last executing test programs: 20.277401374s ago: executing program 3 (id=1473): socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0xa, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x6000001c) socket$netlink(0x10, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) openat$nullb(0xffffff9c, &(0x7f0000000200), 0x80, 0x0) 20.131360856s ago: executing program 0 (id=1474): mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x1d8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000c40)={'vxcan0\x00'}) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) r7 = openat$nullb(0xffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0401273, &(0x7f0000000100)={'\x00', 0xfff3, 0xd, 0x143a00, 0x5, 0x6, 0xffffffffffffffff}) 19.821394485s ago: executing program 1 (id=1477): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) landlock_create_ruleset(&(0x7f0000000040)={0xc89, 0x1, 0x2}, 0x18, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040)={0x2, 0x13}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180)={0x2, 0xfc}, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000340)='.\x00', 0xa50003d1) socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) 19.211484152s ago: executing program 3 (id=1480): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x181c82, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x7}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x4048884) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x2, 0x8, 0x4, 0x70fc6de5}]}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a124, 0x60, {0x0, 0x100}}) (fail_nth: 1) 19.110910894s ago: executing program 0 (id=1481): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1400000004000000040000000900004000000000", @ANYRES32, @ANYBLOB="001d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1d, [0x8000, 0x8000, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4b, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x4, 0x3c5b, 0x1, 0x6, 0x9, 0x3, 0x15bb, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x9, 0x4, 0x3, 0x7, 0x0, 0x71, 0x7, 0x1, 0x4, 0x5, 0xd091, 0x3b, 0xb, 0x6, 0x6, 0xfffffffd, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x9, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x3, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x200c7, 0xf9, 0xd, 0x8002bf, 0x6c9, 0x10000007, 0xfffffffc, 0x3, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x5, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f5, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x800000d, 0x6, 0x5, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7b, 0x9, 0x3, 0x3, 0xa, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x3, 0xf5fd, 0x0, 0x5, 0x1, 0x1100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x4, 0x20000005, 0xfffffffc, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xaa, 0x3, 0x8, 0x6cfc, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0xc4, 0x120000, 0xbe, 0xfffffc01, 0xa2ed, 0x2, 0x26], [0x9, 0x5, 0x7, 0xb, 0x5, 0x938, 0x9, 0x80000006, 0x0, 0x5, 0x7d, 0x1fc, 0x6, 0x6, 0x8, 0x57b, 0x101, 0x10000, 0x6, 0x7fff, 0xfffd, 0x4, 0x20002, 0xb0, 0x1, 0x2, 0x14c, 0x60a6, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xca, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9600, 0xa, 0x2, 0x4, 0x40000006, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xe, 0x7, 0xfffffffe, 0x10000, 0x0, 0x7, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = socket(0x28, 0x5, 0x5d) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x5, 0x5}, 0x8) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x2) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000000c0), 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x343, 0x20000080) close(0xffffffffffffffff) 18.769342469s ago: executing program 2 (id=1482): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1400000004000000040000000900004000000000", @ANYRES32, @ANYBLOB="001d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1d, [0x8000, 0x8000, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4b, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x4, 0x3c5b, 0x1, 0x6, 0x9, 0x3, 0x15bb, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x9, 0x4, 0x3, 0x7, 0x0, 0x71, 0x7, 0x1, 0x4, 0x5, 0xd091, 0x3b, 0xb, 0x6, 0x6, 0xfffffffd, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x9, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x3, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x200c7, 0xf9, 0xd, 0x8002bf, 0x6c9, 0x10000007, 0xfffffffc, 0x3, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x5, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f5, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x800000d, 0x6, 0x5, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7b, 0x9, 0x3, 0x3, 0xa, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x3, 0xf5fd, 0x0, 0x5, 0x1, 0x1100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x4, 0x20000005, 0xfffffffc, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xaa, 0x3, 0x8, 0x6cfc, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0xc4, 0x120000, 0xbe, 0xfffffc01, 0xa2ed, 0x2, 0x26], [0x9, 0x5, 0x7, 0xb, 0x5, 0x938, 0x9, 0x80000006, 0x0, 0x5, 0x7d, 0x1fc, 0x6, 0x6, 0x8, 0x57b, 0x101, 0x10000, 0x6, 0x7fff, 0xfffd, 0x4, 0x20002, 0xb0, 0x1, 0x2, 0x14c, 0x60a6, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xca, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9600, 0xa, 0x2, 0x4, 0x40000006, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xe, 0x7, 0xfffffffe, 0x10000, 0x0, 0x7, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = socket(0x28, 0x5, 0x5d) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x5, 0x5}, 0x8) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x2) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f00000000c0), 0x4) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x343, 0x20000080) close(r5) 18.761245686s ago: executing program 1 (id=1483): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9, 0x0, 0x8000}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x8, 0x4) sendmmsg(r2, &(0x7f0000000c40)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x4810) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000000007c0000000099cdcd7c542dccf802", @ANYRES32=0x0, @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r3}, 0x10) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r3, r4, 0x10, 0x0, @void}, 0x10) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000140)={r7, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000002c0)={r7, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/92, 0x5c}], 0x1}, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r9, 0x891c, 0x0) 18.691459667s ago: executing program 1 (id=1484): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000340)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)={0x4, 0x0, [{0xeeef0000, 0xe1, &(0x7f0000000580)=""/225}, {0xd000, 0x24, &(0x7f00000003c0)=""/36}, {0x100000, 0x73, &(0x7f0000000680)=""/115}, {0x0, 0xa4, &(0x7f0000000700)=""/164}]}) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsmount(r5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x26) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x501483, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) lseek(r6, 0x2, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) openat$tcp_mem(0xffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r7, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r9, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) 18.261384842s ago: executing program 3 (id=1485): socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0xa, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, 0x0, 0x0, 0x6000001c) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) openat$nullb(0xffffff9c, &(0x7f0000000200), 0x80, 0x0) 18.261141749s ago: executing program 0 (id=1486): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x17, &(0x7f0000000340)=0x1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xffffffffffffff2f, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x21}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x10000000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00'}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 18.104463484s ago: executing program 2 (id=1487): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = io_uring_setup(0x17f7, &(0x7f0000000440)={0x0, 0x0, 0x80, 0x8000, 0xa5}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0), 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x10002) ioctl$SG_BLKTRACESTART(r2, 0x1274, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) io_uring_setup(0x17f7, &(0x7f0000000440)={0x0, 0x0, 0x80, 0x8000, 0xa5}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0), 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) (async) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x10002) (async) ioctl$SG_BLKTRACESTART(r2, 0x1274, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) (async) 17.991267331s ago: executing program 2 (id=1488): socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0xa, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x6000001c) socket$netlink(0x10, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) openat$nullb(0xffffff9c, &(0x7f0000000200), 0x80, 0x0) 17.781413849s ago: executing program 1 (id=1489): mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x1d8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000c40)={'vxcan0\x00'}) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) r7 = openat$nullb(0xffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0401273, &(0x7f0000000100)={'\x00', 0xfff3, 0xd, 0x143a00, 0x5, 0x6, 0xffffffffffffffff}) 17.267873101s ago: executing program 0 (id=1490): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf220", 0x15}], 0x1}}], 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000001c0)=0xfffff800) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xd}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x401}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x4c}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0182101, &(0x7f0000000080)) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000001840)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0], &(0x7f0000000040), 0x1, r5, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000380)={0x1, 0x1, &(0x7f0000000440)=[r5], &(0x7f0000000040), &(0x7f00000001c0)=[r6], &(0x7f0000000200)}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004"], 0x48) openat$rdma_cm(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 17.096737484s ago: executing program 3 (id=1491): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@deltaction={0x260, 0x31, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9a}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x201e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x66}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff80}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe08e}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1f}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x4}]}, 0x260}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x80000000, 0x9, 0x31363553, 0x0, 0xa, [{0x2, 0x5}, {0x6, 0x7f36}, {0x200, 0x70}, {0x3, 0xf}, {0xa, 0x100}, {0x6, 0x589}, {0x8, 0x7}, {0x10001, 0x8}], 0x10, 0x8, 0x2, 0x2, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = openat$nmem0(0xffffff9c, &(0x7f0000000040), 0x101040, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000080), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)}, 0x48005) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f00000001c0)={0x1d, r5, 0x2, {0x1, 0xff, 0x2}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r7, {0xfff2, 0x4}, {0x0, 0xfff1}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) unshare(0x44040000) openat$hpet(0xffffff9c, 0x0, 0x341800, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macvtap0\x00'}) 16.470487449s ago: executing program 2 (id=1492): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x40) syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_emit_ethernet(0x106, &(0x7f00000003c0)={@link_local, @dev, @void, {@ipv4={0x800, @udp={{0x17, 0x4, 0x1, 0x3e, 0xf8, 0x64, 0x0, 0x80, 0x11, 0x0, @local, @multicast2, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0xb9, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@empty, 0xc648}, {@multicast1, 0x158}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x9}, {@empty, 0x401}, {@loopback, 0x6}]}, @timestamp={0x44, 0x10, 0xdc, 0x0, 0x0, [0x3, 0x816, 0x1]}]}}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "a225ea3f243cda87e504adfacbf874ca25b160803b3f0b25a43906a3b1c5dd7a", "9fbd9ea8902c32c834665765cf9907fd16b0e5b6cd3e829cb71672ff18f8027a3c868a368c05ee2d2d5b74e01796d288", "c08ef0949c297478689e361775f0adf288c079516e95f180b3302381", {"202b2282e48f7e4dc6d4157c1be42343", "54ab83a855f38c0a9daa92f810ff6ab2"}}}}}}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0x4}, 'port0\x00', 0x786520dbf34c80ff, 0x20a03, 0x122, 0x0, 0x0, 0xc, 0x400, 0x0, 0x0, 0x87}) openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x123482, 0x0) 16.470056014s ago: executing program 1 (id=1493): socket$kcm(0xa, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x6000001c) 16.380904006s ago: executing program 0 (id=1494): socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0xa, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x6000001c) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) openat$nullb(0xffffff9c, &(0x7f0000000200), 0x80, 0x0) 16.379414336s ago: executing program 2 (id=1495): socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0xa, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x6000001c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 16.198147528s ago: executing program 3 (id=1496): socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0xa, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x6000001c) openat$nullb(0xffffff9c, &(0x7f0000000200), 0x80, 0x0) 15.399844448s ago: executing program 1 (id=1497): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1400000004000000040000000900004000000000", @ANYRES32, @ANYBLOB="001d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1d, [0x8000, 0x8000, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4b, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x4, 0x3c5b, 0x1, 0x6, 0x9, 0x3, 0x15bb, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x9, 0x4, 0x3, 0x7, 0x0, 0x71, 0x7, 0x1, 0x4, 0x5, 0xd091, 0x3b, 0xb, 0x6, 0x6, 0xfffffffd, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x9, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x3, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x200c7, 0xf9, 0xd, 0x8002bf, 0x6c9, 0x10000007, 0xfffffffc, 0x3, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x5, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f5, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x800000d, 0x6, 0x5, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7b, 0x9, 0x3, 0x3, 0xa, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x3, 0xf5fd, 0x0, 0x5, 0x1, 0x1100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x4, 0x20000005, 0xfffffffc, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xaa, 0x3, 0x8, 0x6cfc, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0xc4, 0x120000, 0xbe, 0xfffffc01, 0xa2ed, 0x2, 0x26], [0x9, 0x5, 0x7, 0xb, 0x5, 0x938, 0x9, 0x80000006, 0x0, 0x5, 0x7d, 0x1fc, 0x6, 0x6, 0x8, 0x57b, 0x101, 0x10000, 0x6, 0x7fff, 0xfffd, 0x4, 0x20002, 0xb0, 0x1, 0x2, 0x14c, 0x60a6, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xca, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9600, 0xa, 0x2, 0x4, 0x40000006, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xe, 0x7, 0xfffffffe, 0x10000, 0x0, 0x7, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = socket(0x28, 0x5, 0x5d) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x5, 0x5}, 0x8) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x2) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000000c0), 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x343, 0x20000080) close(0xffffffffffffffff) 15.399273609s ago: executing program 0 (id=1498): mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x1d8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000c40)={'vxcan0\x00'}) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) r7 = openat$nullb(0xffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0401273, &(0x7f0000000100)={'\x00', 0xfff3, 0xd, 0x143a00, 0x5, 0x6, 0xffffffffffffffff}) 15.291146771s ago: executing program 2 (id=1499): socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0xa, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x6000001c) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) openat$nullb(0xffffff9c, &(0x7f0000000200), 0x80, 0x0) 15.16134991s ago: executing program 3 (id=1500): socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0xa, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x6000001c) socket$netlink(0x10, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) openat$nullb(0xffffff9c, &(0x7f0000000200), 0x80, 0x0) 54.885238ms ago: executing program 32 (id=1498): mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x1d8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000c40)={'vxcan0\x00'}) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) r7 = openat$nullb(0xffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0401273, &(0x7f0000000100)={'\x00', 0xfff3, 0xd, 0x143a00, 0x5, 0x6, 0xffffffffffffffff}) 46.070557ms ago: executing program 33 (id=1497): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1400000004000000040000000900004000000000", @ANYRES32, @ANYBLOB="001d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1d, [0x8000, 0x8000, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4b, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x4, 0x3c5b, 0x1, 0x6, 0x9, 0x3, 0x15bb, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x9, 0x4, 0x3, 0x7, 0x0, 0x71, 0x7, 0x1, 0x4, 0x5, 0xd091, 0x3b, 0xb, 0x6, 0x6, 0xfffffffd, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x9, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x3, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x200c7, 0xf9, 0xd, 0x8002bf, 0x6c9, 0x10000007, 0xfffffffc, 0x3, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x5, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f5, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x800000d, 0x6, 0x5, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7b, 0x9, 0x3, 0x3, 0xa, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x3, 0xf5fd, 0x0, 0x5, 0x1, 0x1100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x4, 0x20000005, 0xfffffffc, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xaa, 0x3, 0x8, 0x6cfc, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0xc4, 0x120000, 0xbe, 0xfffffc01, 0xa2ed, 0x2, 0x26], [0x9, 0x5, 0x7, 0xb, 0x5, 0x938, 0x9, 0x80000006, 0x0, 0x5, 0x7d, 0x1fc, 0x6, 0x6, 0x8, 0x57b, 0x101, 0x10000, 0x6, 0x7fff, 0xfffd, 0x4, 0x20002, 0xb0, 0x1, 0x2, 0x14c, 