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = dup(r0) r2 = open(0x0, 0x40542, 0x0) ftruncate(r2, 0xee72) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xd185, 0x0, 0x0, 0x377}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f0000000400)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[@ANYBLOB="03020c000000003c6de727"], 0xb, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newtaction={0x6c, 0x30, 0x1af, 0x1000, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xfc000000, 0x7, 0x4, 0xfffffffd}, @multicast1, @broadcast, 0xffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000200)={0x4, 0x2, 0x0, r8, 0xf}) sendfile(r1, r2, 0x0, 0x8000fffffffe) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x141a82, 0x0) 1.326770361s ago: executing program 1 (id=836): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x2, 0x15, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e20, 0x1, @remote, 0x7}, @in={0x2, 0x4e23, @private=0xa010100}}, @sadb_lifetime={0x4, 0x3}]}, 0xa8}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04c004003abfbd16f605"], 0xa) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)=0x3) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0x4010, r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0) ioctl$SIOCAX25OPTRT(r3, 0x89e7, &(0x7f0000000140)={@null, @default, 0x2, 0x44}) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xefff}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x60048, 0x0) sendmmsg(r2, &(0x7f0000000080), 0x0, 0x4000040) 1.253147408s ago: executing program 1 (id=837): futex(0x0, 0xa, 0x2, &(0x7f0000000400)={0x77359400}, &(0x7f0000000440)=0x2, 0x2) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000001340), 0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) recvfrom$inet_nvme(r3, &(0x7f0000000300)=""/74, 0x4a, 0x2, &(0x7f0000000380)=@in6={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x80) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) semget(0x1, 0x1, 0x789) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500005c0000000000119078000000000000000000001b590048907803000000000000004b3f7633015aff9fa5e73369ed3ed4f938752184f1af202914ef0f501fd4f4fc0d232b48a86ef022816acb8f51148dba1a"], 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 942.880735ms ago: executing program 2 (id=838): open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x118) execve(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000003c0)={[&(0x7f0000000280)='fuse\x00', &(0x7f00000002c0)='fuse\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000380)='\xff\xff\xff\xff\xff\xff']}, &(0x7f0000000440)={[&(0x7f0000000400)='\x00']}) 892.964432ms ago: executing program 2 (id=839): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010ac05418200000000000109022400010000000009040000010300000009210000000122050009058103009667f1f4"], 0x0) io_uring_setup(0xa10, &(0x7f0000000040)={0x0, 0x2c1, 0x800, 0x1, 0x307}) openat$null(0xffffffffffffff9c, &(0x7f0000002500), 0x1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback}}}}}}}, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000680)) syz_open_dev$hiddev(&(0x7f0000000180), 0x0, 0x80200) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000240)=@gcm_128={{0x304}, "fe25d89e6b465d95", "f8e5be8d19a577509835c9fcf7ebe145", "3db44775", "623e7ade8f80638b"}, 0x28) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1a002) openat$kvm(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x57, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x21, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x1, "122b472e41e24b"}]}}}}}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$TIOCMGET(r3, 0x5415, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800000000000000", @ANYBLOB="000000000000000008000400699b000008"], 0x30}}, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0x40186f40, 0x20000502) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000080)=0x6c, 0x0) 826.825164ms ago: executing program 0 (id=840): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x4a, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x2, 0x0, 0xacf0165) getegid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='contention_end\x00', r0, 0x0, 0x100}, 0x18) r1 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000140)=0x12) r2 = socket$kcm(0x10, 0x2, 0x4) ioperm(0x2, 0x2, 0x7e) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000340)={'vlan0\x00', 0x400}) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f00000001c0)=0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x20000, 0x2) lseek(r4, 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="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"]) read$FUSE(r5, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x0, 0x0, 0xfb}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xffffffffffffffda, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x5, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) write$usbip_server(r7, 0x0, 0x3c) getegid() sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 826.541782ms ago: executing program 3 (id=841): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x80}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x48, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x14}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}, @FRA_FLOW={0x8, 0xb, 0x3}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'pim6reg0\x00'}]}, 0x48}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04040000000000000600"/24], 0xd) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, &(0x7f0000000340)=@arm64={0x0, 0x2, 0xfd, '\x00', 0x3}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0xec, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x1, 0x0, 0x13, 0x2, 0x0, 0x3, 0x0, 0x7, '\x00', 0xff, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x17, 0x0, 0x0}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) io_uring_setup(0x2195, &(0x7f0000000080)={0x0, 0x7899, 0x400, 0x1, 0x232}) 642.672659ms ago: executing program 0 (id=842): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="0068ce47f926372054df9e48000000", @ANYRES16, @ANYBLOB="290026bd7000fbdbdf250400000014000180100001006574683a6e65747063693000"], 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x40, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0xed, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000007d407b864c63193debbef66d1dfa8a3bac3b79deef038c6984b62148bb1bed7fa18d3c3565ef649cae5f86ae8cf986ec0c992c8e1beacbebb13c1dcb8d288c57a8b77f576a8cd5343f7a8ccd729a29c7448c8f69e67deb800899d51dc226c374e37db635683acf820253a0177c8da973c0f3e197dff193739c5df322058b2abe8d6700dcd4e7d9777d02b17274d46a7f74d06cd7b838ec0d0d686538e8202db784c10be560a532a29d800592358cd84b89615cae529a63e0a8172b", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="02000000030000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x2, 0x13, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000017822d89cbe", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000040000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x7fffffff, 0xb7, &(0x7f00000008c0)=""/183, 0x41100, 0x2, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x10, 0x200, 0xff}, 0x10, 0x0, r4, 0x1, &(0x7f0000000a00)=[r5, r3, r3], &(0x7f0000000a40)=[{0x4, 0x2, 0xf, 0xc}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r1}, 0x4) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) socket$inet6_tcp(0xa, 0x1, 0x0) 430.697153ms ago: executing program 3 (id=843): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0xd}, {0x6, "090956db8d1ad5161290bf"}}}, 0x10) io_submit(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000010006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36504001ac00800400004000500020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x48000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x1c, r2, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 430.375222ms ago: executing program 3 (id=844): r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002, 0x20010, 0xffffffffffffffff, 0x8000000) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'veth0_to_team\x00'}}, 0x1e) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x1, 0x1e8}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xe, &(0x7f0000000940)=ANY=[@ANYRESOCT=r4, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018310000040000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000400a00008500000006000000"], &(0x7f0000000240)='GPL\x00', 0xe6, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xd, 0xf}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r7 = socket$pppoe(0x18, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000840), 0x8) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) linkat(r8, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000000000000000000000002000000000000000000000000000004030000000000000000000002", @ANYRESDEC=r8], 0x0, 0x56, 0xfffffffffffffd3f, 0x0, 0x0, 0x0, @void, @value}, 0x28) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "c5192907", {0x3, 0x2, 0x0, 0x5, 0x6, 0x5, 0x6}}) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x40, @random="d49a08f9e953", 'caif0\x00'}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000000)=0x2, 0x0, 0x4) r9 = socket(0x37, 0x0, 0x3) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r11, @ANYBLOB="42d6e71bb3747bf6461134158de159fa867421d75bde45a3fb2ad8a6e055cf55adeffe8e341c5b6d07ee7fd8d98563484ee4f9f11b6a555442da89f2485a32bf92a87e"], 0x7c}}, 0x815) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, 0x0, 0x0) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) r13 = dup(r12) write$UHID_INPUT(r13, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$PTP_SYS_OFFSET(r9, 0x43403d05, &(0x7f0000000440)={0x13}) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x4, 0xd000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x114, &(0x7f0000000080), 0x0, 0x4) 267.573711ms ago: executing program 1 (id=845): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x80) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) (async) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0200, 0x0) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r6}, 0x10) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="030300000400fcffffff0c00000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100001c, 0x13, r4, 0x8b2d4000) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @multicast, @val={@val={0x88a8, 0x6, 0x0, 0x3}, {0x8100, 0x2, 0x0, 0x1}}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x2, 0x2f, 0x40, 0x65, 0x0, 0x9, 0x6, 0x0, @empty, @broadcast}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x1, 0x2, 0x6, 0x0, 0x3, 0x8, 0x4, 0x1, 0x2, 0x400, 0x1, 0x4e20, 0x4e24}, 0x0, 0x5}, 0x0, 0x4}, 0x7}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') socket$inet_udp(0x2, 0x2, 0x0) (async) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x101002) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file1\x00', 0x0, 0x10}, 0x14) 57.821068ms ago: executing program 1 (id=846): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) iopl(0x3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) (fail_nth: 3) 235.525µs ago: executing program 1 (id=847): ioperm(0x0, 0x5, 0x4000000000000020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000041c0)="7ed2c42ad1b04ce3792cda19c56ce9c81ae16fb01de77f95f775f064b2d612b46878f0f4a0a6f2849f980da1b22329cba96651402f92b1a1e6a59690f7d3c2b83f46342ce56b30111f6dfd123712c00727f907272fce27d40232206a8a7e8fcc150d5a765bac8a3782c384442eaf7db71af25f723953337cf47202b7f3024c9806c0e34f946fbe2bfc8704eebd86cb87c064db095bc2992179479f918597c51ec08d10ddc4297e5b2393283743ae791551e1b69baec8ff6eb755ac3651f92ab58fcd167b7572856cda043426b0fc8900e72cbe576d3888cc8e8c60b97c72fb16860da7fd00bd9fdf528cf0feaf4b51d8234c9a6d629c66b9ea5cf119c2b84f819d3d1a8cf75b9983e5e8fcc9dfe0d68ad096b651d07eaa7ab1a7aae8fc5731c0b24949a8387809114b4001656bf23ee28e639c5adcc443cf2b596030964214c56ffd72725893cfa5ddf147110bd0d5faccf7458dc39569439a2a0cdb82854883999424c5b100acf18d8b473efdc9601165ef1de86b3aa4803e9c9b9a5b7626b3cffe385fbfd19980423e93ebb380ae39aecc96cd32082fd30aeda93f84e216708c76af3a75818ea3d0ef0df84a9ec975e71bdc891f73e71fad39230a72f9f9ab536e935b7e512ecc2d8a3856758eb14133334a1cc9b2656e352855ecdf29ce6598e5365c22beb2000004a740354ce862ccf59e33a2d0f2a3b8ee3679610bc0546ac9f7e9d1a73bfbc27907165f4cbdce5e89ac865c5d249b68a1747c992eb2aecc3abdec090b8803f647788987a1e049b458bff0931e4d438de03a775407096b7a4a8c9f4bd2101beab30240ee86f8e67d210bc3bb1b5cd82892c7853bf1b453cc9021163e0f79e26f7544d2476b4d6264094441ad3195a4667ef0fa150f7dc88956e4bd8f5ebe44194c3e4dbe8442d01a213e68f171737f25d9cf8abe7539ed80e3f87c3863194f4107ffe05244e93d69949edf089d5691d5f15a9777d96bdf8241923736aaaa69e3317e51b9f0b1149eb2e1ccaeb2cd233e30422b58c227b8021782de8c88dd62f53a171372abb08ec973ef911ebbe02b48a0952cd8fb6ba9efddd3625c202b1636e1257927da2111352164a6b1d115f2516faf580f89024c9c740421f9e2caffa09dc82478232e9adb8b922b2491d7168f5600f5fc83b766565c56bfad32fe9fd07edfeac3a6df2db815b7ef3bb18bfb78dbccc5f83e08952397ad031e549f41c1255ca666117c85ea82e2f294e88a2b8a1a5d4029792b00acaeb17cbab642e1e467e45bec53f20c2c26b0c082d32de99e797cd490d24ab2ce8c9397fcc01750716deada5b937005e5c570bc12a1a6b37a4ee281669ac783d18d5950dfb58ee31c1c305761d7ead0cea02afd72db2ae9067eccdac7e0a48112d612a19d47321062d11bf5ab06fcd68499e5b5e6bc5ce84f9e799bf5881b3d0479ae6513ad5eb11a5598dfcba17053c4cb67f3d54340d9505aeb987321857480c87ce3f7e09d437c89c525e7c1cb367fe791ced45e500028f589a74d4688c78011e7b4ead692d81a37973642e5e6845bf48ff98f9fd5b78e06f740f583fa49f6affe889776ad4e7480f12b12b60c661fcf1e0a6143ef08e335a1f5d519c048c0a86eebfe1dec807203a3e5e10ac2e0586b9e459b08f9d0c21fde3962f6bf6d56b8c5fc9292ee189da1ba6b5a88b8c7d3d94f4fb3589940e238f226cb0fe73c9606dcafcb8c841529be202aedb4fd2c8c16cf06817559f5620c174567de9f7427b25eba5c301f433644cc8a5e0ab0bea2513f031310c757e9315bd96be4f47db97d151d18000b9df04e7fcbe0dfc684d1a259b702693e34a274ed0fb93781f39456039d9d80ad240acfaba4892535242761942b95c503db73beb41de80f79ce4d02c51d57b2c0463a3f09fc53fed5523b70a30670ca02da78b0647031ae8ed5612f56eb1abbb50c98b4801f1b17942f6b5a56af59ad68febd24d901b51403a9db23f017ec2b428fa5ab591a1904b49bd452d3937dd6347cd773f9a0699970193daf2b4c7899a8c94ea109a1df422477820da801ae1d8e67f36966b3a9631edc5f81dd6ea3529a5a653edf59374895d1be79f9719856b70f2f86fe4aa419b4a9db3e928abcc4573e5c4668049959ebcb9bd773e08d8a1abdbcb2195c5da9bc7e4a36e83bc42a6139c4d40bb66ddbead9432a3927bfbeb485ecd3d0e666a86398122bf2386c914d5b51d2cc4ee6a3085094bf547678c76ab4a3d7a973852da647fb39023272c7d665ad8eb46024e5e5fe6732b7acd9b39a0fe5b4dbff846e3bd9cbe9d5b6b3ce7b1d3011902f12a20153a1c8222c2f5a940667834cf440a08b14f8e73e4e8ff7f0e588824ac0c2804a83906cf2c5763d2c6a852f53a761a1cb34acbb07bd6a0fae4fb36fa93b854f1dcc0ecca8bbeb4e5036d045e2ff24d98c1a2780963f775c6c02e7e5947869b5c93dab7e8b3eb2935b7d8f0734b472f89155792d65f78e84d72912d36ce05466fa0d1579832e92b6941a5e3b7fcbfa58c6418461d406737ca2b75e771d73e516718f589a859c935d6b4372b7fad7c6541781e01fd905b343d4dd430cfdbd9a63d4f0aee13174aec686af676818332d86182f02f279b1a6980ba0f86f62087d35eb48983a3d16433a1fc09609681f4418629f7b7c50d0ade5518a5d657fbbdf4bf30c7c24a1d81ff2031d921d214966939595aaa566bfaddd7f9fd51228d51976c5b3758d12d31393d263a43ca033cf3b4e9885568a4977368467aa8f2ba6a536f307a550c277886cea27ff17dfdbe914257ffb65b8c276a15be8ea5165fd16b909f7757e30f0ece05a2927c0e7498d6d5ea5619c96786af5230029e9214db8269365a84dc0e2cec200ae9c0b74d579c48037bc40c5fcc73b80e3bc67dd5e0d1ed0484f2c62822401e39621c52ac6d603f2d111350928ee2eb8d0825110321f5c26d6fada90725c6b5204644256a1d74f0daf2e416bee390605e3f6d06cb18c1852b30776d2073bc156c85311ccbfb139b4367f81750140a474e494a1c0d5fa2ff2a6c9b5a40f8f616b3d5e2e4be56442e305376f5d0e6a6c4d54f05e6c08ed6ee32955ff1bdf87189122767e85ad03bfbec0ec78bf859beaf880f2589cc418b53ab5cb3d0264fc11456a1b868fb014e010bff07a07754603891a399047f17dea68c6481d91e71d0aa8c26b3745a69ea2cd02deb3ccc0e7ddc6e3ac7180a9cad8f0ef1253610cb6965fa9307c9082ee845b4021af0a2af27d12b41e4647f92497918e0365fbb14a177150299e6702389939f8c9e66cdade9004ca7bb53e947ca0409d4f9d74bcbc49ac48d7b706832ab0b19f045fd21ff6339565d8d022ab08d15c2229b26ffea5ce20631e759c66095359d614db7c4683de79b53f7185b1d523c90cd1041d095face8e69c8f79862a12b0d2c5a3bb5853643faf495bece649383391e769e40cd4f11cb5bc0891998e059ee61cceb0c27792b88a92d88603e3ee0857fa2a8e03c0bbaa8f895a78e1dc7b54b5321b0db04a4e9ca3cf9a426efb08ed8de49253276849211b385ad9ae841380136caedd3fc49daa7dd4930d5e1c6355438ff086e054ba406a1f4ca450e5197076459c9dd9433bfe0a385b2236b9e28b0091e3269297dca512cbfd21300e49178cf3bc287153a5005ca28e9c7dbb4291ae76fad759ba39ba2b8a63ffcc01db45a13ae616deb1df4ad532f905beaabe165aedc442a0e2f7e232714ca59b7089081963efaf363925b1ddcbfcd4aa85da9ba903765ea04766749a7a69375cb5c7f4da42db2d0c38187c6b37adc198e350e8abac561517c3a668a3f1a0fdc33557e862d252581d13dad4128628b91eb1e1b9a55ceed5ec83ce5b0c9c5f98383c972587d9702bcfa7349f3f3049307210cf211e6bd62b9d11b58bfad21b80a6b1de0d25fc42a0bd94b69d127aa563c61d673dd512878e655756bf20fb5a41101edb2342bc4f7522ca4c3a33c3bc10bd061fce3bb4480199ea88a51990c70b3716c9a17c7b98596d9621f7dea213ef9f1b77105faa85a4467cfb676c94e7343a2089446f6243bbbf36811c669d0b0ccaa4f2ca57f59cf2cc7511887a51c37bf44306ff3709f7ef341df4ab0078b846ca3301170c7f5ea1f94eab76da7b32fe0d44bed365906f513d314b30f050b9fdb4fdf6654378b697e956e46054223d30ec4994f0ec0a7e750c4a580c4174134c0695927a12144151fdeb343df388228fc3710bb7cd80d93458cafd839a7d21116e5b06a4f68bf67a8b7b8f1a3ccea9d05a85c1a2e6c1272f7f015164d556be02cadee46ff48ee04e75aeb06b5a1a0c3ef1ccbb4d59a4c34a05f810e052f9825d24ff27321e6c4b5235dd74dbc48d3c9eed385ad50157c2f84be8872c75b4d236063f0356860ecebfc1b6b83d30397bc174b29b8a7c0d88c468e326783c00a146509e75ccd460e9230f7977ec3cb2425bf2e314680ff492753607731bc1d674f935d6ce06901a308a8711c20677fe9ae855144a8e0bc9a7d0f49f4f08186817b0b94fd56d496067c80b76eb77bb534f85ff8f4397a02a8e9448c9a1b9924d27fcdbab5feeddb14d1f57032d8a7d8e1aafbc8f9eacdd01c4788a239c1108ef5ccc159e0db4ba44de7a7cbf3f97fe03b57ec6364fe0e7d2b903b2a3f8fb52e99042b3ab6d6c4e3dd73ef2256af4567554823821c7464247e6fe624f83c2f282d42aefd38560aa4879afcdd4531c7cb192bb9abc24af0b8f981af96a7db30c0ebdaeaebc5a7841d7825f0a017382fe903478e7e54d2953c8ae8c537754cab7d59c42dedcef719c049bed1cbea347749741b2652cc1b88923d50bee5cb4aaaff9c2ff6111b2501c58f62c60bead8cac89e1ab10ff784b8228739d20a808a1a88aed3904cc25a938906ded4cf007bb9c009c52d0439444d08d1b26ff8c935115c6601a29f15a9b8d3c1c5b0959521c0a55c91b40e1aa96f8d5a1813c4baf2d0335d5e5e2bea7aa2b3ba2bdc7369a768c3bed6a11d47173442a961babc8f02fe7b701697cbc9c93599d69a25a96044c1d901a7c8b489b5a77cdb2e3894b31ab6969c25b17ca9bd95b8399e4e9968c764a1512989cfb8a53e1837cd27acb58ed999ec20016a0601b3a020924968984b982b6de1734705e413a680702605b6648d9bc93ff57cc5541b73317233b04e3aee4c3138e0f9a2a49155f4ea1e62d9ff541f7f566b18c5ee024d4750be962377937ec97b038bce7b3a7de504214e7eb22407fc0e8eb1455fe5951e83553d8e538db244b62ec9f56a1b7c155d5d1736944bb3e46edf0461068a4b9b02ba07679d003572252fd3d596a9020b153637c7513f27f4efef20ee83ab0285f2892ff52262b9d1e2bf92c4cb273d20b975d163eb2dfa4eba7b9e642bbd3acf3a192963fab83373d00f9bf543cbde732b16bfb4f9699458df528ea37790cc4ec09e7b6d6ae3a83187eebb57678da1ffc230786a79566a7e22836aab04598c0fdf991b96256f14e1d8936668147edf405bbc88e84d7a312f892c3a1dcad7e11a7fa27ca50bcbe2e3fcb201f1297899e327972bec7d631b9ee036194fad4918f0f1c7639491ba7d3b29022d53b6a6fbdef6f7566164487f59b466c9235288a2a3d5a44886ae9b375f8a7cd383da9c607dd3bada8a29d0d77672a3edc11f3a653ae729474