last executing test programs: 41.087456322s ago: executing program 1 (id=380): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x181800, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x7fff}]}}]}, 0x40}}, 0x0) r5 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) connect$ax25(r5, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') mknod(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r7 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = open(&(0x7f00000002c0)='./bus\x00', 0x42202, 0x0) splice(r7, 0x0, r8, 0x0, 0x114, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000300)=@newtaction={0x48, 0x30, 0x216822a75a8bdd29, 0x0, 0x25dfdbff, {}, [{0x34, 0x1, [@m_simple={0x30, 0x11, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x20000000) r9 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000009c0)=@md0, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='befs\x00', 0x800, &(0x7f0000000a80)='*%([#+\x00') fcntl$setpipe(r9, 0x407, 0x1000000) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x481, 0x0) vmsplice(r10, &(0x7f0000000240)=[{&(0x7f0000000300)="10", 0x1}], 0x1, 0x0) write$P9_RMKNOD(r6, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r11, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 40.849785875s ago: executing program 1 (id=382): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x1000}, 0x4) close(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f000000b800)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x7fffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000009800)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0xb0, 0x0, 0x0, [{{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x60800) read(r6, &(0x7f0000000200)=""/209, 0xd1) getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f00000002c0)=""/181, &(0x7f0000000380)=0xb5) getdents64(r4, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x3, 0x1, 0x2, '\x00', 0x8}}, 0x2a) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000240)="04000000000203", 0x7}, {0x0, 0x8}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) brk(0x0) gettid() r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="00f000000000000000b7080000000020007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 40.050356684s ago: executing program 0 (id=384): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) mknodat$loop(r0, &(0x7f00000004c0)='./file1\x00', 0x2000, 0x1) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x0, 0x82a80) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000040)=0xf0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000040)=0xf0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) openat$dir(0xffffff9c, &(0x7f0000000080)='./file0\x00', 0x1092c0, 0x1) mknodat$loop(r3, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) unlinkat(r3, &(0x7f0000000240)='./file1\x00', 0x0) 39.880230602s ago: executing program 1 (id=385): mkdir(&(0x7f0000000000)='./file0\x00', 0x8) r0 = open(&(0x7f0000000900)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000140)='./file0/../file0\x00') fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) syz_open_procfs(0x0, &(0x7f0000001880)='net/sockstat6\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000524150df6cfc899f5cdb7364b90", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="2800128008000100736974001c00028008000100", @ANYBLOB="05"], 0x50}, 0x1, 0x4c00000000000000}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x6a, 0x3, 0x20000000, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x700}}, {0xa, 0x0, 0x0, @loopback}, r6}}, 0x48) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x104) 39.879816456s ago: executing program 0 (id=386): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) faccessat2(r6, &(0x7f0000000000)='\x00', 0x2, 0x1200) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, &(0x7f0000000580)={'sit0\x00', &(0x7f00000004c0)={@private=0xa010102, 0x0, 0x0, 0x70, 0x0, [{}, {@initdev}, {@initdev}, {@local}, {}, {@remote}, {@broadcast}]}}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000e80)=ANY=[@ANYBLOB="18410000f8ffffff00000000000000003405a4b9ca22987e1ab8e0a3b60bc0ea9423b6cc883ca6b1fddd42eeccaae1ee799d232074a5787cf4302148a57e18eb3d74b2db300bfe4795a855dbc437139742104d0196389b62087d6f27eb27d2df1f1b395587d4243c03a9ae948f17a013ddbb2f3bc55ff8422586784fc80c219c09516ce85b1679f02fbf05295895227b25f96b49152967a8f890295bcd054fcd3cc6bfc6973daae5f58cd2e36935e93a1b9ddd7193a3c9b2ca0407be864a86cf4f097ccb070d5c69"], &(0x7f0000000300)='GPL\x00', 0xc6f9, 0x0, 0x0, 0x41000, 0x5, '\x00', r4, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x9, 0x10000, 0xe}, 0x10, 0x15fd9, r1, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0xe, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@cgroup=r6, 