last executing test programs: 1m52.540778985s ago: executing program 0 (id=884): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) (fail_nth: 3) 1m52.540539719s ago: executing program 0 (id=885): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r2, &(0x7f0000000340)=""/79, 0x4f) getdents(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) syz_io_uring_setup(0x259f, &(0x7f0000000740)={0x0, 0xd778, 0x11e4, 0x0, 0xeb, 0x0, r2}, &(0x7f0000000280), &(0x7f00000002c0)) ioctl$EXT4_IOC_MIGRATE(r1, 0xff03) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='comm\x00') r6 = io_uring_setup(0x64a9, &(0x7f0000000680)={0x0, 0xa6df, 0x8, 0x2, 0x28f}) syz_io_uring_setup(0x3e67, &(0x7f0000000100)={0x0, 0x9845, 0x200, 0x2, 0x65, 0x0, r6}, &(0x7f0000000180), &(0x7f00000001c0)) read$FUSE(r5, &(0x7f0000002cc0)={0x2020}, 0x2020) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a1c000000160a0101000000000000000003000001080007400000000034000000090a010800000000000000000700000808000740e1ffff26080005400000000608000c4000014000080007400000000d1c000000120a000000000000000000000e00000008000340000000092c010000140a01020000000000000000050000040900020073797a3100000000e60008001f0f776d64a6df06dabd42198b8a7a7d99e50d8e65f45d5080e8122411df63415abfd7f44bfb0467cb8314b51f6f3c2cba9a55f14b029a3cef0bb3afc1aea27f59f11a07e3f70d8c18f87f7716772a6f730d1bb5fa337b7639286bdfcbec22aa07e1645dde6277d34ff7a493c1ad363844f1d29b871331f52c1fa1239c27ecb4b6d31f6e25838588b8d3e9d21201d33c9ae1d71e7f0db7d7133cd59d68f95bc3f577ed58711e7f52adac1f9d8f6990503ee52d5308bff1772e425b691cc4df2d93f912a15f76c3e874994923f2d5dc4ddcd7c55bcd75a771ea1076fbb7c042cdb27200000900010073797a30000000000900020073797a30000000000900010073797a300000000040000000120a010800000000000000000a0000062c0004800600014008000000050002002f000000050002002f0000000600014060020000060001400016000038000000160a010800000000000000000300000208000740000000000c000540000000000000000408000740000000010800074000000003140000001100010000000000000000000100000a"], 0x238}, 0x1, 0x0, 0x0, 0x40040}, 0x4010) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000017c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="000000000000000018003780080001007674b779c89902800800050000000000050027000000f900040014"], 0x44}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c9000c000802"], 0x11) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) ioctl$SG_BLKTRACESETUP(r5, 0xc0401273, &(0x7f0000000000)={'\x00', 0x2ef8, 0x6a4a, 0x8, 0xffffffffffff7fff, 0xb, r0}) 1m52.522349458s ago: executing program 0 (id=886): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) openat$tun(0xffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x52c, 0x1ec, 0x39c, 0x2b4, 0x2b4, 0x10c, 0x464, 0x464, 0x464, 0x464, 0x464, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'lo\x00', 'bond0\x00'}, 0x0, 0xc8, 0x10c, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x2b4}}, {{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@local}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x588) r3 = eventfd(0x0) writev(r3, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="aba732e9970a72a4", 0x8}], 0x1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f00000001c0)={0x2000000, 0x9, 0x2, {0x1, @raw_data="7160795237b7120a0082785a69fa9beaaa7b08eb04cb6777082f86e523d94f6fdf229aed642d559a5e0a2724736ee88c14772b8ad2c9e49c7b337b739851408431d878d464ae5c974631f47d096d30e469e782e8a8bcb319cb180e82772eb750146251e633710a08c23e5dd61be10569705807213929f2879679263868388087946507b7ca339f52033b689a688927e4f78f395267e271713b4ab6c9d70e3679429bf7450305153e8abe0bfeafbe72406b48fe1ed5059d6b3290cc3dc1950427d29066d9fe2e7618"}}) 1m51.631031336s ago: executing program 0 (id=895): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x76) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000040)='./bus\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x0) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) 1m51.630823365s ago: executing program 0 (id=896): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000410007010000000000000000017c00002c0004802c005000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x840) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0x178, 0x394, 0x1c0, 0x178, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'team_slave_0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @mcast1, [], [0x0, 0x0, 0x0, 0xff000000], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) getsockopt$nfc_llcp(0xffffffffffffffff, 0x114, 0x271d, 0x0, 0x20000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x80045b10, &(0x7f0000000040)) shutdown(r1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$CDROM_LOCKDOOR(r6, 0x5329, 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x103) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000006800)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x6000}}) statx(0xffffffffffffff9c, &(0x7f0000004c40)='./file0\x00', 0x0, 0x6000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$netlink(0x10, 0x3, 0x0) 1m51.429483565s ago: executing program 0 (id=899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x400, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet(0x2, 0x3, 0x6) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x2, @win={{0x6, 0x40, 0x3, 0x200}, 0x1, 0x0, &(0x7f0000000240)={{0x4, 0x5, 0x2, 0x7f}, &(0x7f0000000080)={{0xf0, 0x7, 0x9, 0x4596}, &(0x7f0000000040)={{0x5, 0x3, 0x4, 0x7}}}}, 0x1, &(0x7f0000000400)="702b2c1851ba3122048caef0f13e13ee255247c0a801b5aa0b5ae57c1b48ae2ab056c274e5239ddcdd571427cd4833bb91c3d59bfc43d454d09c", 0x35}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) 1m51.427865674s ago: executing program 32 (id=899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x400, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet(0x2, 0x3, 0x6) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x2, @win={{0x6, 0x40, 0x3, 0x200}, 0x1, 0x0, &(0x7f0000000240)={{0x4, 0x5, 0x2, 0x7f}, &(0x7f0000000080)={{0xf0, 0x7, 0x9, 0x4596}, &(0x7f0000000040)={{0x5, 0x3, 0x4, 0x7}}}}, 0x1, &(0x7f0000000400)="702b2c1851ba3122048caef0f13e13ee255247c0a801b5aa0b5ae57c1b48ae2ab056c274e5239ddcdd571427cd4833bb91c3d59bfc43d454d09c", 0x35}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) 5.529796565s ago: executing program 2 (id=1745): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="41000000010001", 0x7) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3.699522231s ago: executing program 2 (id=1759): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) fcntl$setsig(r3, 0xa, 0x21) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x800000080010000) openat(r3, &(0x7f0000004400)='./bus\x00', 0x463142, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB="1a840000", @ANYRES16=r5, @ANYBLOB="290a00000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="24000300"/36], 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRES32=r4, @ANYBLOB="7bb2b6db7eff0000006c36e847059f87c2cba4dcd51668c7494bc3085c220c00003293c559b5a1f7886e69c30663292af1cfa46b33cdd882e747286c8dceeb77f8124b2095c9e5b2367eecc30058"], 0x40}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) sendmsg$inet(r6, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x40080) r7 = socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0xa00810, &(0x7f0000000500)=ANY=[@ANYRESHEX=r7, @ANYBLOB="3787407455f6961d03705d9ac76778818f44ac41fb24f8e69415f02a8b20798bf0fcf663a53614f467d19ade65db926d6905b81c55ea8ec117a6ecd73615585926fed7a9971c212aa1037d0c521ebb30ac84b4511d1f9924446ee6830ebc1009dcedd9edf7080fe3e2e871a9432145a47fb785c9f7c84b9b6fda9ecbb9f0131a3b34b18010df0e527007bb8e159bb4db23d7be870269c4", @ANYRESHEX]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000100"/28], 0x48) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3000}) 3.570146224s ago: executing program 4 (id=1760): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) gettid() connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) io_setup(0x4082, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) unshare(0x46060480) socket(0xa, 0x801, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = openat$cdrom(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$CDROMREADTOCENTRY(r6, 0x5306, &(0x7f0000000080)={0x3, 0x9, 0x7, 0x0, @msf={0x1, 0x5, 0x5}, 0xef}) fsmount(r4, 0x0, 0x0) 3.492042473s ago: executing program 2 (id=1761): socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mlock2(&(0x7f0000049000/0x1000)=nil, 0x1000, 0x0) 3.435011435s ago: executing program 2 (id=1762): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$GTP_CMD_DELPDP(r0, 0x0, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x6, &(0x7f0000000000)=0x4, 0x4) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) syz_emit_ethernet(0x82, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan1\x00'}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004042, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.276691366s ago: executing program 1 (id=1763): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket(0x2, 0x3, 0xff) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000140)=0x223068, 0x4) sendmmsg$inet(r2, &(0x7f0000007240)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="107f2ee8b90573738464b653", 0xc}, {&(0x7f00000001c0)="dd760343bfe5758d", 0x8}], 0x2}}, {{&(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10, 0x0}}], 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000f600000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000300)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000340)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r4}) syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) connect$inet6(r6, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x100}}, 0x26) socket$nl_audit(0x10, 0x3, 0x9) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000100000000000000000008000000", @ANYRES32=r7, @ANYBLOB="9600020000b9633c1bff9f7406bc"], 0x20}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x27}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 3.126484034s ago: executing program 3 (id=1764): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 3.114267942s ago: executing program 1 (id=1765): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x70}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000040)={0x0, @in={{0xa}}, 0xffff}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000040)={0x0, @in={{0xa}}, 0xffff}, 0x90) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0x20, 0xfb, 0x8, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, @remote, 0x1, 0x80, 0x3, 0x1}}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)=@newqdisc={0x3d0, 0x24, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff3, 0x2}, {0x6, 0xffe0}, {0xffe0, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x89, 0x40}}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x128, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe6, 0xd, 0x5, 0x9, 0x2, 0x6, 0xfffffffb, 0x6}}, {0x10, 0x2, [0x3, 0x3286, 0x1, 0x2, 0x21, 0x5]}}, {{0x1c, 0x1, {0x4, 0x0, 0x15, 0x6, 0x1, 0x2, 0x101, 0x4}}, {0xc, 0x2, [0x81, 0x3a4, 0x3, 0xbd0]}}, {{0x1c, 0x1, {0x8, 0x9, 0x8, 0x4, 0x1, 0x2, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x1d, 0x81, 0x8000, 0x5, 0x1, 0x9, 0x5, 0x3}}, {0xa, 0x2, [0x6, 0x8ed, 0x4]}}, {{0x1c, 0x1, {0xc7, 0x9, 0x89b2, 0x0, 0x0, 0x8, 0x31, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0xa, 0x5, 0x7, 0x9, 0x2, 0x200, 0x8, 0x6}}, {0x10, 0x2, [0xc8, 0x6e, 0x2, 0xdcad, 0x4, 0x6]}}, {{0x1c, 0x1, {0x1, 0x10, 0x3c7d, 0xfffffffa, 0x2, 0x1, 0x80000000, 0xa}}, {0x18, 0x2, [0x0, 0x7, 0x9, 0x6, 0x400, 0x200, 0x7, 0x4, 0x7, 0x9]}}]}, @qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x8001, "a5ac07c8677be4207bedca56d79b71c0"}}}, @TCA_STAB={0xd4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf7, 0x9, 0xfa0, 0x7, 0x2, 0xff, 0x101, 0x3}}, {0xa, 0x2, [0x4, 0x5, 0x3]}}, {{0x1c, 0x1, {0x2, 0xcd, 0x3, 0x1000, 0x2, 0x3ff, 0x808, 0x7}}, {0x12, 0x2, [0x0, 0x9, 0x9, 0xe, 0xf6e, 0xbf, 0xfffa]}}, {{0x1c, 0x1, {0x2, 0x3, 0x0, 0xff, 0x1, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0xf3, 0x6, 0xe608, 0xffffff61, 0x0, 0xe, 0x4, 0x2}}, {0x8, 0x2, [0x0, 0x2a]}}, {{0x1c, 0x1, {0x0, 0x1, 0x9, 0x0, 0x0, 0x1, 0x1000, 0x7}}, {0x12, 0x2, [0x8, 0x7, 0x0, 0x1, 0xca6, 0x1, 0x8]}}]}, @TCA_RATE={0x6, 0x5, {0x9, 0x88}}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x47b}}}, @TCA_RATE={0x6, 0x5, {0x3, 0x8a}}, @qdisc_kind_options=@q_drr={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x7, 0xf, 0x2, 0x6b08, 0x6, 0x7}}, {0x12, 0x2, [0x400, 0xff, 0x3, 0x2, 0x9, 0xc3b1, 0x1]}}, {{0x1c, 0x1, {0xd, 0x0, 0xb, 0x0, 0x2, 0x7fff, 0x7, 0x2}}, {0x8, 0x2, [0x2, 0x631]}}, {{0x1c, 0x1, {0x4, 0x25, 0x5, 0x3, 0x2, 0x2, 0x8001, 0x2}}, {0x8, 0x2, [0x6c, 0x6]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_STAB={0xb8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x40, 0x7f, 0x6, 0x0, 0x400, 0xfffffbff, 0x9}}, {0x16, 0x2, [0x8, 0x0, 0x401, 0x9, 0x8, 0x7f, 0x9, 0x7, 0xff]}}, {{0x1c, 0x1, {0xb, 0x6, 0xc, 0xc43, 0x0, 0x5, 0x100, 0xa}}, {0x18, 0x2, [0x5, 0x6, 0x0, 0x5, 0x4, 0x4, 0xd, 0x192, 0x80, 0xce3]}}, {{0x1c, 0x1, {0xff, 0x1, 0x1, 0x400, 0x1, 0xaf1, 0x6, 0x1}}, {0x6, 0x2, [0xe19e]}}, {{0x1c, 0x1, {0x9, 0xc, 0x7, 0xa1, 0x2, 0x1, 0x80000001, 0x4}}, {0xc, 0x2, [0x6, 0x2, 0x81, 0x4]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7fff}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x4000850}, 0xc005) 3.049878035s ago: executing program 1 (id=1766): syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca0000c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001540)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (fail_nth: 3) 2.935984132s ago: executing program 3 (id=1767): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="41000000010001", 0x7) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.789894003s ago: executing program 2 (id=1768): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket(0x2, 0x3, 0xff) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000140)=0x223068, 0x4) sendmmsg$inet(r2, &(0x7f0000007240)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="107f2ee8b90573738464b653", 0xc}, {&(0x7f00000001c0)="dd760343bfe5758d", 0x8}], 0x2}}, {{&(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10, 0x0}}], 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000f600000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000300)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000100000000000000000008000000", @ANYRES32=r5, @ANYBLOB="9600020000b9633c1bff9f7406bc"], 0x20}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x27}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 2.783757082s ago: executing program 2 (id=1769): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10000}]) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xb021b617, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044800}, 0x0) sendto$inet6(r2, &(0x7f0000000100)="87", 0x1, 0x240088c4, &(0x7f0000000040)={0xa, 0x0, 0x80000000, @private2, 0x1000000}, 0x1c) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r8, 0xc080aebe, &(0x7f0000005580)={{0x0, 0x0, 0x80}}) sendmsg$nl_route_sched(r1, 0x0, 0x0) gettid() ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0605345, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000140)) r9 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r9, 0x101, 0x3, &(0x7f0000000000)=0x4, 0x4) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r10, 0x400448ca, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x400448c9, 0x0) bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r11, &(0x7f0000000340)="07000000010000", 0x7) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2778) 2.749149562s ago: executing program 4 (id=1770): r0 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @empty, 0xa}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = syz_io_uring_setup(0xa8e, &(0x7f00000067c0), &(0x7f0000006840), &(0x7f0000006880)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b05, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r5}, 0x10) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x42041) (fail_nth: 3) syz_usb_disconnect(r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(0x4) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000000)={0x8000000, 0x205000, 0x8}) dup3(r2, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/120, 0x78}], 0x1, 0x7ffd, 0x0) 2.436153566s ago: executing program 1 (id=1771): r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) fsopen(&(0x7f0000000100)='vxfs\x00', 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) getpgid(0xffffffffffffffff) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000800)="a4b3c163364b5c9fb04423e2c99aa411d191db9230d242c0eeb25875a36bd9544b394b207f2e38104601068c638fd9fbda403d9430c5cf20e3f2fb0534a0865f654b5d92a6dc8b7fb4696584962ea2e7bcefefab37a9aee0792776c8ca39efa9c2f524ddff641b74a14b310d3666698026d90253a0a5a9e9315a809011e95f07ab9bb1746aa802ca402caecee4803f3c5a1548bfc43b0a9b17defc9f6c52ac51a4d8ed8327de2c053bc415df6b8237b04778a9652d317f3fe798f9aded7ae79215fae8c9e368ba6c4edbf462e93de6e8bf6a84fb09f6a8156c0337534fb0cc9199d9211a5b2d6c27c3819d8fa1004015b5181e44f28baf8cef458a50e324877e66df90cf195207103d7818287b25afbc79da926e97b8296761d3391ed5b86b1217e97f0477c1f818536a3292bdeaf614405bb6c7f44ca6258898af0d6ed03473b0e915ec065b69a2a17c1a3fba57c305805daa96fb82842b0de89086db05d03bc2da7a596683d03f8438301a4a34fe0febd9161f50d3e697b8f15120db4ec752a940a51f960bf3a626c6572cb76cdb8a5cc2cc47d2dac80c30b51ee50ae8b39e1a62520c57c023f7bc294e56b856325637136830fa4574e9784df58d2bd4d62415725215139dbcf7131fc91b21cef71fc7b637423045994f17c7d5d470264eea8fe6e88fb4c1b571c2ab992b2b93b01e7f3e5fde39b861d10b8e8146d7530a6c116276085ff9b0ad8dd1107f7881e2a17d53974f64a3e9e95959e7d7281c5338ac78c91e73f9648883ab3a205a0decb0a98ddc397a1fd2c75b280b03fe0794ac198cc5c3c37cfc02836c9a39204d705c3a91cb413d1f019aa21da2db2b21e267b841c0e1e25822346f31ca59208017a1cd9d6daa2ca843bef1ddaed4862489494936fa954d89e32d99bf7eb5afb54aa292e6d4d6e4652cd69821cb8bcc3ecb41d5ba5572245d5a7d759639b414adcf6f8d0a0e89b605a09c1e32f21890a8fff54c5bf0689516ba1535aa5b2bf49455fdfd17c5f2bbbd87ee5193b0da0580d5a3ba792ba1ea3310d97bc596b954b063a800d7a6accbbe5ccc50be4a067dd7e554f76dc186bc65bd9c95206dedc80e0351e4bac8a339de399745867efdfa5f14f79c661d7ab71e0f37c44dbbd0140f0512a33074d2151c0fd18bbafe89d1269f858acba83767e6479548f8b7ac043f1c4ac537d0b74f7208ec480dbd7d5da7ccd73cca61e494452f3f12ba451d01dadd5b424baf58990bc08308a94f9f128c932f8b4da2e46c24c19729246f6cbe7c38c9a5fffdefe1f4ae6cc549cced86e428fb8ca8d3db314e07cd53b36186e390434c9e805051f5a8886866051d15bae5e9924a0863740d864525d44f4d3c4d8eb7eacf627b413b7cad720687ca377abbe7ff3da2365bfeae63adb4a8c06746e00b326586c1fd7bb33f418f99aba1a1084e7d0a52e4fd6deeb519f69f15025cb02e1c67609dbbcc304f35ea8bae98c29e3218c337cfdc41f6d54cb70fa2a0ccf27edbaed3a94ec0506e26ff99212cf762f994f88bc02994ca8ed17d25e6291d81441ec4e9a9e1efc8b85223c93e8e000fab2dac3b402fb1ff1f95bd588d35ff3f494a2bd319c5877e2f8998f9916e3954138ad40b6a2352fe94432e42c9aaadfe3d3cbc68861d043eeb1cbf34276e73532951556ac3c06bdef631d95f82ec3af740628c57ea11fa32e8aaebf58f8da8c5f8fb8d5e6133a918dcf899315e3e95d187b730b7b38f1d514537028323d360d6d80120c9f8c9cb1fa94631853c7aecc55d7ae512791bc12b85fccf80348da51221e0ecbbf9e55bd531b5d8c84dbf4f7178dc8819db9a030e8bd44be8b8a5aa5ca67a7758c833d2864585e045b7a22d179c302f882a8b99c8e427e067e9a721a2953955d9749381d02ae9ec965376dc5b0af96c9e388ce7f197df90c72b640102d53c8b85706647ad644e7391b6069c036090e875de790eeb97651b3c5688951337e5b0494dd0e497b6f4d654caa67d3f66b6bb49dd804061cf1ffd2dcc9bd04c84c708659fee044bd3331477e12cad8f9dee892622123373ca3e3f96dddf9306cf7d2ded3b7e562a71fa653113906886213a473db7fa3f6a9be4a1e9d170ca28001304d29c1fb4dfe86e5b72efe24f99a07d001eb8dabd7a8b6f90fd72c25e15c0e923b9edaa69c8f8d8af3007181de85ebf613d0cef8ee43d97baf5de08a53803c3e5eb8ee92148335f2398240534624675ddf39904af7ff84c0caa7c325d1516d9d366e42839fc7699d0a1cf30882cd4fbbf17d7f047c112b9829737f47e2bd9154b519ca67a9d0a8d7ea5ca88142f1e3d9c29413d9696e34fd9212979a5cf1c24c7b8521f70e3384e74bddc227a13efe6b859970e2152beb58ef881c20977d45f427b72724ace334c45e457ea1c156b48b1b1468fb7bc9df6fd5305e13b58bd4a29ca56d41252088897cdcbdc1fdc50fa5047b3c2fc85b30af3f7a04de47c10f546b16109f8d3adca276b937e6f0865bd7b8befa05e9ffba8a283e0623578eaf5e8c4de24b8b3ac