bbdedbfcf0ab19b2fe998b7ac59e87552028c9c6578464af8e76c2864c11121009219dd32a5efd6a596b6324c680d19ba0fbb019d722f71fd68443e0c0588764d1dab37cf7bceb4e2b1248efd3f22e26e75472e35166f1545ae178da423c0bbd175aec6360cdd7d2812f4fae46295596e4d9e40f68fb3c9360a2b47dddc35aa2fd34d05411f3fca71df5702edba8c182e94a0ef2b89945d2f9dae556965f52ccdba267bd8f84db5ffc537b30f431455976b92680895695bcf86e1b22821b0fff3511eb44518afeece8dc580e6189e7ce26e3ba6ad4c93083f0766c79e185f8fa2099fa660dcfb6cbd36f91922c9eb6aad143a646744f73237af4dddd2b184091568760210676c468252653f4f5949f346afcd5d062a1387892236d0186ae01bfcf5814617790414b62355513c961f9fd324aa05dbc16725368b3bc4b591a58b7d47c1ffb7bc4c24ec18e4598b692cbf0a88c18f969e702fbb7d0ccf81a7468a7f7ebac94364fa44bbeeb022a2da5b980d109d93b6252dcc00c3158aed7d928a8bc1077023a62288845d474c0143ada9854dcd9bcfbcbd93e62f1a163d06e3f012d6c814cf3b2589a0fb7c21708025ba26375e7f5b3b76e12d90918683adbe81c08b03c3fff740c0c35d38d17468aa1b7959bb9cd6c8735ae32819c5607f34249251832d7f30b30b2cbde6a7235a9137dd1c3abf3f8d07192795280388c546806678f71e511956e86ba03930f579ed7076787404f24680bbf3cb6b562106bcee85012d08861857673e202e05c70fb151803564dafa7e4237674ed5f936e0dea63e7e5bf98058a4eaffc2eba998707c2fb54e1f38626b9a0d34267e1f40a4b0787ce848909a583990194434a9197a1c989d0c0b204199bfe32c281714e3c3fb6c2a26fdd049a5fbd352b6f561e2fa874c9a36c294f253281ff0d89b535189b9fab730858d078e71a0451abe07455ff9527569f50d3b2e406b37b8891045413c072fc4fd848c28b89ef4228b85e919072ccf6ecc0a53a3b086caeea506bdba02c9eeb66efcbc0682e52a3a2b078ffc9752b93330bea7039de2a8db03401d28775ef1f39803b77d42f6de6f482756ad1addebf8d10fa3ca75267f4d526162a669d0d1952cb91da2354f39b95c417ebf83af5cb0a7ca452910867ea4f7cc2e268f635b1febc5b7f5daff7e5057f8b3124b8bba68e2b34e879adc8a4da0ce6b2c7981883b403fafdea21c6f9955bd789a9807183a455ecaaddfc2c250244d040996098e1e5222a945ae7616817953bb0353ce90c42cc991a0db325e8e7bbb039885f4845c368a513e781428d53226cc7e48b48388c02c2b77be2d1d51da3fbe8bda78c12023487225730c59e7db2bfaa0d94917cd68b3a9b9e4b96219bd68f37ba382edc6eeffb0763c44e4023aa64a5b539817bc522eb969aa79143450580e73ecaa398157ffe9dc9d3ede14fc83d032d29d964072e34f2e6e60877fe5dbd5152edb58ffccc0f6f48b4873a82ed6ca0cc1e32a8d21f38180fd2877538ebcc0a2e415f0dfde170b08244d34554c1b26bf6e6c8f85df2b52bf0f02949663e0bdf9a2b1f4b18743dca57ff68cc37e963848ace00a0c304276208aa5e7caff86c435792d084542cb6712151de2f065fb4cc55b164ef2f95c90eb7d05b4ec7ab03489a9924ceccdbd12469bcb054a38142b7fb83b42a394a8e5eb4bbc3a96f482db8cf6b5acdc295a746517d77141faf3b9cb247774dc5064e22218af24610cceefe61cf360059db259a58d4760678ba0638ac84dc9a06bd142e8862d2d7f659c2004561ad89d4959bd2b09ff93c24ba5b807c652043e8e832e3a37c4f7573541c50c3a026283c4ff1bf7cd629302f5def4dc31ee4a24fa1074b77b563728bedc90dcd6b0a99989de0a04761762925b1ea95805ad59218e852aa8eacd1847a559339e1e5050279986a8a5b5dd71ecbdba8dd8d79eaac5b13b0e41cbef43ef24d14ca2197e7526c55de4bb7fc45f341c6e4647d4c5eda01f97e4879883b2dacc8411dc38a6362ac8a1426beafb561ce53dd28005540b2fa00c34bd132618a61893409501407692d344779807ab5590546d1d73840effe22ae3f85427ea37958f0efd4fd4b295d6fef9aa80982f30adb4b7d243b4adc78cdf2f6324d7ebc5ec128f38e98f4ca9f03abd1fcafcbef25f96221a78c8e9a3a8c974d17b5827416e01fa3192708782278700b8a13681bcd2832ff2ae5551cfdb477ea8f0b13f8c507be94aa86f1fb52924ba96b10c5f5861cf0937e474fe7cfbb84347a48d9a5bb2fa698286023f2ea1216851b7d7b8e204db759c163ba490c31ae8b517163d5d57b882dfacb4308e7796b83f998a4f8762b5eeee0e85440b972a46eed1e3e717ede0dd112a6dc5a5cbc71a9018c4dce90ef5e3437038b83c05562b60417e7f81ca0d93377531fa0582638ca1a4a39fe9973c40ebeee50b5cb6d55974f23dff764517289296908c5432bd92060d721ada9d90dbd4485613a58f338fd527965d1bab5df9317bd6019a8549f175feffed260df04e0ee114c1f04e9920a85b872745e6d261af012e65b5ccf34dd9f942c9693c51bbc56609f563e29c6922c1505af2b9a173160fa1b5575d8d91143638219707f0df7402e638c010fa77932cde29dece0dff0d8e0f4d9bb645757e4194115ca768b26148e8066dbd345f92997cdf1017469081c618ae3855c226e07289a9404326ad6f019afe5588981b7fbaefb168363f46cbc4cf3edd8575245b64f9468972fc9a3516d7b6f72450e1c37ae5dd248e58398151c098efd59bfec1162ee05c4f748b7c0f13eccfc6bd71ce7d93f77f0e6878f2f55bea321204ba04e4b69d2382b35d60676c8e3c63ca92199e9134f59721a2a80cee9c4e7e3075fbc012fc69f0e9307946dfd1214a918eae892508833ea130d300319b54c38310b8a006dcc79a53ffd523101e57e0b0fb9201d37a6ef84b4f0b9a189fdc52dc46f9cae08108b76173c6daad6942268cf0b5fc120e0db99729b8f35f9038fade1a328fdbd08964e01867c667a2e6553b26e0c678d58f6e919a44e1d06a3df4bdecf0c92b29a1a347394ed717d8797fc47b2791a205f9cc3c7145de2150177a432ecc7c1a4823274f773b30b33c2a95d8bcc8e8ff550983dc7f103745f668189ca299ab33c7e1f003f44fbcf6616bfabe4105d7537c4814d24438203fa254668efd0b58bd2b5a34fd5687884967815c68f39be8dbde7b146fc487de3d0249f38e5abaee7b8a33eb8a6522e0c52a91a49990c77a3fa4b6679410b5bb40e56394c7433352290e9fcf8f8d2e581b8e422a1d0802e69f7d21deb2e68675bf64410572b709141cbe17ffc41f9761bdce2f0fe2b17e90280c3c56b0a2ff9cdc47fe8c17f2ffb5d9481c0df7961addc54feec21b7675c9b711c75bd69f29863c2d7fe9930510338fd211e12a56f05ed7444cca5de0be51241de353166d38e08c7f260700e8a16fb3491dfaaba0843c06f17111e1d64baaa5e90631164cf53a7e5ee2701b470e5d0a5bfc62364dc8083db3b39c683f4c167a53ef289085ba686b2ec72e119ec38f8093cf7eb23155d31e852aec81fea7eb1a1551998bb91b46b726fcf670c458853f655167be94db5f9524369ad541d590cb90089c150bb6f379a4f03d935ab6e65a9be43af3001fc99800bc210695b0c749a80d084882827a324da046e421fcc973c2ffe53c235de2f3ebc81ba79c55aa49125539927c2c85fe0c3c6f85ee71818c81fd159739e9df7dfd82900ac67c14ce6c86bd3edaa64c691a0371d2d4167ca68ebc1b4bbbc23994840e20e53516e3bdeeda5d3025f118fea3a7291157bb9ed22cd544c6dd37e649de95b307c6d4c37dc102b51464a3d3cc3ffc4f3c2466278b2f5de6597e136ced64a41d96fc1d773289ba9e0c8b2fa8627ba87189690867402bf73661df6cd230e4ae9b99392075957a5ffbeff81f8723360f6e1b5e7ab2234d4ca100b6f9ce72d1ccc5b349bd47ea38f92de6decc2155fd4cc34d7eed0968ad901c8064c8bd54e59fae7ea9320a6292a0b68f2b204f6bfc773b1e01fe7de2a3dd0a5ec00adbe1c39a193a701ac897fee76fa9c3f18ae53def4676527ac1247cfddfaec56ce1a09fa0d6004d58b13642f981264ce52ac4e19259d34e18a5136e2c064a5d22b1cabb442079e5bab5f9c85d7f01c22171ade59970d7fe593391c5ee9e7cc787bed72da399ea8fe7d39b0e8385f7c67a043e485abda5f77cbe0b89cf0a5b3f326913ab0217b5a1fe2d39427b348573044f8a5d5e4722a73f9d49447ae4f50cea06ecbf46065237ca2c75237f0d93aabff94166ebbf744aa8e3ceb3750bac643416789457f14466f910ab297e62ee05f1782d6541d81cb196b7a3d6ab3f7bbed709e50999b4f28995576d47c620a24acd23ec1c03b14d4238b29e220152f7e4fe4ed496e8f939c5ed0893443d58c37a16b1f2deca1add92f54a3de96695f4852386bf1bd8b4984bf336613d1912db65b8d69690cd4420b733b34d1a7dfc8136068d3b710298ff9405524d20666488ccd7650f6b02285266af3e88f9ad99a26fb5256d7601310d2da89245e70f811a994d85bb138d29786c11746598141abfd195f801c0d86584221c4b1a82470dd4f17bab73271ce4ebdc2e94abf56dc6e047bca8d3988e337c499aed8c1391ab1af615d8ba93e8575e1dd69c595a7835eacb8109c7e719e376590e16a4c16889604047f04674e38425ba8e743ff91fc7e0f172eedcc182e8d42a28c9416e74b7caab5749859d7b231dfae0d573547e27f00f1d0e088aa7acfa6db7de3cfe2df15b076c2174e3f50447a4881045dfe54e1fbd489993bf947d549adadf8337174d64c0a67983fbef163375555bd3f159998794231dbc264f4bfd52b1a655fdd0fd27b1857279a2bc209aee01e8062a2ac5349398c92899744c986d3f472d6059575da3fa9a634ccc778387fecd1f43c6be46777afe156be99d76d11d47b76f194a67a50c5ad9941aaba39cc72fa93698916af7b34656c75796caa682185d09747f9911c95a8e6d095631c58d3cb37ab20e6292a4fd065e2dc2d745e171aaecd0600c54dfcf4212a4bfeaf307099063cbb3b892b96bab588c992613d7c7c6bb3d953ae5410d4c3b18b59003c7721dbc4379b4a4a243f8cb93dd5ad8276608f26201c2bff86e64f43a2bf793517681a1f9ca659f1de4b5ccd5496b40c52349c442c354112565fee597b12efb427eb63e6692fc3bda9b831da0e1afc8dcb2a3aa21fbd444c80f39cfd78c8e26155fd86740c8e225f06a0962abe5f687e6953c3382ee3f4b559b97f2a451df9db76d3084065ddc713aa9b63c0154b386be600a285692140f5e019ed2b01a44ba946a52355baa806e2247dbec3d0a4fb8ff14500fab216e425cb2a158efa9fd79e50b020a9316ef4e3726d08fae1683da67c323c2fbdc97b01860109387a62ef8ba4709cf079041925ce1801a8828d1f73e119be76190b5344e3c82c83d787544a883cd34721dece78e2495ca7e850f2af14395af675e6fda7d5cd7e122f1eb317480c071284cdd53b9c0457ed7b074f5a9f647fa3b5a1aad9f6459a9510af3f9c4f52c698c23c4c6f0022781ce7bdb57c493ed3ae6213e437560290e30cedc90ae400711c2220ae142c099d17cd1fa45f4424df658abc04e47754e0e66f38a7ea83c751181a2ab77d4e95b3c6008ecba7d4aa457d16b2e82fabea5a55244da18d2926153b1ee36471d1a37de2ead7d0650ea582332735c05d0abfa881cd7e841a0f53e8ad4dfb4f70b855c259588172cb1027b5b51f0cad9e89a739d07319e82977716ea71325412ae3ddc0a210e774c3061a623096f354dfd36759ac63bb5a926e7582478cc987", 0x2000, &(0x7f0000000a00)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x8008010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=848): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x907015feb817630c}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x4, 0x4200) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) get_mempolicy(0x0, 0x0, 0x6, &(0x7f0000855000/0x1000)=nil, 0x5) r3 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_SET(r3, 0x1, &(0x7f0000001400)={{0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x6}, 0x2, 0xffffffff, 0xb3e8, 0x7, 0x0, 0x0, 0x5}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@local, @mcast1, @local, 0xc000000, 0x24, 0xc, 0x500, 0x2, 0x280000}) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet(0x2, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e20, @remote}], 0x10) getpeername(r5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x800) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$vhost_msg_v2(r7, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) kernel console output (not intermixed with test programs): cp:6828kB free_cma:0kB [ 156.769080][ T7853] lowmem_reserve[]: 0 0 0 0 0 [ 156.770907][ T7853] Node 0 DMA: 56*4kB (UM) 54*8kB (UM) 42*16kB (UM) 30*32kB (UM) 8*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2928kB [ 156.776457][ T7853] Node 0 DMA32: 227*4kB (UEH) 65*8kB (UMEH) 21*16kB (UMEH) 192*32kB (UMEH) 81*64kB (UMEH) 20*128kB (UM) 11*256kB (UM) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 19492kB [ 156.782689][ T7853] Node 1 DMA32: 63*4kB (ME) 356*8kB (UME) 265*16kB (ME) 263*32kB (UME) 198*64kB (UME) 121*128kB (UME) 66*256kB (UME) 32*512kB (UME) 15*1024kB (UME) 15*2048kB (UME) 29*4096kB (M) = 242060kB [ 156.790001][ T7853] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.793676][ T7853] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.797237][ T7853] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.801313][ T7853] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.804888][ T7853] 41503 total pagecache pages [ 156.806633][ T7853] 0 pages in swap cache [ 156.808223][ T7853] Free swap = 124364kB [ 156.809774][ T7853] Total swap = 124996kB [ 156.811375][ T7853] 524155 pages RAM [ 156.812751][ T7853] 0 pages HighMem/MovableOnly [ 156.814719][ T7853] 206979 pages reserved [ 156.816304][ T7853] 0 pages cma reserved [ 156.820176][ T7856] FAULT_INJECTION: forcing a failure. [ 156.820176][ T7856] name failslab, interval 1, probability 0, space 0, times 0 [ 156.825959][ T7856] CPU: 3 UID: 0 PID: 7856 Comm: syz.0.494 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 156.825974][ T7856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 156.825983][ T7856] Call Trace: [ 156.825988][ T7856] [ 156.825993][ T7856] dump_stack_lvl+0x16c/0x1f0 [ 156.826019][ T7856] should_fail_ex+0x50a/0x650 [ 156.826035][ T7856] ? fs_reclaim_acquire+0xae/0x150 [ 156.826060][ T7856] ? input_allocate_device+0x44/0x350 [ 156.826074][ T7856] should_failslab+0xc2/0x120 [ 156.826089][ T7856] __kmalloc_cache_noprof+0x68/0x420 [ 156.826104][ T7856] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 156.826145][ T7856] input_allocate_device+0x44/0x350 [ 156.826160][ T7856] uinput_ioctl_handler.isra.0+0x897/0x1d70 [ 156.826184][ T7856] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 156.826202][ T7856] ? __pfx_lock_release+0x10/0x10 [ 156.826219][ T7856] ? trace_lock_acquire+0x14e/0x1f0 [ 156.826240][ T7856] ? __fget_files+0x206/0x3a0 [ 156.826256][ T7856] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 156.826276][ T7856] ? __pfx_uinput_compat_ioctl+0x10/0x10 [ 156.826288][ T7856] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 156.826301][ T7856] __do_fast_syscall_32+0x73/0x120 [ 156.826315][ T7856] do_fast_syscall_32+0x32/0x80 [ 156.826335][ T7856] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 156.826358][ T7856] RIP: 0023:0xf7f0f579 [ 156.826369][ T7856] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 156.826383][ T7856] RSP: 002b:00000000f503655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 156.826395][ T7856] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080189439 [ 156.826401][ T7856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.826410][ T7856] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 156.826418][ T7856] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 156.826427][ T7856] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 156.826446][ T7856] [ 156.889208][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.496'. [ 156.889665][ C3] vkms_vblank_simulate: vblank timer overrun [ 157.133810][ T58] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 157.227775][ T7869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'. [ 157.268949][ T7871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.500'. [ 157.289237][ T58] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 157.292302][ T58] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 157.298403][ T58] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 157.300995][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.311940][ T7861] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 157.325413][ T58] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 157.371029][ T7879] netlink: 'syz.2.503': attribute type 1 has an invalid length. [ 157.537587][ T57] usb 6-1: USB disconnect, device number 10 [ 157.540775][ T7876] FAULT_INJECTION: forcing a failure. [ 157.540775][ T7876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.546080][ T7876] CPU: 3 UID: 0 PID: 7876 Comm: syz.3.502 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 157.546094][ T7876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.546099][ T7876] Call Trace: [ 157.546102][ T7876] [ 157.546106][ T7876] dump_stack_lvl+0x16c/0x1f0 [ 157.546121][ T7876] should_fail_ex+0x50a/0x650 [ 157.546140][ T7876] _copy_to_user+0x32/0xd0 [ 157.546158][ T7876] simple_read_from_buffer+0xd0/0x160 [ 157.546173][ T7876] proc_fail_nth_read+0x198/0x270 [ 157.546187][ T7876] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.546199][ T7876] ? rw_verify_area+0xcf/0x680 [ 157.546212][ T7876] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.546231][ T7876] vfs_read+0x1df/0xbf0 [ 157.546246][ T7876] ? __fget_files+0x1fc/0x3a0 [ 157.546262][ T7876] ? __pfx___mutex_lock+0x10/0x10 [ 157.546283][ T7876] ? __pfx_vfs_read+0x10/0x10 [ 157.546296][ T7876] ? __fget_files+0x206/0x3a0 [ 157.546308][ T7876] ksys_read+0x12b/0x250 [ 157.546316][ T7876] ? __pfx_ksys_read+0x10/0x10 [ 157.546328][ T7876] __do_fast_syscall_32+0x73/0x120 [ 157.546351][ T7876] do_fast_syscall_32+0x32/0x80 [ 157.546372][ T7876] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.546395][ T7876] RIP: 0023:0xf7f21579 [ 157.546406][ T7876] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 157.546418][ T7876] RSP: 002b:00000000f5046590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 157.546427][ T7876] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5046620 [ 157.546432][ T7876] RDX: 000000000000000f RSI: 00000000f73acff4 RDI: 0000000000000000 [ 157.546439][ T7876] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 157.546447][ T7876] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 157.546455][ T7876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.546474][ T7876] [ 157.617274][ C3] vkms_vblank_simulate: vblank timer overrun [ 157.644797][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.509'. [ 157.682247][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 157.699554][ T5954] Bluetooth: unknown link type 156 [ 157.701997][ T5954] Bluetooth: hci1: connection err: -111 [ 157.763841][ T6009] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 157.923806][ T6009] usb 5-1: Using ep0 maxpacket: 16 [ 157.923944][ T58] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 157.927509][ T6009] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 157.931243][ T6009] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34304, setting to 1024 [ 157.934634][ T6009] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 157.937138][ T6009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.940691][ T6009] usb 5-1: config 0 descriptor?? [ 157.943399][ T7886] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 158.075131][ T58] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 158.078885][ T58] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 158.082338][ T58] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 158.085276][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.089116][ T7899] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 158.094455][ T58] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 158.136597][ T7906] input: syz0 as /devices/virtual/input/input14 [ 158.177967][ T7912] FAULT_INJECTION: forcing a failure. [ 158.177967][ T7912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.181668][ T7912] CPU: 0 UID: 0 PID: 7912 Comm: syz.1.515 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 158.181680][ T7912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 158.181686][ T7912] Call Trace: [ 158.181689][ T7912] [ 158.181693][ T7912] dump_stack_lvl+0x16c/0x1f0 [ 158.181709][ T7912] should_fail_ex+0x50a/0x650 [ 158.181721][ T7912] _copy_from_user+0x2e/0xd0 [ 158.181733][ T7912] video_usercopy+0xc64/0x1520 [ 158.181744][ T7912] ? __pfx___video_do_ioctl+0x10/0x10 [ 158.181754][ T7912] ? __pfx_video_usercopy+0x10/0x10 [ 158.181770][ T7912] v4l2_ioctl+0x1ba/0x250 [ 158.181779][ T7912] ? __fget_files+0x201/0x3a0 [ 158.181789][ T7912] v4l2_compat_ioctl32+0x214/0x2c0 [ 158.181803][ T7912] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 158.181821][ T7912] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 158.181835][ T7912] __do_fast_syscall_32+0x73/0x120 [ 158.181848][ T7912] do_fast_syscall_32+0x32/0x80 [ 158.181861][ T7912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.181875][ T7912] RIP: 0023:0xf73de579 [ 158.181881][ T7912] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 158.181889][ T7912] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 158.181898][ T7912] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0405602 [ 158.181903][ T7912] RDX: 0000000020000a80 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.181908][ T7912] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.181913][ T7912] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 158.181918][ T7912] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.181928][ T7912] [ 158.256224][ T7914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.516'. [ 158.284362][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'. [ 158.345670][ T7919] FAULT_INJECTION: forcing a failure. [ 158.345670][ T7919] name failslab, interval 1, probability 0, space 0, times 0 [ 158.349205][ T7919] CPU: 0 UID: 0 PID: 7919 Comm: syz.3.517 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 158.349217][ T7919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 158.349222][ T7919] Call Trace: [ 158.349225][ T7919] [ 158.349229][ T7919] dump_stack_lvl+0x16c/0x1f0 [ 158.349245][ T7919] should_fail_ex+0x50a/0x650 [ 158.349256][ T7919] ? fs_reclaim_acquire+0xae/0x150 [ 158.349270][ T7919] ? alloc_pipe_info+0x10e/0x590 [ 158.349279][ T7919] should_failslab+0xc2/0x120 [ 158.349291][ T7919] __kmalloc_cache_noprof+0x68/0x420 [ 158.349299][ T7919] ? evm_inode_alloc_security+0x49/0xc0 [ 158.349310][ T7919] ? security_inode_alloc+0xcf/0x2b0 [ 158.349324][ T7919] alloc_pipe_info+0x10e/0x590 [ 158.349335][ T7919] create_pipe_files+0x8c/0x850 [ 158.349346][ T7919] do_pipe2+0xb0/0x1d0 [ 158.349355][ T7919] ? __pfx_do_pipe2+0x10/0x10 [ 158.349365][ T7919] ? __pfx_ksys_write+0x10/0x10 [ 158.349376][ T7919] __ia32_sys_pipe+0x32/0x50 [ 158.349386][ T7919] __do_fast_syscall_32+0x73/0x120 [ 158.349399][ T7919] do_fast_syscall_32+0x32/0x80 [ 158.349410][ T7919] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.349424][ T7919] RIP: 0023:0xf7f21579 [ 158.349431][ T7919] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 158.349440][ T7919] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 000000000000002a [ 158.349448][ T7919] RAX: ffffffffffffffda RBX: 00000000200000c0 RCX: 0000000000000000 [ 158.349454][ T7919] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.349458][ T7919] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.349463][ T7919] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 158.349468][ T7919] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.349478][ T7919] [ 158.351771][ T833] usb 7-1: USB disconnect, device number 10 [ 158.361824][ T6009] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:05AC:8241.0008/input/input15 [ 158.435469][ T7930] FAULT_INJECTION: forcing a failure. [ 158.435469][ T7930] name failslab, interval 1, probability 0, space 0, times 0 [ 158.439034][ T7930] CPU: 2 UID: 0 PID: 7930 Comm: syz.1.521 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 158.439047][ T7930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 158.439052][ T7930] Call Trace: [ 158.439056][ T7930] [ 158.439060][ T7930] dump_stack_lvl+0x16c/0x1f0 [ 158.439076][ T7930] should_fail_ex+0x50a/0x650 [ 158.439086][ T7930] ? fs_reclaim_acquire+0xae/0x150 [ 158.439100][ T7930] should_failslab+0xc2/0x120 [ 158.439111][ T7930] __kmalloc_node_noprof+0xd1/0x520 [ 158.439122][ T7930] ? __vmalloc_node_range_noprof+0x3d8/0x1530 [ 158.439133][ T7930] __vmalloc_node_range_noprof+0x3d8/0x1530 [ 158.439145][ T7930] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 158.439157][ T7930] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 158.439166][ T7930] ? __pfx_aa_get_newest_label+0x10/0x10 [ 158.439179][ T7930] ? rcu_is_watching+0x12/0xc0 [ 158.439193][ T7930] ? trace_cap_capable+0x1a2/0x210 [ 158.439205][ T7930] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 158.439214][ T7930] __vmalloc_noprof+0x6d/0x90 [ 158.439223][ T7930] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 158.439232][ T7930] bpf_prog_alloc_no_stats+0x54/0x630 [ 158.439240][ T7930] ? security_capable+0x7e/0x260 [ 158.439252][ T7930] bpf_prog_alloc+0x3b/0x230 [ 158.439260][ T7930] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 158.439272][ T7930] bpf_prog_load+0x1a00/0x2480 [ 158.439284][ T7930] ? __pfx_bpf_prog_load+0x10/0x10 [ 158.439294][ T7930] ? find_held_lock+0x2d/0x110 [ 158.439309][ T7930] ? __might_fault+0x13b/0x190 [ 158.439324][ T7930] ? __might_fault+0xe3/0x190 [ 158.439337][ T7930] __sys_bpf+0x5677/0x57a0 [ 158.439347][ T7930] ? __pfx_lock_release+0x10/0x10 [ 158.439358][ T7930] ? __pfx___sys_bpf+0x10/0x10 [ 158.439368][ T7930] ? vfs_write+0x306/0x1150 [ 158.439384][ T7930] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 158.439417][ T7930] ? fput+0x67/0x440 [ 158.439435][ T7930] ? ksys_write+0x1ba/0x250 [ 158.439449][ T7930] ? __pfx_ksys_write+0x10/0x10 [ 158.439467][ T7930] __ia32_sys_bpf+0x76/0xe0 [ 158.439486][ T7930] __do_fast_syscall_32+0x73/0x120 [ 158.439500][ T7930] do_fast_syscall_32+0x32/0x80 [ 158.439512][ T7930] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.439526][ T7930] RIP: 0023:0xf73de579 [ 158.439533][ T7930] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 158.439542][ T7930] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 158.439551][ T7930] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000200 [ 158.439556][ T7930] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.439567][ T7930] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.439571][ T7930] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 158.439576][ T7930] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.439586][ T7930] [ 158.525191][ T6009] appleir 0003:05AC:8241.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 158.643114][ T7934] ubi: mtd0 is already attached to ubi0 [ 158.773893][ T5954] Bluetooth: hci1: command tx timeout [ 159.603659][ T7957] warning: `syz.3.530' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 160.090884][ T7997] FAULT_INJECTION: forcing a failure. [ 160.090884][ T7997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.107288][ T7997] CPU: 1 UID: 0 PID: 7997 Comm: syz.2.540 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 160.107302][ T7997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 160.107308][ T7997] Call Trace: [ 160.107311][ T7997] [ 160.107315][ T7997] dump_stack_lvl+0x16c/0x1f0 [ 160.107331][ T7997] should_fail_ex+0x50a/0x650 [ 160.107344][ T7997] _copy_to_user+0x32/0xd0 [ 160.107356][ T7997] simple_read_from_buffer+0xd0/0x160 [ 160.107371][ T7997] proc_fail_nth_read+0x198/0x270 [ 160.107384][ T7997] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.107396][ T7997] ? rw_verify_area+0xcf/0x680 [ 160.107409][ T7997] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.107421][ T7997] vfs_read+0x1df/0xbf0 [ 160.107429][ T7997] ? __fget_files+0x1fc/0x3a0 [ 160.107438][ T7997] ? __pfx___mutex_lock+0x10/0x10 [ 160.107450][ T7997] ? __pfx_vfs_read+0x10/0x10 [ 160.107461][ T7997] ? __fget_files+0x206/0x3a0 [ 160.107473][ T7997] ksys_read+0x12b/0x250 [ 160.107481][ T7997] ? __pfx_ksys_read+0x10/0x10 [ 160.107493][ T7997] __do_fast_syscall_32+0x73/0x120 [ 160.107506][ T7997] do_fast_syscall_32+0x32/0x80 [ 160.107518][ T7997] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.107532][ T7997] RIP: 0023:0xf747e579 [ 160.107540][ T7997] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 160.107548][ T7997] RSP: 002b:00000000f50e5590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 160.107556][ T7997] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f50e5620 [ 160.107562][ T7997] RDX: 000000000000000f RSI: 00000000f746cff4 RDI: 0000000000000000 [ 160.107567][ T7997] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 160.107571][ T7997] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 160.107576][ T7997] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.107586][ T7997] [ 160.302974][ T57] usb 5-1: USB disconnect, device number 13 [ 160.424602][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 160.774571][ T57] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 160.853908][ T5954] Bluetooth: hci1: command tx timeout [ 160.925276][ T57] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 160.928486][ T57] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 160.931488][ T57] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 160.935011][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.942732][ T8013] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 160.951197][ T57] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 161.246272][ T8033] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.552'. [ 161.399902][ T57] usb 5-1: USB disconnect, device number 14 [ 161.447061][ T8039] FAULT_INJECTION: forcing a failure. [ 161.447061][ T8039] name failslab, interval 1, probability 0, space 0, times 0 [ 161.450689][ T8039] CPU: 2 UID: 0 PID: 8039 Comm: syz.2.555 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 161.450702][ T8039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.450707][ T8039] Call Trace: [ 161.450711][ T8039] [ 161.450714][ T8039] dump_stack_lvl+0x16c/0x1f0 [ 161.450731][ T8039] should_fail_ex+0x50a/0x650 [ 161.450744][ T8039] should_failslab+0xc2/0x120 [ 161.450755][ T8039] __kmalloc_noprof+0xce/0x4f0 [ 161.450765][ T8039] ? __pfx_io_file_supports_nowait+0x10/0x10 [ 161.450774][ T8039] ? io_file_get_flags+0x102/0x140 [ 161.450784][ T8039] ? io_arm_poll_handler+0xab1/0xc10 [ 161.450806][ T8039] ? io_rw_init_file+0x853/0xc20 [ 161.450822][ T8039] io_arm_poll_handler+0xab1/0xc10 [ 161.450844][ T8039] ? __pfx_io_arm_poll_handler+0x10/0x10 [ 161.450870][ T8039] ? io_read+0x32/0x70 [ 161.450909][ T8039] io_queue_async+0xaa/0x420 [ 161.450926][ T8039] io_submit_sqes+0x177a/0x25f0 [ 161.450954][ T8039] __do_sys_io_uring_enter+0xd60/0x1670 [ 161.450977][ T8039] ? __fget_files+0x206/0x3a0 [ 161.450992][ T8039] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 161.451006][ T8039] ? fput+0x67/0x440 [ 161.451016][ T8039] ? ksys_write+0x1ba/0x250 [ 161.451025][ T8039] ? __pfx_ksys_write+0x10/0x10 [ 161.451036][ T8039] __do_fast_syscall_32+0x73/0x120 [ 161.451050][ T8039] do_fast_syscall_32+0x32/0x80 [ 161.451062][ T8039] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.451076][ T8039] RIP: 0023:0xf747e579 [ 161.451083][ T8039] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 161.451092][ T8039] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 161.451101][ T8039] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000567 [ 161.451106][ T8039] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 161.451111][ T8039] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.451115][ T8039] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 161.451120][ T8039] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.451130][ T8039] [ 162.277063][ T8062] FAULT_INJECTION: forcing a failure. [ 162.277063][ T8062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.282742][ T8062] CPU: 3 UID: 0 PID: 8062 Comm: syz.1.561 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 162.282763][ T8062] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 162.282773][ T8062] Call Trace: [ 162.282779][ T8062] [ 162.282785][ T8062] dump_stack_lvl+0x16c/0x1f0 [ 162.282813][ T8062] should_fail_ex+0x50a/0x650 [ 162.282834][ T8062] _copy_from_user+0x2e/0xd0 [ 162.282854][ T8062] memdup_user+0x71/0xd0 [ 162.282906][ T8062] sctp_getsockopt+0x2e5c/0x7ae0 [ 162.282927][ T8062] ? hlock_class+0x4e/0x130 [ 162.282950][ T8062] ? mark_lock+0xb5/0xc60 [ 162.282966][ T8062] ? aa_label_sk_perm+0x19d/0x5a0 [ 162.282993][ T8062] ? __pfx_sctp_getsockopt+0x10/0x10 [ 162.283011][ T8062] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 162.283039][ T8062] ? find_held_lock+0x2d/0x110 [ 162.283070][ T8062] ? __pfx___might_resched+0x10/0x10 [ 162.283094][ T8062] ? aa_sk_perm+0x2f5/0xb20 [ 162.283117][ T8062] ? ksys_write+0x191/0x250 [ 162.283133][ T8062] ? __pfx_aa_sk_perm+0x10/0x10 [ 162.283159][ T8062] ? find_held_lock+0x2d/0x110 [ 162.283182][ T8062] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 162.283202][ T8062] ? do_sock_getsockopt+0x3fe/0x870 [ 162.283219][ T8062] do_sock_getsockopt+0x3fe/0x870 [ 162.283238][ T8062] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 162.283256][ T8062] ? lock_acquire+0x2f/0xb0 [ 162.283272][ T8062] ? __fget_files+0x40/0x3a0 [ 162.283291][ T8062] ? __fget_files+0x206/0x3a0 [ 162.283312][ T8062] __sys_getsockopt+0x12f/0x260 [ 162.283341][ T8062] __ia32_sys_getsockopt+0xbc/0x160 [ 162.283365][ T8062] ? lockdep_hardirqs_on+0x7c/0x110 [ 162.283387][ T8062] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 162.283410][ T8062] __do_fast_syscall_32+0x73/0x120 [ 162.283434][ T8062] do_fast_syscall_32+0x32/0x80 [ 162.283453][ T8062] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.283477][ T8062] RIP: 0023:0xf73de579 [ 162.283489][ T8062] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 162.283504][ T8062] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 162.283520][ T8062] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 162.283530][ T8062] RDX: 000000000000006f RSI: 0000000020000000 RDI: 0000000020000080 [ 162.283540][ T8062] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.283549][ T8062] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 162.283558][ T8062] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.283578][ T8062] [ 162.403120][ T8068] FAULT_INJECTION: forcing a failure. [ 162.403120][ T8068] name failslab, interval 1, probability 0, space 0, times 0 [ 162.407718][ T8068] CPU: 2 UID: 0 PID: 8068 Comm: syz.1.562 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 162.407730][ T8068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 162.407736][ T8068] Call Trace: [ 162.407739][ T8068] [ 162.407743][ T8068] dump_stack_lvl+0x16c/0x1f0 [ 162.407760][ T8068] should_fail_ex+0x50a/0x650 [ 162.407772][ T8068] should_failslab+0xc2/0x120 [ 162.407789][ T8068] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 162.407800][ T8068] ? dst_alloc+0x99/0x1a0 [ 162.407813][ T8068] dst_alloc+0x99/0x1a0 [ 162.407824][ T8068] rt_dst_alloc+0x35/0x3a0 [ 162.407836][ T8068] ip_route_output_key_hash_rcu+0x8a5/0x2770 [ 162.407857][ T8068] ip_route_output_key_hash+0x138/0x2e0 [ 162.407872][ T8068] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 162.407887][ T8068] ? __pfx_lock_release+0x10/0x10 [ 162.407898][ T8068] ? trace_lock_acquire+0x14e/0x1f0 [ 162.407908][ T8068] ip_route_output_flow+0x27/0x150 [ 162.407921][ T8068] raw_sendmsg+0xbd2/0x3870 [ 162.407937][ T8068] ? __pfx_raw_sendmsg+0x10/0x10 [ 162.407952][ T8068] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 162.407967][ T8068] ? __pfx___might_resched+0x10/0x10 [ 162.407981][ T8068] ? aa_sk_perm+0x2f5/0xb20 [ 162.407995][ T8068] ? __might_fault+0xe3/0x190 [ 162.408006][ T8068] ? __import_iovec+0x1f2/0x6d0 [ 162.408018][ T8068] ? __pfx_raw_sendmsg+0x10/0x10 [ 162.408030][ T8068] inet_sendmsg+0x119/0x140 [ 162.408043][ T8068] ____sys_sendmsg+0x907/0xb40 [ 162.408054][ T8068] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.408064][ T8068] ? get_compat_msghdr+0x11b/0x170 [ 162.408080][ T8068] ___sys_sendmsg+0x135/0x1e0 [ 162.408093][ T8068] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.408111][ T8068] ? __pfx_lock_release+0x10/0x10 [ 162.408120][ T8068] ? trace_lock_acquire+0x14e/0x1f0 [ 162.408132][ T8068] ? __fget_files+0x206/0x3a0 [ 162.408144][ T8068] __sys_sendmsg+0x16e/0x220 [ 162.408152][ T8068] ? __pfx___sys_sendmsg+0x10/0x10 [ 162.408168][ T8068] __do_fast_syscall_32+0x73/0x120 [ 162.408181][ T8068] do_fast_syscall_32+0x32/0x80 [ 162.408193][ T8068] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.408207][ T8068] RIP: 0023:0xf73de579 [ 162.408214][ T8068] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 162.408222][ T8068] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 162.408231][ T8068] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000340 [ 162.408236][ T8068] RDX: 0000000000004010 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.408240][ T8068] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.408245][ T8068] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 162.408250][ T8068] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.408260][ T8068] [ 162.649286][ T8076] netlink: 36 bytes leftover after parsing attributes in process `syz.1.565'. [ 162.668134][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'. [ 162.986200][ T8104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.568'. [ 162.994089][ T5952] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 163.159354][ T5952] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 163.163682][ T5952] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 163.167866][ T5952] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 163.171542][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.177747][ T8082] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 163.182734][ T5952] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.456436][ T6012] usb 5-1: USB disconnect, device number 15 [ 163.951101][ T8115] FAULT_INJECTION: forcing a failure. [ 163.951101][ T8115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.956402][ T8115] CPU: 1 UID: 0 PID: 8115 Comm: syz.1.572 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 163.956423][ T8115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 163.956446][ T8115] Call Trace: [ 163.956452][ T8115] [ 163.956459][ T8115] dump_stack_lvl+0x16c/0x1f0 [ 163.956487][ T8115] should_fail_ex+0x50a/0x650 [ 163.956509][ T8115] _copy_to_user+0x32/0xd0 [ 163.956532][ T8115] simple_read_from_buffer+0xd0/0x160 [ 163.956561][ T8115] proc_fail_nth_read+0x198/0x270 [ 163.956583][ T8115] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 163.956608][ T8115] ? rw_verify_area+0xcf/0x680 [ 163.956630][ T8115] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 163.956653][ T8115] vfs_read+0x1df/0xbf0 [ 163.956673][ T8115] ? __pfx_vfs_read+0x10/0x10 [ 163.956688][ T8115] ? do_compat_pselect+0x166/0x240 [ 163.956705][ T8115] ? __pfx_do_compat_pselect+0x10/0x10 [ 163.956725][ T8115] ? do_user_addr_fault+0xe50/0x13f0 [ 163.956746][ T8115] ? __pfx_lock_release+0x10/0x10 [ 163.956769][ T8115] ksys_read+0x12b/0x250 [ 163.956785][ T8115] ? __pfx_ksys_read+0x10/0x10 [ 163.956807][ T8115] __do_fast_syscall_32+0x73/0x120 [ 163.956838][ T8115] do_fast_syscall_32+0x32/0x80 [ 163.956861][ T8115] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.956887][ T8115] RIP: 0023:0xf73de579 [ 163.956899][ T8115] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 163.956914][ T8115] RSP: 002b:00000000f5066590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 163.956929][ T8115] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f5066620 [ 163.956939][ T8115] RDX: 000000000000000f RSI: 00000000f73ccff4 RDI: 0000000000000000 [ 163.956948][ T8115] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 163.956956][ T8115] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 163.956965][ T8115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.956986][ T8115] [ 164.021565][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.027194][ T8117] FAULT_INJECTION: forcing a failure. [ 164.027194][ T8117] name failslab, interval 1, probability 0, space 0, times 0 [ 164.031062][ T8117] CPU: 0 UID: 0 PID: 8117 Comm: syz.3.573 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 164.031074][ T8117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 164.031080][ T8117] Call Trace: [ 164.031083][ T8117] [ 164.031086][ T8117] dump_stack_lvl+0x16c/0x1f0 [ 164.031103][ T8117] should_fail_ex+0x50a/0x650 [ 164.031113][ T8117] ? fs_reclaim_acquire+0xae/0x150 [ 164.031128][ T8117] should_failslab+0xc2/0x120 [ 164.031139][ T8117] __kmalloc_noprof+0xce/0x4f0 [ 164.031149][ T8117] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 164.031160][ T8117] ? tomoyo_realpath_from_path+0xbf/0x710 [ 164.031173][ T8117] tomoyo_realpath_from_path+0xbf/0x710 [ 164.031183][ T8117] ? tomoyo_path_number_perm+0x235/0x5b0 [ 164.031197][ T8117] tomoyo_path_number_perm+0x248/0x5b0 [ 164.031210][ T8117] ? tomoyo_path_number_perm+0x235/0x5b0 [ 164.031223][ T8117] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 164.031246][ T8117] ? __pfx_lock_release+0x10/0x10 [ 164.031256][ T8117] ? trace_lock_acquire+0x14e/0x1f0 [ 164.031265][ T8117] ? lock_acquire+0x2f/0xb0 [ 164.031274][ T8117] ? __fget_files+0x40/0x3a0 [ 164.031284][ T8117] ? __fget_files+0x206/0x3a0 [ 164.031294][ T8117] security_file_ioctl_compat+0x9b/0x240 [ 164.031304][ T8117] __do_compat_sys_ioctl+0x4e/0x2c0 [ 164.031318][ T8117] __do_fast_syscall_32+0x73/0x120 [ 164.031332][ T8117] do_fast_syscall_32+0x32/0x80 [ 164.031343][ T8117] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 164.031357][ T8117] RIP: 0023:0xf7f21579 [ 164.031364][ T8117] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 164.031372][ T8117] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 164.031381][ T8117] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0bc5351 [ 164.031386][ T8117] RDX: 0000000020000a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.031391][ T8117] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 164.031395][ T8117] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 164.031400][ T8117] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 164.031410][ T8117] [ 164.031414][ T8117] ERROR: Out of memory at tomoyo_realpath_from_path. [ 164.077023][ T8125] FAULT_INJECTION: forcing a failure. [ 164.077023][ T8125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.111247][ T8125] CPU: 3 UID: 0 PID: 8125 Comm: syz.0.576 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 164.111262][ T8125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 164.111268][ T8125] Call Trace: [ 164.111271][ T8125] [ 164.111275][ T8125] dump_stack_lvl+0x16c/0x1f0 [ 164.111293][ T8125] should_fail_ex+0x50a/0x650 [ 164.111305][ T8125] _copy_from_user+0x2e/0xd0 [ 164.111318][ T8125] kvm_arch_vcpu_ioctl+0x3cd/0x5050 [ 164.111327][ T8125] ? is_bpf_text_address+0x94/0x1a0 [ 164.111339][ T8125] ? hlock_class+0x4e/0x130 [ 164.111352][ T8125] ? __lock_acquire+0x15a9/0x3c40 [ 164.111362][ T8125] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 164.111374][ T8125] ? __pfx___lock_acquire+0x10/0x10 [ 164.111384][ T8125] ? stack_trace_save+0x95/0xd0 [ 164.111397][ T8125] ? __pfx_stack_trace_save+0x10/0x10 [ 164.111409][ T8125] ? __pfx_mark_lock+0x10/0x10 [ 164.111418][ T8125] ? stack_depot_save_flags+0x28/0x9e0 [ 164.111429][ T8125] ? lock_acquire.part.0+0x11b/0x380 [ 164.111442][ T8125] ? __mutex_trylock_common+0xea/0x250 [ 164.111455][ T8125] ? rcu_is_watching+0x12/0xc0 [ 164.111468][ T8125] ? trace_contention_end+0xee/0x140 [ 164.111479][ T8125] ? __mutex_lock+0x1cc/0xb10 [ 164.111493][ T8125] ? kvm_vcpu_ioctl+0x27f/0x16b0 [ 164.111503][ T8125] ? __pfx___mutex_lock+0x10/0x10 [ 164.111518][ T8125] ? find_held_lock+0x2d/0x110 [ 164.111533][ T8125] ? kvm_vcpu_ioctl+0x1258/0x16b0 [ 164.111542][ T8125] kvm_vcpu_ioctl+0x1258/0x16b0 [ 164.111553][ T8125] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 164.111563][ T8125] ? tomoyo_path_number_perm+0x190/0x5b0 [ 164.111578][ T8125] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 164.111590][ T8125] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 164.111607][ T8125] ? do_vfs_ioctl+0x513/0x1950 [ 164.111620][ T8125] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 164.111638][ T8125] ? __pfx_lock_release+0x10/0x10 [ 164.111647][ T8125] ? trace_lock_acquire+0x14e/0x1f0 [ 164.111656][ T8125] kvm_vcpu_compat_ioctl+0x210/0x3d0 [ 164.111666][ T8125] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 164.111676][ T8125] ? __fget_files+0x206/0x3a0 [ 164.111687][ T8125] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 164.111697][ T8125] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 164.111711][ T8125] __do_fast_syscall_32+0x73/0x120 [ 164.111724][ T8125] do_fast_syscall_32+0x32/0x80 [ 164.111736][ T8125] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 164.111754][ T8125] RIP: 0023:0xf7f0f579 [ 164.111765][ T8125] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 164.111778][ T8125] RSP: 002b:00000000f503655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 164.111792][ T8125] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000004048aecb [ 164.111801][ T8125] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.111809][ T8125] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 164.111816][ T8125] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 164.111825][ T8125] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 164.111843][ T8125] [ 165.093904][ T5954] Bluetooth: hci1: command tx timeout [ 165.516363][ T8153] ptrace attach of "/syz-executor exec"[5949] was attempted by "/syz-executor exec"[8153] [ 165.526486][ T1232] Bluetooth: (null): Invalid header checksum [ 165.528876][ T1232] Bluetooth: (null): Invalid header checksum [ 165.635247][ T1232] Bluetooth: (null): Invalid header checksum [ 165.685811][ T8158] FAULT_INJECTION: forcing a failure. [ 165.685811][ T8158] name failslab, interval 1, probability 0, space 0, times 0 [ 165.690540][ T8158] CPU: 3 UID: 0 PID: 8158 Comm: syz.1.587 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 165.690567][ T8158] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 165.690577][ T8158] Call Trace: [ 165.690583][ T8158] [ 165.690590][ T8158] dump_stack_lvl+0x16c/0x1f0 [ 165.690618][ T8158] should_fail_ex+0x50a/0x650 [ 165.690636][ T8158] ? fs_reclaim_acquire+0xae/0x150 [ 165.690663][ T8158] should_failslab+0xc2/0x120 [ 165.690684][ T8158] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 165.690704][ T8158] ? __d_alloc+0x35/0x8c0 [ 165.690726][ T8158] __d_alloc+0x35/0x8c0 [ 165.690747][ T8158] d_alloc_pseudo+0x1c/0xc0 [ 165.690769][ T8158] alloc_file_pseudo+0xd2/0x200 [ 165.690789][ T8158] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 165.690816][ T8158] sock_alloc_file+0x50/0x1d0 [ 165.690855][ T8158] do_accept+0x23e/0x530 [ 165.690878][ T8158] ? do_raw_spin_lock+0x12d/0x2c0 [ 165.690901][ T8158] ? __pfx_do_accept+0x10/0x10 [ 165.690935][ T8158] __sys_accept4+0xfe/0x1b0 [ 165.690956][ T8158] ? __pfx___sys_accept4+0x10/0x10 [ 165.690978][ T8158] ? __pfx_ksys_write+0x10/0x10 [ 165.690997][ T8158] __ia32_sys_accept4+0x94/0x100 [ 165.691018][ T8158] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 165.691042][ T8158] __do_fast_syscall_32+0x73/0x120 [ 165.691067][ T8158] do_fast_syscall_32+0x32/0x80 [ 165.691088][ T8158] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 165.691112][ T8158] RIP: 0023:0xf73de579 [ 165.691123][ T8158] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 165.691138][ T8158] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 000000000000016c [ 165.691152][ T8158] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 165.691161][ T8158] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 165.691171][ T8158] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 165.691180][ T8158] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 165.691189][ T8158] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 165.691208][ T8158] [ 165.744308][ T1141] Bluetooth: (null): Invalid header checksum [ 165.754797][ T8164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.590'. [ 165.864319][ T1141] Bluetooth: (null): Invalid header checksum [ 165.984243][ T11] Bluetooth: (null): Invalid header checksum [ 166.075966][ T8178] netlink: 76 bytes leftover after parsing attributes in process `syz.0.596'. [ 166.079071][ T8178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.596'. [ 166.213075][ T5954] Bluetooth: hci0: Invalid connection link type handle 0x00c9 [ 166.452306][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.601'. [ 166.693675][ T39] kauditd_printk_skb: 34 callbacks suppressed [ 166.693686][ T39] audit: type=1326 audit(1738255058.812:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.3.605" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f21579 code=0x0 [ 166.824125][ T8212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.607'. [ 166.942586][ T39] audit: type=1326 audit(1738255059.062:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.1.610" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73de579 code=0x0 [ 167.137465][ T39] audit: type=1326 audit(1738255059.262:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8231 comm="syz.0.612" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f0f579 code=0x0 [ 167.183869][ T5954] Bluetooth: hci1: command tx timeout [ 167.188971][ T8233] FAULT_INJECTION: forcing a failure. [ 167.188971][ T8233] name failslab, interval 1, probability 0, space 0, times 0 [ 167.194848][ T8233] CPU: 2 UID: 0 PID: 8233 Comm: syz.0.612 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 167.194870][ T8233] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 167.194877][ T8233] Call Trace: [ 167.194881][ T8233] [ 167.194886][ T8233] dump_stack_lvl+0x16c/0x1f0 [ 167.194908][ T8233] should_fail_ex+0x50a/0x650 [ 167.194922][ T8233] ? fs_reclaim_acquire+0xae/0x150 [ 167.194943][ T8233] should_failslab+0xc2/0x120 [ 167.194958][ T8233] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 167.194973][ T8233] ? __d_alloc+0x35/0x8c0 [ 167.194990][ T8233] __d_alloc+0x35/0x8c0 [ 167.195005][ T8233] d_alloc+0x4a/0x1e0 [ 167.195021][ T8233] lookup_one_qstr_excl+0xcb/0x190 [ 167.195037][ T8233] ? mnt_want_write+0x161/0x450 [ 167.195057][ T8233] filename_create+0x1ed/0x530 [ 167.195069][ T8233] ? __pfx_filename_create+0x10/0x10 [ 167.195083][ T8233] ? __phys_addr_symbol+0x30/0x80 [ 167.195102][ T8233] ? __check_object_size+0x488/0x710 [ 167.195119][ T8233] do_mkdirat+0xab/0x3a0 [ 167.195132][ T8233] ? __pfx_do_mkdirat+0x10/0x10 [ 167.195145][ T8233] ? getname_flags.part.0+0x1c5/0x550 [ 167.195165][ T8233] __ia32_sys_mkdir+0x61/0x80 [ 167.195178][ T8233] __do_fast_syscall_32+0x73/0x120 [ 167.195201][ T8233] do_fast_syscall_32+0x32/0x80 [ 167.195221][ T8233] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 167.195242][ T8233] RIP: 0023:0xf7f0f579 [ 167.195251][ T8233] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 167.195263][ T8233] RSP: 002b:00000000f501555c EFLAGS: 00000296 ORIG_RAX: 0000000000000027 [ 167.195276][ T8233] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 0000000000000000 [ 167.195283][ T8233] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 167.195290][ T8233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 167.195297][ T8233] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 167.195304][ T8233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 167.195320][ T8233] [ 167.895486][ T8247] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 167.996328][ T8250] fuse: Bad value for 'group_id' [ 167.997838][ T8250] fuse: Bad value for 'group_id' [ 168.200182][ T8247] /dev/sr0: Can't open blockdev [ 168.700780][ T8264] FAULT_INJECTION: forcing a failure. [ 168.700780][ T8264] name failslab, interval 1, probability 0, space 0, times 0 [ 168.705289][ T8264] CPU: 0 UID: 0 PID: 8264 Comm: syz.1.622 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 168.705302][ T8264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 168.705307][ T8264] Call Trace: [ 168.705310][ T8264] [ 168.705314][ T8264] dump_stack_lvl+0x16c/0x1f0 [ 168.705330][ T8264] should_fail_ex+0x50a/0x650 [ 168.705341][ T8264] ? fs_reclaim_acquire+0xae/0x150 [ 168.705355][ T8264] ? copy_mount_options+0x55/0x190 [ 168.705366][ T8264] should_failslab+0xc2/0x120 [ 168.705377][ T8264] __kmalloc_cache_noprof+0x68/0x420 [ 168.705387][ T8264] ? _copy_from_user+0x59/0xd0 [ 168.705399][ T8264] copy_mount_options+0x55/0x190 [ 168.705411][ T8264] __ia32_sys_mount+0x1ad/0x310 [ 168.705421][ T8264] ? __pfx___ia32_sys_mount+0x10/0x10 [ 168.705434][ T8264] __do_fast_syscall_32+0x73/0x120 [ 168.705452][ T8264] do_fast_syscall_32+0x32/0x80 [ 168.705464][ T8264] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 168.705478][ T8264] RIP: 0023:0xf73de579 [ 168.705484][ T8264] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 168.705493][ T8264] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 168.705501][ T8264] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000140 [ 168.705507][ T8264] RDX: 0000000020000180 RSI: 0000000000000000 RDI: 00000000200003c0 [ 168.705511][ T8264] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 168.705516][ T8264] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 168.705521][ T8264] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 168.705531][ T8264] [ 168.923127][ T8269] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 168.951430][ T8269] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 169.540212][ T8277] fuse: Bad value for 'group_id' [ 169.541742][ T8277] fuse: Bad value for 'group_id' [ 169.632943][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.629'. [ 169.812772][ T8286] FAULT_INJECTION: forcing a failure. [ 169.812772][ T8286] name failslab, interval 1, probability 0, space 0, times 0 [ 169.816798][ T8286] CPU: 0 UID: 0 PID: 8286 Comm: syz.0.630 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 169.816822][ T8286] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 169.816831][ T8286] Call Trace: [ 169.816836][ T8286] [ 169.816842][ T8286] dump_stack_lvl+0x16c/0x1f0 [ 169.816870][ T8286] should_fail_ex+0x50a/0x650 [ 169.816888][ T8286] ? fs_reclaim_acquire+0xae/0x150 [ 169.816913][ T8286] should_failslab+0xc2/0x120 [ 169.816933][ T8286] __kmalloc_noprof+0xce/0x4f0 [ 169.816949][ T8286] ? d_absolute_path+0x137/0x1b0 [ 169.816968][ T8286] ? tomoyo_encode2+0x100/0x3e0 [ 169.816989][ T8286] tomoyo_encode2+0x100/0x3e0 [ 169.817008][ T8286] tomoyo_realpath_from_path+0x1a7/0x710 [ 169.817041][ T8286] tomoyo_path_number_perm+0x248/0x5b0 [ 169.817064][ T8286] ? tomoyo_path_number_perm+0x235/0x5b0 [ 169.817091][ T8286] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 169.817127][ T8286] ? __pfx_lock_release+0x10/0x10 [ 169.817146][ T8286] ? trace_lock_acquire+0x14e/0x1f0 [ 169.817163][ T8286] ? lock_acquire+0x2f/0xb0 [ 169.817178][ T8286] ? __fget_files+0x40/0x3a0 [ 169.817197][ T8286] ? __fget_files+0x206/0x3a0 [ 169.817216][ T8286] security_file_ioctl_compat+0x9b/0x240 [ 169.817233][ T8286] __do_compat_sys_ioctl+0x4e/0x2c0 [ 169.817258][ T8286] __do_fast_syscall_32+0x73/0x120 [ 169.817282][ T8286] do_fast_syscall_32+0x32/0x80 [ 169.817303][ T8286] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.817329][ T8286] RIP: 0023:0xf7f0f579 [ 169.817339][ T8286] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 169.817354][ T8286] RSP: 002b:00000000f503655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 169.817370][ T8286] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005600 [ 169.817381][ T8286] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 169.817389][ T8286] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.817397][ T8286] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 169.817405][ T8286] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.817441][ T8286] [ 169.817494][ T8286] ERROR: Out of memory at tomoyo_realpath_from_path. [ 170.133956][ T66] Bluetooth: hci2: command 0x0406 tx timeout [ 170.143914][ T66] Bluetooth: hci1: command 0x0406 tx timeout [ 170.144901][ T5957] Bluetooth: hci0: command 0x0406 tx timeout [ 170.239492][ T8301] fuse: Bad value for 'group_id' [ 170.243174][ T8301] fuse: Bad value for 'group_id' [ 170.397603][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 171.686819][ T8347] Invalid logical block size (85) [ 171.902167][ T8356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.655'. [ 172.161822][ T833] libceph: connect (1)[c::]:6789 error -101 [ 172.164862][ T833] libceph: mon0 (1)[c::]:6789 connect error [ 172.425662][ T833] libceph: connect (1)[c::]:6789 error -101 [ 172.427734][ T833] libceph: mon0 (1)[c::]:6789 connect error [ 172.898650][ T8375] FAULT_INJECTION: forcing a failure. [ 172.898650][ T8375] name failslab, interval 1, probability 0, space 0, times 0 [ 172.903296][ T8375] CPU: 0 UID: 0 PID: 8375 Comm: syz.1.661 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 172.903311][ T8375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 172.903316][ T8375] Call Trace: [ 172.903320][ T8375] [ 172.903324][ T8375] dump_stack_lvl+0x16c/0x1f0 [ 172.903340][ T8375] should_fail_ex+0x50a/0x650 [ 172.903350][ T8375] ? fs_reclaim_acquire+0xae/0x150 [ 172.903366][ T8375] should_failslab+0xc2/0x120 [ 172.903393][ T8375] __kmalloc_noprof+0xce/0x4f0 [ 172.903404][ T8375] ? lockdep_init_map_type+0x16d/0x7d0 [ 172.903416][ T8375] ? __raw_spin_lock_init+0x3a/0x110 [ 172.903427][ T8375] ? ceph_monc_init+0x186/0xc30 [ 172.903441][ T8375] ceph_monc_init+0x186/0xc30 [ 172.903453][ T8375] ? ceph_messenger_init+0x347/0x630 [ 172.903464][ T8375] ceph_create_client+0x25b/0x370 [ 172.903484][ T8375] ceph_get_tree+0x1ac/0x1e10 [ 172.903499][ T8375] ? security_capable+0x7e/0x260 [ 172.903512][ T8375] vfs_get_tree+0x8b/0x340 [ 172.903524][ T8375] vfs_cmd_create+0xd7/0x2a0 [ 172.903536][ T8375] __do_sys_fsconfig+0x7ba/0xbe0 [ 172.903547][ T8375] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 172.903563][ T8375] __do_fast_syscall_32+0x73/0x120 [ 172.903577][ T8375] do_fast_syscall_32+0x32/0x80 [ 172.903589][ T8375] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.903603][ T8375] RIP: 0023:0xf73de579 [ 172.903610][ T8375] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 172.903618][ T8375] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 00000000000001af [ 172.903627][ T8375] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 172.903632][ T8375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.903637][ T8375] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 172.903641][ T8375] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 172.903646][ T8375] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.903656][ T8375] [ 172.954090][ T833] libceph: connect (1)[c::]:6789 error -101 [ 172.970151][ T833] libceph: mon0 (1)[c::]:6789 connect error [ 172.982875][ T8363] ceph: No mds server is up or the cluster is laggy [ 173.066441][ T8385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.664'. [ 173.152289][ T8393] 9pnet: Could not find request transport: fdrfdnoì:3koƒ@È®1åæ{‚%HeáÌòʳÂêo4ìü°£ï¤ÁÅ'LîqÍìýœóê _ößÿ¿Ø½l0Tªìeæz‡`{gO€n>ÿb$ö©õ¼(öŸðB«q#^E} [ 173.158819][ T8393] fuse: Bad value for 'rootmode' [ 173.265417][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.668'. [ 173.269260][ T8400] netlink: 28 bytes leftover after parsing attributes in process `syz.3.668'. [ 173.358395][ T8409] netlink: 'syz.3.670': attribute type 1 has an invalid length. [ 173.364109][ T8409] netlink: 28 bytes leftover after parsing attributes in process `syz.3.670'. [ 173.368956][ T8411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.673'. [ 173.401270][ T8415] FAULT_INJECTION: forcing a failure. [ 173.401270][ T8415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.406998][ T8415] CPU: 1 UID: 0 PID: 8415 Comm: syz.2.675 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 173.407012][ T8415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 173.407017][ T8415] Call Trace: [ 173.407020][ T8415] [ 173.407024][ T8415] dump_stack_lvl+0x16c/0x1f0 [ 173.407041][ T8415] should_fail_ex+0x50a/0x650 [ 173.407053][ T8415] _copy_from_user+0x2e/0xd0 [ 173.407066][ T8415] snd_ctl_ioctl+0x784/0x1080 [ 173.407077][ T8415] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 173.407096][ T8415] snd_ctl_ioctl_compat+0x239/0x990 [ 173.407107][ T8415] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 173.407120][ T8415] ? __fget_files+0x206/0x3a0 [ 173.407132][ T8415] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 173.407143][ T8415] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 173.407157][ T8415] __do_fast_syscall_32+0x73/0x120 [ 173.407171][ T8415] do_fast_syscall_32+0x32/0x80 [ 173.407183][ T8415] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.407198][ T8415] RIP: 0023:0xf747e579 [ 173.407206][ T8415] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 173.407214][ T8415] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 173.407223][ T8415] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040405514 [ 173.407229][ T8415] RDX: 0000000020000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.407234][ T8415] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.407239][ T8415] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 173.407244][ T8415] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.407255][ T8415] [ 173.450156][ T8424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.678'. [ 173.493110][ T8426] i2c i2c-1: Invalid block write size 254 [ 173.501443][ T8427] i2c i2c-1: Invalid block write size 254 [ 173.755146][ T8446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.685'. [ 174.053886][ T5954] Bluetooth: hci3: command tx timeout [ 174.154106][ T8454] FAULT_INJECTION: forcing a failure. [ 174.154106][ T8454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.157984][ T8454] CPU: 1 UID: 0 PID: 8454 Comm: syz.2.688 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 174.157997][ T8454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 174.158012][ T8454] Call Trace: [ 174.158016][ T8454] [ 174.158020][ T8454] dump_stack_lvl+0x16c/0x1f0 [ 174.158035][ T8454] should_fail_ex+0x50a/0x650 [ 174.158047][ T8454] _copy_from_user+0x2e/0xd0 [ 174.158059][ T8454] get_compat_msghdr+0xa8/0x170 [ 174.158071][ T8454] ? __pfx_get_compat_msghdr+0x10/0x10 [ 174.158085][ T8454] ___sys_sendmsg+0x1b0/0x1e0 [ 174.158100][ T8454] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.158118][ T8454] ? __pfx_lock_release+0x10/0x10 [ 174.158128][ T8454] ? trace_lock_acquire+0x14e/0x1f0 [ 174.158140][ T8454] ? __fget_files+0x206/0x3a0 [ 174.158152][ T8454] __sys_sendmsg+0x16e/0x220 [ 174.158160][ T8454] ? __pfx___sys_sendmsg+0x10/0x10 [ 174.158175][ T8454] __do_fast_syscall_32+0x73/0x120 [ 174.158189][ T8454] do_fast_syscall_32+0x32/0x80 [ 174.158202][ T8454] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.158216][ T8454] RIP: 0023:0xf747e579 [ 174.158223][ T8454] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 174.158232][ T8454] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 174.158240][ T8454] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000100 [ 174.158245][ T8454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 174.158250][ T8454] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 174.158254][ T8454] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 174.158259][ T8454] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.158269][ T8454] [ 174.362240][ T5954] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 174.383307][ T8459] pim6reg1: entered allmulticast mode [ 174.391012][ T8459] pim6reg1: entered promiscuous mode [ 174.393623][ T8461] FAULT_INJECTION: forcing a failure. [ 174.393623][ T8461] name failslab, interval 1, probability 0, space 0, times 0 [ 174.398134][ T8461] CPU: 3 UID: 0 PID: 8461 Comm: syz.1.691 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 174.398155][ T8461] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 174.398165][ T8461] Call Trace: [ 174.398170][ T8461] [ 174.398176][ T8461] dump_stack_lvl+0x16c/0x1f0 [ 174.398203][ T8461] should_fail_ex+0x50a/0x650 [ 174.398221][ T8461] ? fs_reclaim_acquire+0xae/0x150 [ 174.398249][ T8461] should_failslab+0xc2/0x120 [ 174.398270][ T8461] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 174.398290][ T8461] ? __alloc_skb+0x2b3/0x380 [ 174.398320][ T8461] __alloc_skb+0x2b3/0x380 [ 174.398343][ T8461] ? __pfx___alloc_skb+0x10/0x10 [ 174.398367][ T8461] ? lock_acquire+0x2f/0xb0 [ 174.398393][ T8461] netlink_alloc_large_skb+0x69/0x130 [ 174.398416][ T8461] netlink_sendmsg+0x689/0xd70 [ 174.398441][ T8461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.398471][ T8461] ____sys_sendmsg+0x9ae/0xb40 [ 174.398492][ T8461] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.398510][ T8461] ? get_compat_msghdr+0x11b/0x170 [ 174.398541][ T8461] ___sys_sendmsg+0x135/0x1e0 [ 174.398567][ T8461] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.398602][ T8461] ? __pfx_lock_release+0x10/0x10 [ 174.398621][ T8461] ? trace_lock_acquire+0x14e/0x1f0 [ 174.398644][ T8461] ? __fget_files+0x206/0x3a0 [ 174.398668][ T8461] __sys_sendmsg+0x16e/0x220 [ 174.398683][ T8461] ? __pfx___sys_sendmsg+0x10/0x10 [ 174.398714][ T8461] __do_fast_syscall_32+0x73/0x120 [ 174.398740][ T8461] do_fast_syscall_32+0x32/0x80 [ 174.398794][ T8461] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.398820][ T8461] RIP: 0023:0xf73de579 [ 174.398832][ T8461] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 174.398847][ T8461] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 174.398862][ T8461] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 174.398873][ T8461] RDX: 0000000000044080 RSI: 0000000000000000 RDI: 0000000000000000 [ 174.398882][ T8461] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 174.398891][ T8461] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 174.398900][ T8461] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.398920][ T8461] [ 174.867558][ T8479] FAULT_INJECTION: forcing a failure. [ 174.867558][ T8479] name failslab, interval 1, probability 0, space 0, times 0 [ 174.872083][ T8479] CPU: 2 UID: 0 PID: 8479 Comm: syz.0.697 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 174.872096][ T8479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 174.872101][ T8479] Call Trace: [ 174.872104][ T8479] [ 174.872108][ T8479] dump_stack_lvl+0x16c/0x1f0 [ 174.872124][ T8479] should_fail_ex+0x50a/0x650 [ 174.872135][ T8479] ? fs_reclaim_acquire+0xae/0x150 [ 174.872149][ T8479] should_failslab+0xc2/0x120 [ 174.872161][ T8479] __kmalloc_noprof+0xce/0x4f0 [ 174.872171][ T8479] ? tomoyo_encode2+0x100/0x3e0 [ 174.872183][ T8479] tomoyo_encode2+0x100/0x3e0 [ 174.872193][ T8479] tomoyo_realpath_from_path+0x1a7/0x710 [ 174.872204][ T8479] ? tomoyo_path_number_perm+0x235/0x5b0 [ 174.872218][ T8479] tomoyo_path_number_perm+0x248/0x5b0 [ 174.872231][ T8479] ? tomoyo_path_number_perm+0x235/0x5b0 [ 174.872244][ T8479] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 174.872268][ T8479] ? __pfx_lock_release+0x10/0x10 [ 174.872278][ T8479] ? trace_lock_acquire+0x14e/0x1f0 [ 174.872288][ T8479] ? lock_acquire+0x2f/0xb0 [ 174.872296][ T8479] ? __fget_files+0x40/0x3a0 [ 174.872314][ T8479] ? __fget_files+0x206/0x3a0 [ 174.872335][ T8479] security_file_ioctl_compat+0x9b/0x240 [ 174.872346][ T8479] __do_compat_sys_ioctl+0x4e/0x2c0 [ 174.872364][ T8479] __do_fast_syscall_32+0x73/0x120 [ 174.872378][ T8479] do_fast_syscall_32+0x32/0x80 [ 174.872390][ T8479] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.872404][ T8479] RIP: 0023:0xf7f0f579 [ 174.872411][ T8479] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 174.872419][ T8479] RSP: 002b:00000000f501555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 174.872428][ T8479] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004010ae42 [ 174.872436][ T8479] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 174.872441][ T8479] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 174.872446][ T8479] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 174.872451][ T8479] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.872461][ T8479] [ 174.872469][ T8479] ERROR: Out of memory at tomoyo_realpath_from_path. [ 175.148324][ T6377] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 175.303857][ T6377] usb 7-1: Using ep0 maxpacket: 32 [ 175.308945][ T6377] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.312096][ T6377] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.315560][ T6377] usb 7-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 175.319654][ T6377] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 175.322076][ T6377] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.332209][ T8494] 9pnet_virtio: no channels available for device syz [ 175.339693][ T8494] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 175.349704][ T39] audit: type=1800 audit(2000000002.039:69): pid=8493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.702" name="bus" dev="overlay" ino=925 res=0 errno=0 [ 175.470609][ T8498] block device autoloading is deprecated and will be removed. [ 175.529784][ T8473] Driver unsupported XDP return value 0 on prog (id 45) dev N/A, expect packet loss! [ 175.944944][ T6377] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:32.0/0003:0458:5011.0009/input/input18 [ 176.016915][ T6377] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:32.0/0003:0458:5011.0009/input/input19 [ 176.026956][ T6377] kye 0003:0458:5011.0009: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 176.035884][ T6377] usb 7-1: USB disconnect, device number 11 [ 176.623791][ T57] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 176.763814][ T6377] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 176.797041][ T57] usb 5-1: not running at top speed; connect to a high speed hub [ 176.801800][ T57] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 176.805570][ T57] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.811634][ T57] usb 5-1: config 1 interface 0 has no altsetting 0 [ 176.816012][ T57] usb 5-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 176.819985][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.823585][ T57] usb 5-1: Product: syz [ 176.825058][ T57] usb 5-1: Manufacturer: à Š [ 176.826569][ T57] usb 5-1: SerialNumber: syz [ 176.830465][ T8514] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 176.923829][ T6377] usb 7-1: Using ep0 maxpacket: 16 [ 176.928176][ T6377] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 176.931400][ T6377] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34304, setting to 1024 [ 176.935166][ T6377] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 176.937822][ T6377] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.940997][ T6377] usb 7-1: config 0 descriptor?? [ 176.942961][ T8520] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 177.361722][ T6377] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:05AC:8241.000A/input/input20 [ 177.436888][ T6377] appleir 0003:05AC:8241.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 177.573476][ T8520] __nla_validate_parse: 1 callbacks suppressed [ 177.573487][ T8520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.709'. [ 177.634942][ T8530] ubi: mtd0 is already attached to ubi0 [ 177.741745][ T8534] netlink: 'syz.1.714': attribute type 1 has an invalid length. [ 178.373892][ T5954] Bluetooth: hci2: command 0x0406 tx timeout [ 178.567372][ T8545] FAULT_INJECTION: forcing a failure. [ 178.567372][ T8545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.571767][ T8545] CPU: 2 UID: 0 PID: 8545 Comm: syz.3.718 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 178.571779][ T8545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 178.571785][ T8545] Call Trace: [ 178.571788][ T8545] [ 178.571792][ T8545] dump_stack_lvl+0x16c/0x1f0 [ 178.571809][ T8545] should_fail_ex+0x50a/0x650 [ 178.571821][ T8545] _copy_from_user+0x2e/0xd0 [ 178.571834][ T8545] kstrtouint_from_user+0xd7/0x1c0 [ 178.571847][ T8545] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 178.571863][ T8545] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 178.571876][ T8545] proc_fail_nth_write+0x84/0x250 [ 178.571889][ T8545] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 178.571900][ T8545] ? ksys_write+0x12b/0x250 [ 178.571911][ T8545] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 178.571922][ T8545] vfs_write+0x24c/0x1150 [ 178.571931][ T8545] ? __fget_files+0x1fc/0x3a0 [ 178.571941][ T8545] ? __pfx___mutex_lock+0x10/0x10 [ 178.571954][ T8545] ? __pfx_vfs_write+0x10/0x10 [ 178.571965][ T8545] ? __fget_files+0x206/0x3a0 [ 178.571977][ T8545] ksys_write+0x12b/0x250 [ 178.571985][ T8545] ? __pfx_ksys_write+0x10/0x10 [ 178.571995][ T8545] ? rcu_is_watching+0x12/0xc0 [ 178.572009][ T8545] __do_fast_syscall_32+0x73/0x120 [ 178.572023][ T8545] do_fast_syscall_32+0x32/0x80 [ 178.572035][ T8545] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 178.572049][ T8545] RIP: 0023:0xf7f21579 [ 178.572056][ T8545] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 178.572064][ T8545] RSP: 002b:00000000f5046590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 178.572072][ T8545] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5046620 [ 178.572078][ T8545] RDX: 0000000000000001 RSI: 00000000f73acff4 RDI: 0000000000000000 [ 178.572083][ T8545] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 178.572087][ T8545] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 178.572092][ T8545] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 178.572103][ T8545] [ 178.731798][ T8550] FAULT_INJECTION: forcing a failure. [ 178.731798][ T8550] name failslab, interval 1, probability 0, space 0, times 0 [ 178.735665][ T8550] CPU: 1 UID: 0 PID: 8550 Comm: syz.1.717 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 178.735687][ T8550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 178.735693][ T8550] Call Trace: [ 178.735696][ T8550] [ 178.735701][ T8550] dump_stack_lvl+0x16c/0x1f0 [ 178.735717][ T8550] should_fail_ex+0x50a/0x650 [ 178.735735][ T8550] ? fs_reclaim_acquire+0xae/0x150 [ 178.735753][ T8550] should_failslab+0xc2/0x120 [ 178.735764][ T8550] __kmalloc_node_noprof+0xd1/0x520 [ 178.735774][ T8550] ? lock_acquire.part.0+0x11b/0x380 [ 178.735785][ T8550] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 178.735797][ T8550] __kvmalloc_node_noprof+0xad/0x1a0 [ 178.735806][ T8550] seq_read_iter+0x82a/0x12b0 [ 178.735824][ T8550] vfs_read+0x886/0xbf0 [ 178.735836][ T8550] ? __pfx_vfs_read+0x10/0x10 [ 178.735852][ T8550] ksys_read+0x12b/0x250 [ 178.735860][ T8550] ? __pfx_ksys_read+0x10/0x10 [ 178.735869][ T8550] ? rcu_is_watching+0x12/0xc0 [ 178.735884][ T8550] __do_fast_syscall_32+0x73/0x120 [ 178.735897][ T8550] do_fast_syscall_32+0x32/0x80 [ 178.735910][ T8550] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 178.735924][ T8550] RIP: 0023:0xf73de579 [ 178.735931][ T8550] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 178.735939][ T8550] RSP: 002b:00000000f502455c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 178.735948][ T8550] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000300 [ 178.735953][ T8550] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 178.735958][ T8550] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 178.735962][ T8550] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 178.735967][ T8550] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 178.735978][ T8550] [ 178.972571][ T8556] Cannot find set identified by id 0 to match [ 179.158976][ T57] usbhid 5-1:1.0: can't add hid device: -71 [ 179.161577][ T57] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 179.165213][ T57] usb 5-1: USB disconnect, device number 16 [ 179.227504][ T8569] FAULT_INJECTION: forcing a failure. [ 179.227504][ T8569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.232612][ T8569] CPU: 2 UID: 0 PID: 8569 Comm: syz.3.725 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 179.232633][ T8569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 179.232643][ T8569] Call Trace: [ 179.232649][ T8569] [ 179.232656][ T8569] dump_stack_lvl+0x16c/0x1f0 [ 179.232682][ T8569] should_fail_ex+0x50a/0x650 [ 179.232704][ T8569] _copy_from_user+0x2e/0xd0 [ 179.232726][ T8569] get_compat_msghdr+0xa8/0x170 [ 179.232746][ T8569] ? __pfx_get_compat_msghdr+0x10/0x10 [ 179.232774][ T8569] ___sys_sendmsg+0x1b0/0x1e0 [ 179.232803][ T8569] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.232837][ T8569] ? __pfx_lock_release+0x10/0x10 [ 179.232856][ T8569] ? trace_lock_acquire+0x14e/0x1f0 [ 179.232880][ T8569] ? __fget_files+0x206/0x3a0 [ 179.232903][ T8569] __sys_sendmsg+0x16e/0x220 [ 179.232919][ T8569] ? __pfx___sys_sendmsg+0x10/0x10 [ 179.232950][ T8569] __do_fast_syscall_32+0x73/0x120 [ 179.232976][ T8569] do_fast_syscall_32+0x32/0x80 [ 179.233000][ T8569] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 179.233026][ T8569] RIP: 0023:0xf7f21579 [ 179.233038][ T8569] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 179.233054][ T8569] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 179.233069][ T8569] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000080 [ 179.233079][ T8569] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.233088][ T8569] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 179.233098][ T8569] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 179.233107][ T8569] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 179.233127][ T8569] [ 179.235747][ T5995] usb 7-1: USB disconnect, device number 12 [ 179.513845][ T57] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 179.616397][ T8590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.684965][ T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.688203][ T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.691073][ T57] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 179.694067][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.698277][ T57] usb 5-1: config 0 descriptor?? [ 179.940787][ T8599] FAULT_INJECTION: forcing a failure. [ 179.940787][ T8599] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 179.946637][ T8599] CPU: 0 UID: 0 PID: 8599 Comm: syz.2.734 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 179.946659][ T8599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 179.946669][ T8599] Call Trace: [ 179.946674][ T8599] [ 179.946682][ T8599] dump_stack_lvl+0x16c/0x1f0 [ 179.946731][ T8599] should_fail_ex+0x50a/0x650 [ 179.946750][ T8599] ? __pfx___might_resched+0x10/0x10 [ 179.946775][ T8599] should_fail_alloc_page+0xe7/0x130 [ 179.946797][ T8599] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 179.946827][ T8599] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 179.946847][ T8599] ? hlock_class+0x4e/0x130 [ 179.946869][ T8599] ? mark_lock+0xb5/0xc60 [ 179.946887][ T8599] ? lock_acquire.part.0+0x11b/0x380 [ 179.946907][ T8599] ? __pfx_mark_lock+0x10/0x10 [ 179.946926][ T8599] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 179.946958][ T8599] ? hlock_class+0x4e/0x130 [ 179.946980][ T8599] ? __lock_acquire+0xcc5/0x3c40 [ 179.946998][ T8599] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 179.947019][ T8599] ? policy_nodemask+0xea/0x4e0 [ 179.947040][ T8599] alloc_pages_mpol+0x1fc/0x540 [ 179.947062][ T8599] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 179.947088][ T8599] folio_alloc_mpol_noprof+0x36/0x2f0 [ 179.947111][ T8599] vma_alloc_folio_noprof+0xee/0x1b0 [ 179.947133][ T8599] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 179.947155][ T8599] ? find_held_lock+0x2d/0x110 [ 179.947192][ T8599] do_pte_missing+0x202f/0x3e10 [ 179.947219][ T8599] __handle_mm_fault+0x1166/0x2c60 [ 179.947245][ T8599] ? __pfx___handle_mm_fault+0x10/0x10 [ 179.947262][ T8599] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 179.947297][ T8599] ? find_vma+0xc0/0x140 [ 179.947320][ T8599] ? __pfx_find_vma+0x10/0x10 [ 179.947346][ T8599] handle_mm_fault+0x3fa/0xaa0 [ 179.947368][ T8599] do_user_addr_fault+0x7a3/0x13f0 [ 179.947396][ T8599] exc_page_fault+0x5c/0xc0 [ 179.947420][ T8599] asm_exc_page_fault+0x26/0x30 [ 179.947442][ T8599] RIP: 0010:__put_user_4+0x11/0x20 [ 179.947466][ T8599] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 179.947481][ T8599] RSP: 0018:ffffc900070a7bb0 EFLAGS: 00050202 [ 179.947495][ T8599] RAX: 0000000020000000 RBX: 0000000000000000 RCX: 0000000020002680 [ 179.947505][ T8599] RDX: ffff88802300a440 RSI: ffffffff870b6a6b RDI: ffffffff8bd2c0c0 [ 179.947515][ T8599] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff20bf782 [ 179.947525][ T8599] R10: ffffffff905fbc17 R11: 0000000000000001 R12: ffff88806c110100 [ 179.947535][ T8599] R13: 0000000000000000 R14: ffff88804ad34600 R15: ffff88804505d128 [ 179.947554][ T8599] ? processcompl_compat+0x54b/0x660 [ 179.947572][ T8599] processcompl_compat+0x558/0x660 [ 179.947597][ T8599] usbdev_ioctl+0x255/0x3f90 [ 179.947613][ T8599] ? tomoyo_path_number_perm+0x190/0x5b0 [ 179.947639][ T8599] ? __pfx_usbdev_ioctl+0x10/0x10 [ 179.947655][ T8599] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 179.947677][ T8599] ? do_vfs_ioctl+0x513/0x1950 [ 179.947701][ T8599] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 179.947734][ T8599] ? __pfx_lock_release+0x10/0x10 [ 179.947751][ T8599] ? trace_lock_acquire+0x14e/0x1f0 [ 179.947775][ T8599] ? __fget_files+0x206/0x3a0 [ 179.947794][ T8599] ? __pfx_usbdev_ioctl+0x10/0x10 [ 179.947811][ T8599] compat_ptr_ioctl+0x6b/0xa0 [ 179.947834][ T8599] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 179.947856][ T8599] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 179.947882][ T8599] __do_fast_syscall_32+0x73/0x120 [ 179.947908][ T8599] do_fast_syscall_32+0x32/0x80 [ 179.947933][ T8599] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 179.947958][ T8599] RIP: 0023:0xf747e579 [ 179.947970][ T8599] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 179.947985][ T8599] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 179.947999][ T8599] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004004550c [ 179.948009][ T8599] RDX: 0000000020002680 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.948019][ T8599] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 179.948028][ T8599] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 179.948037][ T8599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 179.948059][ T8599] [ 180.080785][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.105193][ T57] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 180.107617][ T57] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 180.109709][ T57] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 180.112013][ T57] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 180.114730][ T57] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 180.116940][ T57] cm6533_jd 0003:0D8C:0022.000B: No inputs registered, leaving [ 180.120493][ T57] cm6533_jd 0003:0D8C:0022.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 180.147463][ T8603] netlink: 576 bytes leftover after parsing attributes in process `syz.2.735'. [ 180.366765][ T58] usb 5-1: USB disconnect, device number 17 [ 180.897351][ T8621] FAULT_INJECTION: forcing a failure. [ 180.897351][ T8621] name failslab, interval 1, probability 0, space 0, times 0 [ 180.900853][ T8621] CPU: 1 UID: 0 PID: 8621 Comm: syz.1.740 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 180.900865][ T8621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 180.900870][ T8621] Call Trace: [ 180.900873][ T8621] [ 180.900877][ T8621] dump_stack_lvl+0x16c/0x1f0 [ 180.900893][ T8621] should_fail_ex+0x50a/0x650 [ 180.900904][ T8621] ? fs_reclaim_acquire+0xae/0x150 [ 180.900919][ T8621] should_failslab+0xc2/0x120 [ 180.900929][ T8621] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 180.900941][ T8621] ? alloc_empty_file+0x73/0x1e0 [ 180.900953][ T8621] alloc_empty_file+0x73/0x1e0 [ 180.900964][ T8621] path_openat+0xe1/0x2d80 [ 180.900972][ T8621] ? hlock_class+0x4e/0x130 [ 180.900986][ T8621] ? __lock_acquire+0x15a9/0x3c40 [ 180.900999][ T8621] ? __pfx_path_openat+0x10/0x10 [ 180.901008][ T8621] ? __pfx___lock_acquire+0x10/0x10 [ 180.901017][ T8621] ? lock_acquire.part.0+0x11b/0x380 [ 180.901027][ T8621] ? find_held_lock+0x2d/0x110 [ 180.901041][ T8621] do_filp_open+0x20c/0x470 [ 180.901050][ T8621] ? __pfx_do_filp_open+0x10/0x10 [ 180.901058][ T8621] ? find_held_lock+0x2d/0x110 [ 180.901077][ T8621] ? alloc_fd+0x41f/0x760 [ 180.901089][ T8621] do_sys_openat2+0x17a/0x1e0 [ 180.901100][ T8621] ? __pfx_do_sys_openat2+0x10/0x10 [ 180.901112][ T8621] ? __fget_files+0x206/0x3a0 [ 180.901123][ T8621] __ia32_compat_sys_openat+0x16e/0x210 [ 180.901135][ T8621] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 180.901146][ T8621] ? ksys_write+0x1ba/0x250 [ 180.901158][ T8621] __do_fast_syscall_32+0x73/0x120 [ 180.901171][ T8621] do_fast_syscall_32+0x32/0x80 [ 180.901183][ T8621] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 180.901197][ T8621] RIP: 0023:0xf73de579 [ 180.901204][ T8621] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 180.901212][ T8621] RSP: 002b:00000000f5066100 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 180.901221][ T8621] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5066150 [ 180.901226][ T8621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73ccff4 [ 180.901231][ T8621] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 180.901236][ T8621] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 180.901240][ T8621] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 180.901250][ T8621] [ 181.031248][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.743'. [ 181.034402][ T8628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.743'. [ 181.115920][ T8640] FAULT_INJECTION: forcing a failure. [ 181.115920][ T8640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.119717][ T8640] CPU: 2 UID: 0 PID: 8640 Comm: syz.0.746 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 181.119730][ T8640] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 181.119735][ T8640] Call Trace: [ 181.119738][ T8640] [ 181.119743][ T8640] dump_stack_lvl+0x16c/0x1f0 [ 181.119759][ T8640] should_fail_ex+0x50a/0x650 [ 181.119771][ T8640] _copy_from_user+0x2e/0xd0 [ 181.119783][ T8640] move_addr_to_kernel+0x68/0x160 [ 181.119796][ T8640] __get_compat_msghdr+0x3f1/0x4d0 [ 181.119807][ T8640] get_compat_msghdr+0xd3/0x170 [ 181.119817][ T8640] ? __pfx_get_compat_msghdr+0x10/0x10 [ 181.119830][ T8640] ___sys_sendmsg+0x1b0/0x1e0 [ 181.119844][ T8640] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.119862][ T8640] ? trace_lock_acquire+0x14e/0x1f0 [ 181.119878][ T8640] __sys_sendmmsg+0x2fa/0x420 [ 181.119887][ T8640] ? __pfx___sys_sendmmsg+0x10/0x10 [ 181.119898][ T8640] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 181.119915][ T8640] ? fput+0x67/0x440 [ 181.119926][ T8640] ? ksys_write+0x1ba/0x250 [ 181.119934][ T8640] ? __pfx_ksys_write+0x10/0x10 [ 181.119944][ T8640] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 181.119955][ T8640] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 181.119968][ T8640] __do_fast_syscall_32+0x73/0x120 [ 181.119981][ T8640] do_fast_syscall_32+0x32/0x80 [ 181.119993][ T8640] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 181.120006][ T8640] RIP: 0023:0xf7f0f579 [ 181.120014][ T8640] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 181.120022][ T8640] RSP: 002b:00000000f503655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 181.120030][ T8640] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000240 [ 181.120035][ T8640] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 181.120040][ T8640] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 181.120045][ T8640] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 181.120050][ T8640] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.120060][ T8640] [ 181.596759][ T8662] program syz.1.754 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.619920][ T8664] dccp_invalid_packet: P.Data Offset(4) too small [ 181.635417][ T8665] netlink: 'syz.1.755': attribute type 1 has an invalid length. [ 181.643521][ T8665] bond1: entered promiscuous mode [ 181.645791][ T8665] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.780763][ T8672] program syz.1.757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.783549][ T8672] FAULT_INJECTION: forcing a failure. [ 181.783549][ T8672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.787662][ T8672] CPU: 0 UID: 0 PID: 8672 Comm: syz.1.757 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 181.787674][ T8672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 181.787680][ T8672] Call Trace: [ 181.787683][ T8672] [ 181.787687][ T8672] dump_stack_lvl+0x16c/0x1f0 [ 181.787704][ T8672] should_fail_ex+0x50a/0x650 [ 181.787717][ T8672] _copy_to_user+0x32/0xd0 [ 181.787730][ T8672] simple_read_from_buffer+0xd0/0x160 [ 181.787744][ T8672] proc_fail_nth_read+0x198/0x270 [ 181.787757][ T8672] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.787770][ T8672] ? rw_verify_area+0xcf/0x680 [ 181.787783][ T8672] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.787795][ T8672] vfs_read+0x1df/0xbf0 [ 181.787803][ T8672] ? __fget_files+0x1fc/0x3a0 [ 181.787812][ T8672] ? __pfx___mutex_lock+0x10/0x10 [ 181.787825][ T8672] ? __pfx_vfs_read+0x10/0x10 [ 181.787837][ T8672] ? __fget_files+0x206/0x3a0 [ 181.787848][ T8672] ksys_read+0x12b/0x250 [ 181.787856][ T8672] ? __pfx_ksys_read+0x10/0x10 [ 181.787868][ T8672] __do_fast_syscall_32+0x73/0x120 [ 181.787881][ T8672] do_fast_syscall_32+0x32/0x80 [ 181.787893][ T8672] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 181.787907][ T8672] RIP: 0023:0xf73de579 [ 181.787915][ T8672] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 181.787923][ T8672] RSP: 002b:00000000f5066590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 181.787932][ T8672] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5066620 [ 181.787937][ T8672] RDX: 000000000000000f RSI: 00000000f73ccff4 RDI: 0000000000000000 [ 181.787942][ T8672] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 181.787946][ T8672] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 181.787951][ T8672] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.787962][ T8672] [ 181.863269][ T8677] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 182.077665][ T8689] FAULT_INJECTION: forcing a failure. [ 182.077665][ T8689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.081408][ T8689] CPU: 3 UID: 0 PID: 8689 Comm: syz.2.761 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 182.081420][ T8689] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 182.081426][ T8689] Call Trace: [ 182.081429][ T8689] [ 182.081432][ T8689] dump_stack_lvl+0x16c/0x1f0 [ 182.081449][ T8689] should_fail_ex+0x50a/0x650 [ 182.081461][ T8689] copy_fpstate_to_sigframe+0x894/0xb20 [ 182.081474][ T8689] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 182.081484][ T8689] ? lock_acquire+0x2f/0xb0 [ 182.081493][ T8689] ? posixtimer_deliver_signal+0x1ad/0x650 [ 182.081507][ T8689] ? posixtimer_deliver_signal+0x1ad/0x650 [ 182.081517][ T8689] ? find_held_lock+0x2d/0x110 [ 182.081531][ T8689] get_sigframe+0x4aa/0x9c0 [ 182.081541][ T8689] ? __pfx_get_sigframe+0x10/0x10 [ 182.081551][ T8689] ? _raw_spin_unlock_irq+0x23/0x50 [ 182.081562][ T8689] ? siginfo_layout+0x177/0x290 [ 182.081574][ T8689] ia32_setup_rt_frame+0xe4/0xb30 [ 182.081589][ T8689] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 182.081600][ T8689] ? __pfx_poll_select_finish+0x10/0x10 [ 182.081609][ T8689] ? ktime_get_ts64+0x2d2/0x400 [ 182.081620][ T8689] arch_do_signal_or_restart+0x47b/0x7e0 [ 182.081629][ T8689] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 182.081641][ T8689] ? ksys_write+0x1ba/0x250 [ 182.081650][ T8689] ? __pfx_ksys_write+0x10/0x10 [ 182.081660][ T8689] syscall_exit_to_user_mode+0x150/0x2a0 [ 182.081672][ T8689] __do_fast_syscall_32+0x80/0x120 [ 182.081686][ T8689] do_fast_syscall_32+0x32/0x80 [ 182.081698][ T8689] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.081711][ T8689] RIP: 0023:0xf747e579 [ 182.081718][ T8689] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 182.081727][ T8689] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000135 [ 182.081735][ T8689] RAX: fffffffffffffffc RBX: 0000000000000000 RCX: 0000000000000000 [ 182.081740][ T8689] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 182.081745][ T8689] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 182.081750][ T8689] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 182.081754][ T8689] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 182.081765][ T8689] [ 182.218744][ T8707] overlay: Unknown parameter 'euid>00000000000000000000' [ 182.369571][ T8713] netlink: 'syz.2.767': attribute type 10 has an invalid length. [ 182.371868][ T8713] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 182.375957][ T8713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.402943][ T5995] IPVS: starting estimator thread 0... [ 182.479628][ T8719] program syz.1.769 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.496961][ T8715] IPVS: using max 39 ests per chain, 93600 per kthread [ 182.556971][ T8732] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 182.682782][ T8735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.689914][ T8735] bond0: (slave rose0): Enslaving as an active interface with an up link [ 182.899092][ T8751] FAULT_INJECTION: forcing a failure. [ 182.899092][ T8751] name failslab, interval 1, probability 0, space 0, times 0 [ 182.902782][ T8751] CPU: 2 UID: 0 PID: 8751 Comm: syz.2.774 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 182.902794][ T8751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 182.902800][ T8751] Call Trace: [ 182.902803][ T8751] [ 182.902807][ T8751] dump_stack_lvl+0x16c/0x1f0 [ 182.902822][ T8751] should_fail_ex+0x50a/0x650 [ 182.902833][ T8751] ? fs_reclaim_acquire+0xae/0x150 [ 182.902847][ T8751] ? sctp_datamsg_from_user+0x8d/0x1320 [ 182.902860][ T8751] should_failslab+0xc2/0x120 [ 182.902871][ T8751] __kmalloc_cache_noprof+0x68/0x420 [ 182.902883][ T8751] sctp_datamsg_from_user+0x8d/0x1320 [ 182.902894][ T8751] ? __sk_mem_raise_allocated+0x8a1/0x1710 [ 182.902906][ T8751] ? sctp_sched_init_sid+0x89/0x160 [ 182.902917][ T8751] ? __sk_mem_schedule+0xd0/0x100 [ 182.902926][ T8751] sctp_sendmsg_to_asoc+0xafd/0x1ad0 [ 182.902935][ T8751] ? print_usage_bug.part.0+0x5c0/0x680 [ 182.902951][ T8751] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 182.902960][ T8751] ? sctp_sendmsg+0x575/0x1f10 [ 182.902970][ T8751] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 182.902983][ T8751] ? mark_held_locks+0x9f/0xe0 [ 182.902993][ T8751] ? sctp_sendmsg_check_sflags+0x176/0x320 [ 182.903008][ T8751] sctp_sendmsg+0x129c/0x1f10 [ 182.903022][ T8751] ? __pfx_sctp_sendmsg+0x10/0x10 [ 182.903033][ T8751] ? __pfx___might_resched+0x10/0x10 [ 182.903049][ T8751] ? __pfx_aa_sk_perm+0x10/0x10 [ 182.903063][ T8751] ? __import_iovec+0x1f2/0x6d0 [ 182.903076][ T8751] ? __pfx_sctp_sendmsg+0x10/0x10 [ 182.903087][ T8751] inet_sendmsg+0x119/0x140 [ 182.903099][ T8751] ____sys_sendmsg+0x907/0xb40 [ 182.903111][ T8751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.903120][ T8751] ? get_compat_msghdr+0x11b/0x170 [ 182.903136][ T8751] ___sys_sendmsg+0x135/0x1e0 [ 182.903150][ T8751] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.903168][ T8751] ? trace_lock_acquire+0x14e/0x1f0 [ 182.903184][ T8751] __sys_sendmmsg+0x2fa/0x420 [ 182.903193][ T8751] ? __pfx___sys_sendmmsg+0x10/0x10 [ 182.903205][ T8751] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 182.903223][ T8751] ? fput+0x67/0x440 [ 182.903233][ T8751] ? ksys_write+0x1ba/0x250 [ 182.903242][ T8751] ? __pfx_ksys_write+0x10/0x10 [ 182.903252][ T8751] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 182.903263][ T8751] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 182.903275][ T8751] __do_fast_syscall_32+0x73/0x120 [ 182.903289][ T8751] do_fast_syscall_32+0x32/0x80 [ 182.903308][ T8751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.903322][ T8751] RIP: 0023:0xf747e579 [ 182.903330][ T8751] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 182.903338][ T8751] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 182.903347][ T8751] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003f00 [ 182.903352][ T8751] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 182.903357][ T8751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 182.903362][ T8751] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 182.903367][ T8751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 182.903377][ T8751] [ 183.284515][ T5960] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 183.598137][ T8778] veth0_vlan: left promiscuous mode [ 183.600067][ T8778] veth0_vlan: entered promiscuous mode [ 183.736269][ T8792] netfs: Couldn't get user pages (rc=-14) [ 183.761552][ T8793] FAULT_INJECTION: forcing a failure. [ 183.761552][ T8793] name failslab, interval 1, probability 0, space 0, times 0 [ 183.769921][ T8793] CPU: 1 UID: 0 PID: 8793 Comm: syz.1.785 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 183.769936][ T8793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 183.769941][ T8793] Call Trace: [ 183.769944][ T8793] [ 183.769949][ T8793] dump_stack_lvl+0x16c/0x1f0 [ 183.769965][ T8793] should_fail_ex+0x50a/0x650 [ 183.769976][ T8793] ? fs_reclaim_acquire+0xae/0x150 [ 183.769991][ T8793] should_failslab+0xc2/0x120 [ 183.770003][ T8793] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 183.770014][ T8793] ? __d_alloc+0x35/0x8c0 [ 183.770026][ T8793] __d_alloc+0x35/0x8c0 [ 183.770037][ T8793] d_alloc+0x4a/0x1e0 [ 183.770047][ T8793] d_alloc_parallel+0xe7/0x12b0 [ 183.770065][ T8793] ? __pfx_d_alloc_parallel+0x10/0x10 [ 183.770077][ T8793] ? lockdep_init_map_type+0x16d/0x7d0 [ 183.770088][ T8793] ? lock_acquire.part.0+0x11b/0x380 [ 183.770098][ T8793] ? lockdep_init_map_type+0x16d/0x7d0 [ 183.770112][ T8793] __lookup_slow+0x194/0x460 [ 183.770125][ T8793] ? __pfx___lookup_slow+0x10/0x10 [ 183.770139][ T8793] ? walk_component+0x342/0x5b0 [ 183.770156][ T8793] ? lookup_fast+0x155/0x540 [ 183.770170][ T8793] walk_component+0x350/0x5b0 [ 183.770183][ T8793] link_path_walk.part.0.constprop.0+0x669/0xd40 [ 183.770196][ T8793] path_lookupat+0x93/0x770 [ 183.770206][ T8793] filename_lookup+0x221/0x5f0 [ 183.770216][ T8793] ? __pfx_filename_lookup+0x10/0x10 [ 183.770246][ T8793] ? getname_flags.part.0+0x1c5/0x550 [ 183.770262][ T8793] do_readlinkat+0xcf/0x390 [ 183.770274][ T8793] ? __pfx_do_readlinkat+0x10/0x10 [ 183.770283][ T8793] ? ksys_write+0x1ba/0x250 [ 183.770291][ T8793] ? __pfx_ksys_write+0x10/0x10 [ 183.770302][ T8793] __ia32_sys_readlink+0x76/0xc0 [ 183.770314][ T8793] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 183.770328][ T8793] __do_fast_syscall_32+0x73/0x120 [ 183.770351][ T8793] do_fast_syscall_32+0x32/0x80 [ 183.770363][ T8793] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.770378][ T8793] RIP: 0023:0xf73de579 [ 183.770385][ T8793] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 183.770393][ T8793] RSP: 002b:00000000f502455c EFLAGS: 00000296 ORIG_RAX: 0000000000000055 [ 183.770401][ T8793] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000020000140 [ 183.770407][ T8793] RDX: 00000000000000b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.770411][ T8793] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.770416][ T8793] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 183.770421][ T8793] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.770432][ T8793] [ 183.871349][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 183.910883][ T8795] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 184.185000][ T8802] FAULT_INJECTION: forcing a failure. [ 184.185000][ T8802] name failslab, interval 1, probability 0, space 0, times 0 [ 184.189054][ T8802] CPU: 2 UID: 0 PID: 8802 Comm: syz.0.789 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 184.189067][ T8802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 184.189073][ T8802] Call Trace: [ 184.189076][ T8802] [ 184.189080][ T8802] dump_stack_lvl+0x16c/0x1f0 [ 184.189097][ T8802] should_fail_ex+0x50a/0x650 [ 184.189108][ T8802] ? fs_reclaim_acquire+0xae/0x150 [ 184.189123][ T8802] should_failslab+0xc2/0x120 [ 184.189134][ T8802] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 184.189144][ T8802] ? mas_alloc_nodes+0x18b/0x880 [ 184.189157][ T8802] mas_alloc_nodes+0x18b/0x880 [ 184.189170][ T8802] mas_node_count_gfp+0x105/0x130 [ 184.189182][ T8802] mas_preallocate+0x53f/0xce0 [ 184.189197][ T8802] ? __pfx_mas_preallocate+0x10/0x10 [ 184.189214][ T8802] ? anon_vma_name+0x75/0x100 [ 184.189227][ T8802] __split_vma+0x474/0x1210 [ 184.189238][ T8802] ? __pfx___split_vma+0x10/0x10 [ 184.189250][ T8802] ? mark_lock+0xb5/0xc60 [ 184.189263][ T8802] vms_gather_munmap_vmas+0x38b/0x1730 [ 184.189276][ T8802] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 184.189288][ T8802] ? mas_walk+0x6a6/0x910 [ 184.189303][ T8802] __mmap_region+0x328/0x2760 [ 184.189313][ T8802] ? __lock_acquire+0x15a9/0x3c40 [ 184.189323][ T8802] ? __pfx___mmap_region+0x10/0x10 [ 184.189336][ T8802] ? hlock_class+0x4e/0x130 [ 184.189348][ T8802] ? mark_lock+0xb5/0xc60 [ 184.189359][ T8802] ? __pfx_mark_lock+0x10/0x10 [ 184.189389][ T8802] mmap_region+0x32b/0x3f0 [ 184.189401][ T8802] do_mmap+0xd8d/0x11b0 [ 184.189413][ T8802] ? __pfx_do_mmap+0x10/0x10 [ 184.189421][ T8802] ? __pfx_down_write_killable+0x10/0x10 [ 184.189433][ T8802] vm_mmap_pgoff+0x203/0x3a0 [ 184.189445][ T8802] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 184.189455][ T8802] ? __fget_files+0x206/0x3a0 [ 184.189467][ T8802] ksys_mmap_pgoff+0x32c/0x5c0 [ 184.189480][ T8802] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 184.189489][ T8802] __do_fast_syscall_32+0x73/0x120 [ 184.189502][ T8802] do_fast_syscall_32+0x32/0x80 [ 184.189514][ T8802] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.189527][ T8802] RIP: 0023:0xf7f0f579 [ 184.189535][ T8802] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 184.189543][ T8802] RSP: 002b:00000000f503655c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 184.189552][ T8802] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000400000 [ 184.189558][ T8802] RDX: 0000000001000002 RSI: 0000000000011011 RDI: 0000000000000003 [ 184.189563][ T8802] RBP: 0000000000002000 R08: 0000000000000000 R09: 0000000000000000 [ 184.189567][ T8802] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 184.189572][ T8802] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.189583][ T8802] [ 185.274815][ T8838] netlink: 48 bytes leftover after parsing attributes in process `syz.1.799'. [ 185.309967][ T8841] FAULT_INJECTION: forcing a failure. [ 185.309967][ T8841] name failslab, interval 1, probability 0, space 0, times 0 [ 185.314017][ T8841] CPU: 3 UID: 0 PID: 8841 Comm: syz.2.801 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 185.314030][ T8841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.314037][ T8841] Call Trace: [ 185.314039][ T8841] [ 185.314043][ T8841] dump_stack_lvl+0x16c/0x1f0 [ 185.314060][ T8841] should_fail_ex+0x50a/0x650 [ 185.314070][ T8841] ? fs_reclaim_acquire+0xae/0x150 [ 185.314085][ T8841] ? vhost_task_create+0xd0/0x2b0 [ 185.314094][ T8841] should_failslab+0xc2/0x120 [ 185.314105][ T8841] __kmalloc_cache_noprof+0x68/0x420 [ 185.314113][ T8841] ? trace_contention_end+0xee/0x140 [ 185.314126][ T8841] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 185.314139][ T8841] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 185.314153][ T8841] vhost_task_create+0xd0/0x2b0 [ 185.314162][ T8841] ? __pfx_vhost_task_create+0x10/0x10 [ 185.314173][ T8841] ? __pfx_vhost_task_fn+0x10/0x10 [ 185.314186][ T8841] kvm_mmu_post_init_vm+0x273/0x380 [ 185.314198][ T8841] kvm_arch_vcpu_ioctl_run+0x66/0x17f0 [ 185.314207][ T8841] ? lock_acquire+0x2f/0xb0 [ 185.314216][ T8841] ? kvm_vcpu_ioctl+0x14be/0x16b0 [ 185.314228][ T8841] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 185.314239][ T8841] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 185.314249][ T8841] ? tomoyo_path_number_perm+0x190/0x5b0 [ 185.314264][ T8841] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 185.314276][ T8841] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 185.314289][ T8841] ? do_vfs_ioctl+0x513/0x1950 [ 185.314301][ T8841] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 185.314320][ T8841] ? __pfx_lock_release+0x10/0x10 [ 185.314329][ T8841] ? trace_lock_acquire+0x14e/0x1f0 [ 185.314338][ T8841] kvm_vcpu_compat_ioctl+0x210/0x3d0 [ 185.314348][ T8841] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 185.314359][ T8841] ? __fget_files+0x206/0x3a0 [ 185.314370][ T8841] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 185.314380][ T8841] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 185.314393][ T8841] __do_fast_syscall_32+0x73/0x120 [ 185.314407][ T8841] do_fast_syscall_32+0x32/0x80 [ 185.314419][ T8841] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 185.314432][ T8841] RIP: 0023:0xf747e579 [ 185.314439][ T8841] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 185.314448][ T8841] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 185.314456][ T8841] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 185.314461][ T8841] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 185.314466][ T8841] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.314471][ T8841] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 185.314475][ T8841] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 185.314486][ T8841] [ 185.413896][ T6012] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 185.488871][ T8846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.576778][ T39] audit: type=1326 audit(2000000012.269:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.2.805" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x0 [ 185.585381][ T6012] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 185.588208][ T6012] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 185.591008][ T6012] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 185.594102][ T6012] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.598743][ T6012] usb 5-1: config 0 descriptor?? [ 185.634663][ T8858] netlink: 40 bytes leftover after parsing attributes in process `syz.3.806'. [ 185.833900][ T6012] ath6kl: Failed to submit usb control message: -71 [ 185.836497][ T6012] ath6kl: unable to send the bmi data to the device: -71 [ 185.844037][ T6012] ath6kl: Unable to send get target info: -71 [ 185.850342][ T6012] ath6kl: Failed to init ath6kl core: -71 [ 185.856089][ T6012] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 185.865946][ T6012] usb 5-1: USB disconnect, device number 18 [ 185.878919][ T8870] virtio-fs: tag not found [ 185.960247][ T8875] vivid-000: ================= START STATUS ================= [ 185.962690][ T8875] vivid-000: Test Pattern: 75% Colorbar [ 185.966453][ T8875] vivid-000: Fill Percentage of Frame: 100 [ 185.968243][ T8875] vivid-000: Horizontal Movement: No Movement [ 185.970027][ T8875] vivid-000: Vertical Movement: No Movement [ 185.971780][ T8875] vivid-000: OSD Text Mode: All [ 185.973279][ T8875] vivid-000: Show Border: false [ 185.975084][ T8875] vivid-000: Show Square: false [ 185.976642][ T8875] vivid-000: Sensor Flipped Horizontally: false [ 185.978490][ T8875] vivid-000: Sensor Flipped Vertically: false [ 185.980299][ T8875] vivid-000: Insert SAV Code in Image: false [ 185.982020][ T8875] vivid-000: Insert EAV Code in Image: false [ 185.984060][ T8875] vivid-000: Insert Video Guard Band: false [ 185.985856][ T8875] vivid-000: Reduced Framerate: false [ 185.987538][ T8875] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 185.989739][ T8875] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 185.992040][ T8875] vivid-000: Enable Capture Cropping: true [ 185.993909][ T8875] vivid-000: Enable Capture Composing: true [ 185.995750][ T8875] vivid-000: Enable Capture Scaler: true [ 185.997849][ T8875] vivid-000: Timestamp Source: Start of Exposure [ 186.000260][ T8875] vivid-000: Colorspace: sRGB [ 186.002150][ T8875] vivid-000: Transfer Function: Default [ 186.004906][ T8875] vivid-000: Y'CbCr Encoding: Default [ 186.006954][ T8875] vivid-000: HSV Encoding: Hue 0-179 [ 186.008965][ T8875] vivid-000: Quantization: Default [ 186.010824][ T8875] vivid-000: Apply Alpha To Red Only: false [ 186.012986][ T8875] vivid-000: Standard Aspect Ratio: 4x3 [ 186.015300][ T8875] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 186.018100][ T8875] vivid-000: DV Timings: 640x480p59 inactive [ 186.020361][ T8875] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 186.023072][ T8875] vivid-000: Maximum EDID Blocks: 2 [ 186.025139][ T8875] vivid-000: Limited RGB Range (16-235): false [ 186.029100][ T8875] vivid-000: Rx RGB Quantization Range: Automatic [ 186.031445][ T8875] vivid-000: Power Present: 0x00000001 [ 186.031738][ T8876] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.033496][ T8875] tpg source WxH: 640x360 (Y'CbCr) [ 186.033527][ T8875] tpg field: 1 [ 186.033534][ T8875] tpg crop: 640x360@0x0 [ 186.040777][ T8875] tpg compose: 640x360@0x0 [ 186.042407][ T8875] tpg colorspace: 8 [ 186.045606][ T8875] tpg transfer function: 0/0 [ 186.047200][ T8875] tpg Y'CbCr encoding: 0/0 [ 186.048572][ T8875] tpg quantization: 0/0 [ 186.049847][ T8875] tpg RGB range: 0/2 [ 186.051068][ T8875] vivid-000: ================== END STATUS ================== [ 186.233815][ T6012] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 186.305769][ T8881] 9pnet_virtio: no channels available for device 127.0.0.1 [ 186.423834][ T6012] usb 5-1: Using ep0 maxpacket: 32 [ 186.429277][ T6012] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 186.431808][ T6012] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 186.434427][ T6012] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 186.437033][ T6012] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 186.439818][ T6012] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 186.442904][ T6012] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 186.446951][ T6012] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 186.449553][ T6012] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.453273][ T6012] usb 5-1: config 0 descriptor?? [ 186.492835][ T8886] netlink: 40 bytes leftover after parsing attributes in process `syz.2.813'. [ 186.664598][ T6012] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 186.668502][ T6012] usb 5-1: USB disconnect, device number 19 [ 186.671642][ T6012] usblp0: removed [ 186.735148][ T8889] ubi0: detaching mtd0 [ 186.745782][ T8889] ubi0: mtd0 is detached [ 187.143892][ T5995] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 187.312866][ T8904] FAULT_INJECTION: forcing a failure. [ 187.312866][ T8904] name failslab, interval 1, probability 0, space 0, times 0 [ 187.316739][ T8904] CPU: 1 UID: 0 PID: 8904 Comm: syz.2.818 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 187.316763][ T8904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 187.316769][ T8904] Call Trace: [ 187.316772][ T8904] [ 187.316775][ T8904] dump_stack_lvl+0x16c/0x1f0 [ 187.316803][ T8904] should_fail_ex+0x50a/0x650 [ 187.316814][ T8904] ? fs_reclaim_acquire+0xae/0x150 [ 187.316829][ T8904] ? alloc_mnt_ns+0xd2/0x520 [ 187.316841][ T8904] should_failslab+0xc2/0x120 [ 187.316852][ T8904] __kmalloc_cache_noprof+0x68/0x420 [ 187.316865][ T8904] alloc_mnt_ns+0xd2/0x520 [ 187.316878][ T8904] __do_sys_fsmount+0x562/0x8b0 [ 187.316888][ T8904] ? __pfx___do_sys_fsmount+0x10/0x10 [ 187.316897][ T8904] ? ksys_write+0x1ba/0x250 [ 187.316909][ T8904] __do_fast_syscall_32+0x73/0x120 [ 187.316923][ T8904] do_fast_syscall_32+0x32/0x80 [ 187.316935][ T8904] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.316949][ T8904] RIP: 0023:0xf747e579 [ 187.316957][ T8904] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 187.316965][ T8904] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 00000000000001b0 [ 187.316973][ T8904] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 187.316979][ T8904] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.316983][ T8904] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.316988][ T8904] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 187.316993][ T8904] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.317003][ T8904] [ 187.371236][ T5995] usb 5-1: Using ep0 maxpacket: 32 [ 187.373924][ T5995] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 187.376337][ T5995] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 187.378796][ T5995] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 187.381335][ T5995] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 187.385300][ T5995] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 187.385313][ T5995] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 187.385334][ T5995] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 187.385344][ T5995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.386462][ T5995] usb 5-1: config 0 descriptor?? [ 187.602531][ T5995] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 187.970912][ T39] audit: type=1326 audit(2000000014.659:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8921 comm="syz.2.823" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x0 [ 187.993816][ T5952] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 187.997368][ T8923] FAULT_INJECTION: forcing a failure. [ 187.997368][ T8923] name failslab, interval 1, probability 0, space 0, times 0 [ 188.001292][ T8923] CPU: 0 UID: 0 PID: 8923 Comm: syz.3.824 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 188.001308][ T8923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 188.001314][ T8923] Call Trace: [ 188.001318][ T8923] [ 188.001322][ T8923] dump_stack_lvl+0x16c/0x1f0 [ 188.001337][ T8923] should_fail_ex+0x50a/0x650 [ 188.001348][ T8923] ? fs_reclaim_acquire+0xae/0x150 [ 188.001362][ T8923] should_failslab+0xc2/0x120 [ 188.001373][ T8923] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 188.001384][ T8923] ? getname_flags.part.0+0x4c/0x550 [ 188.001397][ T8923] getname_flags.part.0+0x4c/0x550 [ 188.001409][ T8923] getname_flags+0x93/0xf0 [ 188.001418][ T8923] __ia32_sys_rename+0x64/0xa0 [ 188.001428][ T8923] __do_fast_syscall_32+0x73/0x120 [ 188.001441][ T8923] do_fast_syscall_32+0x32/0x80 [ 188.001453][ T8923] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.001467][ T8923] RIP: 0023:0xf7f21579 [ 188.001475][ T8923] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 188.001483][ T8923] RSP: 002b:00000000f502555c EFLAGS: 00000296 ORIG_RAX: 0000000000000026 [ 188.001492][ T8923] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 0000000020000140 [ 188.001497][ T8923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.001502][ T8923] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.001506][ T8923] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 188.001512][ T8923] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.001522][ T8923] [ 188.060833][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.155071][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.156359][ T58] usb 5-1: USB disconnect, device number 20 [ 188.158123][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.161252][ T58] usblp0: removed [ 188.162495][ T5952] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 188.168702][ T5952] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.171316][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.177523][ T5952] usb 6-1: config 0 descriptor?? [ 188.586006][ T5952] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 188.588535][ T5952] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 188.592367][ T5952] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 188.926006][ T8937] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 188.929548][ T8937] netlink: 'syz.3.829': attribute type 10 has an invalid length. [ 188.978057][ T8942] FAULT_INJECTION: forcing a failure. [ 188.978057][ T8942] name failslab, interval 1, probability 0, space 0, times 0 [ 188.981776][ T8942] CPU: 1 UID: 0 PID: 8942 Comm: syz.0.825 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 188.981798][ T8942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 188.981804][ T8942] Call Trace: [ 188.981807][ T8942] [ 188.981811][ T8942] dump_stack_lvl+0x16c/0x1f0 [ 188.981828][ T8942] should_fail_ex+0x50a/0x650 [ 188.981838][ T8942] ? fs_reclaim_acquire+0xae/0x150 [ 188.981853][ T8942] should_failslab+0xc2/0x120 [ 188.981864][ T8942] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 188.981875][ T8942] ? __alloc_skb+0x2b3/0x380 [ 188.981890][ T8942] __alloc_skb+0x2b3/0x380 [ 188.981902][ T8942] ? __pfx___alloc_skb+0x10/0x10 [ 188.981915][ T8942] ? lock_acquire+0x2f/0xb0 [ 188.981928][ T8942] netlink_alloc_large_skb+0x69/0x130 [ 188.981941][ T8942] netlink_sendmsg+0x689/0xd70 [ 188.981954][ T8942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.981969][ T8942] ____sys_sendmsg+0x9ae/0xb40 [ 188.981981][ T8942] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.981990][ T8942] ? get_compat_msghdr+0x11b/0x170 [ 188.982006][ T8942] ___sys_sendmsg+0x135/0x1e0 [ 188.982020][ T8942] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.982038][ T8942] ? __pfx_lock_release+0x10/0x10 [ 188.982047][ T8942] ? trace_lock_acquire+0x14e/0x1f0 [ 188.982059][ T8942] ? __fget_files+0x206/0x3a0 [ 188.982071][ T8942] __sys_sendmsg+0x16e/0x220 [ 188.982079][ T8942] ? __pfx___sys_sendmsg+0x10/0x10 [ 188.982094][ T8942] __do_fast_syscall_32+0x73/0x120 [ 188.982107][ T8942] do_fast_syscall_32+0x32/0x80 [ 188.982119][ T8942] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.982133][ T8942] RIP: 0023:0xf7f0f579 [ 188.982141][ T8942] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 188.982149][ T8942] RSP: 002b:00000000f4ff455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 188.982157][ T8942] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000180 [ 188.982163][ T8942] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.982167][ T8942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.982172][ T8942] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 