last executing test programs: 8.880635019s ago: executing program 0 (id=931): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f00000001c0), 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 4.361319686s ago: executing program 0 (id=942): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000009780)={0x2020}, 0x2020) r2 = timerfd_create(0x5, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/85, 0x55}, {&(0x7f0000000000)=""/21, 0x15}, {&(0x7f0000000140)=""/113, 0x71}], 0x3) (async) r3 = socket(0x10, 0x3, 0x0) r4 = getpid() rt_tgsigqueueinfo(r4, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffa}) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newtaction={0x44c, 0x30, 0x2d, 0x0, 0x0, {}, [{0x438, 0x1, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x7e1d, 0x3, 0xf, 0x40, 0x6, 0xffffff80, 0x0, 0xb, 0x1, 0x313, 0x5, 0x4, 0x74, 0x7ff, 0x3, 0x7fff, 0x2, 0x7, 0x9, 0x480, 0x7000000, 0x10, 0xd, 0x80, 0x7fffffff, 0x5, 0x2, 0x7f, 0x100, 0xfa, 0x456, 0x6, 0x20, 0x6, 0x1, 0x5, 0x7, 0xfffffff8, 0x1, 0x4, 0x6, 0x200, 0xbaed, 0x2, 0x2, 0x27, 0xcda2, 0x3, 0x5, 0x7f, 0x0, 0x6, 0x7, 0x0, 0x6, 0x8, 0x10000, 0x0, 0x77c5, 0x7, 0x71, 0xf, 0x7, 0x401, 0x3ff, 0x80000001, 0xebc, 0x7, 0x988, 0x0, 0x56e, 0x5, 0x8, 0x3, 0x8, 0x80000000, 0x7, 0xc, 0x80000001, 0x5, 0x7, 0x0, 0x5, 0xfffffff7, 0x1, 0x4, 0x7, 0x1, 0x7, 0x6, 0xff, 0x4, 0x8000, 0x5f, 0x1, 0x7, 0x5, 0x5, 0x400, 0x8, 0x36, 0x7, 0x2, 0x2, 0x3, 0x0, 0x2, 0x1, 0x8, 0x1f3f, 0x91, 0x9, 0xc1a6, 0x3, 0x5, 0x7, 0x4, 0x760, 0xc920, 0x200, 0xd7, 0xffffffff, 0x4, 0x40, 0x80000001, 0xd, 0xffffffff, 0x142c, 0x0, 0xfee, 0x2, 0x2, 0x7, 0xb14, 0x8, 0x4, 0x7, 0x200, 0xe, 0x4, 0x5, 0x5, 0x9, 0x0, 0x0, 0xff, 0x0, 0x8, 0x7fffffff, 0xb1, 0x3, 0x2, 0x6bd008eb, 0x7, 0x8, 0x7fffffff, 0x1, 0x7, 0x9, 0x1, 0x0, 0xc4a, 0x7c000000, 0x0, 0x25, 0x6, 0x40000000, 0x4, 0x8, 0x80, 0x7, 0x200, 0x7, 0x5, 0x4e, 0x1, 0x0, 0x10000, 0x8, 0x6, 0x1, 0x6, 0x8, 0x3, 0xff, 0xc, 0xc900, 0x2, 0x1, 0x5, 0xc18, 0x2, 0x7a00000, 0x80000000, 0x0, 0x7, 0x7, 0x7, 0x6, 0xa703, 0x400, 0x1, 0x3ff, 0x7, 0x7, 0x2, 0x4, 0x4, 0x3800000, 0x1, 0x4, 0x81, 0x7fff, 0x425a831f, 0x400, 0x4c9, 0x84, 0x7, 0x0, 0xef, 0x989, 0x7, 0x2, 0x2, 0x3, 0xfff, 0xbc2, 0x0, 0x10000, 0x2, 0x3, 0x9, 0x59, 0x8, 0x30a8472d, 0x0, 0x8, 0x8, 0x3, 0x10, 0x6, 0x2, 0x7fff, 0x7, 0x7, 0x3, 0x9, 0x8, 0x2, 0xbd2b, 0x8, 0x1c00000, 0x9, 0x7fffffff, 0x4]}]]}, {0x4}, {0xc, 0xa}, {0xc}}}]}]}, 0x44c}}, 0x4000) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x6537df1d94b2e63c) (async) recvfrom$netrom(r3, &(0x7f0000000c40)=""/4096, 0x1000, 0x40000023, &(0x7f0000000040)={{0x3, @default, 0x4}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) prctl$PR_GET_TSC(0x43, &(0x7f0000000180)) (async) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r6, @ANYBLOB="00042dbd7000fcdbdf250a00000008000300", @ANYRES32=r8, @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x20000081) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x7) 4.291469967s ago: executing program 0 (id=943): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000002000000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000001980)) r1 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57bd00b1b3a660bb38d58430a051059c1c370b570890937") kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000"], 0x7c}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000006c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) unshare(0x8020000) 3.532119797s ago: executing program 3 (id=945): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = memfd_create(&(0x7f00000024c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xb2\xae\xda\xa9\xf6\x92\xaf4\xb5|W\r0{\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\x9d\xce\xb3%QF\x03\b\x9dh\xfd\x91\xea\xce\x06\a\xba`\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5I\xd7\xd3#\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\x98\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5po,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x13\xa4\xad\xd8\xf9\xd2\x95\xa8\x81\xbe\xbc\xa6\x14_o\xfb\xdaL\xcb\xda\x9a\xec\xce\xd18&\xfbG\xa1\f\xf4\xd5u\xb0xE)j\x1b\xecL\xa1\xdc\xabUiN\xdet\xc7Q\xe6\xa4\x99-\xba\x16\xe5\xba!\xbdCI#\x03', 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20051, r1, 0xce9e1000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = userfaultfd(0x801) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) close(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7, 0x0, 0x0, 0xc3}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000000c0)=r2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x694}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) fsopen(&(0x7f0000000080)='binder\x00', 0x0) 3.473531755s ago: executing program 1 (id=946): ioperm(0x6, 0x1, 0x95d) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x2000, 0x51}, 0x0) 3.401138467s ago: executing program 1 (id=947): socket$inet_udp(0x2, 0x2, 0x0) userfaultfd(0x1) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xeea4, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r4}) r5 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x567, 0x0, 0x0, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x1e1982, 0x0) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, 0x0) pwritev(r8, &(0x7f00000001c0)=[{&(0x7f00000004c0)="00214717a70700000000030600710a5e31163ceb9d04712000000005000000182ce0ab6d000041a15be2d9d13cd1cb0c238e61cfd6a5d7cd0eaa50e027db032ddbfe85e53b87eb950a450000000000000000", 0x52}], 0x1, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r9, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r10}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000000500)={0x700, 0x1, &(0x7f0000000180)=[r13], &(0x7f00000000c0)=[0x2], &(0x7f0000000580)=[r12, r11], &(0x7f0000000040)}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x9c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) r14 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r14) 3.338932653s ago: executing program 3 (id=948): r0 = syz_open_procfs$namespace(0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000001280)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f00000005c0), 0x10) recvmmsg(r4, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000940)=[{{&(0x7f0000000340)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/229, 0xe5}, {&(0x7f00000004c0)=""/133, 0x85}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}, {{&(0x7f00000006c0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000740)=""/220, 0xdc}, {&(0x7f00000001c0)=""/63, 0x3f}], 0x2, &(0x7f0000000840)=""/212, 0xd4}, 0xeb67957a}], 0x2, 0x122, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x1f, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000140)) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) close(0x3) 3.272025766s ago: executing program 0 (id=949): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001280000000000900"}) ioctl$EVIOCGBITSND(r1, 0x8000451a, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="09010100001135127c", @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x38, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0xd}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="9c1b6b41b13a"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000000) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, &(0x7f0000000240)=""/75, 0x4b) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) munlock(&(0x7f00008b2000/0x4000)=nil, 0x4000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r6, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r7, &(0x7f0000000d80)={0x2020}, 0x2020) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001540)={&(0x7f0000000380)="68c1932c06e37214e58308524378ca4b57cac665fea75f71c56c5d51e661356196255e1345fcc66957bf5a957d184aaa176b85319f1871fc08cf8fa60a680603e5de5ca06b81832eac791ad980ccd046d97a1eb06479c72f3ad4ae1e3736ba87f1d9db921d020765a4350471ef64b58504ca1322874e584eb5f2102cff3fb2d9a71ed4b590ffc50eaadf7f47bfa267bec0ca57b87af5acf1", &(0x7f0000000440)=""/21, &(0x7f0000000480)="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", &(0x7f0000001480)="b52458d430a7e4c7cae9f1977ec244f77123b6e757bddc166e5bf539ddf65cce05b56a8cf57cf6e68040e82136707d8ffb3200f9f55b79fb051d665ec4fd4c52bcac94836eb03170a37d80b2c1c4bad441de82873005255197de12f1138edd216a894531a7395982f9a37cc992a2b2a3555a834bbac0cf768ff992db0c1b805cc36a09f215cbc9177c0d936a1e424b85bc6c099d979d7484e3413932ac5aaeb5c9", 0x2, r7}, 0x38) 2.317565213s ago: executing program 3 (id=950): mremap(&(0x7f000096d000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f000077c000/0x4000)=nil) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x6, &(0x7f0000000480)=0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000006c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="010000000a00000000000100ff0200000000000000000000000000010000000000000000000000000000000000000000000000000031e800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a00"/140], 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="040027bd7000fddbd9c772a9fed0"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) 2.031328463s ago: executing program 2 (id=951): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001900)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x7461, @local, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@rthdr_2292={{0x14, 0x29, 0x39, {0x3a, 0x0, 0x0, 0x7}}}], 0x14}}], 0x2, 0x0) 2.024672469s ago: executing program 1 (id=952): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000002c0), 0x2200800, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x105c42, 0x5) creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x6, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5f5e0ff}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0xcb, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x50, r6, 0x1, 0x0, 0x0, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}}, 0x0) r7 = dup(r4) r8 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_DQEVENT(r8, 0x80785659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) write$P9_RLERRORu(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) write$binfmt_elf64(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="87497f2c773d", @ANYRESHEX=r7, @ANYBLOB=',k']) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0xc080661a, &(0x7f0000000240)={@desc={0x1, 0x0, @desc4}}) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000380)={0x5, &(0x7f0000000340)=[{0x0, 0x5, 0x9, 0x5}, {0x400, 0xf3, 0xb, 0x8001}, {0xac, 0x10, 0x55, 0x6}, {0x7, 0x1, 0x0, 0xffff0001}, {0x5, 0x6, 0xc, 0x10000}]}, 0x8) 1.932033412s ago: executing program 2 (id=953): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r2 = syz_clone(0xc0111800, &(0x7f0000000100)="a1bc9f3c41453e71ad36bd301c493cbc36ceec6fbaeb21e3794dc3acb89c5a5a31ca3a695780e8f62a839aa1cb8b3993cabceedc606a3d661678c458ec5ae26738f3c672dd1c8298427de16c7b1e3dfc67b89ca2e3ec62708d2b81d0c279e99a024dc30f1e6fa28c0b73e249ac8411df449ed7d32f0ba2a18b9c3605d06558f534ee30e0c8937ed969b5f622336d7c9f0330ae3fdb06c948469d8a7a8c329cf41648fdd592813794657854e9f207cf82d650bfc4c227eeee68", 0xb9, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000200)="312c418acf164724bfb84c834350a0ded2480bc2248165d76394d5c56f07382f44e8c467542dfeef3889fb67db58f2ff46d2d78c7ea98385969721d6c43f93154c10d66e3b985377926ced4a") syz_pidfd_open(r2, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x7) 1.858739827s ago: executing program 1 (id=954): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000440)=@nullb, &(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='exfat\x00', 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f00000000c0)={0x1, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYRES8=r3, @ANYRES64=r2, @ANYBLOB="74480940de6c589bd1e33daafb79db613d89513b5c262aef43b1002b0d3aea05a7d195b40925172f6431d4697dd2daa8ebc885d271d2d2e8d5f62de1a246ec4213d93ef003eaea9d34b26da1e34203e67baba95839787df213e98d7ad6bfcf721098e6d6bfc131135127a9b50ead0b64442ff1fd6a4286bfa1ce5da3d37e3469d0577d174dc2df640fceedacfbb145919ae3408bd85123b3789145924041b321db9c1ef45f85cebba825561f96dd45fa0b1864181ab13614ab1e68d8e401114ab61e595731920e3d1ce180589e2254292d2cf961cc667b12fa400a40b10daef2daa80292c1269bfc5ffe77fe0816f638cabcb36830ee1901ef55ecc82f0d2432e8bdc5e937f25212eb93002beaa9c2af43fc9eed1712d699ad87798ae2c5f9942769e8968869ce0da2279c7d154e560e7ca1ef0dfa8acf494e0857b54260784108e576016e6822d74a4cc82c529d2ffb297a0c904ec68bc8c69992ff69abd6fea1287cf883e56df4ec5ee7575c232288efc9b8474a2077a36a6b21fa154f6e582ccab8dd21a2018ce0bf8c0b1d3c8b0ef6e0f742c61e5dd44dd86a75ac826ce0e5096be5864c537d9b02bd3cf63c915d4966a10627cb2dcec7332c1032709e47b0db7bd09ef3aef6b0d5b929338a391e5d8bbccd13063540fe6d71f220694a34d7c84997502b7d77f385eef27984c11d26c32cb58a1931409645565365064d0f4cbdad725d61778fa2d2b4f6eb15cbe67c16d504f4c50549c87bcb5d269b18f721877739573e181f115d4c3025e1c2004f3ef6e561b249e4e5b0b2e83e895bb40eb78fa33af7878ee6dce6314508b2f6dbdc4f01d803544c896345b9cbe99fa44433baeafda7625cac04448d79440d1388f363d91eaed5b1a5ed89f5914728c95a847ec16c6250dcd53ed59fccf0f75a20b29c29b0f38ad6830ea12f52097e9ee735d1fa2cb0bb9287ba794eb7af69e78b8f61a55d033f6767297c94fbc6afa1f52f3d61c859de7ef670e93abd3ed5e377a1d9e51225b34fc50e788ca867f30a75dba2098ff26b440eec1a6da365fae518185322e873def60839172e342da59dba45b78b3b59d5d966ec64ec30aa015827b1d6c824947522ad0aaa99f8fd608205d56e06970203222a48d36a807ac545231be9439fd25013601c9efd3dd3d49ca951d1b70bfdaea9e25caebbfe35c12570c21fc09154f876e3d2a4163f693a9ab4a0c687f32a163fe08a8e30628e98e3a1e321d2fcd3410fe4258f275373d8347d708aec43edbb78d9416a9f43e755a56b4992784b3cac9fe52cf318ff4431003f97b30b91d3cad4224c3af3cc8105a819f4c51fc1b779822b19bae2fa8dae0b100788e58bcaf72cc64f80d9b71d4e9e6bad7787823ffd49ea176afe8a2c9602ad2f7ffb8713b2930f521996c83376eaea6d1d6928edc7b81c7861c7f01045e0ee84fdda6f3cf17af8c5750d6ac58aef045c4bdf5768279c0d92fc975dcff2b133a38175bcd28a25f76734de24321bbe0ec2a3810ccc4202909c3af4d3cbaf9c0d6cb2396f1d4a43984e0e1882fff1fa60d5075cd13c3d44ee39b013c14b450de31e347d2208e39b4998c98f2c0a50b7b189a5ba4cf974debaabe8b5cc7b85ba6b181c781015f3526d3055b409157328737355eb9e8cd2a0288b2aa9289f9b645cfbeccd70d3ca927bcc5e3820b13b0ddd8e988b0ee51f5438680506dc6c264adcd4dfc3c72314258770a7332707a136ff74e1a693617c9d194f441220e0e7a823e96ee4ead21cd287c0b637ef8286b6b4495930ef11e935a1b0816ba047d25d1fbc674a1ae47f4e7296c7187759f8d16f502a5bdeaea359a4755970d31967801f41be143836e71d0df6ccbad533b369520d88939a6f22503470f3dc46173c9199b1cc3274781151eeaa09de5acdb0c8b5618f9bad4e13527db07d4245279dac3f176142b5a716a3305226e1bdc2a36dbeb9e75911982b91a5f432c18d8c8d568d1f903dbd501b9f278e15683091c0a8d5555cbb4b6128546e0b2d9387ddb21c79452b60e94c35b5fdd64728dfe9c40c267cbb7e216849ae6520e29da25b4cefada3158cb6242400dfc7986894754fc72dfda7db970832f84b1697faa7003c1ea6896024944ed955df84ef88f9758552f2b561ba20967101fe7ad8b67c2182c54e6754ea03b9e60c81dca44eeda5efec52e5dc28019366ab682c79c1a6256408d9f736b526d6da69a8254e118e22b8d22e96c94053357fd13578f557e66b356099d2080fa74c0331a24d06bb10bc0226feb71af41f3b302eca5071f9ee9fae9f4db23bfed79ec90b18f2bee808d017a1088bf6b8abdc4324352de983b0af74d710402ea32c9cbe23f8d9d356f3a84a9c1830a19d0a0052ab3b6283e833df2ece15878eccd895a5c1a37d23af9279d712f280a1fd9d269124eeade9087424f7a72b5bf9de87040493472fb00ea7f213fd79535d62852a03dfabc77c64e31a2fbbe04975b7f18a5aa028a0caa0101a28af92fc75ffb166ef01e1092e172795dae24dde83d18deb29edcd5cb3f967b72e5f54e6f363d0230e1e7486e281ba14f0cbc031a8a34b15b9ed1b0f60a1c8475c647dba9ec916a273f4b9ed376ef276cbdbbc9c7ab4136f080691ecafe4d96d22e9aaf202f8219181a5e223b9a602e31a22e3660134d99f8aa2c49169e853e7701ef0770d19ad7bf86d80726392016f5136e3c6a02fee92fa511a02e8bfb66419c7e598d4c8134eecf293ebb6196d2f3ae44de56215151b5141564440ddb6e4a8e32fa5233c1aebe7227120bf69d72f25172953c356a4b4cac276148ea7cb1891b66112b50b76b296a98779f03d9b3549a01d0a911bb2a1ca2a6ec02facf5a3c204103d04c0191adfc9ab5634527dc236a1f4be5c5e4be71bedd828320d01eca2005e095da43ad79a8f0db0f95654b4a7db026972aa87f523ede50cef77f60adc1dc8670d40ab7e0d0404b30a07a1056602eddddf3318f0f85379a87531e477c9bd911e579b4a8471068169a22c055b337051ffdd05b1089e03818771a74cf2cf6d08bf8e03c8404bf2cf3e520f0eb8ef4916262d34ef88e4a092cf83f2b4ba427fcdad07f3656e642fc91059cf2bebc4b299eea87b1517808e3f9aa7c6d67056389b68d9825045491b91c83e2f7d6583f5966aa4fadbe3f700143008c739efd12da3200c6f32e8d800f060973f563fefa1f68fb6e1a734d68e835bcfe4e5e5d161d0bea79b1c054d058cf1a9638c2372d88c9f09dd55bedb8246cf06c6cb55d4292295bbfa85dd0b099bc231a631f894cd5c58e7e4a93e6be1bebdbfa14867b1202f60cbf7d58bd5ceb56271d29126c5bc663e1ffecb061e36a5ce531a21c9b4f9fe63dc909908f1d95ca7c09dc7bf5a179c14efe58774713f6335620ae333bb87574562ae29c026128a64082cbc3cbe909eb162da18812e66022fdf1b576a1c6d04b5f043d6637c9e8dca3d76697f95ff1c48611a636d74f51c79f4333c4dd56fa59be6c90d96bc63b2f941aaa9f1923a9f9d9db322dae80eadfab19116ee83736ca4845176d351777278c20a378b25b5f44350fb012d39f302d81f4ea47006d53acb58c92f9326697a3a753d1420c91f4633d4bdb66d46a34acdcf60473407a17dafdb24c93de04da20638def6f06cfe7ce6ec5fae4f9f811e2a69fcbfc3aef5e011635d973fe8f25aaffa5ad79107ce2ac07b7e989fb5438fe50e6676542bd5fa6bfe3818aad0ca8dd921d1dd586ba9b75bc12878b5f5ca028fb4c18a69bfb820f9b92abc21037eef5d8bb7be8b0fbdf1caf0eaa34cae0c1f79dcff36985987f8abf10e592686321a0d378120bd6d0a4be3e80834ceb6f54703fc22ee323c261d73e3ac9fd574f65fbfa5fa8f6fbe276e83a198d1ab9a3eea24a18d9c795f9af92ea065f36dcdb74dff0ac04a06389a9a99d873d95a74e446f66a77c47a0af363fc37b569655d03035ca74a3a68239fc3e2476de1b021660421004bad6b59658720b624020089d86c89fc4cc5cb2a9d0c21aab707c03df57dabce72cdc81e101f89551e4886508fe2b56ac03baf65a58596f20a916ece6c4d2994e040a9f3d88dd25b9783e6a5423539489a8ae82db775034854f7f32c169a93a0ec26b1818e3f7255470683bf918c3336e6ba1e371c1108de62692702c13cafffd41f70ab3f1ebdc2c575791b646e904b6d25fc54c0c517aabc14775d2c016d27584ad5b66c6d2774821026a8139c07a1c3e14849d93b0d586a211014d72bc1c9892e4af7156cd032ca59f8be24a3f2505dca5b09fd4b5b08b9e721d4cfe72d1b612a66733c4f8addaed655f901ae846cd3f7597a263bc5169b22de5b797cf88fe49810d8c93baaac54049d13d45f45cbaa3d40a5f80224d3d8ffeb0f37d31e1b133b483e96419073208a5938af6d40b506fdf37e13536f84564c8179526801040e3041849f70de60229eb8d748a6c266a8000ac83a0b618f1205ca89ef1005998fcf9189aa6750281291d741cf1cd37197dd93b0fe742bd20497a505ddbbf52ff5aa6814172e746676a2521a5c713609d666273fd6ff993b5b652bbcab497df7c1c251d24f2cc450c266e442ea06223f05b1b67f6dc82f50ec3706f0aba251c92b2ca1016ad2f437158c248f0335b67988143e08e8df5cbbd5170705de9d7ff287f524e201a93d6961df6e53eedc1eae3c1f9870be203893117d8c4b4005aaa75a063480979a1f71b57096d5ba3822f21e545637464cdc427dff9edbfef801d368249cdb9f26a28ac745cda35d36ddde651973e3d93019034d7bfe3d7fa6d8b77a8008e6e10f8b24eebca9847daf0f4b3e7753e14882b74c41d2c01edc6aa70e1414596f505ac18692138fa2f6780c515e5af92e95cc110830d2ceccbf7aeb453f60fba3cf88c94a1a8ae735e79325b56ba40f0e99ad207ff7e470be688605174a8059ffcda95b31bf410a6ef2e4911781aaef094753751848b692fbdc7da60f65b63344bfe01e76566ff6977cded938834964be1272b156a13d8ee6ccb3348b98f9c07d26a5a122304e336b736fe9ed18834ae4a81953f97ed93d9a545c0477f811d605dee694baa437269fe848a66e89a3500dbba4f28992c6846e007c02ab21694b6ca4177ea79b76bec37ff1485e9dc32d9a27fa2f5b72e8199c8a8a523f09cb8cb032640ec8daa37400eb0412acafd3fa2e21a6252647cd182301753ef4e34e4f1c1cf22e0c50dfe6947e2135514c55ba5171752e99857d23c67514931f8da799907025403292890a7e3aff30f14332de0ef73e0d20979b043a9de89734e6ac29ae7f780e431db0bcb9642bedad175448930b2e386e3789cafa7ef77e21e613339a70987b87a91ff86218afef3eecf86732b8ebb2220efc75d453720ecee2ec5d7bec86d827f9f358eb5702bd0bf1c039977dc0e1fc875c0bdeb4f166aaaf695699116c6a165f631b27a0779b0929af9143cd0d3780f2aa28d1423912d19b2ba4badfafdc0815b75688a3b7f58bc05f71344c01d254bea37b9c60fee3d054c1a62f436464913be03b0879a9388e5ea13c4bd06af7204666eeb50696ab6db2e35492c84018db96dda2d25c23685d483a869669f934ab0cefbbe48c7ff59e76e930597814fff5df522180fd53f2f939008a73c18a298dad91c6892412b7aa714b19c01d8263fbdd402081e9ad34d5ab3a8e713036c44f16dece98230b3a02c271c498eecdb4ca82c72cc1728b49dc7bdf41c96782a0ab5978ecb7dd03f52f9ee89c36ba8136cdadf5315c6779277973f1fbf729", @ANYRES8=r1], 0x8) 1.801950434s ago: executing program 2 (id=955): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0xff, 0x20000) sendmsg$kcm(r2, &(0x7f0000002880)={&(0x7f0000000200)=@llc={0x1a, 0x307, 0x4, 0x2, 0x8, 0x5, @broadcast}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000280)="d140cb3e98df78f91c18af1c529ae2f4b4828018e0155affc7294031ed245f0410e0d3d949ac95568cdcc9c896901d5abebabf24eb00fd840183e9ba1cd079f199a3343800213f968ae34da99b84db7198b88f85aaaf52c6c92873a13c6d40b550ba14148fb9b54090c196b1096bb00282480e50e149", 0x76}, {&(0x7f0000000300)="ab15ee0e5bfd193a98e7c54c589a250ce06d43743ddffdaa735fe091abd5e6455c9bdb4627fed03821ce719a789a", 