0x14, 0x1, 0x80000000, &(0x7f0000000400)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], &(0x7f00000006c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000e00)={0x80000001, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000dc0)={@fallback=r6, r7, 0x1a, 0x20, 0x0, @void, @void, @void, @value=r9, r8}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0xfdef, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r10, 0x4008af60, &(0x7f0000000100)={@host}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtaction={0x488, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x8, 0x0, 0x0, 0x0, 0x0, 0x80000001}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xce}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fsopen(&(0x7f0000000e40)='omfs\x00', 0x0) sendto$inet(r5, 0x0, 0x0, 0x2400c806, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) write$binfmt_elf64(r5, &(0x7f0000000300)=ANY=[], 0x678) 39.836235924s ago: executing program 3 (id=387): unshare(0x68040200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', 0xffffffffffffffff, 0x0, 0x46}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r2}) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=@allocspi={0x190, 0x16, 0x401, 0x40000000, 0x0, {{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0xc}, {@in=@broadcast, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x4}, {0x101, 0x0, 0x0, 0x800}, {0x0, 0x6, 0x400}, 0x0, 0x3502, 0xa, 0x0, 0xff, 0x94}, 0x0, 0x4ad}, [@algo_aead={0x6d, 0x12, {{'aegis128l-aesni\x00'}, 0x108, 0x100, "6405356b0cf2a4763d36c98c5a0a2b9fe805d86359af02c8d1e59f5511627bb679"}}, @lastused={0xc, 0xf, 0xee}, @coaddr={0x14, 0xe, @in6=@dev}, @mark={0xc, 0x15, {0x0, 0xfffff329}}]}, 0x190}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4020801) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) io_uring_setup(0xc8e, &(0x7f0000000040)) dup(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r8, 0x4004662b, &(0x7f0000000180)={@desc={0x1, 0x2000000, @desc3}}) lseek(r8, 0x86, 0x4) 39.718162073s ago: executing program 1 (id=388): socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffff7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x7) syz_open_dev$cec(&(0x7f0000000540), 0x0, 0x14100) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x8) syz_emit_ethernet(0xde, &(0x7f0000000580)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "97d42f", 0xa8, 0x43, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@hopopts={0x8, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x2}]}, @routing={0x33, 0x12, 0x3, 0x26, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @private0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x18}, @remote, @remote, @rand_addr=' \x01\x00']}]}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x805) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000021c0)={0x1, 0x5, {0x200, @struct={0x1, 0x6fff}, 0x0, 0x6, 0xafc, 0x0, 0x7f, 0x8, 0x20, @usage=0x100000001, 0x80, 0x7, [0x5, 0x7f, 0x8000, 0x8, 0xfffffffffffff801, 0x4d]}, {0xffffffffffffffff, @struct={0x6835e151, 0x2}, 0x0, 0x5, 0xff, 0x4, 0x30f3, 0x80000000, 0x96, @usage=0x101, 0x4, 0xffffffff, [0x1, 0x1, 0x8000000000000001, 0x95, 0x5aa, 0x5]}, {0x0, @struct={0x3, 0x1}, 0x0, 0x3, 0x100000001, 0x7e26, 0x3, 0xa, 0x20, @usage=0x1, 0x1, 0x4, [0xcb05, 0x4, 0x9, 0x2, 0xfffffffffffffffb, 0x9]}, {0x0, 0xc2d, 0xe9}}) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001680)=@FILEID_BTRFS_WITHOUT_PARENT={0x28}, 0x0) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c800397058abce57033f29eb6dc1f8b128a7537a3409329d374c37fd2f23cfa5a5495ffc36ac891ea6f898ba2a0784b3781c59e6bd91a231a605e31d19f0c095e3d2a0ed41256a3c49aaa6cdaf42c10b9d64818e812f78d7cd6efc1b53e67e02e409e85bad3d3dbd071811aef111d9450013e9ea9fa372dc0d8a04df88c76dc6bf99f6a0e8f1f8e3aa79dcc583276e1703cd87b3a319a5f5ac2b3d885656325ef37c565aaef3c2cd47476599cdeeddcc40c681e661c34773c00a6750652094e27c18f9983ffec86a6ae8cb45a017e14feab38bb011172da3f8b5a2977bf029753930023be4cc0936ee60d3b3c94f387728a4f2235a06ad9dc36a65d84a1ea3660717a03e7107124efd1d5057de26822c9237034a70c51e24e69b531672cb42a1ce304d3a315be3917073b4d366d15d791e08bb32a0a188c0c32467ae0ac80e7c1f296179f4d077ba30eeeca7f0086e827bdad31f5eed0a62489ab67a24bf175d3371219f"], 0x3d) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) 39.576189083s ago: executing program 0 (id=389): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x6f, 0x101301) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffffffffffc}}, {{@in6=@private2, 0x4d2, 0x6c}, 0x0, @in6=@dev, 0x0, 0x0, 0x3}}, 0xe4) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000002180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600a843500140600fe8000000000000000000075d4e20007000000fe8000000000000000000000000000aa00", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780000"], 