64cf12eaadba9f784d410dcae8dd5173e4ce3ebeafdd15e4ec1ec270b6076adcd7c8193374d92cf0337a987aab3a667f36e3476b85dc0c64673fd5bc652358c62ad2482569f7bb8ffceb4c82a553bef94519052e7442aa0dc0b6b9fd33c57876ea82d0578665f708612e27eb9fb405715675364b75e4baaa9695645c13c3dc1cc39490c3579041ff4cadf143ebe8540b18b65d65fdc40f4c44c02ded18df4c3baa4be16e5e1d147040fe7a085963e2adc414704859ecf251f7ce22178d3d1c0a1188b459a2e59ce9a6c0084364bfaab824c4ed5560ef57c201439e17975ab2798a5fbe9d1d8c4b32cb3e2431a16bc8f3abf8f40663cbf3cf6e221b7af3ec31d3102084af8df2d367741c0ad6119783f2ecfbadf17eb4891ca53a7c8b20124f4cd815e1cf2735fe502b29d6bdaf20a34f7ec09a89fe9dda3ff50617b82e8b23d4dba8d229bb1e7c8a6485f7b079dfafc85627440b847fb8a5b2b6d8f6ec6e4c97a876201d4c5da1696efdc2a88b17031030df60d8fdbf69baed4cbc100ce7e86595ee9a3b7fd82b30878a2f680b93bc29286e11c3216ca71ad2b2911a7ce85eeddbba858ded2a980a0c5b981d34d9f105be4283d5ed89f629bb929a2182f76d6f2c69dff95c880b2fed20105fae24206be332b12dff7202c0b05e1228b448f7f82ce2a110cf74de3d7b5bdaac39e918680782e080a79460ab7547b1967c709e15388f4fde2279363b811f69ab31af8928d0642665eae6b01d913e72dee964a00b89b9c68a115b05846deced3f88a6c65940cfb52eb3a346f497dd8bdfb683cd6d77e95419f8060298bb80f5b816ce87cc765e89355e3409717228641b692c8b14976912f2c624f705e6c080c1d33ee13065e734d0fb61428d88316e79aff5f4dad94913d4b229af9c3586c7684b72671e48dc5a20178c3c936f5c46948c645ae6fb71937bbadcfba4061e35366e3be1a407e1e8fad0973759c1c559cbe3ad50dc888f99093be5915758e37e39d58869c3e462b555de1733a2c4527d23238a40e3ff74f509be40714e6ea2a1fd11085310af8a489fd5dfc023fda848f38c8525c2b4e8f13f9dbb05a1a9f04f0af95e1d622aa9d7a8cb15ca2d09a437f7e84dba9ab085bdc94b86cf57dd9a82d69d931cc4d0770e277a681d06c70b0485993a2050b9fe6dd3baffd61233bb0e2c4a7f7678656bf0b8e4ecd670bad6fbe9a448a297ecfb0d1728319b7e8e7dff76b3ec1e770f455a91a64f409d40634ba1d3228aba4647b65c06fab26eb75eee1d995345739b73d311718d69a4a24d3ef6f36e4743c71b05163e9416a118670dbf733b2cb10e3f7c17fb7382ae5adf1521a4bbd38a1a28ff34587101a556846ee4e3e7bd81bbe86896c8a49f7fa415f38a21bdedfeb27f9e352d0948ba2cf4bb88b7dfb3695111371675665b4400ffbd1ee670f62fca351835c96eeacd7f95c67dcd7d8be30437bedec994e5c0334411d20266cd4acc09a23431d744b84e1904e61b08b89dcd62b2bd3b4d4780b5f0c2361f958c49a77287de9b59a69961a2b83e6eb2a327d39a7e14681aaa4b5ae4528b9ce994af08b54913311b27589023812c992e7073fb1261f8fdd94f2dbd005be9da53f8a831d5cf6cecabd3ae8a2ea3d4489a7cca8afb756aff4dee494c423ea5a167c0bc5df08ccc1874252525980555c57a3bbea15051644a480589ca7d8276ecff4fc41a2032433cf379686edba0e95f86eb39714ff8fa969bff8ad6c4fd1ddad7c297cacfbd1bc07740d4056b7d3ffd89dc36db0c9fb6c16a9cb717738847ed12c6aedae48cf2f3710a616335362b5ac714fd11b32fe8cd01c7ab92d861aa2a1d5a13739e40f9c35beb3ea4b17ee65a6b2ab2ac815e814c6479090bcb3d27705cebb812c36b70fdac9bb52356eed33f72a53bd3ef115cbd5c7ca341aa9644c493745710c4d91cd06dbb543caaef4be9ba4bbe58df5d1428fc4931fcc81b6a7a53c921f8b9dbac7fcd302dc73fd7f97cf718c91f40fd49d40ab29bb98fb33d0f68ea35c8f7ce3069d55f22055b6e882418df26274da871b8eee5dffb2082aa9d671227b9af677a95e6c79406caf336620b775f0975b2d8927d90b9ccba7d730cea40318027abfef44909b6e9c5e296711f4b5e0a9ee12ea82a1ce322446270ae45cca452e023de4ad80bb51e2432fc831ac3d4ee57fc8765752065417857dae62d512f2510e8885acfa61e2f00bd4491e89f15fcdb35099e63da8f53973ca0a44869dc324ab78c8a941ea6fdc654f50724c63dc949d9e1d659f19cb5e075d44335a27071eb25dbcaa829fc39082764c24f77798ecfa3a2b0b52eee984d7cf1b2b70418c8fa138feb6db5974b01ae377233f19683aa7616fac64ee51d8a76f68e0940bf3ba71e98a27aa3143d71cd22efb290bed0470c364b1421b90757e60b71b9c7e8dc7160da8ce04776037d4d1cd80edb0e3a1aa76554e514849461b3ce895bb3a835d9e19e83652b1be86f8fc50d89b4ca2df691ab4be39255f9276a84fd32dca84e976af9a2cd4f417c279927ebe9036ef5a4456e275061d633a19a1ffcd3dfddf5209a387adfde8f41e161b760d266c27e1e0a7f2359597de32d1e971c537f69e5b9f7f680de38dffbd0d73a2a817f45e9d10178f6274b351a860e4207cdd3a021563bcd53e1bb54d2eb0ccf9b5833b323a1d4f2dc9253bcd59bb352811c63ea18cfc867fd9cf3d2a01734d75cdd6ab19a277b5ff36577c06389291f945eeb0359ef1b74c3967c713c0b5eb569344513ae4d03dcf41f1ee5bed4b691b5630aa083a964dda406685d63f6a3cfc5bd781fc7398589d7d612433e1ee7c770a230d3c815c726328412dbc36b5b30", 0xef3}, {&(0x7f0000000280)="3906615f7a07cbc5304c4a3e5678be9c51bdb68ec5cf33710fa2650def9773214863c5357556d295042ffeb0c8ae1baa466a0c4ad7c5c273bf687278c854f56158de1c67c233457d92e127811ad88462f7556c32dd7cd569e35b83096aad4ac1c1930f012172c08a6c6fde3e82bd852d6e82651a776b7ad79bb1d9100cf46c7e643ba897e292575980210388dd2ee026c564b00677ce8b4d881c0093b0dc29fc98ba8a1719bd43594503b827174116e15a9f0ca26efdcaaa2e3f4826fa94fa86fe17fabd0c880024d38909051c5d827bfa1ebfc857d3c60560d8daf1", 0xdc}], 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="4c0000000000000007000000441c490000000e5e0000000300000005000000060000000f00000002442487a3ac1e0101000000066401010000000004ac1414aa000000000000000000000009800000000000000007000000070b80ac1414bbac14143f000001"], 0xcc}, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) ppoll(&(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r4 = openat$pmem0(0xffffff9c, &(0x7f0000000100), 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000000480)=ANY=[], 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x80000000}]}}]}, 0x38}}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 1.603198775s ago: executing program 1 (id=1772): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x7, 0x40, 0x41ed, 0x8, {{0x5, 0x4, 0x1, 0x3f, 0x14, 0x67, 0x0, 0x80, 0x2f, 0x0, @loopback, @multicast2}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r2, 0x2f, 0x6, 0x7f, 0xb, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x0, 0xff}}) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001c80), r7) sendmsg$NLBL_MGMT_C_VERSION(r7, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x14, r8, 0x1}, 0x14}}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000ac0)="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", 0xfb1, 0x7159) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x100000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) rt_sigtimedwait(&(0x7f0000000080)={[0x426e, 0x100]}, 0x0, &(0x7f0000000400), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) 1.602969516s ago: executing program 3 (id=1773): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket(0x2, 0x3, 0xff) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000140)=0x223068, 0x4) sendmmsg$inet(r2, &(0x7f0000007240)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="107f2ee8b90573738464b653", 0xc}, {&(0x7f00000001c0)="dd760343bfe5758d", 0x8}], 0x2}}, {{&(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10, 0x0}}], 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000f600000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000300)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000340)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r4}) syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) connect$inet6(r6, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x100}}, 0x26) socket$nl_audit(0x10, 0x3, 0x9) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000100000000000000000008000000", @ANYRES32=r7, @ANYBLOB="9600020000b9633c1bff9f7406bc"], 0x20}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x27}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 1.516787097s ago: executing program 3 (id=1774): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6(0xa, 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec0400339b8fd15e58a83b3da942"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',privport,access=', @ANYRESDEC=r4]) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') pread64(r5, &(0x7f0000000800)=""/19, 0x13, 0x9bc) setsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04230d00c90001"], 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x38, 0x0, 0x9, 0x401, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x38}}, 0x44004) ioctl$TCSETA(r6, 0x5406, &(0x7f00000000c0)={0xbf02, 0x5, 0x0, 0x2, 0xfc, '\x00)\x00'}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000006c0)=0x5f) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x3450, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000580)={0x7, 'gre0\x00', {0x8}, 0x59f}) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000040)) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019bc0)=""/102376, 0x18fe8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) add_key(0x0, 0x0, &(0x7f0000000380)="1d56c41874665f00782d", 0xa, 0xfffffffffffffffe) 1.259631606s ago: executing program 4 (id=1775): openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = userfaultfd(0x80800) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000005b80)=[{{&(0x7f00000030c0)={0xa, 0x4e23, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=[@hopopts={{0x14}}], 0x14}}], 0x1, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x3000002, 0x11, r2, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x208000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$key(0xf, 0x3, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) 789.303283ms ago: executing program 3 (id=1776): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$GTP_CMD_DELPDP(r0, 0x0, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x6, &(0x7f0000000000)=0x4, 0x4) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) syz_emit_ethernet(0x82, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan1\x00'}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004042, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 264.458534ms ago: executing program 3 (id=1777): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000540)={0x3a, 0xc, 0x0, 0x2, 0x0, [@rand_addr=' \x01\x00', @mcast2, @empty, @dev={0xfe, 0x80, '\x00', 0x1b}, @remote, @empty]}, 0x68) mount$overlay(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000080), 0x2c4400, &(0x7f0000000900)={[{@uuid_null}, {@userxattr}, {@workdir={'workdir', 0x3d, './bus'}}]}) creat(&(0x7f0000000000)='./file0\x00', 0x0) socket$key(0xf, 0x3, 0x2) setxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100), &(0x7f0000000a00)=ANY=[@ANYBLOB="0300f9df910e19474bbff41e92ed7a12cce445d8452f5cb346fabef6324fa6a156dd40d6a6537307c5cc346ebe2e5bdab3be703fdda05013f2beee1f257685dd2f364a58d574ef80dfff5728405c1166f6e569db7ade5f396458a4c846c432f2a0352ba48e54b412263864ef4ae24cb27078ba5f366d24cc08935fafbd4100650463c449a077bdd34cd8bf7ae7b30e0cd6bd796141e04e000000"], 0xff02, 0x0) open$dir(&(0x7f0000001640)='./file0\x00', 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000440)) getxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000071c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="80", 0x1}], 0x1, 0x0, 0x18}}], 0x1, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000340)=""/195}], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000700)=""/13, &(0x7f0000000040)=0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x4c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_RATE={0x38, 0x5, {0x0, 0x2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x854}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)={0x2c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000003}, 0x0) 261.374602ms ago: executing program 1 (id=1785): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x2, [@enum64={0x9, 0x3, 0x0, 0x13, 0x0, 0x4, [{0xb, 0x7f, 0x10004}, {0x80000000, 0x0, 0x8}, {0xc, 0x4, 0x65}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0xb6, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0xed, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000240)={0x2, 0x0, [{0xa, 0x6, 0x210001, 0xf2, 0x8d6}, {0xa, 0x2, 0x0, 0xc5, 0x3f6}]}) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) sendfile(r4, r5, 0x0, 0x8000002b) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r8, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x980, 0x0, 0x0, 0x0, 0xfffffffd}, [@jmp={0x5, 0x1, 0xd, 0x8, 0xa, 0x80, 0xfffffffffffffffc}]}, &(0x7f0000000400)='GPL\x00', 0x772, 0x1000, &(0x7f0000001080)=""/4096, 0x40e00, 0x8, '\x00', r7, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x4, 0x5, 0x6, 0x51083351}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000700)=[r5, r8, r5], &(0x7f0000000880)=[{0x0, 0x5, 0x10, 0x7}, {0x1, 0x4, 0xd}, {0x3, 0x5, 0xf, 0xa}, {0x2, 0x1, 0x3, 0x1}, {0x5, 0x4, 0x4, 0x4}, {0x0, 0x4, 0xd, 0x7}], 0x10, 0x8, @void, @value}, 0x94) r9 = openat$userio(0xffffff9c, &(0x7f0000007340), 0x80, 0x0) sendmmsg$unix(r8, &(0x7f0000007400)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000b80)="aa531af7c9a11c072b3ae06106253dc2551ac997d5bd4e2df3cdabd24119b6d7d70042f035785f44d3df2249e290b0c05a06b3eeff591fbbc5b409706111b6b64219604f838713764887345294d41583055590f54fa7641b8774808726ae56f859437d14c637a8e9b21f9e0871d172f7ad2e7634e42bae933ebd4bc917526dd742531effad5814a0ecdccae5786ce297dae5b717c1ccfcc5c147f455466e", 0x9e}, {&(0x7f0000000940)="b59fb3832cee81175f9962274c600131a4f1955741d314893c27bf4c522c881dbd04baf36757b048d927837ba9dc3e244de3fe2a08805feee4e86e908cc44977857ad7a3e4", 0x45}, {&(0x7f0000000740)="659e693373ce20b3da3dfe1c583de0", 0xf}, {&(0x7f0000000ac0)="d506186ba1901b9a2a4f62c5bacdaaffb3aed89d9402ad440995bfa5a65823d22b342881a9207cc763be6e3261379bb10fc1084ced788e24761c432b85a4095dbfd2456e9fc7056355a57212", 0x4c}], 0x4, 0x0, 0x0, 0x4000000}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000cc0)="0ceac7d8136ecc4ed2532d70e41d98736850f7f9075ca4295319a1c65d3d752bb1c60e4b0200df6512", 0x29}, {&(0x7f0000002080)="e5a05a9d5b413110fae5e1d72a377025867f96e12517bcb9043f56c002d6f0c259240738883d8b077488723d66d32e0c7b454b8f93aff4cff8bcb68592045fee2300e896bae5a8ab144fe3980af2a90665f8f6cf91c56d0f0f7a6e7d3152bc017c72c756f7bac0a63621f7695061c25a28bf4845441590dd5f74a20ec68ba7c6a20e96ca2e91ca20be09928570520122906ff0df1cf33cb00ee796cafb46b1e5f726e4b4c8d02a80df9fce2f", 0xac}, {&(0x7f0000002140)="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", 0x1000}, {&(0x7f0000003140)="5ff7331386c448be1dd3bf7e55a7edca9d6dc5df5d525e508d24a485e95cb0e139affad62d8e6aa7a73b2dc1820ba14fbc3db634aff048119e149d99bc32e27c38984df3159a2f408f69f85132297ab86dd07ba55f1238b19ba251fbb8e57a40d1959241eacf3bfc9419399779c185c74878e240bd97295f461f60b555be24f7b4cef5d48d62456386620be20b757d3608af0a114cb93d31f117c6c82609b6bd1ebdaabea810dca9447ff231f622497526ac16996be1855b0eb5dca760a6d680541c9dc6a508dc158490abfed3956d2a070b1707b6e47edd824a4ed4638ea79121", 0xe1}], 0x4, &(0x7f0000003480)=[@cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x18}}, @cred={{0x18}}], 0x60, 0x20000090}}, {{&(0x7f0000003500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004800)=[{&(0x7f0000003580)="020863212ab440303dd0c34be1ddb33b04b56b0430578f52180a36e08190798c0df90ba86c95e466fdd7b390be8e8a0b64d530a774a926160b66273e1b3593bd5ed685e672359ec9d496d2e73c4a82ddf3e9f78746b5a8e39e153a3ded1555509fd4ef6a4716fade072c797c07558023a5fc9b2827db23335d6fef5a69a68059d95b46a2841d92e3cd98aa7e37d9fbbfe2a076ed25db9a0b2ca71e82cc01b705c9297534bb897d2a4ebe9e298a0b7097195a742c1f7e32565fc0ad", 0xbb}, {&(0x7f0000003640)="c4c7358b250e02ba7e075000", 0xc}, {&(0x7f0000003680)="6932b8f59b620e43e7dbad7c24f9221c8300a60bc1cef4a4e99893e24b42f8139db0e414df4c36160a28ba09928c5c50569aea56", 0x34}, {&(0x7f00000036c0)="b95b71debefc2cc913f238ecd374635be968c76d7d5998ed8559e3d4ccb534aed029d784c12c94c7e8394f71773863", 0x2f}, {&(0x7f0000003700)="bafbfd97ab48a6a932d090ebe37ba8c12bf8b38f02b6e1e6f0f107fd898bbd1025e26cfe4978ecbd73e3161f5113418216fac0137f66e70ef5f83fa5c3c1c465144fcf7eec3fb40af9eda00db9aab26d8eb89d1006738fbf0b0a67f2b69f9797ba59aad0f34a549d6d0f3e9373c9c0b0e2a86fbbf93fff40fd48cfc256bac9773fe35f9a2fdc4bbb9d566e8499316001f4a3d8abca93ae20442c765b09bfcd7d8d09e9f2bdb51517a12cab129840d84719b5b3e3205cfd1c5074585883c4b5b074a494e5f8dfe736484189ad01f6c1acce7df5f90fd0898b4544d5828176d5da6cb4b5ea", 0xe4}, {&(0x7f0000003800)="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", 0x1000}], 0x6, &(0x7f0000004b00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [r2]}}, @rights={{0x2c, 0x1, 0x1, [r5, r3, 0xffffffffffffffff, r1, r3, 0xffffffffffffffff, r5, r0]}}], 0x6c, 0x4000801}}, {{&(0x7f0000004b80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005ec0)=[{&(0x7f0000004c00)="004eac8af5d5a7aff4cf590d7f386f06a897bc70a4a00395a9737ce1507880fecae898dabc3720cdc05b10ba04d5bb03f052a381a8b11c3dbc7370014033781439814f3f3c828deb3fd41cf5333f3577d8c5fe211743cf0cb8d4c486e37f43ae13a20a9d63b7f3cf4a10d422b2a808264e9b26b70ad0f9b439b2184dcc383057b3fcd76a766d9f1c99a425505de879b678fe7e7b71fd9f641880315584c39f9f245a1b4d31d9bc55523e7c5f5146a036761af7b5707a90b8fae22b1bc89eb4905774", 0xc2}, {&(0x7f0000004d00)="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", 0x1000}, {&(0x7f0000005d00)="c1d0926b3b18d71be8fac11be46c6c95634198ed86f30c14151fc99270898e7cf847893d8b5178ee8314b1c9a4b8dd2e4c6328918babd02ef964681e50ac0bfa8bc031b59a58c1bf1af391fc77e0d94f25bbc41b4c46a25533f9617fe9a1e4fc3c7985315b58cda8fa51f456eafccd73005539881728338b37d7e63d756c8cd46f2e0b7023d43cb8e4e845cfe51e6dcfd92d23f5cb99e8b88b03c3ffeea417e2cd77b1970a5a21f063288e0c510512ecf86f4e9796e7411b8813a89225284bf0f9a21c886b6e1deffcc2b62ec4bf3ae2157eb76d9ab9c7901f4d3b4366b03cde3d191d1c456cf8573e2c6b6aad260402454a893c", 0xf4}, {&(0x7f0000005e00)="21d1ccb6339ba4df9c8f1e63693d0460eb71d1704ea2adfb486b1a8f0bd26660377d6f9704c8b537e68ba36e26cbe50adc575163784a68ce2914d0382a39723b15b8818e85546aac842ca3121ac4d15d9f7d5945abb83d32eb592b06e28cf8a0cbc340e1ce3b034c258c779cd902957f9cc8ef", 0x73}, {&(0x7f0000005e80)="31fe2c6e5c13938fb43d820a4903a49ee64f2cfb9814d8f19af1f9c679993190", 0x20}], 0x5, &(0x7f0000005f40)=[@cred={{0x18}}], 0x18, 0x4000010}}, {{&(0x7f0000005f80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000071c0)=[{&(0x7f0000006000)="4f99546d9715922c246eac52bba420f21e6f7c8a9be169158d05ae9e557aedbe31fc67975875d50a34bed6350913469cdcaea0a9120701d12fe98156b3d51509428d204399f63e2ef52e2ee30eb82bd2761959c0639de91f8336894cfc39bd796037e6767e4b241da9afb976d8cff7a4563415359039a946582169786d62d7728eb67a51b3c35d0401e11f6fd6c75027d8ff90d4b89613c365024d20d2577da158c3facc02b5fafcdcd1a47dc11ec75b292bf7d9e19d", 0xb6}, {&(0x7f00000060c0)="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", 0x1000}, {&(0x7f00000070c0)="f6dd792ec69d0db685b8136eeb0f1058a00bb36c124cf2d29366bded25ed5ee9422791d962cabaaa72f232ed2dc95fbb21f491d6da2a09e15fb3565fd194", 0x3e}, {&(0x7f0000007100)="a5bec5e2f7cca667a917d61ab979feef49ea5a590df4468f97e5afd497e301b77f28b30b41511037ea68ab106d45f37f60f48d26316d977e0f572c400728b9586c66e5ac7ec5ddf0661b9b2ddafc2d1e233d9c64a3312b8482", 0x59}, {&(0x7f0000007180)="b724a1acfa31d3ce1dea70b56b14da255496a50f9732e93067c552250f9103cf47aa7efd87af85f74becb64e", 0x2c}], 0x5, &(0x7f0000007380)=[@cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [r3, r5, r3, 0xffffffffffffffff, r4, r5]}}, @rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff, r8]}}, @rights={{0x1c, 0x1, 0x1, [r1, r9, r1, r8]}}], 0x70, 0x40}}], 0x5, 0x40040) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, &(0x7f00000001c0)={{0xf, 0x9}, 0x1, 0xafa5, 0x85, {0xf1, 0xff}, 0xff, 0x3}) r10 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r10, &(0x7f0000000000)={0xc, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r11, 0x5b02, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) 206.964429ms ago: executing program 4 (id=1778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000580)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x1, 0x7, 0x78, 0x67, 0x0, 0x2, 0x11, 0x0, @empty, @empty}, {0x4e20, 0x4e24, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x2, "776a80cda82601d0fc965e4c116a4f1637e5e556587a741fbd8b6cd406548d9a", "9138aee0020f1777a75b07d2c245a1ca", {"00ece30193b8cea2e5db1b64be05fe92", "26c3e2b8304fb196b826c285afd70dbd"}}}}}}, 0x86) 73.771218ms ago: executing program 4 (id=1779): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d03, 0x0) 0s ago: executing program 4 (id=1780): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="41000000010001", 0x7) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) kernel console output (not intermixed with test programs): 00000000000 R09: 0000000000000000 [ 202.382474][T10814] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 202.384511][T10814] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.386592][T10814] [ 202.412252][T10814] ERROR: Out of memory at tomoyo_realpath_from_path. [ 202.694457][ T2285] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 