last executing test programs: 1m52.385103487s ago: executing program 2 (id=52): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff8, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000140)={0x19}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d000000000000ecffffff000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000c20000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0xffbffffc, &(0x7f00000007c0)) mmap(&(0x7f0000052000/0x1000)=nil, 0x1000, 0x2, 0x100010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_settime(0x0, 0x600, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="0000000000ea4d0c0000000c000000020000000000000000000004000000000008adce2f5e6b9c6c9f4ae345d445c4aaaadc903fd7cce331f01fa653c4ab14d504632a14365fb73ec7913a844f6babda0c07a8f76589b04b5d9b4a0000000000"], 0x0, 0x26, 0x0, 0x0, 0xffffffff, 0x0, @void, @value}, 0x28) r2 = openat$fuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000005c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x72a2, 0x1f00}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x0) r4 = dup(r3) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r5, 0x2, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x0, r3, 0x0}]) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000000240)={0x0, 0xffffffffffffff3d, &(0x7f00000006c0)=[{&(0x7f0000000380)="f4a8800482c3443d3b58723e281f5e6527224fdd42d1b9d2ab3b989e81fd0e073b4d1b41067f91418bbd1b72a6fd6b3ea84071d7a4d9513633f46eb5e27055479751038dde7424a0f25cb94371af0fe901d2393719107ced72ffca5dab71025750f9586e99bf1d90b5cbcdb5a51c093884102b4fa8bd1976100fbed7d31c3c06b13efaad61cdbdf88027c2ad483b4bb4485efbbde806a07d2b7ee61e"}], 0x2}, 0x55) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000200)="55c12e33e4f1418caa1662cd63327882209fc853322efc90d428081e1f6bc51420da42531f01b5a1160175c1de8e5f053a480609506202f1f60bfc9b7215cadb3dcc1b4d201270f80508747d0eaae671fc1439c9e27d236c8986ccd85cf41e750c177321f876", 0x66) fcntl$getownex(r2, 0x10, &(0x7f0000000700)) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) write$rfkill(r6, &(0x7f0000000100)={0x21, 0x1, 0x0, 0x0, 0x1}, 0x8) write$rfkill(r6, 0x0, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r9, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x3ff8) setsockopt$inet_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, "95fc7bfdf792a2a5", "1607a6d561d908f78f9f9e8a9200115dd5c0f5196a1d80a9135b4f7169b7ed79", "5555a80a", "88fc65db8a9727b0"}, 0x38) 1m52.124948376s ago: executing program 0 (id=53): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000440)='contention_end\x00', r0}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r2, 0x1}}, 0x18) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f4070009040081000000002c00000000000008000f0001000000", 0x24) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0xfc, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xbb, 0xa8, @random="87041d083abc20d78fa28beb6d2d970b97977a0829041023222f075c09de83d77398ffebc620bdc5996d4cbeb3034e7d4ee88006305ec3948b7ee4853de629ed20f399663b12490d75376dd50e95830ec603e684c3f271d84ec5756263ec0275f5ed4de100c973481b9ef9263f7afab974be9e348c9ffec1003a859f097d3be1f25cdf544dea98e73bb69dfc56a571b4b566af8f85585d0823febce0e7f385bbe161fd0e20040b54d9d605b7ff0e19c756dbe5c19fc638"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x4008004) 1m52.108965364s ago: executing program 2 (id=54): mount$afs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000080)={[{@dyn}, {@dyn}, {}, {@flock_local}, {@flock_strict}, {@dyn}]}) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x8) sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x0, 0x40, 0x7, 0x81, 0x200, 0x8000000000000000, 0x7291, 0x9, 0xffffff00}, 0x0) socket$kcm(0x2, 0x1, 0x84) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) pipe(0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xa4, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4fb}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800c011}, 0xc811) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) 1m52.051300001s ago: executing program 0 (id=55): socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x14, 0x8, &(0x7f0000000180)=ANY=[@ANYRESDEC], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x1000000, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x2, 0x20000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) write$bt_hci(r5, &(0x7f0000000140)=ANY=[@ANYRESOCT=r2, @ANYRES8=r4], 0xa) r6 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010100}}, 0x24) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "45542f745866c700", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "faffffffffffffff"}, 0x28) sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 1m51.139781271s ago: executing program 0 (id=57): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0xfffffffffffffead, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x3}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x10001, 0xf84, 0x3}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000003d0007010000000000000000047c0000040008800c00018006000600800a0000280002802400140042a7ed1a0634218928630c8df6fd03d1d4bbb71fd650f60b7b83ea0ad0115f36da1232bc77af64f8e930caa7e612a7714587846874a2c328f3a30eafaae890382f0ae99a2d71f8bc20acf62cf6e83ddd4e84e6"], 0x4c}}, 0xc000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001800), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000100)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0xa, 0x0, 0x51}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000019c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000fedbdf250f000000040006800c0007800800010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x85}, 0x0) fcntl$addseals(r7, 0x409, 0x8) 1m51.074769309s ago: executing program 2 (id=58): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000001840)={0x1, 0x0, @pic={0x0, 0x3, 0xfd, 0xb4, 0x0, 0x7f, 0x0, 0x8, 0x8, 0x1d, 0x29, 0x5, 0x1, 0x8, 0x2, 0x3}}) 1m50.839357766s ago: executing program 2 (id=59): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f00000000c0)={@hyper, 0x6}) 1m50.612842551s ago: executing program 2 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x4, 0x4) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x4b, &(0x7f00000000c0)='./file0\x00', 0x0, 0x21, &(0x7f0000000000)={[{@nr_blocks={'nr_blocks', 0x3d, [0x36]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x38]}}]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, &(0x7f00000004c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000500)=[@dead_binder_done], 0x0, 0x0, 0x0}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) 1m50.440808708s ago: executing program 2 (id=63): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f4070009040081000000002c00000000000008000f0001000000", 0x24) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0xfc, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xbb, 0xa8, @random="87041d083abc20d78fa28beb6d2d970b97977a0829041023222f075c09de83d77398ffebc620bdc5996d4cbeb3034e7d4ee88006305ec3948b7ee4853de629ed20f399663b12490d75376dd50e95830ec603e684c3f271d84ec5756263ec0275f5ed4de100c973481b9ef9263f7afab974be9e348c9ffec1003a859f097d3be1f25cdf544dea98e73bb69dfc56a571b4b566af8f85585d0823febce0e7f385bbe161fd0e20040b54d9d605b7ff0e19c756dbe5c19fc638"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x4008004) 1m49.732310505s ago: executing program 0 (id=67): socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x14, 0x8, &(0x7f0000000180)=ANY=[@ANYRESDEC], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x1000000, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x2, 0x20000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6002080a00080000fe880000000000000000d11f1b3c6081ae10d6fa9623463217000000000001fe8000000000000000"], 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, 0x0, 0x0) write$bt_hci(r5, &(0x7f0000000140)=ANY=[@ANYRESOCT=r2, @ANYRES8=r4], 0xa) r6 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010100}}, 0x24) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "45542f745866c700", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "faffffffffffffff"}, 0x28) sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 1m49.581396788s ago: executing program 0 (id=69): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x4, 0x4) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x21, &(0x7f0000000000)={[{@nr_blocks={'nr_blocks', 0x3d, [0x36]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x38]}}]}) (fail_nth: 6) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, &(0x7f00000004c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000500)=[@dead_binder_done], 0x0, 0x0, 0x0}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) 1m49.341200495s ago: executing program 0 (id=72): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0xc0) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48094) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_clone(0x7b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x1) sched_setaffinity(r2, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x1ff, 0x402) munlockall() r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x1}, 0x1c) r5 = openat$cuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r5, &(0x7f0000001100)={0x2020}, 0x2020) 1m35.014707289s ago: executing program 32 (id=63): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f4070009040081000000002c00000000000008000f0001000000", 0x24) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0xfc, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xbb, 0xa8, @random="87041d083abc20d78fa28beb6d2d970b97977a0829041023222f075c09de83d77398ffebc620bdc5996d4cbeb3034e7d4ee88006305ec3948b7ee4853de629ed20f399663b12490d75376dd50e95830ec603e684c3f271d84ec5756263ec0275f5ed4de100c973481b9ef9263f7afab974be9e348c9ffec1003a859f097d3be1f25cdf544dea98e73bb69dfc56a571b4b566af8f85585d0823febce0e7f385bbe161fd0e20040b54d9d605b7ff0e19c756dbe5c19fc638"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x4008004) 1m34.36901537s ago: executing program 33 (id=72): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0xc0) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48094) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_clone(0x7b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x1) sched_setaffinity(r2, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x1ff, 0x402) munlockall() r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x1}, 0x1c) r5 = openat$cuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r5, &(0x7f0000001100)={0x2020}, 0x2020) 6.888580488s ago: executing program 4 (id=902): syz_open_dev$video4linux(&(0x7f0000000240), 0x6000000, 0x10401) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x0, 0x0, 0x9, &(0x7f0000000140)={0x3, "96e67ad2d329458afe83c910c40800000000000000000000000000f000"}}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x1}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r0, r2, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000006c0)={0x2020}, 0x2020) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x541182) writev(r5, &(0x7f0000000040)=[{&(0x7f00000002c0)="94", 0xfffffffffffffd78}, {0x0, 0x55}], 0x2) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r6, 0x7fff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r7) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) syz_open_procfs(0x0, 0x0) 6.810476433s ago: executing program 4 (id=904): syz_open_dev$radio(0x0, 0x1, 0x2) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x917, &(0x7f0000000300)={0x0, 0x400, 0x1, 0x1000001, 0xf7fffffc}, &(0x7f0000000180)=0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="c50a0000000000006113b8000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r4 = socket$inet(0x2, 0xa, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x40, r6, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "799fc1f85348f37146fd79a796"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000880}, 0x8090) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f0000000a80)={&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=""/16, 0x10}, 0x0, 0x140, 0x0, {0x1, r8}}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000080)=[0x5, 0xa22], 0x2) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000140)=r1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) 5.735786942s ago: executing program 4 (id=907): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000001600)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) lseek(r2, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0x3, 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x260601, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x200000d0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x559d40, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0) connect$rose(r8, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x10}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 4.491148658s ago: executing program 5 (id=917): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x24}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0xc050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r3], 0x1000f) 4.479981646s ago: executing program 4 (id=918): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB="000000000000000408000a00", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r7, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x0, 0x20000000) 4.290147693s ago: executing program 5 (id=919): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB="000000000000000408000a00", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r7, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.681496063s ago: executing program 5 (id=921): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB="000000000000000408000a00", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(r7, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 2.510638135s ago: executing program 4 (id=922): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x20008, 0x200085}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) tkill(0x0, 0x7) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000021c0)=0x5) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) socket$inet(0x2, 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x8, 0x61, 0x8, 0x8, &(0x7f00000005c0)}}, 0xfffffffffffffe88) syz_emit_ethernet(0x36, &(0x7f0000002080)=ANY=[@ANYBLOB="0180c2000000aaaaaafdaaaaaa080045000028006400000402b07800000000e000000211009078e0000002000100010000000000000000"], 0x0) fanotify_init(0x8, 0x2) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r4, 0x3ba0, &(0x7f00000002c0)={0x36, 0x9, 0x0, 0x0, 0x800000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket(0x40000000015, 0x5, 0x0) 2.080583182s ago: executing program 1 (id=924): syz_open_procfs(0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001480), 0x1, 0x0) lseek(r0, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x4089, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="71756f74612c75737271c7a9b2ae39756f74615f626c6f636b5f686172646c696d69"]) ustat(0x6, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x1, 0x84) 1.810197798s ago: executing program 4 (id=925): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed0102030109022200010000"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x7401) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x408600, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000002640)={{0x2, 0x4e21, @empty}, {0x306}, 0x68, {0x2, 0x4e23, @loopback}, 'ip6gre0\x00'}) r5 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000005c0)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r5, 0xc01064ac, &(0x7f0000000040)={r6, 0x1000, &(0x7f00000015c0)=""/4096}) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') ioctl$TCSETAF(r3, 0x5408, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000180)='wg1\x00', 0x4) sendto$inet(r7, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mount$9p_fd(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000100), 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r9, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000e96000/0x1000)=nil}) 1.525187399s ago: executing program 5 (id=926): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x2) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f00000000c0)={@hyper, 0x6}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESOCT=r1, @ANYBLOB=',group_id=', @ANYBLOB]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1.240128514s ago: executing program 5 (id=927): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value}, 0x20) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0x0, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x10000000}, &(0x7f0000000340)=0x0, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000b00)=0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r5, 0xc0044dff, &(0x7f0000000080)=0x3ff) ioctl$SOUND_MIXER_WRITE_RECSRC(r5, 0xc0044dff, &(0x7f0000000180)=0xef) ioctl$PPPIOCSACTIVE(r2, 0x40087446, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x6, 0x5, 0xf4, 0x5}, {0x0, 0x0, 0xa8}, {0x0, 0xa, 0x75, 0x3}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) prlimit64(r7, 0x0, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000200)) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.127996523s ago: executing program 1 (id=929): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value}, 0x20) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0x0, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x10000000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r6, 0xc0044dff, &(0x7f0000000080)=0x3ff) ioctl$PPPIOCSACTIVE(r2, 0x40087446, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x6, 0x5, 0xf4, 0x5}, {0x80, 0x2, 0xa8, 0x6e5}, {0x0, 0x0, 0xa8}, {0x0, 0xa, 0x75, 0x3}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) prlimit64(r7, 0x0, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000200)) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 385.946427ms ago: executing program 1 (id=932): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x50, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x4}]}, 0x50}}, 0x0) 385.481569ms ago: executing program 5 (id=933): r0 = semget$private(0x0, 0x1, 0x210) semctl$GETALL(r0, 0x0, 0xd, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/73) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0xa, @rand_addr=0x64010100}}, 