0x60a6, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xca, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9600, 0xa, 0x2, 0x4, 0x40000006, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xe, 0x7, 0xfffffffe, 0x10000, 0x0, 0x7, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = socket(0x28, 0x5, 0x5d) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x5, 0x5}, 0x8) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x2) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000000c0), 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x343, 0x20000080) close(0xffffffffffffffff) 186.117µs ago: executing program 34 (id=1499): socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0xa, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x6000001c) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) openat$nullb(0xffffff9c, &(0x7f0000000200), 0x80, 0x0) 0s ago: executing program 35 (id=1500): socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0xa, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x6000001c) socket$netlink(0x10, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"a2e3ad21ed6b0af99cfbf4c007f70eb4d04fe7ff7fc6e5539b0872fc8b546a1b4d09940f08900c878f0e1ac6e7049b4cb4956c409b3c2a0867f3988f7ef319520100ffe8d178708c523c921b1b0f5a0a169b50d336cd3b78130daa61d8f809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1010}}, 0x1b7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) openat$nullb(0xffffff9c, &(0x7f0000000200), 0x80, 0x0) kernel console output (not intermixed with test programs): _str(low-speed) [ 286.011307][ T9896] vhci_hcd vhci_hcd.0: Device attached [ 286.201675][ T834] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 286.229564][ T9898] vhci_hcd: connection closed [ 286.229821][ T77] vhci_hcd: stop threads [ 286.236081][ T77] vhci_hcd: release socket [ 286.238063][ T77] vhci_hcd: disconnect device [ 286.241373][ T5826] vhci_hcd: vhci_device speed not set [ 286.251411][ T9] usb 37-1: new low-speed USB device number 7 using vhci_hcd [ 286.254523][ T9] usb 37-1: enqueue for inactive port 0 [ 286.341692][ T9] vhci_hcd: vhci_device speed not set [ 286.581743][ T834] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 286.962509][ T9917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.880'. [ 286.967386][ T9917] netlink: 177 bytes leftover after parsing attributes in process `syz.2.880'. [ 287.043957][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 287.074652][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 287.113981][ T9920] ceph: No mds server is up or the cluster is laggy [ 287.151841][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.881'. [ 287.154867][ T9925] netlink: 177 bytes leftover after parsing attributes in process `syz.1.881'. [ 287.397863][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'. [ 287.402314][ T9930] netlink: 177 bytes leftover after parsing attributes in process `syz.3.882'. [ 288.894001][ T834] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 288.984114][ T9950] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 288.986332][ T9950] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 288.989345][ T9950] vhci_hcd vhci_hcd.0: Device attached [ 289.086646][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 289.088597][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 289.126137][ T9955] ceph: No mds server is up or the cluster is laggy [ 289.169249][ T9951] vhci_hcd: connection closed [ 289.171082][ T65] vhci_hcd: stop threads [ 289.175079][ T65] vhci_hcd: release socket [ 289.176665][ T65] vhci_hcd: disconnect device [ 289.181572][ T1017] vhci_hcd: vhci_device speed not set [ 289.731324][ T9969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 289.734784][ T9969] netlink: 177 bytes leftover after parsing attributes in process `syz.3.892'. [ 289.939880][ T9976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.893'. [ 289.947691][ T9976] netlink: 177 bytes leftover after parsing attributes in process `syz.1.893'. [ 290.267539][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.895'. [ 290.272521][ T9984] netlink: 177 bytes leftover after parsing attributes in process `syz.0.895'. [ 290.980247][ T9995] FAULT_INJECTION: forcing a failure. [ 290.980247][ T9995] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 290.988252][ T9995] CPU: 0 UID: 0 PID: 9995 Comm: syz.1.898 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 290.988278][ T9995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 290.988284][ T9995] Call Trace: [ 290.988288][ T9995] [ 290.988293][ T9995] dump_stack_lvl+0x16c/0x1f0 [ 290.988316][ T9995] should_fail_ex+0x512/0x640 [ 290.988330][ T9995] _copy_from_user+0x2e/0xd0 [ 290.988344][ T9995] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 290.988361][ T9995] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 290.988377][ T9995] ? __local_bh_enable_ip+0xa4/0x120 [ 290.988391][ T9995] ? lockdep_hardirqs_on+0x7c/0x110 [ 290.988407][ T9995] do_ipv6_setsockopt+0x3167/0x4320 [ 290.988424][ T9995] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 290.988439][ T9995] ? _kstrtoull+0x145/0x200 [ 290.988455][ T9995] ? __pfx__kstrtoull+0x10/0x10 [ 290.988470][ T9995] ? aa_label_sk_perm+0x19b/0x5a0 [ 290.988484][ T9995] ? find_held_lock+0x2b/0x80 [ 290.988495][ T9995] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 290.988507][ T9995] ? __lock_acquire+0x5ca/0x1ba0 [ 290.988531][ T9995] ? __pfx___might_resched+0x10/0x10 [ 290.988546][ T9995] ? ipv6_setsockopt+0xcb/0x170 [ 290.988559][ T9995] ipv6_setsockopt+0xcb/0x170 [ 290.988574][ T9995] dccp_setsockopt+0xfa/0x970 [ 290.988589][ T9995] ? __pfx_dccp_setsockopt+0x10/0x10 [ 290.988603][ T9995] ? sock_common_setsockopt+0x2e/0xf0 [ 290.988620][ T9995] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 290.988636][ T9995] do_sock_setsockopt+0x221/0x470 [ 290.988665][ T9995] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 290.988689][ T9995] __sys_setsockopt+0x120/0x1a0 [ 290.988704][ T9995] __ia32_sys_setsockopt+0xbc/0x160 [ 290.988716][ T9995] ? lockdep_hardirqs_on+0x7c/0x110 [ 290.988730][ T9995] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 290.988744][ T9995] __do_fast_syscall_32+0x73/0x120 [ 290.988761][ T9995] do_fast_syscall_32+0x32/0x80 [ 290.988776][ T9995] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 290.988788][ T9995] RIP: 0023:0xf70de579 [ 290.988797][ T9995] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 290.988807][ T9995] RSP: 002b:00000000f50ce55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 290.988817][ T9995] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 290.988824][ T9995] RDX: 0000000000000032 RSI: 0000000080000600 RDI: 0000000000000014 [ 290.988830][ T9995] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 290.988835][ T9995] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 290.988841][ T9995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 290.988854][ T9995] [ 291.222669][ T834] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 291.345656][T10005] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 291.347743][T10005] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 291.350773][T10005] vhci_hcd vhci_hcd.0: Device attached [ 291.441273][ T58] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 291.445631][T10006] vhci_hcd: connection closed [ 291.445850][ T1136] vhci_hcd: stop threads [ 291.448740][ T1136] vhci_hcd: release socket [ 291.450151][ T1136] vhci_hcd: disconnect device [ 291.486931][ T29] libceph: connect (1)[c::]:6789 error -101 [ 291.489367][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 291.549936][T10010] ceph: No mds server is up or the cluster is laggy [ 291.592468][ T58] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 291.595214][ T58] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 291.598363][ T58] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 291.602803][ T58] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 291.606447][ T58] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 291.611003][ T58] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 291.613855][ T58] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 291.616301][ T58] usb 7-1: Product: syz [ 291.617604][ T58] usb 7-1: Manufacturer: syz [ 291.625222][ T58] cdc_wdm 7-1:1.0: skipping garbage [ 291.627378][ T58] cdc_wdm 7-1:1.0: skipping garbage [ 291.630914][ T58] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 291.633487][ T58] cdc_wdm 7-1:1.0: Unknown control protocol [ 291.831906][ T58] usb 7-1: USB disconnect, device number 3 [ 292.280767][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.905'. [ 292.291391][T10021] netlink: 177 bytes leftover after parsing attributes in process `syz.1.905'. [ 292.478431][T10033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'. [ 292.482121][T10033] netlink: 177 bytes leftover after parsing attributes in process `syz.3.906'. [ 293.462261][T10046] lo speed is unknown, defaulting to 1000 [ 293.832953][T10051] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 293.835029][T10051] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 293.838091][T10051] vhci_hcd vhci_hcd.0: Device attached [ 294.131842][ T834] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 294.411258][ T9] usb 41-1: new low-speed USB device number 8 using vhci_hcd [ 294.631375][ T834] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 294.653742][T10052] vhci_hcd: connection reset by peer [ 294.656096][ T65] vhci_hcd: stop threads [ 294.657542][ T65] vhci_hcd: release socket [ 294.659041][ T65] vhci_hcd: disconnect device [ 294.803701][ T834] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 294.807207][ T834] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 294.812068][ T834] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 294.815756][ T834] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 294.820206][ T834] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 294.827788][ T834] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 294.831736][ T834] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 294.835082][ T834] usb 6-1: Product: syz [ 294.836863][ T834] usb 6-1: Manufacturer: syz [ 294.842898][ T834] cdc_wdm 6-1:1.0: skipping garbage [ 294.845131][ T834] cdc_wdm 6-1:1.0: skipping garbage [ 294.850845][ T834] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 294.853456][ T834] cdc_wdm 6-1:1.0: Unknown control protocol [ 294.880260][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'. [ 294.883975][T10070] netlink: 177 bytes leftover after parsing attributes in process `syz.3.916'. [ 294.985861][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.917'. [ 294.990336][T10072] netlink: 177 bytes leftover after parsing attributes in process `syz.0.917'. [ 295.060792][ T5992] usb 6-1: USB disconnect, device number 3 [ 296.096582][ T5992] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 296.400201][T10097] input: syz1 as /devices/virtual/input/input5 [ 297.131745][ T5992] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 297.396789][T10110] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 297.398784][T10110] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 297.401719][T10110] vhci_hcd vhci_hcd.0: Device attached [ 297.641347][ T34] usb 37-1: new low-speed USB device number 8 using vhci_hcd [ 297.651391][ T5992] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 297.657807][T10128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.930'. [ 297.660888][T10128] netlink: 177 bytes leftover after parsing attributes in process `syz.3.930'. [ 297.852589][ T5992] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 297.855271][ T5992] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 297.874333][ T5992] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 297.879408][ T5992] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 297.882790][ T5992] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 297.887209][ T5992] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 297.890625][ T5992] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 297.893106][ T5992] usb 7-1: Product: syz [ 297.894379][ T5992] usb 7-1: Manufacturer: syz [ 297.898966][ T5992] cdc_wdm 7-1:1.0: skipping garbage [ 297.900777][ T5992] cdc_wdm 7-1:1.0: skipping garbage [ 297.903312][ T5992] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 297.905112][ T5992] cdc_wdm 7-1:1.0: Unknown control protocol [ 298.107116][ T5992] usb 7-1: USB disconnect, device number 4 [ 298.229009][T10111] vhci_hcd: connection reset by peer [ 298.231879][ T12] vhci_hcd: stop threads [ 298.233193][ T12] vhci_hcd: release socket [ 298.234618][ T12] vhci_hcd: disconnect device [ 298.442299][T10133] FAULT_INJECTION: forcing a failure. [ 298.442299][T10133] name failslab, interval 1, probability 0, space 0, times 1 [ 298.446200][T10133] CPU: 3 UID: 0 PID: 10133 Comm: syz.1.933 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 298.446214][T10133] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.446220][T10133] Call Trace: [ 298.446224][T10133] [ 298.446229][T10133] dump_stack_lvl+0x16c/0x1f0 [ 298.446252][T10133] should_fail_ex+0x512/0x640 [ 298.446265][T10133] ? __kmalloc_noprof+0xbf/0x510 [ 298.446278][T10133] ? iovec_from_user+0x108/0x140 [ 298.446291][T10133] should_failslab+0xc2/0x120 [ 298.446305][T10133] __kmalloc_noprof+0xd2/0x510 [ 298.446319][T10133] iovec_from_user+0x108/0x140 [ 298.446334][T10133] __import_iovec+0x88/0x660 [ 298.446348][T10133] ? aio_prep_rw+0x6a2/0xb20 [ 298.446363][T10133] aio_read+0x275/0x4d0 [ 298.446379][T10133] ? __pfx_aio_read+0x10/0x10 [ 298.446393][T10133] ? __lock_acquire+0xaa4/0x1ba0 [ 298.446427][T10133] ? __might_fault+0xe3/0x190 [ 298.446446][T10133] ? __might_fault+0x13b/0x190 [ 298.446470][T10133] ? io_submit_one+0x1543/0x1da0 [ 298.446492][T10133] io_submit_one+0x1543/0x1da0 [ 298.446519][T10133] ? __lock_acquire+0xaa4/0x1ba0 [ 298.446545][T10133] ? __pfx_io_submit_one+0x10/0x10 [ 298.446576][T10133] ? __might_fault+0xe3/0x190 [ 298.446593][T10133] ? __might_fault+0x13b/0x190 [ 298.446617][T10133] ? __ia32_compat_sys_io_submit+0x1ad/0x3a0 [ 298.446633][T10133] __ia32_compat_sys_io_submit+0x1ad/0x3a0 [ 298.446652][T10133] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 298.446667][T10133] ? fput+0x70/0xf0 [ 298.446691][T10133] ? rcu_is_watching+0x12/0xc0 [ 298.446712][T10133] __do_fast_syscall_32+0x73/0x120 [ 298.446733][T10133] do_fast_syscall_32+0x32/0x80 [ 298.446748][T10133] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.446762][T10133] RIP: 0023:0xf70de579 [ 298.446771][T10133] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 298.446781][T10133] RSP: 002b:00000000f50ce55c EFLAGS: 00000296 ORIG_RAX: 00000000000000f8 [ 298.446791][T10133] RAX: ffffffffffffffda RBX: 00000000f508e000 RCX: 0000000000000001 [ 298.446797][T10133] RDX: 0000000080000640 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.446803][T10133] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.446809][T10133] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 298.446814][T10133] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.446826][T10133] [ 299.263247][ T834] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 299.351700][ T5992] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 299.521342][ T9] vhci_hcd: vhci_device speed not set [ 299.561293][ T834] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 299.665265][T10164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.940'. [ 299.670551][T10164] netlink: 177 bytes leftover after parsing attributes in process `syz.0.940'. [ 299.713257][ T834] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 299.749943][ T834] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 299.754708][ T834] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 299.761388][ T834] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 299.764780][ T834] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 299.769662][ T834] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 299.772770][ T834] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 299.775877][ T834] usb 8-1: Product: syz [ 299.777270][ T834] usb 8-1: Manufacturer: syz [ 299.789029][ T834] cdc_wdm 8-1:1.0: skipping garbage [ 299.799514][ T834] cdc_wdm 8-1:1.0: skipping garbage [ 299.803784][ T834] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 299.809606][ T834] cdc_wdm 8-1:1.0: Unknown control protocol [ 299.891278][ T5992] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 299.994875][ T1017] usb 8-1: USB disconnect, device number 3 [ 300.042955][ T5992] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 300.046464][ T5992] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 300.050337][ T5992] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 300.055028][ T5992] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 300.059403][ T5992] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 300.065559][ T5992] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 300.069251][ T5992] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 300.072763][ T5992] usb 6-1: Product: syz [ 300.074485][ T5992] usb 6-1: Manufacturer: syz [ 300.079620][ T5992] cdc_wdm 6-1:1.0: skipping garbage [ 300.082025][ T5992] cdc_wdm 6-1:1.0: skipping garbage [ 300.085566][ T5992] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 300.088045][ T5992] cdc_wdm 6-1:1.0: Unknown control protocol [ 300.285454][ T5992] usb 6-1: USB disconnect, device number 4 [ 300.437794][T10168] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 300.439883][T10168] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 300.444085][T10168] vhci_hcd vhci_hcd.0: Device attached [ 300.539519][T10175] nbd: must specify a device to reconfigure [ 301.269280][T10169] vhci_hcd: connection closed [ 301.270347][ T1136] vhci_hcd: stop threads [ 301.276437][ T1136] vhci_hcd: release socket [ 301.277957][ T1136] vhci_hcd: disconnect device [ 301.462222][ T834] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 301.520784][T10196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.953'. [ 301.525071][T10196] netlink: 177 bytes leftover after parsing attributes in process `syz.2.953'. [ 301.977242][T10210] FAULT_INJECTION: forcing a failure. [ 301.977242][T10210] name failslab, interval 1, probability 0, space 0, times 0 [ 301.981473][T10210] CPU: 3 UID: 0 PID: 10210 Comm: syz.1.957 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 301.981488][T10210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 301.981496][T10210] Call Trace: [ 301.981500][T10210] [ 301.981505][T10210] dump_stack_lvl+0x16c/0x1f0 [ 301.981524][T10210] should_fail_ex+0x512/0x640 [ 301.981537][T10210] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 301.981551][T10210] should_failslab+0xc2/0x120 [ 301.981566][T10210] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 301.981577][T10210] ? __might_fault+0xe3/0x190 [ 301.981590][T10210] ? __might_fault+0xe3/0x190 [ 301.981601][T10210] ? getname_flags.part.0+0x4c/0x550 [ 301.981618][T10210] getname_flags.part.0+0x4c/0x550 [ 301.981633][T10210] getname_flags+0x93/0xf0 [ 301.981643][T10210] user_path_at+0x24/0x60 [ 301.981653][T10210] __ia32_sys_mount+0x1fb/0x310 [ 301.981666][T10210] ? __pfx___ia32_sys_mount+0x10/0x10 [ 301.981679][T10210] ? rcu_is_watching+0x12/0xc0 [ 301.981691][T10210] __do_fast_syscall_32+0x73/0x120 [ 301.981708][T10210] do_fast_syscall_32+0x32/0x80 [ 301.981723][T10210] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 301.981736][T10210] RIP: 0023:0xf70de579 [ 301.981744][T10210] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 301.981754][T10210] RSP: 002b:00000000f50ad55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 301.981764][T10210] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000240 [ 301.981771][T10210] RDX: 000000008015bffc RSI: 0000000000000000 RDI: 0000000080000000 [ 301.981777][T10210] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 301.981783][T10210] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 301.981788][T10210] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 301.981800][T10210] [ 302.119755][T10214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.959'. [ 302.191250][ T5992] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 302.364579][ T5992] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 302.368158][ T5992] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 302.372731][ T5992] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 302.376466][ T5992] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 302.380974][ T5992] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 302.389767][ T5992] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 302.396160][ T5992] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 302.399506][ T5992] usb 5-1: Product: syz [ 302.404057][ T5992] usb 5-1: Manufacturer: syz [ 302.411350][ T5992] cdc_wdm 5-1:1.0: skipping garbage [ 302.413668][ T5992] cdc_wdm 5-1:1.0: skipping garbage [ 302.418328][ T5992] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 302.420861][ T5992] cdc_wdm 5-1:1.0: Unknown control protocol [ 302.614427][ T1017] usb 5-1: USB disconnect, device number 2 [ 302.731535][ T34] vhci_hcd: vhci_device speed not set [ 303.165906][T10233] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 303.168682][T10233] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 303.168787][T10233] vhci_hcd vhci_hcd.0: Device attached [ 303.274018][T10234] vhci_hcd: connection closed [ 303.274170][ T12] vhci_hcd: stop threads [ 303.277597][ T12] vhci_hcd: release socket [ 303.279095][ T12] vhci_hcd: disconnect device [ 303.460153][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.966'. [ 303.642641][ T34] vhci_hcd: vhci_device speed not set [ 304.139735][ T5992] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 304.236579][T10262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.969'. [ 304.240248][T10262] netlink: 177 bytes leftover after parsing attributes in process `syz.3.969'. [ 304.794558][ T6006] libceph: connect (1)[c::]:6789 error -101 [ 304.797083][ T6006] libceph: mon0 (1)[c::]:6789 connect error [ 304.901297][ T5992] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 305.061452][ T6006] libceph: connect (1)[c::]:6789 error -101 [ 305.063442][ T6006] libceph: mon0 (1)[c::]:6789 connect error [ 305.082552][ T5992] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 305.085287][ T5992] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 305.101431][T10279] ceph: No mds server is up or the cluster is laggy [ 305.111358][ T5992] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 305.121496][ T5992] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 305.130165][ T5992] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 305.143012][ T5992] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 305.150437][ T5992] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 305.153162][ T5992] usb 6-1: Product: syz [ 305.160582][ T5992] usb 6-1: Manufacturer: syz [ 305.168301][ T5992] cdc_wdm 6-1:1.0: skipping garbage [ 305.169958][ T5992] cdc_wdm 6-1:1.0: skipping garbage [ 305.183350][ T5992] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 305.185200][ T5992] cdc_wdm 6-1:1.0: Unknown control protocol [ 305.370262][ T9] usb 6-1: USB disconnect, device number 5 [ 306.231875][ T5992] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 315.507854][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.983'. [ 315.514883][T10350] netlink: 177 bytes leftover after parsing attributes in process `syz.3.983'. [ 315.533954][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.982'. [ 315.538039][T10351] netlink: 177 bytes leftover after parsing attributes in process `syz.2.982'. [ 316.576362][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.578792][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.774527][ T5992] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 317.295639][ T6006] libceph: connect (1)[c::]:6789 error -101 [ 317.297560][ T6006] libceph: mon0 (1)[c::]:6789 connect error [ 317.351278][T10373] ceph: No mds server is up or the cluster is laggy [ 317.561296][ T6012] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 317.735012][ T6012] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 317.738083][ T6012] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 317.741406][ T6012] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 317.742124][T10392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.992'. [ 317.744333][ T6012] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 317.749072][T10392] netlink: 177 bytes leftover after parsing attributes in process `syz.1.992'. [ 317.750490][ T6012] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 317.759908][ T6012] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 317.901787][ T5992] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 317.965977][ T6012] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 317.968882][ T6012] usb 5-1: Product: syz [ 317.970279][ T6012] usb 5-1: Manufacturer: syz [ 317.978112][ T6012] cdc_wdm 5-1:1.0: skipping garbage [ 317.980118][ T6012] cdc_wdm 5-1:1.0: skipping garbage [ 317.986063][ T6012] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 317.988170][ T6012] cdc_wdm 5-1:1.0: Unknown control protocol [ 318.000432][T10396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'. [ 318.004664][T10396] netlink: 177 bytes leftover after parsing attributes in process `syz.3.993'. [ 318.191734][ T6012] usb 5-1: USB disconnect, device number 3 [ 318.574321][T10401] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 319.632835][ T5992] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 319.761519][ T6006] libceph: connect (1)[c::]:6789 error -101 [ 319.763611][ T6006] libceph: mon0 (1)[c::]:6789 connect error [ 319.766628][ T6006] libceph: connect (1)[c::]:6789 error -101 [ 319.768677][ T6006] libceph: mon0 (1)[c::]:6789 connect error [ 319.807927][T10441] ceph: No mds server is up or the cluster is laggy [ 320.170621][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'. [ 320.175619][T10460] netlink: 177 bytes leftover after parsing attributes in process `syz.0.1003'. [ 320.322932][T10458] tipc: Failed to remove unknown binding: 66,1,1/0:3957872064/3957872066 [ 320.325568][T10458] tipc: Failed to remove unknown binding: 66,1,1/0:3957872064/3957872066 [ 326.442807][T10492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1009'. [ 327.270377][T10501] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 327.396389][T10501] wireguard0: entered promiscuous mode [ 327.398210][T10501] wireguard0: entered allmulticast mode [ 327.453179][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1016'. [ 327.649297][ T10] libceph: connect (1)[c::]:6789 error -101 [ 327.651417][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 327.685410][ T5992] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 327.696881][T10513] ceph: No mds server is up or the cluster is laggy [ 328.046418][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1018'. [ 328.050423][T10537] netlink: 177 bytes leftover after parsing attributes in process `syz.1.1018'. [ 328.249086][T10542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1022'. [ 328.646333][T10552] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1026'. [ 330.021955][ T5992] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 330.232137][T10584] wireguard0: entered promiscuous mode [ 330.362689][T10584] wireguard0: entered allmulticast mode [ 330.543964][T10589] Invalid source name [ 330.545382][T10589] UBIFS error (pid: 10589): cannot open "./file0", error -22 [ 330.689728][T10597] fuse: Bad value for 'fd' [ 330.736602][T10602] FAULT_INJECTION: forcing a failure. [ 330.736602][T10602] name failslab, interval 1, probability 0, space 0, times 0 [ 330.740514][T10602] CPU: 0 UID: 0 PID: 10602 Comm: syz.2.1038 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 330.740529][T10602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 330.740535][T10602] Call Trace: [ 330.740539][T10602] [ 330.740544][T10602] dump_stack_lvl+0x16c/0x1f0 [ 330.740562][T10602] should_fail_ex+0x512/0x640 [ 330.740577][T10602] should_failslab+0xc2/0x120 [ 330.740591][T10602] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 330.740605][T10602] ? __alloc_skb+0x2b2/0x380 [ 330.740620][T10602] __alloc_skb+0x2b2/0x380 [ 330.740633][T10602] ? __pfx___alloc_skb+0x10/0x10 [ 330.740645][T10602] ? do_raw_spin_lock+0x120/0x2b0 [ 330.740655][T10602] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 330.740674][T10602] nr_write_internal+0x79/0xd50 [ 330.740688][T10602] nr_establish_data_link+0x7c/0xb0 [ 330.740697][T10602] nr_connect+0x7b2/0x1090 [ 330.740714][T10602] ? __pfx_nr_connect+0x10/0x10 [ 330.740728][T10602] ? __pfx_aa_sk_perm+0x10/0x10 [ 330.740740][T10602] ? __might_fault+0xe3/0x190 [ 330.740752][T10602] ? __might_fault+0x13b/0x190 [ 330.740768][T10602] ? __pfx_nr_connect+0x10/0x10 [ 330.740781][T10602] __sys_connect_file+0x13e/0x1a0 [ 330.740795][T10602] __sys_connect+0x14d/0x170 [ 330.740806][T10602] ? __pfx___sys_connect+0x10/0x10 [ 330.740822][T10602] ? syscall_user_dispatch+0x78/0x140 [ 330.740841][T10602] __ia32_sys_connect+0x71/0xb0 [ 330.740853][T10602] __do_fast_syscall_32+0x73/0x120 [ 330.740869][T10602] do_fast_syscall_32+0x32/0x80 [ 330.740884][T10602] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 330.740897][T10602] RIP: 0023:0xf70ae579 [ 330.740905][T10602] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 330.740916][T10602] RSP: 002b:00000000f509e55c EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 330.740926][T10602] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 330.740932][T10602] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 330.740938][T10602] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 330.740943][T10602] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 330.740949][T10602] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 330.740962][T10602] [ 330.835859][T10604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1036'. [ 330.838983][T10604] netlink: 177 bytes leftover after parsing attributes in process `syz.3.1036'. [ 330.930303][T10611] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1041'. [ 331.175281][ T6006] libceph: connect (1)[c::]:6789 error -101 [ 331.177259][ T6006] libceph: mon0 (1)[c::]:6789 connect error [ 331.226846][T10624] ceph: No mds server is up or the cluster is laggy [ 332.230398][ T5992] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 332.507118][T10654] FAULT_INJECTION: forcing a failure. [ 332.507118][T10654] name failslab, interval 1, probability 0, space 0, times 0 [ 332.511304][T10654] CPU: 2 UID: 0 PID: 10654 Comm: syz.2.1049 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 332.511318][T10654] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 332.511324][T10654] Call Trace: [ 332.511329][T10654] [ 332.511333][T10654] dump_stack_lvl+0x16c/0x1f0 [ 332.511352][T10654] should_fail_ex+0x512/0x640 [ 332.511365][T10654] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 332.511380][T10654] should_failslab+0xc2/0x120 [ 332.511393][T10654] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 332.511406][T10654] ? __alloc_skb+0x2b2/0x380 [ 332.511421][T10654] __alloc_skb+0x2b2/0x380 [ 332.511434][T10654] ? __pfx___alloc_skb+0x10/0x10 [ 332.511448][T10654] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 332.511469][T10654] netlink_alloc_large_skb+0x69/0x130 [ 332.511485][T10654] netlink_sendmsg+0x6a1/0xdd0 [ 332.511502][T10654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.511517][T10654] ? __import_iovec+0x1c8/0x660 [ 332.511533][T10654] ____sys_sendmsg+0xa95/0xc70 [ 332.511545][T10654] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.511554][T10654] ? get_compat_msghdr+0x11a/0x170 [ 332.511572][T10654] ___sys_sendmsg+0x134/0x1d0 [ 332.511586][T10654] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.511615][T10654] __sys_sendmsg+0x16d/0x220 [ 332.511628][T10654] ? __pfx___sys_sendmsg+0x10/0x10 [ 332.511647][T10654] ? rcu_is_watching+0x12/0xc0 [ 332.511660][T10654] __do_fast_syscall_32+0x73/0x120 [ 332.511676][T10654] do_fast_syscall_32+0x32/0x80 [ 332.511694][T10654] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 332.511711][T10654] RIP: 0023:0xf70ae579 [ 332.511722][T10654] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 332.511737][T10654] RSP: 002b:00000000f509e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 332.511753][T10654] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800003c0 [ 332.511763][T10654] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 332.511769][T10654] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 332.511774][T10654] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 332.511780][T10654] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 332.511794][T10654] [ 332.602701][T10651] wireguard0: entered promiscuous mode [ 332.606673][T10651] wireguard0: entered allmulticast mode [ 332.631664][T10659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1050'. [ 333.151223][T10669] wg1: entered promiscuous mode [ 333.154181][T10669] wg1: entered allmulticast mode [ 333.271136][T10670] xt_CT: No such helper "syz1" [ 333.762753][ T834] libceph: connect (1)[c::]:6789 error -101 [ 333.767094][ T834] libceph: mon0 (1)[c::]:6789 connect error [ 333.809960][T10676] ceph: No mds server is up or the cluster is laggy [ 333.814199][ T6006] libceph: connect (1)[c::]:6789 error -101 [ 333.816431][ T6006] libceph: mon0 (1)[c::]:6789 connect error [ 333.851284][T10682] ceph: No mds server is up or the cluster is laggy [ 334.145514][T10692] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1058'. [ 334.604855][T10699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1060'. [ 334.992673][ T40] audit: type=1804 audit(1745457389.739:84): pid=10708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1063" name="/newroot/258/file0/file0" dev="9p" ino=37093509 res=1 errno=0 [ 335.333250][ T834] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 335.581841][T10731] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.691221][T10731] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.776375][T10741] wg1: entered promiscuous mode [ 335.778067][T10741] wg1: entered allmulticast mode [ 335.938418][T10742] xt_CT: No such helper "syz1" [ 336.029074][T10731] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.094747][T10731] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.168306][T10731] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.176122][T10731] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.185652][T10731] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.201828][T10731] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.394563][T10749] tipc: Failed to remove unknown binding: 66,1,1/0:550264775/550264777 [ 336.397639][T10749] tipc: Failed to remove unknown binding: 66,1,1/0:550264775/550264777 [ 336.543043][T10753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1070'. [ 336.584024][ T6006] libceph: connect (1)[c::]:6789 error -101 [ 336.586150][ T6006] libceph: mon0 (1)[c::]:6789 connect error [ 336.610306][ T6006] libceph: connect (1)[c::]:6789 error -101 [ 336.612789][ T6006] libceph: mon0 (1)[c::]:6789 connect error [ 336.625905][T10756] ceph: No mds server is up or the cluster is laggy [ 336.749749][T10754] ceph: No mds server is up or the cluster is laggy [ 344.001292][T10788] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 344.003673][T10788] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 344.006339][T10788] vhci_hcd vhci_hcd.0: Device attached [ 344.262642][ T1017] usb 37-1: new low-speed USB device number 9 using vhci_hcd [ 344.265659][T10793] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 344.268026][T10792] vhci_hcd: connection closed [ 344.268221][ T1136] vhci_hcd: stop threads [ 344.272469][ T1136] vhci_hcd: release socket [ 344.274284][ T1136] vhci_hcd: disconnect device [ 344.301765][ T834] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 344.979750][T10830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1080'. [ 345.065272][T10835] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.141100][T10835] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.217609][T10835] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.304981][T10835] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.345811][ T834] libceph: connect (1)[c::]:6789 error -101 [ 345.348440][ T834] libceph: mon0 (1)[c::]:6789 connect error [ 345.418142][T10838] ceph: No mds server is up or the cluster is laggy [ 345.426154][T10835] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.457951][T10835] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.481580][T10835] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.490873][T10835] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.741356][ T5826] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 345.903186][ T5826] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 345.906753][ T5826] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 345.910879][ T5826] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 345.920851][ T5826] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 345.926232][ T5826] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 345.934281][ T5826] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 345.938045][ T5826] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 345.942156][ T5826] usb 6-1: Product: syz [ 345.943929][ T5826] usb 6-1: Manufacturer: syz [ 345.952210][ T5826] cdc_wdm 6-1:1.0: skipping garbage [ 345.954420][ T5826] cdc_wdm 6-1:1.0: skipping garbage [ 345.958592][ T5826] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 345.961063][ T5826] cdc_wdm 6-1:1.0: Unknown control protocol [ 346.076300][T10850] wg1: entered promiscuous mode [ 346.077949][T10850] wg1: entered allmulticast mode [ 346.264982][ T6006] usb 6-1: USB disconnect, device number 6 [ 346.358034][T10851] xt_CT: No such helper "syz1" [ 349.361333][ T1017] vhci_hcd: vhci_device speed not set [ 351.345681][T10881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1087'. [ 