0x2e}, {&(0x7f0000000340)="e480b590f8c8c927516fd013bb16bc6406e96a5f370b7cfe0110578584e70f21edc5ac61de80603cf75efb6b6f9610abcd0e78fe1e1090433cc4c1dd233a12733b67cac75bb597082025ae459beb1908894ff836f2fe39fc38f96a3c23a2083f6715e9a725c615517cc36c68ed948711e98001584ab967ebfd37efc879fdd9236bacbf78c85a48bb81644bb84472c85e687add05cef02b1d3da2f2db312bf0d89821ec1afad8cff3b5a9683cf766ce0cc75a286f621ea087eea2462e8cd84ed23d59437507abfa01e6835e4cfb3c127a75dfe86c5476a24989ca5ba6f75940e2ce68d50a291cdc661976028ffdc8275fcb3a6fdbc8e09d88f8013af8ac26eac0e12887ea4ac61f62b8ade0e5c5dbff34b657ee0aa2ac6c31c40da0cc47a11d32dfde7238a4334f770c839fda5703b494614477fe5a9e9e7578e8b21d2d4535afb0cd17cb8d21be4b28cc37367d0d44825f819c16ca994dbb8a365f843efa4003c55765f72e830645a3609270bb455df5202a8e69fdfd61a9cba75697741481ce9f7a380a0c6c65344529028afba455233219b5f5a374945c7889849e596bec905b44612b5eafea09ef797234adda88881309137c90cb199a324d88e036147f7d281af40a6417a121a0cfb7a02e53018f032a7da279178bcddb2f30f3a38819db430c7006c61331626e74ca592af8dd2a9ceb384ffcc3c0119e1a97422587ab740867bf4b4d60982d0da2b08dbf754e5e621d96c89f9b80337748669626559c95e6bfc39f0d25f57b81a656f179754c3321ee397051dfcc373c58db39ff64e321d8d68156fc0512fe560994870473a1d18af7f4159cc6428cbdc344d1f9ccb42802141295de94c19e2b5b4a1b9bfa5e47ec30b79c02ab810855fae51758ca664abacc8b6ce95e395908c712c52e85bf4fdd1778561b9cafa1f9060726c40e17918afde010aa3a7cb58126cf2089727375e0547b532997ac23025ab596d7b61af09dfcb03943a61d965e9fb67575bd2668fe2a733fc4cb039e588f97319e07766d3bc3a346fcc1d20c3227e775666ce6825521123ef7f2306e046050fb851bd0754c88053227cbb675bb06568fa9f39473cf30d62269eee887cf54d03c660e488bb7a5939d74999c67b7d59462d238d01275cf2c1715b06e7e46dd4c4d4aba571a9cf6f8638d2e45e6ad3fe7d90226c3af5c48b14a369a8e0bff900240adef3483f912e13fdbbb29fb399ea80aacf9016a80f01fb4414bc586abcb2791bcb82d3e255f685cd051228d8bf4d43d1a0c5fc88f32cbe50b88d4b141bae4400b6334701df4e30678d9e8d76e303d8533099077122613aaaaf8f607ece1aa0d1aca7539cd454baad730dc4f8394ca70dc34ab3a1a2b65ae37a550e93db4362a8af78bc5e336347fab2a0048c85b1a93d6f42aa986f1b847ba911d4b96b6c540e052fc42c6b74c70ede1fb20e77795fdd60ea3e37e600595fe4066e8c344e78ca32871bc8dc33b3b3a0b0f885687f5fe8f689d4cb635470db5ff677896e7c837eaeb14141ee5d5f32b4712dcf31037774528e4f305d546f5264d40e30045810d61ad9bcc161c93ffaacfc89cadb01ec1b5fc4d96a190db81db5cefa043a034ce5f498ee72a43902cda36c7472c01bca10608ec4e2c5ecfb93b9c895fe6662ed4a2fd2e379e1088c7eb1e872abbd542e9b3ad35bf68120a7fccba66a59ab3013751e732938b25bcf23f6c96216336fc45077911626985e24e555938324a69ab223b437f6607a5984f0d70fe58b0507a64b04a4669dc5c8d501b5accf94fd081dea1ee85b4a66602638137469f7165d74fb354c8dc96420b76079904fd7a9d0d6db3f1fe41e02f99483c1cd6c48779ba5d49c9906fe6000300073da96818edb9930506d5d9105a7c44cf880c9a9f7e5c2fa3d06d69353023cce65bb5173d430cbc92169d307c0b086dc0ddc2fbea56d42a01f5216afded3efded935698f07eed84d0fe88053b352d4f1a78c4a775d8020606305b04b6565ba5dc49b50d25794e075b5e23894525c25de88183369ecd4030fb65ad8b7f505bbf62792987babd15f0d8e8302fd14a52e63bf5b69f4343bdae305351b284aadafd3e05f342ec8ac8b8fe35b737c1d2e1b2a078e7c4261ea6c52e9a0b0e98d28ba4d8e1224013959085c8e5ba635ebf62062a03323a2a8d55b4e8316598dbba11ac5b783f32801c73f11a288e9522e2ece3a7e3e98891450deaa15e2c196d45ddd0ee8c051479bea44454d58e74a61b80ae2b078672c432808f8830af5bcac8a136d5ecd3a25164bf3d82a012342182a011aee17c9d8ed341e3cb35fa1c9081a007ae27c5863fd2e3785272b2ae2e38297808fd1cac20e57c7cec6e4a3f3b8342e34e82f05b8e3e10ecf21b4479e98c4a86edee26a81d5cf1942f3f52295e8b1ae8aa2864837c20dba1de9632c3a8134f058e2a16d638d97fcbec267ed2bfadcb2d422b96fa3f77121df7bf3b7cf614d6b434054c2043a92ccfc1eb83e396918c1d4f29d7cd2b55f348c35dd1aa1f219a77c25f0bde16557e4432fda42376683f2fc190a9cdee2bc4a79c1ac5f0bd97ac5019f29aa2697d627a6a2c8bf81b0431423cdf1533f23d67492d21c534bf0595ea41ede4b664f422548e9a3f6bd0346c9c09f701d5424511217d0ee456c2cc2c236e1c8c450828b472924a7da9772df8a8abb3dff73a9c40f5d5c977da4b2acadd2385ec4dfff92f2d41e3e299af313930b6b266359ad9798283c1475a99b7c8116c5a1c8fd9eb6db4bc60857aaa0d5830e2a20663ec2a1983aacd70cf3466f9dbc56d234fda504adc97ff002fb1e6113d98e5c20654255d50ca752bba07edfce6a507d20bd2417e194e53c3f2d352bab2fee912729992b0872de574c90858ef749ed360769b6b86eeae70e851fb7ae0fcf1ebe7c69c2c45572c632c766ec84e7b24772fec10acdaf4faedcd499b9795ea550c34862d313661b021634dcafdb7d1bb23a43c52980296e338305d074aaa6dcc642df74bf47aeb3949fe9d2b333a96a03b322b6297fafa53e3a7c010d479889cad4e0d627b19ce9b20e09f8c63109f8c943b713c4886e25402e3e41f28fbb9692999660ca33d8303d05889b430df64383c252a681a6902b2321d12233bee9dfe40fd6df49829f054cf94a6fc4b1e07125f3f95362d0ee4b9a4e90150d56da8028bf36222bec89d4f49ae2e68da5f1a3ab591e2ecd1a249be15b4673e49d04b689562614ae22e703492ccac7e1dd9a7a1249230cf8a26e0c7800ed35423419a9c0356dc96760d6485e03490654b806f2607c21f9f1bf7327daa36ec233af591a6ba716f6423c9d2b3366ac45d714cc9f0a22c78305900f74d3405fade561a07fb92f0cf9245e1c6f4b5e3507ea1c26ccdd742444dca38ade9dd6d74056a62fb2649092057263e961418d36457bd25937b3650b88ac5f684fa2619fba3bda64c7fa2c82daea491b3031936a2eab4133ca64de0fe5a2ef8cc1e423b28bd21cce85c39126870793ce7109788e0df505f5cba8a850595a80abc3ad1790cd3f4f3cabaf1567a317723e3ae307e342b1bb2912defd9f35c52eb0a8132e25e60a10b16cda0ea2bbc6554250b06704d1e065a3ca685253b4db897ebd1b90c77b9d74ebc49a8887e5ae90ed0ad374f43394efe0707bf53312ce153a464860fe67777881954e90d1644fd6bc2a7a9653dd91f209b9879c643b1e23c182576283d1718244ab20215c60be1e12dddc1fd0e52cecab9da5b088c3a18349037dd06decb5f9eb358b49ede70932165101654db3d54e6877356351acd311b3984e2626efceca87ba0b0bd7de9c026a6a55e73e3f85b8f616f23df1ac6b13b74ec34763dec9422e0a1d3452bf2d51a31161de0665cf8b76c248e6574ff6b7390cab75798b559d9fb090897e880af77a5dd1a71066fe3947f5ef66293c2b85977e591149e5c26d41bbac755e5969ad6eedad9bb978e3f064352f3ca524626670757291893890da4587ca3f219d477a8ecbb665f09c2d8de601b893dbeac69cec7759639a018a7f60192fb2275eff57fa3ed13b477c1d791c2cee6ccf9e8e6472ad75b10a387a96b8931fadb1026e05370aaf123a65bf1bfc66f4532e45132c1a8aeeb955131946866bc31379f03487db9716c6e6c294bcec5ba1ad43dfa68c59e0f4702771533e58c42e4c5993d9703ce6feea7c0e049b5981dcd28edd7e9b874daab58523913628af460f2715fa8782f29d084f4dfaf00efb7e31892f52b82030f8392e6d1bff4ddb52eafbc9b3e0188a99e1cae56daed543259c121ad773372ccf61615c31630132226231138546c5d901c33fe5270637b699ac5b0148f66f431150279b85a28627d645b3bcc830d789ee00af8e4e8695ee302a988c2de33e2be347233feb6a2985172036f35d04c7cf8f3ca65bccb3924f06cee7ec7dbff00d6cf711419cced5f62b812885f3c0c533047a92faae2e6110f563528c8becb2429b769dd7da9ad096ff7c38dcd5f036fe0fd2fce9f2f9b70261062648056ece23f8052e6e3b16423aec831183b662a6d477584db9736ce7e060928777c79af2845982cbed80594689a339334ceb8179536d7b9ab2004cc3de5fdec2d8a9438af0c30ae4f547e6258a456c2882617909319635fcf3ab7466733eb487ceeb778866b0b0d199bfe558d04efd7aae2d41dd9d03fd90f705378a0370141eac373c85891075a20937450044fafc6b8852ec07c12117b5f716fc74df0e2d95aa64014d82ff579bf52bee473677bea2a37398410fd2f3be1179236008fb406c5288f47320e0d91278c90e7f4eb465285189dc9d9da9166ff541f0f40522d0b58aec744647c49db333c4e3b62b50170099f70aa868a89c12bb55c0ac992acb570f69b277806199d487696312e6b49865159fffad9f5f4f813bd757433097bc119ff829001c958180b8402c00078e1194f57cfea591a693e88af97cc03adcd17e4669061c581cb29ea3f886b896e1c9cef75084ea91b7a9cd89b22431c737894bdf0ebb5a0da1bda74032044894bf9858513f285e87512cbed625097735a2dddaf949a48f88429911322d3dd6c002972a0933ba2f22916fc3acf946408e86741bce40831d000a4f74d1e654c7d7ba09f7599a8c8bd764ca4cf993f1216cd289c98a16aac50061344fff847a65827b3c63f1994ecd84e420ce498ef0b508eb1f666157f92fbefdd0a1f5a7d828da4ad69d7dcbc3fe2448641bf1ca6ac1e655e8a32e8d25368bbfcbdbfe157f55c3c951ceb4043181f6bd17e5913afba229a5ac74d2d5900d0a9670912e0abd4d7ec1b0421560cd5c0487287c2ee6b13cf57ae09e20d22f414118446bc315da03bfa715ae543690041c3b09ac91adbf8929ad0801d4661ea8d2a6e607f8a0045f2e5a491cf241b59fd165ff672abd29e4a92737002ffc21bcb80a1d1a3f3f7b931a6ed62ac67ab2f7ecf3dd5b218ef10c36aed57fd35cbeaaf23d76550b832ed085eabef68d3759b4b335f74320465cc7f69c31d8d2c122e34c883653fceefcc1706a5d27e6dbe437d90e022b45270e7dd59689d89b2e2ed7ddfa9639f59e9f45aff556a7c95d5fca50c6a3c7c8e22ca726f7d080f17f0946fd8bd46947d011913995088c16c6de35098f6ded55118588410435b447a8876262dfcf80beafba3a668ede0e0ebf632da6210675d32f0eb2704f774b2e89a70520a24a6c41129cdc8d1c7b8a952b8a97e9ed2affb193b2633e8b0e251806ae1065b60f8105f4c0964db2022da1c413be08223821e", 0x1000}], 0x3, &(0x7f0000001380)=[{0x100c, 0x0, 0x0, "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"}, {0xa0, 0x0, 0x7, "2d3b9881dfc1a458574edf6f4392c29000e3393c878357db8288e4cd4243e47d8362ec99a5d98c3a6ab5c550e068ab3c46c7227322f98916ffcd130a8f9a0858c24fac363ed424a4212b0757eff7af8fd0c960a2c716fb3b0a6396f7068899e52913f208d00539d49405b61cc34ea6cb45eca36ef46a504723d1a540c36e285e094138a12a79da7522d23988653e4ff471a4"}, {0x30, 0x119, 0x1ff, "4dbc49fb7537b34d1868db52496363138827eb0447867642d14ec4c5315045d1ad1db9"}, {0xd4, 0x10a, 0x0, "c93987a13b62cf2ceba559f876793849ca32b3c298cd646c34ee0c1a3578d0584bddca9efab9c66ef3792b64596951f7dd3389dbfd6b1a807eda753c1aa788931f9c4d849adbef34040cc1dae598316401b86370f3740788b6315c5fc64eccf1dd990a6b4e15993816333686e8dd918e1c655fe2ea3f07da1eb8530498278dbcad9f6681902037d570f27934fa6759455ad4eb1dd1e67504db7f987329bfac491d9775b2c6e6b9939fa8ce002326ecdd76d39d91eda7f71bc7f23e47aa1a4c242f76407d92c836ea"}, {0x54, 0x10d, 0x7, "5e22a488f22b72b10b21a079c430ea2f16293c94e146614b60728350af83b475f77257434d83177c6ab3dcbc65c3d10040a645a9a24271b4d47e9000a464ca0592583d021beb"}, {0xc4, 0x3a, 0x5, "ae33c57e7fe2821f23f98c244060edb453d025fb7202d617c021fc109995ffd400a260955190ec7135cbbc0351221eb0eb1ad39df25be35d8834757aca06e9aa37c9ea362ab26374d1231c45144d49730876d21c6f56235f7d768da059933c4246fc64d56e1e1bac3cb9e6c8791468e3aff8afccb9b9b53296d18b4946c989ec977c1eb51fb18c5ed773f6b1a47a8b617cf33628d352387934096ad8ec3cbede7ed9d8b4ca6a3ec17c5446772d56b4ca7e993fe1756c286c"}, {0xfc, 0x119, 0x5, "f26ee894f288ad472c030fbb3673c8fc524f86ea16668534068806cc47021bc3b744e6bc7781ccb1d6ad62a68640289fb087e2436ceb8e49a1633a2dca095487cae28f06a4b0a1299c60d13e505b056a7cc1f3b696cf388cd4de6ea4c3013c7bbc2943f87818e80fe6c141eadad0821e5cb75dc7ac7fdf562f49cc1a5ba651277ca3c9dd003d55feadadc395399d6dd0964ea25ea0708e069cec9d5f2a1411022f988a62d04ec4d6e0de9837c6c61e44687e56edf991e857616f5c98b0b56749d49e01bdc5760d7b6abdad4781ec5d8af0263dd6e3e8bd9dc2c2a2811396ccca08d061e9856eff1ce6fb6609a11d"}, {0x20, 0x11, 0x7, "7cd434dbf61b4c0fb977b7e55ea2a131db27b40e"}, {0xe4, 0x10b, 0x800, "06d94d2d53ac268fe30be32592e566a95af2657d9fe494096aaf60aeaeb5c877cc23d2911dc7bdbb67e6717a553c97d1f511590674292bf90fbc0d01b7afd141a36090bb6d678542fe5e075501f642bbdc84622219bb7394bf09ac5a74e3ccc4cc4b8512eb1b77c8c7feface7b80fe6f57d4ad961feeff8f2a988fdd4c3cbda400caa7fb4de7d1324e1531257dc4691a2bdc4d8b147ee536fea19b60799070c1e67a73980cc7687ed9ba0e425e2e5da55ab2917a499cd03ae6c7fae51a4daa82f634c397f2b8b647c11ad9a04ab50cd9e2d710ecf41c"}], 0x14c8}, 0xc259fc9f7a99fcb2) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000000)={0x0, 0x1, 0x2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0xffff, 0x1, 0x6, 0x9, 0x9, 0x5, 0x8, 0x0, 0x8, 0x7, 0x6, 0x200000000000000, 0x4, 0x6, 0xf1, 0x3], 0x0, 0x20000}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="b70b0000000000536036960b7dae36330900000000000000e406afd772367ab6d7e723a3d95b426c8e8aa3fb43aaa091716f97dd72d18cb01404000000ddd2d15f83e2cdef312e6bd73cd6263782e40d7ed31fc32b808e3d43a52d0152ebcdde422f00000000000000000914e6a139996a45"]) 1.552207886s ago: executing program 2 (id=956): ioperm(0x6, 0x1, 0x95d) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x4000, 0x51}, 0x0) 1.473391337s ago: executing program 2 (id=957): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0xffffffffffffffff], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000001980)) r2 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57bd00b1b3a660bb38d58430a051059c1c370b570890937") kcmp(r2, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000280)=0x7) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r7, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000001f00)) sendmmsg(r5, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000440)="3dbd0c6287e20b8d", 0x8}], 0x1}}], 0x1, 0x0) 1.401944515s ago: executing program 3 (id=958): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000020601020000000000000000000000005ce32df2a55ba028320000000005001824000000000c000300686173683a6970000500010007000000f6be96bdda6555b5dcef7564bdaa675e94a3d3e72549e4e447cc7d5143e8fb33af28f2b7e8b89b0dfa913983e5e3dfc4c34876ae65275c63f30376"], 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000806030000000000000000000000000005000100070000008546687247dcf3e32a2eff67f53bcd390aae0c687ffbe104f9a0ff8aedd1c4c9b8a84532c32a97848d3d2f41ea5c794830d4f4a3e1a89c86d07281b43d69"], 0x1c}}, 0x0) recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200), 0xffffffffffffff54) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r6 = socket(0x10, 0x2, 0xfffffffd) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000001c0)={0x6}, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="450404000000000000000a000020"], 0x20}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002540)={{}, &(0x7f00000024c0), &(0x7f0000002500)}, 0x20) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) dup(r8) 1.121762246s ago: executing program 1 (id=959): r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x2, 0x0, &(0x7f0000000900)=[{0x88, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0xe0) 1.031644048s ago: executing program 1 (id=960): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6, @random="c8ed6cecf1bd"}, 0x2, {0x2, 0x0, @loopback}, 'veth0_to_bond\x00'}) (async) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6, @random="c8ed6cecf1bd"}, 0x2, {0x2, 0x0, @loopback}, 'veth0_to_bond\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x1028}}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x1028}}, 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000140a05000000000000000000000000020c0006400000000000000004140000001100010000000000000000000000000acaa032d1782ecd75ba3a4a8ba8a1630adb5efaf1b2f8af94f135d2f33c1596cddcd02fecd774aeeb20c40bddb5f555c688ec7e42bbe20aac5d22df04e532f0f389b55eb531aedb0b58e77f2bca9d0d4dd024dc57a700676500019526a31c303359b11985754443f3a3d3b26298d29394ae5bed0c586e160ac3f8fef9e82c86"], 0x48}, 0x1, 0x0, 0x0, 0x24000094}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x5) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000380), 0x100401, &(0x7f0000000600)={[{@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}, {@index_on}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@uid_eq}, {@uid_gt}, {@subj_type={'subj_type', 0x3d, 'veth0_to_bond\x00'}}, {@euid_lt}], 0x3a}) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=@gettfilter={0xfffffffffffffed2, 0x2e, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xffe0, 0xfff2}, {0xfff1, 0xffff}, {0xa, 0x6}}}, 0x64}}, 0x44000) sendmsg$netlink(r4, 0x0, 0x0) (async) sendmsg$netlink(r4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r8, 0x541c, &(0x7f0000000000)) (async) ioctl$TIOCL_BLANKSCREEN(r8, 0x541c, &(0x7f0000000000)) 995.321424ms ago: executing program 3 (id=961): socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@redirect_dir_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_auto}], [], 0x2c}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) read$FUSE(r0, &(0x7f0000001340)={0x2020}, 0x2020) mknodat(r1, &(0x7f0000000040)='./file0\x00', 0x8, 0xb38) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="ee9ed31a46391eff33180000a2429ff70000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r4, &(0x7f0000002380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f00000004c0)={0x50, 0x0, r5, {0x7, 0x9}}, 0x50) read$FUSE(r4, &(0x7f0000006580)={0x2020}, 0x2020) truncate(&(0x7f0000000080)='./file0\x00', 0x0) syz_fuse_handle_req(r4, &(0x7f000000b1c0)="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", 0x2000, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000d540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xee00}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}}) 531.552087ms ago: executing program 2 (id=962): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0xffffffffffffffff], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000001980)) r2 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57bd00b1b3a660bb38d58430a051059c1c370b570890937") kcmp(r2, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000280)=0x7) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r7, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000001f00)) sendmmsg(r5, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000440)="3dbd0c6287e20b8d", 0x8}], 0x1}}], 0x1, 0x0) 193.892299ms ago: executing program 0 (id=963): r0 = inotify_init1(0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8afa89, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r5, 0x101, 0x5, &(0x7f00000007c0)=0x4, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}]}}]}, 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r7, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000000)=@generic={0x1, 0xfffffffffffffffd}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f00000001c0)={0x8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="2400800000009f03000000000000000808fcfffffeffffff0c000d80080003fd", @ANYRES32=0x0, @ANYBLOB], 0x24}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r9) 102.19445ms ago: executing program 3 (id=964): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) read$FUSE(r0, &(0x7f00000003c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x12, 0x0, @tid=r1}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async) fcntl$setsig(r0, 0xa, 0x13) (async) fcntl$setlease(r0, 0x400, 0x0) (async) read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) (async) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x12, 0x0, @tid=r1}, &(0x7f0000000380)) (async) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) truncate(&(0x7f0000000040)='./file0\x00', 0x0) (async) fcntl$setlease(r0, 0x400, 0x2) (async) 0s ago: executing program 0 (id=965): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000380)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}}, 0x0) kernel console output (not intermixed with test programs): 0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:1816kB pagetables:1156kB sec_pagetables:52kB all_unreclaimable? no [ 132.188421][ T7046] Node 0 DMA free:936kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:252kB local_pcp:172kB free_cma:0kB [ 132.206577][ T7046] lowmem_reserve[]: 0 273 0 0 0 [ 132.208908][ T7046] Node 0 DMA32 free:20132kB boost:0kB min:13904kB low:17380kB high:20856kB reserved_highatomic:4096KB active_anon:0kB inactive_anon:576kB active_file:0kB inactive_file:12kB unevictable:1536kB writepending:8kB present:1032196kB managed:306280kB mlocked:0kB bounce:0kB free_pcp:2108kB local_pcp:1316kB free_cma:0kB [ 132.247737][ T7046] lowmem_reserve[]: 0 0 0 0 0 [ 132.249508][ T7046] Node 1 DMA32 free:301944kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:30928kB inactive_anon:520kB active_file:19280kB inactive_file:170748kB unevictable:1536kB writepending:588kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:20108kB local_pcp:3676kB free_cma:0kB [ 132.259517][ T7046] lowmem_reserve[]: 0 0 0 0 0 [ 132.261167][ T7046] Node 0 DMA: 22*4kB (U) 3*8kB (U) 23*16kB (U) 17*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1024kB [ 132.265594][ T7046] Node 0 DMA32: 91*4kB (UMEH) 177*8kB (UMEH) 126*16kB (UMH) 69*32kB (UMEH) 43*64kB (UMEH) 30*128kB (UMEH) 12*256kB (MH) 8*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 21812kB [ 132.271980][ T7046] Node 1 DMA32: 62*4kB (UM) 61*8kB (UME) 31*16kB (UME) 167*32kB (UME) 45*64kB (UME) 103*128kB (UME) 51*256kB (UM) 30*512kB (UME) 25*1024kB (UME) 5*2048kB (UME) 56*4096kB (UM) = 316272kB [ 132.277113][ T7046] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 132.280801][ T7046] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 132.284497][ T7046] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 132.287700][ T7046] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 132.290552][ T7046] 52047 total pagecache pages [ 132.292278][ T7046] 821 pages in swap cache [ 132.293833][ T7046] Free swap = 109820kB [ 132.295795][ T7046] Total swap = 124996kB [ 132.297417][ T7046] 524155 pages RAM [ 132.300850][ T7046] 0 pages HighMem/MovableOnly [ 132.303489][ T7046] 206682 pages reserved [ 132.304623][ T7046] 0 pages cma reserved [ 132.459752][ T7058] capability: warning: `syz.1.411' uses deprecated v2 capabilities in a way that may be insecure [ 133.283901][ T40] audit: type=1326 audit(1728396985.467:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.3.414" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x0 [ 133.389954][ T7077] netlink: 'syz.0.415': attribute type 3 has an invalid length. [ 133.392482][ T7077] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.415'. [ 134.142169][ T7086] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 134.143871][ T7086] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 134.146280][ T7086] vhci_hcd vhci_hcd.0: Device attached [ 134.157184][ T7086] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 134.159561][ T7086] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 134.169801][ T7086] vhci_hcd vhci_hcd.0: Device attached [ 134.178868][ T7094] usbip_core: unknown command [ 134.185792][ T7094] vhci_hcd: unknown pdu 0 [ 134.187403][ T7094] usbip_core: unknown command [ 134.191159][ T68] vhci_hcd: stop threads [ 134.192326][ T68] vhci_hcd: release socket [ 134.193512][ T68] vhci_hcd: disconnect device [ 134.202256][ T7090] vhci_hcd: connection closed [ 134.206967][ T68] vhci_hcd: stop threads [ 134.210094][ T68] vhci_hcd: release socket [ 134.211679][ T68] vhci_hcd: disconnect device [ 134.246229][ T7093] binder: BINDER_SET_CONTEXT_MGR already set [ 134.259099][ T7093] binder: 7083:7093 ioctl 4018620d 20000300 returned -16 [ 134.557735][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 134.707932][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 134.712889][ T8] usb 5-1: config 5 has an invalid interface number: 82 but max is 3 [ 134.715100][ T8] usb 5-1: config 5 has an invalid interface number: 122 but max is 3 [ 134.717358][ T8] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 134.720418][ T8] usb 5-1: config 5 has 2 interfaces, different from the descriptor's value: 4 [ 134.723449][ T8] usb 5-1: config 5 has no interface number 0 [ 134.725177][ T8] usb 5-1: config 5 has no interface number 1 [ 134.726981][ T8] usb 5-1: config 5 interface 82 altsetting 241 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 134.730511][ T8] usb 5-1: config 5 interface 82 altsetting 241 has 4 endpoint descriptors, different from the interface descriptor's value: 14 [ 134.734109][ T8] usb 5-1: too many endpoints for config 5 interface 122 altsetting 161: 144, using maximum allowed: 30 [ 134.737153][ T8] usb 5-1: config 5 interface 122 altsetting 161 has a duplicate endpoint with address 0xF, skipping [ 134.740251][ T8] usb 5-1: config 5 interface 122 altsetting 161 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 134.743848][ T8] usb 5-1: config 5 interface 122 altsetting 161 endpoint 0x8A has an invalid bInterval 98, changing to 10 [ 134.747021][ T8] usb 5-1: config 5 interface 122 altsetting 161 endpoint 0x8A has invalid maxpacket 50287, setting to 1024 [ 134.750275][ T8] usb 5-1: config 5 interface 122 altsetting 161 has a duplicate endpoint with address 0xA, skipping [ 134.753317][ T8] usb 5-1: config 5 interface 122 altsetting 161 has a duplicate endpoint with address 0x4, skipping [ 134.756405][ T8] usb 5-1: config 5 interface 122 altsetting 161 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 134.759666][ T8] usb 5-1: config 5 interface 122 altsetting 161 has an invalid descriptor for endpoint zero, skipping [ 134.762971][ T8] usb 5-1: config 5 interface 122 altsetting 161 has a duplicate endpoint with address 0xA, skipping [ 134.766055][ T8] usb 5-1: config 5 interface 122 altsetting 161 has 9 endpoint descriptors, different from the interface descriptor's value: 144 [ 134.769983][ T8] usb 5-1: config 5 interface 82 has no altsetting 0 [ 134.771817][ T8] usb 5-1: config 5 interface 122 has no altsetting 0 [ 134.777238][ T8] usb 5-1: Dual-Role OTG device on HNP port [ 134.780241][ T8] usb 5-1: New USB device found, idVendor=0846, idProduct=9014, bcdDevice=b0.10 [ 134.782768][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.785076][ T8] usb 5-1: Product: Ñ• [ 134.786379][ T8] usb 5-1: Manufacturer: ꗗੀ墸ä榀譼⭇깊긳㊤㪒櫼î›ë·„홎銭⽚겣廄漞䕭㟮췔ê¹á§”毕镔ԩ놴î…었팸Ï鱥奣í—툊ꖥꔸ贚ã™é¬«æ›–䎡਄斫ჶ컫픩᤹业â§æ¾íƒŠå§„ [ 134.791743][ T8] usb 5-1: SerialNumber: à š [ 135.230875][ T8] usb 5-1: USB disconnect, device number 6 [ 136.165761][ T40] audit: type=1326 audit(1728396988.337:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.3.426" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x0 [ 136.439174][ T7134] netlink: 'syz.0.427': attribute type 3 has an invalid length. [ 136.442080][ T7134] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.427'. [ 136.534043][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.428'. [ 137.914878][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.437'. [ 138.497354][ T40] audit: type=1326 audit(1728396990.677:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.3.442" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x0 [ 138.635986][ T7188] netlink: 'syz.1.443': attribute type 3 has an invalid length. [ 138.713069][ T7188] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.443'. [ 140.107769][ T25] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 140.260196][ T25] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 140.266855][ T25] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.272068][ T25] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.284103][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.288583][ T25] usb 7-1: config 0 descriptor?? [ 140.303324][ T25] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 141.628744][ T7229] FAULT_INJECTION: forcing a failure. [ 141.628744][ T7229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.632156][ T7229] CPU: 1 UID: 0 PID: 7229 Comm: syz.3.452 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 141.634882][ T7229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.637688][ T7229] Call Trace: [ 141.638574][ T7229] [ 141.639359][ T7229] dump_stack_lvl+0x16c/0x1f0 [ 141.640636][ T7229] should_fail_ex+0x497/0x5b0 [ 141.641875][ T7229] _copy_from_user+0x30/0xf0 [ 141.643081][ T7229] __sys_bpf+0x215/0x5780 [ 141.644241][ T7229] ? ksys_write+0x21e/0x260 [ 141.645452][ T7229] ? __pfx___sys_bpf+0x10/0x10 [ 141.646730][ T7229] ? vfs_write+0x14d/0x1140 [ 141.647945][ T7229] ? __mutex_unlock_slowpath+0x164/0x650 [ 141.649435][ T7229] ? fput+0x30/0x390 [ 141.650478][ T7229] ? ksys_write+0x1ad/0x260 [ 141.651686][ T7229] ? __pfx_ksys_write+0x10/0x10 [ 141.652986][ T7229] __ia32_sys_bpf+0x76/0xe0 [ 141.654197][ T7229] __do_fast_syscall_32+0x73/0x120 [ 141.655552][ T7229] do_fast_syscall_32+0x32/0x80 [ 141.656866][ T7229] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 141.658527][ T7229] RIP: 0023:0xf748e579 [ 141.659618][ T7229] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 141.664622][ T7229] RSP: 002b:00000000f577656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 141.666799][ T7229] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000440 [ 141.668878][ T7229] RDX: 0000000000000070 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.670948][ T7229] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 141.673020][ T7229] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 141.675080][ T7229] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 141.677150][ T7229] [ 142.323240][ T40] audit: type=1326 audit(1728396994.507:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.454" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x0 [ 142.479128][ T7223] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 142.487940][ T7223] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 142.879041][ T9] usb 7-1: USB disconnect, device number 8 [ 144.661087][ T7262] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 144.761821][ T7262] lo speed is unknown, defaulting to 1000 [ 145.105731][ T7263] lo speed is unknown, defaulting to 1000 [ 145.337775][ T40] audit: type=1326 audit(1728396997.487:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.2.465" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x0 [ 145.427710][ T8] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 145.589280][ T8] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 145.592313][ T8] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.606311][ T8] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.622930][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.650456][ T8] usb 8-1: config 0 descriptor?? [ 145.662693][ T8] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 146.078811][ T7286] FAULT_INJECTION: forcing a failure. [ 146.078811][ T7286] name failslab, interval 1, probability 0, space 0, times 0 [ 146.083236][ T7286] CPU: 2 UID: 0 PID: 7286 Comm: syz.2.467 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 146.086951][ T7286] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.090767][ T7286] Call Trace: [ 146.091992][ T7286] [ 146.093066][ T7286] dump_stack_lvl+0x16c/0x1f0 [ 146.094789][ T7286] should_fail_ex+0x497/0x5b0 [ 146.096509][ T7286] should_failslab+0xc2/0x120 [ 146.098240][ T7286] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 146.099781][ T7286] ? skb_clone+0x190/0x3f0 [ 146.101237][ T7286] skb_clone+0x190/0x3f0 [ 146.102811][ T7286] netlink_deliver_tap+0xb26/0xcf0 [ 146.104322][ T7286] netlink_unicast+0x5e1/0x7f0 [ 146.105576][ T7286] ? __pfx_netlink_unicast+0x10/0x10 [ 146.106950][ T7286] ? __phys_addr_symbol+0x30/0x80 [ 146.108334][ T7286] ? __check_object_size+0x488/0x710 [ 146.109710][ T7286] netlink_sendmsg+0x8b8/0xd70 [ 146.111259][ T7286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.113174][ T7286] ? lock_acquire+0x2f/0xb0 [ 146.114854][ T7286] ____sys_sendmsg+0x9ae/0xb40 [ 146.116604][ T7286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.118502][ T7286] ? get_compat_msghdr+0x11b/0x170 [ 146.120323][ T7286] ? __pfx___lock_acquire+0x10/0x10 [ 146.122180][ T7286] ___sys_sendmsg+0x135/0x1e0 [ 146.123830][ T7286] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.125684][ T7286] ? lock_acquire+0x2f/0xb0 [ 146.127325][ T7286] ? __fget_files+0x40/0x3f0 [ 146.128995][ T7286] ? fdget+0x176/0x210 [ 146.130469][ T7286] __sys_sendmsg+0x117/0x1f0 [ 146.132182][ T7286] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.133980][ T7286] ? do_user_addr_fault+0xe50/0x13f0 [ 146.135933][ T7286] ? trace_lock_acquire+0x14a/0x1d0 [ 146.137802][ T7286] ? native_tss_update_io_bitmap+0x2ec/0x610 [ 146.139601][ T7286] __do_fast_syscall_32+0x73/0x120 [ 146.141165][ T7286] do_fast_syscall_32+0x32/0x80 [ 146.142619][ T7286] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 146.144862][ T7286] RIP: 0023:0xf741e579 [ 146.146346][ T7286] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 146.153183][ T7286] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 146.156173][ T7286] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200007c0 [ 146.158968][ T7286] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.161803][ T7286] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 146.164625][ T7286] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 146.167474][ T7286] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.169704][ T7286] [ 146.988166][ T7298] netlink: 'syz.1.469': attribute type 3 has an invalid length. [ 146.994526][ T7298] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.469'. [ 147.945647][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'. [ 148.161547][ T980] usb 8-1: USB disconnect, device number 7 [ 148.194937][ T40] audit: type=1326 audit(1728397000.377:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.3.477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 148.207875][ T40] audit: type=1326 audit(1728397000.397:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.3.477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 148.223174][ T40] audit: type=1326 audit(1728397000.397:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.3.477" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 148.230863][ T40] audit: type=1326 audit(1728397000.397:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.3.477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 148.238518][ T40] audit: type=1326 audit(1728397000.407:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.3.477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 148.238554][ T40] audit: type=1326 audit(1728397000.417:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.3.477" exe="/syz-executor" sig=0 arch=40000003 syscall=107 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 148.238583][ T40] audit: type=1326 audit(1728397000.417:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.3.477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 148.238611][ T40] audit: type=1326 audit(1728397000.417:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.3.477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 148.238639][ T40] audit: type=1326 audit(1728397000.417:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.3.477" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 148.238667][ T40] audit: type=1326 audit(1728397000.417:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.3.477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 149.065293][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.484'. [ 149.497917][ T980] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 149.661285][ T7354] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 149.662514][ T980] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 149.664216][ T7354] overlayfs: failed to set xattr on upper [ 149.666398][ T980] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.666421][ T980] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.666433][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.678722][ T7354] overlayfs: ...falling back to redirect_dir=nofollow. [ 149.679729][ T980] usb 6-1: config 0 descriptor?? [ 149.684192][ T980] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 149.686272][ T7354] overlayfs: ...falling back to index=off. [ 149.687849][ T7354] overlayfs: ...falling back to uuid=null. [ 149.689404][ T7354] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 149.705846][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.489'. [ 149.746287][ T7357] FAULT_INJECTION: forcing a failure. [ 149.746287][ T7357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.750964][ T7357] CPU: 0 UID: 0 PID: 7357 Comm: syz.2.490 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 149.754434][ T7357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.758020][ T7357] Call Trace: [ 149.759139][ T7357] [ 149.760148][ T7357] dump_stack_lvl+0x16c/0x1f0 [ 149.761738][ T7357] should_fail_ex+0x497/0x5b0 [ 149.763346][ T7357] _copy_to_user+0x30/0xc0 [ 149.764875][ T7357] simple_read_from_buffer+0xd0/0x160 [ 149.766708][ T7357] proc_fail_nth_read+0x198/0x270 [ 149.768423][ T7357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.770291][ T7357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.772200][ T7357] vfs_read+0x1ce/0xbd0 [ 149.773680][ T7357] ? __fget_files+0x23a/0x3f0 [ 149.775318][ T7357] ? fdget_pos+0x24c/0x360 [ 149.776910][ T7357] ? __pfx_lock_release+0x10/0x10 [ 149.778660][ T7357] ? trace_lock_acquire+0x14a/0x1d0 [ 149.780367][ T7357] ? __pfx_vfs_read+0x10/0x10 [ 149.781768][ T7357] ? __pfx___mutex_lock+0x10/0x10 [ 149.783258][ T7357] ? __fget_files+0x244/0x3f0 [ 149.784631][ T7357] ksys_read+0x12f/0x260 [ 149.785904][ T7357] ? __pfx_ksys_read+0x10/0x10 [ 149.787282][ T7357] __do_fast_syscall_32+0x73/0x120 [ 149.788902][ T7357] do_fast_syscall_32+0x32/0x80 [ 149.790610][ T7357] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 149.792693][ T7357] RIP: 0023:0xf741e579 [ 149.794068][ T7357] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 149.800581][ T7357] RSP: 002b:00000000f57065a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 149.803294][ T7357] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5706620 [ 149.805778][ T7357] RDX: 000000000000000f RSI: 00000000f740bff4 RDI: 0000000000000000 [ 149.808325][ T7357] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 149.811018][ T7357] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 149.813635][ T7357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.816274][ T7357] [ 150.526859][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.493'. [ 150.928499][ T7373] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 151.266641][ T7382] FAULT_INJECTION: forcing a failure. [ 151.266641][ T7382] name failslab, interval 1, probability 0, space 0, times 0 [ 151.271445][ T7382] CPU: 2 UID: 0 PID: 7382 Comm: syz.2.498 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 151.275045][ T7382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 151.278674][ T7382] Call Trace: [ 151.279852][ T7382] [ 151.280876][ T7382] dump_stack_lvl+0x16c/0x1f0 [ 151.282528][ T7382] should_fail_ex+0x497/0x5b0 [ 151.284187][ T7382] ? fs_reclaim_acquire+0xae/0x160 [ 151.285944][ T7382] should_failslab+0xc2/0x120 [ 151.287567][ T7382] kmem_cache_alloc_node_noprof+0x71/0x310 [ 151.289605][ T7382] ? alloc_vmap_area+0x636/0x2a70 [ 151.291333][ T7382] alloc_vmap_area+0x636/0x2a70 [ 151.293028][ T7382] ? __pfx_alloc_vmap_area+0x10/0x10 [ 151.294842][ T7382] __get_vm_area_node+0x17e/0x2d0 [ 151.296572][ T7382] ? find_held_lock+0x2d/0x110 [ 151.298217][ T7382] __vmalloc_node_range_noprof+0x26a/0x15a0 [ 151.300270][ T7382] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 151.302154][ T7382] ? hlock_class+0x4e/0x130 [ 151.303736][ T7382] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 151.305594][ T7382] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 151.307756][ T7382] ? __pfx_aa_get_newest_label+0x10/0x10 [ 151.309677][ T7382] ? __pfx___lock_acquire+0x10/0x10 [ 151.311465][ T7382] ? mark_lock+0xb5/0xc60 [ 151.312943][ T7382] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 151.314806][ T7382] __vmalloc_noprof+0x6d/0x90 [ 151.316423][ T7382] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 151.318452][ T7382] bpf_prog_alloc_no_stats+0x54/0x5e0 [ 151.320315][ T7382] ? security_capable+0x7e/0x260 [ 151.322013][ T7382] bpf_prog_alloc+0x3b/0x230 [ 151.323595][ T7382] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 151.325383][ T7382] bpf_prog_load+0x1758/0x2670 [ 151.326666][ T7382] ? __pfx_bpf_prog_load+0x10/0x10 [ 151.328022][ T7382] ? find_held_lock+0x2d/0x110 [ 151.329283][ T7382] __sys_bpf+0x4c8c/0x5780 [ 151.330480][ T7382] ? ksys_write+0x21e/0x260 [ 151.331693][ T7382] ? __pfx___sys_bpf+0x10/0x10 [ 151.333084][ T7382] ? vfs_write+0x14d/0x1140 [ 151.334584][ T7382] ? __mutex_unlock_slowpath+0x164/0x650 [ 151.336196][ T7382] ? fput+0x30/0x390 [ 151.337514][ T7382] ? ksys_write+0x1ad/0x260 [ 151.338742][ T7382] ? __pfx_ksys_write+0x10/0x10 [ 151.340064][ T7382] __ia32_sys_bpf+0x76/0xe0 [ 151.341739][ T7382] __do_fast_syscall_32+0x73/0x120 [ 151.343624][ T7382] do_fast_syscall_32+0x32/0x80 [ 151.345402][ T7382] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.347708][ T7382] RIP: 0023:0xf741e579 [ 151.349164][ T7382] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 151.356109][ T7382] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 151.359144][ T7382] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000440 [ 151.362041][ T7382] RDX: 0000000000000070 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.364975][ T7382] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.367825][ T7382] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 151.370593][ T7382] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.372885][ T7382] [ 151.391687][ T7382] syz.2.498: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 151.411433][ T7382] CPU: 2 UID: 0 PID: 7382 Comm: syz.2.498 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 151.415307][ T7382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 151.419176][ T7382] Call Trace: [ 151.420427][ T7382] [ 151.421519][ T7382] dump_stack_lvl+0x16c/0x1f0 [ 151.423265][ T7382] warn_alloc+0x24d/0x3a0 [ 151.424881][ T7382] ? __pfx_warn_alloc+0x10/0x10 [ 151.426649][ T7382] ? kfree+0x14f/0x4b0 [ 151.428167][ T7382] ? __get_vm_area_node+0x1bc/0x2d0 [ 151.430181][ T7382] __vmalloc_node_range_noprof+0xd27/0x15a0 [ 151.432429][ T7382] ? hlock_class+0x4e/0x130 [ 151.434103][ T7382] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 151.436129][ T7382] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 151.438431][ T7382] ? __pfx_aa_get_newest_label+0x10/0x10 [ 151.440504][ T7382] ? __pfx___lock_acquire+0x10/0x10 [ 151.442409][ T7382] ? mark_lock+0xb5/0xc60 [ 151.444027][ T7382] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 151.446062][ T7382] __vmalloc_noprof+0x6d/0x90 [ 151.447814][ T7382] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 151.449848][ T7382] bpf_prog_alloc_no_stats+0x54/0x5e0 [ 151.451819][ T7382] ? security_capable+0x7e/0x260 [ 151.453636][ T7382] bpf_prog_alloc+0x3b/0x230 [ 151.455319][ T7382] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 151.457513][ T7382] bpf_prog_load+0x1758/0x2670 [ 151.459289][ T7382] ? __pfx_bpf_prog_load+0x10/0x10 [ 151.461195][ T7382] ? find_held_lock+0x2d/0x110 [ 151.462969][ T7382] __sys_bpf+0x4c8c/0x5780 [ 151.464624][ T7382] ? ksys_write+0x21e/0x260 [ 151.466291][ T7382] ? __pfx___sys_bpf+0x10/0x10 [ 151.468051][ T7382] ? vfs_write+0x14d/0x1140 [ 151.469722][ T7382] ? __mutex_unlock_slowpath+0x164/0x650 [ 151.471781][ T7382] ? fput+0x30/0x390 [ 151.473226][ T7382] ? ksys_write+0x1ad/0x260 [ 151.474889][ T7382] ? __pfx_ksys_write+0x10/0x10 [ 151.476684][ T7382] __ia32_sys_bpf+0x76/0xe0 [ 151.478393][ T7382] __do_fast_syscall_32+0x73/0x120 [ 151.480290][ T7382] do_fast_syscall_32+0x32/0x80 [ 151.482075][ T7382] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.484384][ T7382] RIP: 0023:0xf741e579 [ 151.485881][ T7382] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 151.492780][ T7382] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 151.495789][ T7382] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000440 [ 151.498601][ T7382] RDX: 0000000000000070 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.501457][ T7382] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.504327][ T7382] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 