188.982177][ T8942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.982187][ T8942] [ 189.005255][ T8944] netlink: 36 bytes leftover after parsing attributes in process `syz.3.829'. [ 189.083895][ T5995] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 189.245997][ T5995] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.249265][ T5995] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.252128][ T5995] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 189.256491][ T5995] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 189.259065][ T5995] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.262688][ T5995] usb 7-1: config 0 descriptor?? [ 189.669144][ T5995] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 189.671713][ T5995] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 189.676804][ T5995] plantronics 0003:047F:FFFF.000D: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 189.996520][ T6012] usb 7-1: USB disconnect, device number 13 [ 190.184883][ T8969] trusted_key: syz.0.833 sent an empty control message without MSG_MORE. [ 190.459905][ T8973] FAULT_INJECTION: forcing a failure. [ 190.459905][ T8973] name failslab, interval 1, probability 0, space 0, times 0 [ 190.463628][ T8973] CPU: 2 UID: 0 PID: 8973 Comm: syz.1.834 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 190.463641][ T8973] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 190.463646][ T8973] Call Trace: [ 190.463649][ T8973] [ 190.463653][ T8973] dump_stack_lvl+0x16c/0x1f0 [ 190.463668][ T8973] should_fail_ex+0x50a/0x650 [ 190.463679][ T8973] ? fs_reclaim_acquire+0xae/0x150 [ 190.463693][ T8973] should_failslab+0xc2/0x120 [ 190.463716][ T8973] __kmalloc_noprof+0xce/0x4f0 [ 190.463727][ T8973] ? alloc_pipe_info+0x1ec/0x590 [ 190.463738][ T8973] alloc_pipe_info+0x1ec/0x590 [ 190.463749][ T8973] splice_direct_to_actor+0x793/0xa40 [ 190.463767][ T8973] ? get_pid_task+0xfc/0x250 [ 190.463775][ T8973] ? __pfx_direct_splice_actor+0x10/0x10 [ 190.463789][ T8973] ? __pfx_aa_file_perm+0x10/0x10 [ 190.463799][ T8973] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 190.463813][ T8973] ? __fget_files+0x1fc/0x3a0 [ 190.463824][ T8973] do_splice_direct+0x178/0x250 [ 190.463836][ T8973] ? __pfx_do_splice_direct+0x10/0x10 [ 190.463849][ T8973] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 190.463864][ T8973] ? rw_verify_area+0xcf/0x680 [ 190.463878][ T8973] do_sendfile+0xafb/0xe40 [ 190.463892][ T8973] ? __pfx_do_sendfile+0x10/0x10 [ 190.463905][ T8973] ? __fget_files+0x206/0x3a0 [ 190.463917][ T8973] __ia32_compat_sys_sendfile+0x1e7/0x230 [ 190.463927][ T8973] ? ksys_write+0x1ba/0x250 [ 190.463935][ T8973] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 190.463949][ T8973] __do_fast_syscall_32+0x73/0x120 [ 190.463963][ T8973] do_fast_syscall_32+0x32/0x80 [ 190.463975][ T8973] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 190.463989][ T8973] RIP: 0023:0xf73de579 [ 190.463996][ T8973] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 190.464004][ T8973] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 190.464013][ T8973] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000005 [ 190.464018][ T8973] RDX: 0000000000000000 RSI: 000000000000002f RDI: 0000000000000000 [ 190.464023][ T8973] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 190.464027][ T8973] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 190.464032][ T8973] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 190.464042][ T8973] [ 190.715708][ T8975] overlayfs: missing 'lowerdir' [ 190.955050][ T6377] usb 6-1: USB disconnect, device number 11 [ 191.213850][ T58] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 191.363881][ T58] usb 7-1: Using ep0 maxpacket: 16 [ 191.367090][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 191.371068][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34304, setting to 1024 [ 191.375226][ T58] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 191.378488][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.385999][ T58] usb 7-1: config 0 descriptor?? [ 191.388435][ T8986] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 191.418767][ T8998] netlink: 48 bytes leftover after parsing attributes in process `syz.3.843'. [ 191.421308][ T8998] bridge_slave_0: entered allmulticast mode [ 191.504800][ T9002] netlink: 16 bytes leftover after parsing attributes in process `syz.3.844'. [ 191.775826][ T9009] FAULT_INJECTION: forcing a failure. [ 191.775826][ T9009] name failslab, interval 1, probability 0, space 0, times 0 [ 191.779673][ T9009] CPU: 2 UID: 0 PID: 9009 Comm: syz.1.846 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 191.779686][ T9009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 191.779691][ T9009] Call Trace: [ 191.779695][ T9009] [ 191.779699][ T9009] dump_stack_lvl+0x16c/0x1f0 [ 191.779715][ T9009] should_fail_ex+0x50a/0x650 [ 191.779725][ T9009] ? fs_reclaim_acquire+0xae/0x150 [ 191.779740][ T9009] should_failslab+0xc2/0x120 [ 191.779751][ T9009] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 191.779761][ T9009] ? generic_permission+0xad/0x7d0 [ 191.779784][ T9009] ? alloc_empty_file+0x73/0x1e0 [ 191.779798][ T9009] alloc_empty_file+0x73/0x1e0 [ 191.779810][ T9009] dentry_open+0x46/0xd0 [ 191.779821][ T9009] do_mq_open+0x4a8/0x880 [ 191.779834][ T9009] ? __pfx_do_mq_open+0x10/0x10 [ 191.779848][ T9009] __ia32_compat_sys_mq_open+0x158/0x290 [ 191.779862][ T9009] ? __pfx___ia32_compat_sys_mq_open+0x10/0x10 [ 191.779876][ T9009] ? native_tss_update_io_bitmap+0x2ec/0x610 [ 191.779895][ T9009] __do_fast_syscall_32+0x73/0x120 [ 191.779909][ T9009] do_fast_syscall_32+0x32/0x80 [ 191.779921][ T9009] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 191.779935][ T9009] RIP: 0023:0xf73de579 [ 191.779943][ T9009] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 191.779951][ T9009] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000115 [ 191.779959][ T9009] RAX: ffffffffffffffda RBX: 0000000020000b40 RCX: 0000000000000001 [ 191.779965][ T9009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.779969][ T9009] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 191.779974][ T9009] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 191.779979][ T9009] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 191.779989][ T9009] [ 191.840423][ T58] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:05AC:8241.000E/input/input22 [ 191.856722][ T9011] fuse: Unknown parameter 'grou00000000000000000000' [ 191.906475][ T58] appleir 0003:05AC:8241.000E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 192.040732][ T8986] netlink: 16 bytes leftover after parsing attributes in process `syz.2.839'. [ 192.097018][ T9015] ubi0: attaching mtd0 [ 192.098686][ T9015] ubi0: scanning is finished [ 192.100164][ T9015] ================================================================== [ 192.102572][ T9015] BUG: KASAN: slab-use-after-free in notifier_chain_register+0x3ac/0x420 [ 192.104928][ T9015] Read of size 4 at addr ffff88806961d8d8 by task syz.2.839/9015 [ 192.108284][ T9015] [ 192.109052][ T9015] CPU: 2 UID: 0 PID: 9015 Comm: syz.2.839 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 192.109065][ T9015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 192.109071][ T9015] Call Trace: [ 192.109075][ T9015] [ 192.109079][ T9015] dump_stack_lvl+0x116/0x1f0 [ 192.109095][ T9015] print_report+0xc3/0x620 [ 192.109107][ T9015] ? __virt_addr_valid+0x5e/0x590 [ 192.109116][ T9015] ? __phys_addr+0xc6/0x150 [ 192.109125][ T9015] kasan_report+0xd9/0x110 [ 192.109136][ T9015] ? notifier_chain_register+0x3ac/0x420 [ 192.109152][ T9015] ? notifier_chain_register+0x3ac/0x420 [ 192.109167][ T9015] notifier_chain_register+0x3ac/0x420 [ 192.109181][ T9015] blocking_notifier_chain_register+0x76/0xd0 [ 192.109197][ T9015] ubi_wl_init+0x1018/0x17b0 [ 192.109212][ T9015] ubi_attach+0x1cdd/0x4dc0 [ 192.109226][ T9015] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 192.109236][ T9015] ? lockdep_init_map_type+0x16d/0x7d0 [ 192.109254][ T9015] ? __pfx_ubi_attach+0x10/0x10 [ 192.109267][ T9015] ? ubi_attach_mtd_dev+0x1543/0x3590 [ 192.109284][ T9015] ubi_attach_mtd_dev+0x158f/0x3590 [ 192.109302][ T9015] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 192.109317][ T9015] ? __pfx_get_mtd_device+0x10/0x10 [ 192.109330][ T9015] ctrl_cdev_ioctl+0x339/0x3d0 [ 192.109346][ T9015] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 192.109362][ T9015] ? __fget_files+0x206/0x3a0 [ 192.109372][ T9015] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 192.109385][ T9015] compat_ptr_ioctl+0x6b/0xa0 [ 192.109397][ T9015] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 192.109409][ T9015] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 192.109422][ T9015] __do_fast_syscall_32+0x73/0x120 [ 192.109435][ T9015] do_fast_syscall_32+0x32/0x80 [ 192.109448][ T9015] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.109463][ T9015] RIP: 0023:0xf747e579 [ 192.109470][ T9015] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 192.109479][ T9015] RSP: 002b:00000000f50e555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 192.109488][ T9015] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 0000000040186f40 [ 192.109494][ T9015] RDX: 0000000020000502 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.109501][ T9015] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.109507][ T9015] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 192.109512][ T9015] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.109521][ T9015] [ 192.109524][ T9015] [ 192.181281][ T9015] Allocated by task 5960: [ 192.182675][ T9015] kasan_save_stack+0x33/0x60 [ 192.184093][ T9015] kasan_save_track+0x14/0x30 [ 192.185475][ T9015] __kasan_slab_alloc+0x89/0x90 [ 192.186870][ T9015] kmem_cache_alloc_noprof+0x1c8/0x3b0 [ 192.188432][ T9015] getname_flags.part.0+0x4c/0x550 [ 192.189971][ T9015] getname+0x8d/0xe0 [ 192.191108][ T9015] vfs_fstatat+0xdf/0xf0 [ 192.192332][ T9015] __do_sys_newfstatat+0xa2/0x130 [ 192.193819][ T9015] do_syscall_64+0xcd/0x250 [ 192.195124][ T9015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.196841][ T9015] [ 192.197561][ T9015] Freed by task 5960: [ 192.198742][ T9015] kasan_save_stack+0x33/0x60 [ 192.200124][ T9015] kasan_save_track+0x14/0x30 [ 192.201498][ T9015] kasan_save_free_info+0x3b/0x60 [ 192.202995][ T9015] __kasan_slab_free+0x51/0x70 [ 192.204406][ T9015] kmem_cache_free+0x2e2/0x4d0 [ 192.205878][ T9015] putname+0x13c/0x180 [ 192.207131][ T9015] vfs_fstatat+0x85/0xf0 [ 192.208341][ T9015] __do_sys_newfstatat+0xa2/0x130 [ 192.209761][ T9015] do_syscall_64+0xcd/0x250 [ 192.211108][ T9015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.212768][ T9015] [ 192.213479][ T9015] The buggy address belongs to the object at ffff88806961d500 [ 192.213479][ T9015] which belongs to the cache names_cache of size 4096 [ 192.217476][ T9015] The buggy address is located 984 bytes inside of [ 192.217476][ T9015] freed 4096-byte region [ffff88806961d500, ffff88806961e500) [ 192.221399][ T9015] [ 192.222100][ T9015] The buggy address belongs to the physical page: [ 192.223916][ T9015] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x69618 [ 192.226324][ T9015] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 192.228619][ T9015] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 192.230815][ T9015] page_type: f5(slab) [ 192.231939][ T9015] raw: 04fff00000000040 ffff88804044f2c0 dead000000000122 0000000000000000 [ 192.234345][ T9015] raw: 0000000000000000 0000000000070007 00000000f5000000 0000000000000000 [ 192.236695][ T9015] head: 04fff00000000040 ffff88804044f2c0 dead000000000122 0000000000000000 [ 192.239188][ T9015] head: 0000000000000000 0000000000070007 00000000f5000000 0000000000000000 [ 192.241515][ T9015] head: 04fff00000000003 ffffea0001a58601 ffffffffffffffff 0000000000000000 [ 192.244027][ T9015] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 192.246422][ T9015] page dumped because: kasan: bad access detected [ 192.248163][ T9015] page_owner tracks the page as allocated [ 192.249723][ T9015] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5960, tgid 5960 (udevd), ts 191911330724, free_ts 191897040419 [ 192.255426][ T9015] post_alloc_hook+0x181/0x1b0 [ 192.256752][ T9015] get_page_from_freelist+0xfce/0x2f80 [ 192.258263][ T9015] __alloc_frozen_pages_noprof+0x221/0x2470 [ 192.259968][ T9015] alloc_pages_mpol+0x1fc/0x540 [ 192.261307][ T9015] new_slab+0x23d/0x330 [ 192.262574][ T9015] ___slab_alloc+0xbfa/0x1600 [ 192.263982][ T9015] __slab_alloc.constprop.0+0x56/0xb0 [ 192.265512][ T9015] kmem_cache_alloc_noprof+0xeb/0x3b0 [ 192.267040][ T9015] getname_flags.part.0+0x4c/0x550 [ 192.268489][ T9015] getname+0x8d/0xe0 [ 192.269608][ T9015] vfs_fstatat+0xdf/0xf0 [ 192.270857][ T9015] __do_sys_newfstatat+0xa2/0x130 [ 192.272472][ T9015] do_syscall_64+0xcd/0x250 [ 192.273823][ T9015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.275503][ T9015] page last free pid 5931 tgid 5931 stack trace: [ 192.277316][ T9015] free_frozen_pages+0x6db/0xfb0 [ 192.278720][ T9015] qlist_free_all+0x4e/0x120 [ 192.280095][ T9015] kasan_quarantine_reduce+0x195/0x1e0 [ 192.281618][ T9015] __kasan_slab_alloc+0x69/0x90 [ 192.283030][ T9015] kmem_cache_alloc_node_noprof+0x1ca/0x3b0 [ 192.284762][ T9015] __alloc_skb+0x2b3/0x380 [ 192.286004][ T9015] tcp_stream_alloc_skb+0x34/0x570 [ 192.287433][ T9015] tcp_sendmsg_locked+0xf13/0x37c0 [ 192.288868][ T9015] tcp_sendmsg+0x2e/0x50 [ 192.290054][ T9015] inet_sendmsg+0xb9/0x140 [ 192.291345][ T9015] sock_write_iter+0x4ac/0x5b0 [ 192.292909][ T9015] vfs_write+0x5ae/0x1150 [ 192.294232][ T9015] ksys_write+0x207/0x250 [ 192.295436][ T9015] do_syscall_64+0xcd/0x250 [ 192.296686][ T9015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.298405][ T9015] [ 192.299113][ T9015] Memory state around the buggy address: [ 192.300632][ T9015] ffff88806961d780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 192.302931][ T9015] ffff88806961d800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 192.305114][ T9015] >ffff88806961d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 192.307351][ T9015] ^ [ 192.309252][ T9015] ffff88806961d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 192.311449][ T9015] ffff88806961d980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 192.313846][ T9015] ================================================================== [ 192.318958][ T9015] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 192.320979][ T9015] CPU: 2 UID: 0 PID: 9015 Comm: syz.2.839 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 [ 192.323892][ T9015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 192.326937][ T9015] Call Trace: [ 192.327905][ T9015] [ 192.328781][ T9015] dump_stack_lvl+0x3d/0x1f0 [ 192.330237][ T9015] panic+0x71d/0x800 [ 192.331408][ T9015] ? __pfx_panic+0x10/0x10 [ 192.332877][ T9015] ? preempt_schedule_thunk+0x1a/0x30 [ 192.334484][ T9015] ? preempt_schedule_common+0x44/0xc0 [ 192.336194][ T9015] check_panic_on_warn+0xab/0xb0 [ 192.337631][ T9015] end_report+0x117/0x180 [ 192.338898][ T9015] kasan_report+0xe9/0x110 [ 192.340174][ T9015] ? notifier_chain_register+0x3ac/0x420 [ 192.341851][ T9015] ? notifier_chain_register+0x3ac/0x420 [ 192.343466][ T9015] notifier_chain_register+0x3ac/0x420 [ 192.345045][ T9015] blocking_notifier_chain_register+0x76/0xd0 [ 192.346811][ T9015] ubi_wl_init+0x1018/0x17b0 [ 192.348113][ T9015] ubi_attach+0x1cdd/0x4dc0 [ 192.349413][ T9015] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 192.351172][ T9015] ? lockdep_init_map_type+0x16d/0x7d0 [ 192.352882][ T9015] ? __pfx_ubi_attach+0x10/0x10 [ 192.354300][ T9015] ? ubi_attach_mtd_dev+0x1543/0x3590 [ 192.355844][ T9015] ubi_attach_mtd_dev+0x158f/0x3590 [ 192.357326][ T9015] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 192.358994][ T9015] ? __pfx_get_mtd_device+0x10/0x10 [ 192.360467][ T9015] ctrl_cdev_ioctl+0x339/0x3d0 [ 192.361816][ T9015] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 192.363363][ T9015] ? __fget_files+0x206/0x3a0 [ 192.364797][ T9015] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 192.366270][ T9015] compat_ptr_ioctl+0x6b/0xa0 [ 192.367609][ T9015] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 192.369099][ T9015] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 192.370603][ T9015] __do_fast_syscall_32+0x73/0x120 [ 192.372125][ T9015] do_fast_syscall_32+0x32/0x80 [ 192.373667][ T9015] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.375595][ T9015] RIP: 0023:0xf747e579 [ 192.376746][ T9015] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 192.382049][ T9015] RSP: 002b:00000000f50e555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 192.384504][ T9015] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 0000000040186f40 [ 192.386739][ T9015] RDX: 0000000020000502 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.388932][ T9015] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.391138][ T9015] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 192.393471][ T9015] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.395713][ T9015] [ 192.397101][ T9015] Kernel Offset: disabled [ 192.398338][ T9015] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:38:04 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=1ffff92000e27f5c RCX=ffffffff81961b49 RDX=fffffbfff20bf783 RSI=0000000000000008 RDI=ffffffff905fbc10 RBP=0000000000000000 RSP=ffffc9000713fac0 R8 =0000000000000000 R9 =fffffbfff20bf782 R10=ffffffff905fbc17 R11=0000000000000001 R12=ffff88802b428a88 R13=fffffbfff1b4cd9c R14=ffffffff8e0a8e80 R15=dffffc0000000000 RIP=ffffffff819eee15 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020b36000 CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000007ffff RBX=000000000007044f RCX=ffffc90027171000 RDX=0000000000080000 RSI=ffffffff822729ca RDI=0000000000000007 RBP=ffff88803fffa700 RSP=ffffc900076eee98 R8 =0000000000000007 R9 =000000000007ffff R10=000000000000000e R11=0000000000000001 R12=ffff88803fffa540 R13=0000000000000000 R14=0000000000000000 R15=ffffea0001c113c0 RIP=ffffffff81b8db66 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c358305 CR3=0000000067faa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853801f5 RDI=ffffffff9aaceea0 RBP=ffffffff9aacee60 RSP=ffffc90007b0f488 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000032 R14=ffffffff9aacee60 R15=0000000000000000 RIP=ffffffff8538021f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7406188 CR3=000000007130a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000001f7011641 00000001db710641 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f116c36b00000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a4207ecf76fc316c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2ed2586dd86c8612 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000325843 RBX=0000000000000003 RCX=ffffffff8b45ee39 RDX=0000000000000000 RSI=ffffffff8b6ce540 RDI=ffffffff8bd2c0c0 RBP=ffffed1003ad5488 RSP=ffffc9000049fe08 R8 =0000000000000001 R9 =ffffed10056e6f7d R10=ffff88802b737beb R11=0000000000000000 R12=0000000000000003 R13=ffff88801d6aa440 R14=ffffffff905fbc10 R15=0000000000000000 RIP=ffffffff8b46021f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000200013c0 CR3=000000004d632000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000