351.349797][T10881] netlink: 177 bytes leftover after parsing attributes in process `syz.2.1087'. [ 351.532082][T10883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1086'. [ 351.535834][T10884] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1088'. [ 352.286197][T10894] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 352.288295][T10894] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 352.290652][T10894] vhci_hcd vhci_hcd.0: Device attached [ 352.371248][ T5826] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 352.454278][T10898] fuse: Bad value for 'fd' [ 352.510085][T10895] vhci_hcd: connection closed [ 352.513320][ T1139] vhci_hcd: stop threads [ 352.517631][ T1139] vhci_hcd: release socket [ 352.522449][ T1139] vhci_hcd: disconnect device [ 352.533219][ T5826] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 352.536004][ T5826] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 352.539114][ T5826] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 352.541287][T10215] usb 41-1: new low-speed USB device number 9 using vhci_hcd [ 352.541968][ T5826] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 352.544243][T10215] usb 41-1: enqueue for inactive port 0 [ 352.547681][ T5826] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 352.554312][ T5826] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 352.557129][ T5826] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 352.559761][ T5826] usb 8-1: Product: syz [ 352.561082][ T5826] usb 8-1: Manufacturer: syz [ 352.566495][ T5826] cdc_wdm 8-1:1.0: skipping garbage [ 352.568188][ T5826] cdc_wdm 8-1:1.0: skipping garbage [ 352.571131][ T5826] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 352.574679][ T5826] cdc_wdm 8-1:1.0: Unknown control protocol [ 352.631303][T10215] vhci_hcd: vhci_device speed not set [ 352.753475][T10906] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.775923][ T5826] usb 8-1: USB disconnect, device number 4 [ 352.819615][T10906] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.914180][T10906] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.999987][T10906] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.153692][T10906] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.179100][T10906] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.218591][T10906] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.251606][T10906] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.861825][T10215] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 354.080100][T10932] ceph: No mds server is up or the cluster is laggy [ 354.197429][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 354.199484][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 354.547940][ T29] libceph: connect (1)[c::]:6789 error -101 [ 354.550374][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 354.618820][T10963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1101'. [ 354.623311][T10963] netlink: 177 bytes leftover after parsing attributes in process `syz.0.1101'. [ 354.729783][T10965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1102'. [ 354.760667][T10945] ceph: No mds server is up or the cluster is laggy [ 354.821640][ T29] libceph: connect (1)[c::]:6789 error -101 [ 354.824191][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 355.243469][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1104'. [ 355.251331][T10974] netlink: 177 bytes leftover after parsing attributes in process `syz.1.1104'. [ 362.351244][T11005] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1105'. [ 363.254622][ T1017] libceph: connect (1)[c::]:6789 error -101 [ 363.257259][ T1017] libceph: mon0 (1)[c::]:6789 connect error [ 363.278866][T11004] ceph: No mds server is up or the cluster is laggy [ 363.314595][ T1017] libceph: connect (1)[c::]:6789 error -101 [ 363.317217][ T1017] libceph: mon0 (1)[c::]:6789 connect error [ 363.361585][T10999] ceph: No mds server is up or the cluster is laggy [ 364.249038][T11032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1113'. [ 364.693733][ T834] libceph: connect (1)[c::]:6789 error -101 [ 364.695573][ T834] libceph: mon0 (1)[c::]:6789 connect error [ 364.729650][T11024] ceph: No mds server is up or the cluster is laggy [ 365.137886][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1114'. [ 365.143544][T11050] netlink: 177 bytes leftover after parsing attributes in process `syz.2.1114'. [ 365.162811][ T834] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 365.188731][T11053] FAULT_INJECTION: forcing a failure. [ 365.188731][T11053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.194130][T11053] CPU: 0 UID: 0 PID: 11053 Comm: syz.0.1119 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 365.194153][T11053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 365.194163][T11053] Call Trace: [ 365.194169][T11053] [ 365.194176][T11053] dump_stack_lvl+0x16c/0x1f0 [ 365.194202][T11053] should_fail_ex+0x512/0x640 [ 365.194225][T11053] _copy_from_user+0x2e/0xd0 [ 365.194247][T11053] sctp_setsockopt+0x2045/0xb870 [ 365.194272][T11053] ? __pfx_sctp_setsockopt+0x10/0x10 [ 365.194288][T11053] ? __lock_acquire+0x5ca/0x1ba0 [ 365.194332][T11053] ? __pfx_aa_sk_perm+0x10/0x10 [ 365.194353][T11053] ? find_held_lock+0x2b/0x80 [ 365.194372][T11053] ? sock_common_setsockopt+0x2e/0xf0 [ 365.194400][T11053] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 365.194426][T11053] do_sock_setsockopt+0x221/0x470 [ 365.194451][T11053] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 365.194490][T11053] __sys_setsockopt+0x120/0x1a0 [ 365.194516][T11053] __ia32_sys_setsockopt+0xbc/0x160 [ 365.194535][T11053] ? lockdep_hardirqs_on+0x7c/0x110 [ 365.194558][T11053] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 365.194582][T11053] __do_fast_syscall_32+0x73/0x120 [ 365.194608][T11053] do_fast_syscall_32+0x32/0x80 [ 365.194632][T11053] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 365.194658][T11053] RIP: 0023:0xf7fb1579 [ 365.194671][T11053] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 365.194687][T11053] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 365.194703][T11053] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 365.194714][T11053] RDX: 0000000000000009 RSI: 0000000080000300 RDI: 000000000000009c [ 365.194723][T11053] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 365.194733][T11053] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 365.194743][T11053] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 365.194764][T11053] [ 365.771535][ T6006] libceph: connect (1)[c::]:6789 error -101 [ 365.774389][ T6006] libceph: mon0 (1)[c::]:6789 connect error [ 365.776640][T11058] ceph: No mds server is up or the cluster is laggy [ 366.369274][ T6006] libceph: connect (1)[c::]:6789 error -101 [ 366.371322][ T6006] libceph: mon0 (1)[c::]:6789 connect error [ 366.551397][T11067] ceph: No mds server is up or the cluster is laggy [ 367.030112][T11080] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1124'. [ 368.204554][ T6006] libceph: connect (1)[c::]:6789 error -101 [ 368.206617][ T6006] libceph: mon0 (1)[c::]:6789 connect error [ 368.233934][T11103] ceph: No mds server is up or the cluster is laggy [ 369.777186][T11139] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1138'. [ 370.775908][ T29] libceph: connect (1)[c::]:6789 error -101 [ 370.778155][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 370.826064][T11152] ceph: No mds server is up or the cluster is laggy [ 370.988642][ T29] libceph: connect (1)[c::]:6789 error -101 [ 370.990808][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 370.993304][T11156] ceph: No mds server is up or the cluster is laggy [ 371.180597][T11166] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 371.183324][T11166] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 371.187233][T11166] vhci_hcd vhci_hcd.0: Device attached [ 371.431281][ T9] usb 37-1: new low-speed USB device number 10 using vhci_hcd [ 371.487296][T11167] vhci_hcd: connection reset by peer [ 371.489731][ T12] vhci_hcd: stop threads [ 371.492847][ T12] vhci_hcd: release socket [ 371.496974][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1146'. [ 371.501527][T11182] netlink: 177 bytes leftover after parsing attributes in process `syz.2.1146'. [ 371.504554][ T12] vhci_hcd: disconnect device [ 371.579502][T11175] could not allocate digest TFM handle hmac(sha1-neon) [ 372.180756][T11198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1150'. [ 373.359390][ T29] libceph: connect (1)[c::]:6789 error -101 [ 373.361492][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 373.418160][T11216] ceph: No mds server is up or the cluster is laggy [ 373.827301][T11231] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 373.830100][T11231] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 373.879149][T11231] vhci_hcd vhci_hcd.0: Device attached [ 374.154061][ T10] usb 43-1: new low-speed USB device number 8 using vhci_hcd [ 374.281821][T11232] vhci_hcd: connection reset by peer [ 374.284087][ T1136] vhci_hcd: stop threads [ 374.285494][ T1136] vhci_hcd: release socket [ 374.286971][ T1136] vhci_hcd: disconnect device [ 374.870400][T11249] FAULT_INJECTION: forcing a failure. [ 374.870400][T11249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.875493][T11249] CPU: 2 UID: 0 PID: 11249 Comm: syz.2.1160 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 374.875508][T11249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 374.875514][T11249] Call Trace: [ 374.875518][T11249] [ 374.875522][T11249] dump_stack_lvl+0x16c/0x1f0 [ 374.875542][T11249] should_fail_ex+0x512/0x640 [ 374.875557][T11249] _copy_from_user+0x2e/0xd0 [ 374.875570][T11249] move_addr_to_kernel+0x65/0x170 [ 374.875582][T11249] __get_compat_msghdr+0x3f1/0x4d0 [ 374.875597][T11249] get_compat_msghdr+0xd2/0x170 [ 374.875609][T11249] ? __pfx_get_compat_msghdr+0x10/0x10 [ 374.875633][T11249] ___sys_sendmsg+0x1ae/0x1d0 [ 374.875647][T11249] ? __pfx____sys_sendmsg+0x10/0x10 [ 374.875676][T11249] __sys_sendmsg+0x16d/0x220 [ 374.875689][T11249] ? __pfx___sys_sendmsg+0x10/0x10 [ 374.875708][T11249] ? rcu_is_watching+0x12/0xc0 [ 374.875721][T11249] __do_fast_syscall_32+0x73/0x120 [ 374.875738][T11249] do_fast_syscall_32+0x32/0x80 [ 374.875752][T11249] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 374.875766][T11249] RIP: 0023:0xf70ae579 [ 374.875774][T11249] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 374.875784][T11249] RSP: 002b:00000000f507d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 374.875794][T11249] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000540 [ 374.875800][T11249] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 374.875806][T11249] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 374.875812][T11249] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 374.875817][T11249] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 374.875829][T11249] [ 375.057242][T11258] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1162'. [ 375.880373][T11271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1167'. [ 376.113126][ T29] libceph: connect (1)[c::]:6789 error -101 [ 376.115389][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 376.131707][ T29] libceph: connect (1)[c::]:6789 error -101 [ 376.133970][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 376.210863][ T29] libceph: connect (1)[c::]:6789 error -101 [ 376.213200][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 376.216907][ T29] libceph: connect (1)[c::]:6789 error -101 [ 376.219166][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 376.222958][T11279] ceph: No mds server is up or the cluster is laggy [ 376.253287][T11283] ceph: No mds server is up or the cluster is laggy [ 376.561651][ T9] vhci_hcd: vhci_device speed not set [ 377.158637][T11304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1171'. [ 377.163386][T11304] netlink: 177 bytes leftover after parsing attributes in process `syz.3.1171'. [ 377.363636][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 377.366213][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 377.415139][T11307] ceph: No mds server is up or the cluster is laggy [ 378.023488][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.026095][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.027734][T11316] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1174'. [ 378.748934][ T29] libceph: connect (1)[c::]:6789 error -101 [ 378.751388][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 378.803112][T11327] ceph: No mds server is up or the cluster is laggy [ 379.382038][ T10] vhci_hcd: vhci_device speed not set [ 379.813246][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 379.815217][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 379.861752][T11326] ceph: No mds server is up or the cluster is laggy [ 380.190134][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 380.192174][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 380.251515][T11364] ceph: No mds server is up or the cluster is laggy [ 380.356981][T11371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1187'. [ 380.646045][T11375] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1189'. [ 381.921676][ T10] libceph: connect (1)[c::]:6789 error -101 [ 381.924390][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 382.161485][T11388] ceph: No mds server is up or the cluster is laggy [ 382.756493][T11420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1199'. [ 383.234969][T11438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1204'. [ 383.239699][T11438] netlink: 177 bytes leftover after parsing attributes in process `syz.3.1204'. [ 383.372623][T11434] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.433851][T11434] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.474295][T11434] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.685098][T11434] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.753575][T11434] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.759754][T11434] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.765882][T11434] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.772061][T11434] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.364180][ T40] audit: type=1326 audit(1745457439.109:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11463 comm="syz.0.1214" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb1579 code=0x0 [ 384.418724][ T6006] libceph: connect (1)[c::]:6789 error -101 [ 384.421824][ T6006] libceph: mon0 (1)[c::]:6789 connect error [ 384.708942][T11477] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1215'. [ 384.824131][ T6006] libceph: connect (1)[c::]:6789 error -101 [ 384.833124][ T6006] libceph: mon0 (1)[c::]:6789 connect error [ 384.962437][T11466] ceph: No mds server is up or the cluster is laggy [ 385.183019][T11481] FAULT_INJECTION: forcing a failure. [ 385.183019][T11481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.187222][T11481] CPU: 2 UID: 0 PID: 11481 Comm: syz.1.1217 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 385.187237][T11481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 385.187244][T11481] Call Trace: [ 385.187247][T11481] [ 385.187251][T11481] dump_stack_lvl+0x16c/0x1f0 [ 385.187270][T11481] should_fail_ex+0x512/0x640 [ 385.187285][T11481] strncpy_from_user+0x3b/0x2e0 [ 385.187298][T11481] getname_flags.part.0+0x8f/0x550 [ 385.187314][T11481] getname_flags+0x93/0xf0 [ 385.187324][T11481] __ia32_sys_acct+0x74/0x220 [ 385.187339][T11481] __do_fast_syscall_32+0x73/0x120 [ 385.187355][T11481] do_fast_syscall_32+0x32/0x80 [ 385.187370][T11481] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 385.187383][T11481] RIP: 0023:0xf70de579 [ 385.187391][T11481] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 385.187402][T11481] RSP: 002b:00000000f50ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000033 [ 385.187412][T11481] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000000000000 [ 385.187418][T11481] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 385.187424][T11481] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 385.187430][T11481] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 385.187435][T11481] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 385.187447][T11481] [ 387.542118][T11527] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.676713][T11527] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.717368][ T29] libceph: connect (1)[c::]:6789 error -101 [ 387.753889][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 387.754824][T11527] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.762900][ T29] libceph: connect (1)[c::]:6789 error -101 [ 387.775219][T11525] ceph: No mds server is up or the cluster is laggy [ 387.777363][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 387.818180][T11527] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.106251][ T29] libceph: connect (1)[c::]:6789 error -101 [ 388.108671][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 388.114466][ T29] libceph: connect (1)[c::]:6789 error -101 [ 388.122178][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 388.124085][T11533] ceph: No mds server is up or the cluster is laggy [ 388.951358][ T10] libceph: connect (1)[c::]:6789 error -101 [ 388.953339][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 388.977841][T11548] ceph: No mds server is up or the cluster is laggy [ 388.986876][T11554] FAULT_INJECTION: forcing a failure. [ 388.986876][T11554] name failslab, interval 1, probability 0, space 0, times 0 [ 388.991920][T11554] CPU: 2 UID: 0 PID: 11554 Comm: syz.3.1236 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 388.991936][T11554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 388.991942][T11554] Call Trace: [ 388.991946][T11554] [ 388.991950][T11554] dump_stack_lvl+0x16c/0x1f0 [ 388.991970][T11554] should_fail_ex+0x512/0x640 [ 388.991983][T11554] ? fs_reclaim_acquire+0xae/0x150 [ 388.992001][T11554] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 388.992016][T11554] should_failslab+0xc2/0x120 [ 388.992031][T11554] __kmalloc_noprof+0xd2/0x510 [ 388.992046][T11554] tomoyo_realpath_from_path+0xc2/0x6e0 [ 388.992062][T11554] ? tomoyo_profile+0x47/0x60 [ 388.992093][T11554] tomoyo_path_number_perm+0x245/0x580 [ 388.992105][T11554] ? tomoyo_path_number_perm+0x237/0x580 [ 388.992118][T11554] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 388.992144][T11554] ? find_held_lock+0x2b/0x80 [ 388.992155][T11554] ? hook_file_ioctl_common+0x145/0x410 [ 388.992167][T11554] ? __fget_files+0x204/0x3c0 [ 388.992179][T11554] ? __fget_files+0x20e/0x3c0 [ 388.992187][T11554] ? __fput_deferred+0x300/0x370 [ 388.992203][T11554] security_file_ioctl_compat+0x9b/0x240 [ 388.992218][T11554] __ia32_compat_sys_ioctl+0xc3/0x360 [ 388.992235][T11554] __do_fast_syscall_32+0x73/0x120 [ 388.992251][T11554] do_fast_syscall_32+0x32/0x80 [ 388.992266][T11554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 388.992280][T11554] RIP: 0023:0xf7fd8579 [ 