151.507179][ T7382] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.510044][ T7382] [ 151.517680][ T7382] Mem-Info: [ 151.518673][ T7382] active_anon:2310 inactive_anon:134 isolated_anon:0 [ 151.518673][ T7382] active_file:4869 inactive_file:42699 isolated_file:0 [ 151.518673][ T7382] unevictable:768 dirty:177 writeback:0 [ 151.518673][ T7382] slab_reclaimable:4817 slab_unreclaimable:53021 [ 151.518673][ T7382] mapped:17393 shmem:956 pagetables:648 [ 151.518673][ T7382] sec_pagetables:315 bounce:0 [ 151.518673][ T7382] kernel_misc_reclaimable:0 [ 151.518673][ T7382] free:83756 free_pcp:7532 free_cma:0 [ 151.530596][ T7382] Node 0 active_anon:68kB inactive_anon:16kB active_file:0kB inactive_file:24kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:5272kB dirty:12kB writeback:0kB shmem:1548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9644kB pagetables:1560kB sec_pagetables:1208kB all_unreclaimable? no [ 151.538995][ T7382] Node 1 active_anon:9172kB inactive_anon:520kB active_file:19480kB inactive_file:170772kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:64300kB dirty:696kB writeback:0kB shmem:2276kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:1728kB pagetables:1032kB sec_pagetables:52kB all_unreclaimable? no [ 151.549664][ T7382] Node 0 DMA free:912kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:72kB local_pcp:56kB free_cma:0kB [ 151.558078][ T7382] lowmem_reserve[]: 0 273 0 0 0 [ 151.559792][ T7382] Node 0 DMA32 free:21460kB boost:0kB min:13904kB low:17380kB high:20856kB reserved_highatomic:4096KB active_anon:0kB inactive_anon:88kB active_file:0kB inactive_file:20kB unevictable:1536kB writepending:8kB present:1032196kB managed:306280kB mlocked:0kB bounce:0kB free_pcp:1380kB local_pcp:144kB free_cma:0kB [ 151.567295][ T7382] lowmem_reserve[]: 0 0 0 0 0 [ 151.570905][ T7382] Node 1 DMA32 free:312248kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:9172kB inactive_anon:520kB active_file:19480kB inactive_file:170772kB unevictable:1536kB writepending:696kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:29048kB local_pcp:748kB free_cma:0kB [ 151.582807][ T7382] lowmem_reserve[]: 0 0 0 0 0 [ 151.584117][ T7382] Node 0 DMA: 26*4kB (U) 5*8kB (U) 32*16kB (U) 9*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 944kB [ 151.587655][ T7382] Node 0 DMA32: 144*4kB (UMEH) 169*8kB (UMEH) 89*16kB (UMEH) 65*32kB (UMEH) 53*64kB (UMEH) 33*128kB (UMEH) 12*256kB (MH) 7*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 21752kB [ 151.608658][ T7382] Node 1 DMA32: 110*4kB (UM) 74*8kB (UME) 83*16kB (UME) 88*32kB (UME) 96*64kB (UME) 67*128kB (UME) 64*256kB (UM) 35*512kB (UME) 24*1024kB (UME) 2*2048kB (ME) 56*4096kB (UM) = 312248kB [ 151.624730][ T7382] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.631167][ T7382] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 151.634666][ T7382] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.638425][ T7382] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 151.641707][ T7382] 49337 total pagecache pages [ 151.643380][ T7382] 812 pages in swap cache [ 151.644941][ T7382] Free swap = 109820kB [ 151.646444][ T7382] Total swap = 124996kB [ 151.648198][ T7382] 524155 pages RAM [ 151.649653][ T7382] 0 pages HighMem/MovableOnly [ 151.651367][ T7382] 206682 pages reserved [ 151.652861][ T7382] 0 pages cma reserved [ 152.145008][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 152.272978][ T830] usb 6-1: USB disconnect, device number 5 [ 152.547048][ T7409] FAULT_INJECTION: forcing a failure. [ 152.547048][ T7409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.555136][ T7409] CPU: 1 UID: 0 PID: 7409 Comm: syz.3.506 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 152.558709][ T7409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 152.562336][ T7409] Call Trace: [ 152.563463][ T7409] [ 152.564485][ T7409] dump_stack_lvl+0x16c/0x1f0 [ 152.566103][ T7409] should_fail_ex+0x497/0x5b0 [ 152.567736][ T7409] _copy_from_user+0x30/0xf0 [ 152.569318][ T7409] get_compat_msghdr+0xa8/0x170 [ 152.570988][ T7409] ? __pfx_get_compat_msghdr+0x10/0x10 [ 152.572851][ T7409] ? __pfx___lock_acquire+0x10/0x10 [ 152.574510][ T7409] ___sys_sendmsg+0x1b0/0x1e0 [ 152.575787][ T7409] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.577198][ T7409] ? lock_acquire+0x2f/0xb0 [ 152.578411][ T7409] ? __fget_files+0x40/0x3f0 [ 152.579677][ T7409] ? fdget+0x176/0x210 [ 152.580781][ T7409] __sys_sendmmsg+0x2a5/0x450 [ 152.582046][ T7409] ? __pfx___sys_sendmmsg+0x10/0x10 [ 152.583420][ T7409] ? vfs_write+0x14d/0x1140 [ 152.584914][ T7409] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 152.586842][ T7409] ? fput+0x30/0x390 [ 152.587902][ T7409] ? ksys_write+0x1ad/0x260 [ 152.589125][ T7409] ? __pfx_ksys_write+0x10/0x10 [ 152.590419][ T7409] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 152.591934][ T7409] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 152.593658][ T7409] __do_fast_syscall_32+0x73/0x120 [ 152.595022][ T7409] do_fast_syscall_32+0x32/0x80 [ 152.596331][ T7409] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 152.598115][ T7409] RIP: 0023:0xf748e579 [ 152.599211][ T7409] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 152.604296][ T7409] RSP: 002b:00000000f577656c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 152.606568][ T7409] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020001900 [ 152.608665][ T7409] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 152.610778][ T7409] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 152.612886][ T7409] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 152.614972][ T7409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 152.617075][ T7409] [ 153.264156][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.511'. [ 153.637793][ T5451] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 153.917848][ T5451] usb 8-1: device descriptor read/64, error -71 [ 154.157807][ T5451] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 154.288026][ T5451] usb 8-1: device descriptor read/64, error -71 [ 154.400861][ T5451] usb usb8-port1: attempt power cycle [ 154.724054][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 154.724072][ T40] audit: type=1326 audit(1728397006.907:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.0.519" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x0 [ 154.757802][ T5451] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 154.778372][ T5451] usb 8-1: device descriptor read/8, error -71 [ 155.027748][ T5451] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 155.048183][ T5451] usb 8-1: device descriptor read/8, error -71 [ 155.158930][ T5451] usb usb8-port1: unable to enumerate USB device [ 155.401305][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'. [ 155.456820][ T7458] FAULT_INJECTION: forcing a failure. [ 155.456820][ T7458] name failslab, interval 1, probability 0, space 0, times 0 [ 155.462805][ T7458] CPU: 3 UID: 0 PID: 7458 Comm: syz.2.521 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 155.467367][ T7458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 155.471312][ T7458] Call Trace: [ 155.472429][ T7458] [ 155.473391][ T7458] dump_stack_lvl+0x16c/0x1f0 [ 155.474946][ T7458] should_fail_ex+0x497/0x5b0 [ 155.476515][ T7458] ? fs_reclaim_acquire+0xae/0x160 [ 155.478203][ T7458] should_failslab+0xc2/0x120 [ 155.479758][ T7458] kmem_cache_alloc_node_noprof+0x71/0x310 [ 155.481664][ T7458] ? alloc_vmap_area+0xdc8/0x2a70 [ 155.483287][ T7458] alloc_vmap_area+0xdc8/0x2a70 [ 155.484899][ T7458] ? __pfx_alloc_vmap_area+0x10/0x10 [ 155.486618][ T7458] __get_vm_area_node+0x17e/0x2d0 [ 155.488273][ T7458] __vmalloc_node_range_noprof+0x26a/0x15a0 [ 155.490168][ T7458] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 155.491970][ T7458] ? hlock_class+0x4e/0x130 [ 155.493437][ T7458] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 155.495219][ T7458] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 155.497246][ T7458] ? __pfx___lock_acquire+0x10/0x10 [ 155.499081][ T7458] ? __pfx_aa_get_newest_label+0x10/0x10 [ 155.500912][ T7458] ? __pfx___lock_acquire+0x10/0x10 [ 155.502615][ T7458] ? __pfx_mark_lock+0x10/0x10 [ 155.504205][ T7458] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 155.506047][ T7458] __vmalloc_noprof+0x6d/0x90 [ 155.507625][ T7458] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 155.509435][ T7458] bpf_prog_alloc_no_stats+0x54/0x5e0 [ 155.511193][ T7458] ? security_capable+0x7e/0x260 [ 155.512835][ T7458] bpf_prog_alloc+0x3b/0x230 [ 155.514340][ T7458] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 155.516264][ T7458] bpf_prog_load+0x1758/0x2670 [ 155.517842][ T7458] ? __pfx_bpf_prog_load+0x10/0x10 [ 155.519625][ T7458] ? find_held_lock+0x2d/0x110 [ 155.521191][ T7458] __sys_bpf+0x4c8c/0x5780 [ 155.522655][ T7458] ? ksys_write+0x21e/0x260 [ 155.524140][ T7458] ? __pfx___sys_bpf+0x10/0x10 [ 155.525729][ T7458] ? vfs_write+0x14d/0x1140 [ 155.527221][ T7458] ? __mutex_unlock_slowpath+0x164/0x650 [ 155.529062][ T7458] ? fput+0x30/0x390 [ 155.530357][ T7458] ? ksys_write+0x1ad/0x260 [ 155.531910][ T7458] ? __pfx_ksys_write+0x10/0x10 [ 155.533513][ T7458] __ia32_sys_bpf+0x76/0xe0 [ 155.535008][ T7458] __do_fast_syscall_32+0x73/0x120 [ 155.536679][ T7458] do_fast_syscall_32+0x32/0x80 [ 155.538253][ T7458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.540421][ T7458] RIP: 0023:0xf741e579 [ 155.541841][ T7458] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 155.548498][ T7458] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 155.551520][ T7458] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000440 [ 155.554266][ T7458] RDX: 0000000000000070 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.557008][ T7458] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.559744][ T7458] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 155.562452][ T7458] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.565218][ T7458] [ 156.371875][ T7479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.529'. [ 156.403263][ T7481] FAULT_INJECTION: forcing a failure. [ 156.403263][ T7481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.406807][ T7481] CPU: 1 UID: 0 PID: 7481 Comm: syz.3.530 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 156.409596][ T7481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 156.412397][ T7481] Call Trace: [ 156.413283][ T7481] [ 156.414180][ T7481] dump_stack_lvl+0x16c/0x1f0 [ 156.415435][ T7481] should_fail_ex+0x497/0x5b0 [ 156.416714][ T7481] _copy_from_user+0x30/0xf0 [ 156.418183][ T7481] move_addr_to_kernel+0x68/0x160 [ 156.420074][ T7481] __get_compat_msghdr+0x3f1/0x4d0 [ 156.422072][ T7481] get_compat_msghdr+0xd3/0x170 [ 156.423898][ T7481] ? __pfx_get_compat_msghdr+0x10/0x10 [ 156.425963][ T7481] ? __pfx___lock_acquire+0x10/0x10 [ 156.427547][ T7481] ___sys_sendmsg+0x1b0/0x1e0 [ 156.429313][ T7481] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.430834][ T7481] ? lock_acquire+0x2f/0xb0 [ 156.432231][ T7481] ? __fget_files+0x40/0x3f0 [ 156.433790][ T7481] ? fdget+0x176/0x210 [ 156.435131][ T7481] __sys_sendmmsg+0x2a5/0x450 [ 156.436659][ T7481] ? __pfx___sys_sendmmsg+0x10/0x10 [ 156.438432][ T7481] ? vfs_write+0x14d/0x1140 [ 156.440168][ T7481] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 156.442280][ T7481] ? fput+0x30/0x390 [ 156.443375][ T7481] ? ksys_write+0x1ad/0x260 [ 156.444927][ T7481] ? __pfx_ksys_write+0x10/0x10 [ 156.446304][ T7481] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 156.448052][ T7481] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 156.449984][ T7481] __do_fast_syscall_32+0x73/0x120 [ 156.451738][ T7481] do_fast_syscall_32+0x32/0x80 [ 156.453178][ T7481] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 156.455065][ T7481] RIP: 0023:0xf748e579 [ 156.456221][ T7481] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 156.462706][ T7481] RSP: 002b:00000000f577656c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 156.465424][ T7481] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020001900 [ 156.467992][ T7481] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.470631][ T7481] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 156.472873][ T7481] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 156.475296][ T7481] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 156.478104][ T7481] [ 156.612832][ T40] audit: type=1804 audit(1728397008.797:105): pid=7482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.528" name="/newroot/125/file0/file0" dev="9p" ino=35922670 res=1 errno=0 [ 156.758825][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.535'. [ 156.761769][ T7497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.535'. [ 156.777919][ T40] audit: type=1326 audit(1728397008.947:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7492 comm="syz.0.534" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x0 [ 156.791014][ T7497] can0: slcan on ttyS3. [ 157.869590][ T7493] can0 (unregistered): slcan off ttyS3. [ 158.001363][ T7528] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿ [ 160.445714][ T7542] netlink: 156 bytes leftover after parsing attributes in process `syz.1.544'. [ 160.448408][ T7542] netlink: 156 bytes leftover after parsing attributes in process `syz.1.544'. [ 160.617734][ T40] audit: type=1326 audit(1728397012.797:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.2.547" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x0 [ 161.244688][ T7557] netlink: 'syz.3.548': attribute type 3 has an invalid length. [ 161.247574][ T7557] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.548'. [ 161.601884][ T7564] FAULT_INJECTION: forcing a failure. [ 161.601884][ T7564] name failslab, interval 1, probability 0, space 0, times 0 [ 161.606543][ T7564] CPU: 1 UID: 0 PID: 7564 Comm: syz.0.550 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 161.610344][ T7564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.613833][ T7564] Call Trace: [ 161.615053][ T7564] [ 161.616127][ T7564] dump_stack_lvl+0x16c/0x1f0 [ 161.617847][ T7564] should_fail_ex+0x497/0x5b0 [ 161.619593][ T7564] ? fs_reclaim_acquire+0xae/0x160 [ 161.621531][ T7564] should_failslab+0xc2/0x120 [ 161.623171][ T7564] kmem_cache_alloc_node_noprof+0x71/0x310 [ 161.625280][ T7564] ? __alloc_skb+0x2b3/0x380 [ 161.626999][ T7564] __alloc_skb+0x2b3/0x380 [ 161.628647][ T7564] ? __pfx___alloc_skb+0x10/0x10 [ 161.630448][ T7564] ? hlock_class+0x4e/0x130 [ 161.632344][ T7564] ? mark_lock+0xb5/0xc60 [ 161.633825][ T7564] ? print_usage_bug.part.0+0x540/0x560 [ 161.635746][ T7564] ? __pfx_mark_lock+0x10/0x10 [ 161.637468][ T7564] alloc_skb_with_frags+0xe4/0x850 [ 161.638882][ T7564] sock_alloc_send_pskb+0x7f1/0x980 [ 161.640240][ T7564] ? __lock_acquire+0xbdd/0x3ce0 [ 161.641514][ T7564] ? __lock_acquire+0xbdd/0x3ce0 [ 161.642785][ T7564] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 161.644267][ T7564] ? __pfx___lock_acquire+0x10/0x10 [ 161.645791][ T7564] __ip6_append_data.isra.0+0x2a33/0x4540 [ 161.647225][ T7564] ? __pfx_udplite_getfrag+0x10/0x10 [ 161.648652][ T7564] ? __pfx___ip6_append_data.isra.0+0x10/0x10 [ 161.650237][ T7564] ? ip6_mtu+0x231/0x4a0 [ 161.651356][ T7564] ? ip6_setup_cork+0xc1b/0x1360 [ 161.652649][ T7564] ip6_make_skb+0x30b/0x4e0 [ 161.653847][ T7564] ? __pfx_udplite_getfrag+0x10/0x10 [ 161.655292][ T7564] ? __pfx_ip6_make_skb+0x10/0x10 [ 161.657064][ T7564] ? find_held_lock+0x2d/0x110 [ 161.658591][ T7564] ? udpv6_sendmsg+0x2500/0x3030 [ 161.660150][ T7564] udpv6_sendmsg+0x2500/0x3030 [ 161.661784][ T7564] ? __pfx_udplite_getfrag+0x10/0x10 [ 161.663623][ T7564] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 161.665407][ T7564] ? mark_held_locks+0x9f/0xe0 [ 161.667129][ T7564] ? __pfx___lock_acquire+0x10/0x10 [ 161.668885][ T7564] ? release_sock+0x21/0x220 [ 161.670479][ T7564] ? reacquire_held_locks+0x20b/0x4c0 [ 161.672339][ T7564] ? find_held_lock+0x59/0x110 [ 161.674026][ T7564] ? find_held_lock+0x2d/0x110 [ 161.675756][ T7564] ? __local_bh_enable_ip+0xa4/0x120 [ 161.677610][ T7564] ? lockdep_hardirqs_on+0x7c/0x110 [ 161.679379][ T7564] ? inet_autobind+0x145/0x1a0 [ 161.681113][ T7564] ? __local_bh_enable_ip+0xa4/0x120 [ 161.682967][ T7564] ? inet_autobind+0x14a/0x1a0 [ 161.684682][ T7564] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 161.686505][ T7564] ? inet6_sendmsg+0x105/0x140 [ 161.688140][ T7564] inet6_sendmsg+0x105/0x140 [ 161.689695][ T7564] ____sys_sendmsg+0x649/0xb40 [ 161.691343][ T7564] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.693150][ T7564] ? get_compat_msghdr+0x11b/0x170 [ 161.694950][ T7564] ? __pfx___lock_acquire+0x10/0x10 [ 161.696745][ T7564] ___sys_sendmsg+0x135/0x1e0 [ 161.698397][ T7564] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.699827][ T7564] ? lock_acquire+0x2f/0xb0 [ 161.701013][ T7564] ? __fget_files+0x40/0x3f0 [ 161.702203][ T7564] ? fdget+0x176/0x210 [ 161.703256][ T7564] __sys_sendmmsg+0x2a5/0x450 [ 161.704521][ T7564] ? __pfx___sys_sendmmsg+0x10/0x10 [ 161.705969][ T7564] ? vfs_write+0x14d/0x1140 [ 161.707145][ T7564] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 161.708705][ T7564] ? fput+0x30/0x390 [ 161.709728][ T7564] ? ksys_write+0x1ad/0x260 [ 161.710806][ T7564] ? __pfx_ksys_write+0x10/0x10 [ 161.712014][ T7564] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 161.713493][ T7564] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 161.715233][ T7564] __do_fast_syscall_32+0x73/0x120 [ 161.717094][ T7564] do_fast_syscall_32+0x32/0x80 [ 161.718830][ T7564] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.721136][ T7564] RIP: 0023:0xf73ce579 [ 161.722813][ T7564] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 161.729431][ T7564] RSP: 002b:00000000f56b656c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 161.732317][ T7564] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020001900 [ 161.735134][ T7564] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 161.737951][ T7564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.740811][ T7564] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 161.743668][ T7564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.746505][ T7564] [ 162.722709][ T7583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.556'. [ 162.725556][ T7583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.747758][ T7583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.820213][ T7583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.824051][ T7583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.100378][ T40] audit: type=1326 audit(1728397015.287:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7586 comm="syz.1.557" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x0 [ 164.045998][ T7603] dccp_v6_rcv: dropped packet with invalid checksum [ 164.916383][ T40] audit: type=1326 audit(1728397017.097:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.3.565" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x0 [ 164.957796][ T4779] Bluetooth: hci2: command 0x0406 tx timeout [ 164.959582][ T5355] Bluetooth: hci1: command 0x0406 tx timeout [ 165.962056][ T7634] syzkaller1: entered promiscuous mode [ 165.963987][ T7634] syzkaller1: entered allmulticast mode [ 166.060557][ T7637] netlink: 'syz.0.570': attribute type 10 has an invalid length. [ 166.069497][ T7637] batman_adv: batadv0: Adding interface: team0 [ 166.071636][ T7637] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.081086][ T7637] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 167.887864][ T5384] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 168.038520][ T5384] usb 8-1: device descriptor read/64, error -71 [ 168.278006][ T5384] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 168.977818][ T5384] usb 8-1: device descriptor read/64, error -71 [ 169.098055][ T5384] usb usb8-port1: attempt power cycle [ 169.437889][ T5384] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 169.458457][ T5384] usb 8-1: device descriptor read/8, error -71 [ 169.697814][ T5384] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 169.722207][ T5384] usb 8-1: device descriptor read/8, error -71 [ 169.833142][ T5384] usb usb8-port1: unable to enumerate USB device [ 172.101966][ T7718] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 172.109000][ T7718] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 172.149229][ T7718] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 172.160411][ T7718] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 172.167222][ T7718] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 172.177270][ T7718] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 172.185198][ T7718] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 172.205601][ T7718] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 173.124694][ T40] audit: type=1326 audit(1728397025.277:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7728 comm="syz.0.598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 173.135765][ T40] audit: type=1326 audit(1728397025.287:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7728 