0x1e) close(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) syz_usbip_server_init(0x3) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) 360.743415ms ago: executing program 3 (id=934): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x10}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000001080)=[{&(0x7f0000000e80)=""/156, 0x9c}], 0x1, 0x2, 0x6) 349.398643ms ago: executing program 1 (id=935): r0 = syz_open_dev$evdev(&(0x7f0000000d80), 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x0, 0x100, 0x12345}) syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r4 = openat$mixer(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r4, 0x80044df9, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1fffffffffffffaa, &(0x7f0000000200)=[{0x30, 0x9, 0x0, 0x6}]}, 0xfffffffffffffdf1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66}, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x2, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xe7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)) r9 = memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x4) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r9, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r10, &(0x7f0000004180)={0x2020}, 0x2020) getpeername$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) flock(r0, 0xa) socket$nl_generic(0x10, 0x3, 0x10) 290.550097ms ago: executing program 3 (id=936): sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) (fail_nth: 3) 230.365884ms ago: executing program 1 (id=937): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x20000000, 0xffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x0, 0x0, 0x40000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rmdir(&(0x7f0000000200)='./file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000001880)={&(0x7f0000000180)={0x50, 0xfffffffffffffff5, 0x1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x10, 0x80000003}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 170.633509ms ago: executing program 3 (id=938): sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) 170.271589ms ago: executing program 3 (id=939): syz_emit_ethernet(0x46, &(0x7f0000000b00)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x2, 0x7, 0x0, 0x20000, 0x1004000}}}}}}, 0x0) 86.844515ms ago: executing program 3 (id=940): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="8a00000000000000", 0x8) modify_ldt$read(0x0, &(0x7f0000000040)=""/137, 0x89) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100000000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523a58", 0x78, 0x24040800, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x1, 0x8, 0x0, 0x1ff, {{0x5, 0x4, 0x2, 0x2b, 0x14, 0x65, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}}}}) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)=0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) 86.632353ms ago: executing program 1 (id=941): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value}, 0x20) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0x0, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x10000000}, &(0x7f0000000340)=0x0, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000b00)=0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r5, 0xc0044dff, &(0x7f0000000080)=0x3ff) ioctl$SOUND_MIXER_WRITE_RECSRC(r5, 0xc0044dff, &(0x7f0000000180)=0xef) ioctl$PPPIOCSACTIVE(r2, 0x40087446, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x6, 0x5, 0xf4, 0x5}, {0x0, 0x0, 0xa8}, {0x0, 0xa, 0x75, 0x3}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) prlimit64(r7, 0x0, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000200)) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=942): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value}, 0x20) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0x0, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x10000000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r6, 0xc0044dff, &(0x7f0000000080)=0x3ff) ioctl$PPPIOCSACTIVE(r2, 0x40087446, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x6, 0x5, 0xf4, 0x5}, {0x80, 0x2, 0xa8, 0x6e5}, {0x0, 0x0, 0xa8}, {0x0, 0xa, 0x75, 0x3}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) prlimit64(r7, 0x0, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000200)) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=943): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0xfe8e, 0x12) (fail_nth: 11) kernel console output (not intermixed with test programs): 0003 syscall=240 compat=1 ip=0xf70ee579 code=0x0 [ 96.331874][ T40] audit: type=1326 audit(1747256178.914:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.3.241" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x0 [ 96.537628][ T40] audit: type=1326 audit(1747256179.124:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.5.243" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 96.640084][ T7067] overlayfs: overlapping lowerdir path [ 97.948258][ T40] audit: type=1326 audit(1747256180.534:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7082 comm="syz.3.249" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x0 [ 97.969178][ T40] audit: type=1326 audit(1747256180.554:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.1.250" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 98.317729][ T40] audit: type=1326 audit(1747256180.904:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7098 comm="syz.4.252" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 98.461173][ T40] audit: type=1326 audit(1747256181.044:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7102 comm="syz.5.253" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 98.562723][ T7106] overlayfs: overlapping lowerdir path [ 99.520592][ T7147] fuse: Bad value for 'fd' [ 100.168938][ T40] audit: type=1326 audit(1747256182.754:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7179 comm="syz.4.263" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 100.319603][ T40] audit: type=1326 audit(1747256182.904:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.5.265" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 101.059223][ T40] audit: type=1326 audit(1747256183.644:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7226 comm="syz.3.270" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x0 [ 101.160538][ T7239] overlayfs: overlapping lowerdir path [ 101.444389][ T7249] fuse: Bad value for 'fd' [ 101.926949][ T40] audit: type=1326 audit(1747256184.514:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.3.280" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x0 [ 102.377782][ T40] audit: type=1326 audit(1747256184.964:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.4.282" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 102.727981][ T7287] fuse: Bad value for 'fd' [ 102.804138][ T40] audit: type=1326 audit(1747256185.384:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7292 comm="syz.3.287" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x0 [ 102.857341][ T7296] overlayfs: overlapping lowerdir path [ 103.545408][ T40] audit: type=1326 audit(1747256186.134:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.4.295" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 103.636675][ T40] audit: type=1326 audit(1747256186.214:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.5.297" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 103.650687][ T40] audit: type=1326 audit(1747256186.234:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.3.298" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x0 [ 104.428794][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'. [ 104.431941][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'. [ 104.434720][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'. [ 104.441738][ T7340] netlink: 'syz.1.301': attribute type 1 has an invalid length. [ 104.444189][ T7340] netlink: 15 bytes leftover after parsing attributes in process `syz.1.301'. [ 104.595673][ T7349] capability: warning: `syz.4.305' uses deprecated v2 capabilities in a way that may be insecure [ 104.661551][ T40] audit: type=1326 audit(1747256187.244:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7354 comm="syz.3.308" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x0 [ 104.673661][ T40] audit: type=1326 audit(1747256187.254:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.4.307" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 104.725764][ T7360] overlayfs: overlapping lowerdir path [ 105.011797][ T7369] netlink: 40 bytes leftover after parsing attributes in process `syz.5.311'. [ 105.014680][ T7369] Zero length message leads to an empty skb [ 105.020614][ T7369] input: syz1 as /devices/virtual/input/input6 [ 105.028637][ T7369] binder: Bad value for 'stats' [ 105.032986][ T7369] netlink: 72 bytes leftover after parsing attributes in process `syz.5.311'. [ 105.276358][ T6341] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 105.427313][ T6341] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.430542][ T6341] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 105.434207][ T6341] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 105.437144][ T6341] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 105.439636][ T6341] usb 10-1: SerialNumber: syz [ 105.504944][ T40] audit: type=1326 audit(1747256188.084:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7370 comm="syz.3.313" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x0 [ 105.513457][ T40] audit: type=1326 audit(1747256188.094:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.4.312" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 105.649360][ T6004] usb 10-1: USB disconnect, device number 2 [ 106.196441][ T40] audit: type=1326 audit(1747256188.784:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.5.320" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 106.297759][ T7399] overlayfs: overlapping lowerdir path [ 106.674058][ T40] audit: type=1326 audit(1747256189.254:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.3.331" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x0 [ 106.808018][ T40] audit: type=1326 audit(1747256189.394:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7435 comm="syz.1.334" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 107.676071][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.344'. [ 107.713440][ T7467] overlayfs: overlapping lowerdir path [ 108.055176][ T6341] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 108.215154][ T6341] usb 10-1: Using ep0 maxpacket: 8 [ 108.218660][ T6341] usb 10-1: unable to get BOS descriptor or descriptor too short [ 108.222757][ T6341] usb 10-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 32 [ 108.226114][ T6341] usb 10-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 1023 [ 108.229290][ T6341] usb 10-1: config 1 interface 0 has no altsetting 0 [ 108.233137][ T6341] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 108.236151][ T6341] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.238663][ T6341] usb 10-1: Product: ц [ 108.240008][ T6341] usb 10-1: Manufacturer: Щ [ 108.241570][ T6341] usb 10-1: SerialNumber: 豀픗鲠ĵ牠隊ᢻ楃罸ꋩ [ 108.246959][ T7476] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 108.249424][ T7476] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 108.585856][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 108.585876][ T40] audit: type=1326 audit(1747256191.174:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.1.352" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 108.633400][ T7488] netlink: 12 bytes leftover after parsing attributes in process `syz.5.348'. [ 108.647700][ T6341] usblp 10-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 8 proto 2 vid 0x0525 pid 0xA4A8 [ 108.654243][ T6341] usb 10-1: USB disconnect, device number 3 [ 108.659814][ T6341] usblp0: removed [ 108.773644][ T7497] evm: overlay not supported [ 109.502334][ T7521] Bluetooth: MGMT ver 1.23 [ 109.670691][ T7523] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 109.700842][ T7523] netlink: 40 bytes leftover after parsing attributes in process `syz.1.364'. [ 109.786836][ T40] audit: type=1326 audit(1747256192.374:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.5.372" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 110.536070][ T57] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 110.695513][ T57] usb 9-1: Using ep0 maxpacket: 32 [ 110.703446][ T57] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 110.708244][ T57] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 110.712315][ T57] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.720057][ T57] usb 9-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 110.723205][ T57] usb 9-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 110.726020][ T57] usb 9-1: Product: syz [ 110.727429][ T57] usb 9-1: Manufacturer: syz [ 110.728927][ T57] usb 9-1: SerialNumber: syz [ 110.753567][ T57] input: appletouch as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/input/input7 [ 110.861117][ T40] audit: type=1326 audit(1747256193.444:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7579 comm="syz.5.383" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 110.884590][ T7582] netlink: 'syz.3.382': attribute type 39 has an invalid length. [ 110.981114][ T5984] usb 9-1: USB disconnect, device number 2 [ 111.025611][ T5984] appletouch 9-1:1.0: input: appletouch disconnected [ 111.325369][ T7563] Set syz1 is full, maxelem 65536 reached [ 112.008291][ T7606] netlink: 'syz.5.389': attribute type 10 has an invalid length. [ 112.016961][ T7606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.021652][ T7606] team0: Port device bond0 added [ 112.026670][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.389'. [ 112.141173][ T7606] team0 (unregistering): Port device team_slave_0 removed [ 112.150636][ T7606] team0 (unregistering): Port device team_slave_1 removed [ 112.158115][ T7606] team0 (unregistering): Port device bond0 removed [ 112.378743][ T40] audit: type=1326 audit(1747256194.964:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.4.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 112.387612][ T40] audit: type=1326 audit(1747256194.964:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.4.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 112.396216][ T40] audit: type=1326 audit(1747256194.964:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.4.395" exe="/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 112.404847][ T40] audit: type=1326 audit(1747256194.964:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.4.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 112.414137][ T40] audit: type=1326 audit(1747256194.964:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.4.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 112.423723][ T40] audit: type=1326 audit(1747256194.964:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.4.395" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 112.432685][ T40] audit: type=1326 audit(1747256194.964:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.4.395" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 113.249989][ T7653] syz.5.400 uses obsolete (PF_INET,SOCK_PACKET) [ 113.339325][ T7647] overlayfs: failed to resolve './file0': -2 [ 113.607186][ T7664] FAULT_INJECTION: forcing a failure. [ 113.607186][ T7664] name failslab, interval 1, probability 0, space 0, times 0 [ 113.611241][ T7664] CPU: 2 UID: 0 PID: 7664 Comm: syz.1.406 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 113.611255][ T7664] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 113.611262][ T7664] Call Trace: [ 113.611266][ T7664] [ 113.611270][ T7664] dump_stack_lvl+0x16c/0x1f0 [ 113.611291][ T7664] should_fail_ex+0x512/0x640 [ 113.611307][ T7664] ? __kmalloc_noprof+0xbf/0x510 [ 113.611320][ T7664] ? constrain_params_by_rules+0x175/0xca0 [ 113.611336][ T7664] should_failslab+0xc2/0x120 [ 113.611352][ T7664] __kmalloc_noprof+0xd2/0x510 [ 113.611363][ T7664] ? update_load_avg+0x23f/0x1fc0 [ 113.611376][ T7664] ? update_curr+0x74/0x800 [ 113.611394][ T7664] constrain_params_by_rules+0x175/0xca0 [ 113.611415][ T7664] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 113.611434][ T7664] ? __mutex_trylock_common+0xe9/0x250 [ 113.611453][ T7664] ? rcu_is_watching+0x12/0xc0 [ 113.611463][ T7664] ? trace_contention_end+0xdd/0x130 [ 113.611476][ T7664] ? snd_interval_refine+0x2fa/0x580 [ 113.611490][ T7664] snd_pcm_hw_refine+0x7de/0xad0 [ 113.611508][ T7664] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 113.611526][ T7664] ? do_raw_spin_lock+0x12c/0x2b0 [ 113.611544][ T7664] ? mark_held_locks+0x49/0x80 [ 113.611559][ T7664] snd_pcm_hw_params+0x3e4/0x1b40 [ 113.611571][ T7664] ? preempt_schedule_thunk+0x16/0x30 [ 113.611588][ T7664] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 113.611598][ T7664] ? preempt_schedule_common+0x44/0xc0 [ 113.611613][ T7664] ? preempt_schedule_thunk+0x16/0x30 [ 113.611633][ T7664] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 113.611644][ T7664] snd_pcm_oss_change_params_locked+0x1432/0x3b40 [ 113.611668][ T7664] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 113.611685][ T7664] ? __pfx___mutex_lock+0x10/0x10 [ 113.611709][ T7664] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 113.611728][ T7664] snd_pcm_oss_ioctl+0x31aa/0x37a0 [ 113.611744][ T7664] ? hook_file_ioctl_common+0x145/0x410 [ 113.611758][ T7664] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 113.611775][ T7664] ? __fget_files+0x20e/0x3c0 [ 113.611784][ T7664] ? fput+0x10/0xf0 [ 113.611798][ T7664] ? __pfx_snd_pcm_oss_ioctl_compat+0x10/0x10 [ 113.611839][ T7664] __ia32_compat_sys_ioctl+0x24c/0x360 [ 113.611857][ T7664] __do_fast_syscall_32+0x73/0x120 [ 113.611874][ T7664] do_fast_syscall_32+0x32/0x80 [ 113.611890][ T7664] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.611903][ T7664] RIP: 0023:0xf708e579 [ 113.611911][ T7664] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 113.611920][ T7664] RSP: 002b:00000000f505d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 113.611930][ T7664] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0045005 [ 113.611936][ T7664] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.611942][ T7664] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.611948][ T7664] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 113.611953][ T7664] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.611966][ T7664] [ 113.635137][ T58] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 113.921919][ T40] kauditd_printk_skb: 42 callbacks suppressed [ 113.921932][ T40] audit: type=1326 audit(1747256196.504:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.5.407" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 114.001184][ T40] audit: type=1326 audit(1747256196.584:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7646 comm="syz.4.403" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 114.014754][ T40] audit: type=1326 audit(1747256196.584:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7646 comm="syz.4.403" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 114.023180][ T7668] overlayfs: overlapping lowerdir path [ 114.598529][ T40] audit: type=1326 audit(1747256197.184:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.1.418" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 114.890670][ T7703] batadv_slave_1: entered promiscuous mode [ 114.929078][ T7705] dlm: plock device version mismatch: kernel (1.2.0), user (1803188481.1701604449.114) [ 115.291352][ T7719] mmap: syz.3.426 (7719) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 115.668038][ T7729] tipc: Enabling of bearer rejected, failed to enable media [ 115.673963][ T7736] netlink: 763 bytes leftover after parsing attributes in process `syz.1.431'. [ 115.870677][ T40] audit: type=1326 audit(1747256198.454:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.1.436" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 116.095441][ T34] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 116.267841][ T34] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 116.270708][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.273428][ T34] usb 10-1: Product: syz [ 116.274886][ T34] usb 10-1: Manufacturer: syz [ 116.282953][ T34] usb 10-1: SerialNumber: syz [ 116.294425][ T34] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 116.325802][ T834] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 116.533282][ T6005] usb 10-1: USB disconnect, device number 4 [ 117.418549][ T834] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 117.421654][ T834] ath9k_htc: Failed to initialize the device [ 117.425814][ T6005] usb 10-1: ath9k_htc: USB layer deinitialized [ 117.637989][ T7799] syzkaller1: entered promiscuous mode [ 117.639950][ T7799] syzkaller1: entered allmulticast mode [ 118.716960][ T7808] overlayfs: failed to resolve './file0': -2 [ 118.796984][ T7810] overlayfs: failed to resolve './file0': -2 [ 119.060295][ T7829] /dev/nullb0: Can't open blockdev [ 119.339584][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 119.342455][ T7832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.456'. [ 119.413411][ T40] audit: type=1326 audit(1747256201.994:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7833 comm="syz.3.457" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x0 [ 120.377299][ T7849] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 120.428101][ T40] audit: type=1326 audit(1747256203.014:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7850 comm="syz.3.463" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x0 [ 120.431120][ T7848] overlayfs: failed to resolve './file0': -2 [ 120.531964][ T7861] overlayfs: overlapping lowerdir path [ 121.492116][ T40] audit: type=1326 audit(1747256204.074:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7883 comm="syz.5.471" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 121.593434][ T7885] overlayfs: overlapping lowerdir path [ 122.118875][ T7900] overlayfs: failed to resolve './file0': -2 [ 122.195539][ T40] audit: type=1326 audit(1747256204.784:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.4.477" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 122.330110][ T40] audit: type=1326 audit(1747256204.914:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.1.479" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 123.013478][ T7927] overlayfs: failed to resolve './file0': -2 [ 123.136898][ T40] audit: type=1326 audit(1747256205.724:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7934 comm="syz.5.489" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 123.237992][ T7942] overlayfs: overlapping lowerdir path [ 123.300238][ T7947] overlayfs: conflicting lowerdir path [ 123.316614][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'. [ 123.348714][ T7949] overlayfs: failed to resolve './file0': -2 [ 123.363597][ T40] audit: type=1326 audit(1747256205.944:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7950 comm="syz.1.495" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 123.513684][ T7961] FAULT_INJECTION: forcing a failure. [ 123.513684][ T7961] name failslab, interval 1, probability 0, space 0, times 0 [ 123.518268][ T7961] CPU: 3 UID: 0 PID: 7961 Comm: syz.4.498 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 123.518284][ T7961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.518290][ T7961] Call Trace: [ 123.518294][ T7961] [ 123.518298][ T7961] dump_stack_lvl+0x16c/0x1f0 [ 123.518318][ T7961] should_fail_ex+0x512/0x640 [ 123.518336][ T7961] should_failslab+0xc2/0x120 [ 123.518350][ T7961] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 123.518363][ T7961] ? skb_clone+0x190/0x3f0 [ 123.518378][ T7961] skb_clone+0x190/0x3f0 [ 123.518391][ T7961] netlink_deliver_tap+0xabd/0xd30 [ 123.518407][ T7961] netlink_unicast+0x6b2/0x7f0 [ 123.518423][ T7961] ? __pfx_netlink_unicast+0x10/0x10 [ 123.518435][ T7961] ? genl_rcv_msg+0x4bb/0x800 [ 123.518454][ T7961] netlink_ack+0x696/0xb80 [ 123.518471][ T7961] netlink_rcv_skb+0x347/0x440 [ 123.518484][ T7961] ? __pfx_genl_rcv_msg+0x10/0x10 [ 123.518501][ T7961] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 123.518521][ T7961] ? __pfx_down_read+0x10/0x10 [ 123.518531][ T7961] ? netlink_deliver_tap+0x1ae/0xd30 [ 123.518546][ T7961] genl_rcv+0x28/0x40 [ 123.518560][ T7961] netlink_unicast+0x53a/0x7f0 [ 123.518575][ T7961] ? __pfx_netlink_unicast+0x10/0x10 [ 123.518592][ T7961] netlink_sendmsg+0x8d1/0xdd0 [ 123.518608][ T7961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.518622][ T7961] ? __import_iovec+0x1c8/0x660 [ 123.518635][ T7961] ____sys_sendmsg+0xa98/0xc70 [ 123.518652][ T7961] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.518667][ T7961] ? get_compat_msghdr+0x11a/0x170 [ 123.518685][ T7961] ___sys_sendmsg+0x134/0x1d0 [ 123.518698][ T7961] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.518727][ T7961] __sys_sendmsg+0x16d/0x220 [ 123.518740][ T7961] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.518756][ T7961] ? rcu_is_watching+0x12/0xc0 [ 123.518768][ T7961] ? rcu_is_watching+0x12/0xc0 [ 123.518779][ T7961] __do_fast_syscall_32+0x73/0x120 [ 123.518796][ T7961] do_fast_syscall_32+0x32/0x80 [ 123.518812][ T7961] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 123.518825][ T7961] RIP: 0023:0xf708e579 [ 123.518833][ T7961] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 123.518842][ T7961] RSP: 002b:00000000f507e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 123.518852][ T7961] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 123.518858][ T7961] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.518864][ T7961] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 123.518869][ T7961] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 123.518875][ T7961] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.518887][ T7961] [ 124.078269][ T7981] binder: 7980:7981 unknown command 0 [ 124.080292][ T7981] binder: 7980:7981 ioctl c0306201 80000080 returned -22 [ 124.084201][ T7981] FAULT_INJECTION: forcing a failure. [ 124.084201][ T7981] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 124.088768][ T7981] CPU: 3 UID: 0 PID: 7981 Comm: syz.5.506 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 124.088783][ T7981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 124.088789][ T7981] Call Trace: [ 124.088793][ T7981] [ 124.088797][ T7981] dump_stack_lvl+0x16c/0x1f0 [ 124.088817][ T7981] should_fail_ex+0x512/0x640 [ 124.088835][ T7981] should_fail_alloc_page+0xe7/0x130 [ 124.088850][ T7981] prepare_alloc_pages+0x3c2/0x610 [ 124.088869][ T7981] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 124.088885][ T7981] ? find_held_lock+0x2b/0x80 [ 124.088897][ T7981] ? __lock_acquire+0xaa4/0x1ba0 [ 124.088911][ T7981] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 124.088923][ T7981] ? is_bpf_text_address+0x94/0x1a0 [ 124.088937][ T7981] ? kernel_text_address+0x8d/0x100 [ 124.088950][ T7981] ? find_held_lock+0x2b/0x80 [ 124.088962][ T7981] ? rcu_is_watching+0x12/0xc0 [ 124.088971][ T7981] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 124.088987][ T7981] ? policy_nodemask+0xea/0x4e0 [ 124.089002][ T7981] alloc_pages_mpol+0x1fb/0x550 [ 124.089015][ T7981] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 124.089032][ T7981] alloc_pages_noprof+0x131/0x390 [ 124.089046][ T7981] pte_alloc_one+0x19/0x380 [ 124.089058][ T7981] __pte_alloc+0x6d/0x3c0 [ 124.089072][ T7981] ? __pfx___pte_alloc+0x10/0x10 [ 124.089086][ T7981] ? lock_vma_under_rcu+0x47d/0x970 [ 124.089103][ T7981] ? walk_to_pmd+0x1a8/0x2a0 [ 124.089119][ T7981] __get_locked_pte+0xa1/0xc0 [ 124.089130][ T7981] insert_page+0x101/0x200 [ 124.089139][ T7981] ? __pfx_insert_page+0x10/0x10 [ 124.089157][ T7981] vm_insert_page+0x2c1/0x440 [ 124.089168][ T7981] binder_alloc_new_buf+0x2220/0x3270 [ 124.089192][ T7981] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 124.089208][ T7981] ? find_held_lock+0x2b/0x80 [ 124.089218][ T7981] ? binder_transaction+0x10a0/0x9d10 [ 124.089235][ T7981] binder_transaction+0x1445/0x9d10 [ 124.089260][ T7981] ? __lock_acquire+0x5ca/0x1ba0 [ 124.089277][ T7981] ? __pfx_binder_transaction+0x10/0x10 [ 124.089309][ T7981] ? find_held_lock+0x2b/0x80 [ 124.089319][ T7981] ? __might_fault+0xe3/0x190 [ 124.089330][ T7981] ? __might_fault+0xe3/0x190 [ 124.089341][ T7981] ? __might_fault+0x13b/0x190 [ 124.089358][ T7981] binder_thread_write+0xaae/0x4df0 [ 124.089378][ T7981] ? __lock_acquire+0xaa4/0x1ba0 [ 124.089391][ T7981] ? __pfx_binder_thread_write+0x10/0x10 [ 124.089408][ T7981] ? binder_debug+0xde/0x1a0 [ 124.089423][ T7981] ? binder_debug+0xde/0x1a0 [ 124.089435][ T7981] ? __pfx_binder_debug+0x10/0x10 [ 124.089449][ T7981] ? find_held_lock+0x2b/0x80 [ 124.089464][ T7981] ? __pfx_binder_ioctl+0x10/0x10 [ 124.089479][ T7981] binder_ioctl+0x26a7/0x7300 [ 124.089498][ T7981] ? tomoyo_path_number_perm+0x295/0x580 [ 124.089514][ T7981] ? tomoyo_path_number_perm+0x18d/0x580 [ 124.089528][ T7981] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 124.089541][ T7981] ? __pfx_binder_ioctl+0x10/0x10 [ 124.089556][ T7981] ? do_vfs_ioctl+0x512/0x1990 [ 124.089571][ T7981] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 124.089595][ T7981] ? find_held_lock+0x2b/0x80 [ 124.089604][ T7981] ? hook_file_ioctl_common+0x145/0x410 [ 124.089619][ T7981] ? __fget_files+0x20e/0x3c0 [ 124.089628][ T7981] ? fput+0x10/0xf0 [ 124.089641][ T7981] ? __pfx_binder_ioctl+0x10/0x10 [ 124.089656][ T7981] compat_ptr_ioctl+0x6b/0xa0 [ 124.089669][ T7981] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 124.089683][ T7981] __ia32_compat_sys_ioctl+0x24c/0x360 [ 124.089700][ T7981] __do_fast_syscall_32+0x73/0x120 [ 124.089717][ T7981] do_fast_syscall_32+0x32/0x80 [ 124.089733][ T7981] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 124.089745][ T7981] RIP: 0023:0xf709e579 [ 124.089754][ T7981] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 124.089764][ T7981] RSP: 002b:00000000f508e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 124.089773][ T7981] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 124.089779][ T7981] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.089785][ T7981] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 124.089790][ T7981] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 124.089796][ T7981] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 124.089808][ T7981] [ 124.089829][ T7981] binder_alloc: 7980: binder_install_single_page failed to insert page at offset 0 with -12 [ 124.314742][ T7992] mkiss: ax0: crc mode is auto. [ 124.341789][ T40] audit: type=1326 audit(1747256206.924:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.3.508" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 124.358563][ T40] audit: type=1326 audit(1747256206.934:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.3.508" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 124.365641][ T40] audit: type=1326 audit(1747256206.934:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.3.508" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 124.401860][ T7998] openvswitch: netlink: Multiple metadata blocks provided [ 124.416205][ T40] kauditd_printk_skb: 210 callbacks suppressed [ 124.416219][ T40] audit: type=1326 audit(1747256207.004:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.3.508" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee598 code=0x7ffc0000 [ 124.424694][ T40] audit: type=1326 audit(1747256207.004:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.3.508" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee598 code=0x7ffc0000 [ 124.433443][ T40] audit: type=1326 audit(1747256207.004:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.3.508" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee598 code=0x7ffc0000 [ 124.442073][ T40] audit: type=1326 audit(1747256207.004:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.3.508" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee598 code=0x7ffc0000 [ 124.450275][ T40] audit: type=1326 audit(1747256207.004:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.3.508" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 124.478038][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.513'. [ 124.535187][ T5984] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 124.665242][ T34] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 124.685523][ T5984] usb 6-1: Using ep0 maxpacket: 32 [ 124.689057][ T5984] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 124.694365][ T5984] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 124.697782][ T5984] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 124.700223][ T5984] usb 6-1: Product: syz [ 124.703172][ T5984] usb 6-1: Manufacturer: syz [ 124.704606][ T5984] usb 6-1: SerialNumber: syz [ 124.707234][ T5984] usb 6-1: config 0 descriptor?? [ 124.710055][ T7993] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 124.814316][ T8012] sp0: Synchronizing with TNC [ 124.828494][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.832290][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.835514][ T34] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 124.839820][ T34] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.842615][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.846873][ T34] usb 10-1: config 0 descriptor?? [ 124.918146][ T5984] usb 6-1: USB disconnect, device number 3 [ 125.152679][ T8004] [U] [ 125.905940][ T8040] xt_time: unknown flags 0xf0 [ 126.198515][ T8048] netlink: 'syz.1.527': attribute type 23 has an invalid length. [ 126.240403][ T8048] netlink: 60 bytes leftover after parsing attributes in process `syz.1.527'. [ 126.560832][ T8056] overlayfs: failed to resolve './file0': -2 [ 126.912707][ T8074] fuse: Bad value for 'fd' [ 127.003815][ T8078] block device autoloading is deprecated and will be removed. [ 127.230873][ T40] audit: type=1326 audit(1747256209.814:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.3.544" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x0 [ 127.314240][ T8085] overlayfs: failed to resolve './file0': -2 [ 127.392699][ T40] audit: type=1326 audit(1747256209.974:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz.1.545" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 127.450428][ T34] usbhid 10-1:0.0: can't add hid device: -71 [ 127.452420][ T34] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 127.474383][ T34] usb 10-1: USB disconnect, device number 5 [ 128.346906][ T40] audit: type=1326 audit(1747256210.934:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8130 comm="syz.3.558" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x0 [ 129.116071][ T6005] libceph: connect (1)[c::]:6789 error -101 [ 129.118655][ T6005] libceph: mon0 (1)[c::]:6789 connect error [ 129.151634][ T8143] ceph: No mds server is up or the cluster is laggy [ 129.422699][ T8152] sp0: Synchronizing with TNC [ 129.514510][ T8156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.565'. [ 129.740290][ T8150] [U] 0=Ҡk"0cC;.E@wԅHi=Rv[s;ݧ8[ UxR@]u+',]u g(0weͅz$aṒub9yYE)&O)6b;ygU4>rɓt_ƏʘG00HVpẑE=N Oeݢ2"yJIzF<@MS0QupQʃl~7MؤZGkφwW_Fc1׍`L챈*]kjFU)B6=x}[4OwO_;Õa,ax0 2a0s1=**$S8 +W1E$ƏmCK-X_^yb19Qs'C9wBx(ћ"uϛBI.XOWZtp0\PւXΐlfw;hB? e #`!dܱ o7Zlǂ` :[!vHDV.Mg` hZ qC>ԖE8ĵq%SS*vi#yIWgΙr#->6lc~cנ.k 7a#J#'NN&G]BV3^"7I+ |Ɛn^F/8'U"h7&1x}O Չ܌sQ":oLfz}on=LFl>=OIЅ9g6v8DQHwYǺԒ_f|q͙'0Y^}W_{Sq*{WUJ+-TZ7c.%,l6PX6? |9eJ5<)\8VY%v59C%wYz2˾~i5gR(\?ņ;1!Jq+t+5ԍbNuaY=H *93Z\PW'_n\I2OWEGR^Y ^2n Iڤ˭o+ӅJ\0{cT,g bJM%K{;. uiT-[+x:%y1zsY<$]cpqo4@D\a)#Gȭ@Ӑ '걜Œz!'?C 1yY (f1GWZϑKs~eqgOﴂ3mmЎzAX˭e`]߳Axv+F0?O}.<{GNJkҿ2YÌ;Tc.c&͐&jzRΉcȧ- zjz/w$(>T |h3 7`(*xk"޺GzRAoOź:m@dc~້]F#wj&/oci!iP_yQ23@SvyAe]Q3L.p9^:l~Xz~M& H~h !cN'оZ8í aπLR%(ޅ]ZGӅԖj3D C9R8 M2xZb%#R|f䷓l_I\G_bhVi?NfgVBpI+h9? Mvs>'pMXsQ.`lqxIz4Rg[Ҫa_^AHzz/f2=aheRW5: &6k,c#VIVHF` WVo&WlIirdc 2-edD*.=8󗴦; ?w1)n߱[uyS Wq5'Zbʌ0ym:}kk |Vג;%+l;H#oFJ; !Yge4<;ύ#~OpL}q(Q;gj< N%Q=@~NHN߄04 gūG,S0l,Ðwm";o涠`H7vIj϶U(cޗYmO[AYɜ0π`;Wd!xX~# ; `VHdU+*us^[6;מ9[<*I41=E0AϝPn]-Y͌@z=8ސɝ[w+ؿbMUle*4x 8Xp|&d_ ʚֵ->Ek]Pת _pvS.R^fx,^}mV5p/ӯYNǐS9i`P!(m[,|"F w]e4w~h29bڬ@ׯ?TR>KyZ+btڞW-bQՊ ~fihv^|/x$,Y 㣖AɴVGHLSMK*SuLݭ8*1m&QpϿ5=X :==B>];oF j+XsmogIOP瀎p=w姩!z[ȭׂG$[niUJ\B԰ǯJz䐲GYE]Apaxe&1]/hKDRkZ*Ek7ܪc , k*u?'rϓkV}'reSJަkpᄔR $H$.