last executing test programs: 4m15.119124559s ago: executing program 3 (id=396): gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELTABLE={0x190, 0x2, 0xa, 0x5, 0x0, 0x0, {0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x7b, 0x6, "09ca96a02e935a54fd765b6d4c1cc23a11254e0fc5f516e84ede9d7fede2a8b433cc71f9731d4ed2306c42ef3e3efe920f456cd2c65ca9fb61c2b535d440a66dfe59cad506c50209a7789740666556e9b6a39b326024acc95240b22f566251b5a8db821c7f58e7c753f0990a2d23a7d69ce07a5ac36cba"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x91, 0x6, "140a461f8af6e63b29bffab769a4c96374a5d093bfdbf11b23f1c97479c6c56edd2ca3393c76dc3dbe7356fd5dc411f5ad7daf85efd877c3527f3704cd5e16f818ccb827cc0bda1f2aa8e2aeddc1deefac5ba9407ccdc8e041a2b8f8138a008c154697749a4d501118c5ddb29d632ad4d9f4e674d00d1faa023bc3edffbf506e2d8e87d2cc5d3ca8dd41793df7"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x39, 0x6, "c8f384b34ce5b9fd1b3046086204e941fc539d35df844ee3dd927aaaae3c0f15169a0c4e409eed37b0bde41a0e88fbf8b7ac7e1595"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x20c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040054) io_uring_setup(0xc2e, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x4, 0x590, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]}, 0x608) sendmsg$TCPDIAG_GETSOCK(r4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000008000"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x21}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x8}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1bc81a00}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xa}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x3, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {}, {0x4, 0x0, 0x2}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101101) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00ffff000000002e2e2e000000ff39000000000000005f00000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x7) 4m14.926731088s ago: executing program 2 (id=397): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb", 0xa4}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac42", 0x39}, {&(0x7f0000000e00)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca8", 0x68}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030de0ff47bc869de32ee24ca05e6f805ec0a1d0257e0e6f900e6cfb68e827b515d05bf2cc14e53e04b713a851bd656f209da5", 0xb6}, {&(0x7f0000000480)="4068745fc217775e9fca3477d3c929c1231d710ed7bb68bf2f127cb83703392703f53051ec7ebd4d519a9db1973eaeda928822aaa8d3a9677374a52305e2ad47d5802e40bd678517886e0c9ec482da71", 0x50}], 0x5}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba62168141343c853896523ffb04131b2786acc44a57f5b1bd33cdaef8dd3c0526b7454eefe5153c5778ce05c77e962fd6bf3a4b9eb05654e64f1867398e202b4920e9ebc08f6e6dc652a12e45445030e069", 0xaa}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbe", 0x14}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 4m14.926130715s ago: executing program 2 (id=398): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x1, {0x0, 0x0, 0x0, r1, {0xfff3, 0x3}, {}, {0x1c, 0x6}}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m14.859299054s ago: executing program 2 (id=399): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x42, &(0x7f0000000100), 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func_proto]}, {0x0, [0x61]}}, 0x0, 0x27, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) prlimit64(0x0, 0xb, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x0, 0x31, 0x7d, 0x55}}]}}]}}, 0x0) io_setup(0x1, &(0x7f0000000b80)) timer_create(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 4m14.257709041s ago: executing program 3 (id=402): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time}], 0x38) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 4m14.257549904s ago: executing program 3 (id=403): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x6f, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x66, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x94}, {"42e7b4b876ae133e039e347089a254c1c55cc28b9e826fb79e5b04e9daf9b8e970c4462a7547971bbb1ab5ebee4718209827c2ae6b9366790c"}}}}}}, 0x0) 4m14.20946496s ago: executing program 3 (id=404): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) umount2(0x0, 0x0) 4m14.209172258s ago: executing program 3 (id=405): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r6, 0x3f00}}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x10}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000028c0)=@filter={'filter\x00', 0x2, 0x4, 0x1400, 0xffffffff, 0x1250, 0x1250, 0x1250, 0xfeffffff, 0xffffffff, 0x1358, 0x1358, 0x1358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1108, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}, @common=@frag={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"6bbf"}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth1_vlan\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1460) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={0x0, 0x0, 0x4008, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x8, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1000070, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m13.889427631s ago: executing program 3 (id=406): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x4000, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) 4m13.863690803s ago: executing program 32 (id=406): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x4000, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) 4m13.32721568s ago: executing program 2 (id=413): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) umount2(0x0, 0x0) 4m13.326916959s ago: executing program 2 (id=415): r0 = io_uring_setup(0x2d54, 0x0) io_uring_setup(0x2000287e, &(0x7f00000001c0)={0x0, 0xb07c, 0x1000, 0x0, 0x2, 0x0, r0}) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f00000001c0)) syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x50) r4 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r4, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)}}], 0x2, 0x800) syz_emit_ethernet(0x46, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x10, 0x1409, 0x105, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x2}, 0x810) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) 4m12.44414583s ago: executing program 2 (id=422): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) umount2(0x0, 0x0) 4m12.427319494s ago: executing program 33 (id=422): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) umount2(0x0, 0x0) 49.826968511s ago: executing program 5 (id=3093): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'syztnl2\x00', 0x0}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffd, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000680)={0x0, {{0xa, 0x4e21, 0x0, @mcast1={0xff, 0x7}, 0x80000000}}, {{0xa, 0x4e22, 0xffffffff, @remote, 0x8}}}, 0x108) 49.777111165s ago: executing program 5 (id=3095): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb", 0xa4}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d96", 0x71}, {&(0x7f0000000e00)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235a7", 0xd0}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030de0ff47bc869de32ee24ca05e6f805ec0a1d0257e0e6f900e6cfb68e827b515d05bf2cc14e53e04b713a851bd656f209da5", 0xb6}, {&(0x7f0000000480)="4068745fc217775e9fca3477d3c929c1231d710ed7bb68bf2f127cb83703392703f53051ec7ebd4d519a9db1973eaeda928822aaa8d3a9677374a52305e2ad47d5802e40bd678517886e0c9ec482da71", 0x50}], 0x5}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) 49.776847757s ago: executing program 5 (id=3096): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000002300)={0x50, 0x0, r5, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r4, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r7, r4, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r8, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) 48.877360695s ago: executing program 5 (id=3098): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') read$FUSE(r0, &(0x7f00000061c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r3, &(0x7f0000000400)={0x2c, &(0x7f0000000080)={0x40, 0x23, 0x6d, {0x6d, 0x24, "1ac94d1e9d11223c294c26dd3d89d31f82f2968395f7638037e273584c8494cba1a140741d3bc6144de4ac1877900f734d122ae3a62e8dff840bd571f05a7e54f79d1a063669aa202992a0720f147cec4f6e4413264c1904835a70f4d2afe4824fbec6d8c6f95b2142e78e"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x809}}, &(0x7f0000000340)={0x0, 0xf, 0x89, {0x5, 0xf, 0x89, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "6ae2dc51b679ff49a010ad96a80c6012"}, @generic={0x6d, 0x10, 0x2, "b72a92e0bf21c09b4136876e96c03361cd5346c64a3f8c52a7efc322a9c31defe053333480175364bd5919ddc793efc3b1166dc895aa8031ac8006a6254babd001229c38d15b8ade69daa4ea10839b91bffc620af576c8b8fe825654bca4910209f0d41eefabdc7bfbc5"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x2, 0x16, 0x2, "f23007a4", "75a3a4d5"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfc, 0xd628be7aecdb99d, 0x8, 0xb8, 0x3, 0xbb0, 0x9}}}, &(0x7f0000000880)={0x84, &(0x7f0000000440)={0x0, 0x3db3a1e1d6a2c9fd, 0x6e, "420ca2334bae61d60a5e077f815cb5cfdd68dde1810d69b552eef0d1b0c491fdb4106d704ff4cd36232488a692d38e1c94af21c4c3b6336e0804fe43a753187efd2dc979805d8a9d3e2c448eb2fb7e9183e5db6a59c68fa67b3b2ba111768cf7fa9608a2b4897a3bc2ef614af9eb"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x10, 0x10, [0xff]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000640)={0x40, 0xb, 0x2, "c6ff"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000700)={0x40, 0x17, 0x6}, &(0x7f0000000740)={0x40, 0x19, 0x2, "b2e2"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x9}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000800)={0x40, 0x1e, 0x1}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x1}}) (async) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@uid={'uid', 0x3d, r1}}, {@gid={'gid', 0x3d, r2}}]}) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x401c2103, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000002030104000000f4ffffffff000000000800010001"], 0x28}}, 0x40000) (async) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x20, 0x3, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r6, 0x8905, &(0x7f0000000100)={'bond0\x00', @ifru_names='rose0\x00'}) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r7, &(0x7f0000004180)={0x2020}, 0x2020) 48.02752061s ago: executing program 5 (id=3107): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0) 47.787350562s ago: executing program 5 (id=3108): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) rename(&(0x7f0000000380)='./bus\x00', &(0x7f0000000440)='./file0\x00') 47.787155667s ago: executing program 34 (id=3108): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) rename(&(0x7f0000000380)='./bus\x00', &(0x7f0000000440)='./file0\x00') 11.536968901s ago: executing program 0 (id=3586): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005"], 0x2c}}, 0x0) 11.535933863s ago: executing program 0 (id=3587): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000004c0)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x70, r5, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x200}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x75}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xe, 0x6}}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4b7}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0x1, 0x8, 0x3ff, 0x100]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x56, 0xc}}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x632}]}, 0x70}, 0x1, 0x0, 0x0, 0x50}, 0x844) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000010, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xe00}}]}}) 11.45488405s ago: executing program 0 (id=3588): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x13, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 11.454681338s ago: executing program 0 (id=3589): ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x28b}) socket(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r1 = socket(0x1d, 0x3, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f0000000100)=r4, 0x4) sendmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24008000}, 0x20004011) (async) sendmsg$inet(r3, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x20000000) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000140)=0x8001, 0x4) (async) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$CDROM_SELECT_SPEED(r5, 0x5326, 0x8) (async) recvmsg$unix(r2, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x40000062) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="94010000", @ANYRES16=r7, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r8, @ANYBLOB="18007a800c000300784d106960256ff508000400070000004c007a8014000200e9c8b1ba7746ce2ef332bbc5c97a1b740c0003000d15107ef68d60c21400020064f1c7b9c21297fdc91a5ee15a74a83408000400da0000000c000300cb563cf9c3218fa120007a8008000400769a105808000400080000000c000300c38c1d74c2e200ef34007a800c00030082150e2f564a05fd240001004f2f145c8e994f9270345cd125444dad24f0229259a46df93ada14b60e56ea876c007a801400010080561a80fbcb61b368a6c1ea62d953380c000300ac6a00fe5cf7fa7d08000400fdffffff0c00030086191bb4280530d0140002"], 0x194}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000040)) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x0) (async) sync() (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000800)={'sit0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001400230300000000000000000a000000", @ANYRES32=r12, @ANYBLOB="080008003b06000014000100ff01"], 0x34}}, 0x0) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000240)={r12, 0x1, 0x6, @link_local}, 0x10) (async) ioctl$EVIOCGREP(r9, 0x80284504, &(0x7f0000000040)=""/102) 11.356722143s ago: executing program 0 (id=3590): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800d9bc398e0aa4e718d4e100000000000001000000001f4418f701a4000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CDROM_SEND_PACKET(r1, 0x5393, &(0x7f0000000100)={"850900", 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x3ff, 0x0}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000e40)="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", 0x241, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="19", 0x1}, {0x0}], 0x2}}], 0x1, 0x4044006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288ca6d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x0, 0x0) shutdown(r0, 0x1) 10.95608028s ago: executing program 0 (id=3600): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x85]}, 0x8, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0xd, 0x4) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x1b, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xcea}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x39, &(0x7f0000000240)=""/57, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x7, 0x8001, 0x49}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000300)=[r0, r0, r0], &(0x7f0000000340)=[{0x1, 0x5, 0xa, 0x8}, {0x2, 0x4, 0x9, 0x1}, {0x4, 0x5, 0x3, 0x2}, {0x3, 0x1, 0xe, 0xc}], 0x10, 0x6bc9, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x42, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x53, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000d00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000780)={0x534, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6a}}}}, [@NL80211_ATTR_NAN_FUNC={0x30, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x3}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7afc26407a7e"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "a259af2767eb"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x30}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x378, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x5}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x208, 0xe, 0x0, 0x1, [{0xb7, 0x0, "42b987e584c8d6887dabcc6298780b3bfb54f856a6bd1e49b9b5562f51d1555d1309b4f56e50c30e1d8b34c89f5118448c2b8af11ecd4f54e59f8c7690d1d938c396b8b775db34e4379c25f6509f39b641a440da34e93a0f56fe85b9efd539d1ccf29c6435ade6f15224199c5fe19c9f5514ef0beb199c017a096a957be72925c048b9f74c79016ba925e6bdb028291f3a110d8bb2daab64d2730935b7b750d55c7a609c71ee1b4253fcd25544763db2d1ab85"}, {0xa2, 0x0, "c1f8512181766cfa61efb521a1216cc6f9f1e8a5dba33b7b48811c9e48c06b00b0a1d686addb586c5f6d7abcd0e2f1644f824fccb1092af241516c14fd419f924b349fe46ca5ffb6b859999e04dbb53857625e3ae86dea0071d6025e1c03fb0f803782690c471ed3d86e79f9026981cf498d47a269bfa805e112d8bcdb8ce6546c969d2378c54ec1b7b21a796e072cc43a2396280b58f1d4389d001ff955"}, {0xe, 0x0, "999ea52841bd5e3d78ef"}, {0x95, 0x0, "c5e9b530a10a59a7dfc164e31db24489116a070bff4ace3cb7e6a3b0e4b79c4237cae5a3269cdcb63602c30b358a7ce0ce3af7698856d54a8b50e51d64c310d09d31f6c6a2e8e82cdf4af31e206b7d6a91873f54596f2c8494808a7d9c940bac325a59d1cb9886a428893f869109b6e57c9206d05c056bf63f080c7b6c19f47a4a973b3affe3b5c6df84edf2a270e52fcb"}]}, @NL80211_NAN_FUNC_SRF={0x150, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, 'c?m~HO'}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "8c1cacb826af"}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x7}]}, @NL80211_ATTR_NAN_FUNC={0x130, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x8}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0xe4, 0xe, 0x0, 0x1, [{0xde, 0x0, "57fa3e2ad663106fc7eccb78daf87b5dd1db9cca770ae0073f90d29cdce0b73feeec51c5218d94148733b46701ff8ab32d313b75c40272dd28388e1407491d724c877f3fbda83af116ba46f5f8168d54fca1000efc6825c2ec3b02332f7ddf1a5ad54028516820d34217425f8138ca6e1afed69a964386c5e1a1ca670f487cf010292fa6c8f174f8893d61566f9374b261fe3fc464091baab385f76b6f88f4d158bb54f3cd24529dc90a46c606548f7de2632d8111eaf270707910bff3de0b791a65fb7ba77e2b0570edde50c45c5e771148dd5d5879f1aaf291"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xfc}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "f13643913b42"}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x81}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xfb}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "1efa0a30614c"}]}]}, 0x534}, 0x1, 0x0, 0x0, 0x2}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x68, r3, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x27c, 0x69}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x33c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x224}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x31e}]}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x200040c0) socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_INPUT(r0, &(0x7f0000000f00)={0x8, {"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", 0x1000}}, 0x1006) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000002100)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001f80)={0x10c, 0x2, 0x7, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xd}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x79}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x100}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xf}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xc}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xcf4}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x10c}, 0x1, 0x0, 0x0, 0x804}, 0x0) recvmmsg(r0, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002140)=""/135, 0x87}, {&(0x7f0000002200)=""/219, 0xdb}, {&(0x7f0000002300)=""/10, 0xa}, {&(0x7f0000002340)=""/119, 0x77}, {&(0x7f00000023c0)=""/157, 0x9d}, {&(0x7f0000002480)=""/28, 0x1c}, {&(0x7f00000024c0)=""/37, 0x25}, {&(0x7f0000002500)=""/75, 0x4b}], 0x8, &(0x7f0000002600)=""/164, 0xa4}, 0x9}, {{&(0x7f00000026c0)=@hci, 0x80, &(0x7f0000002740), 0x0, &(0x7f0000002780)=""/93, 0x5d}, 0x1}, {{&(0x7f0000002800)=@caif=@dbg, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002880)=""/151, 0x97}, {&(0x7f0000002940)=""/165, 0xa5}, {&(0x7f0000002a00)=""/222, 0xde}, {&(0x7f0000002b00)=""/216, 0xd8}, {&(0x7f0000002c00)=""/85, 