202.845710][ T2285] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 202.851086][ T2285] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.856619][ T2285] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 202.862201][ T2285] usb 8-1: config 0 interface 0 has no altsetting 0 [ 202.868066][ T2285] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.870351][ T2285] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 202.880454][ T2285] usb 8-1: config 0 interface 0 has no altsetting 0 [ 202.884669][ T2285] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.889498][ T2285] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 202.895422][ T2285] usb 8-1: config 0 interface 0 has no altsetting 0 [ 202.900268][ T2285] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.902752][ T2285] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 202.911027][ T2285] usb 8-1: config 0 interface 0 has no altsetting 0 [ 202.917034][ T2285] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.919362][ T2285] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 202.922138][ T2285] usb 8-1: config 0 interface 0 has no altsetting 0 [ 202.924804][ T5993] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 202.931052][ T2285] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.936746][ T2285] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 202.943303][ T2285] usb 8-1: config 0 interface 0 has no altsetting 0 [ 202.949077][ T2285] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.953261][ T2285] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 202.956586][ T2285] usb 8-1: config 0 interface 0 has no altsetting 0 [ 202.959641][ T2285] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.962098][ T2285] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 202.966797][ T2285] usb 8-1: config 0 interface 0 has no altsetting 0 [ 202.972001][ T2285] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 202.974620][ T2285] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 202.976833][ T2285] usb 8-1: Product: syz [ 202.977986][ T2285] usb 8-1: Manufacturer: syz [ 202.979249][ T2285] usb 8-1: SerialNumber: syz [ 202.983072][ T2285] usb 8-1: config 0 descriptor?? [ 202.990680][ T2285] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 203.084769][ T5993] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 203.087614][ T5993] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.089907][ T5993] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.092717][ T5993] usb 6-1: config 0 interface 0 has no altsetting 0 [ 203.095228][ T5993] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.097517][ T5993] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.100319][ T5993] usb 6-1: config 0 interface 0 has no altsetting 0 [ 203.102712][ T5993] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.105103][ T5993] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.107930][ T5993] usb 6-1: config 0 interface 0 has no altsetting 0 [ 203.110880][ T5993] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.113213][ T5993] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.116100][ T5993] usb 6-1: config 0 interface 0 has no altsetting 0 [ 203.118507][ T5993] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.120811][ T5993] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.123646][ T5993] usb 6-1: config 0 interface 0 has no altsetting 0 [ 203.126441][ T5993] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.128750][ T5993] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.131558][ T5993] usb 6-1: config 0 interface 0 has no altsetting 0 [ 203.135581][ T5993] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.154477][ T5993] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.164489][ T5993] usb 6-1: config 0 interface 0 has no altsetting 0 [ 203.175142][ T5993] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.177472][ T5993] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.180253][ T5993] usb 6-1: config 0 interface 0 has no altsetting 0 [ 203.183505][ T5993] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 203.186042][ T5993] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 203.188222][ T5993] usb 6-1: Product: syz [ 203.191767][ T5993] usb 6-1: Manufacturer: syz [ 203.196803][ T5993] usb 6-1: SerialNumber: syz [ 203.198995][ T73] usb 8-1: USB disconnect, device number 18 [ 203.201500][ T73] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 203.204566][ T5993] usb 6-1: config 0 descriptor?? [ 203.207862][ T5993] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 203.339716][T10839] netlink: 'syz.4.1414': attribute type 1 has an invalid length. [ 203.341780][T10839] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1414'. [ 203.604761][T10845] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 203.606513][T10845] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 203.608212][T10845] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 203.612616][T10845] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 203.620141][T10825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.622488][T10825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.631510][ T5994] usb 6-1: USB disconnect, device number 21 [ 203.634752][ T5994] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 204.373362][T10869] FAULT_INJECTION: forcing a failure. [ 204.373362][T10869] name failslab, interval 1, probability 0, space 0, times 0 [ 204.377052][T10869] CPU: 3 UID: 0 PID: 10869 Comm: syz.3.1424 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 204.377162][T10871] openvswitch: netlink: Actions may not be safe on all matching packets [ 204.379846][T10869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 204.385867][T10869] Call Trace: [ 204.386909][T10869] [ 204.387831][T10869] dump_stack_lvl+0x16c/0x1f0 [ 204.389269][T10869] should_fail_ex+0x497/0x5b0 [ 204.390719][T10869] ? fs_reclaim_acquire+0xae/0x150 [ 204.392315][T10869] should_failslab+0xc2/0x120 [ 204.393765][T10869] kmem_cache_alloc_node_noprof+0x71/0x310 [ 204.395544][T10869] ? __alloc_skb+0x2b3/0x380 [ 204.396962][T10869] __alloc_skb+0x2b3/0x380 [ 204.398345][T10869] ? __pfx___alloc_skb+0x10/0x10 [ 204.399860][T10869] ? __pfx_tcp_call_bpf+0x10/0x10 [ 204.401389][T10869] ? trace_lock_acquire+0xf0/0x1d0 [ 204.402948][T10869] tcp_stream_alloc_skb+0x34/0x570 [ 204.404616][T10869] tcp_connect+0xc70/0x4890 [ 204.406005][T10869] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 204.407874][T10869] ? get_random_u32+0x443/0x7e0 [ 204.409347][T10869] ? __pfx_tcp_connect+0x10/0x10 [ 204.410871][T10869] tcp_v6_connect+0x153e/0x20d0 [ 204.412377][T10869] ? stack_trace_save+0x95/0xd0 [ 204.413847][T10869] ? __pfx_tcp_v6_connect+0x10/0x10 [ 204.415424][T10869] ? kasan_save_stack+0x33/0x60 [ 204.416918][T10869] ? tcp_sendmsg_fastopen+0x23a/0x700 [ 204.418703][T10869] ? tcp_sendmsg_locked+0x2016/0x3750 [ 204.420476][T10869] ? tcp_sendmsg+0x2e/0x50 [ 204.421953][T10869] ? inet6_sendmsg+0xb9/0x140 [ 204.423414][T10869] ? __sys_sendto+0x36b/0x4d0 [ 204.424847][T10869] ? __ia32_sys_sendto+0xdd/0x1b0 [ 204.426384][T10869] ? __inet_stream_connect+0x3c7/0x1020 [ 204.428059][T10869] __inet_stream_connect+0x3c7/0x1020 [ 204.429688][T10869] ? __pfx___inet_stream_connect+0x10/0x10 [ 204.431473][T10869] tcp_sendmsg_fastopen+0x3d7/0x700 [ 204.433041][T10869] tcp_sendmsg_locked+0x2016/0x3750 [ 204.434822][T10869] ? mark_lock+0xb5/0xc60 [ 204.436422][T10869] ? __pfx_mark_lock+0x10/0x10 [ 204.438191][T10869] ? lock_acquire.part.0+0x11b/0x380 [ 204.440037][T10869] ? find_held_lock+0x2d/0x110 [ 204.441301][T10869] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 204.442742][T10869] ? tcp_sendmsg+0x20/0x50 [ 204.443949][T10869] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 204.445521][T10869] ? __local_bh_enable_ip+0xa4/0x120 [ 204.446900][T10869] tcp_sendmsg+0x2e/0x50 [ 204.448029][T10869] ? __pfx_tcp_sendmsg+0x10/0x10 [ 204.449325][T10869] inet6_sendmsg+0xb9/0x140 [ 204.450531][T10869] __sys_sendto+0x36b/0x4d0 [ 204.451781][T10869] ? __pfx___sys_sendto+0x10/0x10 [ 204.453129][T10869] ? ksys_write+0x1ad/0x260 [ 204.454270][T10869] ? __pfx_ksys_write+0x10/0x10 [ 204.455683][T10869] __ia32_sys_sendto+0xdd/0x1b0 [ 204.457465][T10869] ? lockdep_hardirqs_on+0x7c/0x110 [ 204.459379][T10869] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 204.461298][T10869] __do_fast_syscall_32+0x73/0x120 [ 204.462635][T10869] do_fast_syscall_32+0x32/0x80 [ 204.463919][T10869] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.465585][T10869] RIP: 0023:0xf749e579 [ 204.466690][T10869] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 204.471707][T10869] RSP: 002b:00000000f578655c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 204.473847][T10869] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 204.475885][T10869] RDX: 0000000000000000 RSI: 00000000fbfbbfbe RDI: 0000000020000100 [ 204.477994][T10869] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 204.480032][T10869] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 204.482059][T10869] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.484100][T10869] [ 204.884365][ T6019] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 205.034871][ T6019] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 205.039011][ T6019] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.042203][ T6019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.047550][ T6019] usb 7-1: config 0 interface 0 has no altsetting 0 [ 205.051498][ T6019] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.055260][ T6019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.059270][ T6019] usb 7-1: config 0 interface 0 has no altsetting 0 [ 205.066613][ T6019] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.070028][ T6019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.073920][ T6019] usb 7-1: config 0 interface 0 has no altsetting 0 [ 205.085302][ T6019] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.088654][ T6019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.094543][ T6019] usb 7-1: config 0 interface 0 has no altsetting 0 [ 205.098787][T10905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1431'. [ 205.104910][ T6019] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.108694][ T6019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.112110][ T6019] usb 7-1: config 0 interface 0 has no altsetting 0 [ 205.115333][ T6019] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.118372][ T6019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.122143][ T6019] usb 7-1: config 0 interface 0 has no altsetting 0 [ 205.127895][ T6019] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.131062][ T6019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.135931][ T6019] usb 7-1: config 0 interface 0 has no altsetting 0 [ 205.142695][ T6019] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.145340][ T6019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.149091][ T6019] usb 7-1: config 0 interface 0 has no altsetting 0 [ 205.152259][ T6019] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 205.155594][ T6019] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 205.158527][ T6019] usb 7-1: Product: syz [ 205.160048][ T6019] usb 7-1: Manufacturer: syz [ 205.161725][ T6019] usb 7-1: SerialNumber: syz [ 205.170864][ T6019] usb 7-1: config 0 descriptor?? [ 205.176341][ T6019] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 205.359347][T10909] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 205.364211][T10909] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 205.366148][T10909] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 205.367878][T10909] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 205.383579][ T2285] usb 7-1: USB disconnect, device number 17 [ 205.386094][ T2285] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 206.315432][T10950] EXT4-fs error: 186 callbacks suppressed [ 206.315444][T10950] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 206.321862][T10950] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 206.325213][T10950] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 206.327950][T10950] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 206.334680][T10950] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 206.337517][T10950] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 206.341213][T10950] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 206.345387][T10950] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 206.352336][T10950] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 206.355491][T10950] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 206.690825][T10958] geneve2: entered promiscuous mode [ 206.763360][T10962] FAULT_INJECTION: forcing a failure. [ 206.763360][T10962] name failslab, interval 1, probability 0, space 0, times 0 [ 206.767707][T10962] CPU: 3 UID: 0 PID: 10962 Comm: syz.3.1449 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 206.771425][T10962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 206.774814][T10962] Call Trace: [ 206.776006][T10962] [ 206.776947][T10962] dump_stack_lvl+0x16c/0x1f0 [ 206.778558][T10962] should_fail_ex+0x497/0x5b0 [ 206.780263][T10962] should_failslab+0xc2/0x120 [ 206.781980][T10962] kmem_cache_alloc_node_noprof+0x71/0x310 [ 206.784097][T10962] ? __alloc_skb+0x2b3/0x380 [ 206.785775][T10962] __alloc_skb+0x2b3/0x380 [ 206.787402][T10962] ? __pfx___alloc_skb+0x10/0x10 [ 206.789114][T10962] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 206.790840][T10962] mr6_netlink_event+0xde/0x190 [ 206.792636][T10962] mroute_clean_tables+0x4e9/0xb20 [ 206.794491][T10962] ? __pfx_mroute_clean_tables+0x10/0x10 [ 206.796509][T10962] ? __might_fault+0xe3/0x190 [ 206.798227][T10962] ip6_mroute_setsockopt+0x12da/0x2790 [ 206.800208][T10962] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 206.802300][T10962] ? __pfx___lock_acquire+0x10/0x10 [ 206.804203][T10962] ? hlock_class+0x4e/0x130 [ 206.805863][T10962] ? mark_lock+0xb5/0xc60 [ 206.807455][T10962] ? find_held_lock+0x2d/0x110 [ 206.809071][T10962] ? lock_acquire+0x2f/0xb0 [ 206.810546][T10962] ? __might_fault+0xe3/0x190 [ 206.812267][T10962] ? __might_fault+0xe3/0x190 [ 206.813985][T10962] ? do_ipv6_setsockopt+0x8f7/0x4800 [ 206.815902][T10962] do_ipv6_setsockopt+0x8f7/0x4800 [ 206.817773][T10962] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 206.819760][T10962] ? hlock_class+0x4e/0x130 [ 206.821401][T10962] ? mark_lock+0xb5/0xc60 [ 206.822985][T10962] ? aa_label_sk_perm+0x19d/0x5a0 [ 206.824800][T10962] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 206.826796][T10962] ? __pfx___lock_acquire+0x10/0x10 [ 206.828434][T10962] ? hlock_class+0x4e/0x130 [ 206.829644][T10962] ? ipv6_setsockopt+0xcb/0x170 [ 206.830949][T10962] ipv6_setsockopt+0xcb/0x170 [ 206.832231][T10962] rawv6_setsockopt+0xdc/0x700 [ 206.833688][T10962] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 206.835105][T10962] ? sock_common_setsockopt+0x2e/0xf0 [ 206.836694][T10962] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 206.838269][T10962] do_sock_setsockopt+0x222/0x480 [ 206.839609][T10962] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 206.841121][T10962] ? fdget+0x176/0x210 [ 206.842200][T10962] __sys_setsockopt+0x1a4/0x270 [ 206.843728][T10962] ? __pfx___sys_setsockopt+0x10/0x10 [ 206.845686][T10962] ? fput+0x30/0x390 [ 206.846814][T10962] ? ksys_write+0x1ad/0x260 [ 206.848035][T10962] ? __pfx_ksys_write+0x10/0x10 [ 206.849317][T10962] __ia32_sys_setsockopt+0xbc/0x160 [ 206.850681][T10962] ? lockdep_hardirqs_on+0x7c/0x110 [ 206.852057][T10962] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 206.853788][T10962] __do_fast_syscall_32+0x73/0x120 [ 206.855136][T10962] do_fast_syscall_32+0x32/0x80 [ 206.856494][T10962] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.858159][T10962] RIP: 0023:0xf749e579 [ 206.859238][T10962] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 206.864791][T10962] RSP: 002b:00000000f578655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 206.867242][T10962] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 206.869301][T10962] RDX: 00000000000000d4 RSI: 0000000020000140 RDI: 0000000000000004 [ 206.871548][T10962] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.873666][T10962] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 206.875737][T10962] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 206.877809][T10962] [ 206.969914][T10967] afs: Unknown parameter 'dy' [ 206.973374][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1452'. [ 207.124522][ T5994] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 207.284442][ T5955] Bluetooth: hci0: command 0x0401 tx timeout [ 207.287612][ T5994] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 207.290948][ T5994] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.295344][ T5994] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.300692][ T5994] usb 6-1: config 0 interface 0 has no altsetting 0 [ 207.303953][ T5994] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.308257][ T5994] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.311583][ T5994] usb 6-1: config 0 interface 0 has no altsetting 0 [ 207.319220][ T5994] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.322252][ T5994] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.335103][ T5994] usb 6-1: config 0 interface 0 has no altsetting 0 [ 207.345562][ T5994] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.348408][ T5994] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.354056][ T5994] usb 6-1: config 0 interface 0 has no altsetting 0 [ 207.363713][ T5994] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.364382][ T5955] Bluetooth: hci1: command 0x0c1a tx timeout [ 207.366067][ T5994] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.370591][ T5994] usb 6-1: config 0 interface 0 has no altsetting 0 [ 207.380410][ T5994] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.388996][ T5994] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.392025][ T5994] usb 6-1: config 0 interface 0 has no altsetting 0 [ 207.397419][ T5994] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.405429][ T5994] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.408281][ T5994] usb 6-1: config 0 interface 0 has no altsetting 0 [ 207.410697][ T5994] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.413150][ T5994] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.416703][ T5994] usb 6-1: config 0 interface 0 has no altsetting 0 [ 207.418982][T10986] FAULT_INJECTION: forcing a failure. [ 207.418982][T10986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.419887][ T5994] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 207.423263][T10986] CPU: 3 UID: 0 PID: 10986 Comm: syz.3.1456 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 207.426368][ T5994] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 207.428254][T10986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 207.428264][T10986] Call Trace: [ 207.428268][T10986] [ 207.428273][T10986] dump_stack_lvl+0x16c/0x1f0 [ 207.430482][ T5994] usb 6-1: Product: syz [ 207.433273][T10986] should_fail_ex+0x497/0x5b0 [ 207.434155][ T5994] usb 6-1: Manufacturer: syz [ 207.435221][T10986] _copy_to_user+0x32/0xd0 [ 207.435250][T10986] simple_read_from_buffer+0xd0/0x160 [ 207.437726][ T5994] usb 6-1: SerialNumber: syz [ 207.438969][T10986] proc_fail_nth_read+0x198/0x270 [ 207.444433][ T5955] Bluetooth: hci3: command 0x040f tx timeout [ 207.444708][T10986] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 207.444929][ T5958] Bluetooth: hci2: command 0x0c1a tx timeout [ 207.447774][ T5994] usb 6-1: config 0 descriptor?? [ 207.449040][T10986] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 207.453539][T10986] vfs_read+0x1df/0xbe0 [ 207.454065][ T5994] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 207.455049][T10986] ? __fget_files+0x23a/0x3f0 [ 207.455072][T10986] ? fdget_pos+0x24c/0x360 [ 207.455090][T10986] ? __pfx_lock_release+0x10/0x10 [ 207.461031][T10986] ? trace_lock_acquire+0x14a/0x1d0 [ 207.462871][T10986] ? __pfx_vfs_read+0x10/0x10 [ 207.464096][T10986] ? __pfx___mutex_lock+0x10/0x10 [ 207.465392][T10986] ? __fget_files+0x244/0x3f0 [ 207.466618][T10986] ksys_read+0x12f/0x260 [ 207.467729][T10986] ? __pfx_ksys_read+0x10/0x10 [ 207.468976][T10986] __do_fast_syscall_32+0x73/0x120 [ 207.470334][T10986] do_fast_syscall_32+0x32/0x80 [ 207.471610][T10986] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.473232][T10986] RIP: 0023:0xf749e579 [ 207.474293][T10986] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 207.479265][T10986] RSP: 002b:00000000f5786590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 207.482074][T10986] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5786620 [ 207.484348][T10986] RDX: 000000000000000f RSI: 00000000f748dff4 RDI: 0000000000000000 [ 207.486369][T10986] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 207.488397][T10986] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 207.490452][T10986] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.492454][T10986] [ 207.530098][T10992] input: syz0 as /devices/virtual/input/input13 [ 207.654101][ T5994] usb 6-1: USB disconnect, device number 22 [ 207.656803][ T5994] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 207.732584][T10990] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 207.736698][T10990] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 207.739538][T10990] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 207.743157][T10990] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 207.993423][T11003] Bluetooth: MGMT ver 1.23 [ 208.842259][T11023] overlayfs: failed to resolve './file0': -2 [ 208.843958][T11027] sctp: [Deprecated]: syz.2.1468 (pid 11027) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.843958][T11027] Use struct sctp_sack_info instead [ 209.146171][ T5342] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 209.295282][ T5342] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 209.299109][ T5342] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.313186][ T5342] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.318088][ T5342] usb 7-1: config 0 interface 0 has no altsetting 0 [ 209.321923][ T5342] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.325477][ T5342] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.329402][ T5342] usb 7-1: config 0 interface 0 has no altsetting 0 [ 209.333527][ T5342] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.337601][ T5342] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.341507][ T5342] usb 7-1: config 0 interface 0 has no altsetting 0 [ 209.345129][ T5342] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.348460][ T5342] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.352202][ T5342] usb 7-1: config 0 interface 0 has no altsetting 0 [ 209.355520][ T5342] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.357993][ T5342] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.361825][ T5342] usb 7-1: config 0 interface 0 has no altsetting 0 [ 209.365661][ T5342] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.368328][ T5342] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.370778][ T5342] usb 7-1: config 0 interface 0 has no altsetting 0 [ 209.373128][ T5342] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.375238][ T5342] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.377673][ T5342] usb 7-1: config 0 interface 0 has no altsetting 0 [ 209.380054][ T5342] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.382114][ T5342] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.384854][ T5342] usb 7-1: config 0 interface 0 has no altsetting 0 [ 209.387805][ T5342] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 209.389916][ T5342] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 209.391851][ T5342] usb 7-1: Product: syz [ 209.392832][ T5342] usb 7-1: Manufacturer: syz [ 209.393974][ T5342] usb 7-1: SerialNumber: syz [ 209.397283][ T5342] usb 7-1: config 0 descriptor?? [ 209.400993][ T5342] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 209.605313][ T6019] usb 7-1: USB disconnect, device number 18 [ 209.610912][ T6019] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 209.614877][ T5958] Bluetooth: hci0: command 0x0401 tx timeout [ 209.764348][ T5958] Bluetooth: hci1: command 0x0c1a tx timeout [ 209.767728][ T5958] Bluetooth: hci3: command 0x040f tx timeout [ 209.779336][ T5955] Bluetooth: hci2: command 0x0c1a tx timeout [ 209.790388][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1475'. [ 210.277913][T11062] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1476'. [ 210.431866][T11075] netlink: 'syz.4.1481': attribute type 1 has an invalid length. [ 210.439484][T11075] netlink: 9360 bytes leftover after parsing attributes in process `syz.4.1481'. [ 210.447011][T11075] netlink: 'syz.4.1481': attribute type 1 has an invalid length. [ 210.452858][T11075] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1481'. [ 210.510207][T11075] can: request_module (can-proto-0) failed. [ 210.680214][T11084] block device autoloading is deprecated and will be removed. [ 210.704466][ T5993] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 210.867753][ T5993] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 210.870965][ T5993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.873714][ T5993] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.876696][ T5993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 210.879649][ T5993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.882078][ T5993] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.884978][ T5993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 210.887877][ T5993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.890293][ T5993] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.893301][ T5993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 210.895855][ T5993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.899972][ T5993] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.902868][ T5993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 210.905617][ T5993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.908023][ T5993] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.910767][ T5993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 210.913347][ T5993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.916635][ T5993] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.919541][ T5993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 210.922140][ T5993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.925234][ T5993] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.928842][ T5993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 210.931421][ T5993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.933833][ T5993] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.937102][ T5993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 210.940455][ T5993] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 210.942894][ T5993] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 210.945184][ T5993] usb 7-1: Product: syz [ 210.946397][ T5993] usb 7-1: Manufacturer: syz [ 210.947756][ T5993] usb 7-1: SerialNumber: syz [ 210.950099][ T5993] usb 7-1: config 0 descriptor?? [ 210.953738][ T5993] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 211.091064][T11089] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1485'. [ 211.093357][T11089] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1485'. [ 211.096216][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1485'. [ 211.100871][T11089] netlink: 'syz.3.1485': attribute type 8 has an invalid length. [ 211.102927][T11089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1485'. [ 211.109503][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1485'. [ 211.165894][ T5993] usb 7-1: USB disconnect, device number 19 [ 211.169206][ T5993] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 211.187607][T11099] netlink: 'syz.4.1489': attribute type 13 has an invalid length. [ 211.278472][T11104] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 211.280216][T11104] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 211.282927][T11104] vhci_hcd vhci_hcd.0: Device attached [ 211.301075][T11105] vhci_hcd: connection closed [ 211.301280][ T8730] vhci_hcd: stop threads [ 211.304699][ T8730] vhci_hcd: release socket [ 211.305967][ T8730] vhci_hcd: disconnect device [ 211.388717][T11114] afs: Unknown parameter 'dy' [ 211.844410][ T5955] Bluetooth: hci3: command 0x040f tx timeout [ 211.868342][T11136] EXT4-fs error: 300 callbacks suppressed [ 211.868353][T11136] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 211.872845][T11136] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 211.880429][T11136] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 211.891892][T11136] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 211.894929][T11136] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 211.898479][T11136] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 211.901575][T11136] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 211.905258][T11136] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 211.908133][T11136] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 211.911094][T11136] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 211.974445][T11133] team0 (unregistering): Port device team_slave_0 removed [ 211.981439][T11133] team0 (unregistering): Port device team_slave_1 removed [ 212.235967][ T5955] Bluetooth: hci0: unexpected event for opcode 0x2019 [ 212.411805][ T39] audit: type=1326 audit(1731910018.814:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.2.1514" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x0 [ 212.494373][ T5958] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 212.890873][T11191] netlink: 'syz.1.1522': attribute type 10 has an invalid length. [ 212.893838][T11191] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1522'. [ 213.009787][T11198] FAULT_INJECTION: forcing a failure. [ 213.009787][T11198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.013323][T11198] CPU: 0 UID: 0 PID: 11198 Comm: syz.1.1524 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 213.016171][T11198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 213.018940][T11198] Call Trace: [ 213.019819][T11198] [ 213.020601][T11198] dump_stack_lvl+0x16c/0x1f0 [ 213.021839][T11198] should_fail_ex+0x497/0x5b0 [ 213.023072][T11198] _copy_to_user+0x32/0xd0 [ 213.024253][T11198] simple_read_from_buffer+0xd0/0x160 [ 213.025710][T11198] proc_fail_nth_read+0x198/0x270 [ 213.027036][T11198] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.028496][T11198] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.029937][T11198] vfs_read+0x1df/0xbe0 [ 213.031029][T11198] ? __fget_files+0x23a/0x3f0 [ 213.032273][T11198] ? fdget_pos+0x24c/0x360 [ 213.033442][T11198] ? __pfx_lock_release+0x10/0x10 [ 213.034861][T11198] ? trace_lock_acquire+0x14a/0x1d0 [ 213.036388][T11198] ? __pfx_vfs_read+0x10/0x10 [ 213.037652][T11198] ? __pfx___mutex_lock+0x10/0x10 [ 213.038962][T11198] ? __fget_files+0x244/0x3f0 [ 213.040182][T11198] ksys_read+0x12f/0x260 [ 213.041248][T11198] ? __pfx_ksys_read+0x10/0x10 [ 213.042457][T11198] __do_fast_syscall_32+0x73/0x120 [ 213.043726][T11198] do_fast_syscall_32+0x32/0x80 [ 213.044995][T11198] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.046709][T11198] RIP: 0023:0xf740e579 [ 213.047795][T11198] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 213.052756][T11198] RSP: 002b:00000000f56f6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 213.054924][T11198] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f56f6620 [ 213.057173][T11198] RDX: 000000000000000f RSI: 00000000f73fdff4 RDI: 0000000000000000 [ 213.059221][T11198] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 213.061288][T11198] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 213.063328][T11198] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.065403][T11198] [ 213.185373][T11200] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 213.341084][T11200] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 213.542956][ T39] audit: type=1326 audit(1731910019.944:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11214 comm="syz.1.1530" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 213.550576][ T39] audit: type=1326 audit(1731910019.944:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11214 comm="syz.1.1530" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 213.557188][ T39] audit: type=1326 audit(1731910019.944:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11214 comm="syz.1.1530" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 213.562497][ T39] audit: type=1326 audit(1731910019.944:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11214 comm="syz.1.1530" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 213.568205][ T39] audit: type=1326 audit(1731910019.944:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11214 comm="syz.1.1530" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 213.573500][ T39] audit: type=1326 audit(1731910019.944:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11214 comm="syz.1.1530" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 213.579171][ T39] audit: type=1326 audit(1731910019.944:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11214 comm="syz.1.1530" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 213.584637][ T39] audit: type=1326 audit(1731910019.944:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11214 comm="syz.1.1530" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 213.589968][ T39] audit: type=1326 audit(1731910019.944:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11214 comm="syz.1.1530" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 213.804337][ T5993] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 213.925157][ T5955] Bluetooth: hci3: command 0x040f tx timeout [ 213.974801][ T5993] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 213.978024][ T5993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.980424][ T5993] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.983316][ T5993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 213.985799][ T5993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.988697][ T5993] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.992173][ T5993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 213.994853][ T5993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.997187][ T5993] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.000153][ T5993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 214.003231][ T5993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 214.006591][ T5993] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.009409][ T5993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 214.013001][ T5993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 214.015775][ T5993] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.018634][ T5993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 214.021116][ T5993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 214.023597][ T5993] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.026919][ T5993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 214.029376][ T5993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 214.032464][ T5993] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.035986][ T5993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 214.038408][ T5993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 214.040759][ T5993] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.043609][ T5993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 214.047652][ T5993] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 214.050095][ T5993] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 214.052270][ T5993] usb 7-1: Product: syz [ 214.053361][ T5993] usb 7-1: Manufacturer: syz [ 214.054791][ T5993] usb 7-1: SerialNumber: syz [ 214.057526][ T5993] usb 7-1: config 0 descriptor?? [ 214.061464][ T5993] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 214.266042][ T5993] usb 7-1: USB disconnect, device number 20 [ 214.271723][ T5993] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 214.875145][T11245] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 214.875145][T11245] program syz.2.1538 not setting count and/or reply_len properly [ 215.604372][ T5955] Bluetooth: hci0: command 0x0401 tx timeout [ 215.606006][ T5958] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 215.704327][ T73] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 215.874766][ T73] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 215.877503][ T73] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.879806][ T73] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.882577][ T73] usb 7-1: config 0 interface 0 has no altsetting 0 [ 215.885183][ T73] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.887485][ T73] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.890253][ T73] usb 7-1: config 0 interface 0 has no altsetting 0 [ 215.892658][ T73] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.895443][ T73] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.899249][ T73] usb 7-1: config 0 interface 0 has no altsetting 0 [ 215.902309][ T73] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.904701][ T73] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.907528][ T73] usb 7-1: config 0 interface 0 has no altsetting 0 [ 215.910198][ T73] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.912506][ T73] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.915397][ T73] usb 7-1: config 0 interface 0 has no altsetting 0 [ 215.918544][ T73] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.921644][ T73] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.924693][ T73] usb 7-1: config 0 interface 0 has no altsetting 0 [ 215.927102][ T73] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.929388][ T73] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.932561][ T73] usb 7-1: config 0 interface 0 has no altsetting 0 [ 215.935214][ T73] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.937507][ T73] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.940300][ T73] usb 7-1: config 0 interface 0 has no altsetting 0 [ 215.943540][ T73] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 215.945932][ T73] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 215.948072][ T73] usb 7-1: Product: syz [ 215.949162][ T73] usb 7-1: Manufacturer: syz [ 215.950372][ T73] usb 7-1: SerialNumber: syz [ 215.952598][ T73] usb 7-1: config 0 descriptor?? [ 215.957471][ T73] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 215.994976][T11279] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 215.997541][T11279] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 215.999355][T11279] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 216.001257][T11279] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 216.160451][ T8] usb 7-1: USB disconnect, device number 21 [ 216.162854][ T8] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 216.219053][ T8722] EXT4-fs (sda1): Delayed block allocation failed for inode 1930 at logical offset 11 with max blocks 5 with error 74 [ 216.223422][ T8722] EXT4-fs (sda1): This should not happen!! Data will be lost [ 216.223422][ T8722] [ 216.627764][T11295] __nla_validate_parse: 1 callbacks suppressed [ 216.627784][T11295] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1551'. [ 216.634063][T11294] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1550'. [ 216.637842][T11294] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1550'. [ 216.641116][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1550'. [ 216.653684][T11294] netlink: 'syz.4.1550': attribute type 8 has an invalid length. [ 216.657680][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1550'. [ 216.663435][T11294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1550'. [ 216.672476][ T8] libceph: connect (1)[c::]:6789 error -101 [ 216.675076][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 216.816555][T11295] ceph: No mds server is up or the cluster is laggy [ 216.971290][T11318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.975854][T11318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.979606][T11318] bond0 (unregistering): Released all slaves [ 217.096137][T11324] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1561'. [ 217.128999][T11329] program syz.3.1563 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.179333][T11338] FAULT_INJECTION: forcing a failure. [ 217.179333][T11338] name failslab, interval 1, probability 0, space 0, times 0 [ 217.183221][T11338] CPU: 1 UID: 0 PID: 11338 Comm: syz.2.1566 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 217.186803][T11338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 217.190436][T11338] Call Trace: [ 217.191348][T11338] [ 217.192354][T11338] dump_stack_lvl+0x16c/0x1f0 [ 217.193969][T11338] should_fail_ex+0x497/0x5b0 [ 217.195594][T11338] ? fs_reclaim_acquire+0xae/0x150 [ 217.197343][T11338] should_failslab+0xc2/0x120 [ 217.198968][T11338] __kmalloc_node_noprof+0xd1/0x440 [ 217.200750][T11338] ? __vmalloc_node_range_noprof+0x3d8/0x15a0 [ 217.202807][T11338] __vmalloc_node_range_noprof+0x3d8/0x15a0 [ 217.204379][T11338] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 217.206261][T11338] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 217.207945][T11338] ? __pfx_aa_get_newest_label+0x10/0x10 [ 217.209843][T11338] ? __pfx___lock_acquire+0x10/0x10 [ 217.211616][T11338] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 217.213488][T11338] __vmalloc_noprof+0x6d/0x90 [ 217.215091][T11338] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 217.216969][T11338] bpf_prog_alloc_no_stats+0x54/0x5e0 [ 217.218797][T11338] ? security_capable+0x7e/0x260 [ 217.220420][T11338] bpf_prog_alloc+0x3b/0x230 [ 217.221957][T11338] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 217.223564][T11338] bpf_prog_load+0x450/0x2670 [ 217.225073][T11338] ? __pfx_bpf_prog_load+0x10/0x10 [ 217.226517][T11338] ? find_held_lock+0x2d/0x110 [ 217.227805][T11338] ? __might_fault+0x13b/0x190 [ 217.229059][T11338] ? __might_fault+0xe3/0x190 [ 217.230337][T11338] __sys_bpf+0x4c8c/0x5780 [ 217.231527][T11338] ? ksys_write+0x21e/0x260 [ 217.232723][T11338] ? __pfx___sys_bpf+0x10/0x10 [ 217.233975][T11338] ? vfs_write+0x306/0x1150 [ 217.235162][T11338] ? __mutex_unlock_slowpath+0x164/0x650 [ 217.236636][T11338] ? fput+0x30/0x390 [ 217.237645][T11338] ? ksys_write+0x1ad/0x260 [ 217.238746][T11338] ? __pfx_ksys_write+0x10/0x10 [ 217.240029][T11338] __ia32_sys_bpf+0x76/0xe0 [ 217.241219][T11338] __do_fast_syscall_32+0x73/0x120 [ 217.242536][T11338] do_fast_syscall_32+0x32/0x80 [ 217.243951][T11338] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.245521][T11338] RIP: 0023:0xf7fc6579 [ 217.246582][T11338] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 217.252969][T11338] RSP: 002b:00000000f574655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 217.255778][T11338] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000080 [ 217.258454][T11338] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 217.261139][T11338] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.263807][T11338] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 217.266336][T11338] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.268441][T11338] [ 217.279650][T11338] syz.2.1566: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 217.284127][T11338] CPU: 1 UID: 0 PID: 11338 Comm: syz.2.1566 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 217.286889][T11338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 217.289679][T11338] Call Trace: [ 217.290564][T11338] [ 217.291357][T11338] dump_stack_lvl+0x16c/0x1f0 [ 217.292592][T11338] warn_alloc+0x24d/0x3a0 [ 217.293733][T11338] ? __pfx_warn_alloc+0x10/0x10 [ 217.295015][T11338] ? dump_stack_lvl+0x197/0x1f0 [ 217.296308][T11338] ? dump_stack_lvl+0x1a1/0x1f0 [ 217.297605][T11338] ? should_fail_ex+0x2de/0x5b0 [ 217.298893][T11338] ? rcu_is_watching+0x12/0xc0 [ 217.300169][T11338] ? trace_kmalloc+0x2d/0xe0 [ 217.301397][T11338] ? __kmalloc_node_noprof+0x22f/0x440 [ 217.302834][T11338] __vmalloc_node_range_noprof+0x114a/0x15a0 [ 217.304418][T11338] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 217.305873][T11338] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 217.307546][T11338] ? __pfx_aa_get_newest_label+0x10/0x10 [ 217.309027][T11338] ? __pfx___lock_acquire+0x10/0x10 [ 217.310402][T11338] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 217.311858][T11338] __vmalloc_noprof+0x6d/0x90 [ 217.313095][T11338] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 217.314536][T11338] bpf_prog_alloc_no_stats+0x54/0x5e0 [ 217.315961][T11338] ? security_capable+0x7e/0x260 [ 217.317277][T11338] bpf_prog_alloc+0x3b/0x230 [ 217.318504][T11338] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 217.320061][T11338] bpf_prog_load+0x450/0x2670 [ 217.321283][T11338] ? __pfx_bpf_prog_load+0x10/0x10 [ 217.322616][T11338] ? find_held_lock+0x2d/0x110 [ 217.323847][T11338] ? __might_fault+0x13b/0x190 [ 217.325076][T11338] ? __might_fault+0xe3/0x190 [ 217.326254][T11338] __sys_bpf+0x4c8c/0x5780 [ 217.327418][T11338] ? ksys_write+0x21e/0x260 [ 217.328606][T11338] ? __pfx___sys_bpf+0x10/0x10 [ 217.329868][T11338] ? vfs_write+0x306/0x1150 [ 217.331060][T11338] ? __mutex_unlock_slowpath+0x164/0x650 [ 217.332539][T11338] ? fput+0x30/0x390 [ 217.333575][T11338] ? ksys_write+0x1ad/0x260 [ 217.334822][T11338] ? __pfx_ksys_write+0x10/0x10 [ 217.336114][T11338] __ia32_sys_bpf+0x76/0xe0 [ 217.337311][T11338] __do_fast_syscall_32+0x73/0x120 [ 217.338667][T11338] do_fast_syscall_32+0x32/0x80 [ 217.339964][T11338] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.341610][T11338] RIP: 0023:0xf7fc6579 [ 217.342680][T11338] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 217.347652][T11338] RSP: 002b:00000000f574655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 217.349816][T11338] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000080 [ 217.351885][T11338] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 217.353942][T11338] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.356013][T11338] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 217.358079][T11338] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.360145][T11338] [ 217.361674][T11338] Mem-Info: [ 217.362539][T11338] active_anon:17471 inactive_anon:3599 isolated_anon:0 [ 217.362539][T11338] active_file:4978 inactive_file:13162 isolated_file:0 [ 217.362539][T11338] unevictable:768 dirty:285 writeback:0 [ 217.362539][T11338] slab_reclaimable:5943 slab_unreclaimable:57973 [ 217.362539][T11338] mapped:20323 shmem:17314 pagetables:666 [ 217.362539][T11338] sec_pagetables:318 bounce:0 [ 217.362539][T11338] kernel_misc_reclaimable:0 [ 217.362539][T11338] free:76926 free_pcp:6904 free_cma:0 [ 217.374592][T11338] Node 0 active_anon:3040kB inactive_anon:0kB active_file:3140kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:3292kB dirty:8kB writeback:0kB shmem:3284kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9816kB pagetables:788kB sec_pagetables:1188kB all_unreclaimable? yes [ 217.386534][T11338] Node 1 active_anon:66844kB inactive_anon:14396kB active_file:16772kB inactive_file:52644kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:78000kB dirty:1132kB writeback:0kB shmem:65972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3132kB pagetables:1876kB sec_pagetables:84kB all_unreclaimable? no [ 217.395703][T11338] Node 0 DMA free:2992kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:32kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:748kB local_pcp:184kB free_cma:0kB [ 217.403377][T11338] lowmem_reserve[]: 0 273 0 0 0 [ 217.404843][T11338] Node 0 DMA32 free:18892kB boost:0kB min:13904kB low:17380kB high:20856kB reserved_highatomic:4096KB active_anon:2988kB inactive_anon:0kB active_file:3108kB inactive_file:4kB unevictable:1536kB writepending:8kB present:1032196kB managed:306284kB mlocked:0kB bounce:0kB free_pcp:3912kB local_pcp:2388kB free_cma:0kB [ 217.412654][T11338] lowmem_reserve[]: 0 0 0 0 0 [ 217.414403][T11338] Node 1 DMA32 free:285820kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:66844kB inactive_anon:14396kB active_file:16772kB inactive_file:52644kB unevictable:1536kB writepending:1132kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:22888kB local_pcp:1452kB free_cma:0kB [ 217.422816][T11338] lowmem_reserve[]: 0 0 0 0 0 [ 217.424371][T11338] Node 0 DMA: 37*4kB (U) 62*8kB (UM) 58*16kB (UM) 36*32kB (UM) 4*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2980kB [ 217.428078][T11338] Node 0 DMA32: 221*4kB (UEH) 213*8kB (UMEH) 28*16kB (UEH) 135*32kB (UMEH) 48*64kB (UMEH) 26*128kB (UMEH) 10*256kB (UMH) 1*512kB (M) 0*1024kB 1*2048kB (M) 0*4096kB = 18876kB [ 217.432723][T11338] Node 1 DMA32: 6*4kB (ME) 51*8kB (ME) 55*16kB (UE) 448*32kB (UME) 227*64kB (UME) 193*128kB (UME) 69*256kB (UE) 48*512kB (UM) 34*1024kB (UM) 23*2048kB (UM) 26*4096kB (UM) = 285536kB [ 217.437691][T11338] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.440401][T11338] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 217.442989][T11338] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.445648][T11338] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 217.448048][T11338] 35712 total pagecache pages [ 217.449281][T11338] 265 pages in swap cache [ 217.454382][T11338] Free swap = 117948kB [ 217.455492][T11338] Total swap = 124996kB [ 217.456582][T11338] 524155 pages RAM [ 217.457566][T11338] 0 pages HighMem/MovableOnly [ 217.458801][T11338] 206681 pages reserved [ 217.459896][T11338] 0 pages cma reserved [ 217.490075][T11343] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1568'. [ 217.494157][ T6019] kernel write not supported for file [eventfd] (pid: 6019 comm: kworker/1:3) [ 217.613608][T11348] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1570'. [ 217.645866][T11345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.656196][T11345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.659953][T11345] bond0 (unregistering): Released all slaves [ 217.697389][T11350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1571'. [ 217.870632][T11364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.923511][T11369] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 217.924808][ T5958] Bluetooth: hci0: command 0x0401 tx timeout [ 217.954712][T11376] EXT4-fs error: 415 callbacks suppressed [ 217.954723][T11376] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 217.960231][T11376] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 217.972327][T11376] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 217.977388][T11376] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 217.980295][T11376] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 217.983051][T11376] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 217.986990][T11376] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 217.989818][T11381] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 217.992652][T11376] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 217.996189][T11376] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 218.008762][ T5958] Bluetooth: hci2: command 0x0c1a tx timeout [ 218.012041][ T5958] Bluetooth: hci1: command 0x0c1a tx timeout [ 218.012652][ T5955] Bluetooth: hci3: command 0x040f tx timeout [ 218.096813][T11397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.099950][T11397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.124573][T11398] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1160057152 (74243657728 ns) > initial count (51111738112 ns). Using initial count to start timer. [ 218.344730][ T5994] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 218.514372][ T5994] usb 6-1: Using ep0 maxpacket: 32 [ 218.517176][ T5994] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 218.519339][ T5994] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 218.521713][ T5994] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 218.524097][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 218.526713][ T5994] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 218.530045][ T5994] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 218.533384][ T5994] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 218.544373][ T5994] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.553597][ T5994] usb 6-1: config 0 descriptor?? [ 218.771421][ T5994] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 218.775212][ T5994] usb 6-1: USB disconnect, device number 23 [ 218.778705][ T5994] usblp0: removed [ 218.975199][T11436] netlink: 'syz.4.1602': attribute type 21 has an invalid length. [ 218.977268][T11436] netlink: 'syz.4.1602': attribute type 20 has an invalid length. [ 219.204404][ T56] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 219.334410][ T56] usb 6-1: device descriptor read/64, error -71 [ 219.564358][ T6019] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 219.585982][ T56] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 219.609174][T11478] overlayfs: failed to resolve './file1': -2 [ 219.721949][T11462] FAULT_INJECTION: forcing a failure. [ 219.721949][T11462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.727006][ T56] usb 6-1: device descriptor read/64, error -71 [ 219.727611][T11462] CPU: 0 UID: 0 PID: 11462 Comm: syz.2.1614 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 219.732056][T11462] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 219.735260][T11462] Call Trace: [ 219.736467][T11462] [ 219.737565][T11462] dump_stack_lvl+0x16c/0x1f0 [ 219.739071][T11462] should_fail_ex+0x497/0x5b0 [ 219.740676][T11462] _copy_to_user+0x32/0xd0 [ 219.742242][T11462] simple_read_from_buffer+0xd0/0x160 [ 219.744130][T11462] proc_fail_nth_read+0x198/0x270 [ 219.745817][T11462] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 219.747639][T11462] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 219.749546][T11462] vfs_read+0x1df/0xbe0 [ 219.750998][T11462] ? __fget_files+0x23a/0x3f0 [ 219.752644][T11462] ? fdget_pos+0x24c/0x360 [ 219.754197][T11462] ? __pfx_lock_release+0x10/0x10 [ 219.755967][T11462] ? trace_lock_acquire+0x14a/0x1d0 [ 219.757792][T11462] ? __pfx_vfs_read+0x10/0x10 [ 219.759313][T11462] ? __pfx___mutex_lock+0x10/0x10 [ 219.761073][T11462] ? __fget_files+0x244/0x3f0 [ 219.762722][T11462] ksys_read+0x12f/0x260 [ 219.764214][T11462] ? __pfx_ksys_read+0x10/0x10 [ 219.765921][T11462] __do_fast_syscall_32+0x73/0x120 [ 219.767824][T11462] do_fast_syscall_32+0x32/0x80 [ 219.769532][T11462] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 219.771742][T11462] RIP: 0023:0xf7fc6579 [ 219.773166][T11462] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 219.779619][T11462] RSP: 002b:00000000f5746590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 219.782473][T11462] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 00000000f5746620 [ 219.785164][T11462] RDX: 000000000000000f RSI: 00000000f744dff4 RDI: 0000000000000000 [ 219.787821][T11462] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 219.790545][T11462] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 219.793263][T11462] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 219.795832][T11462] [ 219.823677][ T6019] usb 7-1: unable to get BOS descriptor or descriptor too short [ 219.836044][ T56] usb usb6-port1: attempt power cycle [ 219.838891][ T6019] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 219.841585][ T6019] usb 7-1: can't read configurations, error -71 [ 219.928796][ T5994] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 220.084921][ T5303] Bluetooth: hci3: command 0x040f tx timeout [ 220.106380][ T5994] usb 8-1: unable to get BOS descriptor or descriptor too short [ 220.110178][ T5994] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 220.112454][ T5994] usb 8-1: can't read configurations, error -71 [ 220.194344][ T56] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 220.224750][ T56] usb 6-1: device descriptor read/8, error -71 [ 220.474353][ T56] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 220.494875][ T56] usb 6-1: device descriptor read/8, error -71 [ 220.604560][ T56] usb usb6-port1: unable to enumerate USB device [ 221.173804][T11530] FAULT_INJECTION: forcing a failure. [ 221.173804][T11530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.178207][T11530] CPU: 2 UID: 0 PID: 11530 Comm: syz.1.1636 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 221.181886][T11530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 221.185370][T11530] Call Trace: [ 221.186464][T11530] [ 221.187415][T11530] dump_stack_lvl+0x16c/0x1f0 [ 221.188885][T11530] should_fail_ex+0x497/0x5b0 [ 221.190452][T11530] _copy_to_user+0x32/0xd0 [ 221.191929][T11530] simple_read_from_buffer+0xd0/0x160 [ 221.193732][T11530] proc_fail_nth_read+0x198/0x270 [ 221.195342][T11530] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.197140][T11530] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.198991][T11530] vfs_read+0x1df/0xbe0 [ 221.200412][T11530] ? __fget_files+0x23a/0x3f0 [ 221.201895][T11530] ? fdget_pos+0x24c/0x360 [ 221.203370][T11530] ? __pfx_lock_release+0x10/0x10 [ 221.205141][T11530] ? trace_lock_acquire+0x14a/0x1d0 [ 221.206902][T11530] ? __pfx_vfs_read+0x10/0x10 [ 221.208526][T11530] ? __pfx___mutex_lock+0x10/0x10 [ 221.210224][T11530] ? __fget_files+0x244/0x3f0 [ 221.211807][T11530] ksys_read+0x12f/0x260 [ 221.213217][T11530] ? __pfx_ksys_read+0x10/0x10 [ 221.214879][T11530] __do_fast_syscall_32+0x73/0x120 [ 221.216639][T11530] do_fast_syscall_32+0x32/0x80 [ 221.218275][T11530] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 221.220383][T11530] RIP: 0023:0xf740e579 [ 221.221742][T11530] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 221.228019][T11530] RSP: 002b:00000000f56f6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 221.230739][T11530] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f56f6620 [ 221.233332][T11530] RDX: 000000000000000f RSI: 00000000f73fdff4 RDI: 0000000000000000 [ 221.235866][T11530] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 221.238524][T11530] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 221.241098][T11530] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 221.243139][T11530] [ 221.448001][T11514] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 221.450458][T11514] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 221.452810][T11514] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 221.455514][T11514] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 221.634647][T11545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.641143][T11545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.647465][T11545] bond0 (unregistering): Released all slaves [ 221.656777][T11547] __nla_validate_parse: 3 callbacks suppressed [ 221.656787][T11547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1643'. [ 221.660718][T11547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1643'. [ 221.677591][T11551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1644'. [ 221.803668][T11557] FAULT_INJECTION: forcing a failure. [ 221.803668][T11557] name failslab, interval 1, probability 0, space 0, times 0 [ 221.807137][T11557] CPU: 3 UID: 0 PID: 11557 Comm: syz.4.1647 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 221.809927][T11557] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 221.812758][T11557] Call Trace: [ 221.813633][T11557] [ 221.814409][T11557] dump_stack_lvl+0x16c/0x1f0 [ 221.815660][T11557] should_fail_ex+0x497/0x5b0 [ 221.816904][T11557] ? fs_reclaim_acquire+0xae/0x150 [ 221.818231][T11557] should_failslab+0xc2/0x120 [ 221.819322][T11557] kmem_cache_alloc_node_noprof+0x71/0x310 [ 221.820839][T11557] ? __alloc_skb+0x2b3/0x380 [ 221.822076][T11557] __alloc_skb+0x2b3/0x380 [ 221.823278][T11557] ? __pfx___alloc_skb+0x10/0x10 [ 221.824594][T11557] netlink_alloc_large_skb+0x69/0x130 [ 221.826017][T11557] netlink_sendmsg+0x689/0xd70 [ 221.827290][T11557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.828667][T11557] __sys_sendto+0x479/0x4d0 [ 221.829881][T11557] ? __pfx___sys_sendto+0x10/0x10 [ 221.831231][T11557] ? __might_fault+0x13b/0x190 [ 221.832525][T11557] __do_compat_sys_socketcall+0x5e2/0x700 [ 221.834043][T11557] ? __fget_files+0x244/0x3f0 [ 221.835307][T11557] ? __pfx___do_compat_sys_socketcall+0x10/0x10 [ 