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x20010, r0, 0x63db6000) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002003180007006000000002000020d3"]) 39.489836124s ago: executing program 0 (id=390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x5, 0x70bd26, 0x25dfdbfd, {{0x1, 0x0, 0x30}}}, 0x1c}}, 0x80) 39.489337747s ago: executing program 0 (id=391): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260902, 0x0) fchdir(r1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2121, 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0500092546a56b36eb0d0600000008000300", @ANYRES32=r7, @ANYBLOB="080005000b"], 0x2c}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800}, 0x20) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f00000002c0)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 38.935954434s ago: executing program 3 (id=393): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) mknodat$loop(r0, &(0x7f00000004c0)='./file1\x00', 0x2000, 0x1) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x0, 0x82a80) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000040)=0xf0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000040)=0xf0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) openat$dir(0xffffff9c, &(0x7f0000000080)='./file0\x00', 0x1092c0, 0x1) mknodat$loop(r3, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000240)='./file1\x00', 0x0) 38.766449775s ago: executing program 3 (id=394): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) write$evdev(0xffffffffffffffff, &(0x7f00000001c0)=[{{}, 0x2, 0x1, 0x4}], 0x18) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) (fail_nth: 21) 38.530670442s ago: executing program 2 (id=395): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) mknodat$loop(r0, &(0x7f00000004c0)='./file1\x00', 0x2000, 0x1) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x0, 0x82a80) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000040)=0xf0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000040)=0xf0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) openat$dir(0xffffff9c, &(0x7f0000000080)='./file0\x00', 0x1092c0, 0x1) mknodat$loop(r3, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) io_uring_enter(r0, 0x379b, 0x8938, 0x0, 0x0, 0x57) unlinkat(r3, &(0x7f0000000240)='./file1\x00', 0x0) 38.452693007s ago: executing program 3 (id=396): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 38.299799129s ago: executing program 2 (id=397): socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4008af21, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x3874) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000000)={0x3a, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @pad1]}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd82, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r6, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) set_robust_list(&(0x7f00000003c0)={0x0, 0x7fffffff}, 0xc) socket$key(0xf, 0x3, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c010000160001000000000004000000fe8000000000000000000000000000aaff0100000000000000000000000000010000000000000000000000000b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0005"], 0x12c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000500)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @remote, @local, {[@generic={0x0, 0x3, "cc"}, @rr={0x7, 0xb, 0x4, [@loopback, @empty]}, @timestamp={0x44, 0x10, 0x1e, 0x0, 0x0, [0x0, 0xffffffff, 0x0]}, @ssrr={0x89, 0x1f, 0x0, [@rand_addr, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev, @remote, @broadcast]}]}}}}}}}, 0x0) 3.365681909s ago: executing program 2 (id=400): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000bc0)='./file0\x00', r1}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000500)='./file0\x00'}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 3.219750856s ago: executing program 2 (id=402): syz_usbip_server_init(0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x10, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40440, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x2, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)={0x138, 0x2, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x424}, @CTA_NAT_SRC={0x40, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8}, @CTA_TUPLE_REPLY={0xb8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2b}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x0, 0xffff7fff, 0x7, 0xb8c0, 0xffffffff, 0xd8]}]}, 0x138}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000006c0)=0x4}) r8 = openat2$dir(0xffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x200, 0x80, 