comm="syz.0.598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 174.108988][ T7749] FAULT_INJECTION: forcing a failure. [ 174.108988][ T7749] name failslab, interval 1, probability 0, space 0, times 0 [ 174.113219][ T7749] CPU: 2 UID: 0 PID: 7749 Comm: syz.1.603 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 174.116822][ T7749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 174.120481][ T7749] Call Trace: [ 174.121647][ T7749] [ 174.122674][ T7749] dump_stack_lvl+0x16c/0x1f0 [ 174.124311][ T7749] should_fail_ex+0x497/0x5b0 [ 174.125977][ T7749] ? fs_reclaim_acquire+0xae/0x160 [ 174.127766][ T7749] should_failslab+0xc2/0x120 [ 174.129371][ T7749] kmem_cache_alloc_node_noprof+0x71/0x310 [ 174.131374][ T7749] ? alloc_vmap_area+0x636/0x2a70 [ 174.133123][ T7749] alloc_vmap_area+0x636/0x2a70 [ 174.134800][ T7749] ? __pfx_alloc_vmap_area+0x10/0x10 [ 174.136709][ T7749] __get_vm_area_node+0x17e/0x2d0 [ 174.138473][ T7749] __vmalloc_node_range_noprof+0x26a/0x15a0 [ 174.140518][ T7749] ? translate_table+0x6b0/0x1f00 [ 174.142245][ T7749] ? __vmalloc_node_range_noprof+0x10d8/0x15a0 [ 174.144412][ T7749] ? translate_table+0x6b0/0x1f00 [ 174.146149][ T7749] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 174.148315][ T7749] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 174.150470][ T7749] ? __vmap_pages_range_noflush+0x17e/0x1d0 [ 174.152493][ T7749] ? translate_table+0x6b0/0x1f00 [ 174.154245][ T7749] vmalloc_node_noprof+0x6f/0x90 [ 174.155972][ T7749] ? translate_table+0x6b0/0x1f00 [ 174.157726][ T7749] translate_table+0x6b0/0x1f00 [ 174.159434][ T7749] ? do_replace_finish+0xe7/0x22b0 [ 174.161203][ T7749] ? hlock_class+0x4e/0x130 [ 174.162809][ T7749] ? __pfx_translate_table+0x10/0x10 [ 174.164650][ T7749] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 174.166835][ T7749] ? __pfx_mark_lock+0x10/0x10 [ 174.168504][ T7749] ? do_replace_finish+0xe7/0x22b0 [ 174.170269][ T7749] do_replace_finish+0x9a7/0x22b0 [ 174.172014][ T7749] ? __pfx_do_replace_finish+0x10/0x10 [ 174.173885][ T7749] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 174.175949][ T7749] ? vfree+0x33b/0x890 [ 174.177352][ T7749] ? compat_do_replace+0x353/0x750 [ 174.179136][ T7749] compat_do_replace+0x4c7/0x750 [ 174.180862][ T7749] ? __pfx_compat_do_replace+0x10/0x10 [ 174.182721][ T7749] ? aa_get_newest_label+0x376/0x680 [ 174.184550][ T7749] ? __pfx_aa_get_newest_label+0x10/0x10 [ 174.186495][ T7749] ? bpf_lsm_capable+0x9/0x10 [ 174.188139][ T7749] ? security_capable+0x7e/0x260 [ 174.189930][ T7749] do_ebt_set_ctl+0x4af/0x580 [ 174.191535][ T7749] ? __pfx___mutex_lock+0x10/0x10 [ 174.193274][ T7749] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 174.195074][ T7749] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 174.196933][ T7749] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 174.199015][ T7749] nf_setsockopt+0x8a/0xf0 [ 174.200594][ T7749] ip_setsockopt+0xcb/0xf0 [ 174.202141][ T7749] udp_setsockopt+0x7d/0xd0 [ 174.203719][ T7749] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 174.205726][ T7749] do_sock_setsockopt+0x222/0x480 [ 174.207470][ T7749] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 174.209358][ T7749] ? fdget+0x176/0x210 [ 174.210755][ T7749] __sys_setsockopt+0x1a4/0x270 [ 174.212435][ T7749] ? __pfx___sys_setsockopt+0x10/0x10 [ 174.214274][ T7749] ? fput+0x30/0x390 [ 174.215639][ T7749] ? ksys_write+0x1ad/0x260 [ 174.217219][ T7749] ? __pfx_ksys_write+0x10/0x10 [ 174.218901][ T7749] __ia32_sys_setsockopt+0xbc/0x160 [ 174.220729][ T7749] ? lockdep_hardirqs_on+0x7c/0x110 [ 174.222521][ T7749] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 174.224772][ T7749] __do_fast_syscall_32+0x73/0x120 [ 174.226539][ T7749] do_fast_syscall_32+0x32/0x80 [ 174.228223][ T7749] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.230397][ T7749] RIP: 0023:0xf7f47579 [ 174.231812][ T7749] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 174.238378][ T7749] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 174.241295][ T7749] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 174.244061][ T7749] RDX: 0000000000000080 RSI: 0000000020000000 RDI: 00000000000000e0 [ 174.246847][ T7749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 174.249576][ T7749] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 174.252330][ T7749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.255086][ T7749] [ 174.257915][ T5349] Bluetooth: hci1: command 0x0406 tx timeout [ 174.260104][ T5349] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.262229][ T5349] Bluetooth: hci2: command 0x0406 tx timeout [ 174.271296][ T7749] syz.1.603: vmalloc error: size 48, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 174.276068][ T7749] CPU: 2 UID: 0 PID: 7749 Comm: syz.1.603 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 174.279658][ T7749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 174.283213][ T7749] Call Trace: [ 174.284381][ T7749] [ 174.285408][ T7749] dump_stack_lvl+0x16c/0x1f0 [ 174.287039][ T7749] warn_alloc+0x24d/0x3a0 [ 174.288575][ T7749] ? __pfx_warn_alloc+0x10/0x10 [ 174.290262][ T7749] ? kfree+0x14f/0x4b0 [ 174.291690][ T7749] ? __get_vm_area_node+0x1bc/0x2d0 [ 174.293457][ T7749] __vmalloc_node_range_noprof+0xd27/0x15a0 [ 174.295472][ T7749] ? __vmalloc_node_range_noprof+0x10d8/0x15a0 [ 174.297580][ T7749] ? translate_table+0x6b0/0x1f00 [ 174.299345][ T7749] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 174.301576][ T7749] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 174.303762][ T7749] ? __vmap_pages_range_noflush+0x17e/0x1d0 [ 174.305786][ T7749] ? translate_table+0x6b0/0x1f00 [ 174.307548][ T7749] vmalloc_node_noprof+0x6f/0x90 [ 174.309240][ T7749] ? translate_table+0x6b0/0x1f00 [ 174.310971][ T7749] translate_table+0x6b0/0x1f00 [ 174.312707][ T7749] ? do_replace_finish+0xe7/0x22b0 [ 174.314484][ T7749] ? hlock_class+0x4e/0x130 [ 174.316129][ T7749] ? __pfx_translate_table+0x10/0x10 [ 174.317974][ T7749] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 174.320141][ T7749] ? __pfx_mark_lock+0x10/0x10 [ 174.321879][ T7749] ? do_replace_finish+0xe7/0x22b0 [ 174.323695][ T7749] do_replace_finish+0x9a7/0x22b0 [ 174.325475][ T7749] ? __pfx_do_replace_finish+0x10/0x10 [ 174.327344][ T7749] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 174.329405][ T7749] ? vfree+0x33b/0x890 [ 174.330849][ T7749] ? compat_do_replace+0x353/0x750 [ 174.332623][ T7749] compat_do_replace+0x4c7/0x750 [ 174.334292][ T7749] ? __pfx_compat_do_replace+0x10/0x10 [ 174.336149][ T7749] ? aa_get_newest_label+0x376/0x680 [ 174.337946][ T7749] ? __pfx_aa_get_newest_label+0x10/0x10 [ 174.339909][ T7749] ? bpf_lsm_capable+0x9/0x10 [ 174.341535][ T7749] ? security_capable+0x7e/0x260 [ 174.343246][ T7749] do_ebt_set_ctl+0x4af/0x580 [ 174.344918][ T7749] ? __pfx___mutex_lock+0x10/0x10 [ 174.346630][ T7749] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 174.348447][ T7749] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 174.350307][ T7749] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 174.352371][ T7749] nf_setsockopt+0x8a/0xf0 [ 174.353900][ T7749] ip_setsockopt+0xcb/0xf0 [ 174.355471][ T7749] udp_setsockopt+0x7d/0xd0 [ 174.357061][ T7749] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 174.359077][ T7749] do_sock_setsockopt+0x222/0x480 [ 174.360829][ T7749] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 174.362728][ T7749] ? fdget+0x176/0x210 [ 174.364145][ T7749] __sys_setsockopt+0x1a4/0x270 [ 174.365814][ T7749] ? __pfx___sys_setsockopt+0x10/0x10 [ 174.367645][ T7749] ? fput+0x30/0x390 [ 174.368987][ T7749] ? ksys_write+0x1ad/0x260 [ 174.370540][ T7749] ? __pfx_ksys_write+0x10/0x10 [ 174.372195][ T7749] __ia32_sys_setsockopt+0xbc/0x160 [ 174.373958][ T7749] ? lockdep_hardirqs_on+0x7c/0x110 [ 174.375726][ T7749] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 174.377934][ T7749] __do_fast_syscall_32+0x73/0x120 [ 174.379680][ T7749] do_fast_syscall_32+0x32/0x80 [ 174.381334][ T7749] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.383477][ T7749] RIP: 0023:0xf7f47579 [ 174.384889][ T7749] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 174.391446][ T7749] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 174.394333][ T7749] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 174.397033][ T7749] RDX: 0000000000000080 RSI: 0000000020000000 RDI: 00000000000000e0 [ 174.399788][ T7749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 174.402450][ T7749] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 174.405167][ T7749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.407886][ T7749] [ 174.424141][ T7749] Mem-Info: [ 174.425373][ T7749] active_anon:4988 inactive_anon:176 isolated_anon:0 [ 174.425373][ T7749] active_file:4945 inactive_file:42724 isolated_file:0 [ 174.425373][ T7749] unevictable:768 dirty:238 writeback:0 [ 174.425373][ T7749] slab_reclaimable:4829 slab_unreclaimable:52923 [ 174.425373][ T7749] mapped:21320 shmem:3833 pagetables:648 [ 174.425373][ T7749] sec_pagetables:316 bounce:0 [ 174.425373][ T7749] kernel_misc_reclaimable:0 [ 174.425373][ T7749] free:84353 free_pcp:1458 free_cma:0 [ 174.441535][ T7749] Node 0 active_anon:244kB inactive_anon:56kB active_file:16kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:5012kB dirty:12kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9660kB pagetables:1780kB sec_pagetables:1212kB all_unreclaimable? no [ 174.452213][ T7749] Node 1 active_anon:19828kB inactive_anon:528kB active_file:19764kB inactive_file:170896kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:80268kB dirty:940kB writeback:0kB shmem:13792kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:1520kB pagetables:812kB sec_pagetables:52kB all_unreclaimable? no [ 174.464765][ T7749] Node 0 DMA free:928kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:156kB local_pcp:8kB free_cma:0kB [ 174.474920][ T7749] lowmem_reserve[]: 0 273 0 0 0 [ 174.476871][ T7749] Node 0 DMA32 free:22512kB boost:0kB min:13904kB low:17380kB high:20856kB reserved_highatomic:4096KB active_anon:176kB inactive_anon:124kB active_file:12kB inactive_file:0kB unevictable:1536kB writepending:8kB present:1032196kB managed:306280kB mlocked:0kB bounce:0kB free_pcp:548kB local_pcp:172kB free_cma:0kB [ 174.488462][ T7749] lowmem_reserve[]: 0 0 0 0 0 [ 174.490318][ T7749] Node 1 DMA32 free:313796kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:19828kB inactive_anon:528kB active_file:19764kB inactive_file:170896kB unevictable:1536kB writepending:940kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:5336kB local_pcp:3188kB free_cma:0kB [ 174.501132][ T7749] lowmem_reserve[]: 0 0 0 0 0 [ 174.502933][ T7749] Node 0 DMA: 20*4kB (U) 1*8kB (U) 28*16kB (U) 13*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 952kB [ 174.520316][ T7749] Node 0 DMA32: 59*4kB (UMEH) 134*8kB (UMEH) 81*16kB (UMH) 48*32kB (UMEH) 45*64kB (UMEH) 33*128kB (UMEH) 12*256kB (MH) 8*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 20460kB [ 174.526647][ T7749] Node 1 DMA32: 119*4kB (U) 217*8kB (UME) 204*16kB (UME) 194*32kB (UME) 121*64kB (UME) 79*128kB (UME) 44*256kB (UM) 38*512kB (UME) 21*1024kB (UME) 3*2048kB (ME) 55*4096kB (UM) = 313188kB [ 174.534839][ T7749] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 174.538641][ T7749] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 174.541999][ T7749] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 174.545958][ T7749] Node 1 hugepages_total=5 hugepages_free=0 hugepages_surp=3 hugepages_size=2048kB [ 174.549900][ T7749] 51959 total pagecache pages [ 174.551742][ T7749] 855 pages in swap cache [ 174.553423][ T7749] Free swap = 110316kB [ 174.554974][ T7749] Total swap = 124996kB [ 174.556612][ T7749] 524155 pages RAM [ 174.558692][ T7749] 0 pages HighMem/MovableOnly [ 174.560564][ T7749] 206682 pages reserved [ 174.562168][ T7749] 0 pages cma reserved [ 174.720309][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.607'. [ 174.724480][ T7760] netlink: 28 bytes leftover after parsing attributes in process `syz.2.607'. [ 176.308805][ T5355] Bluetooth: hci1: command 0x0406 tx timeout [ 176.308843][ T5352] Bluetooth: hci3: command 0x0c1a tx timeout [ 176.312454][ T5349] Bluetooth: hci2: command 0x0406 tx timeout [ 176.318769][ T830] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 176.457749][ T830] usb 6-1: device descriptor read/64, error -71 [ 176.717714][ T830] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 176.847731][ T830] usb 6-1: device descriptor read/64, error -71 [ 176.959364][ T830] usb usb6-port1: attempt power cycle [ 177.307950][ T830] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 177.330345][ T830] usb 6-1: device descriptor read/8, error -71 [ 177.587780][ T830] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 177.608453][ T830] usb 6-1: device descriptor read/8, error -71 [ 177.720184][ T830] usb usb6-port1: unable to enumerate USB device [ 178.077721][ T830] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 178.271280][ T830] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 178.274377][ T830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.276485][ T830] usb 7-1: Product: syz [ 178.277585][ T830] usb 7-1: Manufacturer: syz [ 178.285224][ T830] usb 7-1: SerialNumber: syz [ 178.291004][ T830] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 178.354380][ T830] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 178.387780][ T5349] Bluetooth: hci3: command 0x0c1a tx timeout [ 178.401140][ T5349] Bluetooth: hci1: command 0x0406 tx timeout [ 178.781782][ T40] audit: type=1326 audit(1728397030.967:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.2.621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 178.787786][ T40] audit: type=1326 audit(1728397030.967:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.2.621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 178.793954][ T40] audit: type=1326 audit(1728397030.967:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.2.621" exe="/syz-executor" sig=0 arch=40000003 syscall=448 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 178.802765][ T40] audit: type=1326 audit(1728397030.967:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.2.621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 178.810492][ T40] audit: type=1326 audit(1728397030.967:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.2.621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 178.819167][ T40] audit: type=1326 audit(1728397030.967:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.2.621" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 178.826382][ T40] audit: type=1326 audit(1728397030.967:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.2.621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 178.834624][ T40] audit: type=1326 audit(1728397030.967:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.2.621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 178.843580][ T40] audit: type=1326 audit(1728397030.967:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.2.621" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 178.851246][ T40] audit: type=1326 audit(1728397030.977:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.2.621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 178.864322][ T5384] usb 7-1: USB disconnect, device number 9 [ 179.025518][ T830] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 179.030415][ T830] ath9k_htc: Failed to initialize the device [ 179.037363][ T5384] usb 7-1: ath9k_htc: USB layer deinitialized [ 179.349057][ T7829] FAULT_INJECTION: forcing a failure. [ 179.349057][ T7829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.353546][ T7829] CPU: 1 UID: 0 PID: 7829 Comm: syz.2.629 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 179.357208][ T7829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 179.361011][ T7829] Call Trace: [ 179.362213][ T7829] [ 179.363275][ T7829] dump_stack_lvl+0x16c/0x1f0 [ 179.364971][ T7829] should_fail_ex+0x497/0x5b0 [ 179.366551][ T7829] _copy_from_user+0x30/0xf0 [ 179.368192][ T7829] cmsghdr_from_user_compat_to_kern+0x4f0/0x7c0 [ 179.370315][ T7829] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 179.372626][ T7829] ? __import_iovec+0x1fd/0x6e0 [ 179.374065][ T7829] ____sys_sendmsg+0x43d/0xb40 [ 179.375330][ T7829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.376726][ T7829] ? get_compat_msghdr+0x11b/0x170 [ 179.378143][ T7829] ? __pfx___lock_acquire+0x10/0x10 [ 179.380012][ T7829] ___sys_sendmsg+0x135/0x1e0 [ 179.381685][ T7829] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.383544][ T7829] ? lock_acquire+0x2f/0xb0 [ 179.385147][ T7829] ? __fget_files+0x40/0x3f0 [ 179.386778][ T7829] ? __pfx___might_resched+0x10/0x10 [ 179.388647][ T7829] ? fdget+0x176/0x210 [ 179.390098][ T7829] __sys_sendmmsg+0x2a5/0x450 [ 179.391778][ T7829] ? __pfx___sys_sendmmsg+0x10/0x10 [ 179.393456][ T7829] ? vfs_write+0x14d/0x1140 [ 179.394649][ T7829] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 179.396580][ T7829] ? fput+0x30/0x390 [ 179.397981][ T7829] ? ksys_write+0x1ad/0x260 [ 179.399614][ T7829] ? __pfx_ksys_write+0x10/0x10 [ 179.401337][ T7829] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 179.403310][ T7829] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 179.405611][ T7829] __do_fast_syscall_32+0x73/0x120 [ 179.407420][ T7829] do_fast_syscall_32+0x32/0x80 [ 179.409143][ T7829] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 179.411355][ T7829] RIP: 0023:0xf741e579 [ 179.412810][ T7829] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 179.418409][ T7829] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 179.421350][ T7829] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020001900 [ 179.424107][ T7829] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.426866][ T7829] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 179.429658][ T7829] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 179.432291][ T7829] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 179.434574][ T7829] [ 180.830361][ T7850] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 180.832146][ T7850] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 180.847810][ T7850] vhci_hcd vhci_hcd.0: Device attached [ 180.852029][ T7850] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 180.854248][ T7850] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 180.857748][ T7850] vhci_hcd vhci_hcd.0: Device attached [ 180.860400][ T7856] usbip_core: unknown command [ 180.861706][ T7856] vhci_hcd: unknown pdu 0 [ 180.862991][ T7856] usbip_core: unknown command [ 180.864593][ T73] vhci_hcd: stop threads [ 180.865822][ T73] vhci_hcd: release socket [ 180.867068][ T73] vhci_hcd: disconnect device [ 180.884787][ T7854] vhci_hcd: connection closed [ 180.885190][ T12] vhci_hcd: stop threads [ 180.888075][ T12] vhci_hcd: release socket [ 180.889345][ T12] vhci_hcd: disconnect device [ 181.167836][ T5384] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 181.360548][ T5384] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 181.367933][ T5384] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 181.382264][ T5384] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 181.392208][ T5384] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.432332][ T5384] usb 8-1: rejected 1 configuration due to insufficient available bus power [ 181.436315][ T5384] usb 8-1: no configuration chosen from 1 choice [ 182.460227][ T7880] overlayfs: failed to resolve 'defcontext=root': -2 [ 182.982851][ T7893] raw_sendmsg: syz.2.646 forgot to set AF_INET. Fix it! [ 183.932260][ T35] usb 8-1: USB disconnect, device number 16 [ 184.041066][ T7914] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 184.043461][ T7914] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 184.045630][ T7914] vhci_hcd vhci_hcd.0: Device attached [ 184.048958][ T7914] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 184.050779][ T7914] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 184.057885][ T7914] vhci_hcd vhci_hcd.0: Device attached [ 184.061127][ T7920] usbip_core: unknown command [ 184.064105][ T7920] vhci_hcd: unknown pdu 0 [ 184.065736][ T7920] usbip_core: unknown command [ 184.090034][ T73] vhci_hcd: stop threads [ 184.091653][ T73] vhci_hcd: release socket [ 184.093266][ T73] vhci_hcd: disconnect device [ 184.095769][ T7918] vhci_hcd: connection closed [ 184.105228][ T73] vhci_hcd: stop threads [ 184.114745][ T73] vhci_hcd: release socket [ 184.118629][ T73] vhci_hcd: disconnect device [ 184.321185][ T7872] process 'memfd:£Ÿn´dRi5¬Îáˆ[@8×Î 9I“=µç\'LæÒŽ¼)JtTDqϺå1õ È>É\…L¿Ï‘ßMó^T*' started with executable stack [ 184.371381][ T7929] FAULT_INJECTION: forcing a failure. [ 184.371381][ T7929] name failslab, interval 1, probability 0, space 0, times 0 [ 184.374776][ T7929] CPU: 1 UID: 0 PID: 7929 Comm: syz.1.655 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 184.377579][ T7929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 184.381308][ T7929] Call