221.836954][T11557] ? fput+0x30/0x390 [ 221.837998][T11557] __do_fast_syscall_32+0x73/0x120 [ 221.839326][T11557] do_fast_syscall_32+0x32/0x80 [ 221.840577][T11557] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 221.842162][T11557] RIP: 0023:0xf7fe1579 [ 221.843207][T11557] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 221.847944][T11557] RSP: 002b:00000000f5765430 EFLAGS: 00000293 ORIG_RAX: 0000000000000066 [ 221.849994][T11557] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f5765444 [ 221.851989][T11557] RDX: 0000000000000000 RSI: 00000000f5765560 RDI: 00000000f746dff4 [ 221.853923][T11557] RBP: 00000000f5765560 R08: 0000000000000000 R09: 0000000000000000 [ 221.855926][T11557] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 221.857931][T11557] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 221.859932][T11557] [ 221.860779][ C3] vkms_vblank_simulate: vblank timer overrun [ 221.928819][T11568] Cannot find del_set index 4 as target [ 221.948110][T11571] overlay: Unknown parameter '/yz_tun' [ 222.062369][T11577] ax25_connect(): syz.3.1649 uses autobind, please contact jreuter@yaina.de [ 222.192657][T11587] FAULT_INJECTION: forcing a failure. [ 222.192657][T11587] name failslab, interval 1, probability 0, space 0, times 0 [ 222.196172][T11587] CPU: 1 UID: 0 PID: 11587 Comm: syz.2.1656 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 222.199003][T11587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 222.201827][T11587] Call Trace: [ 222.202713][T11587] [ 222.203496][T11587] dump_stack_lvl+0x16c/0x1f0 [ 222.204743][T11587] should_fail_ex+0x497/0x5b0 [ 222.205989][T11587] ? fs_reclaim_acquire+0xae/0x150 [ 222.207369][T11587] should_failslab+0xc2/0x120 [ 222.208597][T11587] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 222.209989][T11587] ? __anon_vma_prepare+0xae/0x5e0 [ 222.211318][T11587] __anon_vma_prepare+0xae/0x5e0 [ 222.212648][T11587] __vmf_anon_prepare+0x11c/0x240 [ 222.213957][T11587] do_wp_page+0xff2/0x4930 [ 222.215121][T11587] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 222.216590][T11587] ? __pfx_do_wp_page+0x10/0x10 [ 222.217881][T11587] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 222.219280][T11587] ? lock_acquire+0x2f/0xb0 [ 222.220325][T11587] ? __handle_mm_fault+0xdcd/0x2a10 [ 222.221841][T11587] __handle_mm_fault+0x1a93/0x2a10 [ 222.223213][T11587] ? __pfx_mt_find+0x10/0x10 [ 222.224414][T11587] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 222.225898][T11587] ? __pfx___handle_mm_fault+0x10/0x10 [ 222.227333][T11587] ? find_vma+0xc0/0x140 [ 222.228437][T11587] ? __pfx_find_vma+0x10/0x10 [ 222.229661][T11587] handle_mm_fault+0x3fa/0xaa0 [ 222.230995][T11587] do_user_addr_fault+0x7a3/0x13f0 [ 222.232340][T11587] exc_page_fault+0x5c/0xc0 [ 222.233523][T11587] asm_exc_page_fault+0x26/0x30 [ 222.234793][T11587] RIP: 0010:__put_user_4+0x11/0x20 [ 222.236130][T11587] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 222.238150][T11589] FAULT_INJECTION: forcing a failure. [ 222.238150][T11589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.241052][T11587] RSP: 0018:ffffc9000f4afb30 EFLAGS: 00050202 [ 222.241066][T11587] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000020000040 [ 222.241074][T11587] RDX: ffff888023bf4880 RSI: ffffffff8a2009e9 RDI: ffffffff8bb13a60 [ 222.241080][T11587] RBP: 1ffff92001e95f67 R08: 0000000000000000 R09: fffffbfff2039f01 [ 222.241087][T11587] R10: ffffffff901cf80f R11: 0000000000000000 R12: 0000000000000000 [ 222.241094][T11587] R13: dffffc0000000000 R14: 0000000020000040 R15: ffffffff8c94bf20 [ 222.241105][T11587] ? hidp_sock_compat_ioctl+0x299/0x5b0 [ 222.258327][T11587] hidp_sock_compat_ioctl+0x2a5/0x5b0 [ 222.259726][T11587] ? __pfx_hidp_sock_compat_ioctl+0x10/0x10 [ 222.261252][T11587] ? tomoyo_path_number_perm+0x292/0x5b0 [ 222.262708][T11587] ? __pfx_lock_release+0x10/0x10 [ 222.264030][T11587] ? tomoyo_path_number_perm+0x467/0x5b0 [ 222.265483][T11587] ? tomoyo_path_number_perm+0x190/0x5b0 [ 222.266937][T11587] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 222.268500][T11587] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 222.270033][T11587] ? do_vfs_ioctl+0x513/0x1950 [ 222.271288][T11587] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 222.272606][T11587] compat_sock_ioctl+0x17b/0x7e0 [ 222.273897][T11587] ? __pfx_hidp_sock_compat_ioctl+0x10/0x10 [ 222.275431][T11587] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 222.276850][T11587] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 222.278268][T11587] __do_compat_sys_ioctl+0x259/0x2b0 [ 222.279664][T11587] __do_fast_syscall_32+0x73/0x120 [ 222.280996][T11587] do_fast_syscall_32+0x32/0x80 [ 222.282257][T11587] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.283905][T11587] RIP: 0023:0xf7fc6579 [ 222.284972][T11587] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 222.289911][T11587] RSP: 002b:00000000f574655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 222.292079][T11587] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800448d2 [ 222.294112][T11587] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.296158][T11587] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 222.298201][T11587] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 222.300200][T11587] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.302230][T11587] [ 222.303212][T11589] CPU: 3 UID: 0 PID: 11589 Comm: syz.1.1655 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 222.306013][T11589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 222.308772][T11589] Call Trace: [ 222.309646][T11589] [ 222.310420][T11589] dump_stack_lvl+0x16c/0x1f0 [ 222.311659][T11589] should_fail_ex+0x497/0x5b0 [ 222.312890][T11589] _copy_from_iter+0x29b/0x1400 [ 222.314166][T11589] ? __pfx__copy_from_iter+0x10/0x10 [ 222.315542][T11589] ? __virt_addr_valid+0x1a4/0x590 [ 222.316872][T11589] ? __virt_addr_valid+0x5e/0x590 [ 222.318194][T11589] ? const_folio_flags.constprop.0+0x56/0x150 [ 222.319787][T11589] ? __phys_addr_symbol+0x30/0x80 [ 222.321105][T11589] ? __check_object_size+0x488/0x710 [ 222.322491][T11589] mptcp_sendmsg+0x1010/0x1f20 [ 222.323758][T11589] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 222.325099][T11589] ? __pfx_aa_sk_perm+0x10/0x10 [ 222.326380][T11589] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 222.327726][T11589] inet_sendmsg+0x119/0x140 [ 222.328915][T11589] __sys_sendto+0x426/0x4d0 [ 222.330119][T11589] ? __pfx___sys_sendto+0x10/0x10 [ 222.331451][T11589] ? ksys_write+0x1ad/0x260 [ 222.332627][T11589] ? __pfx_ksys_write+0x10/0x10 [ 222.333911][T11589] __ia32_sys_sendto+0xdd/0x1b0 [ 222.335197][T11589] ? lockdep_hardirqs_on+0x7c/0x110 [ 222.336554][T11589] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 222.338280][T11589] __do_fast_syscall_32+0x73/0x120 [ 222.339624][T11589] do_fast_syscall_32+0x32/0x80 [ 222.340894][T11589] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.342526][T11589] RIP: 0023:0xf740e579 [ 222.343602][T11589] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 222.348514][T11589] RSP: 002b:00000000f56b455c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 222.350664][T11589] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000200002c0 [ 222.352709][T11589] RDX: 0000000000300000 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.354745][T11589] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 222.356816][T11589] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 222.358851][T11589] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.360900][T11589] [ 222.361790][ C3] vkms_vblank_simulate: vblank timer overrun [ 222.407793][ T5955] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 222.787351][T11572] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 222.805012][T11572] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 222.810520][T11572] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 222.813630][T11572] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 222.857675][T11601] ata1.00: invalid multi_count 1 ignored [ 223.369051][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 223.369069][ T39] audit: type=1326 audit(1731910029.774:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.3.1669" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x0 [ 223.399479][ T5365] EXT4-fs error: 298 callbacks suppressed [ 223.399490][ T5365] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1170: comm udevd: iget: checksum invalid [ 223.404378][ T5365] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1170: comm udevd: iget: checksum invalid [ 223.407592][ T5365] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1170: comm udevd: iget: checksum invalid [ 223.413103][T11623] FAULT_INJECTION: forcing a failure. [ 223.413103][T11623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.417151][T11623] CPU: 3 UID: 0 PID: 11623 Comm: syz.4.1670 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 223.419968][T11623] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 223.422783][T11623] Call Trace: [ 223.423675][T11623] [ 223.424476][T11623] dump_stack_lvl+0x16c/0x1f0 [ 223.425707][T11623] should_fail_ex+0x497/0x5b0 [ 223.426943][T11623] _copy_to_user+0x32/0xd0 [ 223.428124][T11623] simple_read_from_buffer+0xd0/0x160 [ 223.429533][T11623] proc_fail_nth_read+0x198/0x270 [ 223.430854][T11623] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 223.432285][T11623] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 223.433816][T11623] vfs_read+0x1df/0xbe0 [ 223.434944][T11623] ? __fget_files+0x23a/0x3f0 [ 223.436199][T11623] ? fdget_pos+0x24c/0x360 [ 223.437379][T11623] ? __pfx_lock_release+0x10/0x10 [ 223.438709][T11623] ? trace_lock_acquire+0x14a/0x1d0 [ 223.440079][T11623] ? __pfx_vfs_read+0x10/0x10 [ 223.441311][T11623] ? __pfx___mutex_lock+0x10/0x10 [ 223.442627][T11623] ? __fget_files+0x244/0x3f0 [ 223.443937][T11623] ksys_read+0x12f/0x260 [ 223.445071][T11623] ? __pfx_ksys_read+0x10/0x10 [ 223.446324][T11623] __do_fast_syscall_32+0x73/0x120 [ 223.447710][T11623] do_fast_syscall_32+0x32/0x80 [ 223.448992][T11623] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.450640][T11623] RIP: 0023:0xf7fe1579 [ 223.451721][T11623] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 223.456740][T11623] RSP: 002b:00000000f5766590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 223.458899][T11623] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5766620 [ 223.460947][T11623] RDX: 000000000000000f RSI: 00000000f746dff4 RDI: 0000000000000000 [ 223.462985][T11623] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 223.465106][T11623] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 223.467150][T11623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.469199][T11623] [ 223.470128][ C3] vkms_vblank_simulate: vblank timer overrun [ 223.501138][T11625] veth1_macvtap: left promiscuous mode [ 223.502685][T11625] macsec0: entered promiscuous mode [ 223.792563][T11631] netlink: 'syz.1.1673': attribute type 64 has an invalid length. [ 223.795455][T11631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1673'. [ 223.842237][T11633] Cannot find add_set index 3 as target [ 224.014386][ T5303] Bluetooth: hci0: command 0x0401 tx timeout [ 224.199292][ T8] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 224.369336][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 224.378857][ T8] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 224.388029][ T8] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 224.394409][ T8] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 224.401091][ T8] usb 7-1: Product: syz [ 224.402373][ T8] usb 7-1: Manufacturer: syz [ 224.403918][ T8] usb 7-1: SerialNumber: syz [ 224.410350][ T8] usb 7-1: config 0 descriptor?? [ 224.412476][T11651] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 224.672790][ T73] usb 7-1: USB disconnect, device number 24 [ 224.884661][ T5303] Bluetooth: hci3: command 0x040f tx timeout [ 224.884811][ T5955] Bluetooth: hci2: command 0x0c1a tx timeout [ 224.886380][ T5303] Bluetooth: hci1: command 0x0c1a tx timeout [ 224.933108][T11651] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 224.935309][T11651] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 224.938836][T11651] vhci_hcd vhci_hcd.0: Device attached [ 224.941232][T11667] vhci_hcd: connection closed [ 224.941516][ T1247] vhci_hcd: stop threads [ 224.948065][ T1247] vhci_hcd: release socket [ 224.949542][ T1247] vhci_hcd: disconnect device [ 225.196597][T11674] Option 'o]‚çåc' to dns_resolver key: bad/missing value [ 225.202393][T11674] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1687'. [ 225.242737][T11676] 9pnet_fd: Insufficient options for proto=fd [ 225.448641][T11679] team0 (unregistering): Port device team_slave_0 removed [ 225.454541][T11679] team0 (unregistering): Port device team_slave_1 removed [ 225.554399][ T39] audit: type=1326 audit(1731910031.944:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.2.1693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 225.562742][ T39] audit: type=1326 audit(1731910031.944:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.2.1693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 225.627280][ T39] audit: type=1326 audit(1731910031.944:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.2.1693" exe="/syz-executor" sig=0 arch=40000003 syscall=312 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 225.634631][ T39] audit: type=1326 audit(1731910031.944:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.2.1693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 225.640915][ T39] audit: type=1326 audit(1731910031.944:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.2.1693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 225.647402][ T39] audit: type=1326 audit(1731910031.944:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.2.1693" exe="/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 225.653588][ T39] audit: type=1326 audit(1731910031.944:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.2.1693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 225.660540][ T39] audit: type=1326 audit(1731910031.944:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.2.1693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 225.667299][ T39] audit: type=1326 audit(1731910031.954:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.2.1693" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 225.814226][T11695] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 225.816699][T11695] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 225.818965][T11695] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 225.821455][T11695] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 226.363958][T11706] FAULT_INJECTION: forcing a failure. [ 226.363958][T11706] name failslab, interval 1, probability 0, space 0, times 0 [ 226.368811][T11706] CPU: 2 UID: 0 PID: 11706 Comm: syz.2.1698 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 226.372459][T11706] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 226.376116][T11706] Call Trace: [ 226.377267][T11706] [ 226.378307][T11706] dump_stack_lvl+0x16c/0x1f0 [ 226.379958][T11706] should_fail_ex+0x497/0x5b0 [ 226.381619][T11706] ? fs_reclaim_acquire+0xae/0x150 [ 226.383481][T11706] should_failslab+0xc2/0x120 [ 226.385203][T11706] kmem_cache_alloc_lru_noprof+0x72/0x2f0 [ 226.387283][T11706] ? __d_alloc+0x35/0x8c0 [ 226.388544][T11706] __d_alloc+0x35/0x8c0 [ 226.389763][T11706] d_alloc_pseudo+0x1c/0xc0 [ 226.390958][T11706] alloc_file_pseudo+0xd2/0x200 [ 226.392662][T11706] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 226.394620][T11706] ? do_raw_spin_lock+0x12d/0x2c0 [ 226.396464][T11706] __anon_inode_getfile+0x136/0x3c0 [ 226.398415][T11706] ? __pfx___anon_inode_getfile+0x10/0x10 [ 226.400127][T11706] ? alloc_fd+0x2d7/0x6c0 [ 226.401250][T11706] anon_inode_getfd+0x52/0xb0 [ 226.402475][T11706] map_create+0xd6b/0x1ed0 [ 226.403668][T11706] ? __pfx_lock_release+0x10/0x10 [ 226.404986][T11706] ? trace_lock_acquire+0x14a/0x1d0 [ 226.406343][T11706] ? __pfx_map_create+0x10/0x10 [ 226.407615][T11706] ? lock_acquire+0x2f/0xb0 [ 226.408802][T11706] ? __might_fault+0xe3/0x190 [ 226.410032][T11706] ? __might_fault+0xe3/0x190 [ 226.411261][T11706] __sys_bpf+0x506a/0x5780 [ 226.412430][T11706] ? ksys_write+0x21e/0x260 [ 226.413612][T11706] ? __pfx___sys_bpf+0x10/0x10 [ 226.414866][T11706] ? vfs_write+0x306/0x1150 [ 226.415964][T11706] ? __mutex_unlock_slowpath+0x164/0x650 [ 226.417385][T11706] ? fput+0x30/0x390 [ 226.418342][T11706] ? ksys_write+0x1ad/0x260 [ 226.419440][T11706] ? __pfx_ksys_write+0x10/0x10 [ 226.420652][T11706] __ia32_sys_bpf+0x76/0xe0 [ 226.421731][T11706] __do_fast_syscall_32+0x73/0x120 [ 226.422952][T11706] do_fast_syscall_32+0x32/0x80 [ 226.424110][T11706] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 226.425629][T11706] RIP: 0023:0xf7fc6579 [ 226.426635][T11706] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 226.431170][T11706] RSP: 002b:00000000f574655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 226.433112][T11706] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000200009c0 [ 226.434940][T11706] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 226.436795][T11706] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 226.438627][T11706] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 226.440491][T11706] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 226.442340][T11706] [ 226.443287][ T5365] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1170: comm udevd: iget: checksum invalid [ 226.450027][ T5365] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1170: comm udevd: iget: checksum invalid [ 226.452727][ T5365] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1170: comm udevd: iget: checksum invalid [ 227.047589][T11728] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 227.050594][T11728] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 227.053518][T11728] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 227.057404][T11728] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 227.687493][ T5958] Bluetooth: hci0: command 0x0401 tx timeout [ 227.807602][T11744] FAULT_INJECTION: forcing a failure. [ 227.807602][T11744] name failslab, interval 1, probability 0, space 0, times 0 [ 227.811823][T11744] CPU: 2 UID: 0 PID: 11744 Comm: syz.4.1710 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 227.814621][T11744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 227.817425][T11744] Call Trace: [ 227.818315][T11744] [ 227.819109][T11744] dump_stack_lvl+0x16c/0x1f0 [ 227.820356][T11744] should_fail_ex+0x497/0x5b0 [ 227.821598][T11744] ? fs_reclaim_acquire+0xae/0x150 [ 227.822959][T11744] should_failslab+0xc2/0x120 [ 227.824217][T11744] __kmalloc_cache_noprof+0x6b/0x310 [ 227.825612][T11744] ? bpf_get_raw_tracepoint+0x9c/0x2d0 [ 227.827046][T11744] ? bpf_raw_tp_link_attach+0x18b/0x540 [ 227.828527][T11744] bpf_raw_tp_link_attach+0x18b/0x540 [ 227.829945][T11744] ? __pfx_lock_release+0x10/0x10 [ 227.831283][T11744] ? trace_lock_acquire+0x14a/0x1d0 [ 227.832843][T11744] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 227.834405][T11744] ? lock_acquire+0x2f/0xb0 [ 227.835612][T11744] ? __fget_files+0x40/0x3f0 [ 227.836834][T11744] ? fput+0x30/0x390 [ 227.837879][T11744] ? __bpf_prog_get+0xa0/0x290 [ 227.839146][T11744] __sys_bpf+0x3a7/0x5780 [ 227.840283][T11744] ? ksys_write+0x21e/0x260 [ 227.841482][T11744] ? __pfx___sys_bpf+0x10/0x10 [ 227.842748][T11744] ? vfs_write+0x306/0x1150 [ 227.843949][T11744] ? __mutex_unlock_slowpath+0x164/0x650 [ 227.845418][T11744] ? fput+0x30/0x390 [ 227.846458][T11744] ? ksys_write+0x1ad/0x260 [ 227.847666][T11744] ? __pfx_ksys_write+0x10/0x10 [ 227.848949][T11744] __ia32_sys_bpf+0x76/0xe0 [ 227.850153][T11744] __do_fast_syscall_32+0x73/0x120 [ 227.851519][T11744] do_fast_syscall_32+0x32/0x80 [ 227.852800][T11744] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.854468][T11744] RIP: 0023:0xf7fe1579 [ 227.855566][T11744] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 227.860663][T11744] RSP: 002b:00000000f576655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 227.862849][T11744] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000020000080 [ 227.864923][T11744] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 227.866984][T11744] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 227.869067][T11744] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 227.871157][T11744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.873235][T11744] [ 227.884374][ T5303] Bluetooth: hci2: command 0x0c1a tx timeout [ 227.887017][ T5303] Bluetooth: hci1: command 0x0c1a tx timeout [ 227.889198][ T5303] Bluetooth: hci3: command 0x040f tx timeout [ 228.045195][ T8] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 228.214994][ T8] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 228.218146][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.220461][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.224120][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 228.226995][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.229301][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.232377][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 228.235659][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.238536][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.241796][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 228.254472][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.257222][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.260488][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 228.263694][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.266236][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.269513][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 228.273208][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.276975][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.280855][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 228.286176][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.289452][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.293345][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 228.298872][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.302071][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.306057][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 228.313545][ T8] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 228.316516][ T8] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 228.318824][ T8] usb 7-1: Product: syz [ 228.320062][ T8] usb 7-1: Manufacturer: syz [ 228.321334][ T8] usb 7-1: SerialNumber: syz [ 228.324674][ T8] usb 7-1: config 0 descriptor?? [ 228.330198][ T8] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 228.534420][ T5342] usb 7-1: USB disconnect, device number 25 [ 228.547651][ T5342] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 229.551567][ T5365] EXT4-fs error: 72 callbacks suppressed [ 229.551577][ T5365] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1170: comm udevd: iget: checksum invalid [ 229.556423][ T5365] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1170: comm udevd: iget: checksum invalid [ 229.559674][ T5365] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1170: comm udevd: iget: checksum invalid [ 229.580465][T11779] FAULT_INJECTION: forcing a failure. [ 229.580465][T11779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.584215][T11779] CPU: 0 UID: 0 PID: 11779 Comm: syz.4.1721 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 229.586993][T11779] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 229.589758][T11779] Call Trace: [ 229.590636][T11779] [ 229.591424][T11779] dump_stack_lvl+0x16c/0x1f0 [ 229.592657][T11779] should_fail_ex+0x497/0x5b0 [ 229.593893][T11779] _copy_to_user+0x32/0xd0 [ 229.595065][T11779] simple_read_from_buffer+0xd0/0x160 [ 229.596494][T11779] proc_fail_nth_read+0x198/0x270 [ 229.597832][T11779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.599278][T11779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.600713][T11779] vfs_read+0x1df/0xbe0 [ 229.601808][T11779] ? __fget_files+0x23a/0x3f0 [ 229.603037][T11779] ? fdget_pos+0x24c/0x360 [ 229.604210][T11779] ? __pfx_lock_release+0x10/0x10 [ 229.605523][T11779] ? trace_lock_acquire+0x14a/0x1d0 [ 229.606881][T11779] ? __pfx_vfs_read+0x10/0x10 [ 229.608117][T11779] ? __pfx___mutex_lock+0x10/0x10 [ 229.609432][T11779] ? __fget_files+0x244/0x3f0 [ 229.610667][T11779] ksys_read+0x12f/0x260 [ 229.611780][T11779] ? __pfx_ksys_read+0x10/0x10 [ 229.613032][T11779] __do_fast_syscall_32+0x73/0x120 [ 229.614370][T11779] do_fast_syscall_32+0x32/0x80 [ 229.615647][T11779] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 229.617282][T11779] RIP: 0023:0xf7fe1579 [ 229.618357][T11779] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 229.623305][T11779] RSP: 002b:00000000f5766590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 229.625456][T11779] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5766620 [ 229.627503][T11779] RDX: 000000000000000f RSI: 00000000f746dff4 RDI: 0000000000000000 [ 229.629588][T11779] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 229.631632][T11779] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 229.633609][T11779] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 229.635664][T11779] [ 229.750558][T11781] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1160057152 (74243657728 ns) > initial count (51111738112 ns). Using initial count to start timer. [ 229.844418][ T5958] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 229.844433][ T5303] Bluetooth: hci0: command 0x0401 tx timeout [ 229.926987][ T5958] Bluetooth: hci3: command 0x040f tx timeout [ 230.079042][T11770] bridge0: entered allmulticast mode [ 230.080833][T11771] bridge0: entered promiscuous mode [ 230.185107][T11786] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 230.187704][T11786] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 230.194427][T11786] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 230.198451][T11786] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 230.200299][T11786] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 230.554327][ T5342] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 230.704786][ T5342] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 230.708419][ T5342] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.710793][ T5342] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.713566][ T5342] usb 9-1: config 0 interface 0 has no altsetting 0 [ 230.717844][ T5342] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.720165][ T5342] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.722931][ T5342] usb 9-1: config 0 interface 0 has no altsetting 0 [ 230.732598][ T5342] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.735006][ T5342] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.737884][ T5342] usb 9-1: config 0 interface 0 has no altsetting 0 [ 230.745330][ T5342] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.747604][ T5342] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.750350][ T5342] usb 9-1: config 0 interface 0 has no altsetting 0 [ 230.752801][ T5342] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.755256][ T5342] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.758084][ T5342] usb 9-1: config 0 interface 0 has no altsetting 0 [ 230.760535][ T5342] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.762835][ T5342] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.765769][ T5342] usb 9-1: config 0 interface 0 has no altsetting 0 [ 230.768214][ T5342] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.770541][ T5342] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.773369][ T5342] usb 9-1: config 0 interface 0 has no altsetting 0 [ 230.776001][ T5342] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.778379][ T5342] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.781085][ T5342] usb 9-1: config 0 interface 0 has no altsetting 0 [ 230.784772][ T5342] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 230.787263][ T5342] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 230.789552][ T5342] usb 9-1: Product: syz [ 230.790719][ T5342] usb 9-1: Manufacturer: syz [ 230.791972][ T5342] usb 9-1: SerialNumber: syz [ 230.794627][ T5342] usb 9-1: config 0 descriptor?? [ 230.799795][ T5342] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 231.002785][ T5342] usb 9-1: USB disconnect, device number 10 [ 231.007416][ T5342] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 231.266992][T11812] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1160057152 (74243657728 ns) > initial count (51111738112 ns). Using initial count to start timer. [ 231.384378][ T5994] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 231.585168][ T5958] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 231.648548][T11823] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 231.650495][T11823] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 231.652239][T11823] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 231.666704][T11823] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 231.719615][T11838] fuse: Bad value for 'fd' [ 231.776701][T11843] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1160057152 (74243657728 ns) > initial count (51111738112 ns). Using initial count to start timer. [ 231.941614][T11850] program syz.1.1744 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.944065][T11850] FAULT_INJECTION: forcing a failure. [ 231.944065][T11850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.964320][T11850] CPU: 1 UID: 0 PID: 11850 Comm: syz.1.1744 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 231.967563][T11850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 231.970295][T11850] Call Trace: [ 231.971185][T11850] [ 231.971987][T11850] dump_stack_lvl+0x16c/0x1f0 [ 231.973214][T11850] should_fail_ex+0x497/0x5b0 [ 231.974601][T11850] _copy_from_user+0x2e/0xd0 [ 231.976121][T11850] scsi_ioctl+0x7d4/0x1840 [ 231.977343][T11850] ? __pfx_scsi_ioctl+0x10/0x10 [ 231.978634][T11850] ? tomoyo_path_number_perm+0x190/0x5b0 [ 231.980118][T11850] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 231.981686][T11850] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 231.983399][T11850] ? do_vfs_ioctl+0x513/0x1950 [ 231.984652][T11850] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 231.985986][T11850] sg_ioctl+0xaca/0x26b0 [ 231.987100][T11850] ? __pfx_sg_ioctl+0x10/0x10 [ 231.988345][T11850] ? trace_lock_acquire+0x14a/0x1d0 [ 231.989705][T11850] ? __fget_files+0x244/0x3f0 [ 231.990928][T11850] ? __pfx_sg_ioctl+0x10/0x10 [ 231.992169][T11850] compat_ptr_ioctl+0x6b/0xa0 [ 231.993399][T11850] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 231.994814][T11850] __do_compat_sys_ioctl+0x259/0x2b0 [ 231.996270][T11850] __do_fast_syscall_32+0x73/0x120 [ 231.997617][T11850] do_fast_syscall_32+0x32/0x80 [ 231.998886][T11850] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.000544][T11850] RIP: 0023:0xf740e579 [ 232.001616][T11850] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 232.006855][T11850] RSP: 002b:00000000f56f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 232.009047][T11850] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 232.011295][T11850] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 232.013326][T11850] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 232.015377][T11850] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 232.017750][T11850] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 232.019809][T11850] [ 232.265550][ T5303] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 232.329511][T11867] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 232.331318][T11867] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 232.334064][T11867] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 232.336698][T11867] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 232.477052][ T5994] usb 7-1: device descriptor read/64, error -71 [ 232.505575][T11874] ax25_connect(): syz.3.1751 uses autobind, please contact jreuter@yaina.de [ 232.734552][ T5994] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 232.894543][ T5994] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 232.907576][ T5994] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 232.910429][ T5994] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 232.913315][ T5994] usb 7-1: config 0 interface 0 has no altsetting 0 [ 232.925846][ T5994] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 232.928295][ T5994] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 232.931155][ T5994] usb 7-1: config 0 interface 0 has no altsetting 0 [ 232.935024][ T5994] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 232.937253][ T5994] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 232.939926][ T5994] usb 7-1: config 0 interface 0 has no altsetting 0 [ 232.942396][ T5994] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 232.954409][ T5994] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 232.957722][ T5994] usb 7-1: config 0 interface 0 has no altsetting 0 [ 232.961036][ T5994] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 232.963565][ T5994] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 232.974451][ T5994] usb 7-1: config 0 interface 0 has no altsetting 0 [ 232.977400][ T5994] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 232.980275][ T5994] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 232.983632][ T5994] usb 7-1: config 0 interface 0 has no altsetting 0 [ 232.991857][ T5994] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 232.994383][ T5365] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1170: comm udevd: iget: checksum invalid [ 232.995387][ T5994] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.000979][ T5994] usb 7-1: config 0 interface 0 has no altsetting 0 [ 233.001218][ T5365] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1170: comm udevd: iget: checksum invalid [ 233.004029][ T5994] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.009180][ T5994] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.011324][ T5365] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1170: comm udevd: iget: checksum invalid [ 233.012720][ T5994] usb 7-1: config 0 interface 0 has no altsetting 0 [ 233.020348][ T5994] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 233.023241][ T5994] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 233.026183][ T5994] usb 7-1: Product: syz [ 233.027628][ T5994] usb 7-1: Manufacturer: syz [ 233.029104][ T5994] usb 7-1: SerialNumber: syz [ 233.033075][ T5994] usb 7-1: config 0 descriptor?? [ 233.038735][ T5994] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 233.243179][ T5994] usb 7-1: USB disconnect, device number 27 [ 233.249315][ T5994] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 233.460896][T11899] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 233.463952][T11899] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 233.468945][T11899] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 233.471909][T11899] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 233.734680][T11902] netlink: 'syz.1.1758': attribute type 2 has an invalid length. [ 233.737493][T11902] netlink: 155808 bytes leftover after parsing attributes in process `syz.1.1758'. [ 233.984815][T11912] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 233.987437][T11912] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 233.989730][T11912] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 234.001252][T11912] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 234.436694][T11946] FAULT_INJECTION: forcing a failure. [ 234.436694][T11946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.440694][T11946] CPU: 3 UID: 0 PID: 11946 Comm: syz.1.1766 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 234.444141][T11946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 234.447531][T11946] Call Trace: [ 234.448637][T11946] [ 234.449612][T11946] dump_stack_lvl+0x16c/0x1f0 [ 234.451113][T11946] should_fail_ex+0x497/0x5b0 [ 234.452645][T11946] save_fsave_header+0x17c/0x2e0 [ 234.454302][T11946] ? __pfx_save_fsave_header+0x10/0x10 [ 234.456268][T11946] ? copy_fpstate_to_sigframe+0x2ce/0xaf0 [ 234.458150][T11946] ? __local_bh_enable_ip+0xa4/0x120 [ 234.459968][T11946] copy_fpstate_to_sigframe+0x77a/0xaf0 [ 234.461696][T11946] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 234.463719][T11946] ? kmem_cache_free+0x152/0x4b0 [ 234.465267][T11946] ? collect_signal+0x31a/0x530 [ 234.466905][T11946] ? find_held_lock+0x2d/0x110 [ 234.468423][T11946] get_sigframe+0x4aa/0x9c0 [ 234.469939][T11946] ? __pfx_get_sigframe+0x10/0x10 [ 234.471615][T11946] ? _raw_spin_unlock_irq+0x23/0x50 [ 234.473285][T11946] ? siginfo_layout+0x1d2/0x290 [ 234.474903][T11946] ia32_setup_rt_frame+0xe4/0xb30 [ 234.476497][T11946] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 234.478371][T11946] arch_do_signal_or_restart+0x47b/0x7e0 [ 234.480243][T11946] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 234.482255][T11946] ? ksys_write+0x1ad/0x260 [ 234.483688][T11946] ? __pfx_ksys_write+0x10/0x10 [ 234.485354][T11946] syscall_exit_to_user_mode+0x150/0x2a0 [ 234.487112][T11946] __do_fast_syscall_32+0x80/0x120 [ 234.488809][T11946] do_fast_syscall_32+0x32/0x80 [ 234.490305][T11946] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 234.492384][T11946] RIP: 0023:0xf740e579 [ 234.493652][T11946] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 234.499756][T11946] RSP: 002b:00000000f56f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 234.502356][T11946] RAX: ffffffffffffffe0 RBX: 0000000000000010 RCX: 0000000020003c00 [ 234.504818][T11946] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 234.507449][T11946] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 234.510043][T11946] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 234.512462][T11946] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 234.514883][T11946] [ 234.516056][ C3] vkms_vblank_simulate: vblank timer overrun [ 234.814447][ T73] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 234.964773][ T73] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 234.968154][ T73] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.970914][ T73] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.973757][ T73] usb 8-1: config 0 interface 0 has no altsetting 0 [ 234.976286][ T73] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.979793][ T73] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.983458][ T73] usb 8-1: config 0 interface 0 has no altsetting 0 [ 234.986562][ T73] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.988826][ T73] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.991486][ T73] usb 8-1: config 0 interface 0 has no altsetting 0 [ 234.993815][ T73] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.996249][ T73] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.999927][ T73] usb 8-1: config 0 interface 0 has no altsetting 0 [ 235.002956][ T73] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.006103][ T73] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.008876][ T73] usb 8-1: config 0 interface 0 has no altsetting 0 [ 235.011263][ T73] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.013497][ T73] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.014343][ T5342] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 235.016272][ T73] usb 8-1: config 0 interface 0 has no altsetting 0 [ 235.020623][ T73] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.022914][ T73] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.025773][ T73] usb 8-1: config 0 interface 0 has no altsetting 0 [ 235.028186][ T73] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.030445][ T73] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.033325][ T73] usb 8-1: config 0 interface 0 has no altsetting 0 [ 235.036566][ T73] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 235.039575][ T73] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 235.042359][ T73] usb 8-1: Product: syz [ 235.043766][ T73] usb 8-1: Manufacturer: syz [ 235.045547][ T73] usb 8-1: SerialNumber: syz [ 235.048906][ T73] usb 8-1: config 0 descriptor?? [ 235.052013][ T73] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 