last executing test programs: 2m39.501901827s ago: executing program 1 (id=28): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b8f000000000000008000d000d000000", 0x24) 2m39.501579613s ago: executing program 1 (id=29): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x14, 0xb, 0xa, 0x5, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x10) 2m39.488111181s ago: executing program 1 (id=31): prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x300, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2m39.421771698s ago: executing program 1 (id=32): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@noop, @noop, @noop, @rr={0x7, 0xb, 0x0, [@remote, @private=0xa010102]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x1700000000000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2m39.071334696s ago: executing program 1 (id=35): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1e00000001000000400000000100000002200000", @ANYRES32=r0, @ANYBLOB="180000000000000000962dd8c90aa6336d39fee3", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0300000000000000030000000500"/28], 0x50) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0x2020) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x15, &(0x7f0000000040)=0x3, 0x4) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000002440)={0xf4, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xdb}, @IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8000}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1ff}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xffff}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5c}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}, @IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_MARK={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xc1}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x45815a35}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) listen(r3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x3}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 2m39.011355184s ago: executing program 1 (id=36): socketpair(0x26, 0x6, 0x3, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$inet_sctp(r0, &(0x7f0000000580)={&(0x7f0000000340)=@in6={0xa, 0x4e22, 0x9, @mcast1, 0xfffffff9}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000380)="2cd52e755990cff254", 0x9}, {&(0x7f00000003c0)="7671db5e7eb031f15f450e0756f8115abcd2daa37271ada0e1f741a36c3a", 0x1e}, {&(0x7f0000000500)="cde615f100120db173939f5fab91e01975bd5ce1230619e2d8b496e25e5b656997d321ea307544b1eeb0a55360ace476d6d56e7cb2e93c29fed27fc7e28f588c8f67f2da3a70a68f6678853e8e772e0d047bfd022b213a58a9118f47f4f189efb3601f6c923f9acbb345716b5d", 0x6d}], 0x3}, 0x4040000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001d0001"], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000200)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000002c0)={r6, r7, r8, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0]}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r13, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xffffffffffffff84}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e516"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000040)="660fc77200f34998f3410fc736460f1a6086f2360f211e0f20c035020000000f22c0400f21ee66470f3880649d05b9800000c00f3235004000000f30430f92c6", 0x40}], 0x1, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r14, &(0x7f00000004c0), 0x208e24b) cachestat(r14, &(0x7f0000000040)={0x1f00, 0x1f}, &(0x7f0000000080), 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r9, r10, 0x2, 0x8, 0xe, 0x800, {0x4, 0xfffe, 0x3, 0x69, 0x200, 0xc473, 0xfffe, 0x5, 0x4cab, 0x1ff, 0x2, 0x6, 0x8000025, 0x0, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r2, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xffffbbe7}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x8b}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x7998}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x48}}, 0x20000080) 2m24.027202851s ago: executing program 32 (id=36): socketpair(0x26, 0x6, 0x3, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$inet_sctp(r0, &(0x7f0000000580)={&(0x7f0000000340)=@in6={0xa, 0x4e22, 0x9, @mcast1, 0xfffffff9}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000380)="2cd52e755990cff254", 0x9}, {&(0x7f00000003c0)="7671db5e7eb031f15f450e0756f8115abcd2daa37271ada0e1f741a36c3a", 0x1e}, {&(0x7f0000000500)="cde615f100120db173939f5fab91e01975bd5ce1230619e2d8b496e25e5b656997d321ea307544b1eeb0a55360ace476d6d56e7cb2e93c29fed27fc7e28f588c8f67f2da3a70a68f6678853e8e772e0d047bfd022b213a58a9118f47f4f189efb3601f6c923f9acbb345716b5d", 0x6d}], 0x3}, 0x4040000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001d0001"], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000200)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000002c0)={r6, r7, r8, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0]}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r13, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xffffffffffffff84}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000040)="660fc77200f34998f3410fc736460f1a6086f2360f211e0f20c035020000000f22c0400f21ee66470f3880649d05b9800000c00f3235004000000f30430f92c6", 0x40}], 0x1, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r14, &(0x7f00000004c0), 0x208e24b) cachestat(r14, &(0x7f0000000040)={0x1f00, 0x1f}, &(0x7f0000000080), 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r9, r10, 0x2, 0x8, 0xe, 0x800, {0x4, 0xfffe, 0x3, 0x69, 0x200, 0xc473, 0xfffe, 0x5, 0x4cab, 0x1ff, 0x2, 0x6, 0x8000025, 0x0, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r2, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xffffbbe7}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x8b}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x7998}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x48}}, 0x20000080) 1m1.050911373s ago: executing program 4 (id=1615): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') r1 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000b00)={0x0, 0x46, &(0x7f0000000ac0)={&(0x7f0000000500)={0x44, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x80000001}]}}]}, 0x40}}, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) fcntl$lock(r6, 0x5, &(0x7f0000000280)={0x2, 0x0, 0x1ff, 0x8000000000000001}) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, 0xffffffffffffffff, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x4340c0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, '\x00'}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8040, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/242) ioctl$PPPIOCGFLAGS1(r8, 0x40047457, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r9 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x4, 0x480400) ppoll(&(0x7f0000000400)=[{r3, 0x201}, {r7, 0x26}, {r9, 0x91f2}, {r6, 0x8604}], 0x4, &(0x7f0000000440), &(0x7f0000000480)={[0xfffffffffffffff8]}, 0x8) writev(r0, &(0x7f00000003c0), 0x100000000000022d) r10 = socket$caif_stream(0x25, 0x1, 0x4) sendmmsg(r10, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)='r', 0x1}], 0x1}}], 0x1, 0x40) getsockopt$IP_SET_OP_GET_BYNAME(r10, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000040)=0x28) 1m1.050612962s ago: executing program 4 (id=1616): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4, 0x0, 0x6000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1m0.91471305s ago: executing program 4 (id=1622): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x17) r1 = dup(r0) ioctl$EVIOCSABS20(r1, 0x401845e0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 1m0.131000787s ago: executing program 4 (id=1643): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2805011, 0x0) mount$bind(0x0, &(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 59.250799411s ago: executing program 4 (id=1656): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x66, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "003a04", 0x4, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11, 0x2008}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x3}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x4c}}, 0x44) 59.250553871s ago: executing program 4 (id=1657): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x200000000000000) 59.169772084s ago: executing program 33 (id=1657): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x200000000000000) 37.908803499s ago: executing program 0 (id=2085): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) 37.830303139s ago: executing program 0 (id=2087): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe6}]}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffff42, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) write$binfmt_elf64(r0, &(0x7f0000001340)=ANY=[], 0xa89) sendto$inet(r0, &(0x7f0000000340)="e2b3b8c51d71eadd2cf9dda251607cf2ac834ad26f541d5e9aa46cff1ba4e90b24a30075ff6423ae78237d68331d7e125b57ef23912b3f43376608d71bd2be176d4f54c54f91176ff4c4ce2d6ad7c2ebb0d4f9bc46458e4de0e494903c33918f", 0x60, 0x488d5, 0x0, 0x0) 36.980637968s ago: executing program 0 (id=2114): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {0x7, 0x0, 0x0, 0x9}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x2, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 36.98029881s ago: executing program 0 (id=2116): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)={0x10}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 36.910532671s ago: executing program 0 (id=2118): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002200012b0abd70d6acdbdf2501"], 0x14}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 35.980701776s ago: executing program 0 (id=2131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x18, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x400000000000000) 35.965389005s ago: executing program 34 (id=2131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x18, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x400000000000000) 5.180085464s ago: executing program 3 (id=2730): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r2, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_uring_setup(0x553c, &(0x7f0000000200)={0x0, 0xf389, 0x0, 0x0, 0x35}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2000000000000000, 0x100000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4.760429898s ago: executing program 2 (id=2735): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f00000016c0)=0x8, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000017c0)={'ip6gre0\x00', &(0x7f0000001740)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x10, 0x401, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x10, 0x700, 0x800, 0x3603}}) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000019c0)=[@text64={0x40, &(0x7f0000001940)="64660fc7b6287e0000f2410f79edc483b50cea58c42239a831c4e169e58a0d000000b9800000c00f3235000100000f30412d00a000000f20c035000001000f22c0c4a1b1589d30000000450f07", 0x4d}], 0x1, 0x2c, &(0x7f0000001a00)=[@dstype0={0x6, 0x8}], 0x1) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044104, &(0x7f0000000140)=0x9) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000000)='z', 0x1, 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) keyctl$unlink(0x9, r3, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000035c0)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_dump={0x3e, 0x1, 0x2}}) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000234c0)={0x54, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4cda}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8810}, 0x8080) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f00000016c0)=0x8, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000017c0)={'ip6gre0\x00', &(0x7f0000001740)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x10, 0x401, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x10, 0x700, 0x800, 0x3603}}) (async) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000019c0)=[@text64={0x40, &(0x7f0000001940)="64660fc7b6287e0000f2410f79edc483b50cea58c42239a831c4e169e58a0d000000b9800000c00f3235000100000f30412d00a000000f20c035000001000f22c0c4a1b1589d30000000450f07", 0x4d}], 0x1, 0x2c, &(0x7f0000001a00)=[@dstype0={0x6, 0x8}], 0x1) (async) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044104, &(0x7f0000000140)=0x9) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000000)='z', 0x1, 0xffffffffffffffff) (async) keyctl$assume_authority(0x10, r3) (async) keyctl$unlink(0x9, r3, r3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000035c0)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_dump={0x3e, 0x1, 0x2}}) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000234c0)={0x54, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}}, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4cda}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8810}, 0x8080) (async) 4.760311314s ago: executing program 2 (id=2736): unshare(0x62040200) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001100)={'nat\x00', 0x0, 0x0, 0x90, [], 0x2, 0x0, 0x0}, &(0x7f0000001180)=0x108) r1 = syz_io_uring_setup(0x353a, &(0x7f0000000000)={0x0, 0xafbb, 0x8, 0x0, 0x357}, &(0x7f0000000080), &(0x7f0000000140)) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) read$dsp(r2, &(0x7f0000000440)=""/171, 0xab) syz_io_uring_setup(0x2468, &(0x7f0000000180)={0x0, 0x839c, 0x200, 0xfefff7fc, 0x2a9, 0x0, r1}, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) 4.300290222s ago: executing program 3 (id=2744): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$CDROMVOLCTRL(r3, 0x5392, &(0x7f0000000180)={0x7, 0x9, 0x8, 0xfb}) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r4, &(0x7f00000000c0)={0x18}, 0x18) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(0x4) ioctl$KVM_CHECK_EXTENSION(r7, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f0000000000)={0x8000000, 0x205000, 0x8}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000200)={0x50, 0x0, r9, {0x7, 0x29, 0x20200, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 4.110412584s ago: executing program 2 (id=2754): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') r1 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000b00)={0x0, 0x46, &(0x7f0000000ac0)={&(0x7f0000000500)={0x44, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x30000}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x80000001}]}}]}, 0x40}}, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) fcntl$lock(r6, 0x5, &(0x7f0000000280)={0x2, 0x0, 0x1ff, 0x8000000000000001}) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, 0xffffffffffffffff, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x4340c0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, '\x00'}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8040, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/242) ioctl$PPPIOCGFLAGS1(r8, 0x40047457, 0x0) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r10 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x4, 0x480400) ppoll(&(0x7f0000000400)=[{r3, 0x201}, {r9, 0x4010}, {r7, 0x26}, {r10, 0x91f2}, {r6, 0x8604}], 0x5, &(0x7f0000000440), &(0x7f0000000480)={[0xfffffffffffffff8]}, 0x8) writev(r0, &(0x7f00000003c0), 0x100000000000022d) r11 = socket$caif_stream(0x25, 0x1, 0x4) sendmmsg(r11, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)='r', 0x1}], 0x1}}], 0x1, 0x40) getsockopt$IP_SET_OP_GET_BYNAME(r11, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000040)=0x28) 4.030598552s ago: executing program 2 (id=2756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f7879000014000280080001400000000008000340000000160900010073797a30"], 0xc4}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x0, 0x6f677948, 0x656e6975}]}) syz_usb_connect(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYRES8=r4, @ANYRESOCT=0x0, @ANYRESHEX=r2], &(0x7f0000000040)={0xfffffffffffffd49, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x36, 0x0}, {0x0, 0x0}, {0x0, &(0x7f0000000180)=@lang_id={0x0, 0x3, 0x40d}}]}) 4.030464346s ago: executing program 6 (id=2757): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b80000000000070008000d000d000000", 0x24) 4.030392454s ago: executing program 6 (id=2758): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2}, 0x18) sendmmsg$unix(r0, &(0x7f000000a5c0)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f000000a540)="b4", 0x1}], 0x1}}, {{&(0x7f0000001380)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0x8000000}], 0x2, 0x0) 3.97060175s ago: executing program 6 (id=2759): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x28}}, 0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f00000006c0)=[{0x3, 0x3, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x2}, 0xfe, 0xff}], 0x20) 3.970484494s ago: executing program 6 (id=2760): madvise(&(0x7f0000ffd000/0x1000)=nil, 0x7fe4d2ddf000, 0x11) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x83) (async) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 3.295186091s ago: executing program 3 (id=2761): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x007A']) 3.293470203s ago: executing program 3 (id=2763): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="f81400003f000b0025bd700000000000020000000c0002000500000000000000d81401"], 0x14f8}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x96}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="0200"], 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r4, r3, 0x2, 0x0, 0x4000, @void, @value}, 0x10) 3.228347103s ago: executing program 3 (id=2765): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002200012b0abd70d6acdbdf2501"], 0x14}}, 0xffa6) 2.940463073s ago: executing program 3 (id=2771): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff6f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000200)=""/148, &(0x7f00000002c0)=""/8}) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000001c0)={0x0, r2}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000340)=0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x10003fc, 0x3}, 0x10) close(r4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, r10, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x6a}}, 0x0) sendmsg$NFC_CMD_VENDOR(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x118, r6, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_VENDOR_DATA={0xfb, 0x1f, "bd15bbdb31ac2493f0a69ac89f5a6dccc419ecf471ee28682af96d60ec5b5017b45a48fb96919e7e2fa5ac1099f199cce8cf68d05637a719a375e389e57e761ae92f7b514cf7704fcc115ee5a098b1feac76c411bc0b7195cd88cde02a54c23afbdd18880a389c9f63586d333f079ae061ec2506ab79f443ce511cfdb2dacb37cdec4932b4ff250e6a5995b82e469004ee206591b9acce0c38dfb034ff316fd7a515ed5ba43759f10d8651f0b7eae1ee6a1a843352cf31e7e56fa9f216b3f5c58ad5afa434e2e1b23bb81ba1ffc436244c2396c29303d13caf7e2bcec531bf18bb7569b39967f6a08ff492ad9636e618e6eeef65c648a8"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000081) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r11, 0x0) r12 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r13 = dup(r12) ioctl$USBDEVFS_SUBMITURB(r13, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x10007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.320331567s ago: executing program 5 (id=2778): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x7fb, 0x5, 0x8, 0x0, 0x0, 0xfffffffffffffffc, 0x1000000000000f96, 0xfffffffffffffffc, 0x1}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x10, 0x96}) (fail_nth: 4) 2.210635138s ago: executing program 5 (id=2779): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') r1 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000b00)={0x0, 0x46, &(0x7f0000000ac0)={&(0x7f0000000500)={0x44, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1000000}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x80000001}]}}]}, 0x40}}, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) fcntl$lock(r6, 0x5, &(0x7f0000000280)={0x2, 0x0, 0x1ff, 0x8000000000000001}) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, 