388.992288][T11554] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 388.992298][T11554] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 388.992308][T11554] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005514 [ 388.992314][T11554] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 388.992320][T11554] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 388.992326][T11554] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 388.992332][T11554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 388.992344][T11554] [ 388.992561][T11554] ERROR: Out of memory at tomoyo_realpath_from_path. [ 389.062937][T11554] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.1236' resets device [ 389.209614][T11557] mmap: syz.3.1237 (11557) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 389.466464][T11565] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 389.558623][T11527] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.573160][T11527] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.579662][T11527] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.592127][T11527] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.978396][ T6006] libceph: connect (1)[c::]:6789 error -101 [ 389.980781][ T6006] libceph: mon0 (1)[c::]:6789 connect error [ 390.068326][ T6006] libceph: connect (1)[c::]:6789 error -101 [ 390.101883][ T6006] libceph: mon0 (1)[c::]:6789 connect error [ 390.132775][T11582] ceph: No mds server is up or the cluster is laggy [ 390.183045][T11594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1246'. [ 390.184655][ T6006] libceph: connect (1)[c::]:6789 error -101 [ 390.187282][T11594] netlink: 177 bytes leftover after parsing attributes in process `syz.2.1246'. [ 390.188170][ T6006] libceph: mon0 (1)[c::]:6789 connect error [ 390.193646][T11587] ceph: No mds server is up or the cluster is laggy [ 391.166886][T11615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1250'. [ 391.170216][T11615] netlink: 177 bytes leftover after parsing attributes in process `syz.2.1250'. [ 391.863607][T11629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1254'. [ 391.992083][ T2305] libceph: connect (1)[c::]:6789 error -101 [ 391.994640][ T2305] libceph: mon0 (1)[c::]:6789 connect error [ 391.997963][ T2305] libceph: connect (1)[c::]:6789 error -101 [ 392.000241][ T2305] libceph: mon0 (1)[c::]:6789 connect error [ 392.108007][T11631] ceph: No mds server is up or the cluster is laggy [ 392.250857][T11638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1257'. [ 392.542833][T11640] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 392.622361][T11640] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 392.625885][T11640] kvm: requested 51123 ns i8254 timer period limited to 200000 ns [ 392.629100][T11640] kvm: requested 59504 ns i8254 timer period limited to 200000 ns [ 392.634367][T11640] kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 392.637796][T11640] kvm: requested 22628 ns i8254 timer period limited to 200000 ns [ 392.642015][T11640] kvm: requested 15923 ns i8254 timer period limited to 200000 ns [ 392.646418][T11640] kvm: requested 176000 ns i8254 timer period limited to 200000 ns [ 392.649921][T11640] kvm: requested 123200 ns i8254 timer period limited to 200000 ns [ 392.795916][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1259'. [ 392.799605][T11651] netlink: 177 bytes leftover after parsing attributes in process `syz.3.1259'. [ 393.065342][T11652] ceph: No mds server is up or the cluster is laggy [ 393.068761][ T2305] libceph: connect (1)[c::]:6789 error -101 [ 393.072845][ T2305] libceph: mon0 (1)[c::]:6789 connect error [ 393.153860][T11658] Process accounting resumed [ 393.878162][T11677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1265'. [ 393.882416][T11678] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1266'. [ 394.900186][T11694] team0: entered allmulticast mode [ 394.902518][T11694] team_slave_0: entered allmulticast mode [ 394.904934][T11694] team_slave_1: entered allmulticast mode [ 395.041033][T11700] sp0: Synchronizing with TNC [ 396.253683][T11725] __nla_validate_parse: 1 callbacks suppressed [ 396.253720][T11725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1278'. [ 397.747640][T11748] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.897988][T11748] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.926948][T11753] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 397.994105][T11748] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.008155][T11753] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 398.014840][T11753] kvm: requested 51123 ns i8254 timer period limited to 200000 ns [ 398.019079][T11753] kvm: requested 59504 ns i8254 timer period limited to 200000 ns [ 398.023211][T11753] kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 398.027098][T11753] kvm: requested 22628 ns i8254 timer period limited to 200000 ns [ 398.034401][T11753] kvm: requested 15923 ns i8254 timer period limited to 200000 ns [ 398.037761][T11760] syzkaller1: entered promiscuous mode [ 398.039455][T11760] syzkaller1: entered allmulticast mode [ 398.042070][T11753] kvm: requested 176000 ns i8254 timer period limited to 200000 ns [ 398.045176][T11753] kvm: requested 123200 ns i8254 timer period limited to 200000 ns [ 398.045580][T11760] FAULT_INJECTION: forcing a failure. [ 398.045580][T11760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.053553][T11760] CPU: 2 UID: 0 PID: 11760 Comm: syz.1.1289 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 398.053581][T11760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 398.053591][T11760] Call Trace: [ 398.053597][T11760] [ 398.053603][T11760] dump_stack_lvl+0x16c/0x1f0 [ 398.053630][T11760] should_fail_ex+0x512/0x640 [ 398.053653][T11760] _copy_from_iter+0x2a4/0x15b0 [ 398.053676][T11760] ? __lock_acquire+0xaa4/0x1ba0 [ 398.053697][T11760] ? __pfx__copy_from_iter+0x10/0x10 [ 398.053722][T11760] ? find_held_lock+0x2b/0x80 [ 398.053741][T11760] tun_get_user+0x240/0x3b10 [ 398.053769][T11760] ? __lock_acquire+0x5ca/0x1ba0 [ 398.053790][T11760] ? __pfx_tun_get_user+0x10/0x10 [ 398.053808][T11760] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 398.053833][T11760] ? find_held_lock+0x2b/0x80 [ 398.053846][T11760] ? tun_get+0x191/0x370 [ 398.053870][T11760] tun_chr_write_iter+0xdc/0x210 [ 398.053894][T11760] vfs_write+0x5ba/0x1180 [ 398.053911][T11760] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 398.053935][T11760] ? __pfx_vfs_write+0x10/0x10 [ 398.053950][T11760] ? find_held_lock+0x2b/0x80 [ 398.053979][T11760] ksys_write+0x12a/0x240 [ 398.053995][T11760] ? __pfx_ksys_write+0x10/0x10 [ 398.054039][T11760] ? rcu_is_watching+0x12/0xc0 [ 398.054058][T11760] __do_fast_syscall_32+0x73/0x120 [ 398.054083][T11760] do_fast_syscall_32+0x32/0x80 [ 398.054105][T11760] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 398.054125][T11760] RIP: 0023:0xf70de579 [ 398.054138][T11760] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 398.054153][T11760] RSP: 002b:00000000f50ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 398.054169][T11760] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 398.054179][T11760] RDX: 000000000000003a RSI: 0000000000000000 RDI: 0000000000000000 [ 398.054188][T11760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 398.054197][T11760] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 398.054206][T11760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 398.054226][T11760] [ 398.170854][T11748] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.277352][T11748] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.370907][T11748] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.393791][T11748] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.415053][T11748] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.542770][T11771] syzkaller1: entered promiscuous mode [ 398.544484][T11771] syzkaller1: entered allmulticast mode [ 398.823779][ T6002] libceph: connect (1)[c::]:6789 error -101 [ 398.828664][ T6002] libceph: mon0 (1)[c::]:6789 connect error [ 398.869233][T11772] ceph: No mds server is up or the cluster is laggy [ 398.878267][T11785] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1294'. [ 399.711755][T10215] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 399.925406][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 399.982420][T11800] ceph: No mds server is up or the cluster is laggy [ 399.991401][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 400.351457][T11814] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 400.412706][T11818] FAULT_INJECTION: forcing a failure. [ 400.412706][T11818] name failslab, interval 1, probability 0, space 0, times 0 [ 400.417088][T11818] CPU: 3 UID: 0 PID: 11818 Comm: syz.0.1305 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 400.417110][T11818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 400.417120][T11818] Call Trace: [ 400.417126][T11818] [ 400.417134][T11818] dump_stack_lvl+0x16c/0x1f0 [ 400.417159][T11818] should_fail_ex+0x512/0x640 [ 400.417180][T11818] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 400.417200][T11818] should_failslab+0xc2/0x120 [ 400.417219][T11818] __kmalloc_cache_noprof+0x6a/0x3e0 [ 400.417238][T11818] ? alloc_pipe_info+0x10e/0x590 [ 400.417259][T11818] alloc_pipe_info+0x10e/0x590 [ 400.417278][T11818] splice_direct_to_actor+0x77d/0xa30 [ 400.417305][T11818] ? __pfx_direct_splice_actor+0x10/0x10 [ 400.417332][T11818] ? __pfx_aa_file_perm+0x10/0x10 [ 400.417354][T11818] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 400.417376][T11818] ? get_pid_task+0xfc/0x250 [ 400.417408][T11818] do_splice_direct+0x174/0x240 [ 400.417431][T11818] ? __pfx_do_splice_direct+0x10/0x10 [ 400.417456][T11818] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 400.417481][T11818] ? bpf_lsm_file_permission+0x9/0x10 [ 400.417496][T11818] ? security_file_permission+0x71/0x210 [ 400.417518][T11818] ? rw_verify_area+0xcf/0x680 [ 400.417544][T11818] do_sendfile+0xafd/0xe50 [ 400.417565][T11818] ? __pfx_do_sendfile+0x10/0x10 [ 400.417581][T11818] ? __fget_files+0x20e/0x3c0 [ 400.417602][T11818] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 400.417622][T11818] ? ksys_write+0x1b9/0x240 [ 400.417637][T11818] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 400.417665][T11818] ? rcu_is_watching+0x12/0xc0 [ 400.417684][T11818] __do_fast_syscall_32+0x73/0x120 [ 400.417709][T11818] do_fast_syscall_32+0x32/0x80 [ 400.417732][T11818] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 400.417751][T11818] RIP: 0023:0xf7fb1579 [ 400.417764][T11818] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 400.417777][T11818] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 400.417794][T11818] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000004 [ 400.417804][T11818] RDX: 0000000000000000 RSI: 000000007ffff004 RDI: 0000000000000000 [ 400.417813][T11818] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 400.417822][T11818] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 400.417831][T11818] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 400.417851][T11818] [ 401.341137][T11832] 9pnet_fd: Insufficient options for proto=fd [ 401.842255][T10215] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 401.970762][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 401.977778][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 401.982117][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 401.986760][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 402.036144][T11847] ceph: No mds server is up or the cluster is laggy [ 402.157426][T11859] FAULT_INJECTION: forcing a failure. [ 402.157426][T11859] name failslab, interval 1, probability 0, space 0, times 0 [ 402.169207][T11859] CPU: 2 UID: 0 PID: 11859 Comm: syz.0.1312 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 402.169223][T11859] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 402.169230][T11859] Call Trace: [ 402.169234][T11859] [ 402.169238][T11859] dump_stack_lvl+0x16c/0x1f0 [ 402.169257][T11859] should_fail_ex+0x512/0x640 [ 402.169269][T11859] ? fs_reclaim_acquire+0xae/0x150 [ 402.169286][T11859] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 402.169306][T11859] should_failslab+0xc2/0x120 [ 402.169320][T11859] __kmalloc_noprof+0xd2/0x510 [ 402.169336][T11859] tomoyo_realpath_from_path+0xc2/0x6e0 [ 402.169351][T11859] ? tomoyo_profile+0x47/0x60 [ 402.169369][T11859] tomoyo_path_number_perm+0x245/0x580 [ 402.169381][T11859] ? tomoyo_path_number_perm+0x237/0x580 [ 402.169394][T11859] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 402.169407][T11859] ? finish_task_switch.isra.0+0x221/0xc10 [ 402.169431][T11859] ? find_held_lock+0x2b/0x80 [ 402.169441][T11859] ? hook_file_ioctl_common+0x145/0x410 [ 402.169453][T11859] ? __fget_files+0x204/0x3c0 [ 402.169465][T11859] ? __fget_files+0x20e/0x3c0 [ 402.169477][T11859] security_file_ioctl_compat+0x9b/0x240 [ 402.169491][T11859] __ia32_compat_sys_ioctl+0xc3/0x360 [ 402.169508][T11859] __do_fast_syscall_32+0x73/0x120 [ 402.169525][T11859] do_fast_syscall_32+0x32/0x80 [ 402.169540][T11859] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 402.169553][T11859] RIP: 0023:0xf7fb1579 [ 402.169561][T11859] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 402.169571][T11859] RSP: 002b:00000000f50b555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 402.169581][T11859] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040047452 [ 402.169587][T11859] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 402.169593][T11859] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 402.169598][T11859] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 402.169604][T11859] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 402.169616][T11859] [ 402.169621][T11859] ERROR: Out of memory at tomoyo_realpath_from_path. [ 402.365499][T11872] FAULT_INJECTION: forcing a failure. [ 402.365499][T11872] name failslab, interval 1, probability 0, space 0, times 0 [ 402.370862][T11872] CPU: 0 UID: 0 PID: 11872 Comm: syz.0.1315 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 402.370879][T11872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 402.370886][T11872] Call Trace: [ 402.370890][T11872] [ 402.370894][T11872] dump_stack_lvl+0x16c/0x1f0 [ 402.370914][T11872] should_fail_ex+0x512/0x640 [ 402.370928][T11872] ? __kmalloc_noprof+0xbf/0x510 [ 402.370942][T11872] ? kernfs_fop_write_iter+0x237/0x510 [ 402.370957][T11872] should_failslab+0xc2/0x120 [ 402.370971][T11872] __kmalloc_noprof+0xd2/0x510 [ 402.370988][T11872] kernfs_fop_write_iter+0x237/0x510 [ 402.371004][T11872] vfs_write+0x5ba/0x1180 [ 402.371016][T11872] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 402.371032][T11872] ? __pfx___mutex_lock+0x10/0x10 [ 402.371048][T11872] ? __pfx_vfs_write+0x10/0x10 [ 402.371068][T11872] ksys_write+0x12a/0x240 [ 402.371079][T11872] ? __pfx_ksys_write+0x10/0x10 [ 402.371091][T11872] ? rcu_is_watching+0x12/0xc0 [ 402.371105][T11872] __do_fast_syscall_32+0x73/0x120 [ 402.371122][T11872] do_fast_syscall_32+0x32/0x80 [ 402.371138][T11872] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 402.371151][T11872] RIP: 0023:0xf7fb1579 [ 402.371160][T11872] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 402.371189][T11872] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 402.371201][T11872] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000700 [ 402.371208][T11872] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000000 [ 402.371214][T11872] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 402.371220][T11872] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 402.371226][T11872] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 402.371240][T11872] [ 410.877711][T11916] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1322'. [ 411.131756][ T834] libceph: connect (1)[c::]:6789 error -101 [ 411.134206][ T834] libceph: mon0 (1)[c::]:6789 connect error [ 411.306689][T11915] ceph: No mds server is up or the cluster is laggy [ 411.737005][ T834] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 411.955562][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 411.958876][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 412.001662][T11936] ceph: No mds server is up or the cluster is laggy [ 412.270771][T11950] infiniband syz1: set down [ 412.274001][T11950] infiniband syz1: added syzkaller0 [ 412.296810][T11950] RDS/IB: syz1: added [ 412.299072][T11950] smc: adding ib device syz1 with port count 1 [ 412.301640][T11950] smc: ib device syz1 port 1 has pnetid [ 412.568651][T11957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1333'. [ 412.575369][T11957] netlink: 177 bytes leftover after parsing attributes in process `syz.2.1333'. [ 413.016179][T11962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1334'. [ 413.189381][ T1139] smc: removing ib device syz1 [ 413.441695][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1336'. [ 413.523002][T11968] netlink: 'syz.2.1336': attribute type 27 has an invalid length. [ 413.563332][T11968] 0ªX¹¦D: left allmulticast mode [ 413.588147][T11970] netlink: 'syz.2.1336': attribute type 2 has an invalid length. [ 413.590758][T11970] netlink: 'syz.2.1336': attribute type 1 has an invalid length. [ 413.594488][T11968] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.597652][T11968] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.671019][T11968] wg1: left promiscuous mode [ 413.673041][T11968] wg1: left allmulticast mode [ 413.711892][T11968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.765451][T11968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.817594][T11968] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.820391][T11968] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.823614][T11968] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.826376][T11968] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.888323][T11970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.891423][T11970] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.897349][T11970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 414.232022][T11985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1340'. [ 414.420896][T11986] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.1339'. [ 414.785331][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 414.787431][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 414.884314][T11990] ceph: No mds server is up or the cluster is laggy [ 415.128681][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 415.130982][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 415.180509][T12000] ceph: No mds server is up or the cluster is laggy [ 415.296256][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1346'. [ 415.300204][T12006] FAULT_INJECTION: forcing a failure. [ 415.300204][T12006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.304260][T12006] CPU: 0 UID: 0 PID: 12006 Comm: syz.1.1345 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 415.304275][T12006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 415.304282][T12006] Call