0x55}, {&(0x7f0000002c80)=""/92, 0x5c}, {&(0x7f0000002d00)=""/212, 0xd4}], 0x7, &(0x7f0000002e80)=""/254, 0xfe}, 0x81}, {{&(0x7f0000002f80)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005280)=[{&(0x7f0000003000)=""/179, 0xb3}, {&(0x7f00000030c0)=""/248, 0xf8}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/44, 0x2c}, {&(0x7f0000004200)=""/57, 0x39}, {&(0x7f0000004240)}, {&(0x7f0000004280)=""/4096, 0x1000}], 0x7}, 0x1d0}], 0x4, 0x40010141, &(0x7f0000005400)) sendmsg$qrtr(r0, &(0x7f00000069c0)={0x0, 0x0, &(0x7f0000005640)=[{&(0x7f0000005440)="067bfd02e19736253e5bfc9774a967fc44c9e291f56647bbf652", 0x1a}, {&(0x7f0000005480)="56ed33843c00c534dc16242be9628303fcb4489dde29e7982fa3c46478ba3ec8a10a270027359460bab70fd1271d1877e9cd01f91b453db66c48462ccefc048758c891e10b8e9a5a7344500b89d1a9422554864acad3f6d2f73556bed2aa89c45b73", 0x62}, {&(0x7f0000005500)="0ca10c87e5d80c4554295b00ee75e991ea156e81432d602b313314a9baaac6ab0eef2198a5008675f0755e90626ebb3c66a906f1fc3f924aa50ddc9ce65c755d58a36916512f4d629df33e7d014d40c421344a6e0b56a6ac8b49601ab4aa6241e034e4b3ba8eb70bafc0e72956c40ab5caa07f194ed8135917e27b4df668eaa7a5d1b06e47675485aa98c79401cfa4b7918229a1f4f15d2485596d5fb4ebb92675b972634231d7eac2200668954ff6362318ffb2f81eb8ea5d80f21e7dbf93dba5fff64294bad7b20e0bbdf2939c3e87ad84e923482ccbd15148c4ca365db2251d", 0xe1}, {&(0x7f0000005600)="c074cb430305f04600666b919346bcab6dc6", 0x12}], 0x4, &(0x7f0000005680)=[{0xb0, 0x1, 0x35, "da2b989381372f8fde2eede5df5e274227671155a63c7c1eabb95075adadfcad153ab32ebb53fdf8a53b74414a34e9c2b86eae6d5816c5c35e6d7fc4706fe2fb8449b5531d10723957ee92ce23c895909d339b6c42fdb976924eabfce6e64a6b94b312ccfa5b0ac3473dd227b23e7c2e8b34bb678de25201bf385fe7f1fdf71f23bf70eb165f3fb0977f3f4713f7fe1c4f0627394399bf1035285f54"}, {0xa8, 0x104, 0x3, "d36a3dd03b3bd49ad4f9a83dff8a8b3eef174fbe62607dff53214bdc65ab414ece15b4d89904a482052078aa7f1c55204c0d99173c8a8f1c1f498688c869c6f12bc67b2695b713d6e4ceb6c7fc01665cde7984a26c56c823d2d099af8e41807bcf4d55ce7cb0d2f37aad0152e6d65c23415790056481469a1636144e8529cc8f097d18c7ff8d2b19f643d9e436b8b6131c8fd9"}, {0x1010, 0x3, 0x9932, "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"}, {0x20, 0x1, 0x100, "0742f464613e6c39fbaddb77ced8"}, {0xc8, 0x1, 0x800, "43e667fb7604a21759f4650490beb8950ae99f6004b0c9a572bdc508bf67273f13dcfa908d621231d5b300d7d8afcb72dca55c687479b4ed819b94f7a66a5e3518dc9c8a5d0d0a79e8b257ddd5650e52883d914d8bc7b994306412336e8b2d7d8d1a37f9a0df82e663f52b57a6bc15ab77f8037169c8c096368a6056831b89954769bf74a6a00a289b0c0d0fdf382a50b98420e33030d49d454b7479bdddf55355b262c54f24fcb10d7768b2a01a55635466a5b7ea10cc"}, {0xd8, 0x10c, 0x5, "a2106849e5253900fb0852fc0d3fa9a35aacb29994088418b9c6ca1bdb705b906ecbd7409170e2b17b4ea48d51cf2e9c8e2ba775252094b4bd8fc398db7234b884b2c5f7073f0a111bc11910ac1e3b93436f567da6bc0c6de37a87ba4e8ce6172bc16067a5e30e6080139eda5f8735c501de6c38984db94e3ac5d2465a18d2bba8d14bd3cbea1516ccc5078b1085bd299d07d9d35431c6998e47e32c486f13e14a75f1f4f66652af3d97011f89a6d738b19137d992f56dc8a2fffc1b6b0eaf9f268380c0669b"}], 0x1328}, 0x38) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000006b00)={&(0x7f0000006a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000006ac0)={&(0x7f0000006a40)={0x54, r3, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x3f}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "ecaa7d45bf3194"}]}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x54) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x10010, r2, 0xd384e000) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000006c00)={&(0x7f0000006b40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000006bc0)={&(0x7f0000006b80)={0x34, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x5c}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfffb}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1f8, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x841}, 0x8000) io_uring_enter(r0, 0x4abe, 0x464f, 0x1, &(0x7f0000006c40)={[0x10]}, 0x8) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000006d80)={&(0x7f0000006c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000006d40)={&(0x7f0000006cc0)={0x50, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2f}, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffffd214}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xa}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffffffff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x4004004) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000006dc0)=0x0) getresgid(&(0x7f0000006e00), &(0x7f0000006e40)=0x0, &(0x7f0000006e80)) write$P9_RGETATTR(r0, &(0x7f0000006ec0)={0xa0, 0x19, 0x1, {0xc0, {0x40, 0x1}, 0x11, r6, r7, 0x800, 0x2, 0xd, 0x3, 0x0, 0x0, 0x5, 0x8c, 0x4, 0x100000000, 0x859, 0x100000000, 0x200, 0x8, 0x4}}, 0xa0) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000006f80)=@lrpcs={0x1, 0x4, 0x7, 0x75, 0x81}) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000006fc0)={0x4, 0x0, [{0x2c7, 0x0, 0x9}, {0x214, 0x0, 0x401}, {0x2b7, 0x0, 0x8}, {0x21b, 0x0, 0x2}]}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000007040)={0x8, r8, 0x0, {0xff, 0x6}, 0x5}, 0x1) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000007080), &(0x7f00000070c0)=0x4) 3.906416044s ago: executing program 1 (id=3643): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000ac0)}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb8f2a756b1704c036e3b0ff2d1e9d397a82e24debd371e6855b7dc2dea47d57a9dfbf4fb2ccb3f975c3851c6b5399ab80c4ba95604f70a69674cfe820d82fb06b243625a8a9e4ee52e7c2ec4d63241fb00efd1a485a36dfb4a7dd573", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000bc0)="f3fd9b6721ac03155b2dd43e82b5d4e59850f3382f2708670374b7ce24c43c484b80ff21174f5a2bd858ef7915054e86070d3bccfeb9ce6ea1d63ff12e9007d2055dfaa5fc879c69a17fd8a158d53e4127372753a0aef1d8adbef91565cc17dd6e4a93c2193732382be04848d69980", 0x6f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000780)="7de3d85265f1097a41a6850bd9a985e8f2a859ed17d73929074bee909e58754391c422d5fd5097692b96dd6f9cc6b44ac87a64246bbb7a1c13", 0x39}, {&(0x7f0000000cc0)="4cdd7354987ac7b89f8f00bfaf5bcc90633feedcf0dd871b99503be15f98f8103d8763b81d9bbd172382fe106e4b4be632ad522e53744ab1a327f0bd523b480f3a84302cf808539105bcef0098b2546409ebfb8214d846ac0ca2f6cdbcbc4fa1501b44c0d046d7d6c68d4276062347776953a3ff826af84eb605476035c416051c06ed26082fc7", 0x87}, {&(0x7f0000001cc0)="97b1b9656a92c767a1deb91f4e469d48391a71f480cfdf666fd04a3151", 0x1d}], 0x3}}], 0x4, 0x0) 2.996614872s ago: executing program 1 (id=3649): memfd_create(0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) write$binfmt_misc(r3, &(0x7f0000000140), 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 2.137096421s ago: executing program 1 (id=3654): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) write$ppp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x4000000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 1.877106108s ago: executing program 6 (id=3655): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005"], 0x2c}}, 0x0) 1.876805158s ago: executing program 6 (id=3656): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r4, r1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r5, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) 1.826936717s ago: executing program 6 (id=3657): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb5}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb4}}, 0x0) 1.826640475s ago: executing program 6 (id=3658): prctl$PR_SET_SECUREBITS(0x1c, 0x25) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000000)="ea09b7bafc1a5dbbe8165e69a528416b71a4e275bc6fdf758f90408b0885", 0x1e) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x806c4120, &(0x7f0000000080)) setresuid(0xee01, 0xee01, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000300)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x40184150, &(0x7f0000000240)={0x0, &(0x7f0000000180)="1c4878dfff27da795918dd226a25bced83fb2fdd63d18c0d47c5e62271a1f38335", 0x21}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d617371000000001400028008000240000000080800034000000008"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000002c0), 0x84000, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_auto}]}) chdir(&(0x7f0000000140)='./bus\x00') open$dir(&(0x7f0000000500)='./file0\x00', 0x3f, 0x0) 1.276796351s ago: executing program 6 (id=3659): prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f00000000c0)=0xc) getpid() r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000011143dcf0000000000000000080001000000000008004b0013"], 0x28}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) writev(r1, &(0x7f0000000200), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x7b, 0x1, 0x0, "abd657bebbdd23613cfda38214fc0e59299e701cef6329784aa62d2f521ee9cc"}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r5, 0x0) ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000000)=0x4) ioctl$BLKRRPART(r5, 0x125f, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r6, &(0x7f0000000100)={{0x3, @bcast, 0x2}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) sched_setaffinity(0x0, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x141002, 0x0) 1.276573958s ago: executing program 1 (id=3660): creat(&(0x7f0000000240)='./file0\x00', 0x148) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff000) 1.126800272s ago: executing program 6 (id=3661): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) fadvise64(r0, 0x8, 0xb, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x101) r3 = socket$inet_dccp(0x2, 0x6, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x10, 0x80800) setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a00000001900010000000000000000001c140000fe000001000000e8"], 0xa0}}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x100000000000007c}, 0x0) sendto$inet(r3, &(0x7f0000000780)='+', 0x1, 0x0, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040), 0x2) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418243) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000040)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7b1, &(0x7f0000000640)={{@local}, @my=0x1, 0x0, 0x40000000000, 0xa, 0x1ff, 0x200, 0x1fffffe, 0x2806299c}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) 1.067139872s ago: executing program 1 (id=3662): memfd_create(0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) write$binfmt_misc(r3, &(0x7f0000000140), 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 977.142745ms ago: executing program 4 (id=3663): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 126.334462ms ago: executing program 1 (id=3664): creat(&(0x7f0000000240)='./file0\x00', 0x148) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff000) utime(&(0x7f0000003000)='./file0\x00', 0x0) (fail_nth: 4) 126.002709ms ago: executing program 4 (id=3665): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r4, r1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r5, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) 125.645705ms ago: executing program 4 (id=3666): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005"], 0x2c}}, 0x0) 380.121µs ago: executing program 4 (id=3667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb5}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb4}}, 0x0) 115.464µs ago: executing program 4 (id=3668): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000f000214010029bd709097dcdf25080001000000000005005400"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x20040000) 0s ago: executing program 4 (id=3669): prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f00000000c0)=0xc) getpid() r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000011143dcf0000000000000000080001000000000008004b0013"], 0x28}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) writev(r1, &(0x7f0000000200), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x7b, 0x1, 0x0, "abd657bebbdd23613cfda38214fc0e59299e701cef6329784aa62d2f521ee9cc"}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r5, 0x0) ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000000)=0x4) ioctl$BLKRRPART(r5, 0x125f, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r6, &(0x7f0000000100)={{0x3, @bcast, 0x2}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}, 0x48) sched_setaffinity(0x0, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x141002, 0x0) kernel console output (not intermixed with test programs): process `syz.1.3345'. [ 280.204556][T15311] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 280.257249][T15256] cdc_wdm 9-1:1.0: Error autopm - -16 [ 280.257450][ T7184] usb 9-1: USB disconnect, device number 23 [ 280.259876][T15265] cdc_wdm 9-1:1.0: Error autopm - -16 [ 280.262020][T15252] cdc_wdm 9-1:1.0: Error autopm - -16 [ 280.266142][T15317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3347'. [ 280.273503][T11010] usb 11-1: USB disconnect, device number 6 [ 280.595420][ T5983] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 280.756964][ T5983] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.760565][ T5983] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 280.762996][ T5983] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 280.765867][ T5983] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.768285][ T5983] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 280.770878][ T5983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.778025][ T5983] hub 5-1:1.0: bad descriptor, ignoring hub [ 280.780260][ T5983] hub 5-1:1.0: probe with driver hub failed with error -5 [ 280.791246][ T5983] cdc_wdm 5-1:1.0: skipping garbage [ 280.793102][ T5983] cdc_wdm 5-1:1.0: skipping garbage [ 280.812268][ T5983] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 280.814319][ T5983] cdc_wdm 5-1:1.0: Unknown control protocol [ 280.884866][T15346] netlink: 'syz.6.3355': attribute type 11 has an invalid length. [ 280.972055][T15355] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3356'. [ 281.083124][T15360] FAULT_INJECTION: forcing a failure. [ 281.083124][T15360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.086830][T15360] CPU: 2 UID: 0 PID: 15360 Comm: syz.6.3358 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 281.089633][T15360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 281.092428][T15360] Call Trace: [ 281.093314][T15360] [ 281.094097][T15360] dump_stack_lvl+0x16c/0x1f0 [ 281.095362][T15360] should_fail_ex+0x497/0x5b0 [ 281.097224][T15360] _copy_from_user+0x2e/0xd0 [ 281.098660][T15360] copy_msghdr_from_user+0x99/0x160 [ 281.100048][T15360] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 281.101548][T15360] ? __pfx___lock_acquire+0x10/0x10 [ 281.102892][T15360] ___sys_sendmsg+0xff/0x1e0 [ 281.104134][T15360] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.105537][T15360] ? lock_acquire+0x2f/0xb0 [ 281.106732][T15360] ? __fget_files+0x40/0x3f0 [ 281.107962][T15360] ? fdget+0x176/0x210 [ 281.109009][T15360] __sys_sendmsg+0x117/0x1f0 [ 281.110179][T15360] ? __pfx___sys_sendmsg+0x10/0x10 [ 281.111486][T15360] ? __fget_files+0x244/0x3f0 [ 281.112685][T15360] do_syscall_64+0xcd/0x250 [ 281.113851][T15360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.115413][T15360] RIP: 0033:0x7fb73bb7e719 [ 281.116551][T15360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.121297][T15360] RSP: 002b:00007fb73c9a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.123376][T15360] RAX: ffffffffffffffda RBX: 00007fb73bd35f80 RCX: 00007fb73bb7e719 [ 281.125515][T15360] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 281.127565][T15360] RBP: 00007fb73c9a0090 R08: 0000000000000000 R09: 0000000000000000 [ 281.129587][T15360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.131637][T15360] R13: 0000000000000000 R14: 00007fb73bd35f80 R15: 00007fff9ee99e08 [ 281.133702][T15360] [ 281.241608][T15365] FAULT_INJECTION: forcing a failure. [ 281.241608][T15365] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 281.245183][T15365] CPU: 2 UID: 0 PID: 15365 Comm: syz.1.3360 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 281.247856][T15365] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 281.250544][T15365] Call Trace: [ 281.251420][T15365] [ 281.252168][T15365] dump_stack_lvl+0x16c/0x1f0 [ 281.253368][T15365] should_fail_ex+0x497/0x5b0 [ 281.254500][T15365] ? fs_reclaim_acquire+0xae/0x150 [ 281.255799][T15365] should_fail_alloc_page+0xe7/0x130 [ 281.257161][T15365] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 281.258714][T15365] __alloc_pages_noprof+0x190/0x25a0 [ 281.260006][T15365] ? hlock_class+0x4e/0x130 [ 281.261173][T15365] ? __pfx_mark_lock+0x10/0x10 [ 281.262415][T15365] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 281.263898][T15365] ? hlock_class+0x4e/0x130 [ 281.265088][T15365] ? mark_lock+0xb5/0xc60 [ 281.266219][T15365] ? psi_task_switch+0x203/0x8e0 [ 281.267530][T15365] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 281.269072][T15365] ? policy_nodemask+0xea/0x4e0 [ 281.270323][T15365] alloc_pages_mpol_noprof+0x2c9/0x610 [ 281.271716][T15365] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 281.273284][T15365] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 281.274747][T15365] folio_alloc_mpol_noprof+0x36/0xd0 [ 281.276129][T15365] vma_alloc_folio_noprof+0xee/0x1b0 [ 281.277494][T15365] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 281.279012][T15365] ? find_held_lock+0x2d/0x110 [ 281.280222][T15365] do_pte_missing+0x202d/0x3e70 [ 281.281487][T15365] __handle_mm_fault+0x100a/0x2a10 [ 281.282829][T15365] ? __pfx_mt_find+0x10/0x10 [ 281.284039][T15365] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 281.285496][T15365] ? __pfx___handle_mm_fault+0x10/0x10 [ 281.287008][T15365] ? find_vma+0xc0/0x140 [ 281.288086][T15365] ? __pfx_find_vma+0x10/0x10 [ 281.289250][T15365] handle_mm_fault+0x3fa/0xaa0 [ 281.290435][T15365] do_user_addr_fault+0x7a3/0x13f0 [ 281.291743][T15365] exc_page_fault+0x5c/0xc0 [ 281.292943][T15365] asm_exc_page_fault+0x26/0x30 [ 281.294222][T15365] RIP: 0010:_copy_to_user+0xb6/0xd0 [ 281.295544][T15365] Code: 89 ee 48 89 ef e8 9a b2 fc fc 4d 85 ff 75 a8 e8 e0 b0 fc fc 89 de 4c 89 e7 e8 26 6a 5e fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb eb 80 66 2e 0f 1f 84 00 00 00 00 [ 281.300405][T15365] RSP: 0018:ffffc90004497c48 EFLAGS: 00050246 [ 281.302096][T15365] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 0000000000000008 [ 281.304155][T15365] RDX: fffff52000892f98 RSI: ffffc90004497cb8 RDI: 0000000020019680 [ 281.306204][T15365] RBP: 0000000020019680 R08: 0000000000000000 R09: fffff52000892f97 [ 281.308269][T15365] R10: ffffc90004497cbf R11: 0000000000000000 R12: ffffc90004497cb8 [ 281.310352][T15365] R13: 0000000020019688 R14: 00007fffffffefff R15: 0000000000000000 [ 281.312429][T15365] ? _copy_to_user+0xaa/0xd0 [ 281.313634][T15365] msr_read+0x14f/0x250 [ 281.314700][T15365] ? __pfx_msr_read+0x10/0x10 [ 281.315928][T15365] ? bpf_lsm_file_permission+0x9/0x10 [ 281.317289][T15365] ? security_file_permission+0x71/0x210 [ 281.318719][T15365] ? __pfx_msr_read+0x10/0x10 [ 281.319924][T15365] vfs_read+0x1df/0xbe0 [ 281.320986][T15365] ? __fget_files+0x23a/0x3f0 [ 281.322221][T15365] ? __pfx_lock_release+0x10/0x10 [ 281.323537][T15365] ? trace_lock_acquire+0x14a/0x1d0 [ 281.324811][T15365] ? __pfx_vfs_read+0x10/0x10 [ 281.326098][T15365] ? lock_acquire+0x2f/0xb0 [ 281.327298][T15365] ? __fget_files+0x40/0x3f0 [ 281.328586][T15365] ? __fget_files+0x244/0x3f0 [ 281.329975][T15365] ksys_read+0x12f/0x260 [ 281.331118][T15365] ? __pfx_ksys_read+0x10/0x10 [ 281.332363][T15365] do_syscall_64+0xcd/0x250 [ 281.333538][T15365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.335078][T15365] RIP: 0033:0x7efc91d7e719 [ 281.336350][T15365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.341061][T15365] RSP: 002b:00007efc92be7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 281.343162][T15365] RAX: ffffffffffffffda RBX: 00007efc91f35f80 RCX: 00007efc91d7e719 [ 281.345119][T15365] RDX: 0000000000018ff8 RSI: 0000000020019680 RDI: 0000000000000003 [ 281.347113][T15365] RBP: 00007efc92be7090 R08: 0000000000000000 R09: 0000000000000000 [ 281.349009][T15365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.351000][T15365] R13: 0000000000000000 R14: 00007efc91f35f80 R15: 00007ffc7cdc70a8 [ 281.353013][T15365] [ 281.415504][ T74] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 281.565390][ T74] usb 11-1: Using ep0 maxpacket: 8 [ 281.568435][ T74] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 281.571394][ T74] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 281.574390][ T74] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 281.577083][ T74] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 281.580553][ T74] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 281.582970][ T74] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.788182][ T74] usb 11-1: GET_CAPABILITIES returned 0 [ 281.789735][ T74] usbtmc 11-1:16.0: can't read capabilities [ 282.061136][T15386] FAULT_INJECTION: forcing a failure. [ 282.061136][T15386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.064540][T15386] CPU: 3 UID: 0 PID: 15386 Comm: syz.4.3363 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 282.067570][T15386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 282.070356][T15386] Call Trace: [ 282.071236][T15386] [ 282.072043][T15386] dump_stack_lvl+0x16c/0x1f0 [ 282.073303][T15386] should_fail_ex+0x497/0x5b0 [ 282.074559][T15386] strncpy_from_user+0x3b/0x2c0 [ 282.075854][T15386] getname_flags.part.0+0x8f/0x550 [ 282.077197][T15386] getname_flags+0x93/0xf0 [ 282.078375][T15386] user_path_at+0x24/0x60 [ 282.079514][T15386] __x64_sys_utime+0x1c1/0x2c0 [ 282.080785][T15386] ? __pfx___x64_sys_utime+0x10/0x10 [ 282.082174][T15386] ? ksys_write+0x1ad/0x260 [ 282.083371][T15386] do_syscall_64+0xcd/0x250 [ 282.084579][T15386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.086136][T15386] RIP: 0033:0x7f6c62d7e719 [ 282.087314][T15386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.092295][T15386] RSP: 002b:00007f6c63c0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 282.094481][T15386] RAX: ffffffffffffffda RBX: 00007f6c62f36058 RCX: 00007f6c62d7e719 [ 282.096549][T15386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020003000 [ 282.098614][T15386] RBP: 00007f6c63c0e090 R08: 0000000000000000 R09: 0000000000000000 [ 282.100677][T15386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.102820][T15386] R13: 0000000000000001 R14: 00007f6c62f36058 R15: 00007ffdc3422e48 [ 282.104967][T15386] [ 282.113277][T15388] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3361'. [ 282.349382][T15391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3366'. [ 282.473858][T15363] usb 5-1: reset low-speed USB device number 23 using dummy_hcd [ 282.758210][T15404] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3371'. [ 282.790433][T15363] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 282.794245][ T8] usb 11-1: USB disconnect, device number 7 [ 283.065508][ T58] usb 9-1: new low-speed USB device number 24 using dummy_hcd [ 283.215451][T11010] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 283.218858][ T58] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.221439][ T58] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 283.223715][ T58] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 283.226542][ T58] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.229067][ T58] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 283.231405][ T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.237069][ T58] hub 9-1:1.0: bad descriptor, ignoring hub [ 283.238634][ T58] hub 9-1:1.0: probe with driver hub failed with error -5 [ 283.240638][ T58] cdc_wdm 9-1:1.0: skipping garbage [ 283.241992][ T58] cdc_wdm 9-1:1.0: skipping garbage [ 283.365974][T11010] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 283.368742][T11010] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.371092][T11010] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.373972][T11010] usb 6-1: config 0 interface 0 has no altsetting 0 [ 283.376556][T11010] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.378888][T11010] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.381744][T11010] usb 6-1: config 0 interface 0 has no altsetting 0 [ 283.384216][T11010] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.386873][T11010] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.389883][T11010] usb 6-1: config 0 interface 0 has no altsetting 0 [ 283.392457][T11010] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.394776][T11010] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.397754][T11010] usb 6-1: config 0 interface 0 has no altsetting 0 [ 283.400258][T11010] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.402647][T11010] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.405618][T11010] usb 6-1: config 0 interface 0 has no altsetting 0 [ 283.408922][T11010] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.411322][T11010] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.414233][T11010] usb 6-1: config 0 interface 0 has no altsetting 0 [ 283.416777][T11010] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.419149][T11010] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.422002][T11010] usb 6-1: config 0 interface 0 has no altsetting 0 [ 283.424515][T11010] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.426961][T11010] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.429811][T11010] usb 6-1: config 0 interface 0 has no altsetting 0 [ 283.433077][T11010] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 283.435650][T11010] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 283.437887][T11010] usb 6-1: Product: syz [ 283.438998][T11010] usb 6-1: Manufacturer: syz [ 283.440244][T11010] usb 6-1: SerialNumber: syz [ 283.442616][T11010] usb 6-1: config 0 descriptor?? [ 283.545381][ T74] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 283.695401][ T74] usb 11-1: Using ep0 maxpacket: 8 [ 283.697923][ T74] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 283.700059][ T74] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 283.702577][ T74] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 283.705149][ T74] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 283.707808][ T74] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.711152][ T74] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 283.713546][ T74] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.907690][T15389] cdc_wdm 5-1:1.0: Error autopm - -16 [ 283.907915][ T7427] usb 5-1: USB disconnect, device number 23 [ 283.909776][ T58] cdc_wdm 9-1:1.0: cdc-wdm1: USB WDM device [ 283.911267][T15405] cdc_wdm 5-1:1.0: Error autopm - -16 [ 283.912450][ T58] cdc_wdm 9-1:1.0: Unknown control protocol [ 283.915653][T15418] cdc_wdm 5-1:1.0: Error autopm - -16 [ 283.917464][T15412] cdc_wdm 5-1:1.0: Error autopm - -16 [ 283.919551][ T74] usb 11-1: GET_CAPABILITIES returned 0 [ 283.919937][T11010] yurex 6-1:0.0: USB YUREX device now attached to Yurex #2 [ 283.922514][ T74] usbtmc 11-1:16.0: can't read capabilities [ 283.924397][T11010] usb 6-1: USB disconnect, device number 14 [ 283.936081][T11010] yurex 6-1:0.0: USB YUREX #2 now disconnected [ 283.960783][ T40] audit: type=1400 audit(1731881986.901:776): avc: denied { write } for pid=15411 comm="syz.1.3374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 284.122037][T11010] usb 11-1: USB disconnect, device number 8 [ 284.236612][ T58] usb 9-1: reset low-speed USB device number 24 using dummy_hcd [ 284.325182][ T40] audit: type=1326 audit(1731881987.261:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz.6.3375" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb73bb7e719 code=0x0 [ 284.489120][T15426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3377'. [ 285.073290][ T40] audit: type=1400 audit(1731881988.011:778): avc: denied { setattr } for pid=15433 comm="syz.0.3381" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 285.207790][ T40] audit: type=1400 audit(1731881988.151:779): avc: denied { unmount } for pid=12500 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 285.395900][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3386'. [ 285.565474][ T830] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 285.735371][ T830] usb 11-1: Using ep0 maxpacket: 8 [ 285.738595][ T830] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 285.742355][ T830] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 285.745875][ T830] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 285.749226][ T830] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.753466][ T830] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 285.756579][ T830] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.962961][ T830] usb 11-1: GET_CAPABILITIES returned 0 [ 285.964599][ T830] usbtmc 11-1:16.0: can't read capabilities [ 286.166686][ T5983] usb 11-1: USB disconnect, device number 9 [ 286.170642][ T7427] usb 9-1: USB disconnect, device number 24 [ 286.261097][T15466] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3390'. [ 286.309990][T15471] netlink: 'syz.0.3392': attribute type 1 has an invalid length. [ 286.312400][T15471] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3392'. [ 286.368308][T15476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3395'. [ 286.505380][ T7427] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 286.575513][T15480] FAULT_INJECTION: forcing a failure. [ 286.575513][T15480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.579173][T15480] CPU: 1 UID: 0 PID: 15480 Comm: syz.0.3397 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 286.581944][T15480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 286.584723][T15480] Call Trace: [ 286.585595][T15480] [ 286.586368][T15480] dump_stack_lvl+0x16c/0x1f0 [ 286.587597][T15480] should_fail_ex+0x497/0x5b0 [ 286.588831][T15480] _copy_from_user+0x2e/0xd0 [ 286.590031][T15480] kstrtouint_from_user+0xd7/0x1c0 [ 286.591361][T15480] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 286.592836][T15480] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 286.594307][T15480] proc_fail_nth_write+0x84/0x250 [ 286.595615][T15480] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 286.597066][T15480] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 286.598508][T15480] vfs_write+0x24c/0x1150 [ 286.599633][T15480] ? __fget_files+0x23a/0x3f0 [ 286.600867][T15480] ? fdget_pos+0x24c/0x360 [ 286.602019][T15480] ? __pfx_lock_release+0x10/0x10 [ 286.603331][T15480] ? trace_lock_acquire+0x14a/0x1d0 [ 286.604683][T15480] ? __pfx_vfs_write+0x10/0x10 [ 286.605926][T15480] ? __pfx___mutex_lock+0x10/0x10 [ 286.607229][T15480] ? __fget_files+0x244/0x3f0 [ 286.608460][T15480] ksys_write+0x12f/0x260 [ 286.609532][T15480] ? __pfx_ksys_write+0x10/0x10 [ 286.610717][T15480] do_syscall_64+0xcd/0x250 [ 286.611911][T15480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.613443][T15480] RIP: 0033:0x7f15b0b7d1ff [ 286.614618][T15480] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 286.619530][T15480] RSP: 002b:00007f15b19e7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 286.621681][T15480] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f15b0b7d1ff [ 286.623714][T15480] RDX: 0000000000000001 RSI: 00007f15b19e70a0 RDI: 000000000000000b [ 286.625761][T15480] RBP: 00007f15b19e7090 R08: 0000000000000000 R09: 0000000000000000 [ 286.627813][T15480] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 286.629858][T15480] R13: 0000000000000000 R14: 00007f15b0d36130 R15: 00007ffcc666f548 [ 286.631921][T15480] [ 286.736929][T15484] FAULT_INJECTION: forcing a failure. [ 286.736929][T15484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.740397][T15484] CPU: 0 UID: 0 PID: 15484 Comm: syz.6.3399 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 286.743203][T15484] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 286.746049][T15484] Call Trace: [ 286.746950][T15484] [ 286.747758][T15484] dump_stack_lvl+0x16c/0x1f0 [ 286.749027][T15484] should_fail_ex+0x497/0x5b0 [ 286.750296][T15484] _copy_from_user+0x2e/0xd0 [ 286.751539][T15484] kvm_arch_vcpu_ioctl+0x2d47/0x4c80 [ 286.752965][T15484] ? kvm_arch_vcpu_ioctl+0x2d22/0x4c80 [ 286.754440][T15484] ? stack_trace_save+0x95/0xd0 [ 286.755813][T15484] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 286.757312][T15484] ? tomoyo_path_number_perm+0x467/0x590 [ 286.758811][T15484] ? __x64_sys_ioctl+0xbb/0x220 [ 286.760132][T15484] ? __pfx___lock_acquire+0x10/0x10 [ 286.761521][T15484] ? hlock_class+0x4e/0x130 [ 286.762737][T15484] ? mark_lock+0xb5/0xc60 [ 286.763896][T15484] ? lock_acquire.part.0+0x11b/0x380 [ 286.765334][T15484] ? __mutex_trylock_common+0xea/0x250 [ 286.766783][T15484] ? __pfx___mutex_trylock_common+0x10/0x10 [ 286.768364][T15484] ? kvm_vcpu_ioctl+0x1de/0x1510 [ 286.769700][T15484] ? rcu_is_watching+0x12/0xc0 [ 286.770986][T15484] ? trace_contention_end+0xea/0x140 [ 286.772413][T15484] ? __mutex_lock+0x1a6/0x9c0 [ 286.773680][T15484] ? tomoyo_path_number_perm+0x292/0x590 [ 286.775186][T15484] ? kvm_vcpu_ioctl+0x1de/0x1510 [ 286.776526][T15484] ? __pfx_lock_release+0x10/0x10 [ 286.777877][T15484] ? __pfx___mutex_lock+0x10/0x10 [ 286.779193][T15484] ? tomoyo_path_number_perm+0x190/0x590 [ 286.781126][T15484] ? kvm_vcpu_ioctl+0x9e1/0x1510 [ 286.782674][T15484] kvm_vcpu_ioctl+0x9e1/0x1510 [ 286.783992][T15484] ? do_vfs_ioctl+0x513/0x1990 [ 286.785294][T15484] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 286.786685][T15484] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 286.787575][ T7427] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 286.788416][T15484] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 286.791984][ T7427] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.792812][T15484] ? trace_lock_acquire+0x14a/0x1d0 [ 286.795922][ T7427] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.797468][T15484] ? selinux_file_ioctl+0x180/0x270 [ 286.797483][T15484] ? selinux_file_ioctl+0xb4/0x270 [ 286.797496][T15484] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 286.800360][ T7427] usb 9-1: config 0 interface 0 has no altsetting 0 [ 286.801727][T15484] __x64_sys_ioctl+0x18f/0x220 [ 286.803823][ T7427] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.804454][T15484] do_syscall_64+0xcd/0x250 [ 286.806286][ T7427] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.807472][T15484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.809771][ T7427] usb 9-1: config 0 interface 0 has no altsetting 0 [ 286.810984][T15484] RIP: 0033:0x7fb73bb7e719 [ 286.810997][T15484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.811007][T15484] RSP: 002b:00007fb73c9a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.814755][ T7427] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.815404][T15484] RAX: ffffffffffffffda RBX: 00007fb73bd35f80 RCX: 00007fb73bb7e719 [ 286.815413][T15484] RDX: 00000000200000c0 RSI: 000000004008ae89 RDI: 0000000000000006 [ 286.815420][T15484] RBP: 00007fb73c9a0090 R08: 0000000000000000 R09: 0000000000000000 [ 286.815427][T15484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.815433][T15484] R13: 0000000000000000 R14: 00007fb73bd35f80 R15: 00007fff9ee99e08 [ 286.815447][T15484] [ 286.840292][ T7427] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.843096][ T7427] usb 9-1: config 0 interface 0 has no altsetting 0 [ 286.845621][ T7427] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.847978][ T7427] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.850810][ T7427] usb 9-1: config 0 interface 0 has no altsetting 0 [ 286.853274][ T7427] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.855986][ T7427] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.858799][ T7427] usb 9-1: config 0 interface 0 has no altsetting 0 [ 286.861229][ T7427] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.863555][ T7427] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.866439][ T7427] usb 9-1: config 0 interface 0 has no altsetting 0 [ 286.874155][ T7427] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.876945][ T7427] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.879944][ T7427] usb 9-1: config 0 interface 0 has no altsetting 0 [ 286.882408][ T7427] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.884788][ T7427] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.888681][ T7427] usb 9-1: config 0 interface 0 has no altsetting 0 [ 286.892005][ T7427] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 286.894421][ T7427] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 286.896720][ T7427] usb 9-1: Product: syz [ 286.897874][ T7427] usb 9-1: Manufacturer: syz [ 286.899112][ T7427] usb 9-1: SerialNumber: syz [ 286.901483][ T7427] usb 9-1: config 0 descriptor?? [ 286.901855][ T40] audit: type=1326 audit(1731881989.841:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15495 comm="syz.1.3404" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc91d7e719 code=0x0 [ 286.910758][ T7427] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 287.058590][T15511] FAULT_INJECTION: forcing a failure. [ 287.058590][T15511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.062292][T15511] CPU: 0 UID: 0 PID: 15511 Comm: syz.0.3408 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 287.065058][T15511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 287.067827][T15511] Call Trace: [ 287.068887][T15511] [ 287.069894][T15511] dump_stack_lvl+0x16c/0x1f0 [ 287.071494][T15511] should_fail_ex+0x497/0x5b0 [ 287.073117][T15511] _copy_from_user+0x2e/0xd0 [ 287.074707][T15511] csum_and_copy_from_iter_full+0x218/0x1e20 [ 287.076968][T15511] ? __lock_acquire+0xbdd/0x3ce0 [ 287.078701][T15511] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 287.080877][T15511] ? policy_nodemask+0xea/0x4e0 [ 287.082545][T15511] ? alloc_pages_mpol_noprof+0x315/0x610 [ 287.084461][T15511] ip_generic_getfrag+0x175/0x260 [ 287.086191][T15511] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 287.088079][T15511] ? do_csum+0x280/0x2e0 [ 287.089540][T15511] raw6_getfrag+0x22d/0x2a0 [ 287.091089][T15511] __ip6_append_data.isra.0+0x1b45/0x4540 [ 287.093032][T15511] ? __pfx_raw6_getfrag+0x10/0x10 [ 287.094760][T15511] ? __pfx___ip6_append_data.isra.0+0x10/0x10 [ 287.096833][T15511] ip6_append_data+0x1e6/0x500 [ 287.098458][T15511] ? __pfx_raw6_getfrag+0x10/0x10 [ 287.100182][T15511] rawv6_sendmsg+0x1565/0x43d0 [ 287.101804][T15511] ? avc_has_perm_noaudit+0x119/0x3a0 [ 287.103626][T15511] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 287.105366][T15511] ? avc_has_perm_noaudit+0x143/0x3a0 [ 287.107185][T15511] ? avc_has_perm+0x11b/0x1c0 [ 287.108791][T15511] ? __pfx_avc_has_perm+0x10/0x10 [ 287.110484][T15511] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 287.111855][T15511] ? inet_sendmsg+0x119/0x140 [ 287.113105][T15511] inet_sendmsg+0x119/0x140 [ 287.114329][T15511] __sys_sendto+0x426/0x4d0 [ 287.115540][T15511] ? __pfx___sys_sendto+0x10/0x10 [ 287.116905][T15511] ? ksys_write+0x1ad/0x260 [ 287.118112][T15511] ? __pfx_ksys_write+0x10/0x10 [ 287.119409][T15511] __x64_sys_sendto+0xe0/0x1c0 [ 287.120691][T15511] ? do_syscall_64+0x91/0x250 [ 287.121936][T15511] ? lockdep_hardirqs_on+0x7c/0x110 [ 287.123284][T15511] do_syscall_64+0xcd/0x250 [ 287.124506][T15511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.126064][T15511] RIP: 0033:0x7f15b0b7e719 [ 287.127249][T15511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.132076][T15511] RSP: 002b:00007f15b1a29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 287.134583][T15511] RAX: ffffffffffffffda RBX: 00007f15b0d35f80 RCX: 00007f15b0b7e719 [ 287.136703][T15511] RDX: 0000000000000048 RSI: 0000000020000300 RDI: 0000000000000003 [ 287.139216][T15511] RBP: 00007f15b1a29090 R08: 0000000000000000 R09: fffffffffffffdfd [ 287.141466][T15511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.143590][T15511] R13: 0000000000000000 R14: 00007f15b0d35f80 R15: 00007ffcc666f548 [ 287.146022][T15511] [ 287.218060][ C3] usb 9-1: yurex_control_callback - control failed: -71 [ 287.218747][ T5983] usb 9-1: USB disconnect, device number 25 [ 287.223345][T15515] yurex 9-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 287.223779][ T5983] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 287.225604][ T7427] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 287.341865][ T40] audit: type=1400 audit(1731881990.281:781): avc: denied { mount } for pid=15519 comm="syz.0.3410" name="/" dev="9p" ino=37617825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 287.348228][T15520] netfs: Couldn't get user pages (rc=-14) [ 287.348327][ T40] audit: type=1800 audit(1731881990.291:782): pid=15520 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3410" name="file0" dev="9p" ino=37617827 res=0 errno=0 [ 287.385511][ T7427] usb 11-1: Using ep0 maxpacket: 8 [ 287.388142][ T7427] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 287.391226][ T7427] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 287.393932][ T7427] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 287.396833][ T7427] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.400259][ T7427] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 287.402923][ T7427] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.538869][T15524] FAULT_INJECTION: forcing a failure. [ 287.538869][T15524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.542884][T15524] CPU: 3 UID: 0 PID: 15524 Comm: syz.0.3412 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 287.545699][T15524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 287.548495][T15524] Call Trace: [ 287.549392][T15524] [ 287.550189][T15524] dump_stack_lvl+0x16c/0x1f0 [ 287.551504][T15524] should_fail_ex+0x497/0x5b0 [ 287.553021][T15524] _copy_from_user+0x2e/0xd0 [ 287.554575][T15524] drm_ioctl+0x501/0xc00 [ 287.555712][T15524] ? __pfx_drm_mode_closefb_ioctl+0x10/0x10 [ 287.557296][T15524] ? __pfx_drm_ioctl+0x10/0x10 [ 287.558570][T15524] ? trace_lock_acquire+0x14a/0x1d0 [ 287.559968][T15524] ? selinux_file_ioctl+0x180/0x270 [ 287.561344][T15524] ? selinux_file_ioctl+0xb4/0x270 [ 287.562678][T15524] ? __pfx_drm_ioctl+0x10/0x10 [ 287.563974][T15524] __x64_sys_ioctl+0x18f/0x220 [ 287.565248][T15524] do_syscall_64+0xcd/0x250 [ 287.566459][T15524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.568048][T15524] RIP: 0033:0x7f15b0b7e719 [ 287.569253][T15524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.574237][T15524] RSP: 002b:00007f15b1a29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.576424][T15524] RAX: ffffffffffffffda RBX: 00007f15b0d35f80 RCX: 00007f15b0b7e719 [ 287.578483][T15524] RDX: 0000000020000080 RSI: 00000000c00464d0 RDI: 0000000000000003 [ 287.580550][T15524] RBP: 00007f15b1a29090 R08: 0000000000000000 R09: 0000000000000000 [ 287.582636][T15524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.584712][T15524] R13: 0000000000000000 R14: 00007f15b0d35f80 R15: 00007ffcc666f548 [ 287.586921][T15524] [ 287.608503][ T7427] usb 11-1: GET_CAPABILITIES returned 0 [ 287.609988][ T7427] usbtmc 11-1:16.0: can't read capabilities [ 287.750224][ T40] audit: type=1400 audit(1731881990.691:783): avc: denied { setopt } for pid=15527 comm="syz.1.3414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 287.812042][ T830] usb 11-1: USB disconnect, device number 10 [ 287.948985][T15534] fuse: Bad value for 'user_id' [ 287.950375][T15534] fuse: Bad value for 'user_id' [ 288.130148][T15542] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3420'. [ 288.426035][ T830] usb 9-1: new low-speed USB device number 26 using dummy_hcd [ 288.547654][T15557] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3426'. [ 288.587410][ T830] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.592602][ T830] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 288.594801][T15564] gtp0: entered promiscuous mode [ 288.595009][ T830] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 288.596783][T15564] gtp0: entered allmulticast mode [ 288.599063][ T830] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.602874][ T830] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 288.605130][ T830] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.610072][ T830] hub 9-1:1.0: bad descriptor, ignoring hub [ 288.611610][ T830] hub 9-1:1.0: probe with driver hub failed with error -5 [ 288.613591][ T830] cdc_wdm 9-1:1.0: skipping garbage [ 288.614958][ T830] cdc_wdm 9-1:1.0: skipping garbage [ 288.618441][ T830] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 288.620035][ T830] cdc_wdm 9-1:1.0: Unknown control protocol [ 288.652720][T15568] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 288.738606][T15572] block nbd6: NBD_DISCONNECT [ 288.739952][T15572] block nbd6: Send disconnect failed -107 [ 288.743282][T15571] block nbd6: Disconnected due to user request. [ 288.745107][T15571] block nbd6: shutting down sockets [ 288.875766][T15543] cdc_wdm 9-1:1.0: Error submitting int urb - -90 [ 288.885455][ T6569] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 288.945580][T15576] nbd6: detected capacity change from 0 to 131072 [ 288.949125][T15578] block nbd6: Send control failed (result -89) [ 288.950951][T15578] block nbd6: Request send failed, requeueing [ 288.954481][ T5947] block nbd6: Receive control failed (result -32) [ 288.956200][ T8545] block nbd6: Dead connection, failed to find a fallback [ 288.958456][ T8545] block nbd6: shutting down sockets [ 288.960937][ T8545] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 288.964342][ T8545] Buffer I/O error on dev nbd6, logical block 0, async page read [ 288.967512][ T58] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 288.968473][T15578] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 288.972387][T15578] Buffer I/O error on dev nbd6, logical block 0, async page read [ 288.974564][T15578] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 288.976949][T15578] Buffer I/O error on dev nbd6, logical block 0, async page read [ 288.978978][T15578] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 288.981300][T15578] Buffer I/O error on dev nbd6, logical block 0, async page read [ 288.983332][T15578] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 288.985782][T15578] Buffer I/O error on dev nbd6, logical block 0, async page read [ 288.987837][T15578] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 288.990146][T15578] Buffer I/O error on dev nbd6, logical block 0, async page read [ 288.992137][T15578] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 288.994625][T15578] Buffer I/O error on dev nbd6, logical block 0, async page read [ 288.996771][T15578] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 288.999113][T15578] Buffer I/O error on dev nbd6, logical block 0, async page read [ 289.001140][T15578] ldm_validate_partition_table(): Disk read failed. [ 289.003074][T15578] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.005517][T15578] Buffer I/O error on dev nbd6, logical block 0, async page read [ 289.007579][T15578] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.009907][T15578] Buffer I/O error on dev nbd6, logical block 0, async page read [ 289.012003][T15578] Dev nbd6: unable to read RDB block 0 [ 289.014167][T15578] nbd6: unable to read partition table [ 289.018681][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 289.021948][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=65535, location=65535 [ 289.024598][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=65279, location=65279 [ 289.028007][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=65534, location=65534 [ 289.030115][T13784] ldm_validate_partition_table(): Disk read failed. [ 289.030614][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=65278, location=65278 [ 289.033472][T13784] Dev nbd6: unable to read RDB block 0 [ 289.034716][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=65533, location=65533 [ 289.036962][T13784] nbd6: unable to read partition table [ 289.039121][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=65277, location=65277 [ 289.039203][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=65385, location=65385 [ 289.047094][T13784] ldm_validate_partition_table(): Disk read failed. [ 289.048602][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=65129, location=65129 [ 289.049331][T13784] Dev nbd6: unable to read RDB block 0 [ 289.051434][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=65383, location=65383 [ 289.053276][T13784] nbd6: unable to read partition table [ 289.055536][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=65127, location=65127 [ 289.059569][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 289.062431][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 289.064989][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=32767, location=32767 [ 289.065388][ T6569] usb 6-1: Using ep0 maxpacket: 8 [ 289.067763][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=32511, location=32511 [ 289.070125][ T6569] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 289.071423][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=32766, location=32766 [ 289.074312][ T6569] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 289.076922][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=32510, location=32510 [ 289.079758][ T6569] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 289.082108][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=32765, location=32765 [ 289.084653][ T6569] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.087227][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=32509, location=32509 [ 289.090444][ T6569] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 289.093026][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=32617, location=32617 [ 289.095356][ T6569] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.099048][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=32361, location=32361 [ 289.103153][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=32615, location=32615 [ 289.105914][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=32359, location=32359 [ 289.108969][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 289.111830][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 289.114354][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16383, location=16383 [ 289.116955][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 289.118394][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16127, location=16127 [ 289.121028][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16382, location=16382 [ 289.123743][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16126, location=16126 [ 289.126444][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16381, location=16381 [ 289.129106][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16125, location=16125 [ 289.132057][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16233, location=16233 [ 289.134672][ T58] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 289.135509][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=15977, location=15977 [ 289.136789][ T58] usb 5-1: config 179 has no interface number 0 [ 289.136811][ T58] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 289.139655][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16231, location=16231 [ 289.141098][ T58] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 289.141116][ T58] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 289.141132][ T58] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 289.144468][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=15975, location=15975 [ 289.146562][ T58] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 289.149490][T15578] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 289.152279][ T58] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 289.155274][T15578] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 289.157820][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.159564][T15574] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 289.201531][T15580] FAULT_INJECTION: forcing a failure. [ 289.201531][T15580] name failslab, interval 1, probability 0, space 0, times 0 [ 289.205146][T15580] CPU: 3 UID: 0 PID: 15580 Comm: syz.6.3435 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 289.207955][T15580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 289.210717][T15580] Call Trace: [ 289.211598][T15580] [ 289.212398][T15580] dump_stack_lvl+0x16c/0x1f0 [ 289.213639][T15580] should_fail_ex+0x497/0x5b0 [ 289.214897][T15580] should_failslab+0xc2/0x120 [ 289.216158][T15580] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 289.217568][T15580] ? dst_alloc+0x99/0x1a0 [ 289.218715][T15580] ? __pfx_ip6_dst_gc+0x10/0x10 [ 289.220002][T15580] dst_alloc+0x99/0x1a0 [ 289.221106][T15580] ip6_dst_alloc+0x2c/0x90 [ 289.222283][T15580] ip6_create_rt_rcu+0x27b/0x510 [ 289.223594][T15580] ? __pfx_ip6_create_rt_rcu+0x10/0x10 [ 289.225029][T15580] ip6_pol_route_lookup+0xbfb/0x1e10 [ 289.226429][T15580] ? __pfx_ip6_pol_route_lookup+0x10/0x10 [ 289.227929][T15580] ? __lock_acquire+0x163e/0x3ce0 [ 289.229251][T15580] ? find_held_lock+0x2d/0x110 [ 289.230515][T15580] ? __pfx_ip6_pol_route_lookup+0x10/0x10 [ 289.232006][T15580] fib6_rule_lookup+0x56a/0x720 [ 289.233291][T15580] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 289.234712][T15580] ? lock_acquire+0x2f/0xb0 [ 289.235919][T15580] ? __might_fault+0xe3/0x190 [ 289.237161][T15580] ? __might_fault+0xe3/0x190 [ 289.238415][T15580] ? _copy_from_user+0x59/0xd0 [ 289.239683][T15580] ? copy_group_source_from_sockptr+0x236/0x6b0 [ 289.241328][T15580] ? mark_lock+0xb5/0xc60 [ 289.242482][T15580] rt6_lookup+0x15d/0x220 [ 289.243630][T15580] ? __pfx_rt6_lookup+0x10/0x10 [ 289.244929][T15580] ip6_mc_find_dev_rtnl+0x38/0x210 [ 289.246278][T15580] ip6_mc_source+0x1a6/0x13f0 [ 289.247668][T15580] do_ipv6_mcast_group_source+0x184/0x260 [ 289.249156][T15580] ? __pfx_do_ipv6_mcast_group_source+0x10/0x10 [ 289.250790][T15580] ? mark_held_locks+0x9f/0xe0 [ 289.252051][T15580] ? sockopt_lock_sock+0x54/0x70 [ 289.253357][T15580] ? __local_bh_enable_ip+0xa4/0x120 [ 289.254749][T15580] ? lockdep_hardirqs_on+0x7c/0x110 [ 289.256123][T15580] do_ipv6_setsockopt+0x315c/0x4790 [ 289.257486][T15580] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 289.258925][T15580] ? avc_has_perm_noaudit+0x143/0x3a0 [ 289.260320][T15580] ? avc_has_perm+0x11b/0x1c0 [ 289.261543][T15580] ? __pfx_avc_has_perm+0x10/0x10 [ 289.262866][T15580] ? __lock_acquire+0xbdd/0x3ce0 [ 289.264173][T15580] ? sock_has_perm+0x25d/0x2f0 [ 289.265451][T15580] ? __pfx_sock_has_perm+0x10/0x10 [ 289.266790][T15580] ? selinux_netlbl_socket_setsockopt+0x184/0x470 [ 289.268468][T15580] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 289.270218][T15580] ? ipv6_setsockopt+0xcb/0x170 [ 289.271504][T15580] ipv6_setsockopt+0xcb/0x170 [ 289.272749][T15580] udpv6_setsockopt+0x7d/0xd0 [ 289.273989][T15580] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 289.275572][T15580] do_sock_setsockopt+0x222/0x480 [ 289.276915][T15580] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 289.278365][T15580] ? fdget+0x176/0x210 [ 289.279441][T15580] __sys_setsockopt+0x1a4/0x270 [ 289.280725][T15580] ? __pfx___sys_setsockopt+0x10/0x10 [ 289.282122][T15580] ? fput+0x30/0x390 [ 289.283173][T15580] ? ksys_write+0x1ad/0x260 [ 289.284372][T15580] ? __pfx_ksys_write+0x10/0x10 [ 289.285649][T15580] __x64_sys_setsockopt+0xbd/0x160 [ 289.286984][T15580] ? do_syscall_64+0x91/0x250 [ 289.288225][T15580] ? lockdep_hardirqs_on+0x7c/0x110 [ 289.289592][T15580] do_syscall_64+0xcd/0x250 [ 289.290782][T15580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.292325][T15580] RIP: 0033:0x7fb73bb7e719 [ 289.293495][T15580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.298465][T15580] RSP: 002b:00007fb73c9a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 289.300624][T15580] RAX: ffffffffffffffda RBX: 00007fb73bd35f80 RCX: 00007fb73bb7e719 [ 289.302421][ T6569] usb 6-1: GET_CAPABILITIES returned 0 [ 289.302660][T15580] RDX: 000000000000002b RSI: 0000000000000029 RDI: 0000000000000003 [ 289.304147][ T6569] usbtmc 6-1:16.0: can't read capabilities [ 289.306138][T15580] RBP: 00007fb73c9a0090 R08: 0000000000000108 R09: 0000000000000000 [ 289.306147][T15580] R10: 0000000020000680 R11: 0000000000000246 R12: 0000000000000001 [ 289.306154][T15580] R13: 0000000000000000 R14: 00007fb73bd35f80 R15: 00007fff9ee99e08 [ 289.306167][T15580] [ 289.328744][T15582] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3436'. [ 289.384189][ T58] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input12 [ 289.566058][T15566] cdc_wdm 9-1:1.0: Error submitting int urb - -90 [ 289.568929][ T830] usb 6-1: USB disconnect, device number 15 [ 289.574991][ T40] audit: type=1400 audit(1731881992.511:784): avc: denied { remount } for pid=15573 comm="syz.0.3433" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 289.575532][T15574] overlay: Unknown parameter 'subj_user' [ 289.586963][ T40] audit: type=1400 audit(1731881992.531:785): avc: denied { nlmsg_write } for pid=15573 comm="syz.0.3433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 289.596768][ T58] usb 5-1: USB disconnect, device number 24 [ 289.596814][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 289.600447][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 289.603311][ T58] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 289.706600][T15607] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3446'. [ 289.745222][T15611] net_ratelimit: 8 callbacks suppressed [ 289.745239][T15611] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 289.895285][T15617] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3450'. [ 290.029731][T15624] sp0: Synchronizing with TNC [ 290.053761][T15623] [U] è [ 290.138082][T15629] FAULT_INJECTION: forcing a failure. [ 290.138082][T15629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.141453][T15629] CPU: 1 UID: 0 PID: 15629 Comm: syz.6.3456 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 290.144206][T15629] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 290.146963][T15629] Call Trace: [ 290.147846][T15629] [ 290.148619][T15629] dump_stack_lvl+0x16c/0x1f0 [ 290.149850][T15629] should_fail_ex+0x497/0x5b0 [ 290.151084][T15629] _copy_from_user+0x2e/0xd0 [ 290.152308][T15629] do_tcp_getsockopt+0x1e96/0x2970 [ 290.153659][T15629] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 290.155099][T15629] ? mark_lock+0xb5/0xc60 [ 290.156278][T15629] ? __pfx_mark_lock+0x10/0x10 [ 290.157538][T15629] ? avc_has_perm_noaudit+0x119/0x3a0 [ 290.158946][T15629] ? __pfx_lock_release+0x10/0x10 [ 290.160387][T15629] ? trace_lock_acquire+0x14a/0x1d0 [ 290.161800][T15629] ? __pfx_mark_lock+0x10/0x10 [ 290.163047][T15629] ? hlock_class+0x4e/0x130 [ 290.164323][T15629] ? __lock_acquire+0x163e/0x3ce0 [ 290.165634][T15629] ? __pfx___lock_acquire+0x10/0x10 [ 290.166976][T15629] ? find_held_lock+0x2d/0x110 [ 290.168229][T15629] ? __might_fault+0x13b/0x190 [ 290.169483][T15629] ? lock_acquire+0x2f/0xb0 [ 290.170671][T15629] tcp_getsockopt+0xdf/0x100 [ 290.171891][T15629] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 290.173442][T15629] do_sock_getsockopt+0x3fe/0x800 [ 290.174769][T15629] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 290.176223][T15629] ? __fget_files+0x244/0x3f0 [ 290.177462][T15629] __sys_getsockopt+0x1a1/0x270 [ 290.178736][T15629] ? __pfx___sys_getsockopt+0x10/0x10 [ 290.180141][T15629] ? fput+0x30/0x390 [ 290.181171][T15629] ? ksys_write+0x1ad/0x260 [ 290.182376][T15629] ? __pfx_ksys_write+0x10/0x10 [ 290.183666][T15629] __x64_sys_getsockopt+0xbd/0x160 [ 290.185037][T15629] ? do_syscall_64+0x91/0x250 [ 290.186261][T15629] ? lockdep_hardirqs_on+0x7c/0x110 [ 290.187609][T15629] do_syscall_64+0xcd/0x250 [ 290.188796][T15629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.190334][T15629] RIP: 0033:0x7fb73bb7e719 [ 290.191492][T15629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.196521][T15629] RSP: 002b:00007fb73c9a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 290.198722][T15629] RAX: ffffffffffffffda RBX: 00007fb73bd35f80 RCX: 00007fb73bb7e719 [ 290.200786][T15629] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 290.202842][T15629] RBP: 00007fb73c9a0090 R08: 0000000020000000 R09: 0000000000000000 [ 290.204904][T15629] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 290.206965][T15629] R13: 0000000000000000 R14: 00007fb73bd35f80 R15: 00007fff9ee99e08 [ 290.209040][T15629] [ 290.212815][T15635] bond0: Error: Cannot enslave bond to itself. [ 290.214685][T15634] bond0: Error: Cannot enslave bond to itself. [ 290.233404][T15638] FAULT_INJECTION: forcing a failure. [ 290.233404][T15638] name failslab, interval 1, probability 0, space 0, times 0 [ 290.236787][T15638] CPU: 1 UID: 0 PID: 15638 Comm: syz.6.3459 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 290.239567][T15638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 290.242397][T15638] Call Trace: [ 290.243276][T15638] [ 290.244129][T15638] dump_stack_lvl+0x16c/0x1f0 [ 290.245436][T15638] should_fail_ex+0x497/0x5b0 [ 290.246682][T15638] ? fs_reclaim_acquire+0xae/0x150 [ 290.248039][T15638] should_failslab+0xc2/0x120 [ 290.249286][T15638] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 290.250698][T15638] ? getname_flags.part.0+0x4c/0x550 [ 290.252076][T15638] getname_flags.part.0+0x4c/0x550 [ 290.253428][T15638] getname_flags+0x93/0xf0 [ 290.254629][T15638] user_path_at+0x24/0x60 [ 290.255785][T15638] user_statfs+0xa0/0x180 [ 290.256929][T15638] ? __pfx_user_statfs+0x10/0x10 [ 290.258239][T15638] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 290.259831][T15638] __do_sys_statfs+0x8a/0x100 [ 290.261074][T15638] ? __pfx___do_sys_statfs+0x10/0x10 [ 290.262451][T15638] do_syscall_64+0xcd/0x250 [ 290.263717][T15638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.265423][T15638] RIP: 0033:0x7fb73bb7e719 [ 290.266666][T15638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.271632][T15638] RSP: 002b:00007fb73c9a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 290.273792][T15638] RAX: ffffffffffffffda RBX: 00007fb73bd35f80 RCX: 00007fb73bb7e719 [ 290.275867][T15638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 290.278098][T15638] RBP: 00007fb73c9a0090 R08: 0000000000000000 R09: 0000000000000000 [ 290.280151][T15638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.282205][T15638] R13: 0000000000000000 R14: 00007fb73bd35f80 R15: 00007fff9ee99e08 [ 290.283046][T15640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3460'. [ 290.284285][T15638] [ 290.288144][T15640] netlink: 'syz.1.3460': attribute type 21 has an invalid length. [ 290.595399][ T5947] Bluetooth: hci4: command 0x0405 tx timeout [ 290.595430][ T5943] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 290.625387][ T7429] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 290.775428][ T7429] usb 6-1: Using ep0 maxpacket: 8 [ 290.778443][ T7429] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 290.782053][ T7429] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 290.784610][ T7429] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 290.787211][ T7429] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.790819][ T7429] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 290.793289][ T7429] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.823323][T15652] FAULT_INJECTION: forcing a failure. [ 290.823323][T15652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.826773][T15652] CPU: 3 UID: 0 PID: 15652 Comm: syz.6.3464 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 290.829603][T15652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 290.832425][T15652] Call Trace: [ 290.833306][T15652] [ 290.834108][T15652] dump_stack_lvl+0x16c/0x1f0 [ 290.835358][T15652] should_fail_ex+0x497/0x5b0 [ 290.836607][T15652] _copy_to_user+0x32/0xd0 [ 290.837974][T15652] simple_read_from_buffer+0xd0/0x160 [ 290.839616][T15652] proc_fail_nth_read+0x198/0x270 [ 290.841467][T15652] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.843308][T15652] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.844756][T15652] vfs_read+0x1df/0xbe0 [ 290.845853][T15652] ? __fget_files+0x23a/0x3f0 [ 290.847093][T15652] ? fdget_pos+0x24c/0x360 [ 290.848307][T15652] ? __pfx_lock_release+0x10/0x10 [ 290.849903][T15652] ? trace_lock_acquire+0x14a/0x1d0 [ 290.851375][T15652] ? __pfx_vfs_read+0x10/0x10 [ 290.852703][T15652] ? __pfx___mutex_lock+0x10/0x10 [ 290.854063][T15652] ? __fget_files+0x244/0x3f0 [ 290.855254][T15652] ksys_read+0x12f/0x260 [ 290.856369][T15652] ? __pfx_ksys_read+0x10/0x10 [ 290.857616][T15652] do_syscall_64+0xcd/0x250 [ 290.858798][T15652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.860943][T15652] RIP: 0033:0x7fb73bb7d15c [ 290.862574][T15652] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 290.867904][T15652] RSP: 002b:00007fb73c9a0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 290.870376][T15652] RAX: ffffffffffffffda RBX: 00007fb73bd35f80 RCX: 00007fb73bb7d15c [ 290.872556][T15652] RDX: 000000000000000f RSI: 00007fb73c9a00a0 RDI: 0000000000000004 [ 290.874647][T15652] RBP: 00007fb73c9a0090 R08: 0000000000000000 R09: 0000000000000000 [ 290.876722][T15652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.878994][T15652] R13: 0000000000000000 R14: 00007fb73bd35f80 R15: 00007fff9ee99e08 [ 290.881773][T15652] [ 290.954711][T15658] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.998223][ T7429] usb 6-1: GET_CAPABILITIES returned 0 [ 290.999763][ T7429] usbtmc 6-1:16.0: can't read capabilities [ 291.075103][T15665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60960 sclass=netlink_route_socket pid=15665 comm=syz.4.3470 [ 291.081149][T15666] netlink: 'syz.4.3470': attribute type 21 has an invalid length. [ 291.083260][T15666] IPv6: NLM_F_CREATE should be specified when creating new route [ 291.157015][ T7184] usb 9-1: USB disconnect, device number 26 [ 291.200124][ T7429] usb 6-1: USB disconnect, device number 16 [ 291.267239][T15681] netlink: 'syz.4.3475': attribute type 72 has an invalid length. [ 291.269265][T15681] __nla_validate_parse: 2 callbacks suppressed [ 291.269273][T15681] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3475'. [ 291.436202][T15689] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3478'. [ 291.651530][T15700] FAULT_INJECTION: forcing a failure. [ 291.651530][T15700] name failslab, interval 1, probability 0, space 0, times 0 [ 291.654936][T15700] CPU: 3 UID: 0 PID: 15700 Comm: syz.6.3482 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 291.657824][T15700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 291.661095][T15700] Call Trace: [ 291.662297][T15700] [ 291.663209][T15700] dump_stack_lvl+0x16c/0x1f0 [ 291.664493][T15700] should_fail_ex+0x497/0x5b0 [ 291.665773][T15700] ? fs_reclaim_acquire+0xae/0x150 [ 291.667169][T15700] should_failslab+0xc2/0x120 [ 291.668495][T15700] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 291.669952][T15700] ? alloc_empty_file+0x73/0x1e0 [ 291.671277][T15700] alloc_empty_file+0x73/0x1e0 [ 291.672617][T15700] path_openat+0xe1/0x2d60 [ 291.673846][T15700] ? hlock_class+0x4e/0x130 [ 291.675087][T15700] ? __lock_acquire+0x163e/0x3ce0 [ 291.676441][T15700] ? __pfx_path_openat+0x10/0x10 [ 291.677759][T15700] ? __pfx___lock_acquire+0x10/0x10 [ 291.679224][T15700] do_filp_open+0x1dc/0x430 [ 291.680471][T15700] ? __pfx_do_filp_open+0x10/0x10 [ 291.681829][T15700] ? find_held_lock+0x2d/0x110 [ 291.683110][T15700] ? _raw_spin_unlock+0x28/0x50 [ 291.684432][T15700] ? alloc_fd+0x2d7/0x6c0 [ 291.685599][T15700] do_sys_openat2+0x17a/0x1e0 [ 291.686852][T15700] ? __pfx_do_sys_openat2+0x10/0x10 [ 291.688317][T15700] ? __fget_files+0x244/0x3f0 [ 291.689586][T15700] __x64_sys_openat+0x175/0x210 [ 291.690885][T15700] ? __pfx___x64_sys_openat+0x10/0x10 [ 291.692332][T15700] ? ksys_write+0x1ad/0x260 [ 291.693563][T15700] do_syscall_64+0xcd/0x250 [ 291.694795][T15700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.696588][T15700] RIP: 0033:0x7fb73bb7d0b0 [ 291.697764][T15700] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 291.702645][T15700] RSP: 002b:00007fb73c99ff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 291.704759][T15700] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb73bb7d0b0 [ 291.706733][T15700] RDX: 0000000000000002 RSI: 00007fb73c99ffa0 RDI: 00000000ffffff9c [ 291.708771][T15700] RBP: 00007fb73c99ffa0 R08: 0000000000000000 R09: 0000000000000000 [ 291.710835][T15700] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 291.712871][T15700] R13: 0000000000000000 R14: 00007fb73bd35f80 R15: 00007fff9ee99e08 [ 291.714932][T15700] [ 291.715783][ C3] vkms_vblank_simulate: vblank timer overrun [ 291.721282][ T40] audit: type=1400 audit(1731881994.661:786): avc: denied { ioctl } for pid=15701 comm="syz.1.3483" path="socket:[55280]" dev="sockfs" ino=55280 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 291.728050][ T40] audit: type=1400 audit(1731881994.671:787): avc: denied { append } for pid=15701 comm="syz.1.3483" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 291.745671][T15705] netlink: 'syz.6.3484': attribute type 72 has an invalid length. [ 291.747742][T15705] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3484'. [ 291.755400][T11010] usb 9-1: new low-speed USB device number 27 using dummy_hcd [ 291.770542][ T40] audit: type=1400 audit(1731881994.711:788): avc: denied { ioctl } for pid=15706 comm="syz.6.3485" path="socket:[56516]" dev="sockfs" ino=56516 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 291.906802][T11010] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.909427][T11010] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 291.911737][T11010] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 291.914535][T11010] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.917685][T11010] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 291.920017][T11010] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.923364][T15718] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.924310][T11010] hub 9-1:1.0: bad descriptor, ignoring hub [ 291.925585][T15718] IPv6: NLM_F_CREATE should be set when creating new route [ 291.927118][T11010] hub 9-1:1.0: probe with driver hub failed with error -5 [ 291.928981][T15718] IPv6: NLM_F_CREATE should be set when creating new route [ 291.931055][T11010] cdc_wdm 9-1:1.0: skipping garbage [ 291.934234][T11010] cdc_wdm 9-1:1.0: skipping garbage [ 291.937184][T11010] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 291.938758][T11010] cdc_wdm 9-1:1.0: Unknown control protocol [ 292.196539][T15690] cdc_wdm 9-1:1.0: Error submitting int urb - -90 [ 292.625414][ T7184] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 292.701780][ T40] audit: type=1400 audit(1731881995.641:789): avc: denied { create } for pid=15734 comm="syz.1.3495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 292.702621][T15736] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3495'. [ 292.703050][T15735] netlink: 'syz.6.3494': attribute type 72 has an invalid length. [ 292.703069][T15735] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3494'. [ 292.707471][ T40] audit: type=1400 audit(1731881995.641:790): avc: denied { write } for pid=15734 comm="syz.1.3495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 292.722480][ T40] audit: type=1400 audit(1731881995.641:791): avc: denied { nlmsg_read } for pid=15734 comm="syz.1.3495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 292.731733][T15738] FAULT_INJECTION: forcing a failure. [ 292.731733][T15738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.735010][T15738] CPU: 1 UID: 0 PID: 15738 Comm: syz.6.3496 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 292.737795][T15738] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 292.740585][T15738] Call Trace: [ 292.741475][T15738] [ 292.742263][T15738] dump_stack_lvl+0x16c/0x1f0 [ 292.743509][T15738] should_fail_ex+0x497/0x5b0 [ 292.744768][T15738] _copy_to_user+0x32/0xd0 [ 292.745947][T15738] msr_read+0x14f/0x250 [ 292.747049][T15738] ? __pfx_msr_read+0x10/0x10 [ 292.748310][T15738] ? bpf_lsm_file_permission+0x9/0x10 [ 292.749719][T15738] ? security_file_permission+0x71/0x210 [ 292.751231][T15738] ? __pfx_msr_read+0x10/0x10 [ 292.752603][T15738] vfs_read+0x1df/0xbe0 [ 292.753742][T15738] ? __fget_files+0x23a/0x3f0 [ 292.754951][T15738] ? __pfx_lock_release+0x10/0x10 [ 292.756259][T15738] ? trace_lock_acquire+0x14a/0x1d0 [ 292.757557][T15738] ? __pfx_vfs_read+0x10/0x10 [ 292.758739][T15738] ? lock_acquire+0x2f/0xb0 [ 292.759896][T15738] ? __fget_files+0x40/0x3f0 [ 292.761134][T15738] ? __fget_files+0x244/0x3f0 [ 292.762422][T15738] ksys_read+0x12f/0x260 [ 292.763551][T15738] ? __pfx_ksys_read+0x10/0x10 [ 292.764836][T15738] do_syscall_64+0xcd/0x250 [ 292.766034][T15738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.767593][T15738] RIP: 0033:0x7fb73bb7e719 [ 292.768772][T15738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.773750][T15738] RSP: 002b:00007fb73c9a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 292.775391][ T7184] usb 5-1: Using ep0 maxpacket: 8 [ 292.775927][T15738] RAX: ffffffffffffffda RBX: 00007fb73bd35f80 RCX: 00007fb73bb7e719 [ 292.778915][ T7184] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 292.779319][T15738] RDX: 0000000000018ff8 RSI: 0000000020019680 RDI: 0000000000000003 [ 292.782244][ T7184] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 292.784251][T15738] RBP: 00007fb73c9a0090 R08: 0000000000000000 R09: 0000000000000000 [ 292.784260][T15738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.784267][T15738] R13: 0000000000000000 R14: 00007fb73bd35f80 R15: 00007fff9ee99e08 [ 292.784279][T15738] [ 292.800201][ T7184] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 292.802763][ T7184] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.807109][ T7184] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 292.810603][T15743] FAULT_INJECTION: forcing a failure. [ 292.810603][T15743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.810640][ T7184] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.813974][T15743] CPU: 1 UID: 0 PID: 15743 Comm: syz.6.3498 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 292.813989][T15743] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 292.821988][T15743] Call Trace: [ 292.822300][T15745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3499'. [ 292.822846][T15743] [ 292.822853][T15743] dump_stack_lvl+0x16c/0x1f0 [ 292.822868][T15743] should_fail_ex+0x497/0x5b0 [ 292.822882][T15743] _copy_to_user+0x32/0xd0 [ 292.825263][T15745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3499'. [ 292.825970][T15743] video_usercopy+0xf37/0x1600 [ 292.825988][T15743] ? __pfx_video_usercopy+0x10/0x10 [ 292.826007][T15743] v4l2_ioctl+0x1ba/0x250 [ 292.826017][T15743] ? __pfx_v4l2_ioctl+0x10/0x10 [ 292.826028][T15743] __x64_sys_ioctl+0x18f/0x220 [ 292.826043][T15743] do_syscall_64+0xcd/0x250 [ 292.826054][T15743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.826070][T15743] RIP: 0033:0x7fb73bb7e719 [ 292.827372][T15745] netlink: 'syz.1.3499': attribute type 11 has an invalid length. [ 292.828436][T15743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.828448][T15743] RSP: 002b:00007fb73c9a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.828461][T15743] RAX: ffffffffffffffda RBX: 00007fb73bd35f80 RCX: 00007fb73bb7e719 [ 292.828468][T15743] RDX: 00000000200002c0 RSI: 00000000c058560f RDI: 0000000000000003 [ 292.828474][T15743] RBP: 00007fb73c9a0090 R08: 0000000000000000 R09: 0000000000000000 [ 292.828481][T15743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.828487][T15743] R13: 0000000000000000 R14: 00007fb73bd35f80 R15: 00007fff9ee99e08 [ 292.828499][T15743] [ 292.924786][T15756] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3505'. [ 293.006408][T15763] FAULT_INJECTION: forcing a failure. [ 293.006408][T15763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.009809][T15763] CPU: 0 UID: 0 PID: 15763 Comm: syz.1.3507 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 293.012498][T15763] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 293.015274][T15763] Call Trace: [ 293.016143][T15763] [ 293.016886][T15763] dump_stack_lvl+0x16c/0x1f0 [ 293.018115][T15763] should_fail_ex+0x497/0x5b0 [ 293.019276][T15763] _copy_from_iter+0x2a1/0x1560 [ 293.020482][ T7184] usb 5-1: GET_CAPABILITIES returned 0 [ 293.020549][T15763] ? __pfx__copy_from_iter+0x10/0x10 [ 293.021992][ T7184] usbtmc 5-1:16.0: can't read capabilities [ 293.023245][T15763] ? __virt_addr_valid+0x1a4/0x590 [ 293.026058][T15763] ? __virt_addr_valid+0x5e/0x590 [ 293.027474][T15763] ? __phys_addr_symbol+0x30/0x80 [ 293.028805][T15763] ? __check_object_size+0x488/0x710 [ 293.030126][T15763] netlink_sendmsg+0x813/0xd70 [ 293.031368][T15763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.032742][T15763] ____sys_sendmsg+0xaaf/0xc90 [ 293.033987][T15763] ? copy_msghdr_from_user+0x10b/0x160 [ 293.035409][T15763] ? __pfx_____sys_sendmsg+0x10/0x10 [ 293.036795][T15763] ? __pfx___lock_acquire+0x10/0x10 [ 293.038144][T15763] ___sys_sendmsg+0x135/0x1e0 [ 293.039376][T15763] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.040858][T15763] ? lock_acquire+0x2f/0xb0 [ 293.042046][T15763] ? __fget_files+0x40/0x3f0 [ 293.043260][T15763] ? fdget+0x176/0x210 [ 293.044341][T15763] __sys_sendmsg+0x117/0x1f0 [ 293.045549][T15763] ? __pfx___sys_sendmsg+0x10/0x10 [ 293.046884][T15763] ? __fget_files+0x244/0x3f0 [ 293.048128][T15763] do_syscall_64+0xcd/0x250 [ 293.049313][T15763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.050849][T15763] RIP: 0033:0x7efc91d7e719 [ 293.052015][T15763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.056954][T15763] RSP: 002b:00007efc92be7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.059096][T15763] RAX: ffffffffffffffda RBX: 00007efc91f35f80 RCX: 00007efc91d7e719 [ 293.061140][T15763] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 293.063176][T15763] RBP: 00007efc92be7090 R08: 0000000000000000 R09: 0000000000000000 [ 293.065244][T15763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.067281][T15763] R13: 0000000000000000 R14: 00007efc91f35f80 R15: 00007ffc7cdc70a8 [ 293.069321][T15763] [ 293.096119][T15765] Illegal XDP return value 4294967274 on prog (id 176) dev syz_tun, expect packet loss! [ 293.149257][T15765] netlink: 'syz.1.3508': attribute type 1 has an invalid length. [ 293.151309][T15765] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3508'. [ 293.299616][T15730] cdc_wdm 9-1:1.0: Error submitting int urb - -90 [ 293.304002][ T6569] usb 5-1: USB disconnect, device number 25 [ 293.329784][T15791] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 293.409314][T15806] FAULT_INJECTION: forcing a failure. [ 293.409314][T15806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.412716][T15806] CPU: 2 UID: 0 PID: 15806 Comm: syz.6.3523 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 293.415515][T15806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 293.418772][T15806] Call Trace: [ 293.420022][T15806] [ 293.420805][T15806] dump_stack_lvl+0x16c/0x1f0 [ 293.422047][T15806] should_fail_ex+0x497/0x5b0 [ 293.423283][T15806] _copy_from_iter+0x2a1/0x1560 [ 293.424575][T15806] ? __pfx__copy_from_iter+0x10/0x10 [ 293.425957][T15806] ? __virt_addr_valid+0x1a4/0x590 [ 293.427367][T15806] ? __virt_addr_valid+0x5e/0x590 [ 293.428785][T15806] ? __phys_addr_symbol+0x30/0x80 [ 293.430050][T15806] ? __check_object_size+0x488/0x710 [ 293.431385][T15806] netlink_sendmsg+0x813/0xd70 [ 293.432643][T15806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.434016][T15806] ____sys_sendmsg+0xaaf/0xc90 [ 293.435280][T15806] ? copy_msghdr_from_user+0x10b/0x160 [ 293.436705][T15806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 293.438461][T15806] ? __pfx___lock_acquire+0x10/0x10 [ 293.440253][T15806] ___sys_sendmsg+0x135/0x1e0 [ 293.441815][T15806] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.443179][T15806] ? lock_acquire+0x2f/0xb0 [ 293.444380][T15806] ? __fget_files+0x40/0x3f0 [ 293.445563][T15806] ? fdget+0x176/0x210 [ 293.446600][T15806] __sys_sendmsg+0x117/0x1f0 [ 293.447847][T15806] ? __pfx___sys_sendmsg+0x10/0x10 [ 293.449185][T15806] ? __fget_files+0x244/0x3f0 [ 293.450428][T15806] do_syscall_64+0xcd/0x250 [ 293.451619][T15806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.453173][T15806] RIP: 0033:0x7fb73bb7e719 [ 293.454354][T15806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.460109][T15806] RSP: 002b:00007fb73c9a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.462261][T15806] RAX: ffffffffffffffda RBX: 00007fb73bd35f80 RCX: 00007fb73bb7e719 [ 293.464318][T15806] RDX: 0000000020040000 RSI: 0000000020000140 RDI: 0000000000000003 [ 293.466493][T15806] RBP: 00007fb73c9a0090 R08: 0000000000000000 R09: 0000000000000000 [ 293.468850][T15806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.470895][T15806] R13: 0000000000000000 R14: 00007fb73bd35f80 R15: 00007fff9ee99e08 [ 293.472942][T15806] [ 293.494345][T15809] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3524'. [ 293.595805][T15813] random: crng reseeded on system resumption [ 293.645382][ T7429] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 293.649312][ T40] audit: type=1400 audit(1731881996.591:792): avc: denied { getopt } for pid=15812 comm="syz.6.3526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 293.795714][ T7429] usb 6-1: Using ep0 maxpacket: 8 [ 293.798543][ T7429] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 293.801654][ T7429] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 293.804058][ T7429] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.807647][ T7429] usb 6-1: config 0 descriptor?? [ 294.012393][ T7429] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 294.406414][T15831] FAULT_INJECTION: forcing a failure. [ 294.406414][T15831] name failslab, interval 1, probability 0, space 0, times 0 [ 294.409775][T15831] CPU: 0 UID: 0 PID: 15831 Comm: syz.4.3529 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 294.412543][T15831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 294.415617][T15831] Call Trace: [ 294.416855][T15831] [ 294.417818][T15831] dump_stack_lvl+0x16c/0x1f0 [ 294.419045][T15831] should_fail_ex+0x497/0x5b0 [ 294.420280][T15831] ? fs_reclaim_acquire+0xae/0x150 [ 294.421594][T15831] should_failslab+0xc2/0x120 [ 294.422813][T15831] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 294.424178][T15831] ? security_file_alloc+0x34/0x2b0 [ 294.425503][T15831] ? rcu_is_watching+0x12/0xc0 [ 294.426717][T15831] security_file_alloc+0x34/0x2b0 [ 294.428033][T15831] init_file+0x93/0x230 [ 294.429124][T15831] alloc_empty_file+0x91/0x1e0 [ 294.430334][T15831] path_openat+0xe1/0x2d60 [ 294.431498][T15831] ? hlock_class+0x4e/0x130 [ 294.432696][T15831] ? __lock_acquire+0x163e/0x3ce0 [ 294.434004][T15831] ? __pfx_path_openat+0x10/0x10 [ 294.435605][T15831] ? __pfx___lock_acquire+0x10/0x10 [ 294.437487][T15831] do_filp_open+0x1dc/0x430 [ 294.438676][T15831] ? __pfx_do_filp_open+0x10/0x10 [ 294.439990][T15831] ? find_held_lock+0x2d/0x110 [ 294.441253][T15831] ? _raw_spin_unlock+0x28/0x50 [ 294.442524][T15831] ? alloc_fd+0x2d7/0x6c0 [ 294.443663][T15831] do_sys_openat2+0x17a/0x1e0 [ 294.444968][T15831] ? __pfx_do_sys_openat2+0x10/0x10 [ 294.445514][ T6569] usb 9-1: USB disconnect, device number 27 [ 294.446569][T15831] ? __fget_files+0x244/0x3f0 [ 294.449851][T15831] __x64_sys_openat+0x175/0x210 [ 294.451123][T15831] ? __pfx___x64_sys_openat+0x10/0x10 [ 294.452532][T15831] ? ksys_write+0x1ad/0x260 [ 294.453840][T15831] do_syscall_64+0xcd/0x250 [ 294.455313][T15831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.457496][T15831] RIP: 0033:0x7f6c62d7d0b0 [ 294.459055][T15831] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 294.464252][T15831] RSP: 002b:00007f6c63c0db70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 294.466541][T15831] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6c62d7d0b0 [ 294.468581][T15831] RDX: 0000000000000002 RSI: 00007f6c63c0dc10 RDI: 00000000ffffff9c [ 294.470610][T15831] RBP: 00007f6c63c0dc10 R08: 0000000000000000 R09: 00236f656469762f [ 294.472674][T15831] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 294.474797][T15831] R13: 0000000000000000 R14: 00007f6c62f36058 R15: 00007ffdc3422e48 [ 294.477626][T15831] [ 294.965982][T15856] nfs4: Unknown parameter 'p¾cl' [ 295.175391][ T6569] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 295.326575][ T6569] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.329388][ T6569] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 295.331763][ T6569] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 295.334597][ T6569] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.337208][ T6569] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 295.339579][ T6569] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.344223][ T6569] hub 5-1:1.0: bad descriptor, ignoring hub [ 295.345910][ T6569] hub 5-1:1.0: probe with driver hub failed with error -5 [ 295.347947][ T6569] cdc_wdm 5-1:1.0: skipping garbage [ 295.349326][ T6569] cdc_wdm 5-1:1.0: skipping garbage [ 295.351328][ T6569] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 295.352969][ T6569] cdc_wdm 5-1:1.0: Unknown control protocol [ 295.570370][T15862] netlink: 'syz.6.3542': attribute type 29 has an invalid length. [ 295.603733][T15864] FAULT_INJECTION: forcing a failure. [ 295.603733][T15864] name failslab, interval 1, probability 0, space 0, times 0 [ 295.606873][T15864] CPU: 2 UID: 0 PID: 15864 Comm: syz.6.3543 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 295.609556][T15864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.612138][T15864] Call Trace: [ 295.612960][T15864] [ 295.613685][T15864] dump_stack_lvl+0x16c/0x1f0 [ 295.614848][T15864] should_fail_ex+0x497/0x5b0 [ 295.616006][T15864] ? fs_reclaim_acquire+0xae/0x150 [ 295.616312][T15855] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 295.617271][T15864] should_failslab+0xc2/0x120 [ 295.617287][T15864] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 295.617298][T15864] ? getname_flags.part.0+0x4c/0x550 [ 295.617312][T15864] ? vfs_write+0x306/0x1150 [ 295.624024][T15864] getname_flags.part.0+0x4c/0x550 [ 295.625328][T15864] getname+0x8d/0xe0 [ 295.626286][T15864] do_sys_openat2+0x104/0x1e0 [ 295.627513][T15864] ? __pfx_do_sys_openat2+0x10/0x10 [ 295.628830][T15864] ? __fget_files+0x244/0x3f0 [ 295.630061][T15864] __x64_sys_openat+0x175/0x210 [ 295.631281][T15864] ? __pfx___x64_sys_openat+0x10/0x10 [ 295.632679][T15864] ? ksys_write+0x1ad/0x260 [ 295.633883][T15864] do_syscall_64+0xcd/0x250 [ 295.635099][T15864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.636691][T15864] RIP: 0033:0x7fb73bb7e719 [ 295.637867][T15864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.642872][T15864] RSP: 002b:00007fb73c9a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 295.645030][T15864] RAX: ffffffffffffffda RBX: 00007fb73bd35f80 RCX: 00007fb73bb7e719 [ 295.647090][T15864] RDX: 000000000000275a RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 295.649165][T15864] RBP: 00007fb73c9a0090 R08: 0000000000000000 R09: 0000000000000000 [ 295.651236][T15864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.653285][T15864] R13: 0000000000000000 R14: 00007fb73bd35f80 R15: 00007fff9ee99e08 [ 295.655225][T15864] [ 295.741944][T15866] netlink: 'syz.6.3544': attribute type 72 has an invalid length. [ 295.768477][T15870] FAULT_INJECTION: forcing a failure. [ 295.768477][T15870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.771884][T15870] CPU: 2 UID: 0 PID: 15870 Comm: syz.4.3546 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 295.774639][T15870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.777411][T15870] Call Trace: [ 295.778302][T15870] [ 295.779383][T15870] dump_stack_lvl+0x16c/0x1f0 [ 295.781176][T15870] should_fail_ex+0x497/0x5b0 [ 295.782409][T15870] _copy_from_user+0x2e/0xd0 [ 295.783589][T15870] copy_msghdr_from_user+0x99/0x160 [ 295.784885][T15870] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 295.786343][T15870] ? __pfx___lock_acquire+0x10/0x10 [ 295.787639][T15870] ___sys_sendmsg+0xff/0x1e0 [ 295.788974][T15870] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.790263][T15870] ? lock_acquire+0x2f/0xb0 [ 295.791395][T15870] ? __fget_files+0x40/0x3f0 [ 295.792578][T15870] ? fdget+0x176/0x210 [ 295.793618][T15870] __sys_sendmsg+0x117/0x1f0 [ 295.794972][T15870] ? __pfx___sys_sendmsg+0x10/0x10 [ 295.796281][T15870] ? __fget_files+0x244/0x3f0 [ 295.797479][T15870] do_syscall_64+0xcd/0x250 [ 295.798779][T15870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.800927][T15870] RIP: 0033:0x7f6c62d7e719 [ 295.802107][T15870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.807059][T15870] RSP: 002b:00007f6c63c2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.809251][T15870] RAX: ffffffffffffffda RBX: 00007f6c62f35f80 RCX: 00007f6c62d7e719 [ 295.811217][T15870] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000003 [ 295.813214][T15870] RBP: 00007f6c63c2f090 R08: 0000000000000000 R09: 0000000000000000 [ 295.815132][T15870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.817116][T15870] R13: 0000000000000000 R14: 00007f6c62f35f80 R15: 00007ffdc3422e48 [ 295.819422][T15870] [ 295.844683][ T40] audit: type=1400 audit(1731881998.781:793): avc: denied { nlmsg_write } for pid=15871 comm="syz.4.3548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 295.888392][ T40] audit: type=1326 audit(1731881998.831:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15875 comm="syz.6.3547" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb73bb7e719 code=0x0 [ 295.938610][ T40] audit: type=1326 audit(1731881998.881:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15875 comm="syz.6.3547" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb73bb7e719 code=0x0 [ 296.036586][T15886] overlayfs: failed to resolve './file1': -2 [ 296.085665][T15895] FAULT_INJECTION: forcing a failure. [ 296.085665][T15895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.089245][T15895] CPU: 2 UID: 0 PID: 15895 Comm: syz.6.3556 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 296.091946][T15895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 296.094735][T15895] Call Trace: [ 296.095626][T15895] [ 296.096575][T15895] dump_stack_lvl+0x16c/0x1f0 [ 296.097860][T15895] should_fail_ex+0x497/0x5b0 [ 296.099486][T15895] _copy_from_user+0x2e/0xd0 [ 296.101170][T15895] ____sys_sendmsg+0x8d2/0xc90 [ 296.102591][T15895] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.103968][T15895] ? __pfx___lock_acquire+0x10/0x10 [ 296.105312][T15895] ___sys_sendmsg+0x135/0x1e0 [ 296.106534][T15895] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.107900][T15895] ? lock_acquire+0x2f/0xb0 [ 296.109104][T15895] ? __fget_files+0x40/0x3f0 [ 296.110309][T15895] ? fdget+0x176/0x210 [ 296.111369][T15895] __sys_sendmsg+0x117/0x1f0 [ 296.112566][T15895] ? __pfx___sys_sendmsg+0x10/0x10 [ 296.113883][T15895] ? __fget_files+0x244/0x3f0 [ 296.115138][T15895] do_syscall_64+0xcd/0x250 [ 296.116338][T15895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.117877][T15895] RIP: 0033:0x7fb73bb7e719 [ 296.119343][T15895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.124787][T15895] RSP: 002b:00007fb73c9a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.126941][T15895] RAX: ffffffffffffffda RBX: 00007fb73bd35f80 RCX: 00007fb73bb7e719 [ 296.129029][T15895] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 296.131062][T15895] RBP: 00007fb73c9a0090 R08: 0000000000000000 R09: 0000000000000000 [ 296.133111][T15895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.135153][T15895] R13: 0000000000000000 R14: 00007fb73bd35f80 R15: 00007fff9ee99e08 [ 296.137193][T15895] [ 296.162301][T15897] netlink: 'syz.6.3557': attribute type 1 has an invalid length. [ 296.164537][T15897] nbd: couldn't find a device at index 1441800 [ 296.169230][T15897] xt_CT: You must specify a L4 protocol and not use inversions on it [ 296.305386][ T7184] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 296.391938][T11010] usb 6-1: USB disconnect, device number 17 [ 296.395017][T11010] iowarrior 6-1:0.0: I/O-Warror #1 now disconnected [ 296.437182][ T1321] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 296.446250][ T40] audit: type=1400 audit(1731881999.391:796): avc: denied { name_bind } for pid=15900 comm="syz.1.3559" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 296.455539][ T7184] usb 9-1: Using ep0 maxpacket: 8 [ 296.457992][ T7184] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 296.460131][ T7184] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 296.462560][ T7184] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 296.464943][ T7184] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 296.467565][ T7184] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.470779][ T7184] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 296.473023][ T7184] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.585432][ T1321] usb 11-1: Using ep0 maxpacket: 8 [ 296.588650][ T1321] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 296.590827][ T1321] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 296.593438][ T1321] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 296.595989][ T1321] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 296.598578][ T1321] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.601895][ T1321] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 296.604316][ T1321] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.680205][ T7184] usb 9-1: GET_CAPABILITIES returned 0 [ 296.681756][ T7184] usbtmc 9-1:16.0: can't read capabilities [ 296.812314][ T1321] usb 11-1: GET_CAPABILITIES returned 0 [ 296.813891][ T1321] usbtmc 11-1:16.0: can't read capabilities [ 296.932430][ T35] usb 9-1: USB disconnect, device number 28 [ 296.955834][T15893] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 297.064170][ T7429] usb 11-1: USB disconnect, device number 11 [ 297.079438][T15899] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 297.139133][ T40] audit: type=1326 audit(1731882000.081:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15892 comm="syz.4.3555" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c62d7e719 code=0x0 [ 297.266712][ T40] audit: type=1326 audit(1731882000.211:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15898 comm="syz.6.3558" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb73bb7e719 code=0x0 [ 297.327039][ T40] audit: type=1400 audit(1731882000.271:799): avc: denied { getopt } for pid=15906 comm="syz.1.3560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 297.332116][T15907] __nla_validate_parse: 4 callbacks suppressed [ 297.332125][T15907] netlink: 596 bytes leftover after parsing attributes in process `syz.1.3560'. [ 297.879344][ T7429] usb 5-1: USB disconnect, device number 26 [ 298.891566][T15925] overlayfs: missing 'lowerdir' [ 299.086901][ T40] audit: type=1400 audit(1731882002.031:800): avc: denied { wake_alarm } for pid=15934 comm="syz.4.3570" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 299.130557][T15936] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3569'. [ 299.425435][ T7184] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 299.455405][ T8] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 299.534987][T15942] FAULT_INJECTION: forcing a failure. [ 299.534987][T15942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.539138][T15942] CPU: 2 UID: 0 PID: 15942 Comm: syz.0.3572 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 299.542754][T15942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 299.546487][T15942] Call Trace: [ 299.547704][T15942] [ 299.548791][T15942] dump_stack_lvl+0x16c/0x1f0 [ 299.550455][T15942] should_fail_ex+0x497/0x5b0 [ 299.551721][T15942] _copy_from_iter+0x2a1/0x1560 [ 299.552988][T15942] ? __pfx__copy_from_iter+0x10/0x10 [ 299.554367][T15942] ? __virt_addr_valid+0x1a4/0x590 [ 299.555710][T15942] ? __virt_addr_valid+0x5e/0x590 [ 299.557015][T15942] ? __phys_addr_symbol+0x30/0x80 [ 299.558314][T15942] ? __check_object_size+0x488/0x710 [ 299.560029][T15942] netlink_sendmsg+0x813/0xd70 [ 299.561763][T15942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.563666][T15942] ____sys_sendmsg+0xaaf/0xc90 [ 299.565331][T15942] ? copy_msghdr_from_user+0x10b/0x160 [ 299.567038][T15942] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.568979][T15942] ? __pfx___lock_acquire+0x10/0x10 [ 299.570795][T15942] ___sys_sendmsg+0x135/0x1e0 [ 299.572463][T15942] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.574283][T15942] ? lock_acquire+0x2f/0xb0 [ 299.575891][T15942] ? __fget_files+0x40/0x3f0 [ 299.577484][T15942] ? fdget+0x176/0x210 [ 299.578937][T15942] __sys_sendmsg+0x117/0x1f0 [ 299.580472][T15942] ? __pfx___sys_sendmsg+0x10/0x10 [ 299.582207][T15942] ? __fget_files+0x244/0x3f0 [ 299.583472][T15942] do_syscall_64+0xcd/0x250 [ 299.584888][T15942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.586498][T15942] RIP: 0033:0x7f15b0b7e719 [ 299.587898][T15942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.593808][T15942] RSP: 002b:00007f15b1a29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.596806][T15942] RAX: ffffffffffffffda RBX: 00007f15b0d35f80 RCX: 00007f15b0b7e719 [ 299.598945][T15942] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 299.601214][T15942] RBP: 00007f15b1a29090 R08: 0000000000000000 R09: 0000000000000000 [ 299.603150][T15942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.605084][T15942] R13: 0000000000000000 R14: 00007f15b0d35f80 R15: 00007ffcc666f548 [ 299.607031][T15942] [ 299.625450][ T8] usb 11-1: Using ep0 maxpacket: 8 [ 299.628018][ T8] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 299.630829][ T8] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 299.630979][T15944] ieee802154 phy0 wpan0: encryption failed: -22 [ 299.633346][ T8] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 299.636890][ T7184] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.637645][ T8] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.640537][ T7184] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 299.643779][ T8] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 299.646225][T15944] netlink: 'syz.0.3573': attribute type 64 has an invalid length. [ 299.646236][T15944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3573'. [ 299.647458][ T7184] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 299.649066][ T8] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.651643][ T7184] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.666024][ T7184] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 299.669274][ T7184] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.673594][ T7184] hub 6-1:1.0: bad descriptor, ignoring hub [ 299.675179][ T7184] hub 6-1:1.0: probe with driver hub failed with error -5 [ 299.677278][ T7184] cdc_wdm 6-1:1.0: skipping garbage [ 299.678643][ T7184] cdc_wdm 6-1:1.0: skipping garbage [ 299.680999][ T7184] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 299.682587][ T7184] cdc_wdm 6-1:1.0: Unknown control protocol [ 299.818293][T15950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=15950 comm=syz.0.3576 [ 299.842765][T15952] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3577'. [ 299.845200][T15952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3577'. [ 299.863346][ T8] usb 11-1: GET_CAPABILITIES returned 0 [ 299.864854][ T8] usbtmc 11-1:16.0: can't read capabilities [ 299.867332][T15955] program syz.0.3578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.800876][T15966] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3582'. [ 301.159555][T15972] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3583'. [ 301.162398][ T40] audit: type=1400 audit(1731882004.101:801): avc: denied { read } for pid=15971 comm="syz.4.3583" path="socket:[57909]" dev="sockfs" ino=57909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 301.661463][T15977] 9pnet: Found fid 0 not clunked [ 302.068925][T16001] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3594'. [ 302.071267][T16001] netlink: 'syz.4.3594': attribute type 7 has an invalid length. [ 302.073197][T16001] netlink: 'syz.4.3594': attribute type 8 has an invalid length. [ 302.075091][T16001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3594'. [ 302.101453][T16004] netlink: 'syz.4.3595': attribute type 3 has an invalid length. [ 302.103530][T16004] netlink: 'syz.4.3595': attribute type 3 has an invalid length. [ 302.142135][T16010] FAULT_INJECTION: forcing a failure. [ 302.142135][T16010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.146194][T16010] CPU: 0 UID: 0 PID: 16010 Comm: syz.4.3597 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 302.148888][T16010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 302.151579][T16010] Call Trace: [ 302.152449][T16010] [ 302.153205][T16010] dump_stack_lvl+0x16c/0x1f0 [ 302.154404][T16010] should_fail_ex+0x497/0x5b0 [ 302.155621][T16010] _copy_from_iter+0x2a1/0x1560 [ 302.157069][T16010] ? __pfx__copy_from_iter+0x10/0x10 [ 302.158469][T16010] ? __virt_addr_valid+0x1a4/0x590 [ 302.159772][T16010] ? __virt_addr_valid+0x5e/0x590 [ 302.161053][T16010] ? __phys_addr_symbol+0x30/0x80 [ 302.162355][T16010] ? __check_object_size+0x488/0x710 [ 302.163658][T16010] netlink_sendmsg+0x813/0xd70 [ 302.164863][T16010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.166228][T16010] ____sys_sendmsg+0xaaf/0xc90 [ 302.167476][T16010] ? copy_msghdr_from_user+0x10b/0x160 [ 302.168858][T16010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.170190][T16010] ? __pfx___lock_acquire+0x10/0x10 [ 302.171519][T16010] ___sys_sendmsg+0x135/0x1e0 [ 302.172752][T16010] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.174083][T16010] ? lock_acquire+0x2f/0xb0 [ 302.175236][T16010] ? __fget_files+0x40/0x3f0 [ 302.176426][T16010] ? fdget+0x176/0x210 [ 302.177456][T16010] __sys_sendmsg+0x117/0x1f0 [ 302.178624][T16010] ? __pfx___sys_sendmsg+0x10/0x10 [ 302.179933][T16010] ? __fget_files+0x244/0x3f0 [ 302.181193][T16010] do_syscall_64+0xcd/0x250 [ 302.182375][T16010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.183902][T16010] RIP: 0033:0x7f6c62d7e719 [ 302.185100][T16010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.190126][T16010] RSP: 002b:00007f6c63c2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.192311][T16010] RAX: ffffffffffffffda RBX: 00007f6c62f35f80 RCX: 00007f6c62d7e719 [ 302.194399][T16010] RDX: 0000000000008052 RSI: 0000000020003680 RDI: 0000000000000003 [ 302.196475][T16010] RBP: 00007f6c63c2f090 R08: 0000000000000000 R09: 0000000000000000 [ 302.198559][T16010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.200628][T16010] R13: 0000000000000000 R14: 00007f6c62f35f80 R15: 00007ffdc3422e48 [ 302.202693][T16010] [ 302.205085][ T40] audit: type=1400 audit(1731882005.141:802): avc: denied { mount } for pid=15991 comm="syz.0.3590" name="/" dev="autofs" ino=56957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 302.212736][ T40] audit: type=1400 audit(1731882005.151:803): avc: denied { mounton } for pid=15991 comm="syz.0.3590" path="/330/file1/file0" dev="autofs" ino=56958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 302.220602][T16013] FAULT_INJECTION: forcing a failure. [ 302.220602][T16013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.224011][T16013] CPU: 0 UID: 0 PID: 16013 Comm: syz.4.3598 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 302.226831][T16013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 302.229642][T16013] Call Trace: [ 302.230532][T16013] [ 302.231318][T16013] dump_stack_lvl+0x16c/0x1f0 [ 302.232581][T16013] should_fail_ex+0x497/0x5b0 [ 302.233846][T16013] _copy_from_iter+0x2a1/0x1560 [ 302.235158][T16013] ? __pfx__copy_from_iter+0x10/0x10 [ 302.236568][T16013] ? __virt_addr_valid+0x1a4/0x590 [ 302.237930][T16013] ? __virt_addr_valid+0x5e/0x590 [ 302.239264][T16013] ? __phys_addr_symbol+0x30/0x80 [ 302.240594][T16013] ? __check_object_size+0x488/0x710 [ 302.241984][T16013] netlink_sendmsg+0x813/0xd70 [ 302.243270][T16013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.244677][T16013] ____sys_sendmsg+0xaaf/0xc90 [ 302.245954][T16013] ? copy_msghdr_from_user+0x10b/0x160 [ 302.247390][T16013] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.248795][T16013] ? __pfx___lock_acquire+0x10/0x10 [ 302.250167][T16013] ___sys_sendmsg+0x135/0x1e0 [ 302.251397][T16013] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.252778][T16013] ? lock_acquire+0x2f/0xb0 [ 302.253978][T16013] ? __fget_files+0x40/0x3f0 [ 302.255221][T16013] ? fdget+0x176/0x210 [ 302.256486][T16013] __sys_sendmsg+0x117/0x1f0 [ 302.257740][T16013] ? __pfx___sys_sendmsg+0x10/0x10 [ 302.259091][T16013] ? __fget_files+0x244/0x3f0 [ 302.260361][T16013] do_syscall_64+0xcd/0x250 [ 302.261566][T16013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.263110][T16013] RIP: 0033:0x7f6c62d7e719 [ 302.264290][T16013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.269308][T16013] RSP: 002b:00007f6c63c2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.271493][T16013] RAX: ffffffffffffffda RBX: 00007f6c62f35f80 RCX: 00007f6c62d7e719 [ 302.273570][T16013] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 302.275672][T16013] RBP: 00007f6c63c2f090 R08: 0000000000000000 R09: 0000000000000000 [ 302.277751][T16013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.279836][T16013] R13: 0000000000000000 R14: 00007f6c62f35f80 R15: 00007ffdc3422e48 [ 302.281919][T16013] [ 302.322957][ T40] audit: type=1400 audit(1731882005.261:804): avc: denied { unmount } for pid=12500 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 303.285088][T16023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3603'. [ 303.287459][T16023] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3603'. [ 303.296926][T15938] cdc_wdm 6-1:1.0: Error autopm - -16 [ 303.297066][ T7184] usb 6-1: USB disconnect, device number 18 [ 303.300484][T15940] cdc_wdm 6-1:1.0: Error autopm - -16 [ 303.310649][ T8] usb 11-1: USB disconnect, device number 12 [ 303.343252][ T40] audit: type=1400 audit(1731882006.281:805): avc: denied { checkpoint_restore } for pid=16031 comm="syz.1.3607" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 303.467666][T16044] FAULT_INJECTION: forcing a failure. [ 303.467666][T16044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.470942][T16044] CPU: 2 UID: 0 PID: 16044 Comm: syz.6.3610 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 303.473619][T16044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 303.476366][T16044] Call Trace: [ 303.477215][T16044] [ 303.477968][T16044] dump_stack_lvl+0x16c/0x1f0 [ 303.479164][T16044] should_fail_ex+0x497/0x5b0 [ 303.480365][T16044] _copy_to_user+0x32/0xd0 [ 303.481506][T16044] msr_read+0x14f/0x250 [ 303.482556][T16044] ? __pfx_msr_read+0x10/0x10 [ 303.483743][T16044] ? bpf_lsm_file_permission+0x9/0x10 [ 303.485063][T16044] ? security_file_permission+0x71/0x210 [ 303.486523][T16044] ? __pfx_msr_read+0x10/0x10 [ 303.487701][T16044] vfs_read+0x1df/0xbe0 [ 303.488761][T16044] ? __fget_files+0x23a/0x3f0 [ 303.489958][T16044] ? __pfx_lock_release+0x10/0x10 [ 303.491208][T16044] ? trace_lock_acquire+0x14a/0x1d0 [ 303.492509][T16044] ? __pfx_vfs_read+0x10/0x10 [ 303.493702][T16044] ? lock_acquire+0x2f/0xb0 [ 303.494852][T16044] ? __fget_files+0x40/0x3f0 [ 303.496090][T16044] ? __fget_files+0x244/0x3f0 [ 303.497294][T16044] ksys_read+0x12f/0x260 [ 303.498360][T16044] ? __pfx_ksys_read+0x10/0x10 [ 303.499547][T16044] do_syscall_64+0xcd/0x250 [ 303.500720][T16044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.502214][T16044] RIP: 0033:0x7fb73bb7e719 [ 303.503360][T16044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.508138][T16044] RSP: 002b:00007fb73c9a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 303.510435][T16044] RAX: ffffffffffffffda RBX: 00007fb73bd35f80 RCX: 00007fb73bb7e719 [ 303.512403][T16044] RDX: 0000000000018ff8 RSI: 0000000020019680 RDI: 0000000000000003 [ 303.514395][T16044] RBP: 00007fb73c9a0090 R08: 0000000000000000 R09: 0000000000000000 [ 303.516378][T16044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.518354][T16044] R13: 0000000000000000 R14: 00007fb73bd35f80 R15: 00007fff9ee99e08 [ 303.520364][T16044] [ 303.543488][T16047] geneve2: entered promiscuous mode [ 303.544809][T16047] geneve2: entered allmulticast mode [ 303.548442][T16049] FAULT_INJECTION: forcing a failure. [ 303.548442][T16049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.551841][T16049] CPU: 3 UID: 0 PID: 16049 Comm: syz.1.3612 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 303.554584][T16049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 303.557384][T16049] Call Trace: [ 303.558262][T16049] [ 303.559040][T16049] dump_stack_lvl+0x16c/0x1f0 [ 303.560326][T16049] should_fail_ex+0x497/0x5b0 [ 303.561568][T16049] _copy_to_user+0x32/0xd0 [ 303.562789][T16049] simple_read_from_buffer+0xd0/0x160 [ 303.564213][T16049] proc_fail_nth_read+0x198/0x270 [ 303.565545][T16049] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 303.567000][T16049] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 303.568467][T16049] vfs_read+0x1df/0xbe0 [ 303.569576][T16049] ? __fget_files+0x23a/0x3f0 [ 303.570847][T16049] ? fdget_pos+0x24c/0x360 [ 303.572041][T16049] ? __pfx_lock_release+0x10/0x10 [ 303.573365][T16049] ? trace_lock_acquire+0x14a/0x1d0 [ 303.574849][T16049] ? __pfx_vfs_read+0x10/0x10 [ 303.576087][T16049] ? __pfx___mutex_lock+0x10/0x10 [ 303.577406][T16049] ? __fget_files+0x244/0x3f0 [ 303.578642][T16049] ksys_read+0x12f/0x260 [ 303.579767][T16049] ? __pfx_ksys_read+0x10/0x10 [ 303.581035][T16049] do_syscall_64+0xcd/0x250 [ 303.582229][T16049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.583787][T16049] RIP: 0033:0x7efc91d7d15c [ 303.584957][T16049] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 303.589933][T16049] RSP: 002b:00007efc92be7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 303.592120][T16049] RAX: ffffffffffffffda RBX: 00007efc91f35f80 RCX: 00007efc91d7d15c [ 303.594191][T16049] RDX: 000000000000000f RSI: 00007efc92be70a0 RDI: 0000000000000004 [ 303.596248][T16049] RBP: 00007efc92be7090 R08: 0000000000000000 R09: 0000000000000000 [ 303.598330][T16049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.601485][T16049] R13: 0000000000000000 R14: 00007efc91f35f80 R15: 00007ffc7cdc70a8 [ 303.601511][T16049] [ 303.729683][T16056] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3613'. [ 303.865472][ T7184] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 304.018127][ T7184] usb 11-1: Using ep0 maxpacket: 8 [ 304.020849][ T7184] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 304.022965][ T7184] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 304.025566][ T7184] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 304.028125][ T7184] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 304.030704][ T7184] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 304.034065][ T7184] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 304.035384][T11010] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 304.036568][ T7184] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.155424][ T8] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 304.186534][T11010] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.189256][T11010] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 304.191624][T11010] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 304.194689][T11010] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.197261][T11010] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 304.199597][T11010] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.203713][T11010] hub 6-1:1.0: bad descriptor, ignoring hub [ 304.205286][T11010] hub 6-1:1.0: probe with driver hub failed with error -5 [ 304.207438][T11010] cdc_wdm 6-1:1.0: skipping garbage [ 304.208811][T11010] cdc_wdm 6-1:1.0: skipping garbage [ 304.210637][T11010] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 304.212198][T11010] cdc_wdm 6-1:1.0: Unknown control protocol [ 304.242894][ T7184] usb 11-1: usb_control_msg returned -32 [ 304.244452][ T7184] usbtmc 11-1:16.0: can't read capabilities [ 304.305509][ T8] usb 9-1: Using ep0 maxpacket: 8 [ 304.308004][ T8] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 304.310900][ T8] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 304.313612][ T8] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 304.316284][ T8] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 304.319654][ T8] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 304.322009][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.526927][ T8] usb 9-1: GET_CAPABILITIES returned 0 [ 304.528428][ T8] usbtmc 9-1:16.0: can't read capabilities [ 305.316445][T16057] cdc_wdm 6-1:1.0: Error autopm - -16 [ 305.316616][T11010] usb 6-1: USB disconnect, device number 19 [ 305.318634][T16059] cdc_wdm 6-1:1.0: Error autopm - -16 [ 305.324243][T16061] cdc_wdm 6-1:1.0: Error autopm - -16 [ 305.327921][ T5983] usb 9-1: USB disconnect, device number 29 [ 305.900431][T16069] kvm: emulating exchange as write [ 305.923367][T16069] devtmpfs: Unknown parameter 'usrquota“?w„ Ö¢¤üG«DÖdGZ²CxýD9æÊuMã)ââj$F1n@Þ [ 305.923367][T16069] 9t.[­µ [ 309.973237][T16157] dump_stack_lvl+0x16c/0x1f0 [ 309.974487][T16157] should_fail_ex+0x497/0x5b0 [ 309.975732][T16157] should_failslab+0xc2/0x120 [ 309.976962][T16157] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 309.978359][T16157] ? skb_clone+0x190/0x3f0 [ 309.979535][T16157] skb_clone+0x190/0x3f0 [ 309.980648][T16157] netlink_deliver_tap+0xab3/0xd90 [ 309.981989][T16157] netlink_unicast+0x5e1/0x7f0 [ 309.983242][T16157] ? __pfx_netlink_unicast+0x10/0x10 [ 309.984621][T16157] netlink_sendmsg+0x8b8/0xd70 [ 309.985867][T16157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.987381][T16157] ____sys_sendmsg+0xaaf/0xc90 [ 309.988727][T16157] ? copy_msghdr_from_user+0x10b/0x160 [ 309.990155][T16157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.991550][T16157] ? __pfx___lock_acquire+0x10/0x10 [ 309.992911][T16157] ___sys_sendmsg+0x135/0x1e0 [ 309.994161][T16157] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.995623][T16157] ? lock_acquire+0x2f/0xb0 [ 309.996790][T16157] ? __fget_files+0x40/0x3f0 [ 309.998021][T16157] ? fdget+0x176/0x210 [ 309.999101][T16157] __sys_sendmsg+0x117/0x1f0 [ 310.000330][T16157] ? __pfx___sys_sendmsg+0x10/0x10 [ 310.001675][T16157] ? __fget_files+0x244/0x3f0 [ 310.002925][T16157] do_syscall_64+0xcd/0x250 [ 310.004141][T16157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.005701][T16157] RIP: 0033:0x7fb73bb7e719 [ 310.006885][T16157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.011889][T16157] RSP: 002b:00007fb73c9a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.014068][T16157] RAX: ffffffffffffffda RBX: 00007fb73bd35f80 RCX: 00007fb73bb7e719 [ 310.016145][T16157] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 310.018206][T16157] RBP: 00007fb73c9a0090 R08: 0000000000000000 R09: 0000000000000000 [ 310.020510][T16157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.022530][T16157] R13: 0000000000000000 R14: 00007fb73bd35f80 R15: 00007fff9ee99e08 [ 310.024498][T16157] [ 310.138159][T16161] fuse: Bad value for 'group_id' [ 310.139460][T16161] fuse: Bad value for 'group_id' [ 310.169139][T16163] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3648'. [ 310.171569][T16163] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3648'. [ 311.195432][ T1321] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 311.345402][ T1321] usb 9-1: Using ep0 maxpacket: 8 [ 311.348018][ T1321] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 311.350824][ T1321] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 311.353304][ T1321] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 311.355888][ T1321] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 311.359169][ T1321] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 311.361574][ T1321] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.418430][T16186] fuse: Bad value for 'group_id' [ 311.419772][T16186] fuse: Bad value for 'group_id' [ 311.567089][ T1321] usb 9-1: GET_CAPABILITIES returned 0 [ 311.568627][ T1321] usbtmc 9-1:16.0: can't read capabilities [ 311.769566][ T7184] usb 9-1: USB disconnect, device number 30 [ 312.059574][T16194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3659'. [ 312.061927][T16194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3659'. [ 312.250024][T16199] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3661'. [ 313.207179][T16218] FAULT_INJECTION: forcing a failure. [ 313.207179][T16218] name failslab, interval 1, probability 0, space 0, times 0 [ 313.210667][T16218] CPU: 1 UID: 0 PID: 16218 Comm: syz.1.3664 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 313.213402][T16218] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 313.216183][T16218] Call Trace: [ 313.217066][T16218] [ 313.217862][T16218] dump_stack_lvl+0x16c/0x1f0 [ 313.219105][T16218] should_fail_ex+0x497/0x5b0 [ 313.220356][T16218] ? fs_reclaim_acquire+0xae/0x150 [ 313.221700][T16218] should_failslab+0xc2/0x120 [ 313.222955][T16218] __kmalloc_cache_noprof+0x6b/0x300 [ 313.224344][T16218] ? __pfx___folio_start_writeback+0x10/0x10 [ 313.225910][T16218] ? netfs_buffer_make_space+0x432/0x6b0 [ 313.226865][T16222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3669'. [ 313.227387][T16218] netfs_buffer_make_space+0x432/0x6b0 [ 313.229717][T16222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3669'. [ 313.231133][T16218] netfs_buffer_append_folio+0x298/0x360 [ 313.234956][T16218] netfs_write_folio+0x540/0x1930 [ 313.236363][T16218] netfs_writepages+0x29a/0x9d0 [ 313.237648][T16218] ? __pfx_netfs_writepages+0x10/0x10 [ 313.239056][T16218] ? __pfx___lock_acquire+0x10/0x10 [ 313.240421][T16218] ? __pfx___lock_acquire+0x10/0x10 [ 313.241771][T16218] ? __pfx_mark_lock+0x10/0x10 [ 313.243033][T16218] ? __pfx_netfs_writepages+0x10/0x10 [ 313.244444][T16218] do_writepages+0x1a3/0x7f0 [ 313.245652][T16218] ? __pfx_do_writepages+0x10/0x10 [ 313.246950][T16218] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 313.248489][T16218] ? do_raw_spin_lock+0x12d/0x2c0 [ 313.249820][T16218] ? do_raw_spin_unlock+0x172/0x230 [ 313.251197][T16218] ? _raw_spin_unlock+0x28/0x50 [ 313.252492][T16218] ? wbc_attach_and_unlock_inode+0x597/0x940 [ 313.254079][T16218] filemap_fdatawrite_wbc+0x148/0x1c0 [ 313.255512][T16218] __filemap_fdatawrite_range+0xb3/0xf0 [ 313.256968][T16218] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 