0xffffffffffffffff, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x4340c0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, '\x00'}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8040, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/242) ioctl$PPPIOCGFLAGS1(r8, 0x40047457, 0x0) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r10 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x4, 0x480400) ppoll(&(0x7f0000000400)=[{r3, 0x201}, {r9, 0x4010}, {r7, 0x26}, {r10, 0x91f2}, {r6, 0x8604}], 0x5, &(0x7f0000000440), &(0x7f0000000480)={[0xfffffffffffffff8]}, 0x8) writev(r0, &(0x7f00000003c0), 0x100000000000022d) r11 = socket$caif_stream(0x25, 0x1, 0x4) sendmmsg(r11, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)='r', 0x1}], 0x1}}], 0x1, 0x40) getsockopt$IP_SET_OP_GET_BYNAME(r11, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000040)=0x28) 2.020215268s ago: executing program 5 (id=2780): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r4, 0xaece, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008001600ffffffff080003000d00000008000f00050000000800040019dc0000050019"], 0x5c}}, 0x0) r7 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000580)={0x11, 0xf6, r8, 0x1, 0xfe, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x5b) getpeername$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000540)=0x14) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f0000000000)={r11, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r12, 0x107, 0x2, &(0x7f00000000c0)={r11, 0x1, 0x6, @local}, 0x200000d0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xc8, r6, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000080000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000700)='signal_generate\x00', r13}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') r14 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r14, 0x0, 0x0, 0x2000402) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x145000, 0x0) 1.870256093s ago: executing program 5 (id=2781): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x9000000, {0xa, 0x1f, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_ADDRESS={0x14, 0x1, @empty}]}, 0x40}}, 0x0) 1.800244083s ago: executing program 5 (id=2782): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b80000000000090008000d000d000000", 0x24) 1.727943805s ago: executing program 5 (id=2783): openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='\x00\"O'], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f0000000680)={0x1, 'N'}) syz_usb_control_io$hid(r1, &(0x7f0000002840)={0x24, 0x0, &(0x7f0000002640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x421}}, 0x0, 0x0}, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000100001000000000000720000647262675f70725f73686135313251b9c2c72ac638a8ea14dc91a59a3245d0da5eda0dcc45d6a489c8d6c2400ae4a81f3c1af22164c2a88f2869445cb26a01c887"], 0xe8}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f0000000140)={0x0, 0x10, 0x2, {0x2, 0x21}}, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r3, 0xffffffffffffffff}, 0x4) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0x0, 0x101, 0x14}, 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x145040, 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r8, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x14, &(0x7f0000000380)=@raw=[@btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x67}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @exit, @exit, @map_val={0x18, 0x9, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x80000001}], &(0x7f0000000440)='GPL\x00', 0xff, 0xf6, &(0x7f0000000580)=""/246, 0x40f00, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x7, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000780)=[r7, r8, 0xffffffffffffffff, r3, r9, r10, r11, r2], &(0x7f00000007c0)=[{0x0, 0x4, 0xc, 0x1}, {0x3, 0x5, 0x1, 0xc}], 0x10, 0x0, @void, @value}, 0x94) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x4, 0x101, 0x6701e32d}}, 0x28) 890.219819ms ago: executing program 6 (id=2784): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) ioctl$CDROM_LAST_WRITTEN(r0, 0x5323, 0x0) 889.969699ms ago: executing program 2 (id=2785): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200020000", 0x1c) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) 889.809737ms ago: executing program 6 (id=2786): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x8f) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) link(0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000300), 0xd) r4 = userfaultfd(0x80800) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_disconnect(r5) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @default}, [@null, @default, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYRES64=r2], 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000580)="5599159b1df1", 0x6}], 0x1) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[], 0x78) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) r8 = socket$packet(0x11, 0x3, 0x300) preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/49, 0x31}], 0x1, 0xff, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r9], 0x20}}, 0x0) syz_open_dev$sndpcmp(&(0x7f00000002c0), 0x0, 0x0) 0s ago: executing program 2 (id=2787): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x4}]}}}]}, 0x3c}}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) (async) ioctl$TCFLSH(r1, 0x89f0, 0x20000000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000000c0)={0x0, 'syzkaller0\x00', {0x2}, 0x2}) kernel console output (not intermixed with test programs): 3.221560][ T5936] process_one_work+0x9c5/0x1ba0 [ 183.223302][ T5936] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 183.225225][ T5936] ? __pfx_process_one_work+0x10/0x10 [ 183.227105][ T5936] ? rcu_is_watching+0x12/0xc0 [ 183.228782][ T5936] ? assign_work+0x1a0/0x250 [ 183.230426][ T5936] worker_thread+0x6c8/0xf00 [ 183.232022][ T5936] ? __pfx_worker_thread+0x10/0x10 [ 183.233835][ T5936] kthread+0x2c1/0x3a0 [ 183.235339][ T5936] ? _raw_spin_unlock_irq+0x23/0x50 [ 183.237257][ T5936] ? __pfx_kthread+0x10/0x10 [ 183.238868][ T5936] ret_from_fork+0x45/0x80 [ 183.240605][ T5936] ? __pfx_kthread+0x10/0x10 [ 183.242222][ T5936] ret_from_fork_asm+0x1a/0x30 [ 183.243909][ T5936] [ 183.249573][ T5936] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 183.254250][ T5936] Bluetooth: hci2: failed to register connection device [ 183.924228][T12664] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2350'. [ 183.952561][ T39] kauditd_printk_skb: 137 callbacks suppressed [ 183.952576][ T39] audit: type=1400 audit(2000000083.499:5176): avc: denied { getopt } for pid=12665 comm="syz.3.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 184.018776][T12675] netlink: 'syz.2.2353': attribute type 1 has an invalid length. [ 184.142509][T12682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.333506][ T39] audit: type=1326 audit(2000000083.889:5177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12685 comm="syz.5.2359" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa46b80849 code=0x7ffc0000 [ 184.340931][ T39] audit: type=1326 audit(2000000083.889:5178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12685 comm="syz.5.2359" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa46b80849 code=0x7ffc0000 [ 184.348582][ T39] audit: type=1326 audit(2000000083.889:5179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12685 comm="syz.5.2359" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa46b80849 code=0x7ffc0000 [ 184.356821][ T39] audit: type=1326 audit(2000000083.889:5180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12685 comm="syz.5.2359" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa46b80849 code=0x7ffc0000 [ 184.364939][ T39] audit: type=1326 audit(2000000083.889:5181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12685 comm="syz.5.2359" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa46b80849 code=0x7ffc0000 [ 184.372363][ T39] audit: type=1326 audit(2000000083.889:5182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12685 comm="syz.5.2359" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa46b80849 code=0x7ffc0000 [ 184.379959][ T39] audit: type=1326 audit(2000000083.889:5183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12685 comm="syz.5.2359" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa46b80849 code=0x7ffc0000 [ 184.387747][ T39] audit: type=1326 audit(2000000083.889:5184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12685 comm="syz.5.2359" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa46b80849 code=0x7ffc0000 [ 184.394919][ T39] audit: type=1326 audit(2000000083.889:5185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12685 comm="syz.5.2359" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa46b80849 code=0x7ffc0000 [ 184.518004][T12694] bpf: Bad value for 'mode' [ 184.672313][T12705] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 184.753566][ T5936] Bluetooth: hci2: command tx timeout [ 184.996785][T12731] FAULT_INJECTION: forcing a failure. [ 184.996785][T12731] name failslab, interval 1, probability 0, space 0, times 0 [ 185.001049][T12731] CPU: 3 UID: 0 PID: 12731 Comm: syz.6.2376 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 185.004452][T12731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.007955][T12731] Call Trace: [ 185.009069][T12731] [ 185.010053][T12731] dump_stack_lvl+0x16c/0x1f0 [ 185.011633][T12731] should_fail_ex+0x497/0x5b0 [ 185.013221][T12731] ? fs_reclaim_acquire+0xae/0x150 [ 185.014915][T12731] should_failslab+0xc2/0x120 [ 185.016502][T12731] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 185.018251][T12731] ? __pfx_mark_lock+0x10/0x10 [ 185.019825][T12731] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 185.021829][T12731] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 185.023838][T12731] mmu_topup_memory_caches+0x22/0xd0 [ 185.025635][T12731] kvm_mmu_load+0xda/0x21f0 [ 185.027142][T12731] ? mark_held_locks+0x9f/0xe0 [ 185.028734][T12731] ? kvm_apic_has_interrupt+0xb6/0x190 [ 185.030568][T12731] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 185.032498][T12731] ? kvm_guest_time_update+0x780/0xeb0 [ 185.034295][T12731] ? clear_pending_if_disabled+0xa9/0x210 [ 185.036171][T12731] ? __pfx_kvm_mmu_load+0x10/0x10 [ 185.037886][T12731] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 185.039853][T12731] ? kvm_check_and_inject_events+0x725/0x12e0 [ 185.041879][T12731] ? record_steal_time+0x51/0xbe0 [ 185.043673][T12731] vcpu_run+0x33a4/0x4f50 [ 185.045139][T12731] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 185.046980][T12731] ? __pfx_vcpu_run+0x10/0x10 [ 185.048555][T12731] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 185.050449][T12731] ? rcu_is_watching+0x12/0xc0 [ 185.052061][T12731] ? trace_lock_acquire+0x14e/0x1f0 [ 185.053806][T12731] ? __local_bh_enable_ip+0xa4/0x120 [ 185.055575][T12731] ? lockdep_hardirqs_on+0x7c/0x110 [ 185.057358][T12731] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 185.059289][T12731] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 185.061252][T12731] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 185.063159][T12731] kvm_vcpu_ioctl+0x6ce/0x1520 [ 185.064764][T12731] ? do_vfs_ioctl+0x513/0x1990 [ 185.066341][T12731] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 185.068060][T12731] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 185.070202][T12731] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 185.072441][T12731] ? __pfx_lock_release+0x10/0x10 [ 185.074155][T12731] ? selinux_file_ioctl+0x180/0x270 [ 185.075925][T12731] ? selinux_file_ioctl+0xb4/0x270 [ 185.077600][T12731] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 185.079278][T12731] __x64_sys_ioctl+0x190/0x200 [ 185.080873][T12731] do_syscall_64+0xcd/0x250 [ 185.082426][T12731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.084371][T12731] RIP: 0033:0x7fa049f80849 [ 185.085909][T12731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.092310][T12731] RSP: 002b:00007fa04adfc058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.095148][T12731] RAX: ffffffffffffffda RBX: 00007fa04a145fa0 RCX: 00007fa049f80849 [ 185.097926][T12731] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 185.100607][T12731] RBP: 00007fa04adfc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 185.103401][T12731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.105990][T12731] R13: 0000000000000000 R14: 00007fa04a145fa0 R15: 00007ffdcac5c278 [ 185.108537][T12731] [ 185.362186][T12739] FAULT_INJECTION: forcing a failure. [ 185.362186][T12739] name failslab, interval 1, probability 0, space 0, times 0 [ 185.366411][T12739] CPU: 3 UID: 0 PID: 12739 Comm: syz.6.2379 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 185.369677][T12739] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.373153][T12739] Call Trace: [ 185.374270][T12739] [ 185.375261][T12739] dump_stack_lvl+0x16c/0x1f0 [ 185.376816][T12739] should_fail_ex+0x497/0x5b0 [ 185.378298][T12739] ? fs_reclaim_acquire+0xae/0x150 [ 185.379894][T12739] should_failslab+0xc2/0x120 [ 185.381421][T12739] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 185.383277][T12739] ? __alloc_skb+0x2b1/0x380 [ 185.384769][T12739] __alloc_skb+0x2b1/0x380 [ 185.386236][T12739] ? __pfx___alloc_skb+0x10/0x10 [ 185.387829][T12739] ? __pfx__copy_from_iter+0x10/0x10 [ 185.389504][T12739] ? __virt_addr_valid+0xb0/0x590 [ 185.391092][T12739] tcp_stream_alloc_skb+0x34/0x570 [ 185.392708][T12739] tcp_sendmsg_locked+0xed5/0x3770 [ 185.394495][T12739] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 185.396323][T12739] ? tcp_sendmsg+0x20/0x50 [ 185.397847][T12739] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 185.399612][T12739] ? mark_held_locks+0x9f/0xe0 [ 185.401192][T12739] ? __local_bh_enable_ip+0xa4/0x120 [ 185.402948][T12739] tcp_sendmsg+0x2e/0x50 [ 185.404290][T12739] ? __pfx_tcp_sendmsg+0x10/0x10 [ 185.406041][T12739] inet_sendmsg+0xb9/0x140 [ 185.407192][T12739] __sys_sendto+0x42a/0x4f0 [ 185.408336][T12739] ? __pfx___sys_sendto+0x10/0x10 [ 185.409628][T12739] ? ksys_write+0x1ba/0x250 [ 185.410776][T12739] ? __pfx_ksys_write+0x10/0x10 [ 185.411967][T12739] __x64_sys_sendto+0xe0/0x1c0 [ 185.413163][T12739] ? do_syscall_64+0x91/0x250 [ 185.414305][T12739] ? lockdep_hardirqs_on+0x7c/0x110 [ 185.415870][T12739] do_syscall_64+0xcd/0x250 [ 185.417031][T12739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.418597][T12739] RIP: 0033:0x7fa049f80849 [ 185.419740][T12739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.424462][T12739] RSP: 002b:00007fa04adfc058 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 185.427146][T12739] RAX: ffffffffffffffda RBX: 00007fa04a145fa0 RCX: 00007fa049f80849 [ 185.429639][T12739] RDX: 0000000000000072 RSI: 0000000020000340 RDI: 0000000000000003 [ 185.432090][T12739] RBP: 00007fa04adfc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 185.434603][T12739] R10: 00000000000488d5 R11: 0000000000000246 R12: 0000000000000001 [ 185.437214][T12739] R13: 0000000000000000 R14: 00007fa04a145fa0 R15: 00007ffdcac5c278 [ 185.439776][T12739] [ 185.624588][ T1108] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 185.626598][ T1108] ata1: failed to read log page 10h (errno=-5) [ 185.628655][ T1108] ata1.00: exception Emask 0x1 SAct 0x80000000 SErr 0x0 action 0x0 [ 185.631298][ T1108] ata1.00: irq_stat 0x40000000 [ 185.632818][ T1108] ata1.00: failed command: WRITE FPDMA QUEUED [ 185.636183][ T1108] ata1.00: cmd 61/00:f8:02:b0:0c/01:00:00:00:00/40 tag 31 ncq dma 131072 out [ 185.636183][ T1108] res 50/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 185.641731][ T1108] ata1.00: status: { DRDY } [ 185.643559][ T1108] ata1.00: error: { ABRT } [ 185.646028][ T1108] ata1.00: configured for UDMA/100 [ 185.647537][ T1108] ata1: EH complete [ 185.722087][ T5936] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 185.726794][ T5936] CPU: 3 UID: 0 PID: 5936 Comm: kworker/u33:3 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 185.730653][ T5936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.734784][ T5936] Workqueue: hci3 hci_rx_work [ 185.736466][ T5936] Call Trace: [ 185.737692][ T5936] [ 185.738725][ T5936] dump_stack_lvl+0x16c/0x1f0 [ 185.740349][ T5936] sysfs_warn_dup+0x7f/0xa0 [ 185.742379][ T5936] sysfs_create_dir_ns+0x24d/0x2b0 [ 185.744910][ T5936] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 185.747116][ T5936] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 185.748971][ T5936] ? kobject_add_internal+0x12d/0x990 [ 185.750805][ T5936] ? do_raw_spin_unlock+0x172/0x230 [ 185.752605][ T5936] kobject_add_internal+0x2c8/0x990 [ 185.754417][ T5936] kobject_add+0x16f/0x240 [ 185.755922][ T5936] ? __pfx_kobject_add+0x10/0x10 [ 185.757659][ T5936] ? class_to_subsys+0x3e/0x160 [ 185.759368][ T5936] ? do_raw_spin_unlock+0x172/0x230 [ 185.761176][ T5936] ? kobject_put+0xab/0x5a0 [ 185.762742][ T5936] device_add+0x289/0x1a70 [ 185.764307][ T5936] ? __pfx_dev_set_name+0x10/0x10 [ 185.766067][ T5936] ? __pfx_device_add+0x10/0x10 [ 185.767734][ T5936] ? mgmt_send_event_skb+0x2f2/0x460 [ 185.769526][ T5936] hci_conn_add_sysfs+0x17e/0x230 [ 185.771202][ T5936] le_conn_complete_evt+0x1077/0x1d60 [ 185.772946][ T5936] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 185.774866][ T5936] ? __mutex_lock+0x1cc/0xa60 [ 185.776448][ T5936] hci_le_conn_complete_evt+0x23c/0x370 [ 185.778368][ T5936] hci_le_meta_evt+0x2e2/0x5d0 [ 185.779986][ T5936] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 185.782044][ T5936] hci_event_packet+0x666/0x1180 [ 185.783732][ T5936] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 185.785557][ T5936] ? __pfx_hci_event_packet+0x10/0x10 [ 185.787587][ T5936] ? mark_held_locks+0x9f/0xe0 [ 185.789224][ T5936] ? kcov_remote_start+0x3cf/0x6e0 [ 185.791006][ T5936] ? lockdep_hardirqs_on+0x7c/0x110 [ 185.792864][ T5936] hci_rx_work+0x2c5/0x16b0 [ 185.794447][ T5936] ? process_one_work+0x921/0x1ba0 [ 185.796166][ T5936] process_one_work+0x9c5/0x1ba0 [ 185.797848][ T5936] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 185.799741][ T5936] ? __pfx_process_one_work+0x10/0x10 [ 185.801332][ T5936] ? rcu_is_watching+0x12/0xc0 [ 185.802569][ T5936] ? assign_work+0x1a0/0x250 [ 185.803736][ T5936] worker_thread+0x6c8/0xf00 [ 185.804947][ T5936] ? __pfx_worker_thread+0x10/0x10 [ 185.806593][ T5936] kthread+0x2c1/0x3a0 [ 185.807955][ T5936] ? _raw_spin_unlock_irq+0x23/0x50 [ 185.809655][ T5936] ? __pfx_kthread+0x10/0x10 [ 185.811232][ T5936] ret_from_fork+0x45/0x80 [ 185.812773][ T5936] ? __pfx_kthread+0x10/0x10 [ 185.814351][ T5936] ret_from_fork_asm+0x1a/0x30 [ 185.815999][ T5936] [ 185.819624][ T5936] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 185.824588][ T5936] Bluetooth: hci3: failed to register connection device [ 185.841814][T12761] program syz.2.2388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.852790][T12761] fuse: Bad value for 'user_id' [ 185.855698][T12761] fuse: Bad value for 'user_id' [ 186.003626][T12773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2391'. [ 186.167997][T12783] netlink: 'syz.5.2398': attribute type 10 has an invalid length. [ 186.174534][T12783] syz_tun: entered promiscuous mode [ 186.183292][T12783] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 186.333853][T12794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5130 sclass=netlink_route_socket pid=12794 comm=syz.2.2400 [ 186.493521][T12803] netlink: 'syz.5.2405': attribute type 1 has an invalid length. [ 186.531339][T12807] xt_hashlimit: size too large, truncated to 1048576 [ 186.711089][T12823] program syz.5.2419 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.758623][T12825] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 186.769551][T12825] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2412'. [ 186.843594][ T5936] Bluetooth: hci2: command tx timeout [ 186.855060][T12835] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2416'. [ 186.990785][T12845] block nbd5: Unsupported socket: shutdown callout must be supported. [ 187.207754][T12856] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2423'. [ 187.210127][T12856] all: renamed from gre0 (while UP) [ 187.594434][T12894] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2435'. [ 187.596780][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2435'. [ 187.599634][T12894] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2435'. [ 187.605539][T12894] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 187.608595][T12894] qnx6: wrong signature (magic) in superblock #1. [ 187.610825][T12894] qnx6: unable to read the first superblock [ 187.821409][T12916] FAULT_INJECTION: forcing a failure. [ 187.821409][T12916] name failslab, interval 1, probability 0, space 0, times 0 [ 187.826293][T12916] CPU: 1 UID: 0 PID: 12916 Comm: syz.2.2444 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 187.829780][T12916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 187.833263][T12916] Call Trace: [ 187.833272][T12916] [ 187.833280][T12916] dump_stack_lvl+0x16c/0x1f0 [ 187.833307][T12916] should_fail_ex+0x497/0x5b0 [ 187.833332][T12916] ? fs_reclaim_acquire+0xae/0x150 [ 187.833357][T12916] should_failslab+0xc2/0x120 [ 187.833378][T12916] __kmalloc_noprof+0xcb/0x510 [ 187.833403][T12916] snd_pcm_plugin_build+0x434/0x650 [ 187.833429][T12916] snd_pcm_plugin_build_mulaw+0x281/0x7a0 [ 187.833449][T12916] ? __pfx_mulaw_decode+0x10/0x10 [ 187.833473][T12916] ? __pfx_snd_pcm_plugin_build_mulaw+0x10/0x10 [ 187.833496][T12916] snd_pcm_plug_format_plugins+0x6ff/0x1440 [ 187.833524][T12916] ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10 [ 187.833550][T12916] ? kfree+0x14f/0x4b0 [ 187.833571][T12916] snd_pcm_oss_change_params_locked+0x2e95/0x3a60 [ 187.833602][T12916] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 187.861264][T12916] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 187.863352][T12916] snd_pcm_oss_write+0x4a3/0xa00 [ 187.863902][T12919] xt_hashlimit: size too large, truncated to 1048576 [ 187.865122][T12916] ? security_file_permission+0x71/0x210 [ 187.868800][T12916] ? rw_verify_area+0xd0/0x700 [ 187.870497][T12916] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 187.872423][T12916] vfs_write+0x24c/0x1150 [ 187.873895][T12916] ? __fget_files+0x1fc/0x3a0 [ 187.875096][T12916] ? __pfx_lock_release+0x10/0x10 [ 187.876411][T12916] ? __pfx_vfs_write+0x10/0x10 [ 187.877905][T12916] ? lock_acquire+0x2f/0xb0 [ 187.879384][T12916] ? __fget_files+0x40/0x3a0 [ 187.880740][T12916] ? __fget_files+0x206/0x3a0 [ 187.882018][T12916] ksys_write+0x12b/0x250 [ 187.883144][T12916] ? __pfx_ksys_write+0x10/0x10 [ 187.884577][T12916] do_syscall_64+0xcd/0x250 [ 187.886250][T12916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.888307][T12916] RIP: 0033:0x7f1052980849 [ 187.889807][T12916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.894980][T12916] RSP: 002b:00007f1053704058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 187.897237][T12916] RAX: ffffffffffffffda RBX: 00007f1052b45fa0 RCX: 00007f1052980849 [ 187.899333][T12916] RDX: 000000000000fdbc RSI: 0000000020000500 RDI: 0000000000000003 [ 187.901381][T12916] RBP: 00007f10537040a0 R08: 0000000000000000 R09: 0000000000000000 [ 187.903470][T12916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.905478][T12916] R13: 0000000000000000 R14: 00007f1052b45fa0 R15: 00007ffc37256898 [ 187.907524][T12916] [ 188.145277][T12946] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 188.148506][T12946] binfmt_misc: register: failed to install interpreter file ./file0 [ 188.704332][T12955] FAULT_INJECTION: forcing a failure. [ 188.704332][T12955] name failslab, interval 1, probability 0, space 0, times 0 [ 188.708920][T12955] CPU: 3 UID: 0 PID: 12955 Comm: syz.5.2459 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 188.712539][T12955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 188.716517][T12955] Call Trace: [ 188.717752][T12955] [ 188.718792][T12955] dump_stack_lvl+0x16c/0x1f0 [ 188.720506][T12955] should_fail_ex+0x497/0x5b0 [ 188.722194][T12955] ? fs_reclaim_acquire+0xae/0x150 [ 188.724049][T12955] should_failslab+0xc2/0x120 [ 188.725831][T12955] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 188.727764][T12955] ? __pfx_mark_lock+0x10/0x10 [ 188.729445][T12955] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 188.731589][T12955] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 188.733709][T12955] mmu_topup_memory_caches+0x22/0xd0 [ 188.735623][T12955] kvm_mmu_load+0xda/0x21f0 [ 188.737302][T12955] ? mark_held_locks+0x9f/0xe0 [ 188.738975][T12955] ? kvm_apic_has_interrupt+0xb6/0x190 [ 188.740933][T12955] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 188.743004][T12955] ? kvm_guest_time_update+0x780/0xeb0 [ 188.744930][T12955] ? clear_pending_if_disabled+0xa9/0x210 [ 188.746913][T12955] ? __pfx_kvm_mmu_load+0x10/0x10 [ 188.748701][T12955] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 188.750803][T12955] ? kvm_check_and_inject_events+0x725/0x12e0 [ 188.752973][T12955] ? record_steal_time+0x51/0xbe0 [ 188.754797][T12955] vcpu_run+0x33a4/0x4f50 [ 188.756393][T12955] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 188.758358][T12955] ? __pfx_vcpu_run+0x10/0x10 [ 188.760030][T12955] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 188.762024][T12955] ? rcu_is_watching+0x12/0xc0 [ 188.763776][T12955] ? trace_lock_acquire+0x14e/0x1f0 [ 188.765695][T12955] ? __local_bh_enable_ip+0xa4/0x120 [ 188.767677][T12955] ? lockdep_hardirqs_on+0x7c/0x110 [ 188.769613][T12955] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 188.771690][T12955] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 188.773722][T12955] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 188.775698][T12955] kvm_vcpu_ioctl+0x6ce/0x1520 [ 188.777381][T12955] ? do_vfs_ioctl+0x513/0x1990 [ 188.779083][T12955] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 188.780912][T12955] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 188.783126][T12955] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 188.785480][T12955] ? __pfx_lock_release+0x10/0x10 [ 188.787259][T12955] ? selinux_file_ioctl+0x180/0x270 [ 188.789087][T12955] ? selinux_file_ioctl+0xb4/0x270 [ 188.790889][T12955] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 188.792739][T12955] __x64_sys_ioctl+0x190/0x200 [ 188.794423][T12955] do_syscall_64+0xcd/0x250 [ 188.796038][T12955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.798163][T12955] RIP: 0033:0x7faa46b80849 [ 188.799753][T12955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.806395][T12955] RSP: 002b:00007faa479b6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.809274][T12955] RAX: ffffffffffffffda RBX: 00007faa46d45fa0 RCX: 00007faa46b80849 [ 188.812029][T12955] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 188.814761][T12955] RBP: 00007faa479b60a0 R08: 0000000000000000 R09: 0000000000000000 [ 188.817221][T12955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.819302][T12955] R13: 0000000000000000 R14: 00007faa46d45fa0 R15: 00007ffe32969c68 [ 188.821751][T12955] [ 189.117774][T12973] FAULT_INJECTION: forcing a failure. [ 189.117774][T12973] name failslab, interval 1, probability 0, space 0, times 0 [ 189.121125][T12973] CPU: 2 UID: 0 PID: 12973 Comm: syz.2.2466 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 189.124472][T12973] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 189.128033][T12973] Call Trace: [ 189.129169][T12973] [ 189.130167][T12973] dump_stack_lvl+0x16c/0x1f0 [ 189.131781][T12973] should_fail_ex+0x497/0x5b0 [ 189.133433][T12973] ? fs_reclaim_acquire+0xae/0x150 [ 189.135196][T12973] should_failslab+0xc2/0x120 [ 189.136831][T12973] __kmalloc_noprof+0xcb/0x510 [ 189.138489][T12973] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 189.140853][T12973] ? cred_has_capability.isra.0+0x192/0x2f0 [ 189.142946][T12973] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 189.144874][T12973] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 189.146986][T12973] ? bpf_lsm_capable+0x9/0x10 [ 189.148636][T12973] ? security_capable+0x7e/0x260 [ 189.150392][T12973] genl_rcv_msg+0x565/0x800 [ 189.151976][T12973] ? __pfx_genl_rcv_msg+0x10/0x10 [ 189.153765][T12973] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 189.155691][T12973] ? __pfx_nl802154_new_interface+0x10/0x10 [ 189.157769][T12973] ? __pfx_nl802154_post_doit+0x10/0x10 [ 189.159738][T12973] ? __pfx___lock_acquire+0x10/0x10 [ 189.161569][T12973] netlink_rcv_skb+0x16b/0x440 [ 189.163221][T12973] ? __pfx_genl_rcv_msg+0x10/0x10 [ 189.165005][T12973] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 189.167054][T12973] ? down_read+0xc9/0x330 [ 189.168519][T12973] ? __pfx_down_read+0x10/0x10 [ 189.170167][T12973] ? netlink_deliver_tap+0x1ae/0xd30 [ 189.171969][T12973] genl_rcv+0x28/0x40 [ 189.173372][T12973] netlink_unicast+0x53c/0x7f0 [ 189.175053][T12973] ? __pfx_netlink_unicast+0x10/0x10 [ 189.176928][T12973] netlink_sendmsg+0x8b8/0xd70 [ 189.178608][T12973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.180486][T12973] ____sys_sendmsg+0xaaf/0xc90 [ 189.182195][T12973] ? copy_msghdr_from_user+0x10b/0x160 [ 189.184124][T12973] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.186017][T12973] ___sys_sendmsg+0x135/0x1e0 [ 189.187644][T12973] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.189426][T12973] ? __pfx_lock_release+0x10/0x10 [ 189.191186][T12973] ? trace_lock_acquire+0x14e/0x1f0 [ 189.193013][T12973] ? __fget_files+0x206/0x3a0 [ 189.194673][T12973] __sys_sendmsg+0x16e/0x220 [ 189.196306][T12973] ? __pfx___sys_sendmsg+0x10/0x10 [ 189.198090][T12973] do_syscall_64+0xcd/0x250 [ 189.199697][T12973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.201796][T12973] RIP: 0033:0x7f1052980849 [ 189.203338][T12973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.209818][T12973] RSP: 002b:00007f1053704058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.212529][T12973] RAX: ffffffffffffffda RBX: 00007f1052b45fa0 RCX: 00007f1052980849 [ 189.215370][T12973] RDX: 0000000000000800 RSI: 0000000020000b00 RDI: 0000000000000008 [ 189.218015][T12973] RBP: 00007f10537040a0 R08: 0000000000000000 R09: 0000000000000000 [ 189.220682][T12973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.223265][T12973] R13: 0000000000000000 R14: 00007f1052b45fa0 R15: 00007ffc37256898 [ 189.225799][T12973] [ 189.226958][ C2] vkms_vblank_simulate: vblank timer overrun [ 189.451739][T12996] FAULT_INJECTION: forcing a failure. [ 189.451739][T12996] name failslab, interval 1, probability 0, space 0, times 0 [ 189.456193][T12996] CPU: 2 UID: 0 PID: 12996 Comm: syz.3.2475 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 189.459387][T12996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 189.462749][T12996] Call Trace: [ 189.463931][T12996] [ 189.464943][T12996] dump_stack_lvl+0x16c/0x1f0 [ 189.466551][T12996] should_fail_ex+0x497/0x5b0 [ 189.468165][T12996] ? fs_reclaim_acquire+0xae/0x150 [ 189.469893][T12996] should_failslab+0xc2/0x120 [ 189.471491][T12996] __kmalloc_noprof+0xcb/0x510 [ 189.473140][T12996] snd_pcm_plugin_build+0x434/0x650 [ 189.474948][T12996] ? snd_pcm_plugin_build+0x4b7/0x650 [ 189.476901][T12996] snd_pcm_plugin_build_rate+0x27d/0x760 [ 189.478782][T12996] ? __pfx_snd_pcm_plugin_build_rate+0x10/0x10 [ 189.480830][T12996] snd_pcm_plug_format_plugins+0x86a/0x1440 [ 189.482900][T12996] ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10 [ 189.485055][T12996] ? kfree+0x14f/0x4b0 [ 189.486453][T12996] snd_pcm_oss_change_params_locked+0x2e95/0x3a60 [ 189.488688][T12996] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 189.490978][T12996] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 189.493015][T12996] snd_pcm_oss_write+0x4a3/0xa00 [ 189.494827][T12996] ? security_file_permission+0x71/0x210 [ 189.496747][T12996] ? rw_verify_area+0xd0/0x700 [ 189.498367][T12996] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 189.500188][T12996] vfs_write+0x24c/0x1150 [ 189.501741][T12996] ? __fget_files+0x1fc/0x3a0 [ 189.503380][T12996] ? __pfx_lock_release+0x10/0x10 [ 189.505080][T12996] ? __pfx_vfs_write+0x10/0x10 [ 189.506741][T12996] ? lock_acquire+0x2f/0xb0 [ 189.508313][T12996] ? __fget_files+0x40/0x3a0 [ 189.509898][T12996] ? __fget_files+0x206/0x3a0 [ 189.511515][T12996] ksys_write+0x12b/0x250 [ 189.513081][T12996] ? __pfx_ksys_write+0x10/0x10 [ 189.514799][T12996] do_syscall_64+0xcd/0x250 [ 189.516392][T12996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.518436][T12996] RIP: 0033:0x7f9a6e580849 [ 189.519877][T12996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.526575][T12996] RSP: 002b:00007f9a6f3a4058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 189.529219][T12996] RAX: ffffffffffffffda RBX: 00007f9a6e745fa0 RCX: 00007f9a6e580849 [ 189.531939][T12996] RDX: 000000000000fdbc RSI: 0000000020000500 RDI: 0000000000000003 [ 189.534636][T12996] RBP: 00007f9a6f3a40a0 R08: 0000000000000000 R09: 0000000000000000 [ 189.537364][T12996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.540120][T12996] R13: 0000000000000000 R14: 00007f9a6e745fa0 R15: 00007ffd70370d78 [ 189.542423][T12996] [ 189.543355][ C2] vkms_vblank_simulate: vblank timer overrun [ 189.614590][T13004] xt_l2tp: v2 doesn't support IP mode [ 189.618721][ T39] kauditd_printk_skb: 472 callbacks suppressed [ 189.618734][ T39] audit: type=1400 audit(2000000089.169:5658): avc: denied { read } for pid=13001 comm="syz.2.2479" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 189.628407][ T39] audit: type=1400 audit(2000000089.169:5659): avc: denied { open } for pid=13001 comm="syz.2.2479" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 189.636207][ T39] audit: type=1400 audit(2000000089.169:5660): avc: denied { ioctl } for pid=13001 comm="syz.2.2479" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 189.644091][ T39] audit: type=1400 audit(2000000089.179:5661): avc: denied { ioctl } for pid=13007 comm="syz.3.2481" path="socket:[58351]" dev="sockfs" ino=58351 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 189.680207][ T39] audit: type=1400 audit(2000000089.229:5662): avc: denied { append } for pid=13007 comm="syz.3.2481" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 189.856772][ T39] audit: type=1326 audit(2000000089.409:5663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13026 comm="syz.5.2488" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa46b80849 code=0x7ffc0000 [ 189.868143][ T39] audit: type=1326 audit(2000000089.409:5664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13026 comm="syz.5.2488" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa46b80849 code=0x7ffc0000 [ 189.875001][ T39] audit: type=1326 audit(2000000089.419:5665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13026 comm="syz.5.2488" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa46b80849 code=0x7ffc0000 [ 189.880872][ T39] audit: type=1326 audit(2000000089.419:5666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13026 comm="syz.5.2488" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa46b80849 code=0x7ffc0000 [ 189.893123][ T39] audit: type=1326 audit(2000000089.419:5667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13026 comm="syz.5.2488" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa46b80849 code=0x7ffc0000 [ 189.895934][T13027] FAULT_INJECTION: forcing a failure. [ 189.895934][T13027] name failslab, interval 1, probability 0, space 0, times 0 [ 189.904919][T13027] CPU: 0 UID: 0 PID: 13027 Comm: syz.5.2488 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 189.908370][T13027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 189.911830][T13027] Call Trace: [ 189.912895][T13027] [ 189.913846][T13027] dump_stack_lvl+0x16c/0x1f0 [ 189.915459][T13027] should_fail_ex+0x497/0x5b0 [ 189.917057][T13027] ? fs_reclaim_acquire+0xae/0x150 [ 189.918839][T13027] should_failslab+0xc2/0x120 [ 189.920461][T13027] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 189.922315][T13027] ? __pfx_mark_lock+0x10/0x10 [ 189.923976][T13027] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 189.926091][T13027] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 189.928141][T13027] mmu_topup_memory_caches+0x22/0xd0 [ 189.929964][T13027] kvm_mmu_load+0xda/0x21f0 [ 189.931543][T13027] ? mark_held_locks+0x9f/0xe0 [ 189.933218][T13027] ? kvm_apic_has_interrupt+0xb6/0x190 [ 189.935118][T13027] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 189.937178][T13027] ? kvm_guest_time_update+0x780/0xeb0 [ 189.939114][T13027] ? clear_pending_if_disabled+0xa9/0x210 [ 189.941069][T13027] ? __pfx_kvm_mmu_load+0x10/0x10 [ 189.942817][T13027] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 189.944843][T13027] ? kvm_check_and_inject_events+0x725/0x12e0 [ 189.946925][T13027] ? record_steal_time+0x51/0xbe0 [ 189.948634][T13027] vcpu_run+0x33a4/0x4f50 [ 189.950086][T13027] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 189.951884][T13027] ? __pfx_vcpu_run+0x10/0x10 [ 189.953517][T13027] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 189.955353][T13027] ? rcu_is_watching+0x12/0xc0 [ 189.956912][T13027] ? trace_lock_acquire+0x14e/0x1f0 [ 189.958615][T13027] ? __local_bh_enable_ip+0xa4/0x120 [ 189.960203][T13027] ? lockdep_hardirqs_on+0x7c/0x110 [ 189.961993][T13027] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 189.963871][T13027] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 189.965857][T13027] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 189.967762][T13027] kvm_vcpu_ioctl+0x6ce/0x1520 [ 189.969392][T13027] ? do_vfs_ioctl+0x513/0x1990 [ 189.971036][T13027] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 189.972683][T13027] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 189.974785][T13027] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 189.977086][T13027] ? __pfx_lock_release+0x10/0x10 [ 189.978792][T13027] ? selinux_file_ioctl+0x180/0x270 [ 189.980574][T13027] ? selinux_file_ioctl+0xb4/0x270 [ 189.982364][T13027] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 189.984164][T13027] __x64_sys_ioctl+0x190/0x200 [ 189.985824][T13027] do_syscall_64+0xcd/0x250 [ 189.987377][T13027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.989408][T13027] RIP: 0033:0x7faa46b80849 [ 189.990925][T13027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.997432][T13027] RSP: 002b:00007faa479b6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.000159][T13027] RAX: ffffffffffffffda RBX: 00007faa46d45fa0 RCX: 00007faa46b80849 [ 190.002877][T13027] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 190.005596][T13027] RBP: 00007faa479b60a0 R08: 0000000000000000 R09: 0000000000000000 [ 190.008080][T13027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.010715][T13027] R13: 0000000000000000 R14: 00007faa46d45fa0 R15: 00007ffe32969c68 [ 190.013443][T13027] [ 190.071154][T13031] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2489'. [ 190.117892][T13033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2490'. [ 190.220906][T13042] tmpfs: Unknown parameter 'hugw' [ 190.765923][T13076] program syz.2.2506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.908103][T13086] FAULT_INJECTION: forcing a failure. [ 190.908103][T13086] name failslab, interval 1, probability 0, space 0, times 0 [ 190.912177][T13086] CPU: 3 UID: 0 PID: 13086 Comm: syz.2.2511 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 190.915555][T13086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 190.918922][T13086] Call Trace: [ 190.919963][T13086] [ 190.920897][T13086] dump_stack_lvl+0x16c/0x1f0 [ 190.922508][T13086] should_fail_ex+0x497/0x5b0 [ 190.924152][T13086] ? fs_reclaim_acquire+0xae/0x150 [ 190.926009][T13086] should_failslab+0xc2/0x120 [ 190.927623][T13086] __kmalloc_noprof+0xcb/0x510 [ 190.929269][T13086] snd_pcm_plugin_build+0x64/0x650 [ 190.930962][T13086] snd_pcm_plugin_build_io+0x208/0x5f0 [ 190.932631][T13086] ? __pfx_snd_pcm_plugin_build_io+0x10/0x10 [ 190.934642][T13086] ? kfree+0x14f/0x4b0 [ 190.936008][T13086] snd_pcm_oss_change_params_locked+0x2f08/0x3a60 [ 190.938043][T13086] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 190.940204][T13086] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 