Trace: [ 415.304286][T12006] [ 415.304290][T12006] dump_stack_lvl+0x16c/0x1f0 [ 415.304309][T12006] should_fail_ex+0x512/0x640 [ 415.304325][T12006] _copy_from_iter+0x2a4/0x15b0 [ 415.304340][T12006] ? __lock_acquire+0xaa4/0x1ba0 [ 415.304355][T12006] ? __pfx__copy_from_iter+0x10/0x10 [ 415.304370][T12006] ? find_held_lock+0x2b/0x80 [ 415.304382][T12006] tun_get_user+0x240/0x3b10 [ 415.304402][T12006] ? __lock_acquire+0x5ca/0x1ba0 [ 415.304416][T12006] ? __pfx_tun_get_user+0x10/0x10 [ 415.304430][T12006] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 415.304447][T12006] ? find_held_lock+0x2b/0x80 [ 415.304458][T12006] ? tun_get+0x191/0x370 [ 415.304474][T12006] tun_chr_write_iter+0xdc/0x210 [ 415.304490][T12006] vfs_write+0x5ba/0x1180 [ 415.304502][T12006] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 415.304518][T12006] ? __pfx_vfs_write+0x10/0x10 [ 415.304527][T12006] ? find_held_lock+0x2b/0x80 [ 415.304545][T12006] ksys_write+0x12a/0x240 [ 415.304555][T12006] ? __pfx_ksys_write+0x10/0x10 [ 415.304566][T12006] ? rcu_is_watching+0x12/0xc0 [ 415.304578][T12006] __do_fast_syscall_32+0x73/0x120 [ 415.304595][T12006] do_fast_syscall_32+0x32/0x80 [ 415.304610][T12006] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 415.304623][T12006] RIP: 0023:0xf70de579 [ 415.304631][T12006] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 415.304641][T12006] RSP: 002b:00000000f50ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 415.304650][T12006] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 415.304657][T12006] RDX: 000000000000001d RSI: 0000000000000000 RDI: 0000000000000000 [ 415.304663][T12006] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 415.304668][T12006] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 415.304674][T12006] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 415.304686][T12006] [ 415.400560][T12007] warning: `syz.0.1346' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 415.955335][T12030] FAULT_INJECTION: forcing a failure. [ 415.955335][T12030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.959504][T12030] CPU: 0 UID: 0 PID: 12030 Comm: syz.3.1351 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 415.959518][T12030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 415.959524][T12030] Call Trace: [ 415.959528][T12030] [ 415.959532][T12030] dump_stack_lvl+0x16c/0x1f0 [ 415.959550][T12030] should_fail_ex+0x512/0x640 [ 415.959566][T12030] _copy_from_user+0x2e/0xd0 [ 415.959579][T12030] __sys_bpf+0x21d/0x4d80 [ 415.959597][T12030] ? __pfx___sys_bpf+0x10/0x10 [ 415.959612][T12030] ? ksys_write+0x190/0x240 [ 415.959626][T12030] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 415.959649][T12030] ? fput+0x70/0xf0 [ 415.959662][T12030] ? ksys_write+0x1b9/0x240 [ 415.959671][T12030] ? __pfx_ksys_write+0x10/0x10 [ 415.959684][T12030] __ia32_sys_bpf+0x76/0xe0 [ 415.959694][T12030] __do_fast_syscall_32+0x73/0x120 [ 415.959711][T12030] do_fast_syscall_32+0x32/0x80 [ 415.959725][T12030] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 415.959738][T12030] RIP: 0023:0xf7fd8579 [ 415.959747][T12030] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 415.959757][T12030] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 415.959767][T12030] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000180 [ 415.959773][T12030] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 415.959779][T12030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 415.959785][T12030] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 415.959791][T12030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 415.959803][T12030] [ 416.061401][T12035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1349'. [ 416.066262][T12035] netlink: 177 bytes leftover after parsing attributes in process `syz.1.1349'. [ 416.085619][T12037] FAULT_INJECTION: forcing a failure. [ 416.085619][T12037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.090181][T12037] CPU: 1 UID: 0 PID: 12037 Comm: syz.3.1353 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 416.090195][T12037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 416.090201][T12037] Call Trace: [ 416.090206][T12037] [ 416.090210][T12037] dump_stack_lvl+0x16c/0x1f0 [ 416.090228][T12037] should_fail_ex+0x512/0x640 [ 416.090243][T12037] _copy_from_user+0x2e/0xd0 [ 416.090257][T12037] __sys_bpf+0x21d/0x4d80 [ 416.090274][T12037] ? __pfx___sys_bpf+0x10/0x10 [ 416.090289][T12037] ? ksys_write+0x190/0x240 [ 416.090303][T12037] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 416.090326][T12037] ? fput+0x70/0xf0 [ 416.090338][T12037] ? ksys_write+0x1b9/0x240 [ 416.090348][T12037] ? __pfx_ksys_write+0x10/0x10 [ 416.090360][T12037] __ia32_sys_bpf+0x76/0xe0 [ 416.090370][T12037] __do_fast_syscall_32+0x73/0x120 [ 416.090386][T12037] do_fast_syscall_32+0x32/0x80 [ 416.090401][T12037] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 416.090414][T12037] RIP: 0023:0xf7fd8579 [ 416.090423][T12037] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 416.090433][T12037] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 416.090442][T12037] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800004c0 [ 416.090449][T12037] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 416.090455][T12037] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 416.090460][T12037] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 416.090466][T12037] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 416.090478][T12037] [ 416.586209][T12042] bridge_slave_0: left allmulticast mode [ 416.588430][T12042] bridge_slave_0: left promiscuous mode [ 416.590919][T12042] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.598562][T12042] bridge_slave_1: left allmulticast mode [ 416.600998][T12042] bridge_slave_1: left promiscuous mode [ 416.604576][T12042] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.615341][T12042] bond0: (slave bond_slave_0): Releasing backup interface [ 416.625266][T12042] bond0: (slave bond_slave_1): Releasing backup interface [ 416.639096][T12042] team_slave_0: left allmulticast mode [ 416.649865][T12042] team0: Port device team_slave_0 removed [ 416.654946][T12042] team_slave_1: left allmulticast mode [ 416.660282][T12042] team0: Port device team_slave_1 removed [ 416.662910][T12042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.665802][T12042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.670197][T12042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.673627][T12042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.691465][ T2305] lo speed is unknown, defaulting to 1000 [ 416.895873][T12055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1360'. [ 416.901033][T12055] netlink: 'syz.1.1360': attribute type 27 has an invalid length. [ 416.936094][T12055] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.938872][T12055] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.965077][T12056] netlink: 'syz.1.1360': attribute type 2 has an invalid length. [ 416.967642][T12056] netlink: 'syz.1.1360': attribute type 1 has an invalid length. [ 417.003185][T12055] wg1: left promiscuous mode [ 417.004684][T12055] wg1: left allmulticast mode [ 417.075479][T12055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.084669][T12055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.163790][T12055] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.167489][T12055] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.170991][T12055] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.177330][T12055] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.228525][T12056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.232640][T12056] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.237341][T12056] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 417.244524][T12057] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.336331][T12057] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.453671][T12057] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.541907][T12057] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.659442][T12057] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.666391][T12057] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.674685][T12057] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.681081][T12057] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.595499][T12100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1371'. [ 418.790311][ T1017] libceph: connect (1)[c::]:6789 error -101 [ 418.792427][ T1017] libceph: mon0 (1)[c::]:6789 connect error [ 418.830370][ T2305] libceph: connect (1)[c::]:6789 error -101 [ 418.832767][ T2305] libceph: mon0 (1)[c::]:6789 connect error [ 418.834928][T12097] ceph: No mds server is up or the cluster is laggy [ 418.860168][T12099] ceph: No mds server is up or the cluster is laggy [ 419.208669][T12112] loop2: detected capacity change from 0 to 7 [ 419.214854][T12104] Dev loop2: unable to read RDB block 7 [ 419.216742][T12104] loop2: unable to read partition table [ 419.218599][T12104] loop2: partition table beyond EOD, truncated [ 419.300596][T12112] Dev loop2: unable to read RDB block 7 [ 419.304344][T12112] loop2: unable to read partition table [ 419.307041][T12112] loop2: partition table beyond EOD, truncated [ 419.309676][T12112] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 419.388476][T12117] /dev/nullb0: Can't open blockdev [ 419.651132][ T2305] libceph: connect (1)[c::]:6789 error -101 [ 419.653139][ T2305] libceph: mon0 (1)[c::]:6789 connect error [ 419.727657][T12125] ceph: No mds server is up or the cluster is laggy [ 419.954126][T12135] loop2: detected capacity change from 0 to 7 [ 419.964530][T12135] Dev loop2: unable to read RDB block 7 [ 419.966382][T12135] loop2: unable to read partition table [ 419.968871][T12135] loop2: partition table beyond EOD, truncated [ 419.972417][T12135] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 420.441681][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1384'. [ 420.445078][T12149] netlink: 177 bytes leftover after parsing attributes in process `syz.3.1384'. [ 421.023137][ T2305] libceph: connect (1)[c::]:6789 error -101 [ 421.030945][ T2305] libceph: mon0 (1)[c::]:6789 connect error [ 421.034474][ T2305] libceph: connect (1)[c::]:6789 error -101 [ 421.038609][ T2305] libceph: mon0 (1)[c::]:6789 connect error [ 421.079370][T12159] ceph: No mds server is up or the cluster is laggy [ 421.559637][T12173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1391'. [ 422.386817][T12190] FAULT_INJECTION: forcing a failure. [ 422.386817][T12190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.390852][T12190] CPU: 2 UID: 0 PID: 12190 Comm: syz.1.1397 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 422.390866][T12190] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 422.390873][T12190] Call Trace: [ 422.390876][T12190] [ 422.390880][T12190] dump_stack_lvl+0x16c/0x1f0 [ 422.390899][T12190] should_fail_ex+0x512/0x640 [ 422.390913][T12190] _copy_from_user+0x2e/0xd0 [ 422.390927][T12190] get_compat_msghdr+0xa7/0x170 [ 422.390941][T12190] ? __pfx_get_compat_msghdr+0x10/0x10 [ 422.390959][T12190] ___sys_sendmsg+0x1ae/0x1d0 [ 422.390974][T12190] ? __pfx____sys_sendmsg+0x10/0x10 [ 422.391003][T12190] __sys_sendmsg+0x16d/0x220 [ 422.391016][T12190] ? __pfx___sys_sendmsg+0x10/0x10 [ 422.391034][T12190] ? rcu_is_watching+0x12/0xc0 [ 422.391045][T12190] ? rcu_is_watching+0x12/0xc0 [ 422.391057][T12190] __do_fast_syscall_32+0x73/0x120 [ 422.391073][T12190] do_fast_syscall_32+0x32/0x80 [ 422.391088][T12190] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 422.391102][T12190] RIP: 0023:0xf70de579 [ 422.391110][T12190] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 422.391121][T12190] RSP: 002b:00000000f50ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 422.391130][T12190] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 422.391137][T12190] RDX: 0000000000048844 RSI: 0000000000000000 RDI: 0000000000000000 [ 422.391143][T12190] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 422.391148][T12190] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 422.391154][T12190] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 422.391166][T12190] [ 422.925147][ T2305] libceph: connect (1)[c::]:6789 error -101 [ 422.927629][ T2305] libceph: mon0 (1)[c::]:6789 connect error [ 423.021695][T12210] FAULT_INJECTION: forcing a failure. [ 423.021695][T12210] name failslab, interval 1, probability 0, space 0, times 0 [ 423.031298][T12210] CPU: 1 UID: 0 PID: 12210 Comm: syz.2.1401 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 423.031313][T12210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 423.031320][T12210] Call Trace: [ 423.031324][T12210] [ 423.031328][T12210] dump_stack_lvl+0x16c/0x1f0 [ 423.031348][T12210] should_fail_ex+0x512/0x640 [ 423.031364][T12210] ? fs_reclaim_acquire+0xae/0x150 [ 423.031382][T12210] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 423.031397][T12210] should_failslab+0xc2/0x120 [ 423.031410][T12210] __kmalloc_noprof+0xd2/0x510 [ 423.031426][T12210] tomoyo_realpath_from_path+0xc2/0x6e0 [ 423.031442][T12210] ? tomoyo_profile+0x47/0x60 [ 423.031460][T12210] tomoyo_path_number_perm+0x245/0x580 [ 423.031471][T12210] ? tomoyo_path_number_perm+0x237/0x580 [ 423.031485][T12210] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 423.031511][T12210] ? find_held_lock+0x2b/0x80 [ 423.031522][T12210] ? hook_file_ioctl_common+0x145/0x410 [ 423.031533][T12210] ? __fget_files+0x204/0x3c0 [ 423.031545][T12210] ? __fget_files+0x20e/0x3c0 [ 423.031553][T12210] ? __fput_deferred+0x300/0x370 [ 423.031569][T12210] security_file_ioctl_compat+0x9b/0x240 [ 423.031584][T12210] __ia32_compat_sys_ioctl+0xc3/0x360 [ 423.031601][T12210] __do_fast_syscall_32+0x73/0x120 [ 423.031617][T12210] do_fast_syscall_32+0x32/0x80 [ 423.031632][T12210] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 423.031645][T12210] RIP: 0023:0xf70ae579 [ 423.031653][T12210] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 423.031663][T12210] RSP: 002b:00000000f505c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 423.031673][T12210] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000000560a [ 423.031680][T12210] RDX: 00000000800006c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 423.031686][T12210] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 423.031691][T12210] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 423.031697][T12210] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 423.031710][T12210] [ 423.031714][T12210] ERROR: Out of memory at tomoyo_realpath_from_path. [ 423.171546][ T2305] libceph: connect (1)[c::]:6789 error -101 [ 423.174163][ T2305] libceph: mon0 (1)[c::]:6789 connect error [ 423.219997][T12211] ceph: No mds server is up or the cluster is laggy [ 423.271417][ T2305] libceph: connect (1)[c::]:6789 error -101 [ 423.273388][ T2305] libceph: mon0 (1)[c::]:6789 connect error [ 423.580469][T12204] ceph: No mds server is up or the cluster is laggy [ 423.633666][T12221] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1404'. [ 423.637605][T12221] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1404'. [ 424.012085][T12219] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 424.024003][ T2305] libceph: connect (1)[c::]:6789 error -101 [ 424.025950][ T2305] libceph: mon0 (1)[c::]:6789 connect error [ 424.281936][ T2305] libceph: connect (1)[c::]:6789 error -101 [ 424.285851][ T2305] libceph: mon0 (1)[c::]:6789 connect error [ 424.449666][T12244] ceph: No mds server is up or the cluster is laggy [ 424.771323][T12264] FAULT_INJECTION: forcing a failure. [ 424.771323][T12264] name fail_futex, interval 1, probability 0, space 0, times 1 [ 424.776275][T12264] CPU: 3 UID: 0 PID: 12264 Comm: syz.0.1414 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 424.776290][T12264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 424.776296][T12264] Call Trace: [ 424.776300][T12264] [ 424.776304][T12264] dump_stack_lvl+0x16c/0x1f0 [ 424.776323][T12264] should_fail_ex+0x512/0x640 [ 424.776341][T12264] get_futex_key+0x49e/0x1000 [ 424.776354][T12264] ? __pfx_get_futex_key+0x10/0x10 [ 424.776370][T12264] futex_wake+0xe7/0x4e0 [ 424.776383][T12264] ? rcu_is_watching+0x12/0xc0 [ 424.776396][T12264] ? __pfx_futex_wake+0x10/0x10 [ 424.776415][T12264] do_futex+0x1e3/0x350 [ 424.776427][T12264] ? __pfx_do_futex+0x10/0x10 [ 424.776437][T12264] ? __might_fault+0xe3/0x190 [ 424.776454][T12264] mm_release+0x24e/0x300 [ 424.776467][T12264] do_exit+0x898/0x2c30 [ 424.776484][T12264] ? __pfx_do_exit+0x10/0x10 [ 424.776499][T12264] ? do_raw_spin_lock+0x12c/0x2b0 [ 424.776508][T12264] ? find_held_lock+0x2b/0x80 [ 424.776521][T12264] do_group_exit+0xd3/0x2a0 [ 424.776537][T12264] get_signal+0x2673/0x26d0 [ 424.776550][T12264] ? find_held_lock+0x2b/0x80 [ 424.776560][T12264] ? __might_fault+0x13b/0x190 [ 424.776574][T12264] ? __pfx_get_signal+0x10/0x10 [ 424.776587][T12264] ? fput+0x70/0xf0 [ 424.776602][T12264] arch_do_signal_or_restart+0x8f/0x7a0 [ 424.776618][T12264] ? __pfx___sys_getpeername+0x10/0x10 [ 424.776631][T12264] ? __fget_files+0x20e/0x3c0 [ 424.776640][T12264] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 424.776659][T12264] ? __pfx_ksys_write+0x10/0x10 [ 424.776672][T12264] syscall_exit_to_user_mode+0x150/0x2a0 [ 424.776688][T12264] __do_fast_syscall_32+0x80/0x120 [ 424.776704][T12264] do_fast_syscall_32+0x32/0x80 [ 424.776719][T12264] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 424.776732][T12264] RIP: 0023:0xf7fb1579 [ 424.776740][T12264] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 424.776750][T12264] RSP: 002b:00000000f509455c EFLAGS: 00000296 ORIG_RAX: 0000000000000170 [ 424.776760][T12264] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000000 [ 424.776766][T12264] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 424.776772][T12264] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 424.776777][T12264] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 424.776783][T12264] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 424.776795][T12264] [ 424.922020][T12270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.929788][T12270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.781766][ T834] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 425.857383][ T834] libceph: connect (1)[c::]:6789 error -101 [ 425.859941][ T834] libceph: mon0 (1)[c::]:6789 connect error [ 425.868477][T12282] ceph: No mds server is up or the cluster is laggy [ 426.365391][T12293] netlink: 161716 bytes leftover after parsing attributes in process `syz.3.1422'. [ 426.671040][ C2] vkms_vblank_simulate: vblank timer overrun [ 427.293618][T12315] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 427.597449][T12322] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1430'. [ 428.587670][ T2305] libceph: connect (1)[c::]:6789 error -101 [ 428.589709][ T2305] libceph: mon0 (1)[c::]:6789 connect error [ 428.631272][T12343] ceph: No mds server is up or the cluster is laggy [ 428.865081][T12352] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 