Trace: [ 184.382471][ T7929] [ 184.383514][ T7929] dump_stack_lvl+0x16c/0x1f0 [ 184.385149][ T7929] should_fail_ex+0x497/0x5b0 [ 184.386791][ T7929] ? fs_reclaim_acquire+0xae/0x160 [ 184.388502][ T7929] should_failslab+0xc2/0x120 [ 184.389730][ T7929] kmem_cache_alloc_node_noprof+0x71/0x310 [ 184.391251][ T7929] ? alloc_vmap_area+0x636/0x2a70 [ 184.392572][ T7929] alloc_vmap_area+0x636/0x2a70 [ 184.393846][ T7929] ? __pfx_alloc_vmap_area+0x10/0x10 [ 184.395223][ T7929] __get_vm_area_node+0x17e/0x2d0 [ 184.396541][ T7929] __vmalloc_node_range_noprof+0x26a/0x15a0 [ 184.398196][ T7929] ? bpf_check+0x201/0xc7c0 [ 184.399412][ T7929] ? find_held_lock+0x2d/0x110 [ 184.400708][ T7929] ? rcu_read_unlock+0x17/0x60 [ 184.402003][ T7929] ? __pfx_lock_release+0x10/0x10 [ 184.403338][ T7929] ? bpf_check+0x201/0xc7c0 [ 184.404536][ T7929] ? __lruvec_stat_mod_folio+0xa4/0x370 [ 184.405975][ T7929] ? lock_acquire+0x2f/0xb0 [ 184.407164][ T7929] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 184.409117][ T7929] ? ___kmalloc_large_node+0x166/0x1b0 [ 184.410777][ T7929] ? lockdep_hardirqs_on+0x7c/0x110 [ 184.412383][ T7929] ? bpf_check+0x201/0xc7c0 [ 184.413777][ T7929] vzalloc_noprof+0x6b/0x90 [ 184.415176][ T7929] ? bpf_check+0x201/0xc7c0 [ 184.416578][ T7929] bpf_check+0x201/0xc7c0 [ 184.417911][ T7929] ? __pfx_bpf_check+0x10/0x10 [ 184.419400][ T7929] ? find_held_lock+0x2d/0x110 [ 184.420870][ T7929] ? ktime_get_with_offset+0x13a/0x240 [ 184.422534][ T7929] ? trace_lock_acquire+0x14a/0x1d0 [ 184.424134][ T7929] ? ktime_get_with_offset+0x13a/0x240 [ 184.425836][ T7929] ? timekeeping_debug_get_ns+0x3e0/0x5b0 [ 184.427581][ T7929] ? lockdep_hardirqs_on+0x7c/0x110 [ 184.429201][ T7929] ? read_tsc+0x9/0x20 [ 184.430458][ T7929] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 184.432212][ T7929] ? bpf_obj_name_cpy+0x156/0x1b0 [ 184.433753][ T7929] bpf_prog_load+0xe3f/0x2670 [ 184.435206][ T7929] ? __pfx_bpf_prog_load+0x10/0x10 [ 184.436778][ T7929] ? find_held_lock+0x2d/0x110 [ 184.438267][ T7929] __sys_bpf+0x4c8c/0x5780 [ 184.439670][ T7929] ? ksys_write+0x21e/0x260 [ 184.441070][ T7929] ? __pfx___sys_bpf+0x10/0x10 [ 184.442552][ T7929] ? vfs_write+0x14d/0x1140 [ 184.443968][ T7929] ? __mutex_unlock_slowpath+0x164/0x650 [ 184.445693][ T7929] ? fput+0x30/0x390 [ 184.446906][ T7929] ? ksys_write+0x1ad/0x260 [ 184.448318][ T7929] ? __pfx_ksys_write+0x10/0x10 [ 184.449812][ T7929] __ia32_sys_bpf+0x76/0xe0 [ 184.451218][ T7929] __do_fast_syscall_32+0x73/0x120 [ 184.452789][ T7929] do_fast_syscall_32+0x32/0x80 [ 184.454162][ T7929] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.456050][ T7929] RIP: 0023:0xf7f47579 [ 184.457205][ T7929] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 184.462765][ T7929] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 184.465314][ T7929] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000440 [ 184.467724][ T7929] RDX: 0000000000000070 RSI: 0000000000000000 RDI: 0000000000000000 [ 184.470483][ T7929] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 184.472918][ T7929] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 184.475349][ T7929] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.477793][ T7929] [ 184.507843][ T7929] syz.1.655: vmalloc error: size 432, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 184.512180][ T7929] CPU: 1 UID: 0 PID: 7929 Comm: syz.1.655 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 184.514924][ T7929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 184.517742][ T7929] Call Trace: [ 184.518957][ T7929] [ 184.519967][ T7929] dump_stack_lvl+0x16c/0x1f0 [ 184.521243][ T7929] warn_alloc+0x24d/0x3a0 [ 184.522278][ T7929] ? __pfx_warn_alloc+0x10/0x10 [ 184.523456][ T7929] ? kfree+0x14f/0x4b0 [ 184.524527][ T7929] ? __get_vm_area_node+0x1bc/0x2d0 [ 184.525891][ T7929] __vmalloc_node_range_noprof+0xd27/0x15a0 [ 184.527549][ T7929] ? find_held_lock+0x2d/0x110 [ 184.529315][ T7929] ? rcu_read_unlock+0x17/0x60 [ 184.531053][ T7929] ? __pfx_lock_release+0x10/0x10 [ 184.532881][ T7929] ? bpf_check+0x201/0xc7c0 [ 184.534525][ T7929] ? __lruvec_stat_mod_folio+0xa4/0x370 [ 184.536520][ T7929] ? lock_acquire+0x2f/0xb0 [ 184.538180][ T7929] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 184.540502][ T7929] ? ___kmalloc_large_node+0x166/0x1b0 [ 184.542473][ T7929] ? lockdep_hardirqs_on+0x7c/0x110 [ 184.544380][ T7929] ? bpf_check+0x201/0xc7c0 [ 184.546030][ T7929] vzalloc_noprof+0x6b/0x90 [ 184.547698][ T7929] ? bpf_check+0x201/0xc7c0 [ 184.549349][ T7929] bpf_check+0x201/0xc7c0 [ 184.550947][ T7929] ? __pfx_bpf_check+0x10/0x10 [ 184.552674][ T7929] ? find_held_lock+0x2d/0x110 [ 184.554368][ T7929] ? ktime_get_with_offset+0x13a/0x240 [ 184.556393][ T7929] ? trace_lock_acquire+0x14a/0x1d0 [ 184.558276][ T7929] ? ktime_get_with_offset+0x13a/0x240 [ 184.560177][ T7929] ? timekeeping_debug_get_ns+0x3e0/0x5b0 [ 184.562117][ T7929] ? lockdep_hardirqs_on+0x7c/0x110 [ 184.563941][ T7929] ? read_tsc+0x9/0x20 [ 184.565340][ T7929] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 184.567283][ T7929] ? bpf_obj_name_cpy+0x156/0x1b0 [ 184.569021][ T7929] bpf_prog_load+0xe3f/0x2670 [ 184.570745][ T7929] ? __pfx_bpf_prog_load+0x10/0x10 [ 184.572618][ T7929] ? find_held_lock+0x2d/0x110 [ 184.574397][ T7929] __sys_bpf+0x4c8c/0x5780 [ 184.576042][ T7929] ? ksys_write+0x21e/0x260 [ 184.577682][ T7929] ? __pfx___sys_bpf+0x10/0x10 [ 184.579375][ T7929] ? vfs_write+0x14d/0x1140 [ 184.581020][ T7929] ? __mutex_unlock_slowpath+0x164/0x650 [ 184.583045][ T7929] ? fput+0x30/0x390 [ 184.584475][ T7929] ? ksys_write+0x1ad/0x260 [ 184.586124][ T7929] ? __pfx_ksys_write+0x10/0x10 [ 184.587909][ T7929] __ia32_sys_bpf+0x76/0xe0 [ 184.589563][ T7929] __do_fast_syscall_32+0x73/0x120 [ 184.591438][ T7929] do_fast_syscall_32+0x32/0x80 [ 184.593199][ T7929] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.595490][ T7929] RIP: 0023:0xf7f47579 [ 184.596936][ T7929] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 184.603708][ T7929] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 184.606673][ T7929] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000440 [ 184.609484][ T7929] RDX: 0000000000000070 RSI: 0000000000000000 RDI: 0000000000000000 [ 184.612304][ T7929] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 184.615116][ T7929] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 184.617924][ T7929] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.620777][ T7929] [ 184.630217][ T7929] Mem-Info: [ 184.631216][ T7929] active_anon:5983 inactive_anon:186 isolated_anon:0 [ 184.631216][ T7929] active_file:4963 inactive_file:42762 isolated_file:0 [ 184.631216][ T7929] unevictable:767 dirty:296 writeback:0 [ 184.631216][ T7929] slab_reclaimable:4826 slab_unreclaimable:52579 [ 184.631216][ T7929] mapped:19529 shmem:4807 pagetables:610 [ 184.631216][ T7929] sec_pagetables:316 bounce:0 [ 184.631216][ T7929] kernel_misc_reclaimable:0 [ 184.631216][ T7929] free:80432 free_pcp:7705 free_cma:0 [ 184.646274][ T7929] Node 0 active_anon:228kB inactive_anon:252kB active_file:0kB inactive_file:16kB unevictable:1532kB isolated(anon):0kB isolated(file):0kB mapped:5020kB dirty:12kB writeback:0kB shmem:1552kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9776kB pagetables:1796kB sec_pagetables:1212kB all_unreclaimable? no [ 184.655141][ T7929] Node 1 active_anon:23772kB inactive_anon:524kB active_file:19852kB inactive_file:171032kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:74796kB dirty:1172kB writeback:0kB shmem:17676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:1468kB pagetables:644kB sec_pagetables:52kB all_unreclaimable? no [ 184.665259][ T7929] Node 0 DMA free:924kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:112kB local_pcp:8kB free_cma:0kB [ 184.673127][ T7929] lowmem_reserve[]: 0 273 0 0 0 [ 184.674458][ T7929] Node 0 DMA32 free:19088kB boost:0kB min:13904kB low:17380kB high:20856kB reserved_highatomic:0KB active_anon:420kB inactive_anon:444kB active_file:0kB inactive_file:12kB unevictable:1532kB writepending:8kB present:1032196kB managed:306280kB mlocked:0kB bounce:0kB free_pcp:1156kB local_pcp:432kB free_cma:0kB [ 184.685628][ T7929] lowmem_reserve[]: 0 0 0 0 0 [ 184.687420][ T7929] Node 1 DMA32 free:314912kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:21072kB inactive_anon:524kB active_file:19852kB inactive_file:171032kB unevictable:1536kB writepending:1172kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:19248kB local_pcp:32kB free_cma:0kB [ 184.702945][ T7929] lowmem_reserve[]: 0 0 0 0 0 [ 184.704660][ T7929] Node 0 DMA: 4*4kB (U) 4*8kB (U) 27*16kB (U) 11*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 832kB [ 184.709608][ T7929] Node 0 DMA32: 217*4kB (UME) 193*8kB (UME) 120*16kB (UM) 70*32kB (UME) 39*64kB (UME) 27*128kB (UME) 13*256kB (UM) 4*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 19948kB [ 184.715663][ T7929] Node 1 DMA32: 60*4kB (UME) 12*8kB (UME) 11*16kB (UME) 73*32kB (UME) 76*64kB (UME) 52*128kB (UME) 60*256kB (UM) 39*512kB (UME) 25*1024kB (UME) 5*2048kB (UME) 56*4096kB (UM) = 314912kB [ 184.722345][ T7935] usb usb8: check_ctrlrecip: process 7935 (syz.2.657) requesting ep 01 but needs 81 [ 184.724862][ T7929] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 184.724881][ T7929] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.724896][ T7929] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 184.727508][ T7935] usb usb8: usbfs: process 7935 (syz.2.657) did not claim interface 0 before use [ 184.736933][ T7929] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.740570][ T7929] 52414 total pagecache pages [ 184.742271][ T7929] 871 pages in swap cache [ 184.747084][ T7929] Free swap = 110176kB [ 184.749681][ T7929] Total swap = 124996kB [ 184.751210][ T7929] 524155 pages RAM [ 184.752987][ T7929] 0 pages HighMem/MovableOnly [ 184.754705][ T7929] 206682 pages reserved [ 184.756220][ T7929] 0 pages cma reserved [ 184.850155][ T7938] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.658'. [ 185.119401][ T7938] fuse: Bad value for 'group_id' [ 185.121349][ T7938] fuse: Bad value for 'group_id' [ 185.337675][ T5384] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 185.477689][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 185.477708][ T40] audit: type=1326 audit(1728397037.657:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.0.662" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x0 [ 185.511262][ T5384] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 185.514480][ T5384] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 185.517303][ T5384] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 185.520552][ T5384] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.525647][ T5384] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 185.528867][ T5384] usb 6-1: no configuration chosen from 1 choice [ 186.192440][ T7962] netlink: 'syz.2.666': attribute type 4 has an invalid length. [ 186.290764][ T7970] netlink: 20 bytes leftover after parsing attributes in process `syz.2.670'. [ 186.317770][ T40] audit: type=1326 audit(1728397038.497:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7971 comm="syz.2.671" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x0 [ 187.326037][ T7988] FAULT_INJECTION: forcing a failure. [ 187.326037][ T7988] name failslab, interval 1, probability 0, space 0, times 0 [ 187.331401][ T7988] CPU: 1 UID: 0 PID: 7988 Comm: syz.0.676 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 187.334979][ T7988] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 187.338690][ T7988] Call Trace: [ 187.339624][ T7988] [ 187.340588][ T7988] dump_stack_lvl+0x16c/0x1f0 [ 187.342229][ T7988] should_fail_ex+0x497/0x5b0 [ 187.343894][ T7988] ? fs_reclaim_acquire+0xae/0x160 [ 187.345696][ T7988] should_failslab+0xc2/0x120 [ 187.347368][ T7988] __kmalloc_node_noprof+0xd1/0x440 [ 187.349140][ T7988] ? __vmalloc_node_range_noprof+0x3d8/0x15a0 [ 187.351244][ T7988] __vmalloc_node_range_noprof+0x3d8/0x15a0 [ 187.353323][ T7988] ? find_held_lock+0x2d/0x110 [ 187.355024][ T7988] ? __pfx_lock_release+0x10/0x10 [ 187.356798][ T7988] ? bpf_check+0x201/0xc7c0 [ 187.358395][ T7988] ? __lruvec_stat_mod_folio+0xa4/0x370 [ 187.360313][ T7988] ? lock_acquire+0x2f/0xb0 [ 187.361903][ T7988] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 187.364104][ T7988] ? ___kmalloc_large_node+0x166/0x1b0 [ 187.366017][ T7988] ? lockdep_hardirqs_on+0x7c/0x110 [ 187.367844][ T7988] ? bpf_check+0x201/0xc7c0 [ 187.369412][ T7988] vzalloc_noprof+0x6b/0x90 [ 187.371015][ T7988] ? bpf_check+0x201/0xc7c0 [ 187.372621][ T7988] bpf_check+0x201/0xc7c0 [ 187.374145][ T7988] ? __pfx_bpf_check+0x10/0x10 [ 187.375824][ T7988] ? find_held_lock+0x2d/0x110 [ 187.377507][ T7988] ? ktime_get_with_offset+0x13a/0x240 [ 187.379352][ T7988] ? trace_lock_acquire+0x14a/0x1d0 [ 187.381145][ T7988] ? ktime_get_with_offset+0x13a/0x240 [ 187.383006][ T7988] ? timekeeping_debug_get_ns+0x3e0/0x5b0 [ 187.385015][ T7988] ? lockdep_hardirqs_on+0x7c/0x110 [ 187.386730][ T7988] ? read_tsc+0x9/0x20 [ 187.388178][ T7988] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 187.390110][ T7988] ? bpf_obj_name_cpy+0x156/0x1b0 [ 187.391845][ T7988] bpf_prog_load+0xe3f/0x2670 [ 187.393471][ T7988] ? __pfx_bpf_prog_load+0x10/0x10 [ 187.395218][ T7988] ? find_held_lock+0x2d/0x110 [ 187.396905][ T7988] __sys_bpf+0x4c8c/0x5780 [ 187.398444][ T7988] ? ksys_write+0x21e/0x260 [ 187.400058][ T7988] ? __pfx___sys_bpf+0x10/0x10 [ 187.401374][ T7988] ? vfs_write+0x14d/0x1140 [ 187.402921][ T7988] ? __mutex_unlock_slowpath+0x164/0x650 [ 187.404841][ T7988] ? fput+0x30/0x390 [ 187.406204][ T7988] ? ksys_write+0x1ad/0x260 [ 187.407784][ T7988] ? __pfx_ksys_write+0x10/0x10 [ 187.409422][ T7988] __ia32_sys_bpf+0x76/0xe0 [ 187.411018][ T7988] __do_fast_syscall_32+0x73/0x120 [ 187.412770][ T7988] do_fast_syscall_32+0x32/0x80 [ 187.414450][ T7988] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.416649][ T7988] RIP: 0023:0xf73ce579 [ 187.418061][ T7988] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 187.424204][ T7988] RSP: 002b:00000000f56b656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 187.427040][ T7988] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000440 [ 187.429894][ T7988] RDX: 0000000000000070 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.432633][ T7988] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.435324][ T7988] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 187.437935][ T7988] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.440632][ T7988] [ 187.913305][ T8003] IPv6: addrconf: prefix option has invalid lifetime [ 188.088101][ T63] usb 6-1: USB disconnect, device number 10 [ 188.227827][ T8] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 188.377732][ T8] usb 8-1: Using ep0 maxpacket: 16 [ 188.381026][ T8] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.384741][ T8] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 188.390559][ T8] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 188.393812][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.399831][ T8] usb 8-1: config 0 descriptor?? [ 189.105273][ T8024] FAULT_INJECTION: forcing a failure. [ 189.105273][ T8024] name failslab, interval 1, probability 0, space 0, times 0 [ 189.112301][ T8024] CPU: 2 UID: 0 PID: 8024 Comm: syz.1.688 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 189.115120][ T8024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 189.117911][ T8024] Call Trace: [ 189.118803][ T8024] [ 189.119635][ T8024] dump_stack_lvl+0x16c/0x1f0 [ 189.120899][ T8024] should_fail_ex+0x497/0x5b0 [ 189.122146][ T8024] ? fs_reclaim_acquire+0xae/0x160 [ 189.123483][ T8024] should_failslab+0xc2/0x120 [ 189.124691][ T8024] __kmalloc_node_noprof+0xd1/0x440 [ 189.126031][ T8024] ? bpf_lsm_capable+0x9/0x10 [ 189.127242][ T8024] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 189.128544][ T8024] __kvmalloc_node_noprof+0xad/0x1a0 [ 189.129900][ T8024] bpf_check+0xba0/0xc7c0 [ 189.131011][ T8024] ? __pfx_bpf_check+0x10/0x10 [ 189.132234][ T8024] ? find_held_lock+0x2d/0x110 [ 189.133433][ T8024] ? ktime_get_with_offset+0x13a/0x240 [ 189.134845][ T8024] ? trace_lock_acquire+0x14a/0x1d0 [ 189.136213][ T8024] ? ktime_get_with_offset+0x13a/0x240 [ 189.137711][ T8024] ? timekeeping_debug_get_ns+0x3e0/0x5b0 [ 189.139314][ T8024] ? lockdep_hardirqs_on+0x7c/0x110 [ 189.140758][ T8024] ? read_tsc+0x9/0x20 [ 189.141947][ T8024] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 189.143573][ T8024] ? bpf_obj_name_cpy+0x156/0x1b0 [ 189.144931][ T8024] bpf_prog_load+0xe3f/0x2670 [ 189.146350][ T8024] ? __pfx_bpf_prog_load+0x10/0x10 [ 189.147813][ T8024] ? find_held_lock+0x2d/0x110 [ 189.149303][ T8024] __sys_bpf+0x4c8c/0x5780 [ 189.150612][ T8024] ? ksys_write+0x21e/0x260 [ 189.151957][ T8024] ? __pfx___sys_bpf+0x10/0x10 [ 189.153257][ T8024] ? vfs_write+0x14d/0x1140 [ 189.154642][ T8024] ? __mutex_unlock_slowpath+0x164/0x650 [ 189.156483][ T8024] ? fput+0x30/0x390 [ 189.157644][ T8024] ? ksys_write+0x1ad/0x260 [ 189.159025][ T8024] ? __pfx_ksys_write+0x10/0x10 [ 189.160671][ T8024] __ia32_sys_bpf+0x76/0xe0 [ 189.162127][ T8024] __do_fast_syscall_32+0x73/0x120 [ 189.163785][ T8024] do_fast_syscall_32+0x32/0x80 [ 189.165348][ T8024] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.167407][ T8024] RIP: 0023:0xf7f47579 [ 189.168676][ T8024] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 189.174558][ T8024] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 189.177102][ T8024] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000440 [ 189.179371][ T8024] RDX: 0000000000000070 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.181825][ T8024] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.184090][ T8024] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 189.186322][ T8024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.188529][ T8024] [ 190.027150][ T8039] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 190.028946][ T8039] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 190.031794][ T8039] vhci_hcd vhci_hcd.0: Device attached [ 190.034634][ T8039] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 190.036401][ T8039] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 190.039097][ T8039] vhci_hcd vhci_hcd.0: Device attached [ 190.041062][ T8045] usbip_core: unknown command [ 190.042872][ T8045] vhci_hcd: unknown pdu 0 [ 190.044427][ T8045] usbip_core: unknown command [ 190.045068][ T8043] vhci_hcd: connection closed [ 190.046315][ T1099] vhci_hcd: stop threads [ 190.049437][ T1099] vhci_hcd: release socket [ 190.050687][ T1099] vhci_hcd: disconnect device [ 190.063858][ T1099] vhci_hcd: stop threads [ 190.065029][ T1099] vhci_hcd: release socket [ 190.066231][ T1099] vhci_hcd: disconnect device [ 190.477777][ T62] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 190.679229][ T62] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 190.682490][ T62] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 190.685429][ T62] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.687796][ T62] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.692248][ T62] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 190.694796][ T62] usb 6-1: no configuration chosen from 1 choice [ 191.141747][ T8] usb 8-1: USB disconnect, device number 17 [ 191.672614][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.702'. [ 191.675497][ T8071] netlink: 'syz.2.702': attribute type 10 has an invalid length. [ 191.778869][ T8072] pim6reg1: entered promiscuous mode [ 191.780636][ T8072] pim6reg1: entered allmulticast mode [ 191.793036][ T8072] netlink: 'syz.2.702': attribute type 10 has an invalid length. [ 191.796242][ T8072] bridge0: port 3(team0) entered blocking state [ 191.799388][ T8072] bridge0: port 3(team0) entered disabled state [ 191.867708][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 192.017766][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 192.022424][ T8] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.026124][ T8] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.029497][ T8] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 192.033204][ T8] usb 5-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 192.038112][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 192.040368][ T8] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 192.043477][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.053231][ T8] usb 5-1: config 0 descriptor?? [ 192.685299][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 192.687201][ T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 192.691182][ T8] usb 5-1: USB disconnect, device number 7 [ 193.250224][ T63] usb 6-1: USB disconnect, device number 11 [ 193.589127][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.591376][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.110089][ T63] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 194.269870][ T63] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 194.275844][ T63] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 