190.942214][T13086] snd_pcm_oss_write+0x4a3/0xa00 [ 190.943796][T13086] ? security_file_permission+0x71/0x210 [ 190.945687][T13086] ? rw_verify_area+0xd0/0x700 [ 190.947306][T13086] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 190.949304][T13086] vfs_write+0x24c/0x1150 [ 190.950670][T13086] ? __fget_files+0x1fc/0x3a0 [ 190.952155][T13086] ? __pfx_lock_release+0x10/0x10 [ 190.953822][T13086] ? __pfx_vfs_write+0x10/0x10 [ 190.955410][T13086] ? lock_acquire+0x2f/0xb0 [ 190.956721][T13086] ? __fget_files+0x40/0x3a0 [ 190.958151][T13086] ? __fget_files+0x206/0x3a0 [ 190.959434][T13086] ksys_write+0x12b/0x250 [ 190.960839][T13086] ? __pfx_ksys_write+0x10/0x10 [ 190.962396][T13086] do_syscall_64+0xcd/0x250 [ 190.963824][T13086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.965692][T13086] RIP: 0033:0x7f1052980849 [ 190.967236][T13086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.973520][T13086] RSP: 002b:00007f1053704058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 190.975751][T13086] RAX: ffffffffffffffda RBX: 00007f1052b45fa0 RCX: 00007f1052980849 [ 190.977825][T13086] RDX: 000000000000fdbc RSI: 0000000020000500 RDI: 0000000000000003 [ 190.980153][T13086] RBP: 00007f10537040a0 R08: 0000000000000000 R09: 0000000000000000 [ 190.982380][T13086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.984585][T13086] R13: 0000000000000000 R14: 00007f1052b45fa0 R15: 00007ffc37256898 [ 190.986876][T13086] [ 190.990756][ T5936] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 190.993563][ T5936] Bluetooth: hci3: Injecting HCI hardware error event [ 190.998911][ T5932] Bluetooth: hci3: hardware error 0x00 [ 191.597179][T13119] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2524'. [ 191.639500][T13124] xt_hashlimit: size too large, truncated to 1048576 [ 191.664509][T13121] FAULT_INJECTION: forcing a failure. [ 191.664509][T13121] name failslab, interval 1, probability 0, space 0, times 0 [ 191.668909][T13121] CPU: 3 UID: 0 PID: 13121 Comm: syz.6.2525 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 191.672494][T13121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 191.676169][T13121] Call Trace: [ 191.677358][T13121] [ 191.678405][T13121] dump_stack_lvl+0x16c/0x1f0 [ 191.680036][T13121] should_fail_ex+0x497/0x5b0 [ 191.681717][T13121] ? fs_reclaim_acquire+0xae/0x150 [ 191.683514][T13121] should_failslab+0xc2/0x120 [ 191.685201][T13121] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 191.687061][T13121] ? __pfx_mark_lock+0x10/0x10 [ 191.688756][T13121] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 191.690844][T13121] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 191.692830][T13121] mmu_topup_memory_caches+0x22/0xd0 [ 191.694677][T13121] kvm_mmu_load+0xda/0x21f0 [ 191.696288][T13121] ? mark_held_locks+0x9f/0xe0 [ 191.697945][T13121] ? kvm_apic_has_interrupt+0xb6/0x190 [ 191.699865][T13121] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 191.702030][T13121] ? kvm_guest_time_update+0x780/0xeb0 [ 191.703967][T13121] ? clear_pending_if_disabled+0xa9/0x210 [ 191.705933][T13121] ? __pfx_kvm_mmu_load+0x10/0x10 [ 191.707691][T13121] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 191.709854][T13121] ? kvm_check_and_inject_events+0x725/0x12e0 [ 191.712004][T13121] ? record_steal_time+0x51/0xbe0 [ 191.713937][T13121] vcpu_run+0x33a4/0x4f50 [ 191.715516][T13121] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 191.717420][T13121] ? __pfx_vcpu_run+0x10/0x10 [ 191.719056][T13121] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 191.720969][T13121] ? rcu_is_watching+0x12/0xc0 [ 191.722656][T13121] ? trace_lock_acquire+0x14e/0x1f0 [ 191.724531][T13121] ? __local_bh_enable_ip+0xa4/0x120 [ 191.726547][T13121] ? lockdep_hardirqs_on+0x7c/0x110 [ 191.728408][T13121] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 191.730523][T13121] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 191.732598][T13121] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 191.734656][T13121] kvm_vcpu_ioctl+0x6ce/0x1520 [ 191.736437][T13121] ? do_vfs_ioctl+0x513/0x1990 [ 191.738222][T13121] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 191.740147][T13121] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 191.742577][T13121] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 191.745077][T13121] ? __pfx_lock_release+0x10/0x10 [ 191.746944][T13121] ? selinux_file_ioctl+0x180/0x270 [ 191.748886][T13121] ? selinux_file_ioctl+0xb4/0x270 [ 191.750800][T13121] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 191.752735][T13121] __x64_sys_ioctl+0x190/0x200 [ 191.754534][T13121] do_syscall_64+0xcd/0x250 [ 191.756254][T13121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.758434][T13121] RIP: 0033:0x7fa049f80849 [ 191.760094][T13121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.766956][T13121] RSP: 002b:00007fa04adfc058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.769848][T13121] RAX: ffffffffffffffda RBX: 00007fa04a145fa0 RCX: 00007fa049f80849 [ 191.772637][T13121] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 191.775521][T13121] RBP: 00007fa04adfc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 191.778405][T13121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 191.781288][T13121] R13: 0000000000000000 R14: 00007fa04a145fa0 R15: 00007ffdcac5c278 [ 191.784160][T13121] [ 191.899449][T13136] hugetlbfs: Unknown parameter 'siz*ñ"FN}ø¹6†ïo£U4žëTH+OËÜêLI£;w‘ß [ 191.899449][T13136] iÅ©°“ãaÁég…àݪ}Ë ¤_ íŽØaÈ4¦§[ J­¶1ÃÀgÑéNòŠñí•´R÷ë}d„u¬ÖÔø Y [ 191.899449][T13136] ¯Èvªcâç¶_}ù‹E„\&zÈéwëýÇî1Ú˜Î4ÂÌ‘À× õÿ Mò‰éab³ÚŠËçâºV«Žsµ òB&úõ蛞\à [ 191.899449][T13136] [¼'«çÆæ6YE´ ¿bǼH·S‡åÀþadƒÂzÝ' [ 191.936429][T13140] CUSE: DEVNAME unspecified [ 192.928372][T13170] FAULT_INJECTION: forcing a failure. [ 192.928372][T13170] name failslab, interval 1, probability 0, space 0, times 0 [ 192.932763][T13170] CPU: 3 UID: 0 PID: 13170 Comm: syz.3.2542 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 192.936345][T13170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 192.939585][T13170] Call Trace: [ 192.940698][T13170] [ 192.941725][T13170] dump_stack_lvl+0x16c/0x1f0 [ 192.943351][T13170] should_fail_ex+0x497/0x5b0 [ 192.945111][T13170] should_failslab+0xc2/0x120 [ 192.946851][T13170] __kmalloc_cache_noprof+0x68/0x410 [ 192.948780][T13170] ? stack_depot_init+0x39/0x120 [ 192.950619][T13170] __hw_addr_add_ex+0x3c8/0x7c0 [ 192.952433][T13170] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 192.954398][T13170] ? __mutex_unlock_slowpath+0xd1/0x690 [ 192.956385][T13170] dev_addr_init+0x162/0x250 [ 192.958015][T13170] ? __pfx_dev_addr_init+0x10/0x10 [ 192.959787][T13170] ? __pfx_ieee802154_if_setup+0x10/0x10 [ 192.961783][T13170] ? __pfx_ieee802154_if_setup+0x10/0x10 [ 192.963693][T13170] alloc_netdev_mqs+0x3ef/0x1510 [ 192.965544][T13170] ieee802154_if_add+0xd9/0x1140 [ 192.967379][T13170] ? __pfx_ieee802154_if_add+0x10/0x10 [ 192.969351][T13170] ? __pfx___nla_validate_parse+0x10/0x10 [ 192.971177][T13170] ? mutex_is_locked+0x17/0x60 [ 192.972763][T13170] ? rtnl_is_locked+0x15/0x20 [ 192.974335][T13170] ? __dev_get_by_index+0x102/0x140 [ 192.976503][T13170] ? nl802154_pre_doit+0xf4/0xd30 [ 192.978319][T13170] ieee802154_add_iface+0x44/0x90 [ 192.980027][T13170] nl802154_new_interface+0x2eb/0x560 [ 192.981964][T13170] genl_family_rcv_msg_doit+0x202/0x2f0 [ 192.983873][T13170] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 192.986007][T13170] ? bpf_lsm_capable+0x9/0x10 [ 192.987649][T13170] ? security_capable+0x7e/0x260 [ 192.989368][T13170] genl_rcv_msg+0x565/0x800 [ 192.991086][T13170] ? __pfx_genl_rcv_msg+0x10/0x10 [ 192.992732][T13170] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 192.994596][T13170] ? __pfx_nl802154_new_interface+0x10/0x10 [ 192.996577][T13170] ? __pfx_nl802154_post_doit+0x10/0x10 [ 192.998529][T13170] ? __pfx___lock_acquire+0x10/0x10 [ 193.000372][T13170] netlink_rcv_skb+0x16b/0x440 [ 193.002083][T13170] ? __pfx_genl_rcv_msg+0x10/0x10 [ 193.003724][T13170] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 193.005475][T13170] ? down_read+0xc9/0x330 [ 193.006929][T13170] ? __pfx_down_read+0x10/0x10 [ 193.008496][T13170] ? netlink_deliver_tap+0x1ae/0xd30 [ 193.010246][T13170] genl_rcv+0x28/0x40 [ 193.011575][T13170] netlink_unicast+0x53c/0x7f0 [ 193.013126][T13170] ? __pfx_netlink_unicast+0x10/0x10 [ 193.014876][T13170] netlink_sendmsg+0x8b8/0xd70 [ 193.016473][T13170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.018231][T13170] ____sys_sendmsg+0xaaf/0xc90 [ 193.019881][T13170] ? copy_msghdr_from_user+0x10b/0x160 [ 193.021709][T13170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.023610][T13170] ___sys_sendmsg+0x135/0x1e0 [ 193.025281][T13170] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.027046][T13170] ? __pfx_lock_release+0x10/0x10 [ 193.028692][T13170] ? trace_lock_acquire+0x14e/0x1f0 [ 193.030501][T13170] ? __fget_files+0x206/0x3a0 [ 193.032061][T13170] __sys_sendmsg+0x16e/0x220 [ 193.033632][T13170] ? __pfx___sys_sendmsg+0x10/0x10 [ 193.035444][T13170] do_syscall_64+0xcd/0x250 [ 193.037041][T13170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.039099][T13170] RIP: 0033:0x7f9a6e580849 [ 193.040637][T13170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.047163][T13170] RSP: 002b:00007f9a6f3a4058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.049979][T13170] RAX: ffffffffffffffda RBX: 00007f9a6e745fa0 RCX: 00007f9a6e580849 [ 193.052516][T13170] RDX: 0000000000000800 RSI: 0000000020000b00 RDI: 0000000000000008 [ 193.055044][T13170] RBP: 00007f9a6f3a40a0 R08: 0000000000000000 R09: 0000000000000000 [ 193.058078][T13170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.060741][T13170] R13: 0000000000000000 R14: 00007f9a6e745fa0 R15: 00007ffd70370d78 [ 193.063408][T13170] [ 193.075449][ T5932] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 193.129217][T13187] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2548'. [ 193.161242][T13191] netlink: 344 bytes leftover after parsing attributes in process `syz.2.2549'. [ 193.229181][T13196] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2551'. [ 193.417703][T13228] netlink: 'syz.2.2562': attribute type 10 has an invalid length. [ 193.428798][T13228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.435122][T13228] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 193.452817][T13232] program syz.5.2564 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.565129][T13244] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2568'. [ 193.642330][T13254] can0: slcan on ptm1. [ 193.876216][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.878591][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.465283][T13246] can0 (unregistered): slcan off ptm1. [ 194.529292][T13293] FAULT_INJECTION: forcing a failure. [ 194.529292][T13293] name failslab, interval 1, probability 0, space 0, times 0 [ 194.542979][T13293] CPU: 1 UID: 0 PID: 13293 Comm: syz.5.2577 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 194.546700][T13293] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 194.550431][T13293] Call Trace: [ 194.551417][T13293] [ 194.552347][T13293] dump_stack_lvl+0x16c/0x1f0 [ 194.554025][T13293] should_fail_ex+0x497/0x5b0 [ 194.555731][T13293] ? fs_reclaim_acquire+0xae/0x150 [ 194.557570][T13293] should_failslab+0xc2/0x120 [ 194.559286][T13293] __kmalloc_node_noprof+0xd1/0x510 [ 194.560916][T13293] ? kfree+0x274/0x4b0 [ 194.562074][T13293] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 194.563497][T13293] __kvmalloc_node_noprof+0xad/0x1a0 [ 194.564878][T13293] snd_pcm_plugin_alloc+0x5e1/0x7d0 [ 194.566623][T13293] ? __pfx_rate_src_frames+0x10/0x10 [ 194.568250][T13293] snd_pcm_plug_alloc+0x214/0x330 [ 194.569709][T13293] snd_pcm_oss_change_params_locked+0x196c/0x3a60 [ 194.571482][T13293] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 194.573447][T13293] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 194.575113][T13293] snd_pcm_oss_write+0x4a3/0xa00 [ 194.576855][T13293] ? security_file_permission+0x71/0x210 [ 194.578911][T13293] ? rw_verify_area+0xd0/0x700 [ 194.580630][T13293] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 194.582190][T13293] vfs_write+0x24c/0x1150 [ 194.583334][T13293] ? __fget_files+0x1fc/0x3a0 [ 194.584604][T13293] ? __pfx_lock_release+0x10/0x10 [ 194.585988][T13293] ? __pfx_vfs_write+0x10/0x10 [ 194.587260][T13293] ? lock_acquire+0x2f/0xb0 [ 194.588490][T13293] ? __fget_files+0x40/0x3a0 [ 194.589725][T13293] ? __fget_files+0x206/0x3a0 [ 194.590965][T13293] ksys_write+0x12b/0x250 [ 194.592100][T13293] ? __pfx_ksys_write+0x10/0x10 [ 194.593381][T13293] do_syscall_64+0xcd/0x250 [ 194.594569][T13293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.596441][T13293] RIP: 0033:0x7faa46b80849 [ 194.598115][T13293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.604005][T13293] RSP: 002b:00007faa479b6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 194.606153][T13293] RAX: ffffffffffffffda RBX: 00007faa46d45fa0 RCX: 00007faa46b80849 [ 194.608073][T13293] RDX: 000000000000fdbc RSI: 0000000020000500 RDI: 0000000000000003 [ 194.610112][T13293] RBP: 00007faa479b60a0 R08: 0000000000000000 R09: 0000000000000000 [ 194.612149][T13293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 194.614190][T13293] R13: 0000000000000000 R14: 00007faa46d45fa0 R15: 00007ffe32969c68 [ 194.616646][T13293] [ 194.651601][T13307] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2583'. [ 194.705385][ T39] kauditd_printk_skb: 124 callbacks suppressed [ 194.705401][ T39] audit: type=1400 audit(2000000094.249:5792): avc: denied { write } for pid=13311 comm="syz.2.2585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 194.707633][T13320] netlink: 'syz.6.2588': attribute type 4 has an invalid length. [ 194.719507][T13320] netlink: 'syz.6.2588': attribute type 4 has an invalid length. [ 194.760423][T13327] IPVS: Error connecting to the multicast addr [ 194.765664][T13328] IPVS: Error connecting to the multicast addr [ 194.971595][T13345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2598'. [ 194.976625][T13348] program syz.6.2599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.033424][T13345] netlink: 'syz.5.2598': attribute type 10 has an invalid length. [ 195.038831][T13351] netlink: 'syz.5.2598': attribute type 10 has an invalid length. [ 195.041924][T13345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.046349][T13345] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 195.187676][T13364] tap0: tun_chr_ioctl cmd 1074025677 [ 195.189732][T13364] tap0: linktype set to 805 [ 195.387564][ T5936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 195.393599][ T5936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 195.394824][T13386] FAULT_INJECTION: forcing a failure. [ 195.394824][T13386] name failslab, interval 1, probability 0, space 0, times 0 [ 195.400216][T13386] CPU: 1 UID: 0 PID: 13386 Comm: syz.6.2611 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 195.400485][ T5936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 195.403160][T13386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 195.403176][T13386] Call Trace: [ 195.403184][T13386] [ 195.403192][T13386] dump_stack_lvl+0x16c/0x1f0 [ 195.403242][T13386] should_fail_ex+0x497/0x5b0 [ 195.407612][ T5936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 195.409232][T13386] ? fs_reclaim_acquire+0xae/0x150 [ 195.409271][T13386] should_failslab+0xc2/0x120 [ 195.413110][ T5936] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 195.414698][T13386] __kmalloc_node_noprof+0xd1/0x510 [ 195.414728][T13386] ? kfree+0x274/0x4b0 [ 195.417243][ T5936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 195.418226][T13386] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 195.418257][T13386] __kvmalloc_node_noprof+0xad/0x1a0 [ 195.430986][T13386] snd_pcm_plugin_alloc+0x5e1/0x7d0 [ 195.432548][T13386] ? rate_dst_frames+0x218/0x2c0 [ 195.434271][T13386] ? __pfx_rate_dst_frames+0x10/0x10 [ 195.436163][T13386] snd_pcm_plug_alloc+0x214/0x330 [ 195.437928][T13386] snd_pcm_oss_change_params_locked+0x196c/0x3a60 [ 195.440213][T13386] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 195.442617][T13386] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 195.444664][T13386] snd_pcm_oss_write+0x4a3/0xa00 [ 195.446127][T13386] ? security_file_permission+0x71/0x210 [ 195.447579][T13386] ? rw_verify_area+0xd0/0x700 [ 195.448880][T13386] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 195.450798][T13386] vfs_write+0x24c/0x1150 [ 195.452375][T13386] ? __fget_files+0x1fc/0x3a0 [ 195.454074][T13386] ? __pfx_lock_release+0x10/0x10 [ 195.455869][T13386] ? __pfx_vfs_write+0x10/0x10 [ 195.457608][T13386] ? lock_acquire+0x2f/0xb0 [ 195.459221][T13386] ? __fget_files+0x40/0x3a0 [ 195.460831][T13386] ? __fget_files+0x206/0x3a0 [ 195.462133][T13386] ksys_write+0x12b/0x250 [ 195.463236][T13386] ? __pfx_ksys_write+0x10/0x10 [ 195.464449][T13386] do_syscall_64+0xcd/0x250 [ 195.465632][T13386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.467216][T13386] RIP: 0033:0x7fa049f80849 [ 195.468383][T13386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.473741][T13386] RSP: 002b:00007fa04adfc058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 195.476725][T13386] RAX: ffffffffffffffda RBX: 00007fa04a145fa0 RCX: 00007fa049f80849 [ 195.479440][T13386] RDX: 000000000000fdbc RSI: 0000000020000500 RDI: 0000000000000003 [ 195.482104][T13386] RBP: 00007fa04adfc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 195.484748][T13386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.487513][T13386] R13: 0000000000000000 R14: 00007fa04a145fa0 R15: 00007ffdcac5c278 [ 195.490395][T13386] [ 195.522533][T13383] chnl_net:caif_netlink_parms(): no params data found [ 195.592205][T13383] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.595437][T13383] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.598042][T13383] bridge_slave_0: entered allmulticast mode [ 195.600994][T13383] bridge_slave_0: entered promiscuous mode [ 195.633581][ T84] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.642680][T13383] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.646092][T13383] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.648128][T13383] bridge_slave_1: entered allmulticast mode [ 195.650176][T13383] bridge_slave_1: entered promiscuous mode [ 195.672206][T13383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.676119][T13383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.705321][ T84] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.729051][T13383] team0: Port device team_slave_0 added [ 195.737322][T13383] team0: Port device team_slave_1 added [ 195.778171][ T84] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.784058][T13383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.785924][T13383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.794697][T13383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.799326][T13383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.801207][T13383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.808726][T13383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.836871][ T84] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.858341][T13383] hsr_slave_0: entered promiscuous mode [ 195.860397][T13383] hsr_slave_1: entered promiscuous mode [ 195.862212][T13383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.865014][T13383] Cannot create hsr debugfs directory [ 195.979879][ T84] bridge_slave_1: left allmulticast mode [ 195.981418][ T84] bridge_slave_1: left promiscuous mode [ 195.983311][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.986286][ T84] bridge_slave_0: left allmulticast mode [ 195.987850][ T84] bridge_slave_0: left promiscuous mode [ 195.989527][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.995177][ T84] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 196.057279][ T84] batman_adv: batadv0: Removing interface: ip6gretap1 [ 196.410749][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.415366][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.418836][ T84] bond0 (unregistering): Released all slaves [ 196.423142][ T84] bond1 (unregistering): Released all slaves [ 196.428404][ T84] bond2 (unregistering): (slave team_slave_1): Releasing active interface [ 196.430553][ T84] team_slave_1: left promiscuous mode [ 196.437812][ T84] bond2 (unregistering): Released all slaves [ 196.572367][ T84] tipc: Disabling bearer [ 196.574791][ T84] tipc: Left network mode [ 196.610347][T13421] batadv0: entered promiscuous mode [ 196.611832][T13421] batadv0: entered allmulticast mode [ 196.676991][ T39] audit: type=1326 audit(2000000096.229:5793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13430 comm="syz.6.2627" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa049f80849 code=0x7ffc0000 [ 196.691162][ T39] audit: type=1326 audit(2000000096.229:5794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13430 comm="syz.6.2627" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa049f80849 code=0x7ffc0000 [ 196.700671][ T39] audit: type=1326 audit(2000000096.239:5795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13430 comm="syz.6.2627" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa049f80849 code=0x7ffc0000 [ 196.710188][ T39] audit: type=1326 audit(2000000096.239:5796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13430 comm="syz.6.2627" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa049f80849 code=0x7ffc0000 [ 196.717963][ T39] audit: type=1326 audit(2000000096.239:5797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13430 comm="syz.6.2627" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa049f80849 code=0x7ffc0000 [ 196.720719][T13433] FAULT_INJECTION: forcing a failure. [ 196.720719][T13433] name failslab, interval 1, probability 0, space 0, times 0 [ 196.726440][ T39] audit: type=1326 audit(2000000096.239:5798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13430 comm="syz.6.2627" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa049f80849 code=0x7ffc0000 [ 196.726483][ T39] audit: type=1326 audit(2000000096.239:5799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13430 comm="syz.6.2627" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa049f80849 code=0x7ffc0000 [ 196.726517][ T39] audit: type=1326 audit(2000000096.239:5800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13430 comm="syz.6.2627" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa049f80849 code=0x7ffc0000 [ 196.726555][ T39] audit: type=1326 audit(2000000096.239:5801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13430 comm="syz.6.2627" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa049f80849 code=0x7ffc0000 [ 196.760006][T13433] CPU: 0 UID: 0 PID: 13433 Comm: syz.6.2627 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 196.762669][T13433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 196.765424][T13433] Call Trace: [ 196.766329][T13433] [ 196.767135][T13433] dump_stack_lvl+0x16c/0x1f0 [ 196.768452][T13433] should_fail_ex+0x497/0x5b0 [ 196.769736][T13433] ? fs_reclaim_acquire+0xae/0x150 [ 196.771125][T13433] should_failslab+0xc2/0x120 [ 196.772386][T13433] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 196.773850][T13433] ? __pfx_mark_lock+0x10/0x10 [ 196.775148][T13433] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 196.776786][T13433] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 196.778403][T13433] mmu_topup_memory_caches+0x22/0xd0 [ 196.779820][T13433] kvm_mmu_load+0xda/0x21f0 [ 196.781052][T13433] ? mark_held_locks+0x9f/0xe0 [ 196.782354][T13433] ? kvm_apic_has_interrupt+0xb6/0x190 [ 196.783821][T13433] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 196.785421][T13433] ? kvm_guest_time_update+0x780/0xeb0 [ 196.786877][T13433] ? clear_pending_if_disabled+0xa9/0x210 [ 196.788387][T13433] ? __pfx_kvm_mmu_load+0x10/0x10 [ 196.789716][T13433] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 196.791268][T13433] ? kvm_check_and_inject_events+0x725/0x12e0 [ 196.792833][T13433] ? record_steal_time+0x51/0xbe0 [ 196.794142][T13433] vcpu_run+0x33a4/0x4f50 [ 196.795283][T13433] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 196.796789][T13433] ? __pfx_vcpu_run+0x10/0x10 [ 196.798068][T13433] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 196.799568][T13433] ? rcu_is_watching+0x12/0xc0 [ 196.800856][T13433] ? trace_lock_acquire+0x14e/0x1f0 [ 196.802260][T13433] ? __local_bh_enable_ip+0xa4/0x120 [ 196.803673][T13433] ? lockdep_hardirqs_on+0x7c/0x110 [ 196.805072][T13433] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 196.806592][T13433] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 196.808117][T13433] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 196.809616][T13433] kvm_vcpu_ioctl+0x6ce/0x1520 [ 196.810910][T13433] ? do_vfs_ioctl+0x513/0x1990 [ 196.812197][T13433] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 196.813594][T13433] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 196.815318][T13433] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 196.817164][T13433] ? __pfx_lock_release+0x10/0x10 [ 196.818557][T13433] ? selinux_file_ioctl+0x180/0x270 [ 196.819968][T13433] ? selinux_file_ioctl+0xb4/0x270 [ 196.821348][T13433] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 196.822731][T13433] __x64_sys_ioctl+0x190/0x200 [ 196.824022][T13433] do_syscall_64+0xcd/0x250 [ 196.825171][T13433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.826730][T13433] RIP: 0033:0x7fa049f80849 [ 196.827842][T13433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.832726][T13433] RSP: 002b:00007fa04adfc058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.834947][T13433] RAX: ffffffffffffffda RBX: 00007fa04a145fa0 RCX: 00007fa049f80849 [ 196.837123][T13433] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 196.839208][T13433] RBP: 00007fa04adfc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 196.841300][T13433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.843443][T13433] R13: 0000000000000000 R14: 00007fa04a145fa0 R15: 00007ffdcac5c278 [ 196.845569][T13433] [ 196.964247][ T84] hsr_slave_0: left promiscuous mode [ 196.966799][ T84] hsr_slave_1: left promiscuous mode [ 196.969366][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.971893][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.975276][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.977781][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.011545][ T84] veth1_macvtap: left promiscuous mode [ 197.013191][ T84] veth0_macvtap: left promiscuous mode [ 197.014752][ T84] veth1_vlan: left promiscuous mode [ 197.016758][ T84] veth0_vlan: left promiscuous mode [ 197.474180][ T5936] Bluetooth: hci1: command tx timeout [ 197.945010][ T84] team0 (unregistering): Port device team_slave_0 removed [ 198.731665][T13383] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 198.751488][T13383] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 198.758044][T13383] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 198.782765][T13383] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 198.834379][T13383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.848606][T13383] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.854916][ T8583] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.857426][ T8583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.859461][T13467] program syz.2.2635 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.872618][ T8583] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.875170][ T8583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.907328][T13472] FAULT_INJECTION: forcing a failure. [ 198.907328][T13472] name failslab, interval 1, probability 0, space 0, times 0 [ 198.911654][T13472] CPU: 3 UID: 0 PID: 13472 Comm: syz.5.2636 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 198.915529][T13472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 198.919216][T13472] Call Trace: [ 198.920465][T13472] [ 198.921546][T13472] dump_stack_lvl+0x16c/0x1f0 [ 198.923184][T13472] should_fail_ex+0x497/0x5b0 [ 198.924422][T13473] Bluetooth: MGMT ver 1.23 [ 198.924823][T13472] ? fs_reclaim_acquire+0xae/0x150 [ 198.926370][T13473] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 198.928116][T13472] should_failslab+0xc2/0x120 [ 198.932486][T13472] __kmalloc_cache_noprof+0x68/0x410 [ 198.934361][T13472] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 198.936142][T13472] input_allocate_device+0x44/0x350 [ 198.937902][T13472] uinput_ioctl_handler.isra.0+0x897/0x1d70 [ 198.939917][T13472] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 198.942152][T13472] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 198.943112][ T5973] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 198.944147][T13472] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 198.948655][T13472] ? __pfx_lock_release+0x10/0x10 [ 198.950585][T13472] ? selinux_file_ioctl+0x180/0x270 [ 198.952513][T13472] ? selinux_file_ioctl+0xb4/0x270 [ 198.954348][T13472] ? __pfx_uinput_ioctl+0x10/0x10 [ 198.956141][T13472] __x64_sys_ioctl+0x190/0x200 [ 198.957450][T13472] do_syscall_64+0xcd/0x250 [ 198.958669][T13472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.960191][T13472] RIP: 0033:0x7faa46b80849 [ 198.961366][T13472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.966411][T13472] RSP: 002b:00007faa479b6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.968902][T13472] RAX: ffffffffffffffda RBX: 00007faa46d45fa0 RCX: 00007faa46b80849 [ 198.970957][T13472] RDX: 0000000020001300 RSI: 000000004008556c RDI: 0000000000000003 [ 198.972991][T13472] RBP: 00007faa479b60a0 R08: 0000000000000000 R09: 0000000000000000 [ 198.975031][T13472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.977024][T13472] R13: 0000000000000000 R14: 00007faa46d45fa0 R15: 00007ffe32969c68 [ 198.979316][T13472] [ 199.085147][T13383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.109028][T13383] veth0_vlan: entered promiscuous mode [ 199.125481][T13490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.131233][ T5973] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 199.132458][T13490] bond0: (slave rose0): Enslaving as an active interface with an up link [ 199.134505][ T5973] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 199.134521][ T5973] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 199.134532][ T5973] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.134549][ T5973] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.134561][ T5973] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.136900][ T5973] usb 11-1: config 0 descriptor?? [ 199.141558][T13383] veth1_vlan: entered promiscuous mode [ 199.175180][T13383] veth0_macvtap: entered promiscuous mode [ 199.179195][T13383] veth1_macvtap: entered promiscuous mode [ 199.190615][T13383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.197791][T13383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.200923][T13383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.204830][T13383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.207950][T13383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.210781][T13383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.213089][T13383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.215989][T13383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.218786][T13383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.221837][T13383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.224832][T13383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.227879][T13383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.233864][T13383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.238390][T13383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.240779][T13383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.243064][T13383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.245699][T13383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.248015][T13383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.250424][T13383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.254288][T13383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.257008][T13383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.259286][T13383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.261726][T13383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.264106][T13383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.266660][T13383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.269572][T13383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.274110][T13383] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.276537][T13383] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.278600][T13383] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.280663][T13383] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.318036][ T8588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.320157][ T8588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.335585][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.337592][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.553693][ T5936] Bluetooth: hci1: command tx timeout [ 199.553830][ T5973] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 199.557489][ T5973] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 199.559462][ T5973] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 199.562952][ T5973] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 199.564882][ T5973] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 199.568543][ T5973] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 199.574552][ T5973] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 199.776618][T13520] FAULT_INJECTION: forcing a failure. [ 199.776618][T13520] name failslab, interval 1, probability 0, space 0, times 0 [ 199.781186][T13520] CPU: 3 UID: 0 PID: 13520 Comm: syz.5.2643 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 199.784873][T13520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 199.788746][T13520] Call Trace: [ 199.789982][T13520] [ 199.791062][T13520] dump_stack_lvl+0x16c/0x1f0 [ 199.792799][T13520] should_fail_ex+0x497/0x5b0 [ 199.794530][T13520] ? fs_reclaim_acquire+0xae/0x150 [ 199.796405][T13520] should_failslab+0xc2/0x120 [ 199.798129][T13520] __kmalloc_node_noprof+0xd1/0x510 [ 199.800028][T13520] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 199.802013][T13520] __kvmalloc_node_noprof+0xad/0x1a0 [ 199.803936][T13520] snd_pcm_oss_change_params_locked+0x1cbd/0x3a60 [ 199.806183][T13520] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 199.808630][T13520] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 199.810771][T13520] snd_pcm_oss_write+0x4a3/0xa00 [ 199.812491][T13520] ? security_file_permission+0x71/0x210 [ 199.814406][T13520] ? rw_verify_area+0xd0/0x700 [ 199.816102][T13520] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 199.818001][T13520] vfs_write+0x24c/0x1150 [ 199.819562][T13520] ? __fget_files+0x1fc/0x3a0 [ 199.821242][T13520] ? __pfx_lock_release+0x10/0x10 [ 199.822984][T13520] ? __pfx_vfs_write+0x10/0x10 [ 199.824633][T13520] ? lock_acquire+0x2f/0xb0 [ 199.826072][T13520] ? __fget_files+0x40/0x3a0 [ 199.827270][T13520] ? __fget_files+0x206/0x3a0 [ 199.828511][T13520] ksys_write+0x12b/0x250 [ 199.829656][T13520] ? __pfx_ksys_write+0x10/0x10 [ 199.830902][T13520] do_syscall_64+0xcd/0x250 [ 199.832029][T13520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.833508][T13520] RIP: 0033:0x7faa46b80849 [ 199.834617][T13520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.839981][T13520] RSP: 002b:00007faa479b6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 199.842524][T13520] RAX: ffffffffffffffda RBX: 00007faa46d45fa0 RCX: 00007faa46b80849 [ 199.844574][T13520] RDX: 000000000000fdbc RSI: 0000000020000500 RDI: 0000000000000003 [ 199.846934][T13520] RBP: 00007faa479b60a0 R08: 0000000000000000 R09: 0000000000000000 [ 199.848983][T13520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.851007][T13520] R13: 0000000000000000 R14: 00007faa46d45fa0 R15: 00007ffe32969c68 [ 199.853058][T13520] [ 199.856170][T13456] fuse: Unknown parameter 'user_id0000000000000000000000000000000000000000' [ 199.901606][ T39] kauditd_printk_skb: 62 callbacks suppressed [ 199.901622][ T39] audit: type=1400 audit(2000000099.449:5864): avc: denied { write } for pid=13452 comm="syz.6.2631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 199.912049][ T5973] usb 11-1: USB disconnect, device number 4 [ 200.037805][T13529] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2646'. [ 200.070490][T13533] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 200.074651][T13533] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 200.077842][T13533] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 200.080885][T13533] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 200.086252][T13533] geneve2: entered promiscuous mode [ 200.088086][T13533] geneve2: entered allmulticast mode [ 200.091125][T13533] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 200.094494][T13533] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 200.096799][T13533] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 200.099183][T13533] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 200.503923][T13556] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 200.534417][T13565] program syz.5.2659 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.546532][T13567] FAULT_INJECTION: forcing a failure. [ 200.546532][T13567] name failslab, interval 1, probability 0, space 0, times 0 [ 200.553293][T13567] CPU: 2 UID: 0 PID: 13567 Comm: syz.6.2661 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 200.557060][T13567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 200.560715][T13567] Call Trace: [ 200.561901][T13567] [ 200.562725][T13567] dump_stack_lvl+0x16c/0x1f0 [ 200.564365][T13567] should_fail_ex+0x497/0x5b0 [ 200.566073][T13567] ? fs_reclaim_acquire+0xae/0x150 [ 200.567854][T13567] should_failslab+0xc2/0x120 [ 200.569416][T13567] __kmalloc_cache_noprof+0x68/0x410 [ 200.570924][T13567] input_allocate_device+0xc5/0x350 [ 200.572566][T13567] uinput_ioctl_handler.isra.0+0x897/0x1d70 [ 200.574250][T13567] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 200.576539][T13567] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 200.578769][T13567] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 200.581080][T13567] ? __pfx_lock_release+0x10/0x10 [ 200.582840][T13567] ? selinux_file_ioctl+0x180/0x270 [ 200.584452][T13567] ? selinux_file_ioctl+0xb4/0x270 [ 200.585770][T13567] ? __pfx_uinput_ioctl+0x10/0x10 [ 200.586979][T13567] __x64_sys_ioctl+0x190/0x200 [ 200.588177][T13567] do_syscall_64+0xcd/0x250 [ 200.589368][T13567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.590922][T13567] RIP: 0033:0x7fa049f80849 [ 200.592190][T13567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.597939][T13567] RSP: 002b:00007fa04adfc058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.600087][T13567] RAX: ffffffffffffffda RBX: 00007fa04a145fa0 RCX: 00007fa049f80849 [ 200.602270][T13567] RDX: 0000000020001300 RSI: 000000004008556c RDI: 0000000000000003 [ 200.604346][T13567] RBP: 00007fa04adfc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 200.606472][T13567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.608976][T13567] R13: 0000000000000000 R14: 00007fa04a145fa0 R15: 00007ffdcac5c278 [ 200.611751][T13567] [ 200.612747][ C2] vkms_vblank_simulate: vblank timer overrun [ 200.613310][ T39] audit: type=1400 audit(2000000100.129:5865): avc: denied { ioctl } for pid=13568 comm="syz.5.2663" path="socket:[66679]" dev="sockfs" ino=66679 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 200.627781][T13573] input: syz0 as /devices/virtual/input/input23 [ 200.656696][ T39] audit: type=1400 audit(2000000100.209:5866): avc: denied { ioctl } for pid=13574 comm="syz.5.2666" path="socket:[66688]" dev="sockfs" ino=66688 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 200.714812][T13588] FAULT_INJECTION: forcing a failure. [ 