ā`{^DY ۆIdmy/kQmң9tFVܐ|A\`KGJ%.R Dh)T"/0KhB&ƈJ+a z9Y2z dX[E EJiVAoUm4T[->`g-;3e-4$녋6#<[ 130.025216][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd 0=Ҡk"0cC;.E@wԅHi=Rv[s;ݧ8[ UxR@]u+',]u g(0weͅz$aṒub9yYE)&O)6b;ygU4>rɓt_ƏʘG00HVpẑE=N Oe[ 130.044965][ T8171] FAULT_INJECTION: forcing a failure. [ 130.044965][ T8171] name fail_usercopy, interval 1, probability 0, space 0, times 0 ݢ2"yJIzF<@MS0QupQʃl~7MؤZGkφwW_Fc1׍`L챈*]kjFU)B6=x} ǽ M3G[ 130.050874][ T8171] dump_stack_lvl+0x16c/0x1f0 v[Ȁ¥mތ˖VPC[ 130.050903][ T8171] should_fail_ex+0x512/0x640 H\i>[4O[ 130.050931][ T8171] _copy_from_iter+0x2a4/0x15b0 wO_;[ 130.051108][ T8171] ? find_held_lock+0x2b/0x80 Õa,ax[ 130.051142][ T8171] ksys_write+0x12a/0x240 [ 130.051165][ T8171] ? __pfx_ksys_write+0x10/0x10 0 2a0s1=[ 130.051185][ T8171] ? rcu_is_watching+0x12/0xc0 **$S8 +W[ 130.051205][ T8171] __do_fast_syscall_32+0x73/0x120 1E$ƏmCK-X_[ 130.051233][ T8171] do_fast_syscall_32+0x32/0x80 ^yb19Qs[ 130.051259][ T8171] entry_SYSENTER_compat_after_hwframe+0x84/0x8e 'C9wB[ 130.051280][ T8171] RIP: 0023:0xf708e579 x(ћ"u[ 130.051294][ T8171] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 ϛBI.XOW[ 130.051310][ T8171] RSP: 002b:00000000f507e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 130.051327][ T8171] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000840 Ztp0\Pւ[ 130.051338][ T8171] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 Xΐlfw;hB? [ 130.051347][ T8171] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 e #`!dܱ [ 130.051358][ T8171] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 o7Zlǂ` :[ 130.051367][ T8171] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [!vHDV[ 130.051392][ T8171] .Mg` hZ qC>ԖE8ĵq%SS*vi#yIWgΙr#->6lc~cנ.k 7a#J#'NN&G]BV3^"7I+ |Ɛn^F/8'U"h7&1x}O Չ܌sQ":oLfz}on=LFl>=OIЅ9g6v8DQHwYǺԒ_f|q͙'0Y^}W_{Sq*{WUJ+-TZ7c.%,l6PX6? |9eJ5<)\8VY%v59C%wYz2˾~i5gR(\?ņ;1!Jq+t+5ԍbNuaY=H *93Z\PW'_n\I2OWEGR^Y ^2n Iڤ˭o+ӅJ\0{cT,g bJM%K{;. uiT-[+x:%y1zsY<$]cpqo4@D\a)#Gȭ@Ӑ '걜Œz!'?C 1yY (f1GWZϑKs~eqgOﴂ3mmЎzAX˭e`]߳Axv+F0?O}.<{GNJkҿ2YÌ;Tc.c&͐&jzRΉcȧ- zjz/w$(>T |h3 7`(*xk"޺GzRAoOź:m@dc~້]F# [ 131.423773][ T8217] dump_stack_lvl+0x16c/0x1f0 [ 131.423792][ T8217] should_fail_ex+0x512/0x640 [ 131.423810][ T8217] should_fail_alloc_page+0xe7/0x130 [ 131.423825][ T8217] prepare_alloc_pages+0x3c2/0x610 [ 131.423845][ T8217] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 131.423858][ T8217] ? ip_finish_output2+0x839/0x21a0 [ 131.423873][ T8217] ? ip_skb_dst_mtu+0x487/0xe90 [ 131.423888][ T8217] ? __pfx_ip_finish_output2+0x10/0x10 [ 131.423900][ T8217] ? ip_skb_dst_mtu+0x496/0xe90 [ 131.423913][ T8217] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 131.423928][ T8217] ? __ip_finish_output+0x116/0x950 [ 131.423943][ T8217] ? ip_finish_output+0x3d/0x380 [ 131.423958][ T8217] ? ip_output+0x142/0x2a0 [ 131.423969][ T8217] ? __pfx_ip_output+0x10/0x10 [ 131.423982][ T8217] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 131.423998][ T8217] ? policy_nodemask+0xea/0x4e0 [ 131.424013][ T8217] alloc_pages_mpol+0x1fb/0x550 [ 131.424026][ T8217] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 131.424039][ T8217] ? dst_release+0x12/0x340 [ 131.424050][ T8217] ? udp_sendmsg+0x3c1/0x29e0 [ 131.424064][ T8217] folio_alloc_mpol_noprof+0x36/0x2f0 [ 131.424080][ T8217] vma_alloc_folio_noprof+0xed/0x1e0 [ 131.424096][ T8217] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 131.424110][ T8217] ? find_held_lock+0x2b/0x80 [ 131.424121][ T8217] ? do_wp_page+0x229a/0x58e0 [ 131.424139][ T8217] do_wp_page+0x1282/0x58e0 [ 131.424158][ T8217] ? __pfx_do_wp_page+0x10/0x10 [ 131.424175][ T8217] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 131.424195][ T8217] ? ___pte_offset_map+0x1bc/0x540 [ 131.424213][ T8217] __handle_mm_fault+0x1ada/0x2a40 [ 131.424228][ T8217] ? __pfx___handle_mm_fault+0x10/0x10 [ 131.424247][ T8217] ? find_vma+0xbf/0x140 [ 131.424262][ T8217] ? __pfx_find_vma+0x10/0x10 [ 131.424278][ T8217] handle_mm_fault+0x3fe/0xad0 [ 131.424291][ T8217] do_user_addr_fault+0x7a6/0x1370 [ 131.424305][ T8217] ? rcu_is_watching+0x12/0xc0 [ 131.424316][ T8217] exc_page_fault+0x5c/0xc0 [ 131.424331][ T8217] asm_exc_page_fault+0x26/0x30 [ 131.424341][ T8217] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 131.424358][ T8217] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 47 54 03 00 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 131.424368][ T8217] RSP: 0018:ffffc9000e9a7ce0 EFLAGS: 00050293 [ 131.424377][ T8217] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000080007fdc [ 131.424383][ T8217] RDX: 0000000080007fc0 RSI: ffffffff893b675d RDI: 0000000000000005 [ 131.424389][ T8217] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 131.424395][ T8217] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000080040000 [ 131.424400][ T8217] R13: 0000000080007fc0 R14: 00000000000003ff R15: 0000000000000400 [ 131.424411][ T8217] ? __sys_sendmmsg+0x30d/0x420 [ 131.424426][ T8217] __sys_sendmmsg+0x31c/0x420 [ 131.424440][ T8217] ? __pfx___sys_sendmmsg+0x10/0x10 [ 131.424458][ T8217] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 131.424480][ T8217] ? fput+0x70/0xf0 [ 131.424493][ T8217] ? ksys_write+0x1b9/0x240 [ 131.424503][ T8217] ? __pfx_ksys_write+0x10/0x10 [ 131.424527][ T8217] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 131.424543][ T8217] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 131.424559][ T8217] __do_fast_syscall_32+0x73/0x120 [ 131.424576][ T8217] do_fast_syscall_32+0x32/0x80 [ 131.424592][ T8217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 131.424604][ T8217] RIP: 0023:0xf709e579 [ 131.424612][ T8217] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 131.424622][ T8217] RSP: 002b:00000000f506d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 131.424631][ T8217] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080007fc0 [ 131.424637][ T8217] RDX: 000000000800001d RSI: 0000000000000000 RDI: 0000000000000000 [ 131.424643][ T8217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 131.424649][ T8217] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 131.424654][ T8217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 131.424667][ T8217] [ 131.601273][ T8219] dummy0: entered allmulticast mode [ 131.604235][ T8219] dummy0: left allmulticast mode [ 131.787336][ T8222] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20003 [ 132.297488][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.300262][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.602860][ T8265] netlink: 24 bytes leftover after parsing attributes in process `syz.3.603'. [ 132.756729][ T5945] usb 6-1: USB disconnect, device number 4 [ 132.793582][ T5945] appletouch 6-1:1.0: input: appletouch disconnected [ 132.846609][ T5955] Bluetooth: hci0: command 0x0406 tx timeout [ 133.056811][ T8288] ubi31: attaching mtd0 [ 133.060388][ T8288] ubi31: scanning is finished [ 133.061949][ T8288] ubi31: empty MTD device detected [ 133.150456][ T8288] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 133.153888][ T8288] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 133.157534][ T8288] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 133.159872][ T8288] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 133.163053][ T8288] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 133.165972][ T8288] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 133.168740][ T8288] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1940372820 [ 133.172179][ T8288] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 133.180747][ T8295] ubi31: background thread "ubi_bgt31d" started, PID 8295 [ 133.248737][ T8300] netlink: 24 bytes leftover after parsing attributes in process `syz.5.613'. [ 133.364227][ T8298] overlayfs: failed to resolve './file0': -2 [ 133.929600][ T8327] overlayfs: overlapping lowerdir path [ 134.160243][ T8331] netlink: 36 bytes leftover after parsing attributes in process `syz.4.620'. [ 134.279128][ T8333] lo speed is unknown, defaulting to 1000 [ 134.281504][ T8333] lo speed is unknown, defaulting to 1000 [ 134.287795][ T8333] lo speed is unknown, defaulting to 1000 [ 134.310757][ T8333] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 134.346462][ T8333] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 134.454121][ T8333] lo speed is unknown, defaulting to 1000 [ 134.463329][ T8333] lo speed is unknown, defaulting to 1000 [ 134.467023][ T8333] lo speed is unknown, defaulting to 1000 [ 134.470685][ T8333] lo speed is unknown, defaulting to 1000 [ 134.628753][ T8339] overlayfs: failed to resolve './file0': -2 [ 134.738709][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.625'. [ 134.742542][ T8344] netlink: 36 bytes leftover after parsing attributes in process `syz.1.625'. [ 134.747361][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.625'. [ 134.756978][ T8344] autofs: Unknown parameter './file1' [ 136.127562][ T8371] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 136.133024][ T8371] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 136.290429][ T8367] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 136.320837][ T8374] overlayfs: failed to resolve './file0': -2 [ 136.392192][ T8382] bridge_slave_0: left allmulticast mode [ 136.394024][ T8382] bridge_slave_0: left promiscuous mode [ 136.402855][ T8382] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.444846][ T8382] bridge_slave_1: left allmulticast mode [ 136.448549][ T8382] bridge_slave_1: left promiscuous mode [ 136.452503][ T8382] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.468956][ T8382] bond0: (slave bond_slave_0): Releasing backup interface [ 136.477045][ T8382] bond0: (slave bond_slave_1): Releasing backup interface [ 136.483677][ T8385] FAULT_INJECTION: forcing a failure. [ 136.483677][ T8385] name failslab, interval 1, probability 0, space 0, times 0 [ 136.487820][ T8385] CPU: 3 UID: 0 PID: 8385 Comm: syz.3.635 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 136.487835][ T8385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 136.487842][ T8385] Call Trace: [ 136.487846][ T8385] [ 136.487850][ T8385] dump_stack_lvl+0x16c/0x1f0 [ 136.487875][ T8385] should_fail_ex+0x512/0x640 [ 136.487891][ T8385] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 136.487905][ T8385] should_failslab+0xc2/0x120 [ 136.487919][ T8385] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 136.487930][ T8385] ? find_held_lock+0x2b/0x80 [ 136.487940][ T8385] ? getname_flags.part.0+0x4c/0x550 [ 136.487957][ T8385] getname_flags.part.0+0x4c/0x550 [ 136.487972][ T8385] getname_flags+0x93/0xf0 [ 136.487989][ T8385] do_sys_openat2+0xb8/0x1d0 [ 136.488004][ T8385] ? __pfx_do_sys_openat2+0x10/0x10 [ 136.488019][ T8385] ? __fget_files+0x20e/0x3c0 [ 136.488032][ T8385] __ia32_sys_creat+0xcb/0x120 [ 136.488047][ T8385] ? __pfx___ia32_sys_creat+0x10/0x10 [ 136.488063][ T8385] ? __pfx_ksys_write+0x10/0x10 [ 136.488079][ T8385] ? rcu_is_watching+0x12/0xc0 [ 136.488091][ T8385] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 136.488112][ T8385] ? lockdep_hardirqs_on+0x7c/0x110 [ 136.488133][ T8385] __do_fast_syscall_32+0x73/0x120 [ 136.488150][ T8385] do_fast_syscall_32+0x32/0x80 [ 136.488166][ T8385] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.488179][ T8385] RIP: 0023:0xf70ee579 [ 136.488187][ T8385] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 136.488197][ T8385] RSP: 002b:00000000f50bd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000008 [ 136.488207][ T8385] RAX: ffffffffffffffda RBX: 0000000080000280 RCX: 00000000d53049cc [ 136.488214][ T8385] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 136.488220][ T8385] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.488225][ T8385] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 136.488231][ T8385] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.488243][ T8385] [ 136.497502][ T8382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.593978][ T8382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.606463][ T8382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.609431][ T8382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.632228][ T8398] vlan0: entered promiscuous mode [ 136.660422][ T8382] tipc: Enabling of bearer rejected, failed to enable media [ 137.270885][ T8414] netlink: 'syz.3.643': attribute type 1 has an invalid length. [ 137.287551][ T8414] bond5: entered promiscuous mode [ 137.290057][ T8414] 8021q: adding VLAN 0 to HW filter on device bond5 [ 137.294379][ T8414] FAULT_INJECTION: forcing a failure. [ 137.294379][ T8414] name failslab, interval 1, probability 0, space 0, times 0 [ 137.300835][ T8414] CPU: 0 UID: 0 PID: 8414 Comm: syz.3.643 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 137.300850][ T8414] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 137.300870][ T8414] Call Trace: [ 137.300875][ T8414] [ 137.300881][ T8414] dump_stack_lvl+0x16c/0x1f0 [ 137.300916][ T8414] should_fail_ex+0x512/0x640 [ 137.300936][ T8414] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 137.300957][ T8414] should_failslab+0xc2/0x120 [ 137.300974][ T8414] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 137.300988][ T8414] ? kstrdup_const+0x63/0x80 [ 137.301004][ T8414] kstrdup+0x53/0x100 [ 137.301017][ T8414] kstrdup_const+0x63/0x80 [ 137.301030][ T8414] __kernfs_new_node+0x9b/0x8a0 [ 137.301043][ T8414] ? __pfx___kernfs_new_node+0x10/0x10 [ 137.301057][ T8414] ? find_held_lock+0x2b/0x80 [ 137.301068][ T8414] ? kernfs_root+0xee/0x2a0 [ 137.301080][ T8414] kernfs_new_node+0x13c/0x1e0 [ 137.301093][ T8414] ? net_ns_get_ownership+0xf8/0x1b0 [ 137.301108][ T8414] kernfs_create_dir_ns+0x4c/0x1a0 [ 137.301122][ T8414] sysfs_create_dir_ns+0x13a/0x2b0 [ 137.301143][ T8414] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 137.301159][ T8414] ? find_held_lock+0x2b/0x80 [ 137.301170][ T8414] ? net_namespace+0x12/0x50 [ 137.301184][ T8414] ? device_namespace+0x76/0xa0 [ 137.301199][ T8414] kobject_add_internal+0x2c4/0x9b0 [ 137.301212][ T8414] kobject_add+0x16e/0x240 [ 137.301222][ T8414] ? __pfx_kobject_add+0x10/0x10 [ 137.301232][ T8414] ? get_device_parent+0x1c5/0x4e0 [ 137.301245][ T8414] ? kobject_put+0xab/0x5a0 [ 137.301262][ T8414] ? device_add+0xbff/0x1a70 [ 137.301279][ T8414] device_add+0x288/0x1a70 [ 137.301293][ T8414] ? __pfx_dev_set_name+0x10/0x10 [ 137.301309][ T8414] ? __pfx_device_add+0x10/0x10 [ 137.301323][ T8414] ? lockdep_init_map_type+0x5c/0x280 [ 137.301338][ T8414] ? __init_waitqueue_head+0xca/0x150 [ 137.301351][ T8414] netdev_register_kobject+0x182/0x3a0 [ 137.301368][ T8414] register_netdevice+0x13dc/0x2270 [ 137.301385][ T8414] ? __pfx_register_netdevice+0x10/0x10 [ 137.301400][ T8414] ? rtnl_create_link+0xa52/0xfa0 [ 137.301415][ T8414] vxcan_newlink+0x3f4/0x640 [ 137.301430][ T8414] ? __pfx_vxcan_newlink+0x10/0x10 [ 137.301442][ T8414] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.301480][ T8414] ? __pfx_validate_linkmsg+0x10/0x10 [ 137.301492][ T8414] ? alloc_netdev_mqs+0xe7e/0x1570 [ 137.301508][ T8414] ? rtnl_create_link+0xa52/0xfa0 [ 137.301521][ T8414] ? __pfx_vxcan_newlink+0x10/0x10 [ 137.301535][ T8414] rtnl_newlink+0xc42/0x2000 [ 137.301552][ T8414] ? __pfx_rtnl_newlink+0x10/0x10 [ 137.301572][ T8414] ? kfree_skbmem+0x1a4/0x1f0 [ 137.301593][ T8414] ? rcu_is_watching+0x12/0xc0 [ 137.301604][ T8414] ? trace_cap_capable+0x18d/0x200 [ 137.301619][ T8414] ? find_held_lock+0x2b/0x80 [ 137.301628][ T8414] ? __pfx_rtnl_newlink+0x10/0x10 [ 137.301640][ T8414] ? __pfx_rtnl_newlink+0x10/0x10 [ 137.301652][ T8414] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 137.301665][ T8414] ? __pfx_rtnl_newlink+0x10/0x10 [ 137.301679][ T8414] rtnetlink_rcv_msg+0x95b/0xe90 [ 137.301693][ T8414] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 137.301714][ T8414] netlink_rcv_skb+0x16d/0x440 [ 137.301728][ T8414] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 137.301742][ T8414] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 137.301764][ T8414] ? netlink_deliver_tap+0x1ae/0xd30 [ 137.301780][ T8414] netlink_unicast+0x53a/0x7f0 [ 137.301795][ T8414] ? __pfx_netlink_unicast+0x10/0x10 [ 137.301813][ T8414] netlink_sendmsg+0x8d1/0xdd0 [ 137.301829][ T8414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.301844][ T8414] ? __import_iovec+0x1c8/0x660 [ 137.301858][ T8414] ____sys_sendmsg+0xa98/0xc70 [ 137.301888][ T8414] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.301903][ T8414] ? get_compat_msghdr+0x11a/0x170 [ 137.301919][ T8414] ? find_held_lock+0x2b/0x80 [ 137.301930][ T8414] ___sys_sendmsg+0x134/0x1d0 [ 137.301944][ T8414] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.301975][ T8414] __sys_sendmsg+0x16d/0x220 [ 137.301987][ T8414] ? __pfx___sys_sendmsg+0x10/0x10 [ 137.302006][ T8414] ? rcu_is_watching+0x12/0xc0 [ 137.302018][ T8414] __do_fast_syscall_32+0x73/0x120 [ 137.302035][ T8414] do_fast_syscall_32+0x32/0x80 [ 137.302051][ T8414] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.302063][ T8414] RIP: 0023:0xf70ee579 [ 137.302071][ T8414] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 137.302081][ T8414] RSP: 002b:00000000f50de55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 137.302091][ T8414] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 137.302098][ T8414] RDX: 000000000000c0b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.302104][ T8414] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.302109][ T8414] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 137.302115][ T8414] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.302132][ T8414] [ 137.302247][ T8414] kobject: kobject_add_internal failed for vxcan2 (error: -12 parent: net) [ 137.861705][ T8424] FAULT_INJECTION: forcing a failure. [ 137.861705][ T8424] name failslab, interval 1, probability 0, space 0, times 0 [ 137.866203][ T8424] CPU: 3 UID: 0 PID: 8424 Comm: syz.3.646 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 137.866219][ T8424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 137.866225][ T8424] Call Trace: [ 137.866229][ T8424] [ 137.866234][ T8424] dump_stack_lvl+0x16c/0x1f0 [ 137.866253][ T8424] should_fail_ex+0x512/0x640 [ 137.866268][ T8424] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 137.866288][ T8424] should_failslab+0xc2/0x120 [ 137.866303][ T8424] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 137.866316][ T8424] ? xprt_switch_alloc+0x28e/0x3c0 [ 137.866332][ T8424] ? __kernel_text_address+0xd/0x40 [ 137.866341][ T8424] ? kstrdup_const+0x63/0x80 [ 137.866357][ T8424] kstrdup+0x53/0x100 [ 