428.867820][T12352] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 428.874137][T12352] vhci_hcd vhci_hcd.0: Device attached [ 429.050341][T12358] FAULT_INJECTION: forcing a failure. [ 429.050341][T12358] name failslab, interval 1, probability 0, space 0, times 0 [ 429.052020][T12356] fuse: Unknown parameter 'grou00000000000000000000' [ 429.054369][T12358] CPU: 3 UID: 0 PID: 12358 Comm: syz.0.1439 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 429.054384][T12358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 429.054390][T12358] Call Trace: [ 429.054394][T12358] [ 429.054397][T12358] dump_stack_lvl+0x16c/0x1f0 [ 429.054416][T12358] should_fail_ex+0x512/0x640 [ 429.054428][T12358] ? fs_reclaim_acquire+0xae/0x150 [ 429.054446][T12358] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 429.054461][T12358] should_failslab+0xc2/0x120 [ 429.054474][T12358] __kmalloc_noprof+0xd2/0x510 [ 429.054489][T12358] tomoyo_realpath_from_path+0xc2/0x6e0 [ 429.054505][T12358] ? tomoyo_profile+0x47/0x60 [ 429.054523][T12358] tomoyo_path_number_perm+0x245/0x580 [ 429.054534][T12358] ? tomoyo_path_number_perm+0x237/0x580 [ 429.054548][T12358] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 429.054573][T12358] ? find_held_lock+0x2b/0x80 [ 429.054584][T12358] ? hook_file_ioctl_common+0x145/0x410 [ 429.054596][T12358] ? __fget_files+0x204/0x3c0 [ 429.054608][T12358] ? __fget_files+0x20e/0x3c0 [ 429.054617][T12358] ? __fput_deferred+0x300/0x370 [ 429.054632][T12358] security_file_ioctl_compat+0x9b/0x240 [ 429.054646][T12358] __ia32_compat_sys_ioctl+0xc3/0x360 [ 429.054663][T12358] __do_fast_syscall_32+0x73/0x120 [ 429.054679][T12358] do_fast_syscall_32+0x32/0x80 [ 429.054694][T12358] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 429.054707][T12358] RIP: 0023:0xf7fb1579 [ 429.054716][T12358] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 429.054726][T12358] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 429.054735][T12358] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008953 [ 429.054742][T12358] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 429.054748][T12358] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 429.054753][T12358] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 429.054759][T12358] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 429.054771][T12358] [ 429.054775][T12358] ERROR: Out of memory at tomoyo_realpath_from_path. [ 429.121441][ T834] usb 43-1: new low-speed USB device number 9 using vhci_hcd [ 429.131107][T12353] vhci_hcd: connection closed [ 429.131445][T12354] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 429.135776][ T1139] vhci_hcd: stop threads [ 429.137603][ T1139] vhci_hcd: release socket [ 429.139136][ T1139] vhci_hcd: disconnect device [ 429.303095][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1441'. [ 429.306526][T12370] netlink: 177 bytes leftover after parsing attributes in process `syz.1.1441'. [ 429.797844][T12381] netlink: 'syz.3.1446': attribute type 1 has an invalid length. [ 429.799637][T12380] could not allocate digest TFM handle [ 429.805932][T12381] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 429.879688][T12389] FAULT_INJECTION: forcing a failure. [ 429.879688][T12389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.886697][T12389] CPU: 2 UID: 0 PID: 12389 Comm: syz.2.1445 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 429.886712][T12389] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 429.886718][T12389] Call Trace: [ 429.886722][T12389] [ 429.886726][T12389] dump_stack_lvl+0x16c/0x1f0 [ 429.886744][T12389] should_fail_ex+0x512/0x640 [ 429.886759][T12389] _copy_from_user+0x2e/0xd0 [ 429.886772][T12389] get_compat_msghdr+0xa7/0x170 [ 429.886786][T12389] ? __pfx_get_compat_msghdr+0x10/0x10 [ 429.886804][T12389] ___sys_sendmsg+0x1ae/0x1d0 [ 429.886819][T12389] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.886847][T12389] __sys_sendmsg+0x16d/0x220 [ 429.886861][T12389] ? __pfx___sys_sendmsg+0x10/0x10 [ 429.886878][T12389] ? rcu_is_watching+0x12/0xc0 [ 429.886890][T12389] ? rcu_is_watching+0x12/0xc0 [ 429.886901][T12389] __do_fast_syscall_32+0x73/0x120 [ 429.886918][T12389] do_fast_syscall_32+0x32/0x80 [ 429.886932][T12389] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 429.886945][T12389] RIP: 0023:0xf70ae579 [ 429.886953][T12389] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 429.886963][T12389] RSP: 002b:00000000f507d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 429.886973][T12389] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000000 [ 429.886979][T12389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 429.886985][T12389] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 429.886990][T12389] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 429.886996][T12389] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 429.887008][T12389] [ 429.887144][T12389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1445'. [ 429.950317][T12389] bridge_slave_1: left allmulticast mode [ 429.952194][T12389] bridge_slave_1: left promiscuous mode [ 429.954993][T12389] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.056212][T12389] bridge_slave_0: left allmulticast mode [ 430.058155][T12389] bridge_slave_0: left promiscuous mode [ 430.060436][T12389] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.261446][ T2305] libceph: connect (1)[c::]:6789 error -101 [ 430.263772][ T2305] libceph: mon0 (1)[c::]:6789 connect error [ 430.266591][ T2305] libceph: connect (1)[c::]:6789 error -101 [ 430.271523][ T2305] libceph: mon0 (1)[c::]:6789 connect error [ 430.312866][T12393] ceph: No mds server is up or the cluster is laggy [ 430.764991][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1449'. [ 430.767911][T12402] bridge_slave_1: left allmulticast mode [ 430.769672][T12402] bridge_slave_1: left promiscuous mode [ 430.772642][T12402] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.777107][T12402] bridge_slave_0: left allmulticast mode [ 430.778904][T12402] bridge_slave_0: left promiscuous mode [ 430.780725][T12402] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.825917][T12407] hub 6-0:1.0: USB hub found [ 430.831412][T12407] hub 6-0:1.0: 1 port detected [ 430.967515][T12421] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 430.969569][T12421] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 430.973411][T12421] vhci_hcd vhci_hcd.0: Device attached [ 431.211269][ T2305] usb 37-1: new low-speed USB device number 11 using vhci_hcd [ 431.277469][T12428] fuse: Unknown parameter 'grou00000000000000000000' [ 431.451747][T12422] vhci_hcd: connection reset by peer [ 431.453861][ T1136] vhci_hcd: stop threads [ 431.455373][ T1136] vhci_hcd: release socket [ 431.456988][ T1136] vhci_hcd: disconnect device [ 431.617796][T12437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1455'. [ 431.622786][T12437] netlink: 177 bytes leftover after parsing attributes in process `syz.2.1455'. [ 431.835808][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1457'. [ 431.841310][T12442] netlink: 177 bytes leftover after parsing attributes in process `syz.1.1457'. [ 432.585632][ T29] libceph: connect (1)[c::]:6789 error -101 [ 432.587763][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 432.600770][T12457] FAULT_INJECTION: forcing a failure. [ 432.600770][T12457] name failslab, interval 1, probability 0, space 0, times 0 [ 432.605047][T12457] CPU: 2 UID: 0 PID: 12457 Comm: syz.1.1463 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 432.605062][T12457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 432.605069][T12457] Call Trace: [ 432.605073][T12457] [ 432.605077][T12457] dump_stack_lvl+0x16c/0x1f0 [ 432.605095][T12457] should_fail_ex+0x512/0x640 [ 432.605108][T12457] ? fs_reclaim_acquire+0xae/0x150 [ 432.605125][T12457] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 432.605140][T12457] should_failslab+0xc2/0x120 [ 432.605153][T12457] __kmalloc_noprof+0xd2/0x510 [ 432.605169][T12457] tomoyo_realpath_from_path+0xc2/0x6e0 [ 432.605185][T12457] ? tomoyo_profile+0x47/0x60 [ 432.605202][T12457] tomoyo_path_number_perm+0x245/0x580 [ 432.605214][T12457] ? tomoyo_path_number_perm+0x237/0x580 [ 432.605227][T12457] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 432.605253][T12457] ? find_held_lock+0x2b/0x80 [ 432.605264][T12457] ? hook_file_ioctl_common+0x145/0x410 [ 432.605275][T12457] ? __fget_files+0x204/0x3c0 [ 432.605288][T12457] ? __fget_files+0x20e/0x3c0 [ 432.605298][T12457] ? __fput_deferred+0x300/0x370 [ 432.605314][T12457] security_file_ioctl_compat+0x9b/0x240 [ 432.605329][T12457] __ia32_compat_sys_ioctl+0xc3/0x360 [ 432.605346][T12457] __do_fast_syscall_32+0x73/0x120 [ 432.605362][T12457] do_fast_syscall_32+0x32/0x80 [ 432.605377][T12457] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 432.605390][T12457] RIP: 0023:0xf70de579 [ 432.605399][T12457] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 432.605409][T12457] RSP: 002b:00000000f50ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 432.605419][T12457] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000891c [ 432.605425][T12457] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 432.605431][T12457] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 432.605437][T12457] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 432.605442][T12457] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 432.605455][T12457] [ 432.605459][T12457] ERROR: Out of memory at tomoyo_realpath_from_path. [ 432.641376][T12453] ceph: No mds server is up or the cluster is laggy [ 432.841501][ T29] libceph: connect (1)[c::]:6789 error -101 [ 432.843436][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 433.431981][T12473] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 433.522461][T12478] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 433.524508][T12478] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 433.541384][T12478] vhci_hcd vhci_hcd.0: Device attached [ 433.846466][T12486] fuse: Unknown parameter 'group_i00000000000000000000' [ 433.905043][T12479] vhci_hcd: connection closed [ 433.905236][ T13] vhci_hcd: stop threads [ 433.908044][ T13] vhci_hcd: release socket [ 433.909421][ T13] vhci_hcd: disconnect device [ 433.985368][T12491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1470'. [ 433.988962][T12491] netlink: 177 bytes leftover after parsing attributes in process `syz.2.1470'. [ 434.251305][ T834] vhci_hcd: vhci_device speed not set [ 434.740811][ T29] libceph: connect (1)[c::]:6789 error -101 [ 434.743114][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 434.751160][T12510] FAULT_INJECTION: forcing a failure. [ 434.751160][T12510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.755335][T12510] CPU: 3 UID: 0 PID: 12510 Comm: syz.1.1476 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 434.755349][T12510] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 434.755355][T12510] Call Trace: [ 434.755359][T12510] [ 434.755364][T12510] dump_stack_lvl+0x16c/0x1f0 [ 434.755382][T12510] should_fail_ex+0x512/0x640 [ 434.755396][T12510] _copy_from_user+0x2e/0xd0 [ 434.755411][T12510] get_compat_msghdr+0xa7/0x170 [ 434.755425][T12510] ? __pfx_get_compat_msghdr+0x10/0x10 [ 434.755442][T12510] ___sys_sendmsg+0x1ae/0x1d0 [ 434.755458][T12510] ? __pfx____sys_sendmsg+0x10/0x10 [ 434.755486][T12510] __sys_sendmsg+0x16d/0x220 [ 434.755500][T12510] ? __pfx___sys_sendmsg+0x10/0x10 [ 434.755517][T12510] ? rcu_is_watching+0x12/0xc0 [ 434.755529][T12510] ? rcu_is_watching+0x12/0xc0 [ 434.755541][T12510] __do_fast_syscall_32+0x73/0x120 [ 434.755568][T12510] do_fast_syscall_32+0x32/0x80 [ 434.755585][T12510] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 434.755598][T12510] RIP: 0023:0xf70de579 [ 434.755606][T12510] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 434.755616][T12510] RSP: 002b:00000000f50ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 434.755626][T12510] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000540 [ 434.755632][T12510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 434.755638][T12510] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 434.755644][T12510] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 434.755650][T12510] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 434.755662][T12510] [ 434.784044][T12505] ceph: No mds server is up or the cluster is laggy [ 434.812298][T12516] FAULT_INJECTION: forcing a failure. [ 434.812298][T12516] name failslab, interval 1, probability 0, space 0, times 0 [ 434.826723][T12516] CPU: 0 UID: 0 PID: 12516 Comm: syz.2.1478 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 434.826750][T12516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 434.826757][T12516] Call Trace: [ 434.826762][T12516] [ 434.826766][T12516] dump_stack_lvl+0x16c/0x1f0 [ 434.826785][T12516] should_fail_ex+0x512/0x640 [ 434.826797][T12516] ? __kmalloc_noprof+0xbf/0x510 [ 434.826811][T12516] ? kernfs_fop_write_iter+0x237/0x510 [ 434.826825][T12516] should_failslab+0xc2/0x120 [ 434.826839][T12516] __kmalloc_noprof+0xd2/0x510 [ 434.826854][T12516] kernfs_fop_write_iter+0x237/0x510 [ 434.826870][T12516] vfs_write+0x5ba/0x1180 [ 434.826881][T12516] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 434.826896][T12516] ? __pfx___mutex_lock+0x10/0x10 [ 434.826911][T12516] ? __pfx_vfs_write+0x10/0x10 [ 434.826930][T12516] ksys_write+0x12a/0x240 [ 434.826940][T12516] ? __pfx_ksys_write+0x10/0x10 [ 434.826952][T12516] ? rcu_is_watching+0x12/0xc0 [ 434.826965][T12516] __do_fast_syscall_32+0x73/0x120 [ 434.826981][T12516] do_fast_syscall_32+0x32/0x80 [ 434.826996][T12516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 434.827010][T12516] RIP: 0023:0xf70ae579 [ 434.827018][T12516] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 434.827028][T12516] RSP: 002b:00000000f509e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 434.827038][T12516] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000700 [ 434.827044][T12516] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000000 [ 434.827050][T12516] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 434.827055][T12516] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 434.827061][T12516] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 434.827074][T12516] [ 435.037192][ T29] libceph: connect (1)[c::]:6789 error -101 [ 435.039093][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 435.570389][T12528] FAULT_INJECTION: forcing a failure. [ 435.570389][T12528] name failslab, interval 1, probability 0, space 0, times 0 [ 435.574340][T12528] CPU: 1 UID: 0 PID: 12528 Comm: syz.3.1480 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 435.574365][T12528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 435.574372][T12528] Call Trace: [ 435.574375][T12528] [ 435.574379][T12528] dump_stack_lvl+0x16c/0x1f0 [ 435.574398][T12528] should_fail_ex+0x512/0x640 [ 435.574410][T12528] ? fs_reclaim_acquire+0xae/0x150 [ 435.574428][T12528] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 435.574443][T12528] should_failslab+0xc2/0x120 [ 435.574456][T12528] __kmalloc_noprof+0xd2/0x510 [ 435.574467][T12528] ? __pfx___schedule+0x10/0x10 [ 435.574484][T12528] tomoyo_realpath_from_path+0xc2/0x6e0 [ 435.574500][T12528] ? tomoyo_profile+0x47/0x60 [ 435.574518][T12528] tomoyo_path_number_perm+0x245/0x580 [ 435.574529][T12528] ? tomoyo_path_number_perm+0x237/0x580 [ 435.574543][T12528] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 435.574569][T12528] ? find_held_lock+0x2b/0x80 [ 435.574580][T12528] ? hook_file_ioctl_common+0x145/0x410 [ 435.574592][T12528] ? __fget_files+0x204/0x3c0 [ 435.574603][T12528] ? __fget_files+0x20e/0x3c0 [ 435.574612][T12528] ? __fput_deferred+0x300/0x370 [ 435.574628][T12528] security_file_ioctl_compat+0x9b/0x240 [ 435.574642][T12528] __ia32_compat_sys_ioctl+0xc3/0x360 [ 435.574659][T12528] __do_fast_syscall_32+0x73/0x120 [ 435.574675][T12528] do_fast_syscall_32+0x32/0x80 [ 435.574690][T12528] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 435.574703][T12528] RIP: 0023:0xf7fd8579 [ 435.574711][T12528] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 435.574721][T12528] RSP: 002b:00000000f50b455c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 435.574731][T12528] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000402c5342 [ 435.574737][T12528] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 435.574743][T12528] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 435.574748][T12528] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 435.574754][T12528] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 435.574767][T12528] [ 435.574789][T12528] ERROR: Out of memory at tomoyo_realpath_from_path. [ 435.874118][T12532] batadv_slave_1: entered promiscuous mode [ 435.878242][T12531] batadv_slave_1: left promiscuous mode [ 436.491327][ T2305] vhci_hcd: vhci_device speed not set [ 436.536909][T12548] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 437.051750][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 437.054124][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 437.058358][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 437.060843][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 437.090038][T12581] ceph: No mds server is up or the cluster is laggy [ 437.336451][ T40] audit: type=1326 audit(1745457492.079:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12600 comm="syz.0.1490" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x0 [ 437.687530][T12612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1491'. [ 437.715247][T12607] lo speed is unknown, defaulting to 1000 [ 439.464527][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.466749][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.885866][T12647] ceph: No mds server is up or the cluster is laggy [ 439.888998][ T2305] libceph: connect (1)[c::]:6789 error -101 [ 439.891746][ T2305] libceph: mon0 (1)[c::]:6789 connect error [ 440.151494][ T2305] libceph: connect (1)[c::]:6789 error -101 [ 454.945885][ T5963] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 454.949459][ T5963] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 454.952619][ T5963] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 454.952833][ T5355] sched: DL replenish lagged too much [ 454.959870][ T5963] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 454.964294][ T5963] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 455.001378][ T2305] libceph: mon0 (1)[c::]:6789 connect error [ 455.102377][T12658] lo speed is unknown, defaulting to 1000 [ 455.386675][ T5954] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 455.391095][ T5954] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 455.394905][ T5954] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 455.398343][ T5954] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 455.401425][ T5954] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 455.447930][T12663] lo speed is unknown, defaulting to 1000 [ 455.466134][ T5306] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 