313.258627][T16218] ? v9fs_fid_lookup+0xe9/0xec0 [ 313.259927][T16218] v9fs_vfs_setattr+0x93a/0xab0 [ 313.261210][T16218] ? __pfx_v9fs_vfs_setattr+0x10/0x10 [ 313.262637][T16218] ? selinux_inode_setattr+0x246/0x400 [ 313.264097][T16218] ? evm_inode_setattr+0x65/0x680 [ 313.265421][T16218] ? __pfx_make_vfsgid+0x10/0x10 [ 313.266704][T16218] ? __pfx_current_time+0x10/0x10 [ 313.268008][T16218] ? __pfx_v9fs_vfs_setattr+0x10/0x10 [ 313.269399][T16218] notify_change+0x6a6/0x1230 [ 313.270640][T16218] vfs_utimes+0x41d/0x850 [ 313.271784][T16218] ? __pfx_vfs_utimes+0x10/0x10 [ 313.273064][T16218] ? putname+0x12e/0x170 [ 313.274190][T16218] __x64_sys_utime+0x1e3/0x2c0 [ 313.275452][T16218] ? __pfx___x64_sys_utime+0x10/0x10 [ 313.276835][T16218] ? ksys_write+0x1ad/0x260 [ 313.278024][T16218] do_syscall_64+0xcd/0x250 [ 313.279229][T16218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.280950][T16218] RIP: 0033:0x7efc91d7e719 [ 313.282151][T16218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.287272][T16218] RSP: 002b:00007efc92bc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 313.289527][T16218] RAX: ffffffffffffffda RBX: 00007efc91f36058 RCX: 00007efc91d7e719 [ 313.291634][T16218] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020003000 [ 313.293778][T16218] RBP: 00007efc92bc6090 R08: 0000000000000000 R09: 0000000000000000 [ 313.295942][T16218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.298043][T16218] R13: 0000000000000001 R14: 00007efc91f36058 R15: 00007ffc7cdc70a8 [ 313.300207][T16218] [ 313.304078][T16218] ------------[ cut here ]------------ [ 313.305625][T16218] WARNING: CPU: 1 PID: 16218 at lib/iov_iter.c:255 _copy_from_iter+0x3a0/0x1560 [ 313.308453][T16218] Modules linked in: [ 313.309494][T16218] CPU: 1 UID: 0 PID: 16218 Comm: syz.1.3664 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 313.313400][T16218] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 313.316474][T16218] RIP: 0010:_copy_from_iter+0x3a0/0x1560 [ 313.317965][T16218] Code: 60 fd 0f 01 cb 48 89 d9 4c 89 f7 48 89 ee f3 a4 0f 1f 00 48 89 cd 0f 01 ca 49 89 df 49 29 cf e9 1e ff ff ff e8 61 e1 fe fc 90 <0f> 0b 90 e9 ae fd ff ff e8 53 e1 fe fc 89 ee bf 01 00 00 00 e8 27 [ 313.322979][T16218] RSP: 0018:ffffc9000467ef30 EFLAGS: 00010293 [ 313.324592][T16218] RAX: 0000000000000000 RBX: 0000000000007fec RCX: ffffffff848e9718 [ 313.326821][T16218] RDX: ffff8880241d4880 RSI: ffffffff848e99ff RDI: 0000000000000001 [ 313.328908][T16218] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 313.330978][T16218] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888056914f60 [ 313.333047][T16218] R13: ffffc9000467f320 R14: ffff888056914f60 R15: dffffc0000000000 [ 313.335140][T16218] FS: 00007efc92bc66c0(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 313.337655][T16218] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 313.339389][T16218] CR2: 000055557d5ce808 CR3: 000000004739c000 CR4: 0000000000352ef0 [ 313.341491][T16218] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 313.344043][T16218] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 313.346237][T16218] Call Trace: [ 313.347122][T16218] [ 313.347922][T16218] ? __warn+0xea/0x3d0 [ 313.349014][T16218] ? _copy_from_iter+0x3a0/0x1560 [ 313.350336][T16218] ? report_bug+0x3c0/0x580 [ 313.351541][T16218] ? handle_bug+0x54/0xa0 [ 313.352686][T16218] ? exc_invalid_op+0x17/0x50 [ 313.354774][T16218] ? asm_exc_invalid_op+0x1a/0x20 [ 313.356271][T16218] ? _copy_from_iter+0xb8/0x1560 [ 313.357582][T16218] ? _copy_from_iter+0x39f/0x1560 [ 313.358919][T16218] ? _copy_from_iter+0x3a0/0x1560 [ 313.360460][T16218] ? __pfx_lock_release+0x10/0x10 [ 313.361799][T16218] ? __pfx__copy_from_iter+0x10/0x10 [ 313.363182][T16218] ? __virt_addr_valid+0x1a4/0x590 [ 313.364546][T16218] ? __virt_addr_valid+0x5e/0x590 [ 313.365904][T16218] ? const_folio_flags.constprop.0+0x56/0x150 [ 313.367511][T16218] ? __phys_addr_symbol+0x30/0x80 [ 313.368813][T16218] ? __check_object_size+0x488/0x710 [ 313.370195][T16218] p9pdu_vwritef+0x2d0/0x1cf0 [ 313.371475][T16218] ? p9pdu_writef+0xc4/0x100 [ 313.372693][T16218] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 313.374053][T16218] ? __pfx_p9_tag_alloc+0x10/0x10 [ 313.375510][T16218] ? hlock_class+0x4e/0x130 [ 313.376722][T16218] ? mark_lock+0xb5/0xc60 [ 313.377894][T16218] p9_client_prepare_req+0x244/0x4d0 [ 313.379295][T16218] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 313.381356][T16218] ? __kernel_text_address+0xd/0x40 [ 313.382721][T16218] ? unwind_get_return_address+0x59/0xa0 [ 313.384202][T16218] ? arch_stack_walk+0xa7/0x100 [ 313.385535][T16218] p9_client_rpc+0x1c3/0xc10 [ 313.386747][T16218] ? __pfx_p9_client_rpc+0x10/0x10 [ 313.388095][T16218] ? hlock_class+0x4e/0x130 [ 313.389292][T16218] ? mark_lock+0xb5/0xc60 [ 313.390434][T16218] ? __pfx_mark_lock+0x10/0x10 [ 313.391696][T16218] p9_client_write+0x31f/0x680 [ 313.392959][T16218] ? __pfx_p9_client_write+0x10/0x10 [ 313.394353][T16218] ? mark_held_locks+0x9f/0xe0 [ 313.395751][T16218] v9fs_issue_write+0xe2/0x180 [ 313.397022][T16218] ? __pfx_v9fs_issue_write+0x10/0x10 [ 313.398435][T16218] ? rcu_is_watching+0x12/0xc0 [ 313.399694][T16218] ? trace_netfs_sreq+0x193/0x220 [ 313.401013][T16218] netfs_do_issue_write+0x92/0x110 [ 313.402351][T16218] netfs_advance_write+0x384/0xc80 [ 313.403698][T16218] ? netfs_buffer_append_folio+0x276/0x360 [ 313.405221][T16218] netfs_write_folio+0xc19/0x1930 [ 313.406590][T16218] netfs_writepages+0x29a/0x9d0 [ 313.407892][T16218] ? __pfx_netfs_writepages+0x10/0x10 [ 313.409298][T16218] ? __pfx___lock_acquire+0x10/0x10 [ 313.410818][T16218] ? __pfx___lock_acquire+0x10/0x10 [ 313.412186][T16218] ? __pfx_mark_lock+0x10/0x10 [ 313.413438][T16218] ? __pfx_netfs_writepages+0x10/0x10 [ 313.414864][T16218] do_writepages+0x1a3/0x7f0 [ 313.416268][T16218] ? __pfx_do_writepages+0x10/0x10 [ 313.417623][T16218] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 313.419013][T16218] ? do_raw_spin_lock+0x12d/0x2c0 [ 313.420341][T16218] ? do_raw_spin_unlock+0x172/0x230 [ 313.421733][T16218] ? _raw_spin_unlock+0x28/0x50 [ 313.423044][T16218] ? wbc_attach_and_unlock_inode+0x597/0x940 [ 313.424676][T16218] filemap_fdatawrite_wbc+0x148/0x1c0 [ 313.426230][T16218] __filemap_fdatawrite_range+0xb3/0xf0 [ 313.427683][T16218] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 313.429306][T16218] ? v9fs_fid_lookup+0xe9/0xec0 [ 313.430573][T16218] v9fs_vfs_setattr+0x93a/0xab0 [ 313.431856][T16218] ? __pfx_v9fs_vfs_setattr+0x10/0x10 [ 313.433371][T16218] ? selinux_inode_setattr+0x246/0x400 [ 313.434837][T16218] ? evm_inode_setattr+0x65/0x680 [ 313.436278][T16218] ? __pfx_make_vfsgid+0x10/0x10 [ 313.437625][T16218] ? __pfx_current_time+0x10/0x10 [ 313.439041][T16218] ? __pfx_v9fs_vfs_setattr+0x10/0x10 [ 313.440484][T16218] notify_change+0x6a6/0x1230 [ 313.441742][T16218] vfs_utimes+0x41d/0x850 [ 313.442943][T16218] ? __pfx_vfs_utimes+0x10/0x10 [ 313.444287][T16218] ? putname+0x12e/0x170 [ 313.445529][T16218] __x64_sys_utime+0x1e3/0x2c0 [ 313.446867][T16218] ? __pfx___x64_sys_utime+0x10/0x10 [ 313.448330][T16218] ? ksys_write+0x1ad/0x260 [ 313.449552][T16218] do_syscall_64+0xcd/0x250 [ 313.450765][T16218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.452390][T16218] RIP: 0033:0x7efc91d7e719 [ 313.453608][T16218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.458698][T16218] RSP: 002b:00007efc92bc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 313.460900][T16218] RAX: ffffffffffffffda RBX: 00007efc91f36058 RCX: 00007efc91d7e719 [ 313.463004][T16218] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020003000 [ 313.465124][T16218] RBP: 00007efc92bc6090 R08: 0000000000000000 R09: 0000000000000000 [ 313.467271][T16218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.469349][T16218] R13: 0000000000000001 R14: 00007efc91f36058 R15: 00007ffc7cdc70a8 [ 313.471440][T16218] [ 313.472307][T16218] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 313.474217][T16218] CPU: 1 UID: 0 PID: 16218 Comm: syz.1.3664 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 313.477059][T16218] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 313.479852][T16218] Call Trace: [ 313.480739][T16218] [ 313.481535][T16218] dump_stack_lvl+0x3d/0x1f0 [ 313.482763][T16218] panic+0x71d/0x800 [ 313.483817][T16218] ? __pfx_panic+0x10/0x10 [ 313.484998][T16218] ? show_trace_log_lvl+0x29d/0x3d0 [ 313.486368][T16218] ? check_panic_on_warn+0x1f/0xb0 [ 313.487728][T16218] ? _copy_from_iter+0x3a0/0x1560 [ 313.489098][T16218] check_panic_on_warn+0xab/0xb0 [ 313.490473][T16218] __warn+0xf6/0x3d0 [ 313.491568][T16218] ? _copy_from_iter+0x3a0/0x1560 [ 313.492972][T16218] report_bug+0x3c0/0x580 [ 313.494135][T16218] handle_bug+0x54/0xa0 [ 313.495238][T16218] exc_invalid_op+0x17/0x50 [ 313.496443][T16218] asm_exc_invalid_op+0x1a/0x20 [ 313.497723][T16218] RIP: 0010:_copy_from_iter+0x3a0/0x1560 [ 313.499207][T16218] Code: 60 fd 0f 01 cb 48 89 d9 4c 89 f7 48 89 ee f3 a4 0f 1f 00 48 89 cd 0f 01 ca 49 89 df 49 29 cf e9 1e ff ff ff e8 61 e1 fe fc 90 <0f> 0b 90 e9 ae fd ff ff e8 53 e1 fe fc 89 ee bf 01 00 00 00 e8 27 [ 313.504274][T16218] RSP: 0018:ffffc9000467ef30 EFLAGS: 00010293 [ 313.505859][T16218] RAX: 0000000000000000 RBX: 0000000000007fec RCX: ffffffff848e9718 [ 313.507913][T16218] RDX: ffff8880241d4880 RSI: ffffffff848e99ff RDI: 0000000000000001 [ 313.509966][T16218] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 313.512045][T16218] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888056914f60 [ 313.514178][T16218] R13: ffffc9000467f320 R14: ffff888056914f60 R15: dffffc0000000000 [ 313.516236][T16218] ? _copy_from_iter+0xb8/0x1560 [ 313.517535][T16218] ? _copy_from_iter+0x39f/0x1560 [ 313.518850][T16218] ? __pfx_lock_release+0x10/0x10 [ 313.520180][T16218] ? __pfx__copy_from_iter+0x10/0x10 [ 313.521554][T16218] ? __virt_addr_valid+0x1a4/0x590 [ 313.522891][T16218] ? __virt_addr_valid+0x5e/0x590 [ 313.524248][T16218] ? const_folio_flags.constprop.0+0x56/0x150 [ 313.525828][T16218] ? __phys_addr_symbol+0x30/0x80 [ 313.527147][T16218] ? __check_object_size+0x488/0x710 [ 313.528529][T16218] p9pdu_vwritef+0x2d0/0x1cf0 [ 313.529776][T16218] ? p9pdu_writef+0xc4/0x100 [ 313.530991][T16218] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 313.532336][T16218] ? __pfx_p9_tag_alloc+0x10/0x10 [ 313.533655][T16218] ? hlock_class+0x4e/0x130 [ 313.534859][T16218] ? mark_lock+0xb5/0xc60 [ 313.536007][T16218] p9_client_prepare_req+0x244/0x4d0 [ 313.537393][T16218] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 313.538914][T16218] ? __kernel_text_address+0xd/0x40 [ 313.540289][T16218] ? unwind_get_return_address+0x59/0xa0 [ 313.541750][T16218] ? arch_stack_walk+0xa7/0x100 [ 313.543031][T16218] p9_client_rpc+0x1c3/0xc10 [ 313.544252][T16218] ? __pfx_p9_client_rpc+0x10/0x10 [ 313.545598][T16218] ? hlock_class+0x4e/0x130 [ 313.546792][T16218] ? mark_lock+0xb5/0xc60 [ 313.547939][T16218] ? __pfx_mark_lock+0x10/0x10 [ 313.549196][T16218] p9_client_write+0x31f/0x680 [ 313.550462][T16218] ? __pfx_p9_client_write+0x10/0x10 [ 313.551855][T16218] ? mark_held_locks+0x9f/0xe0 [ 313.553112][T16218] v9fs_issue_write+0xe2/0x180 [ 313.554376][T16218] ? __pfx_v9fs_issue_write+0x10/0x10 [ 313.555787][T16218] ? rcu_is_watching+0x12/0xc0 [ 313.557058][T16218] ? trace_netfs_sreq+0x193/0x220 [ 313.558375][T16218] netfs_do_issue_write+0x92/0x110 [ 313.559720][T16218] netfs_advance_write+0x384/0xc80 [ 313.561065][T16218] ? netfs_buffer_append_folio+0x276/0x360 [ 313.562597][T16218] netfs_write_folio+0xc19/0x1930 [ 313.563923][T16218] netfs_writepages+0x29a/0x9d0 [ 313.565203][T16218] ? __pfx_netfs_writepages+0x10/0x10 [ 313.566606][T16218] ? __pfx___lock_acquire+0x10/0x10 [ 313.567967][T16218] ? __pfx___lock_acquire+0x10/0x10 [ 313.569326][T16218] ? __pfx_mark_lock+0x10/0x10 [ 313.570582][T16218] ? __pfx_netfs_writepages+0x10/0x10 [ 313.572020][T16218] do_writepages+0x1a3/0x7f0 [ 313.573243][T16218] ? __pfx_do_writepages+0x10/0x10 [ 313.574590][T16218] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 313.576094][T16218] ? do_raw_spin_lock+0x12d/0x2c0 [ 313.577510][T16218] ? do_raw_spin_unlock+0x172/0x230 [ 313.578904][T16218] ? _raw_spin_unlock+0x28/0x50 [ 313.580213][T16218] ? wbc_attach_and_unlock_inode+0x597/0x940 [ 313.581791][T16218] filemap_fdatawrite_wbc+0x148/0x1c0 [ 313.583220][T16218] __filemap_fdatawrite_range+0xb3/0xf0 [ 313.584685][T16218] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 313.586339][T16218] ? v9fs_fid_lookup+0xe9/0xec0 [ 313.587637][T16218] v9fs_vfs_setattr+0x93a/0xab0 [ 313.588923][T16218] ? __pfx_v9fs_vfs_setattr+0x10/0x10 [ 313.590344][T16218] ? selinux_inode_setattr+0x246/0x400 [ 313.591778][T16218] ? evm_inode_setattr+0x65/0x680 [ 313.593095][T16218] ? __pfx_make_vfsgid+0x10/0x10 [ 313.594403][T16218] ? __pfx_current_time+0x10/0x10 [ 313.595730][T16218] ? __pfx_v9fs_vfs_setattr+0x10/0x10 [ 313.597147][T16218] notify_change+0x6a6/0x1230 [ 313.598385][T16218] vfs_utimes+0x41d/0x850 [ 313.599530][T16218] ? __pfx_vfs_utimes+0x10/0x10 [ 313.600809][T16218] ? putname+0x12e/0x170 [ 313.601937][T16218] __x64_sys_utime+0x1e3/0x2c0 [ 313.603199][T16218] ? __pfx___x64_sys_utime+0x10/0x10 [ 313.604603][T16218] ? ksys_write+0x1ad/0x260 [ 313.605822][T16218] do_syscall_64+0xcd/0x250 [ 313.607023][T16218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.608574][T16218] RIP: 0033:0x7efc91d7e719 [ 313.609760][T16218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.614781][T16218] RSP: 002b:00007efc92bc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 313.616977][T16218] RAX: ffffffffffffffda RBX: 00007efc91f36058 RCX: 00007efc91d7e719 [ 313.619024][T16218] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020003000 [ 313.621088][T16218] RBP: 00007efc92bc6090 R08: 0000000000000000 R09: 0000000000000000 [ 313.623154][T16218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.625210][T16218] R13: 0000000000000001 R14: 00007efc91f36058 R15: 00007ffc7cdc70a8 [ 313.627275][T16218] [ 313.628501][T16218] Kernel Offset: disabled [ 313.629718][T16218] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:20:16 Registers: info registers vcpu 0 CPU#0 RAX=00000008000008fb RBX=0000000000000001 RCX=0000000000000830 RDX=0000000000000008 RSI=00000000000000fb RDI=0000000000000008 RBP=0000000000000003 RSP=ffffc90000007e20 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=0000000000000000 R14=ffff88806a93eec0 R15=ffff88802c3a0401 RIP=ffffffff813c0088 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6c63c2ef98 CR3=000000002899c000 CR4=00352ef0 DR0=fffffffffffffffc DR1=0000000000000005 DR2=0000000000000007 DR3=0000000000000800 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff9ee9a1a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb73bbf25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb73bbf2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb73bbf2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb73bbf2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb73bbf269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb73bbf277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850bbff5 RDI=ffffffff9aaebc80 RBP=ffffffff9aaebc40 RSP=ffffc9000467e898 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000064 R14=ffffffff850bbf90 R15=0000000000000000 RIP=ffffffff850bc01f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007efc92bc66c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055557d5ce808 CR3=000000004739c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=e1dc2bd945f84402 296e6e5e31248dde e0843f92bace2d11 ac7821bbdedda110 e2e8ca723407806d e7211b362059e843 9ab4b810bacd5661 13d18dfbfa314842 ZMM17=1000000800080131 ee28000002c00000 0000000000000000 000000000e5d0000 0014000000000000 0000000000000000 0000000000150000 00000001df8a0000 ZMM18=0001ffffffffffff ffffd70808d80300 040008d403000400 08d00300100008c0 0300080008b80300 080008b00303ffff ffff0408a0030110 0008900304080008 ZMM19=0401800412800403 aa080008024e8a00 0000000000000000 00000001ffffffff ffffffffe70812b8 0301080012b00300 080012a003000800 1298030008001290 ZMM20=4c9452a24c9452a2 4c9452a24c9452a2 4c9452a24c9452a2 4c9452a24c9452a2 4c9452a24c9452a2 4c9452a24c9452a2 4c9452a24c9452a2 4c9452a24c9452a2 ZMM21=8cd2d84a8cd2d84a 8cd2d84a8cd2d84a 8cd2d84a8cd2d84a 8cd2d84a8cd2d84a 8cd2d84a8cd2d84a 8cd2d84a8cd2d84a 8cd2d84a8cd2d84a 8cd2d84a8cd2d84a ZMM22=8f2bfa698f2bfa69 8f2bfa698f2bfa69 8f2bfa698f2bfa69 8f2bfa698f2bfa69 8f2bfa698f2bfa69 8f2bfa698f2bfa69 8f2bfa698f2bfa69 8f2bfa698f2bfa69 ZMM23=d37ca9bcd37ca9bc d37ca9bcd37ca9bc d37ca9bcd37ca9bc d37ca9bcd37ca9bc d37ca9bcd37ca9bc d37ca9bcd37ca9bc d37ca9bcd37ca9bc d37ca9bcd37ca9bc ZMM24=239b2e6b239b2e6b 239b2e6b239b2e6b 239b2e6b239b2e6b 239b2e6b239b2e6b 239b2e6b239b2e6b 239b2e6b239b2e6b 239b2e6b239b2e6b 239b2e6b239b2e6b ZMM25=c75a072cc75a072c c75a072cc75a072c c75a072cc75a072c c75a072cc75a072c c75a072cc75a072c c75a072cc75a072c c75a072cc75a072c c75a072cc75a072c ZMM26=9475582a9475582a 9475582a9475582a 9475582a9475582a 9475582a9475582a 9475582a9475582a 9475582a9475582a 9475582a9475582a 9475582a9475582a ZMM27=9aee28d99aee28d9 9aee28d99aee28d9 9aee28d99aee28d9 9aee28d99aee28d9 9aee28d99aee28d9 9aee28d99aee28d9 9aee28d99aee28d9 9aee28d99aee28d9 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=4711000047110000 4711000047110000 4711000047110000 4711000047110000 4711000047110000 4711000047110000 4711000047110000 4711000047110000 info registers vcpu 2 CPU#2 RAX=0000000000ac55e9 RBX=0000000000000002 RCX=ffffffff8b23c459 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd1b740 RBP=ffffed1003b5b000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d507025 R10=ffff88806a83812b R11=0000000000000000 R12=0000000000000002 R13=ffff88801dad8000 R14=ffffffff905f5e08 R15=0000000000000000 RIP=ffffffff8b23d83f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6c63c2ef98 CR3=0000000034ea6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c62df25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c62df2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c62df2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c62df2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c62df269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c62df277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c62f0c488 00007f6c62f0c480 00007f6c62f0c478 00007f6c62f0c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c63a6d100 00007f6c62f0c440 00007f6c62f0c458 00007f6c62f0c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c62f0c498 00007f6c62f0c490 00007f6c62f0c488 00007f6c62f0c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000001000008fb RBX=0000000000000001 RCX=0000000000000830 RDX=0000000000000001 RSI=00000000000000fb RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc900044a7a98 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=ffffc900044a7cb8 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff813c0088 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6c63c0e6c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002001a000 CR3=0000000034ea6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc91df25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc91df2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc91df2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc91df2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc91df269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc91df277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc91f0c488 00007efc91f0c480 00007efc91f0c478 00007efc91f0c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc92a6d100 00007efc91f0c440 00007efc91f0c458 00007efc91f0c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc91f0c498 00007efc91f0c490 00007efc91f0c488 00007efc91f0c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000