137.866370][ T8424] kstrdup_const+0x63/0x80 [ 137.866383][ T8424] __kernfs_new_node+0x9b/0x8a0 [ 137.866396][ T8424] ? __pfx___kernfs_new_node+0x10/0x10 [ 137.866404][ T8424] ? __pfx_stack_trace_save+0x10/0x10 [ 137.866419][ T8424] ? find_held_lock+0x2b/0x80 [ 137.866430][ T8424] ? kernfs_root+0xee/0x2a0 [ 137.866443][ T8424] kernfs_new_node+0x13c/0x1e0 [ 137.866458][ T8424] kernfs_create_dir_ns+0x4c/0x1a0 [ 137.866471][ T8424] sysfs_create_dir_ns+0x13a/0x2b0 [ 137.866488][ T8424] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 137.866504][ T8424] ? find_held_lock+0x2b/0x80 [ 137.866516][ T8424] ? rpc_sysfs_xprt_switch_namespace+0xd/0x40 [ 137.866535][ T8424] kobject_add_internal+0x2c4/0x9b0 [ 137.866547][ T8424] kobject_init_and_add+0x11b/0x190 [ 137.866558][ T8424] ? __pfx_kobject_init_and_add+0x10/0x10 [ 137.866576][ T8424] rpc_sysfs_xprt_switch_setup+0x189/0x370 [ 137.866589][ T8424] xprt_switch_alloc+0x28e/0x3c0 [ 137.866604][ T8424] rpc_create_xprt+0x2dc/0x440 [ 137.866620][ T8424] rpc_create+0x469/0x7f0 [ 137.866634][ T8424] ? bpf_ksym_find+0x124/0x1c0 [ 137.866652][ T8424] ? __pfx_rpc_create+0x10/0x10 [ 137.866673][ T8424] ? arch_stack_walk+0xa6/0x100 [ 137.866699][ T8424] ? save_trace+0x4e/0x380 [ 137.866710][ T8424] ? add_lock_to_list+0x9d/0x130 [ 137.866723][ T8424] rpcb_create_af_local+0x11b/0x310 [ 137.866736][ T8424] ? __pfx_rpcb_create_af_local+0x10/0x10 [ 137.866754][ T8424] ? find_held_lock+0x2b/0x80 [ 137.866764][ T8424] ? rpcb_create_local+0x1da/0x270 [ 137.866784][ T8424] rpcb_create_local+0x1ee/0x270 [ 137.866797][ T8424] svc_bind+0x1e8/0x260 [ 137.866811][ T8424] nfsd_create_serv+0x2d2/0x480 [ 137.866828][ T8424] ? __pfx_nfsd_create_serv+0x10/0x10 [ 137.866848][ T8424] nfsd_nl_listener_set_doit+0xe5/0x1a40 [ 137.866864][ T8424] ? rcu_is_watching+0x12/0xc0 [ 137.866875][ T8424] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 137.866887][ T8424] ? __nla_parse+0x40/0x60 [ 137.866900][ T8424] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 137.866917][ T8424] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 137.866936][ T8424] genl_family_rcv_msg_doit+0x206/0x2f0 [ 137.866953][ T8424] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 137.866971][ T8424] ? rcu_is_watching+0x12/0xc0 [ 137.866985][ T8424] ? bpf_lsm_capable+0x9/0x10 [ 137.866996][ T8424] ? security_capable+0x7e/0x260 [ 137.867010][ T8424] genl_rcv_msg+0x55c/0x800 [ 137.867027][ T8424] ? __pfx_genl_rcv_msg+0x10/0x10 [ 137.867043][ T8424] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 137.867056][ T8424] ? __lock_acquire+0xaa4/0x1ba0 [ 137.867073][ T8424] netlink_rcv_skb+0x16d/0x440 [ 137.867086][ T8424] ? __pfx_genl_rcv_msg+0x10/0x10 [ 137.867102][ T8424] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 137.867123][ T8424] ? __pfx_down_read+0x10/0x10 [ 137.867133][ T8424] ? netlink_deliver_tap+0x1ae/0xd30 [ 137.867148][ T8424] genl_rcv+0x28/0x40 [ 137.867162][ T8424] netlink_unicast+0x53a/0x7f0 [ 137.867177][ T8424] ? __pfx_netlink_unicast+0x10/0x10 [ 137.867195][ T8424] netlink_sendmsg+0x8d1/0xdd0 [ 137.867211][ T8424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.867226][ T8424] ? __import_iovec+0x1c8/0x660 [ 137.867239][ T8424] ____sys_sendmsg+0xa98/0xc70 [ 137.867257][ T8424] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.867272][ T8424] ? get_compat_msghdr+0x11a/0x170 [ 137.867290][ T8424] ___sys_sendmsg+0x134/0x1d0 [ 137.867303][ T8424] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.867333][ T8424] __sys_sendmsg+0x16d/0x220 [ 137.867346][ T8424] ? __pfx___sys_sendmsg+0x10/0x10 [ 137.867365][ T8424] ? rcu_is_watching+0x12/0xc0 [ 137.867376][ T8424] __do_fast_syscall_32+0x73/0x120 [ 137.867394][ T8424] do_fast_syscall_32+0x32/0x80 [ 137.867410][ T8424] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.867423][ T8424] RIP: 0023:0xf70ee579 [ 137.867431][ T8424] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 137.867441][ T8424] RSP: 002b:00000000f50bd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 137.867451][ T8424] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000040 [ 137.867458][ T8424] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.867464][ T8424] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.867469][ T8424] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 137.867475][ T8424] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.867488][ T8424] [ 137.867495][ T8424] kobject: kobject_add_internal failed for switch-0 (error: -12 parent: xprt-switches) [ 138.211457][ T8428] random: crng reseeded on system resumption [ 138.220254][ T8428] netlink: 'syz.5.648': attribute type 1 has an invalid length. [ 138.556685][ T8442] block device autoloading is deprecated and will be removed. [ 138.641571][ T8440] overlayfs: failed to resolve './file0': -2 [ 138.658692][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 138.658703][ T40] audit: type=1326 audit(1747256221.244:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.5.654" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 139.195200][ T34] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 139.224581][ T8467] FAULT_INJECTION: forcing a failure. [ 139.224581][ T8467] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 139.230398][ T8467] CPU: 1 UID: 0 PID: 8467 Comm: syz.4.663 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 139.230436][ T8467] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.230448][ T8467] Call Trace: [ 139.230455][ T8467] [ 139.230463][ T8467] dump_stack_lvl+0x16c/0x1f0 [ 139.230493][ T8467] should_fail_ex+0x512/0x640 [ 139.230523][ T8467] should_fail_alloc_page+0xe7/0x130 [ 139.230548][ T8467] prepare_alloc_pages+0x3c2/0x610 [ 139.230580][ T8467] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 139.230604][ T8467] ? __lock_acquire+0x5ca/0x1ba0 [ 139.230629][ T8467] ? __lock_acquire+0x5ca/0x1ba0 [ 139.230657][ T8467] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 139.230677][ T8467] ? lock_acquire+0x179/0x350 [ 139.230700][ T8467] ? find_held_lock+0x2b/0x80 [ 139.230719][ T8467] ? page_table_check_set+0x96f/0xb50 [ 139.230744][ T8467] ? page_table_check_set+0x979/0xb50 [ 139.230768][ T8467] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 139.230800][ T8467] ? policy_nodemask+0xea/0x4e0 [ 139.230822][ T8467] alloc_pages_mpol+0x1fb/0x550 [ 139.230844][ T8467] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 139.230864][ T8467] ? __lock_acquire+0x5ca/0x1ba0 [ 139.230887][ T8467] folio_alloc_mpol_noprof+0x36/0x2f0 [ 139.230909][ T8467] vma_alloc_folio_noprof+0xed/0x1e0 [ 139.230931][ T8467] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 139.230963][ T8467] do_pte_missing+0x933/0x3fb0 [ 139.230983][ T8467] ? __handle_mm_fault+0x1010/0x2a40 [ 139.231004][ T8467] __handle_mm_fault+0x103d/0x2a40 [ 139.231029][ T8467] ? __pfx___handle_mm_fault+0x10/0x10 [ 139.231046][ T8467] ? __pte_offset_map_lock+0x155/0x2f0 [ 139.231070][ T8467] ? find_held_lock+0x2b/0x80 [ 139.231086][ T8467] ? find_held_lock+0x2b/0x80 [ 139.231115][ T8467] handle_mm_fault+0x3fe/0xad0 [ 139.231135][ T8467] __get_user_pages+0x771/0x36f0 [ 139.231165][ T8467] ? __pfx_mt_find+0x10/0x10 [ 139.231181][ T8467] ? __pfx___get_user_pages+0x10/0x10 [ 139.231214][ T8467] populate_vma_page_range+0x278/0x3a0 [ 139.231233][ T8467] ? __pfx_populate_vma_page_range+0x10/0x10 [ 139.231249][ T8467] ? __pfx_find_vma_intersection+0x10/0x10 [ 139.231275][ T8467] ? do_mmap+0x69c/0x11b0 [ 139.231301][ T8467] __mm_populate+0x1d8/0x380 [ 139.231320][ T8467] ? __pfx___mm_populate+0x10/0x10 [ 139.231337][ T8467] ? up_write+0x1b2/0x520 [ 139.231363][ T8467] vm_mmap_pgoff+0x362/0x450 [ 139.231391][ T8467] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 139.231427][ T8467] ? __fget_files+0x20e/0x3c0 [ 139.231454][ T8467] ksys_mmap_pgoff+0x32c/0x5c0 [ 139.231479][ T8467] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 139.231508][ T8467] __do_fast_syscall_32+0x73/0x120 [ 139.231536][ T8467] do_fast_syscall_32+0x32/0x80 [ 139.231561][ T8467] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.231610][ T8467] RIP: 0023:0xf708e579 [ 139.231625][ T8467] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 139.231642][ T8467] RSP: 002b:00000000f507e55c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 139.231658][ T8467] RAX: ffffffffffffffda RBX: 0000000080200000 RCX: 0000000000400000 [ 139.231669][ T8467] RDX: 000000000000000b RSI: 0000000000002012 RDI: 0000000000000007 [ 139.231680][ T8467] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.231689][ T8467] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 139.231699][ T8467] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.231723][ T8467] [ 139.436958][ T34] usb 6-1: config 0 has no interfaces? [ 139.439289][ T34] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.442840][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.448460][ T34] usb 6-1: config 0 descriptor?? [ 139.763738][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.5.664'. [ 140.094565][ T6004] usb 6-1: USB disconnect, device number 5 [ 140.325353][ T8476] overlayfs: failed to resolve './file0': -2 [ 140.424592][ T40] audit: type=1326 audit(1747256223.004:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.4.667" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 140.478774][ T8483] fuse: Bad value for 'group_id' [ 140.481020][ T8483] fuse: Bad value for 'group_id' [ 141.161195][ T40] audit: type=1326 audit(1747256223.744:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8496 comm="syz.3.672" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x0 [ 141.304986][ T8498] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 141.307251][ T8498] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 141.311183][ T8498] vhci_hcd vhci_hcd.0: Device attached [ 141.350753][ T8504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.673'. [ 141.585196][ T6005] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 141.595139][ T8511] overlayfs: failed to resolve './file0': -2 [ 141.752318][ T8520] netlink: 20 bytes leftover after parsing attributes in process `syz.4.678'. [ 141.821771][ T8521] netlink: 20 bytes leftover after parsing attributes in process `syz.4.678'. [ 141.864243][ T8500] vhci_hcd: connection reset by peer [ 141.872250][ T46] vhci_hcd: stop threads [ 141.874659][ T46] vhci_hcd: release socket [ 141.879266][ T46] vhci_hcd: disconnect device [ 142.287136][ T8527] fuse: Bad value for 'group_id' [ 142.288766][ T8527] fuse: Bad value for 'group_id' [ 142.531385][ T8533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.684'. [ 142.543832][ T8533] fuse: Unknown parameter '0x000000000000000600000000000000000000' [ 142.627157][ T8536] FAULT_INJECTION: forcing a failure. [ 142.627157][ T8536] name failslab, interval 1, probability 0, space 0, times 0 [ 142.632246][ T8536] CPU: 0 UID: 0 PID: 8536 Comm: syz.4.685 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 142.632261][ T8536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.632268][ T8536] Call Trace: [ 142.632272][ T8536] [ 142.632277][ T8536] dump_stack_lvl+0x16c/0x1f0 [ 142.632296][ T8536] should_fail_ex+0x512/0x640 [ 142.632315][ T8536] should_failslab+0xc2/0x120 [ 142.632329][ T8536] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 142.632342][ T8536] ? register_lock_class+0x41/0x4c0 [ 142.632356][ T8536] ? __alloc_skb+0x2b2/0x380 [ 142.632371][ T8536] __alloc_skb+0x2b2/0x380 [ 142.632383][ T8536] ? __pfx___alloc_skb+0x10/0x10 [ 142.632400][ T8536] _sctp_make_chunk+0x51/0x270 [ 142.632416][ T8536] sctp_make_abort+0x41/0x410 [ 142.632431][ T8536] sctp_make_abort_user+0x7c/0x4b0 [ 142.632447][ T8536] ? lockdep_hardirqs_on+0x7c/0x110 [ 142.632462][ T8536] ? __pfx_sctp_make_abort_user+0x10/0x10 [ 142.632478][ T8536] ? skb_dequeue+0x126/0x180 [ 142.632497][ T8536] sctp_close+0x220/0x940 [ 142.632510][ T8536] ? __pfx_sctp_close+0x10/0x10 [ 142.632520][ T8536] ? __pfx___might_resched+0x10/0x10 [ 142.632535][ T8536] ? ip_mc_drop_socket+0x1f/0x280 [ 142.632548][ T8536] ? down_write+0x14d/0x200 [ 142.632559][ T8536] inet_release+0x13c/0x280 [ 142.632575][ T8536] inet6_release+0x4f/0x70 [ 142.632586][ T8536] __sock_release+0xb0/0x270 [ 142.632611][ T8536] ? __pfx_sock_close+0x10/0x10 [ 142.632623][ T8536] sock_close+0x1c/0x30 [ 142.632635][ T8536] __fput+0x3ff/0xb70 [ 142.632651][ T8536] fput_close_sync+0x118/0x260 [ 142.632666][ T8536] ? __pfx_fput_close_sync+0x10/0x10 [ 142.632679][ T8536] ? dnotify_flush+0x79/0x4c0 [ 142.632694][ T8536] __ia32_sys_close+0x8b/0x120 [ 142.632709][ T8536] __do_fast_syscall_32+0x73/0x120 [ 142.632727][ T8536] do_fast_syscall_32+0x32/0x80 [ 142.632743][ T8536] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.632761][ T8536] RIP: 0023:0xf708e579 [ 142.632769][ T8536] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 142.632779][ T8536] RSP: 002b:00000000f507e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000006 [ 142.632790][ T8536] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 142.632796][ T8536] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.632802][ T8536] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 142.632808][ T8536] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 142.632814][ T8536] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.632827][ T8536] [ 142.834215][ T8541] lo speed is unknown, defaulting to 1000 [ 143.252272][ T8546] openvswitch: netlink: VXLAN extension 149 out of range max 1 [ 143.341854][ T8555] 9pnet_virtio: no channels available for device syz [ 143.343386][ T8552] netlink: 20 bytes leftover after parsing attributes in process `syz.3.691'. [ 143.488379][ T40] audit: type=1326 audit(1747256226.074:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.5.687" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 143.625438][ C1] sr 2:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 143.628851][ C1] sr 2:0:0:0: [sr0] tag#0 CDB: ATA command pass through(16) [ 143.631165][ C1] sr 2:0:0:0: [sr0] tag#0 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 143.634050][ C1] sr 2:0:0:0: [sr0] tag#0 CDB[10]: 05 c6 [ 143.705629][ T8571] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 143.716438][ T64] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 143.859448][ T8576] lo speed is unknown, defaulting to 1000 [ 143.868173][ T8575] lo speed is unknown, defaulting to 1000 [ 143.895184][ T64] usb 8-1: Using ep0 maxpacket: 8 [ 143.898717][ T64] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.902129][ T64] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 143.905251][ T64] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 143.908854][ T64] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 143.921096][ T64] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 143.933786][ T64] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.959079][ T64] hub 8-1:1.0: bad descriptor, ignoring hub [ 143.961223][ T64] hub 8-1:1.0: probe with driver hub failed with error -5 [ 143.968127][ T64] cdc_wdm 8-1:1.0: skipping garbage [ 143.976470][ T64] cdc_wdm 8-1:1.0: skipping garbage [ 143.990106][ T64] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 143.995253][ T64] cdc_wdm 8-1:1.0: Unknown control protocol [ 144.339524][ T8582] fuse: Bad value for 'group_id' [ 144.341358][ T8582] fuse: Bad value for 'group_id' [ 144.564914][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.702'. [ 144.571729][ T8562] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 144.786624][ T8610] netlink: 'syz.1.704': attribute type 137 has an invalid length. [ 144.798407][ T8610] (syz.1.704,8610,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 144.801580][ T8610] (syz.1.704,8610,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 145.005470][ T8616] Bluetooth: MGMT ver 1.23 [ 145.222652][ T8629] lo speed is unknown, defaulting to 1000 [ 145.324011][ T8637] netlink: 'syz.5.715': attribute type 39 has an invalid length. [ 145.414903][ T34] kernel write not supported for file /media2 (pid: 34 comm: kworker/3:0) [ 145.712907][ T8648] tmpfs: Bad value for 'mpol' [ 145.717244][ T58] usb 8-1: USB disconnect, device number 3 [ 145.921275][ T5984] hid-generic C990:0003:0000.0002: unknown main item tag 0x0 [ 145.924571][ T5984] hid-generic C990:0003:0000.0002: unknown main item tag 0x0 [ 145.934542][ T5984] hid-generic C990:0003:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 145.992773][ T8655] fido_id[8655]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 146.695581][ T6005] vhci_hcd: vhci_device speed not set [ 147.261683][ T8702] FAULT_INJECTION: forcing a failure. [ 147.261683][ T8702] name failslab, interval 1, probability 0, space 0, times 0 [ 147.267102][ T8702] CPU: 0 UID: 0 PID: 8702 Comm: syz.1.735 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 147.267124][ T8702] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 147.267132][ T8702] Call Trace: [ 147.267136][ T8702] [ 147.267140][ T8702] dump_stack_lvl+0x16c/0x1f0 [ 147.267160][ T8702] should_fail_ex+0x512/0x640 [ 147.267176][ T8702] ? fs_reclaim_acquire+0xae/0x150 [ 147.267194][ T8702] ? tomoyo_encode2+0x100/0x3e0 [ 147.267208][ T8702] should_failslab+0xc2/0x120 [ 147.267222][ T8702] __kmalloc_noprof+0xd2/0x510 [ 147.267233][ T8702] ? d_absolute_path+0x136/0x1a0 [ 147.267249][ T8702] tomoyo_encode2+0x100/0x3e0 [ 147.267266][ T8702] tomoyo_encode+0x29/0x50 [ 147.267280][ T8702] tomoyo_realpath_from_path+0x18f/0x6e0 [ 147.267299][ T8702] tomoyo_path_number_perm+0x245/0x580 [ 147.267312][ T8702] ? tomoyo_path_number_perm+0x237/0x580 [ 147.267326][ T8702] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 147.267353][ T8702] ? find_held_lock+0x2b/0x80 [ 147.267363][ T8702] ? hook_file_ioctl_common+0x145/0x410 [ 147.267375][ T8702] ? __fget_files+0x204/0x3c0 [ 147.267387][ T8702] ? __fget_files+0x20e/0x3c0 [ 147.267395][ T8702] ? fput+0x10/0xf0 [ 147.267410][ T8702] security_file_ioctl_compat+0x9b/0x240 [ 147.267425][ T8702] __ia32_compat_sys_ioctl+0xc3/0x360 [ 147.267443][ T8702] __do_fast_syscall_32+0x73/0x120 [ 147.267460][ T8702] do_fast_syscall_32+0x32/0x80 [ 147.267476][ T8702] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.267489][ T8702] RIP: 0023:0xf708e579 [ 147.267497][ T8702] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 147.267527][ T8702] RSP: 