200.714812][T13588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.718233][T13588] CPU: 1 UID: 0 PID: 13588 Comm: syz.5.2668 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 200.720867][T13588] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 200.723596][T13588] Call Trace: [ 200.724449][T13588] [ 200.725238][T13588] dump_stack_lvl+0x16c/0x1f0 [ 200.726835][T13588] should_fail_ex+0x497/0x5b0 [ 200.728110][T13588] _copy_from_user+0x2e/0xd0 [ 200.729366][T13588] snd_pcm_oss_write2+0x1c6/0x3f0 [ 200.730707][T13588] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 200.732171][T13588] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 200.733584][T13588] ? snd_pcm_oss_prepare+0x11e/0x220 [ 200.735084][T13588] snd_pcm_oss_write+0x727/0xa00 [ 200.736421][T13588] ? rw_verify_area+0xd0/0x700 [ 200.737714][T13588] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 200.739136][T13588] vfs_write+0x24c/0x1150 [ 200.740285][T13588] ? __fget_files+0x1fc/0x3a0 [ 200.741563][T13588] ? __pfx_lock_release+0x10/0x10 [ 200.742904][T13588] ? __pfx_vfs_write+0x10/0x10 [ 200.744205][T13588] ? lock_acquire+0x2f/0xb0 [ 200.745780][T13588] ? __fget_files+0x40/0x3a0 [ 200.747378][T13588] ? __fget_files+0x206/0x3a0 [ 200.748948][T13588] ksys_write+0x12b/0x250 [ 200.750107][T13588] ? __pfx_ksys_write+0x10/0x10 [ 200.751409][T13588] do_syscall_64+0xcd/0x250 [ 200.752612][T13588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.754143][T13588] RIP: 0033:0x7faa46b80849 [ 200.755377][T13588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.760329][T13588] RSP: 002b:00007faa479b6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 200.762463][T13588] RAX: ffffffffffffffda RBX: 00007faa46d45fa0 RCX: 00007faa46b80849 [ 200.764444][T13588] RDX: 000000000000fdbc RSI: 0000000020000500 RDI: 0000000000000003 [ 200.766531][T13588] RBP: 00007faa479b60a0 R08: 0000000000000000 R09: 0000000000000000 [ 200.768466][T13588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 200.770481][T13588] R13: 0000000000000000 R14: 00007faa46d45fa0 R15: 00007ffe32969c68 [ 200.772560][T13588] [ 200.800356][ T39] audit: type=1400 audit(2000000100.349:5867): avc: denied { mounton } for pid=13572 comm="syz.2.2664" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 200.881895][T13603] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2674'. [ 200.929026][ T39] audit: type=1326 audit(2000000100.479:5868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13605 comm="syz.3.2675" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb3b80849 code=0x7ffc0000 [ 200.935825][ T39] audit: type=1326 audit(2000000100.479:5869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13605 comm="syz.3.2675" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb3b80849 code=0x7ffc0000 [ 200.942809][ T39] audit: type=1326 audit(2000000100.479:5870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13605 comm="syz.3.2675" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7efcb3b80849 code=0x7ffc0000 [ 200.949594][ T39] audit: type=1326 audit(2000000100.479:5871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13605 comm="syz.3.2675" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb3b80849 code=0x7ffc0000 [ 200.955653][ T39] audit: type=1326 audit(2000000100.479:5872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13605 comm="syz.3.2675" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcb3b80849 code=0x7ffc0000 [ 200.961627][ T39] audit: type=1326 audit(2000000100.479:5873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13605 comm="syz.3.2675" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb3b80849 code=0x7ffc0000 [ 201.119965][T13619] vlan2: entered allmulticast mode [ 201.121755][T13619] bond0: entered allmulticast mode [ 201.125252][T13619] bond_slave_0: entered allmulticast mode [ 201.126771][T13619] bond_slave_1: entered allmulticast mode [ 201.131829][T13619] bond0: left allmulticast mode [ 201.136026][T13619] bond_slave_0: left allmulticast mode [ 201.137931][T13619] bond_slave_1: left allmulticast mode [ 201.219789][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2686'. [ 201.246243][T13635] program syz.2.2688 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.269229][T13637] FAULT_INJECTION: forcing a failure. [ 201.269229][T13637] name failslab, interval 1, probability 0, space 0, times 0 [ 201.274250][T13637] CPU: 0 UID: 0 PID: 13637 Comm: syz.5.2689 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 201.277878][T13637] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 201.281616][T13637] Call Trace: [ 201.282791][T13637] [ 201.283843][T13637] dump_stack_lvl+0x16c/0x1f0 [ 201.285528][T13637] should_fail_ex+0x497/0x5b0 [ 201.287158][T13637] ? fs_reclaim_acquire+0xae/0x150 [ 201.288959][T13637] should_failslab+0xc2/0x120 [ 201.290612][T13637] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 201.292771][T13637] ? __debug_object_init+0x2dd/0x3e0 [ 201.294632][T13637] ? kvasprintf_const+0x66/0x1a0 [ 201.296394][T13637] kvasprintf+0xbd/0x160 [ 201.297912][T13637] ? __pfx_kvasprintf+0x10/0x10 [ 201.299526][T13637] ? lockdep_hardirqs_on+0x7c/0x110 [ 201.300808][T13637] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 201.302283][T13637] ? __debug_object_init+0x2dd/0x3e0 [ 201.303563][T13637] kvasprintf_const+0x66/0x1a0 [ 201.304750][T13637] kobject_set_name_vargs+0x5a/0x140 [ 201.306366][T13637] dev_set_name+0xc8/0x100 [ 201.307606][T13637] ? __pfx_dev_set_name+0x10/0x10 [ 201.308961][T13637] ? __init_waitqueue_head+0xca/0x150 [ 201.310262][T13637] ? input_allocate_device+0x271/0x350 [ 201.311639][T13637] input_allocate_device+0x293/0x350 [ 201.313192][T13637] uinput_ioctl_handler.isra.0+0x897/0x1d70 [ 201.314656][T13637] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 201.316266][T13637] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 201.317852][T13637] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 201.319505][T13637] ? __pfx_lock_release+0x10/0x10 [ 201.320730][T13637] ? selinux_file_ioctl+0x180/0x270 [ 201.322061][T13637] ? selinux_file_ioctl+0xb4/0x270 [ 201.323301][T13637] ? __pfx_uinput_ioctl+0x10/0x10 [ 201.324532][T13637] __x64_sys_ioctl+0x190/0x200 [ 201.325718][T13637] do_syscall_64+0xcd/0x250 [ 201.326827][T13637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.328265][T13637] RIP: 0033:0x7faa46b80849 [ 201.329360][T13637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.334031][T13637] RSP: 002b:00007faa479b6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.336110][T13637] RAX: ffffffffffffffda RBX: 00007faa46d45fa0 RCX: 00007faa46b80849 [ 201.338050][T13637] RDX: 0000000020001300 RSI: 000000004008556c RDI: 0000000000000003 [ 201.339984][T13637] RBP: 00007faa479b60a0 R08: 0000000000000000 R09: 0000000000000000 [ 201.341983][T13637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.344117][T13637] R13: 0000000000000000 R14: 00007faa46d45fa0 R15: 00007ffe32969c68 [ 201.346167][T13637] [ 201.382728][T13645] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2693'. [ 201.408566][T13649] FAULT_INJECTION: forcing a failure. [ 201.408566][T13649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.412058][T13649] CPU: 2 UID: 0 PID: 13649 Comm: syz.2.2694 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 201.415460][T13649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 201.418572][T13649] Call Trace: [ 201.419454][T13649] [ 201.420235][T13649] dump_stack_lvl+0x16c/0x1f0 [ 201.421491][T13649] should_fail_ex+0x497/0x5b0 [ 201.422699][T13649] _copy_from_user+0x2e/0xd0 [ 201.423985][T13649] snd_pcm_oss_write2+0x1c6/0x3f0 [ 201.425272][T13649] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 201.426688][T13649] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 201.428030][T13649] ? snd_pcm_oss_prepare+0x11e/0x220 [ 201.429371][T13649] snd_pcm_oss_write+0x727/0xa00 [ 201.430630][T13649] ? rw_verify_area+0xd0/0x700 [ 201.431891][T13649] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 201.433598][T13649] vfs_write+0x24c/0x1150 [ 201.434936][T13649] ? __fget_files+0x1fc/0x3a0 [ 201.436574][T13649] ? __pfx_lock_release+0x10/0x10 [ 201.438374][T13649] ? __pfx_vfs_write+0x10/0x10 [ 201.440069][T13649] ? lock_acquire+0x2f/0xb0 [ 201.441701][T13649] ? __fget_files+0x40/0x3a0 [ 201.443366][T13649] ? __fget_files+0x206/0x3a0 [ 201.445206][T13649] ksys_write+0x12b/0x250 [ 201.446759][T13649] ? __pfx_ksys_write+0x10/0x10 [ 201.448342][T13649] do_syscall_64+0xcd/0x250 [ 201.449975][T13649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.451948][T13649] RIP: 0033:0x7f1052980849 [ 201.453037][T13651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2695'. [ 201.453153][T13649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.453166][T13649] RSP: 002b:00007f1053704058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 201.453177][T13649] RAX: ffffffffffffffda RBX: 00007f1052b45fa0 RCX: 00007f1052980849 [ 201.453184][T13649] RDX: 000000000000fdbc RSI: 0000000020000500 RDI: 0000000000000003 [ 201.453191][T13649] RBP: 00007f10537040a0 R08: 0000000000000000 R09: 0000000000000000 [ 201.453198][T13649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 201.475191][T13649] R13: 0000000000000000 R14: 00007f1052b45fa0 R15: 00007ffc37256898 [ 201.477969][T13649] [ 201.479149][ C2] vkms_vblank_simulate: vblank timer overrun [ 201.521435][T13661] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2698'. [ 201.633091][ T5936] Bluetooth: hci1: command tx timeout [ 201.667328][T13681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2706'. [ 201.852785][T13702] FAULT_INJECTION: forcing a failure. [ 201.852785][T13702] name failslab, interval 1, probability 0, space 0, times 0 [ 201.858112][T13702] CPU: 2 UID: 0 PID: 13702 Comm: syz.2.2715 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 201.861472][T13702] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 201.864985][T13702] Call Trace: [ 201.866214][T13702] [ 201.867268][T13702] dump_stack_lvl+0x16c/0x1f0 [ 201.869005][T13702] should_fail_ex+0x497/0x5b0 [ 201.870739][T13702] ? fs_reclaim_acquire+0xae/0x150 [ 201.872583][T13702] should_failslab+0xc2/0x120 [ 201.874288][T13702] __kmalloc_noprof+0xcb/0x510 [ 201.876028][T13702] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 201.878048][T13702] tomoyo_realpath_from_path+0xb9/0x720 [ 201.879701][T13702] ? tomoyo_path_number_perm+0x235/0x590 [ 201.881384][T13702] ? tomoyo_path_number_perm+0x235/0x590 [ 201.883344][T13702] tomoyo_path_number_perm+0x248/0x590 [ 201.885123][T13702] ? tomoyo_path_number_perm+0x235/0x590 [ 201.886880][T13702] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 201.888422][T13702] ? __pfx_lock_release+0x10/0x10 [ 201.889838][T13702] ? trace_lock_acquire+0x14e/0x1f0 [ 201.891274][T13702] ? lock_acquire+0x2f/0xb0 [ 201.892522][T13702] ? __fget_files+0x40/0x3a0 [ 201.893822][T13702] ? __fget_files+0x206/0x3a0 [ 201.895186][T13702] security_file_ioctl+0x9b/0x240 [ 201.896512][T13702] __x64_sys_ioctl+0xb7/0x200 [ 201.897792][T13702] do_syscall_64+0xcd/0x250 [ 201.899045][T13702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.900636][T13702] RIP: 0033:0x7f1052980849 [ 201.901821][T13702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.906810][T13702] RSP: 002b:00007f1053704058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.908992][T13702] RAX: ffffffffffffffda RBX: 00007f1052b45fa0 RCX: 00007f1052980849 [ 201.911464][T13702] RDX: 0000000020000280 RSI: 0000000040305828 RDI: 0000000000000003 [ 201.913665][T13702] RBP: 00007f10537040a0 R08: 0000000000000000 R09: 0000000000000000 [ 201.915825][T13702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.917924][T13702] R13: 0000000000000000 R14: 00007f1052b45fa0 R15: 00007ffc37256898 [ 201.920295][T13702] [ 201.921253][ C2] vkms_vblank_simulate: vblank timer overrun [ 201.923822][T13702] ERROR: Out of memory at tomoyo_realpath_from_path. [ 201.983108][ T6169] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 202.025846][T13711] ALSA: seq fatal error: cannot create timer (-22) [ 202.027891][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.030265][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.032541][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.036562][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.039074][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.041821][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.046776][ T5992] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 202.046875][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.051337][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.058616][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.063535][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.066440][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.068659][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.070864][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.073583][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.076781][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.080027][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.083445][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.086379][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.089681][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.093087][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.096191][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.099157][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.102096][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.105607][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.109289][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.112374][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.117137][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.120312][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.123059][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.126147][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.129147][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.132140][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.134726][ T6169] usb 10-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 202.138776][T13709] overlayfs: unescaped trailing colons in lowerdir mount option. [ 202.139062][ T6169] usb 10-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.146193][ T6169] usb 10-1: config 1 interface 0 has no altsetting 0 [ 202.156033][ T6169] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 202.159351][ T6169] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.162207][ T6169] usb 10-1: Product: syz [ 202.165053][ T6169] usb 10-1: Manufacturer: syz [ 202.166802][ T6169] usb 10-1: SerialNumber: syz [ 202.174211][T13667] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 202.176163][T13667] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 202.211612][T13720] FAULT_INJECTION: forcing a failure. [ 202.211612][T13720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.215204][T13720] CPU: 0 UID: 0 PID: 13720 Comm: syz.2.2723 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 202.218381][T13720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 202.222120][T13720] Call Trace: [ 202.223026][T13720] [ 202.223910][T13720] dump_stack_lvl+0x16c/0x1f0 [ 202.224799][ T5992] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 202.225566][T13720] should_fail_ex+0x497/0x5b0 [ 202.228473][ T5992] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 202.229693][T13720] _copy_from_user+0x2e/0xd0 [ 202.229710][T13720] snd_pcm_oss_write2+0x1c6/0x3f0 [ 202.229726][T13720] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 202.234424][ T5992] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 202.235488][T13720] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 202.236938][ T5992] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.240305][T13720] ? snd_pcm_oss_prepare+0x11e/0x220 [ 202.241726][ T5992] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.245069][T13720] snd_pcm_oss_write+0x727/0xa00 [ 202.245090][T13720] ? rw_verify_area+0xd0/0x700 [ 202.245107][T13720] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 202.245120][T13720] vfs_write+0x24c/0x1150 [ 202.246881][ T5992] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.249192][T13720] ? __fget_files+0x1fc/0x3a0 [ 202.251411][ T5992] usb 11-1: config 0 descriptor?? [ 202.251752][T13720] ? __pfx_lock_release+0x10/0x10 [ 202.253897][T13696] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 202.254479][T13720] ? __pfx_vfs_write+0x10/0x10 [ 202.263441][T13720] ? lock_acquire+0x2f/0xb0 [ 202.264646][T13720] ? __fget_files+0x40/0x3a0 [ 202.265897][T13720] ? __fget_files+0x206/0x3a0 [ 202.267147][T13720] ksys_write+0x12b/0x250 [ 202.268290][T13720] ? __pfx_ksys_write+0x10/0x10 [ 202.269581][T13720] do_syscall_64+0xcd/0x250 [ 202.270782][T13720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.272326][T13720] RIP: 0033:0x7f1052980849 [ 202.273516][T13720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.278358][T13720] RSP: 002b:00007f1053704058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 202.280471][T13720] RAX: ffffffffffffffda RBX: 00007f1052b45fa0 RCX: 00007f1052980849 [ 202.282448][T13720] RDX: 000000000000fdbc RSI: 0000000020000500 RDI: 0000000000000003 [ 202.284449][T13720] RBP: 00007f10537040a0 R08: 0000000000000000 R09: 0000000000000000 [ 202.286581][T13720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 202.288629][T13720] R13: 0000000000000000 R14: 00007f1052b45fa0 R15: 00007ffc37256898 [ 202.290698][T13720] [ 202.383552][ T6169] usb 10-1: USB disconnect, device number 4 [ 202.404097][T13729] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2725'. [ 202.616227][T13736] syz.3.2728 (13736): drop_caches: 2 [ 202.665094][T13696] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(13) [ 202.666852][T13696] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 202.669718][T13696] vhci_hcd vhci_hcd.0: Device attached [ 202.672214][T13737] vhci_hcd: cannot find the pending unlink 5 [ 202.673873][T13696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.676996][T13696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.896856][T13737] vhci_hcd: connection closed [ 202.897082][ T8586] vhci_hcd: stop threads [ 202.900785][ T8586] vhci_hcd: release socket [ 202.902362][ T8586] vhci_hcd: disconnect device [ 202.903763][ T30] usb 49-1: new high-speed USB device number 2 using vhci_hcd [ 202.903905][ T5992] usbhid 11-1:0.0: can't add hid device: -71 [ 202.907338][ T5992] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 202.909776][ T30] usb 49-1: enqueue for inactive port 0 [ 202.912159][ T5992] usb 11-1: USB disconnect, device number 5 [ 202.972986][ T30] vhci_hcd: vhci_device speed not set [ 203.522035][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 203.542285][T13784] FAULT_INJECTION: forcing a failure. [ 203.542285][T13784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.547169][T13784] CPU: 0 UID: 0 PID: 13784 Comm: syz.5.2742 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 203.550887][T13784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 203.554720][T13784] Call Trace: [ 203.555911][T13784] [ 203.556985][T13784] dump_stack_lvl+0x16c/0x1f0 [ 203.558677][T13784] should_fail_ex+0x497/0x5b0 [ 203.560370][T13784] _copy_from_user+0x2e/0xd0 [ 203.561982][T13784] snd_pcm_oss_write2+0x1c6/0x3f0 [ 203.563778][T13784] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 203.565723][T13784] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 203.567559][T13784] ? snd_pcm_oss_prepare+0x11e/0x220 [ 203.569339][T13784] snd_pcm_oss_write+0x727/0xa00 [ 203.571170][T13784] ? rw_verify_area+0xd0/0x700 [ 203.572819][T13784] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 203.574781][T13784] vfs_write+0x24c/0x1150 [ 203.576377][T13784] ? __fget_files+0x1fc/0x3a0 [ 203.578096][T13784] ? __pfx_lock_release+0x10/0x10 [ 203.579920][T13784] ? __pfx_vfs_write+0x10/0x10 [ 203.581633][T13784] ? lock_acquire+0x2f/0xb0 [ 203.583260][T13784] ? __fget_files+0x40/0x3a0 [ 203.584887][T13784] ? __fget_files+0x206/0x3a0 [ 