194.285477][ T63] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 194.288282][ T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.297523][ T63] usb 7-1: config 0 descriptor?? [ 194.306299][ T63] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 195.527843][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 195.677861][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 195.683354][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.686723][ T8] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 195.689648][ T8] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 195.692118][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.697431][ T8] usb 5-1: config 0 descriptor?? [ 196.883647][ T5867] usb 7-1: USB disconnect, device number 10 [ 197.951858][ T8163] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 197.953619][ T8163] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 197.955841][ T8163] vhci_hcd vhci_hcd.0: Device attached [ 197.959613][ T8163] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 197.961933][ T8163] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 197.968242][ T8163] vhci_hcd vhci_hcd.0: Device attached [ 197.970199][ T8170] usbip_core: unknown command [ 197.972087][ T8170] vhci_hcd: unknown pdu 0 [ 197.973774][ T8170] usbip_core: unknown command [ 197.975823][ T8168] vhci_hcd: connection closed [ 197.983532][ T1099] vhci_hcd: stop threads [ 197.985957][ T1099] vhci_hcd: release socket [ 197.987153][ T1099] vhci_hcd: disconnect device [ 197.997679][ T1099] vhci_hcd: stop threads [ 197.998863][ T1099] vhci_hcd: release socket [ 198.006073][ T1099] vhci_hcd: disconnect device [ 198.272493][ T5867] usb 5-1: USB disconnect, device number 8 [ 198.617819][ T5867] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 198.935751][ T5867] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 198.939601][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 198.943719][ T5867] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 198.946503][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.951557][ T5867] usb 5-1: config 0 descriptor?? [ 198.959239][ T5867] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 199.357706][ T5867] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 199.517763][ T5867] usb 8-1: Using ep0 maxpacket: 16 [ 199.522568][ T5867] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.528375][ T5867] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 199.531401][ T5867] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 199.534530][ T5867] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.543702][ T5867] usb 8-1: config 0 descriptor?? [ 199.726298][ T40] audit: type=1800 audit(1728397051.907:132): pid=8203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.743" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 199.736845][ T40] audit: type=1800 audit(1728397051.917:133): pid=8203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.743" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 200.022171][ T8211] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 200.024497][ T8211] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 200.027553][ T8211] vhci_hcd vhci_hcd.0: Device attached [ 200.033274][ T8207] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 200.035598][ T8207] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 200.039313][ T8207] vhci_hcd vhci_hcd.0: Device attached [ 200.042350][ T8214] usbip_core: unknown command [ 200.043576][ T8214] vhci_hcd: unknown pdu 0 [ 200.044700][ T8214] usbip_core: unknown command [ 200.058060][ T104] vhci_hcd: stop threads [ 200.059254][ T104] vhci_hcd: release socket [ 200.059788][ T8212] vhci_hcd: connection closed [ 200.060415][ T104] vhci_hcd: disconnect device [ 200.069959][ T104] vhci_hcd: stop threads [ 200.071118][ T104] vhci_hcd: release socket [ 200.077513][ T104] vhci_hcd: disconnect device [ 200.273318][ T8223] lo speed is unknown, defaulting to 1000 [ 201.341671][ T8] usb 5-1: USB disconnect, device number 9 [ 201.534372][ T8248] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 201.536158][ T8248] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 201.538504][ T8248] vhci_hcd vhci_hcd.0: Device attached [ 201.541876][ T8248] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 201.543746][ T8248] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 201.546537][ T8248] vhci_hcd vhci_hcd.0: Device attached [ 201.549269][ T8254] usbip_core: unknown command [ 201.553183][ T8254] vhci_hcd: unknown pdu 0 [ 201.556054][ T8254] usbip_core: unknown command [ 201.558110][ T12] vhci_hcd: stop threads [ 201.558487][ T8252] vhci_hcd: connection closed [ 201.559944][ T12] vhci_hcd: release socket [ 201.601009][ T12] vhci_hcd: disconnect device [ 201.607594][ T12] vhci_hcd: stop threads [ 201.608814][ T12] vhci_hcd: release socket [ 201.609994][ T12] vhci_hcd: disconnect device [ 202.127900][ T8] usb 8-1: USB disconnect, device number 18 [ 203.967730][ T8] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 204.047742][ T63] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 204.117705][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 204.127393][ T8] usb 6-1: config index 0 descriptor too short (expected 26978, got 92) [ 204.136374][ T8] usb 6-1: config 115 has too many interfaces: 116, using maximum allowed: 32 [ 204.141441][ T8] usb 6-1: config 115 has an invalid descriptor of length 0, skipping remainder of the config [ 204.146234][ T8] usb 6-1: config 115 has 0 interfaces, different from the descriptor's value: 116 [ 204.150138][ T8] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 204.153217][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.199387][ T63] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 204.201619][ T63] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.204544][ T63] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 204.206779][ T63] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 204.212862][ T63] usb 7-1: New USB device found, idVendor=0525, idProduct=a402, bcdDevice= 0.40 [ 204.215150][ T63] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.217144][ T63] usb 7-1: Product: syz [ 204.218279][ T63] usb 7-1: Manufacturer: syz [ 204.219422][ T63] usb 7-1: SerialNumber: syz [ 204.224666][ T63] cdc_ncm 7-1:1.0: skipping garbage [ 204.226009][ T63] cdc_ncm 7-1:1.0: skipping garbage [ 204.227397][ T63] cdc_ncm 7-1:1.0: invalid descriptor buffer length [ 204.238008][ T63] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 204.239889][ T63] cdc_ncm 7-1:1.0: bind() failure [ 204.393077][ T63] usb 6-1: USB disconnect, device number 12 [ 204.450512][ T8297] input: syz0 as /devices/virtual/input/input8 [ 204.569978][ T35] usb 7-1: USB disconnect, device number 11 [ 205.040148][ T8314] EXT4-fs (sda1): shut down requested (0) [ 205.444591][ T8331] 9pnet_fd: Insufficient options for proto=fd [ 205.965423][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.775'. [ 205.968220][ T8328] sit1: entered allmulticast mode [ 206.667806][ T5387] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 206.850687][ T5387] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 206.853558][ T5387] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 206.857565][ T5387] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 206.862213][ T5387] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.867205][ T5387] usb 7-1: config 0 descriptor?? [ 206.875338][ T5387] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 206.968749][ T8365] program syz.1.788 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.719368][ T8375] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 207.723740][ T8375] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 207.752967][ T8375] evm: overlay not supported [ 208.177534][ T8401] ======================================================= [ 208.177534][ T8401] WARNING: The mand mount option has been deprecated and [ 208.177534][ T8401] and is ignored by this kernel. Remove the mand [ 208.177534][ T8401] option from the mount to silence this warning. [ 208.177534][ T8401] ======================================================= [ 208.657834][ T5387] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 208.817829][ T5387] usb 8-1: Using ep0 maxpacket: 16 [ 208.823587][ T5387] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.826480][ T5387] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 208.829341][ T5387] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 208.831840][ T5387] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.836670][ T5387] usb 8-1: config 0 descriptor?? [ 209.164225][ T5387] usb 7-1: USB disconnect, device number 12 [ 210.157863][ T5867] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 210.227777][ T5387] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 210.309397][ T5867] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 210.311838][ T5867] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.315304][ T5867] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 210.318599][ T5867] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.324185][ T5867] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 210.327128][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 210.330117][ T5867] usb 7-1: Product: syz [ 210.331308][ T5867] usb 7-1: Manufacturer: syz [ 210.341619][ T5867] cdc_wdm 7-1:1.0: skipping garbage [ 210.343110][ T5867] cdc_wdm 7-1:1.0: skipping garbage [ 210.348242][ T5867] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 210.350471][ T5867] cdc_wdm 7-1:1.0: Unknown control protocol [ 210.399532][ T5387] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 210.402726][ T5387] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.412851][ T5387] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 210.416896][ T5387] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 210.421582][ T5387] usb 6-1: Manufacturer: syz [ 210.428656][ T5387] usb 6-1: config 0 descriptor?? [ 210.443250][ T5387] rc_core: Couldn't load IR keymap rc-hauppauge [ 210.446504][ T5387] Registered IR keymap rc-empty [ 210.450811][ T5387] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 210.462242][ T5387] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input9 [ 210.540335][ T5387] usb 7-1: USB disconnect, device number 13 [ 211.166700][ T8435] lo speed is unknown, defaulting to 1000 [ 211.209877][ T5867] usb 8-1: USB disconnect, device number 19 [ 211.737761][ T63] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 211.867932][ T5451] usb 6-1: USB disconnect, device number 13 [ 211.897109][ T63] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 211.908069][ T63] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 211.911989][ T63] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 211.915083][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.944338][ T63] usb 5-1: config 0 descriptor?? [ 211.949932][ T63] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 212.429376][ T8463] overlayfs: missing 'lowerdir' [ 212.727781][ T8463] netlink: 44 bytes leftover after parsing attributes in process `syz.1.816'. [ 212.906420][ T8470] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 212.908113][ T8470] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 212.911456][ T8470] vhci_hcd vhci_hcd.0: Device attached [ 212.918367][ T8470] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 212.920202][ T8470] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 212.923195][ T8470] vhci_hcd vhci_hcd.0: Device attached [ 212.933047][ T8477] usbip_core: unknown command [ 212.934345][ T8477] vhci_hcd: unknown pdu 0 [ 212.935824][ T8477] usbip_core: unknown command [ 212.937406][ T1105] vhci_hcd: stop threads [ 212.939242][ T1105] vhci_hcd: release socket [ 212.940451][ T1105] vhci_hcd: disconnect device [ 212.954004][ T8475] vhci_hcd: connection closed [ 212.954368][ T1105] vhci_hcd: stop threads [ 212.957323][ T1105] vhci_hcd: release socket [ 212.959263][ T1105] vhci_hcd: disconnect device [ 213.305505][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.819'. [ 214.494136][ T5451] usb 5-1: USB disconnect, device number 10 [ 214.854696][ T8510] vivid-003: ================= START STATUS ================= [ 214.857160][ T8510] vivid-003: Radio HW Seek Mode: Bounded [ 214.858882][ T8510] vivid-003: Radio Programmable HW Seek: false [ 214.860776][ T8510] vivid-003: RDS Rx I/O Mode: Block I/O [ 214.862496][ T8510] vivid-003: Generate RBDS Instead of RDS: false [ 214.872587][ T8510] vivid-003: RDS Reception: true [ 214.874141][ T8510] vivid-003: RDS Program Type: 0 inactive [ 214.875922][ T8510] vivid-003: RDS PS Name: inactive [ 214.882683][ T8510] vivid-003: RDS Radio Text: inactive [ 214.884382][ T8510] vivid-003: RDS Traffic Announcement: false inactive [ 214.886426][ T8510] vivid-003: RDS Traffic Program: false inactive [ 214.888327][ T8510] vivid-003: RDS Music: false inactive [ 214.897668][ T8510] vivid-003: ================== END STATUS ================== [ 214.953762][ T8510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.830'. [ 215.067976][ T40] audit: type=1326 audit(1728397067.237:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.2.829" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x0 [ 215.797733][ T63] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 216.384321][ T63] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 216.388571][ T63] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 216.393391][ T63] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.396760][ T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.401660][ T63] usb 6-1: config 0 descriptor?? [ 216.406311][ T63] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 216.651042][ T8532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.835'. [ 216.798563][ T8537] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 216.801035][ T8537] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 216.804006][ T8537] vhci_hcd vhci_hcd.0: Device attached [ 216.808573][ T8537] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 216.811005][ T8537] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 216.814814][ T8537] vhci_hcd vhci_hcd.0: Device attached [ 216.817776][ T8543] usbip_core: unknown command [ 216.819529][ T8543] vhci_hcd: unknown pdu 0 [ 216.821095][ T8543] usbip_core: unknown command [ 216.824961][ T73] vhci_hcd: stop threads [ 216.826507][ T73] vhci_hcd: release socket [ 216.829149][ T73] vhci_hcd: disconnect device [ 216.840720][ T8541] vhci_hcd: connection closed [ 216.848922][ T8382] vhci_hcd: stop threads [ 216.852324][ T8382] vhci_hcd: release socket [ 216.853965][ T8382] vhci_hcd: disconnect device [ 217.537706][ T980] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 217.540856][ T8552] program syz.2.839 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.576611][ T8556] netlink: 'syz.3.840': attribute type 3 has an invalid length. [ 217.578774][ T8556] netlink: 'syz.3.840': attribute type 1 has an invalid length. [ 217.580952][ T8556] netlink: 220 bytes leftover after parsing attributes in process `syz.3.840'. [ 217.585898][ T8559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.717813][ T980] usb 5-1: Using ep0 maxpacket: 8 [ 217.731574][ T980] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 217.735456][ T980] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 217.739836][ T980] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 217.743589][ T980] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.748611][ T980] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 217.751902][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.983482][ T980] usb 5-1: usb_control_msg returned -32 [ 217.985118][ T980] usbtmc 5-1:16.0: can't read capabilities [ 218.569265][ T63] usb 6-1: USB disconnect, device number 14 [ 218.916249][ T8559] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 219.383995][ T40] audit: type=1326 audit(1728397071.567:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.2.848" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x0 [ 219.620449][ T8584] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 219.622199][ T8584] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 219.627744][ T8584] vhci_hcd vhci_hcd.0: Device attached [ 219.630919][ T8584] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 219.632696][ T8584] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 219.634732][ T8584] vhci_hcd vhci_hcd.0: Device attached [ 219.637481][ T8591] usbip_core: unknown command [ 219.638865][ T8591] vhci_hcd: unknown pdu 0 [ 219.640040][ T8591] usbip_core: unknown command [ 219.641488][ T8383] vhci_hcd: stop threads [ 219.642699][ T8383] vhci_hcd: release socket [ 219.643888][ T8383] vhci_hcd: disconnect device [ 219.649537][ T8589] vhci_hcd: connection closed [ 219.649713][ T1105] vhci_hcd: stop threads [ 219.657691][ T1105] vhci_hcd: release socket [ 219.658898][ T1105] vhci_hcd: disconnect device [ 220.011381][ T980] usb 5-1: USB disconnect, device number 11 [ 220.048487][ T8594] netlink: 20 bytes leftover after parsing attributes in process `syz.0.850'. [ 220.409871][ T8607] netlink: 'syz.0.853': attribute type 39 has an invalid length. [ 220.411955][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'. [ 220.415995][ T8607] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.418240][ T8607] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.633934][ T8620] lo speed is unknown, defaulting to 1000 [ 221.059705][ T40] audit: type=1326 audit(1728397073.247:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.0.860" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x0 [ 221.322580][ T8643] lo speed is unknown, defaulting to 1000 [ 221.638184][ T8656] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 221.639959][ T8656] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 221.642447][ T8656] vhci_hcd vhci_hcd.0: Device attached [ 221.728477][ T8657] vhci_hcd: connection closed [ 221.729286][ T73] vhci_hcd: stop threads [ 221.731697][ T73] vhci_hcd: release socket [ 221.732886][ T73] vhci_hcd: disconnect device [ 222.062185][ T8681] netlink: 16 bytes leftover after parsing attributes in process `syz.3.874'. [ 222.065162][ T8681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.874'. [ 222.071279][ T8679] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 222.203637][ T40] audit: type=1326 audit(1728397074.387:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.3.875" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x0 [ 222.213111][ T40] audit: type=1326 audit(1728397074.397:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.3.875" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x0 [ 222.768294][ T8701] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 222.770544][ T8701] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 222.784871][ T8701] vhci_hcd vhci_hcd.0: Device attached [ 222.790353][ T8701] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 222.792632][ T8701] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 222.801896][ T8701] vhci_hcd vhci_hcd.0: Device attached [ 222.809680][ T8710] usbip_core: unknown command [ 222.811327][ T8710] vhci_hcd: unknown pdu 0 [ 222.812807][ T8710] usbip_core: unknown command [ 222.814838][ T73] vhci_hcd: stop threads [ 222.826631][ T73] vhci_hcd: release socket [ 222.828819][ T73] vhci_hcd: disconnect device [ 222.842206][ T8707] vhci_hcd: connection closed [ 222.842441][ T73] vhci_hcd: stop threads [ 222.845712][ T73] vhci_hcd: release socket [ 222.847333][ T73] vhci_hcd: disconnect device [ 223.383868][ T8728] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.387427][ T8728] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.390841][ T8728] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.393985][ T8728] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.400100][ T8728] vxlan0: entered promiscuous mode [ 223.401997][ T8728] vxlan0: entered allmulticast mode [ 223.407252][ T8728] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.410599][ T8728] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.413866][ T8728] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.417054][ T8728] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.864169][ T8756] dvmrp0: entered allmulticast mode [ 224.983245][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'. [ 225.194865][ T5349] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 226.817787][ T5384] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 226.999329][ T5384] usb 6-1: config 0 has no interfaces? [ 227.002679][ T5384] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 227.006232][ T5384] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 227.009399][ T5384] usb 6-1: Manufacturer: syz [ 227.014364][ T5384] usb 6-1: config 0 descriptor?? [ 227.749773][ T830] usb 6-1: USB disconnect, device number 15 [ 228.923691][ T8831] netlink: 16 bytes leftover after parsing attributes in process `syz.1.914'. [ 229.333248][ T8854] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 