002b:00000000f507e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 147.267537][ T8702] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080045515 [ 147.267544][ T8702] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.267550][ T8702] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.267555][ T8702] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 147.267561][ T8702] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.267574][ T8702] [ 147.267585][ T8702] ERROR: Out of memory at tomoyo_realpath_from_path. [ 147.341991][ T8702] usb usb8: usbfs: process 8702 (syz.1.735) did not claim interface 0 before use [ 147.392823][ T8708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.516366][ T8720] batman_adv: batadv0: Adding interface: dummy0 [ 147.519067][ T8720] batman_adv: batadv0: Interface activated: dummy0 [ 147.554622][ T5984] libceph: connect (1)[c::]:6789 error -101 [ 147.557446][ T5984] libceph: mon0 (1)[c::]:6789 connect error [ 147.601976][ T8718] ceph: No mds server is up or the cluster is laggy [ 147.645444][ T5955] Bluetooth: hci3: command 0x0405 tx timeout [ 147.892474][ T8686] syz.4.729 (8686) used greatest stack depth: 20968 bytes left [ 147.911796][ T8734] batman_adv: batadv0: Interface deactivated: dummy0 [ 147.928642][ T8734] batman_adv: batadv0: Removing interface: dummy0 [ 147.938248][ T8734] bridge_slave_0: left allmulticast mode [ 147.940718][ T8734] bridge_slave_0: left promiscuous mode [ 147.943008][ T8734] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.952930][ T8734] bridge_slave_1: left allmulticast mode [ 147.954795][ T8734] bridge_slave_1: left promiscuous mode [ 147.957394][ T8734] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.974488][ T8734] bond0: (slave bond_slave_0): Releasing backup interface [ 147.990339][ T8738] sctp: [Deprecated]: syz.5.747 (pid 8738) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.990339][ T8738] Use struct sctp_sack_info instead [ 148.013773][ T8741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.019617][ T8734] bond0: (slave bond_slave_1): Releasing backup interface [ 148.068767][ T8734] team0: Port device team_slave_0 removed [ 148.085997][ T8734] team0: Port device team_slave_1 removed [ 148.089460][ T8734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.097344][ T8734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.103209][ T8734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.105699][ T8734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.131889][ T8734] bond1: (slave gretap1): Releasing active interface [ 148.195841][ T6005] lo speed is unknown, defaulting to 1000 [ 148.453962][ T8752] bridge_slave_0: left allmulticast mode [ 148.457093][ T8752] bridge_slave_0: left promiscuous mode [ 148.458954][ T8752] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.530074][ T8756] netlink: 'syz.4.749': attribute type 23 has an invalid length. [ 148.538513][ T8752] bridge_slave_1: left allmulticast mode [ 148.540589][ T8752] bridge_slave_1: left promiscuous mode [ 148.542671][ T8752] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.553076][ T8752] bond0: (slave bond_slave_0): Releasing backup interface [ 148.560458][ T8752] bond0: (slave bond_slave_1): Releasing backup interface [ 148.576817][ T8752] team0: Port device team_slave_0 removed [ 148.583166][ T8754] sctp: [Deprecated]: syz.1.751 (pid 8754) Use of int in maxseg socket option. [ 148.583166][ T8754] Use struct sctp_assoc_value instead [ 148.588540][ T8752] team0: Port device team_slave_1 removed [ 148.591928][ T8752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.594421][ T8752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.600386][ T8752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.602909][ T8752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.666047][ T8759] netlink: 'syz.1.752': attribute type 7 has an invalid length. [ 148.674828][ T8759] : entered promiscuous mode [ 148.681485][ T40] audit: type=1326 audit(1747256231.264:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8762 comm="syz.3.754" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x0 [ 148.741136][ T40] audit: type=1326 audit(1747256231.324:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8764 comm="syz.1.755" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 149.069684][ T8776] 9pnet_fd: Insufficient options for proto=fd [ 149.263141][ T8783] overlayfs: failed to resolve './file0': -2 [ 149.346725][ T8791] FAULT_INJECTION: forcing a failure. [ 149.346725][ T8791] name failslab, interval 1, probability 0, space 0, times 0 [ 149.351254][ T8791] CPU: 2 UID: 0 PID: 8791 Comm: syz.4.764 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 149.351269][ T8791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.351275][ T8791] Call Trace: [ 149.351279][ T8791] [ 149.351284][ T8791] dump_stack_lvl+0x16c/0x1f0 [ 149.351303][ T8791] should_fail_ex+0x512/0x640 [ 149.351319][ T8791] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 149.351331][ T8791] should_failslab+0xc2/0x120 [ 149.351346][ T8791] __kmalloc_cache_noprof+0x6a/0x3e0 [ 149.351356][ T8791] ? do_check_common+0x2ac/0xc2a0 [ 149.351368][ T8791] ? kasan_save_track+0x14/0x30 [ 149.351381][ T8791] do_check_common+0x2ac/0xc2a0 [ 149.351405][ T8791] ? __pfx_do_check_common+0x10/0x10 [ 149.351426][ T8791] ? lockdep_hardirqs_on+0x7c/0x110 [ 149.351446][ T8791] ? kfree+0x2b6/0x4d0 [ 149.351454][ T8791] ? bpf_check+0x6c86/0xb460 [ 149.351464][ T8791] ? bpf_check+0x7b2f/0xb460 [ 149.351477][ T8791] bpf_check+0x7f51/0xb460 [ 149.351535][ T8791] ? __pfx_bpf_check+0x10/0x10 [ 149.351555][ T8791] ? pcpu_alloc_noprof+0x949/0x1470 [ 149.351580][ T8791] ? __lock_acquire+0xaa4/0x1ba0 [ 149.351601][ T8791] ? find_held_lock+0x2b/0x80 [ 149.351614][ T8791] ? __asan_memset+0x23/0x50 [ 149.351625][ T8791] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 149.351641][ T8791] bpf_prog_load+0xe41/0x2490 [ 149.351659][ T8791] ? __pfx_bpf_prog_load+0x10/0x10 [ 149.351685][ T8791] ? bpf_lsm_bpf+0x9/0x10 [ 149.351697][ T8791] __sys_bpf+0x433c/0x4d80 [ 149.351714][ T8791] ? __pfx___sys_bpf+0x10/0x10 [ 149.351729][ T8791] ? ksys_write+0x190/0x240 [ 149.351742][ T8791] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 149.351766][ T8791] ? fput+0x70/0xf0 [ 149.351786][ T8791] ? ksys_write+0x1b9/0x240 [ 149.351796][ T8791] ? __pfx_ksys_write+0x10/0x10 [ 149.351808][ T8791] __ia32_sys_bpf+0x76/0xe0 [ 149.351825][ T8791] __do_fast_syscall_32+0x73/0x120 [ 149.351842][ T8791] do_fast_syscall_32+0x32/0x80 [ 149.351859][ T8791] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 149.351872][ T8791] RIP: 0023:0xf708e579 [ 149.351880][ T8791] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 149.351891][ T8791] RSP: 002b:00000000f505d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 149.351900][ T8791] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800017c0 [ 149.351907][ T8791] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.351912][ T8791] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 149.351918][ T8791] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 149.351924][ T8791] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.351937][ T8791] [ 151.306270][ T40] audit: type=1326 audit(1747256233.894:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.5.775" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 152.190596][ T8851] lo speed is unknown, defaulting to 1000 [ 152.240577][ T8852] block device autoloading is deprecated and will be removed. [ 152.341465][ T8856] netlink: 24 bytes leftover after parsing attributes in process `syz.4.781'. [ 152.507779][ T8853] @: renamed from vlan0 (while UP) [ 152.544999][ T8864] syzkaller1: entered promiscuous mode [ 152.549275][ T8864] syzkaller1: entered allmulticast mode [ 152.641146][ T8866] program syz.4.782 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.662104][ T40] audit: type=1326 audit(1747256235.244:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.3.784" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x0 [ 153.439884][ T8888] bridge_slave_0: left allmulticast mode [ 153.441927][ T8888] bridge_slave_0: left promiscuous mode [ 153.444522][ T8888] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.473489][ T8888] bridge_slave_1: left allmulticast mode [ 153.476501][ T8888] bridge_slave_1: left promiscuous mode [ 153.480111][ T8888] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.528557][ T8888] bond0: (slave bond_slave_0): Releasing backup interface [ 153.564332][ T8888] bond0: (slave bond_slave_1): Releasing backup interface [ 153.593794][ T8888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.597801][ T8888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.617988][ T8888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.627953][ T8888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.835171][ T5984] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 153.985162][ T5984] usb 8-1: Using ep0 maxpacket: 8 [ 153.988079][ T5984] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 153.990699][ T5984] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.993770][ T5984] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.005110][ T5984] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 154.008251][ T5984] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.012267][ T5984] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.025142][ T5984] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.132842][ T8904] netlink: 36 bytes leftover after parsing attributes in process `syz.5.795'. [ 154.177355][ T40] audit: type=1326 audit(1747256236.764:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.1.796" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 154.192364][ T8904] input: syz0 as /devices/virtual/input/input11 [ 154.258453][ T5984] usb 8-1: GET_CAPABILITIES returned 0 [ 154.260236][ T5984] usbtmc 8-1:16.0: can't read capabilities [ 154.337814][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.797'. [ 154.343637][ T8912] vlan0: entered allmulticast mode [ 154.345423][ T8912] dummy0: entered allmulticast mode [ 154.350379][ T8912] netlink: zone id is out of range [ 154.352071][ T8912] netlink: zone id is out of range [ 154.353686][ T8912] netlink: zone id is out of range [ 154.355680][ T8912] netlink: zone id is out of range [ 154.357312][ T8912] netlink: zone id is out of range [ 154.358991][ T8912] netlink: zone id is out of range [ 154.360710][ T8912] netlink: zone id is out of range [ 154.362358][ T8912] netlink: zone id is out of range [ 154.363968][ T8912] netlink: zone id is out of range [ 154.365729][ T8912] netlink: zone id is out of range [ 154.436500][ T40] audit: type=1326 audit(1747256237.024:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.4.799" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 154.564575][ T8892] usbtmc 8-1:16.0: usb_control_msg returned -71 [ 154.567789][ T64] usb 8-1: USB disconnect, device number 4 [ 154.585548][ T8917] usbtmc 8-1:16.0: stb usb_control_msg returned -19 [ 154.664028][ T8920] IPVS: set_ctl: invalid protocol: 255 172.30.0.6:0 [ 155.027909][ T8931] FAULT_INJECTION: forcing a failure. [ 155.027909][ T8931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.032292][ T8931] CPU: 3 UID: 0 PID: 8931 Comm: syz.1.802 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 155.032307][ T8931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 155.032313][ T8931] Call Trace: [ 155.032318][ T8931] [ 155.032322][ T8931] dump_stack_lvl+0x16c/0x1f0 [ 155.032341][ T8931] should_fail_ex+0x512/0x640 [ 155.032360][ T8931] _copy_from_iter+0x2a4/0x15b0 [ 155.032377][ T8931] ? tomoyo_path_number_perm+0x295/0x580 [ 155.032393][ T8931] ? __pfx__copy_from_iter+0x10/0x10 [ 155.032409][ T8931] ? tomoyo_path_number_perm+0x18d/0x580 [ 155.032422][ T8931] ? __lock_acquire+0xaa4/0x1ba0 [ 155.032441][ T8931] write_pool_user+0xe8/0x2f0 [ 155.032458][ T8931] ? __pfx_write_pool_user+0x10/0x10 [ 155.032476][ T8931] ? import_ubuf+0x1b6/0x220 [ 155.032502][ T8931] random_ioctl+0x2ce/0x4a0 [ 155.032517][ T8931] ? __pfx_random_ioctl+0x10/0x10 [ 155.032535][ T8931] ? __fget_files+0x20e/0x3c0 [ 155.032545][ T8931] ? fput+0x10/0xf0 [ 155.032559][ T8931] ? __pfx_random_ioctl+0x10/0x10 [ 155.032579][ T8931] compat_ptr_ioctl+0x6b/0xa0 [ 155.032598][ T8931] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 155.032625][ T8931] __ia32_compat_sys_ioctl+0x24c/0x360 [ 155.032654][ T8931] __do_fast_syscall_32+0x73/0x120 [ 155.032682][ T8931] do_fast_syscall_32+0x32/0x80 [ 155.032705][ T8931] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.032727][ T8931] RIP: 0023:0xf708e579 [ 155.032739][ T8931] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 155.032750][ T8931] RSP: 002b:00000000f507e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 155.032760][ T8931] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040085203 [ 155.032767][ T8931] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.032773][ T8931] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.032779][ T8931] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 155.032785][ T8931] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.032798][ T8931] [ 155.317057][ T8936] netlink: 24 bytes leftover after parsing attributes in process `syz.4.804'. [ 156.327517][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'. [ 156.331164][ T40] audit: type=1326 audit(1747256238.914:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8971 comm="syz.1.814" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 156.339565][ T40] audit: type=1326 audit(1747256238.914:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8971 comm="syz.1.814" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 156.347342][ T40] audit: type=1326 audit(1747256238.914:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8971 comm="syz.1.814" exe="/syz-executor" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 156.353933][ T40] audit: type=1326 audit(1747256238.924:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8971 comm="syz.1.814" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 156.361161][ T40] audit: type=1326 audit(1747256238.924:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8971 comm="syz.1.814" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 156.370214][ T40] audit: type=1326 audit(1747256238.934:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8971 comm="syz.1.814" exe="/syz-executor" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 156.377811][ T40] audit: type=1326 audit(1747256238.934:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8971 comm="syz.1.814" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 156.384516][ T40] audit: type=1326 audit(1747256238.934:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8971 comm="syz.1.814" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 156.399732][ T8975] FAULT_INJECTION: forcing a failure. [ 156.399732][ T8975] name failslab, interval 1, probability 0, space 0, times 0 [ 156.403609][ T8975] CPU: 0 UID: 0 PID: 8975 Comm: syz.4.815 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 156.403623][ T8975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 156.403630][ T8975] Call Trace: [ 156.403633][ T8975] [ 156.403637][ T8975] dump_stack_lvl+0x16c/0x1f0 [ 156.403660][ T8975] should_fail_ex+0x512/0x640 [ 156.403676][ T8975] ? fs_reclaim_acquire+0xae/0x150 [ 156.403694][ T8975] ? tomoyo_encode2+0x100/0x3e0 [ 156.403709][ T8975] should_failslab+0xc2/0x120 [ 156.403723][ T8975] __kmalloc_noprof+0xd2/0x510 [ 156.403735][ T8975] ? d_absolute_path+0x136/0x1a0 [ 156.403751][ T8975] tomoyo_encode2+0x100/0x3e0 [ 156.403767][ T8975] tomoyo_encode+0x29/0x50 [ 156.403782][ T8975] tomoyo_realpath_from_path+0x18f/0x6e0 [ 156.403801][ T8975] tomoyo_path_number_perm+0x245/0x580 [ 156.403813][ T8975] ? tomoyo_path_number_perm+0x237/0x580 [ 156.403827][ T8975] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 156.403855][ T8975] ? find_held_lock+0x2b/0x80 [ 156.403865][ T8975] ? hook_file_ioctl_common+0x145/0x410 [ 156.403877][ T8975] ? __fget_files+0x204/0x3c0 [ 156.403889][ T8975] ? __fget_files+0x20e/0x3c0 [ 156.403898][ T8975] ? fput+0x10/0xf0 [ 156.403912][ T8975] security_file_ioctl_compat+0x9b/0x240 [ 156.403928][ T8975] __ia32_compat_sys_ioctl+0xc3/0x360 [ 156.403945][ T8975] __do_fast_syscall_32+0x73/0x120 [ 156.403962][ T8975] do_fast_syscall_32+0x32/0x80 [ 156.403978][ T8975] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 156.403991][ T8975] RIP: 0023:0xf708e579 [ 156.403999][ T8975] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 156.404009][ T8975] RSP: 002b:00000000f507e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 156.404020][ T8975] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005321 [ 156.404026][ T8975] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.404032][ T8975] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 156.404049][ T8975] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 156.404056][ T8975] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 156.404070][ T8975] [ 156.404092][ T8975] ERROR: Out of memory at tomoyo_realpath_from_path. [ 156.414495][ T58] kernel write not supported for file /input/mouse0 (pid: 58 comm: kworker/1:1) [ 156.859944][ C3] vxcan1: j1939_tp_rxtimer: 0xffff88805bc6fc00: rx timeout, send abort [ 156.865508][ C3] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805bc6fc00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 157.215359][ T57] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 157.369137][ T57] usb 8-1: Using ep0 maxpacket: 32 [ 157.384408][ T57] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 157.388709][ T57] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 157.392429][ T57] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 157.398854][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 157.402970][ T57] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 157.412328][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 157.417599][ T57] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 157.422867][ T57] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 157.429169][ T57] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 157.441887][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.454236][ T57] usb 8-1: config 0 descriptor?? [ 157.723690][ T57] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 157.741532][ T57] usb 8-1: USB disconnect, device number 5 [ 157.748969][ T57] usblp0: removed [ 157.935196][ T9045] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.823'. [ 158.036413][ T9043] cdrom: dropping to single frame dma [ 159.347617][ T9062] /dev/sr0: Can't open blockdev [ 159.653718][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 159.653766][ T40] audit: type=1326 audit(1747256242.234:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9066 comm="syz.3.839" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ee579 code=0x0 [ 159.662532][ T40] audit: type=1326 audit(1747256242.244:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.5.841" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 160.035191][ T40] audit: type=1326 audit(1747256242.614:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9075 comm="syz.1.842" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 160.325159][ T64] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 160.475185][ T64] usb 9-1: Using ep0 maxpacket: 8 [ 160.479162][ T64] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 160.482287][ T64] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 160.487268][ T64] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.492038][ T64] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.497026][ T64] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 160.503002][ T64] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 160.506176][ T64] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 160.510470][ T64] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.515186][ T64] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.519909][ T64] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 160.527273][ T64] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 160.530407][ T64] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 160.545131][ T64] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.549950][ T64] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.554611][ T64] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 160.561846][ T64] usb 9-1: string descriptor 0 read error: -22 [ 160.563869][ T64] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 160.566793][ T64] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.574848][ T64] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 160.580938][ T9088] netlink: 'syz.3.845': attribute type 1 has an invalid length. [ 160.598260][ T9088] bond6: entered promiscuous mode [ 160.600855][ T9088] 8021q: adding VLAN 0 to HW filter on device bond6 [ 160.618151][ T9088] 8021q: adding VLAN 0 to HW filter on device bond6 [ 160.621370][ T9088] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 160.626485][ T9088] bond6: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 160.633700][ T9088] bond6: (slave vxcan3): making interface the new active one [ 160.637118][ T9088] vxcan3: entered promiscuous mode [ 160.640591][ T9088] bond6: (slave vxcan3): Enslaving as an active interface with an up link [ 160.699986][ T9091] netlink: 60 bytes leftover after parsing attributes in process `syz.3.846'. [ 160.846585][ T64] usb 9-1: USB disconnect, device number 3 [ 160.938247][ T9103] fuse: Bad value for 'user_id' [ 160.940584][ T9103] fuse: Bad value for 'user_id' [ 161.143474][ T9112] macvlan0: entered allmulticast mode [ 161.145581][ T9112] veth1_vlan: entered allmulticast mode [ 161.152344][ T9110] netlink: 'syz.4.850': attribute type 2 has an invalid length. [ 161.155476][ T9110] netlink: 92 bytes leftover after parsing attributes in process `syz.4.850'. [ 161.664594][ T9121] overlayfs: failed to resolve './file0': -2 [ 161.787015][ T40] audit: type=1326 audit(1747256244.374:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.1.859" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 161.870530][ T9132] syz.5.861 (9132): /proc/9131/oom_adj is deprecated, please use /proc/9131/oom_score_adj instead. [ 161.926455][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.860'. [ 161.932645][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.860'. [ 162.014607][ T9130] @: renamed from vlan0 (while UP) [ 162.194181][ T9150] netlink: 'syz.3.866': attribute type 6 has an invalid length. [ 162.206920][ T9150] netlink: 20 bytes leftover after parsing attributes in process `syz.3.866'. [ 162.956035][ T9173] usb usb8: usbfs: process 9173 (syz.5.871) did not claim interface 0 before use [ 162.961685][ T9173] netlink: 132 bytes leftover after parsing attributes in process `syz.5.871'. [ 164.486680][ T9206] bond6: (slave vxcan3): Releasing backup interface [ 164.489107][ T9206] vxcan3: left promiscuous mode [ 164.953062][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.882'. [ 165.245264][ T5955] Bluetooth: hci4: command 0xfc11 tx timeout [ 165.256535][ T5294] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 165.295901][ T9186] sp0: Synchronizing with TNC [ 165.409985][ T6004] libceph: connect (1)[c::]:6789 error -101 [ 165.413557][ T6004] libceph: mon0 (1)[c::]:6789 connect error [ 165.802245][ T9217] ceph: No mds server is up or the cluster is laggy [ 165.806674][ T6004] libceph: connect (1)[c::]:6789 error -101 [ 165.809322][ T6004] libceph: mon0 (1)[c::]:6789 connect error [ 165.901822][ T9228] FAULT_INJECTION: forcing a failure. [ 165.901822][ T9228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.910425][ T9228] CPU: 1 UID: 0 PID: 9228 Comm: syz.1.885 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 165.910450][ T9228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 165.910460][ T9228] Call Trace: [ 165.910466][ T9228] [ 165.910474][ T9228] dump_stack_lvl+0x16c/0x1f0 [ 165.910522][ T9228] should_fail_ex+0x512/0x640 [ 165.910556][ T9228] _copy_from_iter+0x2a4/0x15b0 [ 165.910590][ T9228] ? __alloc_skb+0x200/0x380 [ 165.910611][ T9228] ? __pfx___alloc_skb+0x10/0x10 [ 165.910629][ T9228] ? __pfx__copy_from_iter+0x10/0x10 [ 165.910653][ T9228] ? __lock_acquire+0xaa4/0x1ba0 [ 165.910678][ T9228] ? skb_page_frag_refill+0x11d/0x5a0 [ 165.910707][ T9228] ? sk_page_frag_refill+0x6c/0x300 [ 165.910727][ T9228] tcp_sendmsg_locked+0x1ee6/0x3930 [ 165.910772][ T9228] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 165.910799][ T9228] ? do_raw_spin_lock+0x12c/0x2b0 [ 165.910825][ T9228] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 165.910856][ T9228] ? __local_bh_enable_ip+0xa4/0x120 [ 165.910880][ T9228] tcp_sendmsg+0x2e/0x50 [ 165.910903][ T9228] ? __pfx_tcp_sendmsg+0x10/0x10 [ 165.910926][ T9228] inet_sendmsg+0xb9/0x140 [ 165.910953][ T9228] __sys_sendto+0x431/0x510 [ 165.910972][ T9228] ? __pfx___sys_sendto+0x10/0x10 [ 165.911012][ T9228] ? ksys_write+0x1b9/0x240 [ 165.911030][ T9228] ? __pfx_ksys_write+0x10/0x10 [ 165.911050][ T9228] __ia32_sys_sendto+0xdd/0x1b0 [ 165.911068][ T9228] ? lockdep_hardirqs_on+0x7c/0x110 [ 165.911097][ T9228] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 165.911122][ T9228] __do_fast_syscall_32+0x73/0x120 [ 165.911154][ T9228] do_fast_syscall_32+0x32/0x80 [ 165.911179][ T9228] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 165.911221][ T9228] RIP: 0023:0xf708e579 [ 165.911235][ T9228] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 165.911252][ T9228] RSP: 002b:00000000f507e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 165.911270][ T9228] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000580 [ 165.911281][ T9228] RDX: 000000000000059a RSI: 0000000010008095 RDI: 0000000000000000 [ 165.911291][ T9228] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 165.911301][ T9228] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 165.911310][ T9228] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 165.911354][ T9228] [ 166.016412][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.177912][ T9232] libceph: resolve '400' (ret=-3): failed [ 166.184459][ T9232] netlink: 'syz.3.887': attribute type 3 has an invalid length. [ 166.632266][ T40] audit: type=1326 audit(1747256249.214:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.5.892" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 167.028648][ T5294] Bluetooth: hci3: link tx timeout [ 167.032982][ T5294] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 167.149315][ T9255] loop6: detected capacity change from 0 to 63 [ 167.190307][ T7995] Buffer I/O error on dev loop6, logical block 0, async page read [ 167.205976][ T7995] Buffer I/O error on dev loop6, logical block 0, async page read [ 167.209000][ T7995] Buffer I/O error on dev loop6, logical block 0, async page read [ 167.212368][ T7995] Buffer I/O error on dev loop6, logical block 0, async page read [ 167.215890][ T7995] Buffer I/O error on dev loop6, logical block 0, async page read [ 167.219766][ T9255] Buffer I/O error on dev loop6, logical block 0, async page read [ 167.224707][ T9255] Buffer I/O error on dev loop6, logical block 0, async page read [ 167.235244][ T9255] Buffer I/O error on dev loop6, logical block 0, async page read [ 167.237839][ T9255] Buffer I/O error on dev loop6, logical block 0, async page read [ 167.240328][ T9255] Buffer I/O error on dev loop6, logical block 0, async page read [ 168.144002][ T9273] overlayfs: failed to resolve './file0': -2 [ 168.466065][ T34] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 168.635480][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 168.648902][ T34] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 168.658288][ T34] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 168.672698][ T34] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 168.677275][ T34] usb 6-1: Product: syz [ 168.678805][ T34] usb 6-1: Manufacturer: syz [ 168.680394][ T34] usb 6-1: SerialNumber: syz [ 168.696284][ T34] usb 6-1: config 0 descriptor?? [ 168.710269][ T9281] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 169.095569][ T5955] Bluetooth: hci3: command 0x0405 tx timeout [ 169.407296][ T34] usb 6-1: USB disconnect, device number 6 [ 169.665141][ T6341] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 169.696355][ T9301] block nbd3: NBD_DISCONNECT [ 169.698307][ T9301] block nbd3: Disconnected due to user request. [ 169.700418][ T9301] block nbd3: shutting down sockets [ 169.835126][ T6341] usb 9-1: Using ep0 maxpacket: 32 [ 169.839019][ T6341] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 169.841678][ T6341] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 169.844466][ T6341] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.848088][ T6341] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 169.852589][ T6341] usb 9-1: config 1 has no interface number 0 [ 169.854751][ T6341] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 169.858075][ T6341] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.870849][ T6341] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 170.133472][ T6341] snd_usb_pod 9-1:1.1: set_interface failed [ 170.136468][ T6341] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 170.142486][ T6341] snd_usb_pod 9-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 170.148357][ T6341] usb 9-1: USB disconnect, device number 4 [ 170.205799][ T5294] Bluetooth: hci2: command 0x0406 tx timeout [ 170.420346][ T9297] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 170.423961][ T9297] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 170.431707][ T9297] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 170.433884][ T9297] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 170.438534][ T9297] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 170.440838][ T9297] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 170.446359][ T9297] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 170.450194][ T9297] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 170.452430][ T9297] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 170.526187][ T9315] snd_dummy snd_dummy.0: control 2:3:128:syz0:536870920 is already present [ 170.562564][ T9320] fuse: Invalid rootmode [ 170.616483][ T9313] overlayfs: failed to resolve './file0': -2 [ 171.656350][ T5956] Bluetooth: hci0: command 0x0406 tx timeout [ 172.445361][ T5956] Bluetooth: hci1: command 0x0c1a tx timeout [ 172.445457][ T5294] Bluetooth: hci2: command 0x0406 tx timeout [ 172.525341][ T5294] Bluetooth: hci3: command 0x0405 tx timeout [ 172.850881][ T9355] block device autoloading is deprecated and will be removed. [ 172.854660][ T9355] syz.1.923: attempt to access beyond end of device [ 172.854660][ T9355] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 173.545173][ T57] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 173.645255][ T9368] tmpfs: Unknown parameter 'usrqǩ9uota_block_hardlimi' [ 173.721596][ T57] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.725747][ T57] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 173.733195][ T57] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 173.735169][ T5294] Bluetooth: hci0: command 0x0406 tx timeout [ 173.752424][ T57] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.762577][ T57] usb 9-1: Product: syz [ 173.766438][ T57] usb 9-1: Manufacturer: syz [ 173.769744][ T57] usb 9-1: SerialNumber: syz [ 173.776220][ T57] usb 9-1: config 0 descriptor?? [ 173.812815][ T9367] overlayfs: failed to resolve './file0': -2 [ 173.868241][ T40] audit: type=1326 audit(1747256256.454:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.5.927" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 173.935506][ T9373] FAULT_INJECTION: forcing a failure. [ 173.935506][ T9373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.939900][ T9373] CPU: 1 UID: 0 PID: 9373 Comm: syz.3.928 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 173.939915][ T9373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 173.939922][ T9373] Call Trace: [ 173.939926][ T9373] [ 173.939930][ T9373] dump_stack_lvl+0x16c/0x1f0 [ 173.939949][ T9373] should_fail_ex+0x512/0x640 [ 173.939967][ T9373] _copy_to_user+0x32/0xd0 [ 173.939985][ T9373] simple_read_from_buffer+0xcb/0x170 [ 173.940002][ T9373] proc_fail_nth_read+0x197/0x270 [ 173.940018][ T9373] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.940034][ T9373] ? rw_verify_area+0xcf/0x680 [ 173.940049][ T9373] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.940065][ T9373] vfs_read+0x1de/0xc70 [ 173.940077][ T9373] ? __pfx___mutex_lock+0x10/0x10 [ 173.940093][ T9373] ? __pfx_vfs_read+0x10/0x10 [ 173.940107][ T9373] ? __fget_files+0x20e/0x3c0 [ 173.940121][ T9373] ksys_read+0x12a/0x240 [ 173.940130][ T9373] ? __pfx_ksys_read+0x10/0x10 [ 173.940141][ T9373] ? rcu_is_watching+0x12/0xc0 [ 173.940154][ T9373] __do_fast_syscall_32+0x73/0x120 [ 173.940172][ T9373] do_fast_syscall_32+0x32/0x80 [ 173.940188][ T9373] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.940201][ T9373] RIP: 0023:0xf70ee579 [ 173.940210][ T9373] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 173.940220][ T9373] RSP: 002b:00000000f50de590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 173.940230][ T9373] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50de620 [ 173.940236][ T9373] RDX: 000000000000000f RSI: 00000000f7452ff4 RDI: 0000000000000000 [ 173.940242][ T9373] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 173.940248][ T9373] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 173.940253][ T9373] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.940266][ T9373] [ 174.526577][ T5955] Bluetooth: hci2: command 0x0406 tx timeout [ 174.529623][ T5956] Bluetooth: hci1: command 0x0c1a tx timeout [ 174.605234][ T5956] Bluetooth: hci3: command 0x0405 tx timeout [ 174.631584][ T57] usb 9-1: USB disconnect, device number 5 [ 174.815028][ T9396] FAULT_INJECTION: forcing a failure. [ 174.815028][ T9396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.820633][ T9396] CPU: 3 UID: 0 PID: 9396 Comm: syz.3.936 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 174.820660][ T9396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 174.820667][ T9396] Call Trace: [ 174.820672][ T9396] [ 174.820676][ T9396] dump_stack_lvl+0x16c/0x1f0 [ 174.820696][ T9396] should_fail_ex+0x512/0x640 [ 174.820715][ T9396] _copy_to_user+0x32/0xd0 [ 174.820733][ T9396] mptcp_put_subflow_data+0xbb/0x120 [ 174.820746][ T9396] mptcp_getsockopt_subflow_addrs+0x271/0x360 [ 174.820759][ T9396] ? __pfx_mptcp_getsockopt_subflow_addrs+0x10/0x10 [ 174.820771][ T9396] ? __lock_acquire+0xaa4/0x1ba0 [ 174.820795][ T9396] ? find_held_lock+0x2b/0x80 [ 174.820806][ T9396] ? mptcp_getsockopt+0x16a/0xd70 [ 174.820816][ T9396] ? rcu_is_watching+0x12/0xc0 [ 174.820826][ T9396] ? __local_bh_enable_ip+0xa4/0x120 [ 174.820840][ T9396] mptcp_getsockopt+0x558/0xd70 [ 174.820851][ T9396] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 174.820863][ T9396] ? __pfx_aa_sk_perm+0x10/0x10 [ 174.820877][ T9396] ? find_held_lock+0x2b/0x80 [ 174.820888][ T9396] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 174.820905][ T9396] do_sock_getsockopt+0x3ff/0x800 [ 174.820921][ T9396] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 174.820936][ T9396] ? __fget_files+0x204/0x3c0 [ 174.820953][ T9396] __sys_getsockopt+0x123/0x1a0 [ 174.820968][ T9396] __ia32_sys_getsockopt+0xbc/0x160 [ 174.820979][ T9396] ? lockdep_hardirqs_on+0x7c/0x110 [ 174.820994][ T9396] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 174.821010][ T9396] __do_fast_syscall_32+0x73/0x120 [ 174.821027][ T9396] do_fast_syscall_32+0x32/0x80 [ 174.821043][ T9396] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.821056][ T9396] RIP: 0023:0xf70ee579 [ 174.821064][ T9396] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 174.821075][ T9396] RSP: 002b:00000000f50de55c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 174.821085][ T9396] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011c [ 174.821092][ T9396] RDX: 0000000000000003 RSI: 0000000080000040 RDI: 0000000080000140 [ 174.821098][ T9396] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 174.821103][ T9396] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 174.821109][ T9396] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.821122][ T9396] [ 175.011028][ T9407] netlink: 'syz.3.940': attribute type 5 has an invalid length. [ 175.042182][ T9406] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 175.044299][ T9406] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 175.052447][ T9406] vhci_hcd vhci_hcd.0: Device attached [ 175.059070][ T40] audit: type=1326 audit(1747256257.644:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.1.941" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 175.365142][ T6341] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 175.380775][ T9420] [ 175.381798][ T9420] ====================================================== [ 175.384052][ T9420] WARNING: possible circular locking dependency detected [ 175.386223][ T9420] 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 Not tainted [ 175.389127][ T9420] ------------------------------------------------------ [ 175.392411][ T9420] syz.4.943/9420 is trying to acquire lock: [ 175.394260][ T9420] ffff88801387b940 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 175.397327][ T9420] [ 175.397327][ T9420] but task is already holding lock: [ 175.400192][ T9420] ffff88804ff7d088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 175.403742][ T9420] [ 175.403742][ T9420] which lock already depends on the new lock. [ 175.403742][ T9420] [ 175.406916][ T9420] [ 175.406916][ T9420] the existing dependency chain (in reverse order) is: [ 175.409706][ T9420] [ 175.409706][ T9420] -> #3 (&of->mutex){+.