455.469358][ T5306] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 455.472223][ T5306] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 455.475012][ T5306] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 455.477875][ T5967] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 455.477933][ T5306] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 455.483027][ T5967] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 455.486388][ T5967] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 455.492646][ T5967] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 455.497753][ T5967] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 455.509543][T12667] lo speed is unknown, defaulting to 1000 [ 455.541047][T12665] lo speed is unknown, defaulting to 1000 [ 455.689971][T12658] chnl_net:caif_netlink_parms(): no params data found [ 455.843053][ T1416] ================================================================== [ 455.845579][ T1416] BUG: KASAN: slab-use-after-free in handle_tx+0x5a5/0x630 [ 455.847842][ T1416] Read of size 8 at addr ffff8880694d8020 by task aoe_tx0/1416 [ 455.851240][ T1416] [ 455.852733][ T1416] CPU: 0 UID: 0 PID: 1416 Comm: aoe_tx0 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 455.852746][ T1416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 455.852753][ T1416] Call Trace: [ 455.852757][ T1416] [ 455.852761][ T1416] dump_stack_lvl+0x116/0x1f0 [ 455.852779][ T1416] print_report+0xc3/0x670 [ 455.852797][ T1416] ? __virt_addr_valid+0x5e/0x590 [ 455.852811][ T1416] ? __phys_addr+0xc6/0x150 [ 455.852825][ T1416] ? handle_tx+0x5a5/0x630 [ 455.852839][ T1416] kasan_report+0xe0/0x110 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 455.852851][ T1416] ? handle_tx+0x5a5/0x630 [ 455.852866][ T1416] handle_tx+0x5a5/0x630 [ 455.852882][ T1416] dev_hard_start_xmit+0x93/0x740 [ 455.852896][ T1416] __dev_queue_xmit+0x7eb/0x43e0 [ 455.852908][ T1416] ? lockdep_hardirqs_on+0x7c/0x110 [ 455.852921][ T1416] ? finish_task_switch.isra.0+0x221/0xc10 [ 455.852934][ T1416] ? rcu_is_watching+0x12/0xc0 [ 455.852944][ T1416] ? __pfx___dev_queue_xmit+0x10/0x10 [ 455.852956][ T1416] ? __lock_acquire+0xaa4/0x1ba0 [ 455.852970][ T1416] ? __lock_acquire+0xaa4/0x1ba0 [ 455.852984][ T1416] ? do_raw_spin_lock+0x12c/0x2b0 [ 455.852994][ T1416] ? find_held_lock+0x2b/0x80 [ 455.853004][ T1416] ? skb_dequeue+0x126/0x180 [ 455.853013][ T1416] ? find_held_lock+0x2b/0x80 [ 455.853024][ T1416] ? rcu_is_watching+0x12/0xc0 [ 455.853034][ T1416] tx+0xcc/0x190 [ 455.853049][ T1416] ? __pfx_tx+0x10/0x10 [ 455.853063][ T1416] kthread+0x1e1/0x3e0 [ 455.853076][ T1416] ? find_held_lock+0x2b/0x80 [ 455.853086][ T1416] ? __pfx_kthread+0x10/0x10 [ 455.853099][ T1416] ? __pfx_default_wake_function+0x10/0x10 [ 455.853110][ T1416] ? lockdep_hardirqs_on+0x7c/0x110 [ 455.853128][ T1416] ? __kthread_parkme+0x19e/0x250 [ 455.853141][ T1416] ? __pfx_kthread+0x10/0x10 [ 455.853156][ T1416] kthread+0x3c2/0x780 [ 455.853171][ T1416] ? __pfx_kthread+0x10/0x10 [ 455.853185][ T1416] ? __pfx_kthread+0x10/0x10 [ 455.853199][ T1416] ? __pfx_kthread+0x10/0x10 [ 455.853213][ T1416] ? __pfx_kthread+0x10/0x10 [ 455.853227][ T1416] ? rcu_is_watching+0x12/0xc0 [ 455.853237][ T1416] ? __pfx_kthread+0x10/0x10 [ 455.853251][ T1416] ret_from_fork+0x45/0x80 [ 455.853261][ T1416] ? __pfx_kthread+0x10/0x10 [ 455.853275][ T1416] ret_from_fork_asm+0x1a/0x30 [ 455.853293][ T1416] [ 455.853297][ T1416] [ 455.923010][ T1416] Allocated by task 6027: [ 455.924366][ T1416] kasan_save_stack+0x33/0x60 [ 455.925889][ T1416] kasan_save_track+0x14/0x30 [ 455.927363][ T1416] __kasan_kmalloc+0xaa/0xb0 [ 455.928816][ T1416] alloc_tty_struct+0x96/0x8c0 [ 455.930355][ T1416] tty_init_dev.part.0+0x1e/0x500 [ 455.931945][ T1416] tty_open+0xa50/0xf90 [ 455.933255][ T1416] chrdev_open+0x231/0x6a0 [ 455.934665][ T1416] do_dentry_open+0x741/0x1c10 [ 455.936166][ T1416] vfs_open+0x82/0x3f0 [ 455.937451][ T1416] path_openat+0x1e5e/0x2d40 [ 455.938921][ T1416] do_filp_open+0x20b/0x470 [ 455.940347][ T1416] do_sys_openat2+0x11b/0x1d0 [ 455.941840][ T1416] __ia32_compat_sys_openat+0x16d/0x210 [ 455.943567][ T1416] __do_fast_syscall_32+0x73/0x120 [ 455.945172][ T1416] do_fast_syscall_32+0x32/0x80 [ 455.946728][ T1416] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 455.948690][ T1416] [ 455.949487][ T1416] Freed by task 10215: [ 455.950777][ T1416] kasan_save_stack+0x33/0x60 [ 455.952252][ T1416] kasan_save_track+0x14/0x30 [ 455.953734][ T1416] kasan_save_free_info+0x3b/0x60 [ 455.955324][ T1416] __kasan_slab_free+0x51/0x70 [ 455.956848][ T1416] kfree+0x2b6/0x4d0 [ 455.958098][ T1416] process_one_work+0x9cc/0x1b70 [ 455.959648][ T1416] worker_thread+0x6c8/0xf10 [ 455.961103][ T1416] kthread+0x3c2/0x780 [ 455.962419][ T1416] ret_from_fork+0x45/0x80 [ 455.963829][ T1416] ret_from_fork_asm+0x1a/0x30 [ 455.965338][ T1416] [ 455.966122][ T1416] Last potentially related work creation: [ 455.967899][ T1416] kasan_save_stack+0x33/0x60 [ 455.969379][ T1416] kasan_record_aux_stack+0xb8/0xd0 [ 455.971023][ T1416] insert_work+0x36/0x230 [ 455.972382][ T1416] __queue_work+0x97e/0x10f0 [ 455.973874][ T1416] queue_work_on+0x1a4/0x1f0 [ 455.975330][ T1416] release_tty+0x4de/0x5d0 [ 455.976744][ T1416] tty_release_struct+0xb7/0xe0 [ 455.978294][ T1416] tty_release+0xe2d/0x1430 [ 455.979725][ T1416] __fput+0x3ff/0xb70 [ 455.980996][ T1416] task_work_run+0x14d/0x240 [ 455.982455][ T1416] do_exit+0xafb/0x2c30 [ 455.983772][ T1416] do_group_exit+0xd3/0x2a0 [ 455.985210][ T1416] get_signal+0x2673/0x26d0 [ 455.986662][ T1416] arch_do_signal_or_restart+0x8f/0x7a0 [ 455.988396][ T1416] syscall_exit_to_user_mode+0x150/0x2a0 [ 455.990162][ T1416] __do_fast_syscall_32+0x80/0x120 [ 455.991772][ T1416] do_fast_syscall_32+0x32/0x80 [ 455.993310][ T1416] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 455.995289][ T1416] [ 455.996075][ T1416] The buggy address belongs to the object at ffff8880694d8000 [ 455.996075][ T1416] which belongs to the cache kmalloc-cg-2k of size 2048 [ 456.000458][ T1416] The buggy address is located 32 bytes inside of [ 456.000458][ T1416] freed 2048-byte region [ffff8880694d8000, ffff8880694d8800) [ 456.004654][ T1416] [ 456.005427][ T1416] The buggy address belongs to the physical page: [ 456.007432][ T1416] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x694d8 [ 456.010145][ T1416] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 456.012756][ T1416] memcg:ffff88805e4a6501 [ 456.014098][ T1416] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 456.016474][ T1416] page_type: f5(slab) [ 456.017739][ T1416] raw: 04fff00000000040 ffff88801b44c140 dead000000000100 dead000000000122 [ 456.020375][ T1416] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff88805e4a6501 [ 456.022985][ T1416] head: 04fff00000000040 ffff88801b44c140 dead000000000100 dead000000000122 [ 456.025674][ T1416] head: 0000000000000000 0000000000080008 00000000f5000000 ffff88805e4a6501 [ 456.028347][ T1416] head: 04fff00000000003 ffffea0001a53601 00000000ffffffff 00000000ffffffff [ 456.031029][ T1416] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 456.033708][ T1416] page dumped because: kasan: bad access detected [ 456.035720][ T1416] page_owner tracks the page as allocated [ 456.037522][ T1416] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5955, tgid 5955 (syz-executor), ts 46949327908, free_ts 46918513263 [ 456.044012][ T1416] post_alloc_hook+0x181/0x1b0 [ 456.045532][ T1416] get_page_from_freelist+0x135c/0x3920 [ 456.047277][ T1416] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 456.049131][ T1416] alloc_pages_mpol+0x1fb/0x550 [ 456.050676][ T1416] new_slab+0x244/0x340 [ 456.051996][ T1416] ___slab_alloc+0xd9c/0x1940 [ 456.053488][ T1416] __slab_alloc.constprop.0+0x56/0xb0 [ 456.055137][ T1416] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 456.057128][ T1416] kmemdup_noprof+0x29/0x60 [ 456.058561][ T1416] __devinet_sysctl_register+0xbc/0x360 [ 456.060272][ T1416] devinet_sysctl_register+0x17b/0x200 [ 456.061963][ T1416] inetdev_init+0x2b8/0x5a0 [ 456.063364][ T1416] inetdev_event+0xc5f/0x18a0 [ 456.064774][ T1416] notifier_call_chain+0xb9/0x410 [ 456.066359][ T1416] call_netdevice_notifiers_info+0xbe/0x140 [ 456.068173][ T1416] register_netdevice+0x182e/0x2270 [ 456.069804][ T1416] page last free pid 5952 tgid 5952 stack trace: [ 456.071760][ T1416] __free_frozen_pages+0x69d/0xff0 [ 456.073329][ T1416] __put_partials+0x16d/0x1c0 [ 456.074775][ T1416] qlist_free_all+0x4e/0x120 [ 456.076222][ T1416] kasan_quarantine_reduce+0x195/0x1e0 [ 456.077937][ T1416] __kasan_slab_alloc+0x69/0x90 [ 456.079470][ T1416] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 456.081147][ T1416] __ipv6_dev_mc_inc+0x2b9/0xc10 [ 456.082708][ T1416] ipv6_add_dev+0xbce/0x15f0 [ 456.084159][ T1416] addrconf_notify+0x53e/0x19e0 [ 456.085697][ T1416] notifier_call_chain+0xb9/0x410 [ 456.087294][ T1416] call_netdevice_notifiers_info+0xbe/0x140 [ 456.089141][ T1416] register_netdevice+0x182e/0x2270 [ 456.090781][ T1416] nsim_create+0xc70/0x10a0 [ 456.092210][ T1416] __nsim_dev_port_add+0x42b/0x7d0 [ 456.093826][ T1416] nsim_drv_probe+0xdca/0x1490 [ 456.095494][ T1416] really_probe+0x23e/0xa90 [ 456.096958][ T1416] [ 456.097739][ T1416] Memory state around the buggy address: [ 456.099496][ T1416] ffff8880694d7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 456.101997][ T1416] ffff8880694d7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 456.104481][ T1416] >ffff8880694d8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 456.106949][ T1416] ^ [ 456.108555][ T1416] ffff8880694d8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 456.111164][ T1416] ffff8880694d8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 456.113652][ T1416] ================================================================== [ 456.116211][ T1416] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 456.118472][ T1416] CPU: 0 UID: 0 PID: 1416 Comm: aoe_tx0 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 456.122080][ T1416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 456.125385][ T1416] Call Trace: [ 456.126461][ T1416] [ 456.127401][ T1416] dump_stack_lvl+0x3d/0x1f0 [ 456.128863][ T1416] panic+0x71c/0x800 [ 456.130118][ T1416] ? __pfx_panic+0x10/0x10 [ 456.131528][ T1416] ? mark_held_locks+0x49/0x80 [ 456.133042][ T1416] ? handle_tx+0x5a5/0x630 [ 456.134464][ T1416] ? check_panic_on_warn+0x1f/0xb0 [ 456.136076][ T1416] ? handle_tx+0x5a5/0x630 [ 456.137511][ T1416] check_panic_on_warn+0xab/0xb0 [ 456.139077][ T1416] end_report+0x107/0x170 [ 456.140443][ T1416] kasan_report+0xee/0x110 [ 456.141868][ T1416] ? handle_tx+0x5a5/0x630 [ 456.143284][ T1416] handle_tx+0x5a5/0x630 [ 456.144628][ T1416] dev_hard_start_xmit+0x93/0x740 [ 456.146228][ T1416] __dev_queue_xmit+0x7eb/0x43e0 [ 456.147789][ T1416] ? lockdep_hardirqs_on+0x7c/0x110 [ 456.149419][ T1416] ? finish_task_switch.isra.0+0x221/0xc10 [ 456.151251][ T1416] ? rcu_is_watching+0x12/0xc0 [ 456.152758][ T1416] ? __pfx___dev_queue_xmit+0x10/0x10 [ 456.154456][ T1416] ? __lock_acquire+0xaa4/0x1ba0 [ 456.156055][ T1416] ? __lock_acquire+0xaa4/0x1ba0 [ 456.157652][ T1416] ? do_raw_spin_lock+0x12c/0x2b0 [ 456.159235][ T1416] ? find_held_lock+0x2b/0x80 [ 456.160716][ T1416] ? skb_dequeue+0x126/0x180 [ 456.162183][ T1416] ? find_held_lock+0x2b/0x80 [ 456.163666][ T1416] ? rcu_is_watching+0x12/0xc0 [ 456.165173][ T1416] tx+0xcc/0x190 [ 456.166350][ T1416] ? __pfx_tx+0x10/0x10 [ 456.167665][ T1416] kthread+0x1e1/0x3e0 [ 456.168961][ T1416] ? find_held_lock+0x2b/0x80 [ 456.170452][ T1416] ? __pfx_kthread+0x10/0x10 [ 456.171920][ T1416] ? __pfx_default_wake_function+0x10/0x10 [ 456.173745][ T1416] ? lockdep_hardirqs_on+0x7c/0x110 [ 456.175389][ T1416] ? __kthread_parkme+0x19e/0x250 [ 456.177001][ T1416] ? __pfx_kthread+0x10/0x10 [ 456.178469][ T1416] kthread+0x3c2/0x780 [ 456.179763][ T1416] ? __pfx_kthread+0x10/0x10 [ 456.181225][ T1416] ? __pfx_kthread+0x10/0x10 [ 456.182689][ T1416] ? __pfx_kthread+0x10/0x10 [ 456.184153][ T1416] ? __pfx_kthread+0x10/0x10 [ 456.185622][ T1416] ? rcu_is_watching+0x12/0xc0 [ 456.187145][ T1416] ? __pfx_kthread+0x10/0x10 [ 456.188611][ T1416] ret_from_fork+0x45/0x80 [ 456.190031][ T1416] ? __pfx_kthread+0x10/0x10 [ 456.191492][ T1416] ret_from_fork_asm+0x1a/0x30 [ 456.193009][ T1416] [ 456.194501][ T1416] Kernel Offset: disabled [ 456.195880][ T1416] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:18:30 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000079 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854afbc5 RDI=ffffffff9ae0cb80 RBP=ffffffff9ae0cb40 RSP=ffffc90007aef460 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000079 R14=ffffffff9ae0cb40 R15=ffffffff854afb60 RIP=ffffffff854afbef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977bf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000080000080 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7412ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000123308f RBX=0000000000000001 RCX=ffffffff8b6f13e9 RDX=0000000000000000 RSI=ffffffff8dbe98f0 RDI=ffffffff8bf44f80 RBP=ffffed1003b57488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed10056665bd R10=ffff88802b332deb R11=0000000000000000 R12=0000000000000001 R13=ffff88801daba440 R14=ffffffff90866910 R15=0000000000000000 RIP=ffffffff8b6efc7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978bf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055e458ac62d8 CR3=0000000076144000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefff000 Opmask01=0000000080000000 Opmask02=000000000000ffdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e458adc740 000055e458acab20 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 00000000ff000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 de8f52ef3e9ff332 73732692759aca14 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373e2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3130323a34696368 2f346963682f6874 6f6f7465756c622f 6c6175747269762f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000003130323a 346963682f346963 682f68746f6f7465 756c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c303230300033 353236313d4d554e 510033363236313d 4d554e5145530030 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3069737376624567 7b7b36545e24232b 3520575f5e574753 2475622220266c51 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7e7f7f7f7f777f77 7f7f377c7f7e777b 7f7f7f7f7f7f6f7f 7d777f736f777d7d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 383a3a263d383a3a 263c383a3a263f38 3a3a263e383a3a26 39383a3a2638383a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 304e563030003830 303d4d5532003536 00302f0030300035 3539003130303d4d ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c302c30000030 2c32323030003432 00002c003030002c 323200302c300030 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000011bc6 RBX=0000000000000001 RCX=0000000000011bc6 RDX=dffffc0000000000 RSI=00000000000a72dd RDI=ffffffff91d9e3fc RBP=ffffc9000418f148 RSP=ffffc9000418f090 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000011bc6 R12=ffffc9000418f150 R13=ffffc9000418f100 R14=ffffc9000418f135 R15=ffffffff821bc61a RIP=ffffffff81699b16 RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f09fdae1d00 ffffffff 00c00000 GS =0000 ffff8880979bf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f09fd8cab40 CR3=000000004b68e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=c42b85ce7c23584d 4768209abb4bc24f c42b85ce7c23584d 4768209abb4bc24f c42b85ce7c23584d 4768209abb4bc24f c42b85ce7c23584d 4768209abb4bc24f ZMM18=a239872742fe1dbd 1047d3ce9092bff1 a239872742fe1dbd 1047d3ce9092bff1 a239872742fe1dbd 1047d3ce9092bff1 a239872742fe1dbd 1047d3ce9092bff1 ZMM19=9116000000000000 00000000000000da 9116000000000000 00000000000000d9 9116000000000000 00000000000000d8 9116000000000000 00000000000000d7 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=4768209a4768209a 4768209a4768209a 4768209a4768209a 4768209a4768209a 4768209a4768209a 4768209a4768209a 4768209a4768209a 4768209a4768209a ZMM22=7c23584d7c23584d 7c23584d7c23584d 7c23584d7c23584d 7c23584d7c23584d 7c23584d7c23584d 7c23584d7c23584d 7c23584d7c23584d 7c23584d7c23584d ZMM23=c42b85cec42b85ce c42b85cec42b85ce c42b85cec42b85ce c42b85cec42b85ce c42b85cec42b85ce c42b85cec42b85ce c42b85cec42b85ce c42b85cec42b85ce ZMM24=9092bff19092bff1 9092bff19092bff1 9092bff19092bff1 9092bff19092bff1 9092bff19092bff1 9092bff19092bff1 9092bff19092bff1 9092bff19092bff1 ZMM25=1047d3ce1047d3ce 1047d3ce1047d3ce 1047d3ce1047d3ce 1047d3ce1047d3ce 1047d3ce1047d3ce 1047d3ce1047d3ce 1047d3ce1047d3ce 1047d3ce1047d3ce ZMM26=42fe1dbd42fe1dbd 42fe1dbd42fe1dbd 42fe1dbd42fe1dbd 42fe1dbd42fe1dbd 42fe1dbd42fe1dbd 42fe1dbd42fe1dbd 42fe1dbd42fe1dbd 42fe1dbd42fe1dbd ZMM27=a2398727a2398727 a2398727a2398727 a2398727a2398727 a2398727a2398727 a2398727a2398727 a2398727a2398727 a2398727a2398727 a2398727a2398727 ZMM28=000000e0000000df 000000de000000dd 000000dc000000db 000000da000000d9 000000d8000000d7 000000d6000000d5 000000d4000000d3 000000d2000000d1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9116000091160000 9116000091160000 9116000091160000 9116000091160000 9116000091160000 9116000091160000 9116000091160000 9116000091160000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88802b2414a0 RCX=ffffffff81ae9b89 RDX=ffff88801da90000 RSI=ffffffff81ae9b63 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900001f7938 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed1005648295 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88802b53b180 RIP=ffffffff81ae9b65 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097abf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007feefcded440 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000084000 Opmask01=0000000000000001 Opmask02=00000000ffff3f01 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b88f02fc7385f95a 67378a0e67c15201 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e05c0af86678e9c3 f16b78806ad0474a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 200e9b9c16ab6a01 3194b16cc916a327 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c4db89cb394b5f22 e3c9f5ef7acaa76a ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000a80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000001000000 294e008001000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 01151fab01151fe8 011520bd01000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8b2a008001151fdd 01000000f7500080 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 01151ff67a7c0080 c472008001151f96 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 beb79274238fad3c 9d5ceecd9afe7064 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 371bfd2078eab6fd 2b8d73c9466cc7f5 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6262323065623937 61672d3233303030 2d72656c6c616b7a 79732d3363722d30 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 20726f20656c6966 2068637573206f4e ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0079726f74636572 696420726f20656c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000