229.335678][ T8854] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 229.341214][ T8854] vhci_hcd vhci_hcd.0: Device attached [ 229.345117][ T8854] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 229.347526][ T8854] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 229.352271][ T8854] vhci_hcd vhci_hcd.0: Device attached [ 229.355424][ T8857] usbip_core: unknown command [ 229.357141][ T8857] vhci_hcd: unknown pdu 0 [ 229.358993][ T8857] usbip_core: unknown command [ 229.361246][ T1159] vhci_hcd: stop threads [ 229.362796][ T1159] vhci_hcd: release socket [ 229.364438][ T1159] vhci_hcd: disconnect device [ 229.374882][ T40] audit: type=1326 audit(1728397081.567:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.3.920" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x0 [ 229.385918][ T8855] vhci_hcd: connection closed [ 229.386190][ T1159] vhci_hcd: stop threads [ 229.391587][ T1159] vhci_hcd: release socket [ 229.393213][ T1159] vhci_hcd: disconnect device [ 230.023620][ T8866] lo speed is unknown, defaulting to 1000 [ 231.282235][ T8896] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 231.283995][ T8896] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 231.286135][ T8896] vhci_hcd vhci_hcd.0: Device attached [ 231.291218][ T8896] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 231.292970][ T8896] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 231.295938][ T8896] vhci_hcd vhci_hcd.0: Device attached [ 231.301923][ T8903] usbip_core: unknown command [ 231.303237][ T8903] vhci_hcd: unknown pdu 0 [ 231.304419][ T8903] usbip_core: unknown command [ 231.305807][ T8380] vhci_hcd: stop threads [ 231.307376][ T8380] vhci_hcd: release socket [ 231.314591][ T8380] vhci_hcd: disconnect device [ 231.320612][ T8901] vhci_hcd: connection closed [ 231.320756][ T1099] vhci_hcd: stop threads [ 231.324239][ T1099] vhci_hcd: release socket [ 231.325835][ T1099] vhci_hcd: disconnect device [ 231.932092][ T8908] devtmpfs: Unknown parameter 'usrquota_inode_harflimit' [ 233.331600][ T8928] netfs: Couldn't get user pages (rc=-14) [ 233.338124][ T40] audit: type=1800 audit(1728397085.517:140): pid=8928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.938" name="bus" dev="9p" ino=35922824 res=0 errno=0 [ 233.340711][ T8920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.935'. [ 235.558006][ T830] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 235.687782][ T830] usb 7-1: device descriptor read/64, error -71 [ 235.927856][ T830] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 236.067856][ T830] usb 7-1: device descriptor read/64, error -71 [ 236.187766][ T830] usb usb7-port1: attempt power cycle [ 236.567840][ T830] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 236.588121][ T830] usb 7-1: device descriptor read/8, error -71 [ 236.837709][ T830] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 236.919007][ T830] usb 7-1: device descriptor read/8, error -71 [ 237.028004][ T830] usb usb7-port1: unable to enumerate USB device [ 237.437795][ T830] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 237.587865][ T830] usb 5-1: Using ep0 maxpacket: 8 [ 237.591289][ T830] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.594401][ T830] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 237.597136][ T830] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 237.600655][ T830] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 237.604455][ T830] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 237.607360][ T830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.615959][ T830] hub 5-1:1.0: bad descriptor, ignoring hub [ 237.617926][ T830] hub 5-1:1.0: probe with driver hub failed with error -5 [ 237.620518][ T830] cdc_wdm 5-1:1.0: skipping garbage [ 237.622286][ T830] cdc_wdm 5-1:1.0: skipping garbage [ 237.624815][ T830] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 237.626677][ T830] cdc_wdm 5-1:1.0: Unknown control protocol [ 238.383092][ T40] audit: type=1800 audit(1728397090.567:141): pid=8977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.952" name="bus" dev="9p" ino=35922824 res=0 errno=0 [ 238.466293][ T8977] 9pnet_fd: Insufficient options for proto=fd [ 238.991951][ T8991] exFAT-fs (nullb0): invalid boot record signature [ 238.994254][ T8991] exFAT-fs (nullb0): failed to read boot sector [ 238.995931][ T8991] exFAT-fs (nullb0): failed to recognize exfat type [ 239.380949][ T9006] overlayfs: missing 'lowerdir' [ 239.384673][ T9006] overlayfs: workdir and upperdir must be separate subtrees [ 240.069501][ T980] usb 5-1: USB disconnect, device number 12 [ 240.262947][ T9015] tipc: Started in network mode [ 240.264272][ T9015] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 240.267118][ T9015] tipc: Enabled bearer , priority 0 [ 240.541057][ T106] ================================================================== [ 240.543206][ T106] BUG: KASAN: slab-use-after-free in folio_evictable+0x7b/0x270 [ 240.545220][ T106] Read of size 8 at addr ffff888022896d48 by task kswapd0/106 [ 240.548364][ T106] [ 240.549632][ T106] CPU: 3 UID: 0 PID: 106 Comm: kswapd0 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 240.552372][ T106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 240.555276][ T106] Call Trace: [ 240.556210][ T106] [ 240.557026][ T106] dump_stack_lvl+0x116/0x1f0 [ 240.558330][ T106] print_report+0xc3/0x620 [ 240.559580][ T106] ? __virt_addr_valid+0x5e/0x590 [ 240.560968][ T106] ? __phys_addr+0xc6/0x150 [ 240.562203][ T106] kasan_report+0xd9/0x110 [ 240.563427][ T106] ? folio_evictable+0x7b/0x270 [ 240.564757][ T106] ? folio_evictable+0x7b/0x270 [ 240.566095][ T106] kasan_check_range+0xef/0x1a0 [ 240.567445][ T106] folio_evictable+0x7b/0x270 [ 240.568731][ T106] isolate_folios+0xd3f/0x35f0 [ 240.570045][ T106] ? __pfx_isolate_folios+0x10/0x10 [ 240.571476][ T106] ? lock_acquire.part.0+0x11b/0x380 [ 240.572903][ T106] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 240.574409][ T106] ? rcu_is_watching+0x12/0xc0 [ 240.575680][ T106] ? do_raw_spin_lock+0x12d/0x2c0 [ 240.577024][ T106] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 240.578435][ T106] ? lock_acquire+0x2f/0xb0 [ 240.579680][ T106] ? evict_folios+0x167/0x1970 [ 240.580955][ T106] evict_folios+0x187/0x1970 [ 240.582204][ T106] ? hlock_class+0x4e/0x130 [ 240.583453][ T106] ? mark_lock+0xb5/0xc60 [ 240.584628][ T106] ? hlock_class+0x4e/0x130 [ 240.585872][ T106] ? __lock_acquire+0x163e/0x3ce0 [ 240.587243][ T106] ? __pfx_mark_lock+0x10/0x10 [ 240.588578][ T106] ? __pfx_evict_folios+0x10/0x10 [ 240.589951][ T106] ? hlock_class+0x4e/0x130 [ 240.591155][ T106] ? __lock_acquire+0x163e/0x3ce0 [ 240.592514][ T106] ? mem_cgroup_get_nr_swap_pages+0x20/0x120 [ 240.594088][ T106] ? sc_swappiness+0xd4/0x190 [ 240.595344][ T106] try_to_shrink_lruvec+0x612/0x9b0 [ 240.596727][ T106] ? find_held_lock+0x2d/0x110 [ 240.598010][ T106] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 240.599548][ T106] ? shrink_node+0x2438/0x39d0 [ 240.600824][ T106] shrink_one+0x3e3/0x7b0 [ 240.601964][ T106] ? shrink_node+0x2438/0x39d0 [ 240.603230][ T106] shrink_node+0x2452/0x39d0 [ 240.604459][ T106] ? shrink_node+0x21c3/0x39d0 [ 240.605737][ T106] ? rcu_read_unlock+0x17/0x60 [ 240.607018][ T106] ? __pfx_shrink_node+0x10/0x10 [ 240.608329][ T106] ? lock_acquire+0x2f/0xb0 [ 240.609566][ T106] ? mem_cgroup_iter+0x54a/0x750 [ 240.610910][ T106] balance_pgdat+0xc19/0x18f0 [ 240.612164][ T106] ? __pfx_balance_pgdat+0x10/0x10 [ 240.613524][ T106] ? __pfx___lock_acquire+0x10/0x10 [ 240.614909][ T106] ? __pfx___lock_acquire+0x10/0x10 [ 240.616299][ T106] ? find_held_lock+0x2d/0x110 [ 240.617575][ T106] ? cgroup_freezing+0x155/0x3d0 [ 240.618908][ T106] kswapd+0x5ea/0xbf0 [ 240.619970][ T106] ? __pfx_kswapd+0x10/0x10 [ 240.621170][ T106] ? __pfx_autoremove_wake_function+0x10/0x10 [ 240.622767][ T106] ? lockdep_hardirqs_on+0x7c/0x110 [ 240.624135][ T106] ? __kthread_parkme+0x148/0x220 [ 240.625451][ T106] ? __pfx_kswapd+0x10/0x10 [ 240.626657][ T106] kthread+0x2c1/0x3a0 [ 240.627742][ T106] ? _raw_spin_unlock_irq+0x23/0x50 [ 240.629107][ T106] ? __pfx_kthread+0x10/0x10 [ 240.630321][ T106] ret_from_fork+0x45/0x80 [ 240.631498][ T106] ? __pfx_kthread+0x10/0x10 [ 240.632707][ T106] ret_from_fork_asm+0x1a/0x30 [ 240.633913][ T106] [ 240.634724][ T106] [ 240.635369][ T106] Allocated by task 37: [ 240.636465][ T106] kasan_save_stack+0x33/0x60 [ 240.637712][ T106] kasan_save_track+0x14/0x30 [ 240.638973][ T106] __kasan_slab_alloc+0x89/0x90 [ 240.640259][ T106] kmem_cache_alloc_lru_noprof+0x121/0x2f0 [ 240.641797][ T106] shmem_alloc_inode+0x25/0x50 [ 240.643094][ T106] alloc_inode+0x5d/0x230 [ 240.644236][ T106] new_inode+0x22/0x210 [ 240.645346][ T106] shmem_get_inode+0x194/0xea0 [ 240.646609][ T106] shmem_mknod+0x66/0x240 [ 240.647754][ T106] vfs_mknod+0x5d7/0x8e0 [ 240.648879][ T106] devtmpfs_work_loop+0x1a8/0x7d0 [ 240.650216][ T106] devtmpfsd+0x4c/0x50 [ 240.651309][ T106] kthread+0x2c1/0x3a0 [ 240.652396][ T106] ret_from_fork+0x45/0x80 [ 240.653581][ T106] ret_from_fork_asm+0x1a/0x30 [ 240.654864][ T106] [ 240.655501][ T106] Freed by task 24: [ 240.656519][ T106] kasan_save_stack+0x33/0x60 [ 240.657764][ T106] kasan_save_track+0x14/0x30 [ 240.659018][ T106] kasan_save_free_info+0x3b/0x60 [ 240.660338][ T106] __kasan_slab_free+0x51/0x70 [ 240.661656][ T106] kmem_cache_free+0x152/0x4b0 [ 240.662964][ T106] i_callback+0x43/0x70 [ 240.664077][ T106] rcu_core+0x79d/0x14d0 [ 240.665199][ T106] handle_softirqs+0x213/0x8f0 [ 240.666459][ T106] run_ksoftirqd+0x3a/0x60 [ 240.667640][ T106] smpboot_thread_fn+0x661/0xa30 [ 240.668943][ T106] kthread+0x2c1/0x3a0 [ 240.670021][ T106] ret_from_fork+0x45/0x80 [ 240.671206][ T106] ret_from_fork_asm+0x1a/0x30 [ 240.672472][ T106] [ 240.673106][ T106] Last potentially related work creation: [ 240.674558][ T106] kasan_save_stack+0x33/0x60 [ 240.675773][ T106] __kasan_record_aux_stack+0xba/0xd0 [ 240.677131][ T106] __call_rcu_common.constprop.0+0x99/0x7a0 [ 240.678618][ T106] destroy_inode+0x12c/0x1b0 [ 240.679803][ T106] evict+0x5f3/0x970 [ 240.680792][ T106] iput+0x530/0x890 [ 240.681775][ T106] do_unlinkat+0x5c3/0x760 [ 240.682916][ T106] __ia32_sys_unlink+0xc4/0x110 [ 240.684225][ T106] __do_fast_syscall_32+0x73/0x120 [ 240.685522][ T106] do_fast_syscall_32+0x32/0x80 [ 240.686773][ T106] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 240.688379][ T106] [ 240.689017][ T106] The buggy address belongs to the object at ffff888022896880 [ 240.689017][ T106] which belongs to the cache shmem_inode_cache of size 1544 [ 240.692608][ T106] The buggy address is located 1224 bytes inside of [ 240.692608][ T106] freed 1544-byte region [ffff888022896880, ffff888022896e88) [ 240.696098][ T106] [ 240.696728][ T106] The buggy address belongs to the physical page: [ 240.698343][ T106] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22890 [ 240.700566][ T106] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 240.702671][ T106] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 240.704573][ T106] page_type: f5(slab) [ 240.705597][ T106] raw: 00fff00000000040 ffff888040489b80 dead000000000122 0000000000000000 [ 240.707758][ T106] raw: 0000000000000000 0000000000130013 00000001f5000000 0000000000000000 [ 240.709917][ T106] head: 00fff00000000040 ffff888040489b80 dead000000000122 0000000000000000 [ 240.712065][ T106] head: 0000000000000000 0000000000130013 00000001f5000000 0000000000000000 [ 240.714228][ T106] head: 00fff00000000003 ffffea00008a2401 ffffffffffffffff 0000000000000000 [ 240.716404][ T106] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 240.718585][ T106] page dumped because: kasan: bad access detected [ 240.720190][ T106] page_owner tracks the page as allocated [ 240.721627][ T106] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 37, tgid 37 (kdevtmpfs), ts 5518827873, free_ts 0 [ 240.726496][ T106] post_alloc_hook+0x2d1/0x350 [ 240.727737][ T106] get_page_from_freelist+0x101e/0x3070 [ 240.729127][ T106] __alloc_pages_noprof+0x223/0x25c0 [ 240.730459][ T106] alloc_pages_mpol_noprof+0x2c9/0x610 [ 240.731855][ T106] new_slab+0x2ba/0x3f0 [ 240.732923][ T106] ___slab_alloc+0xd1d/0x16f0 [ 240.734157][ T106] __slab_alloc.constprop.0+0x56/0xb0 [ 240.735541][ T106] kmem_cache_alloc_lru_noprof+0x2a7/0x2f0 [ 240.737036][ T106] shmem_alloc_inode+0x25/0x50 [ 240.738257][ T106] alloc_inode+0x5d/0x230 [ 240.739380][ T106] new_inode+0x22/0x210 [ 240.740426][ T106] shmem_get_inode+0x194/0xea0 [ 240.741643][ T106] shmem_mknod+0x66/0x240 [ 240.742732][ T106] vfs_mknod+0x5d7/0x8e0 [ 240.743870][ T106] devtmpfs_work_loop+0x1a8/0x7d0 [ 240.745146][ T106] devtmpfsd+0x4c/0x50 [ 240.746236][ T106] page_owner free stack trace missing [ 240.747616][ T106] [ 240.748261][ T106] Memory state around the buggy address: [ 240.749670][ T106] ffff888022896c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 240.751740][ T106] ffff888022896c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 240.753771][ T106] >ffff888022896d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 240.755831][ T106] ^ [ 240.757471][ T106] ffff888022896d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 240.759504][ T106] ffff888022896e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 240.761481][ T106] ================================================================== [ 240.763483][ T106] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 240.765313][ T106] CPU: 3 UID: 0 PID: 106 Comm: kswapd0 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 240.767936][ T106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 240.770755][ T106] Call Trace: [ 240.771637][ T106] [ 240.772406][ T106] dump_stack_lvl+0x3d/0x1f0 [ 240.773598][ T106] panic+0x71d/0x800 [ 240.774588][ T106] ? __pfx_panic+0x10/0x10 [ 240.775763][ T106] ? rcu_is_watching+0x12/0xc0 [ 240.776980][ T106] ? __pfx_lock_release+0x10/0x10 [ 240.778244][ T106] ? check_panic_on_warn+0x1f/0xb0 [ 240.779597][ T106] check_panic_on_warn+0xab/0xb0 [ 240.780889][ T106] end_report+0x117/0x180 [ 240.782002][ T106] kasan_report+0xe9/0x110 [ 240.783165][ T106] ? folio_evictable+0x7b/0x270 [ 240.784411][ T106] ? folio_evictable+0x7b/0x270 [ 240.785655][ T106] kasan_check_range+0xef/0x1a0 [ 240.786935][ T106] folio_evictable+0x7b/0x270 [ 240.788141][ T106] isolate_folios+0xd3f/0x35f0 [ 240.789381][ T106] ? __pfx_isolate_folios+0x10/0x10 [ 240.790702][ T106] ? lock_acquire.part.0+0x11b/0x380 [ 240.792060][ T106] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 240.793462][ T106] ? rcu_is_watching+0x12/0xc0 [ 240.794687][ T106] ? do_raw_spin_lock+0x12d/0x2c0 [ 240.795991][ T106] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 240.797363][ T106] ? lock_acquire+0x2f/0xb0 [ 240.798591][ T106] ? evict_folios+0x167/0x1970 [ 240.799820][ T106] evict_folios+0x187/0x1970 [ 240.801067][ T106] ? hlock_class+0x4e/0x130 [ 240.802231][ T106] ? mark_lock+0xb5/0xc60 [ 240.803346][ T106] ? hlock_class+0x4e/0x130 [ 240.804517][ T106] ? __lock_acquire+0x163e/0x3ce0 [ 240.805803][ T106] ? __pfx_mark_lock+0x10/0x10 [ 240.807051][ T106] ? __pfx_evict_folios+0x10/0x10 [ 240.808359][ T106] ? hlock_class+0x4e/0x130 [ 240.809511][ T106] ? __lock_acquire+0x163e/0x3ce0 [ 240.810853][ T106] ? mem_cgroup_get_nr_swap_pages+0x20/0x120 [ 240.812381][ T106] ? sc_swappiness+0xd4/0x190 [ 240.813559][ T106] try_to_shrink_lruvec+0x612/0x9b0 [ 240.814884][ T106] ? find_held_lock+0x2d/0x110 [ 240.816073][ T106] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 240.817495][ T106] ? shrink_node+0x2438/0x39d0 [ 240.818692][ T106] shrink_one+0x3e3/0x7b0 [ 240.819792][ T106] ? shrink_node+0x2438/0x39d0 [ 240.820995][ T106] shrink_node+0x2452/0x39d0 [ 240.822137][ T106] ? shrink_node+0x21c3/0x39d0 [ 240.823307][ T106] ? rcu_read_unlock+0x17/0x60 [ 240.824499][ T106] ? __pfx_shrink_node+0x10/0x10 [ 240.825754][ T106] ? lock_acquire+0x2f/0xb0 [ 240.826931][ T106] ? mem_cgroup_iter+0x54a/0x750 [ 240.828183][ T106] balance_pgdat+0xc19/0x18f0 [ 240.829373][ T106] ? __pfx_balance_pgdat+0x10/0x10 [ 240.830683][ T106] ? __pfx___lock_acquire+0x10/0x10 [ 240.832031][ T106] ? __pfx___lock_acquire+0x10/0x10 [ 240.833383][ T106] ? find_held_lock+0x2d/0x110 [ 240.834631][ T106] ? cgroup_freezing+0x155/0x3d0 [ 240.835906][ T106] kswapd+0x5ea/0xbf0 [ 240.836949][ T106] ? __pfx_kswapd+0x10/0x10 [ 240.838114][ T106] ? __pfx_autoremove_wake_function+0x10/0x10 [ 240.839649][ T106] ? lockdep_hardirqs_on+0x7c/0x110 [ 240.840947][ T106] ? __kthread_parkme+0x148/0x220 [ 240.842219][ T106] ? __pfx_kswapd+0x10/0x10 [ 240.843354][ T106] kthread+0x2c1/0x3a0 [ 240.844388][ T106] ? _raw_spin_unlock_irq+0x23/0x50 [ 240.845668][ T106] ? __pfx_kthread+0x10/0x10 [ 240.846867][ T106] ret_from_fork+0x45/0x80 [ 240.847995][ T106] ? __pfx_kthread+0x10/0x10 [ 240.849169][ T106] ret_from_fork_asm+0x1a/0x30 [ 240.850406][ T106] [ 241.907960][ T106] Shutting down cpus with NMI [ 241.909715][ T106] Kernel Offset: disabled [ 241.910813][ T106] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:35:14 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff9a385820 RDX=dffffc0000000000 RSI=ffffffff82047dd5 RDI=0000000000000001 RBP=ffffc9000340fa10 RSP=ffffc9000340f940 R8 =ffffc9000340f9fc R9 =ffffffff90bc48ae R10=ffffc9000340f9c8 R11=0000000000010278 R12=ffffffff8178a280 R13=ffffc9000340f9c8 R14=0000000000000000 R15=ffff888021058000 RIP=ffffffff815c196f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057440a3c CR3=000000005c402000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001b400000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000001000008fd RBX=ffff888021058000 RCX=0000000000000830 RDX=0000000000000001 RSI=00000000000000fd RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc90000598958 R8 =0000000000000000 R9 =fffffbfff2039a31 R10=ffffffff901cd18f R11=0000000000000000 R12=1ffff920000b312c R13=ffffc90000598980 R14=ffffffff8d809fa0 R15=ffffffff901d0478 RIP=ffffffff813bb068 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000031df5ff8 CR3=000000005f972000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000002cc00000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff817abbce RDX=ffff88801b760000 RSI=0000000000000000 RDI=0000000000000000 RBP=ffffffff901d0478 RSP=ffffc90000487d98 R8 =0000000000000000 R9 =fffffbfff2d3158b R10=ffffffff9698ac5f R11=0000000000000000 R12=ffff88802b62d360 R13=ffff88802b62d368 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff818cba08 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555f6c64b000 CR3=0000000024ad8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=b0ad49d9b0ad49d9 b0ad49d9b0ad49d9 b0ad49d9b0ad49d9 b0ad49d9b0ad49d9 b0ad49d9b0ad49d9 b0ad49d9b0ad49d9 b0ad49d9b0ad49d9 b0ad49d9b0ad49d9 ZMM22=ee4dc319ee4dc319 ee4dc319ee4dc319 ee4dc319ee4dc319 ee4dc319ee4dc319 ee4dc319ee4dc319 ee4dc319ee4dc319 ee4dc319ee4dc319 ee4dc319ee4dc319 ZMM23=a1e87479a1e87479 a1e87479a1e87479 a1e87479a1e87479 a1e87479a1e87479 a1e87479a1e87479 a1e87479a1e87479 a1e87479a1e87479 a1e87479a1e87479 ZMM24=c2751f28c2751f28 c2751f28c2751f28 c2751f28c2751f28 c2751f28c2751f28 c2751f28c2751f28 c2751f28c2751f28 c2751f28c2751f28 c2751f28c2751f28 ZMM25=6254797062547970 6254797062547970 6254797062547970 6254797062547970 6254797062547970 6254797062547970 6254797062547970 6254797062547970 ZMM26=2a077b812a077b81 2a077b812a077b81 2a077b812a077b81 2a077b812a077b81 2a077b812a077b81 2a077b812a077b81 2a077b812a077b81 2a077b812a077b81 ZMM27=efa4d733efa4d733 efa4d733efa4d733 efa4d733efa4d733 efa4d733efa4d733 efa4d733efa4d733 efa4d733efa4d733 efa4d733efa4d733 efa4d733efa4d733 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=240d0000240d0000 240d0000240d0000 240d0000240d0000 240d0000240d0000 240d0000240d0000 240d0000240d0000 240d0000240d0000 240d0000240d0000 info registers vcpu 3 CPU#3 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85036a05 RDI=ffffffff9a63a220 RBP=ffffffff9a63a1e0 RSP=ffffc9000138ed60 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000036303154 R12=0000000000000000 R13=0000000000000034 R14=ffffffff850369a0 R15=0000000000000000 RIP=ffffffff85036a2f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002001e000 CR3=0000000024ad8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7e01d41deb1dea25 ce98f3bac7469e91 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 34ed0e3263097efc dabd5243cbf58e08 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 438b7c60897a2ad2 e223dface890d0f3 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a8062f82d6656b24 7932230d68ebcaf7 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2feaaf3acc5ec9e6 48a37a63d42542ba ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 aeeb647e84512a8a 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 976120b2f6624242 b91134ecf5027ff6 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 494db30700000000 ec6455556852e813 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 941c717285e6441d bfeaef7f62c67230 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c7a9ef5c65e5fff1 b6f4297af257f430 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000