235.168553][ T5342] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 235.172329][ T5342] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 235.175777][ T5342] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 235.178784][ T5342] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.183210][T11956] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 235.187773][ T5342] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 235.258444][ T73] usb 8-1: USB disconnect, device number 21 [ 235.261965][ T73] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 235.406636][T11956] FAULT_INJECTION: forcing a failure. [ 235.406636][T11956] name failslab, interval 1, probability 0, space 0, times 0 [ 235.409884][T11956] CPU: 0 UID: 0 PID: 11956 Comm: syz.4.1770 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 235.412569][T11956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 235.415321][T11956] Call Trace: [ 235.416156][T11956] [ 235.416933][T11956] dump_stack_lvl+0x16c/0x1f0 [ 235.418175][T11956] should_fail_ex+0x497/0x5b0 [ 235.419389][T11956] ? fs_reclaim_acquire+0xae/0x150 [ 235.420714][T11956] should_failslab+0xc2/0x120 [ 235.421851][T11956] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 235.423219][T11956] ? alloc_empty_file+0x73/0x1e0 [ 235.424487][T11956] alloc_empty_file+0x73/0x1e0 [ 235.425730][T11956] path_openat+0xe1/0x2d60 [ 235.426913][T11956] ? hlock_class+0x4e/0x130 [ 235.428106][T11956] ? __lock_acquire+0x163e/0x3ce0 [ 235.429368][T11956] ? __pfx_path_openat+0x10/0x10 [ 235.430633][T11956] ? __pfx___lock_acquire+0x10/0x10 [ 235.431980][T11956] do_filp_open+0x1dc/0x430 [ 235.433166][T11956] ? __pfx_do_filp_open+0x10/0x10 [ 235.434482][T11956] ? find_held_lock+0x2d/0x110 [ 235.435723][T11956] ? _raw_spin_unlock+0x28/0x50 [ 235.436956][T11956] ? alloc_fd+0x2d7/0x6c0 [ 235.438037][T11956] do_sys_openat2+0x17a/0x1e0 [ 235.439239][T11956] ? __pfx_do_sys_openat2+0x10/0x10 [ 235.440594][T11956] ? __fget_files+0x244/0x3f0 [ 235.441829][T11956] __ia32_compat_sys_openat+0x16e/0x210 [ 235.443282][T11956] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 235.444878][T11956] ? ksys_write+0x1ad/0x260 [ 235.446038][T11956] __do_fast_syscall_32+0x73/0x120 [ 235.447346][T11956] do_fast_syscall_32+0x32/0x80 [ 235.448620][T11956] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 235.450262][T11956] RIP: 0023:0xf7fe1579 [ 235.451328][T11956] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 235.456305][T11956] RSP: 002b:00000000f5766100 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 235.458472][T11956] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5766150 [ 235.460554][T11956] RDX: 0000000000042041 RSI: 0000000000000000 RDI: 00000000f746dff4 [ 235.462576][T11956] RBP: 0000000000042041 R08: 0000000000000000 R09: 0000000000000000 [ 235.464602][T11956] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 235.466638][T11956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 235.468698][T11956] [ 235.474947][ T5342] usb 9-1: USB disconnect, device number 11 [ 235.970305][T11971] EXT4-fs error: 110 callbacks suppressed [ 235.970321][T11971] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 235.976968][T11971] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 235.982132][T11971] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 235.987952][T11971] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 235.992335][T11971] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 235.997806][T11971] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 236.001957][T11971] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 236.004537][ T5958] Bluetooth: hci0: command 0x0401 tx timeout [ 236.006337][ T5952] Bluetooth: hci3: command 0x040f tx timeout [ 236.007954][ T5955] Bluetooth: hci2: command 0x0c1a tx timeout [ 236.007979][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 236.012923][T11971] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 236.014793][ T5303] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 236.018531][T11971] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 236.024746][T11971] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1770: comm modprobe: iget: checksum invalid [ 237.614462][ T73] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 237.714500][ T35] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 237.765986][ T73] usb 6-1: Using ep0 maxpacket: 8 [ 237.769416][ T73] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 237.771609][ T73] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 237.774154][ T73] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 237.776763][ T73] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 237.779331][ T73] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.782580][ T73] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 237.785235][ T73] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.864813][ T35] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 237.867580][ T35] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 237.869872][ T35] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 237.872696][ T35] usb 9-1: config 0 interface 0 has no altsetting 0 [ 237.875299][ T35] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 237.877639][ T35] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 237.880538][ T35] usb 9-1: config 0 interface 0 has no altsetting 0 [ 237.882996][ T35] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 237.885337][ T35] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 237.888118][ T35] usb 9-1: config 0 interface 0 has no altsetting 0 [ 237.890584][ T35] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 237.892884][ T35] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 237.895748][ T35] usb 9-1: config 0 interface 0 has no altsetting 0 [ 237.898782][ T35] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 237.901124][ T35] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 237.903957][ T35] usb 9-1: config 0 interface 0 has no altsetting 0 [ 237.906562][ T35] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 237.908925][ T35] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 237.911755][ T35] usb 9-1: config 0 interface 0 has no altsetting 0 [ 237.914248][ T35] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 237.916722][ T35] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 237.919585][ T35] usb 9-1: config 0 interface 0 has no altsetting 0 [ 237.922090][ T35] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 237.924522][ T35] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 237.927337][ T35] usb 9-1: config 0 interface 0 has no altsetting 0 [ 237.931222][ T35] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 237.933662][ T35] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 237.936045][ T35] usb 9-1: Product: syz [ 237.937256][ T35] usb 9-1: Manufacturer: syz [ 237.938611][ T35] usb 9-1: SerialNumber: syz [ 237.941383][ T35] usb 9-1: config 0 descriptor?? [ 237.945113][ T35] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 238.030736][ T73] usb 6-1: usb_control_msg returned -32 [ 238.032252][ T73] usbtmc 6-1:16.0: can't read capabilities [ 238.084424][ T5303] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 238.084544][ T5958] Bluetooth: hci1: command 0x0c1a tx timeout [ 238.086547][ T5952] Bluetooth: hci0: command 0x0401 tx timeout [ 238.088738][ T5955] Bluetooth: hci3: command 0x040f tx timeout [ 238.093684][T11957] ================================================================== [ 238.096436][T11957] BUG: KASAN: slab-use-after-free in cmd_complete_rsp+0x1b3/0x1e0 [ 238.099115][T11957] Read of size 8 at addr ffff8880259034c0 by task syz.2.1769/11957 [ 238.102718][T11957] [ 238.104252][T11957] CPU: 2 UID: 0 PID: 11957 Comm: syz.2.1769 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 238.107825][T11957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 238.111400][T11957] Call Trace: [ 238.112557][T11957] [ 238.113598][T11957] dump_stack_lvl+0x116/0x1f0 [ 238.115245][T11957] print_report+0xc3/0x620 [ 238.116810][T11957] ? __virt_addr_valid+0x5e/0x590 [ 238.118584][T11957] ? __phys_addr+0xc6/0x150 [ 238.120196][T11957] kasan_report+0xd9/0x110 [ 238.121739][T11957] ? cmd_complete_rsp+0x1b3/0x1e0 [ 238.123480][T11957] ? cmd_complete_rsp+0x1b3/0x1e0 [ 238.125220][T11957] cmd_complete_rsp+0x1b3/0x1e0 [ 238.126876][T11957] mgmt_pending_foreach+0xdf/0x140 [ 238.128636][T11957] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 238.130473][T11957] __mgmt_power_off+0x12f/0x2c0 [ 238.132248][T11957] ? __pfx___mgmt_power_off+0x10/0x10 [ 238.134093][T11957] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 238.136184][T11957] ? lockdep_hardirqs_on+0x7c/0x110 [ 238.137984][T11957] ? rose_get_neigh+0x170/0x640 [ 238.139696][T11957] hci_dev_close_sync+0xd37/0x1260 [ 238.141497][T11957] hci_dev_do_close+0x2e/0x90 [ 238.143128][T11957] hci_dev_close+0x183/0x1e0 [ 238.144714][T11957] hci_sock_ioctl+0x28c/0x880 [ 238.146173][ T1011] usb 9-1: USB disconnect, device number 12 [ 238.146330][T11957] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 238.148769][ T1011] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 238.149713][T11957] hci_sock_compat_ioctl+0x43/0x80 [ 238.153093][T11957] compat_sock_ioctl+0x17b/0x7e0 [ 238.154784][T11957] ? __pfx_hci_sock_compat_ioctl+0x10/0x10 [ 238.156784][T11957] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 238.158668][T11957] ? __fget_files+0x244/0x3f0 [ 238.160292][T11957] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 238.162157][T11957] __do_compat_sys_ioctl+0x259/0x2b0 [ 238.164023][T11957] __do_fast_syscall_32+0x73/0x120 [ 238.165781][T11957] do_fast_syscall_32+0x32/0x80 [ 238.167435][T11957] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 238.169528][T11957] RIP: 0023:0xf7fc6579 [ 238.170891][T11957] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 238.177258][T11957] RSP: 002b:00000000f572555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 238.180040][T11957] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000400448ca [ 238.182676][T11957] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 238.185366][T11957] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 238.187970][T11957] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 238.190572][T11957] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 238.193228][T11957] [ 238.194290][T11957] [ 238.195117][T11957] Allocated by task 11995: [ 238.196636][T11957] kasan_save_stack+0x33/0x60 [ 238.198258][T11957] kasan_save_track+0x14/0x30 [ 238.199826][T11957] __kasan_kmalloc+0xaa/0xb0 [ 238.201419][T11957] mgmt_pending_new+0x5b/0x290 [ 238.203072][T11957] mgmt_pending_add+0x36/0x160 [ 238.204657][T11957] start_discovery_internal+0x4a1/0x800 [ 238.206499][T11957] hci_sock_sendmsg+0x1528/0x25e0 [ 238.208334][T11957] sock_write_iter+0x4fe/0x5b0 [ 238.210012][T11957] vfs_write+0x5ae/0x1150 [ 238.211518][T11957] ksys_write+0x1fa/0x260 [ 238.213040][T11957] __do_fast_syscall_32+0x73/0x120 [ 238.214794][T11957] do_fast_syscall_32+0x32/0x80 [ 238.216480][T11957] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 238.218734][T11957] [ 238.219582][T11957] Freed by task 11957: [ 238.220987][T11957] kasan_save_stack+0x33/0x60 [ 238.222611][T11957] kasan_save_track+0x14/0x30 [ 238.224233][T11957] kasan_save_free_info+0x3b/0x60 [ 238.225960][T11957] __kasan_slab_free+0x51/0x70 [ 238.227660][T11957] kfree+0x14f/0x4b0 [ 238.228996][T11957] start_discovery_complete+0x146/0x220 [ 238.230898][T11957] _hci_cmd_sync_cancel_entry.constprop.0+0x6c/0x1d0 [ 238.233161][T11957] hci_cmd_sync_dequeue+0x178/0x1f0 [ 238.234926][T11957] cmd_complete_rsp+0x46/0x1e0 [ 238.236556][T11957] mgmt_pending_foreach+0xdf/0x140 [ 238.238303][T11957] __mgmt_power_off+0x12f/0x2c0 [ 238.239770][T11957] hci_dev_close_sync+0xd37/0x1260 [ 238.241147][T11957] hci_dev_do_close+0x2e/0x90 [ 238.242408][T11957] hci_dev_close+0x183/0x1e0 [ 238.243686][T11957] hci_sock_ioctl+0x28c/0x880 [ 238.244951][T11957] hci_sock_compat_ioctl+0x43/0x80 [ 238.246322][T11957] compat_sock_ioctl+0x17b/0x7e0 [ 238.247646][T11957] __do_compat_sys_ioctl+0x259/0x2b0 [ 238.249333][T11957] __do_fast_syscall_32+0x73/0x120 [ 238.251165][T11957] do_fast_syscall_32+0x32/0x80 [ 238.252894][T11957] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 238.255131][T11957] [ 238.256002][T11957] The buggy address belongs to the object at ffff888025903480 [ 238.256002][T11957] which belongs to the cache kmalloc-96 of size 96 [ 238.259607][T11957] The buggy address is located 64 bytes inside of [ 238.259607][T11957] freed 96-byte region [ffff888025903480, ffff8880259034e0) [ 238.262815][T11957] [ 238.263374][T11957] The buggy address belongs to the physical page: [ 238.265074][T11957] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25903 [ 238.267427][T11957] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 238.269295][T11957] page_type: f5(slab) [ 238.270621][T11957] raw: 00fff00000000000 ffff88801ac42280 ffffea0000957ec0 dead000000000004 [ 238.273672][T11957] raw: 0000000000000000 0000000000200020 00000001f5000000 0000000000000000 [ 238.276185][T11957] page dumped because: kasan: bad access detected [ 238.277861][T11957] page_owner tracks the page as allocated [ 238.279410][T11957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5382, tgid 5382 (udevd), ts 19983487569, free_ts 19976166167 [ 238.283998][T11957] post_alloc_hook+0x2d1/0x350 [ 238.285206][T11957] get_page_from_freelist+0xfce/0x2f80 [ 238.286671][T11957] __alloc_pages_noprof+0x223/0x25a0 [ 238.288377][T11957] alloc_pages_mpol_noprof+0x2c9/0x610 [ 238.290274][T11957] new_slab+0x2c9/0x410 [ 238.291642][T11957] ___slab_alloc+0xd1d/0x16f0 [ 238.292852][T11957] __slab_alloc.constprop.0+0x56/0xb0 [ 238.294222][T11957] __kmalloc_noprof+0x379/0x410 [ 238.295501][T11957] tomoyo_encode2+0x100/0x3e0 [ 238.296774][T11957] tomoyo_realpath_from_path+0x1a7/0x710 [ 238.298604][T11957] tomoyo_path_perm+0x273/0x480 [ 238.300363][T11957] security_inode_getattr+0x116/0x290 [ 238.302287][T11957] vfs_getattr+0x36/0xb0 [ 238.303824][T11957] vfs_statx_path+0x36/0x390 [ 238.305487][T11957] vfs_statx+0x145/0x1e0 [ 238.307023][T11957] vfs_fstatat+0x9f/0x160 [ 238.308590][T11957] page last free pid 5382 tgid 5382 stack trace: [ 238.310844][T11957] free_unref_page+0x661/0x1080 [ 238.312385][T11957] qlist_free_all+0x4e/0x120 [ 238.313676][T11957] kasan_quarantine_reduce+0x192/0x1e0 [ 238.315228][T11957] __kasan_slab_alloc+0x69/0x90 [ 238.316553][T11957] kmem_cache_alloc_noprof+0x121/0x2f0 [ 238.318392][T11957] getname_flags.part.0+0x4c/0x550 [ 238.320172][T11957] getname_flags+0x93/0xf0 [ 238.321683][T11957] vfs_fstatat+0x86/0x160 [ 238.323159][T11957] __do_sys_newfstatat+0xa2/0x130 [ 238.324809][T11957] do_syscall_64+0xcd/0x250 [ 238.326334][T11957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.328329][T11957] [ 238.329141][T11957] Memory state around the buggy address: [ 238.331021][T11957] ffff888025903380: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 238.333693][T11957] ffff888025903400: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 238.336374][T11957] >ffff888025903480: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 238.339076][T11957] ^ [ 238.341087][T11957] ffff888025903500: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 238.343771][T11957] ffff888025903580: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 238.346409][T11957] ================================================================== [ 238.355411][T11957] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 238.357895][T11957] CPU: 2 UID: 0 PID: 11957 Comm: syz.2.1769 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 238.361466][T11957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 238.365051][T11957] Call Trace: [ 238.366184][T11957] [ 238.367213][T11957] dump_stack_lvl+0x3d/0x1f0 [ 238.368795][T11957] panic+0x71d/0x800 [ 238.370138][T11957] ? __pfx_panic+0x10/0x10 [ 238.371669][T11957] ? preempt_schedule_thunk+0x1a/0x30 [ 238.373473][T11957] ? preempt_schedule_common+0x44/0xc0 [ 238.375324][T11957] check_panic_on_warn+0xab/0xb0 [ 238.377008][T11957] end_report+0x117/0x180 [ 238.378586][T11957] kasan_report+0xe9/0x110 [ 238.380218][T11957] ? cmd_complete_rsp+0x1b3/0x1e0 [ 238.381953][T11957] ? cmd_complete_rsp+0x1b3/0x1e0 [ 238.383700][T11957] cmd_complete_rsp+0x1b3/0x1e0 [ 238.385372][T11957] mgmt_pending_foreach+0xdf/0x140 [ 238.387152][T11957] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 238.388978][T11957] __mgmt_power_off+0x12f/0x2c0 [ 238.390621][T11957] ? __pfx___mgmt_power_off+0x10/0x10 [ 238.392377][T11957] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 238.394401][T11957] ? lockdep_hardirqs_on+0x7c/0x110 [ 238.396187][T11957] ? rose_get_neigh+0x170/0x640 [ 238.397861][T11957] hci_dev_close_sync+0xd37/0x1260 [ 238.399620][T11957] hci_dev_do_close+0x2e/0x90 [ 238.401257][T11957] hci_dev_close+0x183/0x1e0 [ 238.402648][T11957] hci_sock_ioctl+0x28c/0x880 [ 238.404158][T11957] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 238.405920][T11957] hci_sock_compat_ioctl+0x43/0x80 [ 238.407640][T11957] compat_sock_ioctl+0x17b/0x7e0 [ 238.409306][T11957] ? __pfx_hci_sock_compat_ioctl+0x10/0x10 [ 238.411283][T11957] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 238.413038][T11957] ? __fget_files+0x244/0x3f0 [ 238.414589][T11957] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 238.416459][T11957] __do_compat_sys_ioctl+0x259/0x2b0 [ 238.418279][T11957] __do_fast_syscall_32+0x73/0x120 [ 238.419985][T11957] do_fast_syscall_32+0x32/0x80 [ 238.421184][T11957] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 238.423164][T11957] RIP: 0023:0xf7fc6579 [ 238.424549][T11957] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 238.430233][T11957] RSP: 002b:00000000f572555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 238.432308][T11957] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000400448ca [ 238.434334][T11957] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 238.436380][T11957] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 238.438744][T11957] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 238.440845][T11957] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 238.443413][T11957] [ 238.445012][T11957] Kernel Offset: disabled [ 238.446474][T11957] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:58:52 Registers: info registers vcpu 0 CPU#0 RAX=00000000008aba5b RBX=0000000000000000 RCX=ffffffff8b14ed79 RDX=0000000000000000 RSI=ffffffff8b4cc8e0 RDI=ffffffff8bb13a60 RBP=fffffbfff1b52af8 RSP=ffffffff8da07e20 R8 =0000000000000001 R9 =ffffed1005687025 R10=ffff88802b43812b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8da957c0 R14=ffffffff901cf808 R15=0000000000000000 RIP=ffffffff8b15015f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3755d6 CR3=000000006e806000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000b86cd5 RBX=0000000000000001 RCX=ffffffff8b14ed79 RDX=0000000000000000 RSI=ffffffff8b4cc8e0 RDI=ffffffff8bb13a60 RBP=ffffed10036e9910 RSP=ffffc90000477e08 R8 =0000000000000001 R9 =ffffed10056a7025 R10=ffff88802b53812b R11=0000000000000000 R12=0000000000000001 R13=ffff88801b74c880 R14=ffffffff901cf808 R15=0000000000000000 RIP=ffffffff8b15015f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020032000 CR3=0000000066552000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8504b0c5 RDI=ffffffff9a645360 RBP=ffffffff9a645320 RSP=ffffc90003f1f518 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=000000000000002e R14=ffffffff8504b060 R15=0000000000000000 RIP=ffffffff8504b0ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000330efff8 CR3=0000000061828000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000423311 RBX=0000000000000003 RCX=ffffffff8b14ed79 RDX=0000000000000000 RSI=ffffffff8b4cc8e0 RDI=ffffffff8bb13a60 RBP=ffffed10036ec488 RSP=ffffc90000497e08 R8 =0000000000000001 R9 =ffffed10056e7025 R10=ffff88802b73812b R11=0000000000000000 R12=0000000000000003 R13=ffff88801b762440 R14=ffffffff901cf808 R15=0000000000000000 RIP=ffffffff8b15015f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5187065 CR3=000000004c30a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000