203.586548][T13784] ksys_write+0x12b/0x250 [ 203.588080][T13784] ? __pfx_ksys_write+0x10/0x10 [ 203.589775][T13784] do_syscall_64+0xcd/0x250 [ 203.591345][T13784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.593437][T13784] RIP: 0033:0x7faa46b80849 [ 203.595060][T13784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.601878][T13784] RSP: 002b:00007faa479b6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 203.604477][T13784] RAX: ffffffffffffffda RBX: 00007faa46d45fa0 RCX: 00007faa46b80849 [ 203.606528][T13784] RDX: 000000000000fdbc RSI: 0000000020000500 RDI: 0000000000000003 [ 203.608614][T13784] RBP: 00007faa479b60a0 R08: 0000000000000000 R09: 0000000000000000 [ 203.611018][T13784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.613911][T13784] R13: 0000000000000000 R14: 00007faa46d45fa0 R15: 00007ffe32969c68 [ 203.616756][T13784] [ 203.668322][T13790] program syz.5.2745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.713036][ T5936] Bluetooth: hci1: command tx timeout [ 203.781006][T13809] FAULT_INJECTION: forcing a failure. [ 203.781006][T13809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.785620][T13809] CPU: 0 UID: 0 PID: 13809 Comm: syz.6.2752 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 203.788441][T13809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 203.791179][T13809] Call Trace: [ 203.792056][T13809] [ 203.792844][T13809] dump_stack_lvl+0x16c/0x1f0 [ 203.794136][T13809] should_fail_ex+0x497/0x5b0 [ 203.795437][T13809] _copy_from_user+0x2e/0xd0 [ 203.796735][T13809] ioctl_preallocate+0xaf/0x220 [ 203.798344][T13809] ? __pfx_ioctl_preallocate+0x10/0x10 [ 203.800314][T13809] do_vfs_ioctl+0x15cb/0x1990 [ 203.801997][T13809] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 203.803765][T13809] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 203.806207][T13809] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 203.808267][T13809] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 203.810421][T13809] ? __pfx_lock_release+0x10/0x10 [ 203.812254][T13809] ? selinux_file_ioctl+0x180/0x270 [ 203.814146][T13809] ? selinux_file_ioctl+0xb4/0x270 [ 203.815738][T13809] __x64_sys_ioctl+0x11d/0x200 [ 203.817155][T13809] do_syscall_64+0xcd/0x250 [ 203.818333][T13809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.819869][T13809] RIP: 0033:0x7fa049f80849 [ 203.821019][T13809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.826953][T13809] RSP: 002b:00007fa04adfc058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.829942][T13809] RAX: ffffffffffffffda RBX: 00007fa04a145fa0 RCX: 00007fa049f80849 [ 203.832770][T13809] RDX: 0000000020000280 RSI: 0000000040305828 RDI: 0000000000000003 [ 203.835715][T13809] RBP: 00007fa04adfc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 203.838574][T13809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.840993][T13809] R13: 0000000000000000 R14: 00007fa04a145fa0 R15: 00007ffdcac5c278 [ 203.843531][T13809] [ 203.884940][T13811] cgroup: fork rejected by pids controller in /syz5 [ 204.162991][ T63] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 204.302995][ T63] usb 7-1: device descriptor read/64, error -71 [ 204.543050][ T63] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 204.659984][T13861] program syz.3.2761 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.673023][ T63] usb 7-1: device descriptor read/64, error -71 [ 204.706007][T13865] netlink: 'syz.3.2763': attribute type 1 has an invalid length. [ 204.784103][ T63] usb usb7-port1: attempt power cycle [ 204.818125][T13871] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2767'. [ 204.856324][T13873] FAULT_INJECTION: forcing a failure. [ 204.856324][T13873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.859831][T13873] CPU: 0 UID: 0 PID: 13873 Comm: syz.5.2768 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 204.862524][T13873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 204.865580][T13873] Call Trace: [ 204.866609][T13873] [ 204.867356][T13873] dump_stack_lvl+0x16c/0x1f0 [ 204.868535][T13873] should_fail_ex+0x497/0x5b0 [ 204.870063][T13873] _copy_from_user+0x2e/0xd0 [ 204.871629][T13873] snd_pcm_oss_write2+0x1c6/0x3f0 [ 204.873340][T13873] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 204.875190][T13873] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 204.877024][T13873] ? snd_pcm_oss_prepare+0x11e/0x220 [ 204.878809][T13873] snd_pcm_oss_write+0x727/0xa00 [ 204.880490][T13873] ? rw_verify_area+0xd0/0x700 [ 204.882161][T13873] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 204.883987][T13873] vfs_write+0x24c/0x1150 [ 204.885347][T13873] ? __fget_files+0x1fc/0x3a0 [ 204.886539][T13873] ? __pfx_lock_release+0x10/0x10 [ 204.888101][T13873] ? __pfx_vfs_write+0x10/0x10 [ 204.889361][T13873] ? lock_acquire+0x2f/0xb0 [ 204.890545][T13873] ? __fget_files+0x40/0x3a0 [ 204.891783][T13873] ? __fget_files+0x206/0x3a0 [ 204.893034][T13873] ksys_write+0x12b/0x250 [ 204.894174][T13873] ? __pfx_ksys_write+0x10/0x10 [ 204.895477][T13873] do_syscall_64+0xcd/0x250 [ 204.896701][T13873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.898192][T13873] RIP: 0033:0x7faa46b80849 [ 204.899365][T13873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.904301][T13873] RSP: 002b:00007faa479b6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 204.906477][T13873] RAX: ffffffffffffffda RBX: 00007faa46d45fa0 RCX: 00007faa46b80849 [ 204.908531][T13873] RDX: 000000000000fdbc RSI: 0000000020000500 RDI: 0000000000000003 [ 204.910589][T13873] RBP: 00007faa479b60a0 R08: 0000000000000000 R09: 0000000000000000 [ 204.912651][T13873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.915048][T13873] R13: 0000000000000000 R14: 00007faa46d45fa0 R15: 00007ffe32969c68 [ 204.917091][T13873] [ 205.015907][ T84] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.097821][ T84] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.102025][T13881] FAULT_INJECTION: forcing a failure. [ 205.102025][T13881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.106535][T13881] CPU: 1 UID: 0 PID: 13881 Comm: syz.5.2772 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 205.109963][T13881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 205.113693][T13881] Call Trace: [ 205.114889][T13881] [ 205.115956][T13881] dump_stack_lvl+0x16c/0x1f0 [ 205.117597][T13881] should_fail_ex+0x497/0x5b0 [ 205.119259][T13881] _copy_to_user+0x32/0xd0 [ 205.120823][T13881] simple_read_from_buffer+0xd0/0x160 [ 205.122697][T13881] proc_fail_nth_read+0x198/0x270 [ 205.123101][ T63] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 205.124516][T13881] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.128506][T13881] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.130410][T13881] vfs_read+0x1df/0xbe0 [ 205.131865][T13881] ? __fget_files+0x1fc/0x3a0 [ 205.133509][T13881] ? __pfx___mutex_lock+0x10/0x10 [ 205.134987][T13881] ? __pfx_vfs_read+0x10/0x10 [ 205.136220][T13881] ? __fget_files+0x206/0x3a0 [ 205.137459][T13881] ksys_read+0x12b/0x250 [ 205.138764][T13881] ? __pfx_ksys_read+0x10/0x10 [ 205.140520][T13881] do_syscall_64+0xcd/0x250 [ 205.141861][T13881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.143325][T13881] RIP: 0033:0x7faa46b7f25c [ 205.144465][T13881] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 205.149715][T13881] RSP: 002b:00007faa479b6050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 205.151841][T13881] RAX: ffffffffffffffda RBX: 00007faa46d45fa0 RCX: 00007faa46b7f25c [ 205.153888][T13881] RDX: 000000000000000f RSI: 00007faa479b60b0 RDI: 0000000000000007 [ 205.155876][T13881] RBP: 00007faa479b60a0 R08: 0000000000000000 R09: 0000000000000000 [ 205.157828][T13881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 205.160446][T13881] R13: 0000000000000000 R14: 00007faa46d45fa0 R15: 00007ffe32969c68 [ 205.162665][T13881] [ 205.163530][ T63] usb 7-1: device descriptor read/8, error -71 [ 205.211908][ T84] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.224670][ T5932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 205.228311][ T5932] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 205.231569][ T5932] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 205.237127][ T5932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.240054][ T5932] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 205.243080][ T5932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 205.277413][ T84] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.289042][T13888] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 205.292513][ T39] kauditd_printk_skb: 45 callbacks suppressed [ 205.292521][ T39] audit: type=1400 audit(2000000104.839:5919): avc: denied { ioctl } for pid=13887 comm="syz.5.2774" path="socket:[66182]" dev="sockfs" ino=66182 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 205.385802][T13885] chnl_net:caif_netlink_parms(): no params data found [ 205.413006][ T63] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 205.431577][ T84] bridge_slave_1: left allmulticast mode [ 205.433398][ T84] bridge_slave_1: left promiscuous mode [ 205.434956][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.439148][ T84] bridge_slave_0: left allmulticast mode [ 205.440632][ T84] bridge_slave_0: left promiscuous mode [ 205.442176][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.443429][ T63] usb 7-1: device descriptor read/8, error -71 [ 205.553249][ T63] usb usb7-port1: unable to enumerate USB device [ 205.622677][T13902] FAULT_INJECTION: forcing a failure. [ 205.622677][T13902] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 205.626949][T13902] CPU: 1 UID: 0 PID: 13902 Comm: syz.5.2778 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 205.629885][T13902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 205.632541][T13902] Call Trace: [ 205.633478][T13902] [ 205.634472][T13902] dump_stack_lvl+0x16c/0x1f0 [ 205.636092][T13902] should_fail_ex+0x497/0x5b0 [ 205.637425][T13902] ? fs_reclaim_acquire+0xae/0x150 [ 205.638775][T13902] should_fail_alloc_page+0xe7/0x130 [ 205.640278][T13902] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 205.641910][T13902] ? mark_lock+0xb5/0xc60 [ 205.643101][T13902] __alloc_pages_noprof+0x190/0x25b0 [ 205.644517][T13902] ? mark_lock+0xb5/0xc60 [ 205.645676][T13902] ? __pfx_mark_lock+0x10/0x10 [ 205.646933][T13902] ? hlock_class+0x4e/0x130 [ 205.648145][T13902] ? mark_lock+0xb5/0xc60 [ 205.649300][T13902] ? mark_lock+0xb5/0xc60 [ 205.650440][T13902] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 205.651923][T13902] ? hlock_class+0x4e/0x130 [ 205.653129][T13902] ? __lock_acquire+0xcc5/0x3c40 [ 205.654584][T13902] ? hlock_class+0x4e/0x130 [ 205.655807][T13902] ? __lock_acquire+0xcc5/0x3c40 [ 205.657512][T13902] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 205.659519][T13902] ? policy_nodemask+0xea/0x4e0 [ 205.661209][T13902] alloc_pages_mpol_noprof+0x2c9/0x610 [ 205.662784][T13902] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 205.664821][T13902] ? find_held_lock+0x2d/0x110 [ 205.666475][T13902] folio_alloc_mpol_noprof+0x36/0xd0 [ 205.668287][T13902] shmem_alloc_folio+0x135/0x160 [ 205.669959][T13902] shmem_alloc_and_add_folio+0x48b/0xc00 [ 205.671879][T13902] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 205.673768][T13902] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 205.675812][T13902] ? shmem_huge_global_enabled+0x176/0x250 [ 205.677291][T13902] ? shmem_allowable_huge_orders+0xcd/0x3e0 [ 205.679306][T13902] shmem_get_folio_gfp+0x689/0x1530 [ 205.681102][T13902] ? __pfx_lock_release+0x10/0x10 [ 205.682822][T13902] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 205.684734][T13902] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 205.686582][T13902] ? lock_acquire+0x2f/0xb0 [ 205.688132][T13902] ? shmem_fallocate+0x4f9/0xfb0 [ 205.689435][T13902] shmem_fallocate+0x7c0/0xfb0 [ 205.690714][T13902] ? __pfx_shmem_fallocate+0x10/0x10 [ 205.691983][T13902] ? __pfx___lock_acquire+0x10/0x10 [ 205.693317][T13902] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 205.695116][T13902] ? rcu_is_watching+0x12/0xc0 [ 205.696652][T13902] ? trace_lock_acquire+0x14e/0x1f0 [ 205.698443][T13902] ? ioctl_preallocate+0x1a2/0x220 [ 205.700201][T13902] ? __pfx_shmem_fallocate+0x10/0x10 [ 205.702007][T13902] vfs_fallocate+0x459/0xf90 [ 205.703589][T13902] ioctl_preallocate+0x1a2/0x220 [ 205.705280][T13902] ? __pfx_ioctl_preallocate+0x10/0x10 [ 205.707147][T13902] do_vfs_ioctl+0x15cb/0x1990 [ 205.708759][T13902] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 205.710510][T13902] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 205.712759][T13902] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 205.714981][T13902] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 205.717329][T13902] ? __pfx_lock_release+0x10/0x10 [ 205.719055][T13902] ? selinux_file_ioctl+0x180/0x270 [ 205.720832][T13902] ? selinux_file_ioctl+0xb4/0x270 [ 205.722603][T13902] __x64_sys_ioctl+0x11d/0x200 [ 205.724243][T13902] do_syscall_64+0xcd/0x250 [ 205.726043][T13902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.728294][T13902] RIP: 0033:0x7faa46b80849 [ 205.729837][T13902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.735474][T13902] RSP: 002b:00007faa479b6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.737629][T13902] RAX: ffffffffffffffda RBX: 00007faa46d45fa0 RCX: 00007faa46b80849 [ 205.739646][T13902] RDX: 0000000020000280 RSI: 0000000040305828 RDI: 0000000000000003 [ 205.741613][T13902] RBP: 00007faa479b60a0 R08: 0000000000000000 R09: 0000000000000000 [ 205.743643][T13902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.745696][T13902] R13: 0000000000000000 R14: 00007faa46d45fa0 R15: 00007ffe32969c68 [ 205.747778][T13902] [ 205.850983][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.856794][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.861514][ T84] bond0 (unregistering): Released all slaves [ 205.920834][T13885] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.923233][T13885] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.925227][T13885] bridge_slave_0: entered allmulticast mode [ 205.928106][T13885] bridge_slave_0: entered promiscuous mode [ 205.937582][T13885] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.939538][T13885] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.941438][T13885] bridge_slave_1: entered allmulticast mode [ 205.943455][T13885] bridge_slave_1: entered promiscuous mode [ 205.956870][T13909] batadv_slave_1: entered promiscuous mode [ 205.958887][T13909] batadv_slave_1: left promiscuous mode [ 206.005587][T13885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.009184][T13885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.049600][T13885] team0: Port device team_slave_0 added [ 206.055120][T13885] team0: Port device team_slave_1 added [ 206.084284][T13885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.086519][T13885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.096061][T13885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.100838][T13885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.103373][T13885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.110911][T13885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.183352][T13885] hsr_slave_0: entered promiscuous mode [ 206.186579][T13885] hsr_slave_1: entered promiscuous mode [ 206.189652][T13885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.192034][T13885] Cannot create hsr debugfs directory [ 206.248063][ T84] hsr_slave_0: left promiscuous mode [ 206.249915][ T84] hsr_slave_1: left promiscuous mode [ 206.251718][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.253737][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.256789][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.258724][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.290242][ T84] veth1_macvtap: left promiscuous mode [ 206.291765][ T84] veth0_macvtap: left promiscuous mode [ 206.293602][ T84] veth1_vlan: left promiscuous mode [ 206.295003][ T84] veth0_vlan: left promiscuous mode [ 206.482981][ T30] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 206.645152][ T30] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.648096][ T30] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.650744][ T30] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 206.654196][ T30] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 206.656549][ T30] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.660074][ T30] usb 10-1: config 0 descriptor?? [ 207.076345][ T84] team0 (unregistering): Port device team_slave_1 removed [ 207.122700][ T30] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 207.125769][ T30] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 207.127743][ T30] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 207.129678][ T30] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 207.131586][ T30] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 207.144311][ T30] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 207.146526][ T30] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 207.148448][ T30] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 207.150367][ T30] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 207.152253][ T30] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 207.154480][ T30] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 207.156490][ T30] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 207.158390][ T30] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 207.160285][ T30] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 207.162219][ T30] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 207.165117][ T30] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 207.174420][ T30] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 207.200342][ T84] team0 (unregistering): Port device team_slave_0 removed [ 207.323277][ T5936] Bluetooth: hci1: command tx timeout [ 207.386424][ T5973] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 207.553137][ T5973] usb 11-1: Using ep0 maxpacket: 8 [ 207.555858][ T5973] usb 11-1: config 179 has an invalid interface number: 65 but max is 0 [ 207.558396][ T5973] usb 11-1: config 179 has no interface number 0 [ 207.560237][ T5973] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 207.563756][ T5973] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 207.566783][ T5973] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 207.569791][ T5973] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 207.573153][ T5973] usb 11-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 207.576839][ T5973] usb 11-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 207.579649][ T5973] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.584169][T13928] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 207.634218][T13930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2783'. [ 207.850622][ T30] usb 10-1: USB disconnect, device number 5 [ 207.946937][T13936] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 207.991880][ T1326] usb 11-1: USB disconnect, device number 6 [ 207.991919][ C0] xpad 11-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 207.996037][ C0] xpad 11-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 208.000668][ C0] ================================================================== [ 208.002757][ C0] BUG: KASAN: slab-use-after-free in register_lock_class+0xdbf/0x1240 [ 208.004886][ C0] Read of size 8 at addr ffff88804f5c9088 by task swapper/0/0 [ 208.007765][ C0] [ 208.009086][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 208.011674][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 208.014438][ C0] Call Trace: [ 208.015339][ C0] [ 208.016102][ C0] dump_stack_lvl+0x116/0x1f0 [ 208.017375][ C0] print_report+0xc3/0x620 [ 208.018567][ C0] ? __virt_addr_valid+0x5e/0x590 [ 208.019886][ C0] ? __phys_addr+0xc6/0x150 [ 208.021098][ C0] kasan_report+0xd9/0x110 [ 208.022271][ C0] ? register_lock_class+0xdbf/0x1240 [ 208.023670][ C0] ? register_lock_class+0xdbf/0x1240 [ 208.025082][ C0] register_lock_class+0xdbf/0x1240 [ 208.026504][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 208.027830][ C0] ? __pfx_register_lock_class+0x10/0x10 [ 208.029306][ C0] __lock_acquire+0x135/0x3c40 [ 208.030562][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 208.031920][ C0] lock_acquire.part.0+0x11b/0x380 [ 208.033265][ C0] ? __wake_up+0x1c/0x60 [ 208.034378][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 208.035853][ C0] ? rcu_is_watching+0x12/0xc0 [ 208.037114][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 208.038460][ C0] ? __wake_up+0x1c/0x60 [ 208.039570][ C0] ? lock_acquire+0x2f/0xb0 [ 208.040751][ C0] ? __wake_up+0x1c/0x60 [ 208.041869][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 208.043221][ C0] ? __wake_up+0x1c/0x60 [ 208.044331][ C0] __wake_up+0x1c/0x60 [ 208.045413][ C0] usb_anchor_resume_wakeups+0xc2/0xe0 [ 208.046843][ C0] __usb_hcd_giveback_urb+0x3b7/0x6e0 [ 208.048240][ C0] usb_hcd_giveback_urb+0x396/0x450 [ 208.049632][ C0] dummy_timer+0x17f0/0x3930 [ 208.050781][ C0] ? debug_object_deactivate+0x1ef/0x370 [ 208.052199][ C0] ? lock_acquire+0x2f/0xb0 [ 208.053356][ C0] ? find_held_lock+0x2d/0x110 [ 208.054550][ C0] ? __hrtimer_run_queues+0x53d/0xae0 [ 208.055934][ C0] ? __pfx_lock_release+0x10/0x10 [ 208.057246][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 208.058549][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 208.060035][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 208.061319][ C0] __hrtimer_run_queues+0x20a/0xae0 [ 208.062633][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 208.064013][ C0] ? read_tsc+0x9/0x20 [ 208.065070][ C0] hrtimer_run_softirq+0x17d/0x350 [ 208.066389][ C0] handle_softirqs+0x213/0x8f0 [ 208.067685][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 208.069074][ C0] __irq_exit_rcu+0x109/0x170 [ 208.070292][ C0] irq_exit_rcu+0x9/0x30 [ 208.071396][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 208.072845][ C0] [ 208.073627][ C0] [ 208.074400][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 208.075973][ C0] RIP: 0010:default_idle+0xf/0x20 [ 208.077288][ C0] Code: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 c2 3c 00 fb f4 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 208.082261][ C0] RSP: 0018:ffffffff8de07e20 EFLAGS: 00000202 [ 208.083839][ C0] RAX: 000000000023eb97 RBX: 0000000000000000 RCX: ffffffff8b29c819 [ 208.085894][ C0] RDX: 0000000000000000 RSI: ffffffff8b6cd840 RDI: ffffffff8bd1b460 [ 208.087929][ C0] RBP: fffffbfff1bd2ef8 R08: 0000000000000001 R09: ffffed100d4c6fed [ 208.089971][ C0] R10: ffff88806a637f6b R11: 0000000000000000 R12: 0000000000000000 [ 208.092011][ C0] R13: ffffffff8de977c0 R14: ffffffff905f0410 R15: 0000000000000000 [ 208.094064][ C0] ? ct_kernel_exit+0x139/0x190 [ 208.095347][ C0] default_idle_call+0x6d/0xb0 [ 208.096629][ C0] do_idle+0x329/0x3f0 [ 208.097706][ C0] ? __pfx_do_idle+0x10/0x10 [ 208.098916][ C0] cpu_startup_entry+0x4f/0x60 [ 208.100163][ C0] rest_init+0x16b/0x2b0 [ 208.101303][ C0] ? acpi_subsystem_init+0x133/0x180 [ 208.102685][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 208.104126][ C0] start_kernel+0x3e4/0x4d0 [ 208.105338][ C0] x86_64_start_reservations+0x18/0x30 [ 208.106770][ C0] x86_64_start_kernel+0xb2/0xc0 [ 208.108156][ C0] common_startup_64+0x13e/0x148 [ 208.109473][ C0] [ 208.110287][ C0] [ 208.110920][ C0] Allocated by task 5973: [ 208.112052][ C0] kasan_save_stack+0x33/0x60 [ 208.113282][ C0] kasan_save_track+0x14/0x30 [ 208.114519][ C0] __kasan_kmalloc+0xaa/0xb0 [ 208.115754][ C0] xpad_probe+0x27e/0x1f50 [ 208.116930][ C0] usb_probe_interface+0x300/0x9c0 [ 208.118262][ C0] really_probe+0x23e/0xa90 [ 208.119455][ C0] __driver_probe_device+0x1de/0x440 [ 208.120843][ C0] driver_probe_device+0x4c/0x1b0 [ 208.122191][ C0] __device_attach_driver+0x1df/0x310 [ 208.123592][ C0] bus_for_each_drv+0x157/0x1e0 [ 208.124860][ C0] __device_attach+0x1e8/0x4b0 [ 208.126139][ C0] bus_probe_device+0x17f/0x1c0 [ 208.127415][ C0] device_add+0x114b/0x1a70 [ 208.128613][ C0] usb_set_configuration+0x10cb/0x1c50 [ 208.130045][ C0] usb_generic_driver_probe+0xb1/0x110 [ 208.131472][ C0] usb_probe_device+0xec/0x3e0 [ 208.132731][ C0] really_probe+0x23e/0xa90 [ 208.133957][ C0] __driver_probe_device+0x1de/0x440 [ 208.135374][ C0] driver_probe_device+0x4c/0x1b0 [ 208.136711][ C0] __device_attach_driver+0x1df/0x310 [ 208.138115][ C0] bus_for_each_drv+0x157/0x1e0 [ 208.139386][ C0] __device_attach+0x1e8/0x4b0 [ 208.140642][ C0] bus_probe_device+0x17f/0x1c0 [ 208.141928][ C0] device_add+0x114b/0x1a70 [ 208.143126][ C0] usb_new_device+0xd90/0x1a10 [ 208.144382][ C0] hub_event+0x2d9a/0x4e10 [ 208.145573][ C0] process_one_work+0x9c5/0x1ba0 [ 208.146868][ C0] worker_thread+0x6c8/0xf00 [ 208.148083][ C0] kthread+0x2c1/0x3a0 [ 208.149174][ C0] ret_from_fork+0x45/0x80 [ 208.150353][ C0] ret_from_fork_asm+0x1a/0x30 [ 208.151604][ C0] [ 208.152230][ C0] Freed by task 1326: [ 208.153285][ C0] kasan_save_stack+0x33/0x60 [ 208.154517][ C0] kasan_save_track+0x14/0x30 [ 208.155755][ C0] kasan_save_free_info+0x3b/0x60 [ 208.157084][ C0] __kasan_slab_free+0x51/0x70 [ 208.158335][ C0] kfree+0x14f/0x4b0 [ 208.159365][ C0] xpad_disconnect+0x1cf/0x580 [ 208.160619][ C0] usb_unbind_interface+0x1e2/0x960 [ 208.161974][ C0] device_remove+0x122/0x170 [ 208.163184][ C0] device_release_driver_internal+0x44a/0x610 [ 208.164761][ C0] bus_remove_device+0x22f/0x420 [ 208.166062][ C0] device_del+0x396/0x9f0 [ 208.167192][ C0] usb_disable_device+0x36c/0x7f0 [ 208.168503][ C0] usb_disconnect+0x2e1/0x920 [ 208.169731][ C0] hub_event+0x1da5/0x4e10 [ 208.170893][ C0] process_one_work+0x9c5/0x1ba0 [ 208.172177][ C0] worker_thread+0x6c8/0xf00 [ 208.173387][ C0] kthread+0x2c1/0x3a0 [ 208.174459][ C0] ret_from_fork+0x45/0x80 [ 208.175699][ C0] ret_from_fork_asm+0x1a/0x30 [ 208.176951][ C0] [ 208.177581][ C0] The buggy address belongs to the object at ffff88804f5c9000 [ 208.177581][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 208.181144][ C0] The buggy address is located 136 bytes inside of [ 208.181144][ C0] freed 1024-byte region [ffff88804f5c9000, ffff88804f5c9400) [ 208.184650][ C0] [ 208.185282][ C0] The buggy address belongs to the physical page: [ 208.186938][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4f5c8 [ 208.189189][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 208.191357][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 208.193305][ C0] page_type: f5(slab) [ 208.194352][ C0] raw: 00fff00000000040 ffff88801b042dc0 ffffea0000a8fc00 dead000000000002 [ 208.196580][ C0] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 208.198787][ C0] head: 00fff00000000040 ffff88801b042dc0 ffffea0000a8fc00 dead000000000002 [ 208.201018][ C0] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 208.203234][ C0] head: 00fff00000000003 ffffea00013d7201 ffffffffffffffff 0000000000000000 [ 208.205470][ C0] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 208.207680][ C0] page dumped because: kasan: bad access detected [ 208.209323][ C0] page_owner tracks the page as allocated [ 208.210785][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5929, tgid 5929 (syz-executor), ts 46229485357, free_ts 0 [ 208.215919][ C0] post_alloc_hook+0x2d1/0x350 [ 208.217168][ C0] get_page_from_freelist+0xfce/0x2f80 [ 208.218555][ C0] __alloc_pages_noprof+0x223/0x25b0 [ 208.219914][ C0] alloc_pages_mpol_noprof+0x2c9/0x610 [ 208.221354][ C0] new_slab+0x2c9/0x410 [ 208.222433][ C0] ___slab_alloc+0xdac/0x1870 [ 208.223656][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 208.225108][ C0] __kmalloc_node_track_caller_noprof+0x2f1/0x510 [ 208.226768][ C0] kmalloc_reserve+0xef/0x2c0 [ 208.228011][ C0] __alloc_skb+0x164/0x380 [ 208.229181][ C0] inet6_rt_notify+0xc7/0x260 [ 208.230404][ C0] fib6_add+0x251d/0x4b20 [ 208.231530][ C0] ip6_ins_rt+0xb6/0x110 [ 208.232624][ C0] __ipv6_ifa_notify+0xafc/0xe20 [ 208.233919][ C0] add_addr+0x245/0x350 [ 208.235077][ C0] add_v4_addrs+0x69e/0x9f0 [ 208.236293][ C0] page_owner free stack trace missing [ 208.237707][ C0] [ 208.238331][ C0] Memory state around the buggy address: [ 208.239779][ C0] ffff88804f5c8f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 208.241848][ C0] ffff88804f5c9000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.243912][ C0] >ffff88804f5c9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.246047][ C0] ^ [ 208.247165][ C0] ffff88804f5c9100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.249209][ C0] ffff88804f5c9180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.251262][ C0] ================================================================== [ 208.253326][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 208.255175][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 208.257773][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 208.260787][ C0] Call Trace: [ 208.261700][ C0] [ 208.262487][ C0] dump_stack_lvl+0x3d/0x1f0 [ 208.263742][ C0] panic+0x71d/0x800 [ 208.264818][ C0] ? __pfx_panic+0x10/0x10 [ 208.266098][ C0] ? rcu_is_watching+0x12/0xc0 [ 208.267450][ C0] ? __pfx_lock_release+0x10/0x10 [ 208.268772][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 208.270131][ C0] check_panic_on_warn+0xab/0xb0 [ 208.271464][ C0] end_report+0x117/0x180 [ 208.272610][ C0] kasan_report+0xe9/0x110 [ 208.273792][ C0] ? register_lock_class+0xdbf/0x1240 [ 208.275260][ C0] ? register_lock_class+0xdbf/0x1240 [ 208.276687][ C0] register_lock_class+0xdbf/0x1240 [ 208.278080][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 208.279429][ C0] ? __pfx_register_lock_class+0x10/0x10 [ 208.280922][ C0] __lock_acquire+0x135/0x3c40 [ 208.282194][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 208.283567][ C0] lock_acquire.part.0+0x11b/0x380 [ 208.284966][ C0] ? __wake_up+0x1c/0x60 [ 208.286109][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 208.287607][ C0] ? rcu_is_watching+0x12/0xc0 [ 208.288902][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 208.290281][ C0] ? __wake_up+0x1c/0x60 [ 208.291416][ C0] ? lock_acquire+0x2f/0xb0 [ 208.292618][ C0] ? __wake_up+0x1c/0x60 [ 208.293753][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 208.295127][ C0] ? __wake_up+0x1c/0x60 [ 208.296264][ C0] __wake_up+0x1c/0x60 [ 208.297353][ C0] usb_anchor_resume_wakeups+0xc2/0xe0 [ 208.298806][ C0] __usb_hcd_giveback_urb+0x3b7/0x6e0 [ 208.300228][ C0] usb_hcd_giveback_urb+0x396/0x450 [ 208.301612][ C0] dummy_timer+0x17f0/0x3930 [ 208.302855][ C0] ? debug_object_deactivate+0x1ef/0x370 [ 208.304336][ C0] ? lock_acquire+0x2f/0xb0 [ 208.305548][ C0] ? find_held_lock+0x2d/0x110 [ 208.306830][ C0] ? __hrtimer_run_queues+0x53d/0xae0 [ 208.308251][ C0] ? __pfx_lock_release+0x10/0x10 [ 208.309589][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 208.310907][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 208.312443][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 208.313759][ C0] __hrtimer_run_queues+0x20a/0xae0 [ 208.315160][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 208.316679][ C0] ? read_tsc+0x9/0x20 [ 208.317776][ C0] hrtimer_run_softirq+0x17d/0x350 [ 208.319135][ C0] handle_softirqs+0x213/0x8f0 [ 208.320410][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 208.321808][ C0] __irq_exit_rcu+0x109/0x170 [ 208.323069][ C0] irq_exit_rcu+0x9/0x30 [ 208.324197][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 208.325757][ C0] [ 208.326539][ C0] [ 208.327325][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 208.328909][ C0] RIP: 0010:default_idle+0xf/0x20 [ 208.330237][ C0] Code: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 c2 3c 00 fb f4 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 208.335268][ C0] RSP: 0018:ffffffff8de07e20 EFLAGS: 00000202 [ 208.336881][ C0] RAX: 000000000023eb97 RBX: 0000000000000000 RCX: ffffffff8b29c819 [ 208.338963][ C0] RDX: 0000000000000000 RSI: ffffffff8b6cd840 RDI: ffffffff8bd1b460 [ 208.341088][ C0] RBP: fffffbfff1bd2ef8 R08: 0000000000000001 R09: ffffed100d4c6fed [ 208.343173][ C0] R10: ffff88806a637f6b R11: 0000000000000000 R12: 0000000000000000 [ 208.345264][ C0] R13: ffffffff8de977c0 R14: ffffffff905f0410 R15: 0000000000000000 [ 208.347337][ C0] ? ct_kernel_exit+0x139/0x190 [ 208.348656][ C0] default_idle_call+0x6d/0xb0 [ 208.349961][ C0] do_idle+0x329/0x3f0 [ 208.351073][ C0] ? __pfx_do_idle+0x10/0x10 [ 208.352296][ C0] cpu_startup_entry+0x4f/0x60 [ 208.353586][ C0] rest_init+0x16b/0x2b0 [ 208.354719][ C0] ? acpi_subsystem_init+0x133/0x180 [ 208.356121][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 208.357588][ C0] start_kernel+0x3e4/0x4d0 [ 208.358801][ C0] x86_64_start_reservations+0x18/0x30 [ 208.360234][ C0] x86_64_start_kernel+0xb2/0xc0 [ 208.361557][ C0] common_startup_64+0x13e/0x148 [ 208.362873][ C0] [ 209.419185][ C0] Shutting down cpus with NMI [ 209.421046][ C0] Kernel Offset: disabled [ 209.422196][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:54:11 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff851c9950 RDI=ffffffff9ab0fbe0 RBP=ffffffff9ab0fba0 RSP=ffffc900000071c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff3561fce R15=dffffc0000000000 RIP=ffffffff851c9977 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe8df8e8378 CR3=000000002b818000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000000000000 Opmask02=00000000ffbfef77 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe88895260 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 00000000ff000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffff00ff00000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2b2a415943 4e754f4645425d05 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a474f475a054149 454648051a041a4f ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656e696c5f706c63 73002a5d392d305b 79747400786d7470 0079747400646461 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 54003d534b4e494c 564544003d4d4554 535953425553003d 4854415056454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 540018534b4e494c 56454400184d4554 5359534255530018 4854415056454400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000302d7872 2f7365756575712f 356874652f74656e 2f336d6973766564 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f004d93f50 000055f004daa8c0 0000000000000021 000000302e303a31 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c394843492b3533 515f43002a64626e 7c2a6d656d707c2a 6d63737c2a646200 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 264c383a3a264f38 3a3a264e383a3a26 49383a3a2648383a 3a2633383a3a2632 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000703 00002f6d726f314a 00005500312d3031 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00002f6d0c6f314a 0000000000000001 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 1 CPU#1 RAX=0000000000000004 RBX=ffffffff9a80a2e0 RCX=ffffffff8b2c5d24 RDX=fffffbfff350145c RSI=0000000000000004 RDI=ffffffff9a80a2e0 RBP=0000000000000003 RSP=ffffc900006af270 R8 =0000000000000000 R9 =fffffbfff350145c R10=0000000000000003 R11=0000000000000005 R12=fffffbfff350145c R13=0000000000000000 R14=ffff88806a73fb00 R15=0000000000000001 RIP=ffffffff8b2c5d60 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055558ce45808 CR3=0000000047fce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc37256c20 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10529f48bd ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10529f48ca ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10529f48c4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10529f48d8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10529f495e ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10529f4a3c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000098 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000098 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=1ffffffff2dd53be RDX=ffff888034fd8000 RSI=ffffffff81489a34 RDI=ffffffff8bd1b460 RBP=ffff888028859b40 RSP=ffffc90003b27848 R8 =0000000000000001 R9 =fffffbfff2dca3b4 R10=ffffffff96e51da7 R11=0000000000000001 R12=0000000000000003 R13=0000000000000003 R14=ffff88806a83fb00 R15=ffffed100510b368 RIP=ffffffff81489a36 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f3f1ef36d00 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc015380d8 CR3=0000000023306000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=8c1f6de5d1a75a4e 5f2de794fe530008 8c1f6de5d1a75a4e 5f2de794fe530008 8c1f6de5d1a75a4e 5f2de794fe530008 8c1f6de5d1a75a4e 5f2de794fe530008 ZMM18=660a29d66d2ccff8 26f2111041d12ec5 660a29d66d2ccff8 26f2111041d12ec5 660a29d66d2ccff8 26f2111041d12ec5 660a29d66d2ccff8 26f2111041d12ec5 ZMM19=cf0c000000000000 0000000000000004 cf0c000000000000 0000000000000003 cf0c000000000000 0000000000000002 cf0c000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=5f2de7945f2de794 5f2de7945f2de794 5f2de7945f2de794 5f2de7945f2de794 5f2de7945f2de794 5f2de7945f2de794 5f2de7945f2de794 5f2de7945f2de794 ZMM22=d1a75a4ed1a75a4e d1a75a4ed1a75a4e d1a75a4ed1a75a4e d1a75a4ed1a75a4e d1a75a4ed1a75a4e d1a75a4ed1a75a4e d1a75a4ed1a75a4e d1a75a4ed1a75a4e ZMM23=8c1f6de58c1f6de5 8c1f6de58c1f6de5 8c1f6de58c1f6de5 8c1f6de58c1f6de5 8c1f6de58c1f6de5 8c1f6de58c1f6de5 8c1f6de58c1f6de5 8c1f6de58c1f6de5 ZMM24=41d12ec541d12ec5 41d12ec541d12ec5 41d12ec541d12ec5 41d12ec541d12ec5 41d12ec541d12ec5 41d12ec541d12ec5 41d12ec541d12ec5 41d12ec541d12ec5 ZMM25=26f2111026f21110 26f2111026f21110 26f2111026f21110 26f2111026f21110 26f2111026f21110 26f2111026f21110 26f2111026f21110 26f2111026f21110 ZMM26=6d2ccff86d2ccff8 6d2ccff86d2ccff8 6d2ccff86d2ccff8 6d2ccff86d2ccff8 6d2ccff86d2ccff8 6d2ccff86d2ccff8 6d2ccff86d2ccff8 6d2ccff86d2ccff8 ZMM27=660a29d6660a29d6 660a29d6660a29d6 660a29d6660a29d6 660a29d6660a29d6 660a29d6660a29d6 660a29d6660a29d6 660a29d6660a29d6 660a29d6660a29d6 ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=ce0c0000ce0c0000 ce0c0000ce0c0000 ce0c0000ce0c0000 ce0c0000ce0c0000 ce0c0000ce0c0000 ce0c0000ce0c0000 ce0c0000ce0c0000 ce0c0000ce0c0000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff814899ee RDX=ffff8880356c8000 RSI=ffffffff81489a0b RDI=0000000000000000 RBP=ffffffff9a80a2e0 RSP=ffffc900034e71c8 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000008 R12=0000000000000003 R13=0000000000000003 R14=ffff88806a93fb00 R15=fffffbfff350145c RIP=ffffffff81489a0c RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555582b8c500 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fdecc51c870 CR3=0000000044496000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ff860600 Opmask01=0000000000000fff Opmask02=000000003f3fefff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 69253a6925632500 3d45444f4d564544 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe88898e40 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 00000000ff000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffff00ff00000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2b2a415943 4e754f4645425d05 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a474f475a054149 454648051a041a4f ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe88891258 00006364755f796d 6d756400454d414e 5f4344555f425355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe88891258 00006364755f796d 6d75643d454d414e 5f4344555f425355 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000042c388891258 00005e59485f4450 50485900454d414e 5f4344555f425355 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000d1 0000000000000036 2e6364755f796d6d 75642f6364752f36 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c0efdecfcd26b7b6 000055f55bdbd3f1 00000000000000e1 0000000000000036 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c394843492b3533 515f43002a64626e 7c2a6d656d707c2a 6d63737c2a646200 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 264c383a3a264f38 3a3a264e383a3a26 49383a3a2648383a 3a2633383a3a2632 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000703 00002f6d726f314a 00005500312d3031 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00002f6d0c6f314a 0000000000000001 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020