+.}-{4:4}: [ 175.411994][ T9420] __mutex_lock+0x199/0xb90 [ 175.413597][ T9420] kernfs_seq_start+0x4d/0x240 [ 175.415215][ T9420] seq_read_iter+0x2c1/0x12c0 [ 175.416864][ T9420] kernfs_fop_read_iter+0x40f/0x5a0 [ 175.418632][ T9420] copy_splice_read+0x615/0xba0 [ 175.420334][ T9420] do_splice_read+0x285/0x370 [ 175.421908][ T9420] splice_direct_to_actor+0x2a1/0xa30 [ 175.423633][ T9420] do_splice_direct+0x174/0x240 [ 175.425285][ T9420] do_sendfile+0xafd/0xe50 [ 175.426848][ T9420] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 175.428811][ T9420] __do_fast_syscall_32+0x73/0x120 [ 175.430565][ T9420] do_fast_syscall_32+0x32/0x80 [ 175.432289][ T9420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.434382][ T9420] [ 175.434382][ T9420] -> #2 (&p->lock){+.+.}-{4:4}: [ 175.436544][ T9420] __mutex_lock+0x199/0xb90 [ 175.438119][ T9420] seq_read_iter+0xe1/0x12c0 [ 175.439717][ T9420] kernfs_fop_read_iter+0x40f/0x5a0 [ 175.441504][ T9420] copy_splice_read+0x615/0xba0 [ 175.443181][ T9420] do_splice_read+0x285/0x370 [ 175.444828][ T9420] splice_file_to_pipe+0x109/0x120 [ 175.446842][ T9420] do_sendfile+0x400/0xe50 [ 175.448945][ T9420] __ia32_sys_sendfile64+0x1d7/0x220 [ 175.451411][ T9420] __do_fast_syscall_32+0x73/0x120 [ 175.453779][ T9420] do_fast_syscall_32+0x32/0x80 [ 175.456036][ T9420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.458860][ T9420] [ 175.458860][ T9420] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 175.461945][ T9420] __mutex_lock+0x199/0xb90 [ 175.464113][ T9420] anon_pipe_write+0x15d/0x1a70 [ 175.466199][ T9420] __kernel_write_iter+0x71d/0xa90 [ 175.467962][ T9420] __kernel_write+0xf5/0x140 [ 175.469560][ T9420] autofs_notify_daemon+0x4db/0xd60 [ 175.471333][ T9420] autofs_wait+0x10ca/0x1a70 [ 175.472941][ T9420] autofs_mount_wait+0x132/0x380 [ 175.474641][ T9420] autofs_d_automount+0x390/0x7f0 [ 175.476413][ T9420] __traverse_mounts+0x192/0x790 [ 175.478114][ T9420] step_into+0x5aa/0x2270 [ 175.479664][ T9420] path_openat+0x749/0x2d40 [ 175.481268][ T9420] do_filp_open+0x20b/0x470 [ 175.482845][ T9420] do_sys_openat2+0x11b/0x1d0 [ 175.484490][ T9420] __ia32_compat_sys_openat+0x16d/0x210 [ 175.486388][ T9420] __do_fast_syscall_32+0x73/0x120 [ 175.488160][ T9420] do_fast_syscall_32+0x32/0x80 [ 175.489829][ T9420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.491986][ T9420] [ 175.491986][ T9420] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 175.494381][ T9420] __lock_acquire+0x1173/0x1ba0 [ 175.496097][ T9420] lock_acquire+0x179/0x350 [ 175.497666][ T9420] __mutex_lock+0x199/0xb90 [ 175.499232][ T9420] autofs_notify_daemon+0x4a6/0xd60 [ 175.501052][ T9420] autofs_wait+0x10ca/0x1a70 [ 175.502647][ T9420] autofs_mount_wait+0x132/0x380 [ 175.504360][ T9420] autofs_d_automount+0x390/0x7f0 [ 175.506158][ T9420] __traverse_mounts+0x192/0x790 [ 175.507871][ T9420] step_into+0x5aa/0x2270 [ 175.509391][ T9420] walk_component+0xfc/0x5b0 [ 175.511017][ T9420] path_lookupat+0x17e/0x780 [ 175.512703][ T9420] filename_lookup+0x224/0x5f0 [ 175.514332][ T9420] kern_path+0x35/0x50 [ 175.515829][ T9420] lookup_bdev+0xd8/0x280 [ 175.517357][ T9420] resume_store+0x1d6/0x460 [ 175.518936][ T9420] kobj_attr_store+0x55/0x80 [ 175.520563][ T9420] sysfs_kf_write+0xf2/0x150 [ 175.522182][ T9420] kernfs_fop_write_iter+0x351/0x510 [ 175.524022][ T9420] vfs_write+0x5bd/0x1180 [ 175.525546][ T9420] ksys_write+0x12a/0x240 [ 175.527174][ T9420] __do_fast_syscall_32+0x73/0x120 [ 175.528945][ T9420] do_fast_syscall_32+0x32/0x80 [ 175.530645][ T9420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.532814][ T9420] [ 175.532814][ T9420] other info that might help us debug this: [ 175.532814][ T9420] [ 175.535973][ T9420] Chain exists of: [ 175.535973][ T9420] &sbi->pipe_mutex --> &p->lock --> &of->mutex [ 175.535973][ T9420] [ 175.539639][ T9420] Possible unsafe locking scenario: [ 175.539639][ T9420] [ 175.541939][ T9420] CPU0 CPU1 [ 175.543620][ T9420] ---- ---- [ 175.545288][ T9420] lock(&of->mutex); [ 175.546588][ T9420] lock(&p->lock); [ 175.548566][ T9420] lock(&of->mutex); [ 175.550574][ T9420] lock(&sbi->pipe_mutex); [ 175.552007][ T9420] [ 175.552007][ T9420] *** DEADLOCK *** [ 175.552007][ T9420] [ 175.554515][ T9420] 4 locks held by syz.4.943/9420: [ 175.556070][ T9420] #0: ffff8880241a0d38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 175.558895][ T9420] #1: ffff8880264b0420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 175.561671][ T9420] #2: ffff88804ff7d088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 175.564659][ T9420] #3: ffff8880412d9e18 (kn->active#73){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 175.567758][ T9420] [ 175.567758][ T9420] stack backtrace: [ 175.569594][ T9420] CPU: 1 UID: 0 PID: 9420 Comm: syz.4.943 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 175.569608][ T9420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 175.569614][ T9420] Call Trace: [ 175.569619][ T9420] [ 175.569624][ T9420] dump_stack_lvl+0x116/0x1f0 [ 175.569641][ T9420] print_circular_bug+0x275/0x350 [ 175.569655][ T9420] check_noncircular+0x14c/0x170 [ 175.569669][ T9420] __lock_acquire+0x1173/0x1ba0 [ 175.569686][ T9420] lock_acquire+0x179/0x350 [ 175.569698][ T9420] ? autofs_notify_daemon+0x4a6/0xd60 [ 175.569709][ T9420] ? __pfx___might_resched+0x10/0x10 [ 175.569722][ T9420] __mutex_lock+0x199/0xb90 [ 175.569737][ T9420] ? autofs_notify_daemon+0x4a6/0xd60 [ 175.569746][ T9420] ? autofs_notify_daemon+0x45a/0xd60 [ 175.569756][ T9420] ? autofs_notify_daemon+0x4a6/0xd60 [ 175.569765][ T9420] ? __pfx___mutex_lock+0x10/0x10 [ 175.569780][ T9420] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 175.569793][ T9420] ? lockdep_hardirqs_on+0x7c/0x110 [ 175.569807][ T9420] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 175.569824][ T9420] ? from_kgid_munged+0xab/0x130 [ 175.569840][ T9420] ? autofs_notify_daemon+0x4a6/0xd60 [ 175.569849][ T9420] autofs_notify_daemon+0x4a6/0xd60 [ 175.569858][ T9420] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 175.569867][ T9420] ? sysfs_kf_write+0xf2/0x150 [ 175.569881][ T9420] ? kernfs_fop_write_iter+0x351/0x510 [ 175.569894][ T9420] ? vfs_write+0x5bd/0x1180 [ 175.569908][ T9420] ? lockdep_init_map_type+0x5c/0x280 [ 175.569922][ T9420] ? lockdep_init_map_type+0x5c/0x280 [ 175.569937][ T9420] autofs_wait+0x10ca/0x1a70 [ 175.569947][ T9420] ? __pfx_autofs_wait+0x10/0x10 [ 175.569956][ T9420] ? __pfx_path_check_mount+0x10/0x10 [ 175.569968][ T9420] ? find_held_lock+0x2b/0x80 [ 175.569978][ T9420] ? path_has_submounts+0xcb/0x120 [ 175.569992][ T9420] ? do_raw_spin_unlock+0x172/0x230 [ 175.570008][ T9420] ? find_held_lock+0x2b/0x80 [ 175.570018][ T9420] autofs_mount_wait+0x132/0x380 [ 175.570034][ T9420] autofs_d_automount+0x390/0x7f0 [ 175.570050][ T9420] __traverse_mounts+0x192/0x790 [ 175.570064][ T9420] step_into+0x5aa/0x2270 [ 175.570080][ T9420] ? __pfx_step_into+0x10/0x10 [ 175.570095][ T9420] ? __pfx___up_read+0x10/0x10 [ 175.570110][ T9420] ? walk_component+0x35e/0x5b0 [ 175.570125][ T9420] ? lookup_fast+0x156/0x610 [ 175.570140][ T9420] walk_component+0xfc/0x5b0 [ 175.570156][ T9420] path_lookupat+0x17e/0x780 [ 175.570173][ T9420] filename_lookup+0x224/0x5f0 [ 175.570183][ T9420] ? __pfx_filename_lookup+0x10/0x10 [ 175.570197][ T9420] ? getname_kernel+0x52/0x370 [ 175.570208][ T9420] ? __asan_memcpy+0x3c/0x60 [ 175.570219][ T9420] kern_path+0x35/0x50 [ 175.570227][ T9420] lookup_bdev+0xd8/0x280 [ 175.570240][ T9420] ? __pfx_lookup_bdev+0x10/0x10 [ 175.570252][ T9420] ? resume_store+0x1b8/0x460 [ 175.570268][ T9420] ? __asan_memcpy+0x3c/0x60 [ 175.570277][ T9420] resume_store+0x1d6/0x460 [ 175.570293][ T9420] ? __pfx_resume_store+0x10/0x10 [ 175.570310][ T9420] ? find_held_lock+0x2b/0x80 [ 175.570320][ T9420] ? __pfx_resume_store+0x10/0x10 [ 175.570335][ T9420] kobj_attr_store+0x55/0x80 [ 175.570350][ T9420] ? __pfx_kobj_attr_store+0x10/0x10 [ 175.570365][ T9420] sysfs_kf_write+0xf2/0x150 [ 175.570380][ T9420] kernfs_fop_write_iter+0x351/0x510 [ 175.570393][ T9420] ? __pfx_sysfs_kf_write+0x10/0x10 [ 175.570408][ T9420] vfs_write+0x5bd/0x1180 [ 175.570418][ T9420] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 175.570432][ T9420] ? __pfx___mutex_lock+0x10/0x10 [ 175.570446][ T9420] ? __pfx_vfs_write+0x10/0x10 [ 175.570459][ T9420] ksys_write+0x12a/0x240 [ 175.570469][ T9420] ? __pfx_ksys_write+0x10/0x10 [ 175.570479][ T9420] ? rcu_is_watching+0x12/0xc0 [ 175.570489][ T9420] __do_fast_syscall_32+0x73/0x120 [ 175.570510][ T9420] do_fast_syscall_32+0x32/0x80 [ 175.570525][ T9420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.570538][ T9420] RIP: 0023:0xf708e579 [ 175.570546][ T9420] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 175.570556][ T9420] RSP: 002b:00000000f507e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 175.570565][ T9420] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 175.570572][ T9420] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.570578][ T9420] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 175.570583][ T9420] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 175.570589][ T9420] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.570598][ T9420] [ 175.722881][ T9410] vhci_hcd: connection reset by peer [ 175.725555][ T13] vhci_hcd: stop threads [ 175.727399][ T13] vhci_hcd: release socket [ 175.729327][ T13] vhci_hcd: disconnect device [ 175.731539][ T9420] FAULT_INJECTION: forcing a failure. [ 175.731539][ T9420] name failslab, interval 1, probability 0, space 0, times 0 [ 175.737381][ T9420] CPU: 0 UID: 0 PID: 9420 Comm: syz.4.943 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 175.737407][ T9420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 175.737417][ T9420] Call Trace: [ 175.737424][ T9420] [ 175.737431][ T9420] dump_stack_lvl+0x16c/0x1f0 [ 175.737459][ T9420] should_fail_ex+0x512/0x640 [ 175.737486][ T9420] should_failslab+0xc2/0x120 [ 175.737509][ T9420] __kmalloc_cache_noprof+0x6a/0x3e0 [ 175.737533][ T9420] ? percpu_ref_init+0xec/0x410 [ 175.737555][ T9420] ? __pfx_no_op+0x10/0x10 [ 175.737575][ T9420] percpu_ref_init+0xec/0x410 [ 175.737597][ T9420] mddev_init+0x6a/0x740 [ 175.737617][ T9420] md_alloc+0xc7/0x1080 [ 175.737635][ T9420] md_probe+0x6e/0xd0 [ 175.737649][ T9420] ? __pfx_md_probe+0x10/0x10 [ 175.737663][ T9420] blk_probe_dev+0x116/0x1a0 [ 175.737685][ T9420] blk_request_module+0x16/0xb0 [ 175.737709][ T9420] blkdev_get_no_open+0x9b/0x100 [ 175.737732][ T9420] bdev_file_open_by_dev+0x70/0x210 [ 175.737757][ T9420] swsusp_check+0x74/0x420 [ 175.737775][ T9420] software_resume+0x6f/0x470 [ 175.737800][ T9420] resume_store+0x247/0x460 [ 175.737824][ T9420] ? __pfx_resume_store+0x10/0x10 [ 175.737852][ T9420] ? find_held_lock+0x2b/0x80 [ 175.737869][ T9420] ? __pfx_resume_store+0x10/0x10 [ 175.737893][ T9420] kobj_attr_store+0x55/0x80 [ 175.737918][ T9420] ? __pfx_kobj_attr_store+0x10/0x10 [ 175.737941][ T9420] sysfs_kf_write+0xf2/0x150 [ 175.737966][ T9420] kernfs_fop_write_iter+0x351/0x510 [ 175.737987][ T9420] ? __pfx_sysfs_kf_write+0x10/0x10 [ 175.738011][ T9420] vfs_write+0x5bd/0x1180 [ 175.738027][ T9420] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 175.738049][ T9420] ? __pfx___mutex_lock+0x10/0x10 [ 175.738071][ T9420] ? __pfx_vfs_write+0x10/0x10 [ 175.738093][ T9420] ksys_write+0x12a/0x240 [ 175.738110][ T9420] ? __pfx_ksys_write+0x10/0x10 [ 175.738126][ T9420] ? rcu_is_watching+0x12/0xc0 [ 175.738142][ T9420] __do_fast_syscall_32+0x73/0x120 [ 175.738168][ T9420] do_fast_syscall_32+0x32/0x80 [ 175.738194][ T9420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.738216][ T9420] RIP: 0023:0xf708e579 [ 175.738229][ T9420] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 175.738246][ T9420] RSP: 002b:00000000f507e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 175.738262][ T9420] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 175.738272][ T9420] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.738283][ T9420] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 175.738293][ T9420] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 175.738302][ T9420] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.738318][ T9420] [ 175.738359][ T9420] PM: Image not found (code -6) [ 176.605243][ T5294] Bluetooth: hci1: command 0x0c1a tx timeout [ 176.695133][ T5294] Bluetooth: hci3: command 0x0405 tx timeout [ 180.515902][ T6341] vhci_hcd: vhci_device speed not set VM DIAGNOSIS: 20:57:38 Registers: info registers vcpu 0 CPU#0 RAX=000000000034b2e4 RBX=0000000000000000 RCX=ffffffff8b6973e9 RDX=ffffed10056465be RSI=ffffffff8bf47260 RDI=ffffffff81913781 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000000 R9 =ffffed10056465bd R10=ffff88802b232deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90851e10 R15=0000000000000000 RIP=ffffffff8b695c7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977ea000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000802d9000 CR3=000000006ca9f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ef15a79ce628f68a 30eca2944bfc2d6e ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7aec0c023919c496 d1b2e74e69045cc4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a61e4b92bbc2752f d056396e083dd3e7 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9424830b3033049e c5fd6aefa4f6153b ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000060 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000020 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c2c088054447dc79 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5553e80600000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fff3a64dac9e4d9f e2721f41cb2fdd77 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000007bce0ca5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9ab6dc4e080242e3 9cbcb9484358ec73 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 93c799d575081dd6 620f80c4a11db94b ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854c3af5 RDI=ffffffff9ade1c40 RBP=ffffffff9ade1c00 RSP=ffffc90021d4ea98 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000039 R14=ffffffff9ade1c00 R15=ffffffff854c3a90 RIP=ffffffff854c3b1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880978ea000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f507dfac CR3=0000000028310000 CR4=00352ef0 DR0=0000000000000007 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=0000000000000000 RCX=ffffffff822aa9a3 RDX=0000000000000000 RSI=ffffffff8bf47260 RDI=ffff888025baa884 RBP=ffff888025baa440 RSP=ffffc90021cff548 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000007c2b R12=ffff8880419b3af0 R13=0000000000000001 R14=0000000000000000 R15=0000000000005723 RIP=ffffffff81a14920 RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979ea000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000081000000 CR3=000000004c0f2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=5530a7d619d8ac7a c1bd245c170908ff 5530a7d619d8ac7a c1bd245c170908ff 5530a7d619d8ac7a c1bd245c170908ff 5530a7d619d8ac7a c1bd245c170908ff ZMM18=fb29e61bc1e28c5e b735e28b40a9bc0c fb29e61bc1e28c5e b735e28b40a9bc0c fb29e61bc1e28c5e b735e28b40a9bc0c fb29e61bc1e28c5e b735e28b40a9bc0c ZMM19=c60a000000000000 0000000000000005 c60a000000000000 0000000000000004 c60a000000000000 0000000000000003 c60a000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03028002002cae03 03fc02002cac0303 fe02002caa037402 002ca80320048400 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2ca403dd28740608 2c9e030c40a08082 002c9c0300408080 82002c9c03049bba ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0484002c98030002 002c9603aaaaaaaa aa01ffffffffffff fffff5082c8c03ff ZMM24=40a9bc0c40a9bc0c 40a9bc0c40a9bc0c 40a9bc0c40a9bc0c 40a9bc0c40a9bc0c 40a9bc0c40a9bc0c 40a9bc0c40a9bc0c 40a9bc0c40a9bc0c 40a9bc0c40a9bc0c ZMM25=b735e28bb735e28b b735e28bb735e28b b735e28bb735e28b b735e28bb735e28b b735e28bb735e28b b735e28bb735e28b b735e28bb735e28b b735e28bb735e28b ZMM26=c1e28c5ec1e28c5e c1e28c5ec1e28c5e c1e28c5ec1e28c5e c1e28c5ec1e28c5e c1e28c5ec1e28c5e c1e28c5ec1e28c5e c1e28c5ec1e28c5e c1e28c5ec1e28c5e ZMM27=fb29e61bfb29e61b fb29e61bfb29e61b fb29e61bfb29e61b fb29e61bfb29e61b fb29e61bfb29e61b fb29e61bfb29e61b fb29e61bfb29e61b fb29e61bfb29e61b ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=c50a0000c50a0000 c50a0000c50a0000 c50a0000c50a0000 c50a0000c50a0000 c50a0000c50a0000 c50a0000c50a0000 c50a0000c50a0000 c50a0000c50a0000 info registers vcpu 3 CPU#3 RAX=00000000001d30cc RBX=0000000000000003 RCX=ffffffff8b6973e9 RDX=ffffed10056a65be RSI=ffffffff8bf47260 RDI=ffffffff81913781 RBP=ffffed10037e1000 RSP=ffffc9000048fdf8 R8 =0000000000000000 R9 =ffffed10056a65bd R10=ffff88802b532deb R11=ffffffff9ad82750 R12=0000000000000003 R13=ffff88801bf08000 R14=ffffffff90851e10 R15=0000000000000000 RIP=ffffffff8b695c7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097aea000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f31eff8 CR3=000000006c587000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000