0x6}, 0x18) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r8, 0xc0406619, &(0x7f00000001c0)={@id={0x2, 0x0, @d}}) 2.585988464s ago: executing program 3 (id=401): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010016040000"], 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), r1) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}}, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioperm(0x0, 0x87, 0x3ff) landlock_restrict_self(0xffffffffffffffff, 0x0) io_setup(0x1fe, &(0x7f0000000200)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r3, &(0x7f0000000180)='\x00', 0x1, 0x2}]) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRESHEX=r3, @ANYRES32, @ANYBLOB="fc5331f54d0b0000000000000087abaa6973a8ff", @ANYRES8=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000240)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000870fbfa0b4f6b8eb996df1364f3318d000000b704000000000000850000006a5ba1a3c12d4a75928b5ba1b5c60300000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ftruncate(r7, 0x200002) r8 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r12) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800400, &(0x7f0000000680)={[{@gid}, {@quota}, {@grpquota}, {@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}, {@grpquota}, {@gid={'gid', 0x3d, r12}}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x36, 0x32, 0x34, 0x64, 0x63, 0x61, 0x39], 0x2d, [0x0, 0x0, 0x62, 0x66], 0x2d, [0x36, 0x39, 0x30, 0x34], 0x2d, [0x31, 0x35, 0x33, 0x64], 0x2d, [0x35, 0x62, 0x37, 0x38, 0x35, 0x33, 0x65, 0x32]}}}, {@measure}, {@uid_gt={'uid>', 0xee00}}, {@dont_measure}, {@smackfshat={'smackfshat', 0x3d, '/'}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x36, 0x62, 0x61, 0x64, 0x38a02d5d170ab41, 0x32, 0x37], 0x2d, [0x66, 0x65, 0x33, 0x39], 0x2d, [0x31, 0x14, 0x66, 0x32], 0x2d, [0x32, 0x33, 0x33, 0x66], 0x2d, [0x39, 0x31, 0x38, 0x39, 0x3752edc3eaac868d, 0x36, 0x63, 0x62]}}}, {@hash}]}) connect$pppl2tp(r9, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r9, r8, 0x0, 0x80001d00c0d0) 2.539070801s ago: executing program 0 (id=398): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000946000/0x14000)=nil, 0x14000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x1000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x1000000000000160) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getpgrp(0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.298436674s ago: executing program 3 (id=403): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/consoles\x00', 0x0, 0x0) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1, 0x0, 0x0) read$hiddev(r2, &(0x7f0000001100)=""/234, 0xea) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000340)=@req={0xdc, 0xf, 0x6d10, 0x400}, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) recvmmsg(r3, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0080007f0000c10000000800000000005000"/28, @ANYRES32=0x0, @ANYBLOB="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"], 0x230}, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001100)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r8, @ANYBLOB="290a00000000000000000100000008000100", @ANYRES32=r7, @ANYBLOB="0800050001000000b4000880"], 0xd8}}, 0x20008004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xe7, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000cc0)={@multicast1, @multicast2, 0x0}, &(0x7f0000000d00)=0xc) sendmmsg$inet6(r5, &(0x7f0000003f80)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x6, @private1, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000240)="6bb4bfa3e1a210004551e9f72081bc62bbf6248b5c2c73d6efe176bd2bc055768ec2c8df3c47bec6975ce8bb245984d5063b3bc997e81493c8a6ee7f673a60f4754615174ad6b98e23cd796e49721c4ef0f28a29f6658722a0f463ed14ecdb5deeb7061f6adfa0dd12a9e000326f11fd19bbca2f4063fc6e38d89ae857d73139e3d449999de652fb7dc04896de38a6bca1c99d2bfbddaba8af5ecef9dfa868421f3c6e3b2f3e3ee6f227", 0xaa}, {0x0}, {&(0x7f0000000580)="dbaaadacf69e6a8b762701b69abe92be69cab28c340c67e3b3a028c3cee37952f83cf0615a741a706359f59f43ec19715f570569d295d1e44066f63de6674d7745e9b7304cef2bfefc4a0bf240bfd76dd316798f505cea2338a4a01dca44b917d99727e5957c114f01e2a339cf3e0e6e470f8d9f085926c00e8843453a59d18a23a1989f0e07f91e593b02803e51dff5dcaac5ee23db4fd846a48dd3941a902679c69b87966175163b037c94dbdd3b8f35d7284e75fa1838ac36e4be937c96868aa68cc9b5970e137868867ca0fc5901d26b6bf51428b4ade22c9ec5636f", 0xde}], 0x3, &(0x7f0000000680)=[@pktinfo={{0x20, 0x29, 0x32, {@remote, r7}}}, @hoplimit={{0x10, 0x29, 0x34, 0xfff}}, @dstopts_2292={{0x24, 0x29, 0x4, {0x0, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xffff}]}}}, @rthdr_2292={{0x44, 0x29, 0x39, {0x3b, 0x6, 0x2, 0x81, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2c}, @remote, @rand_addr=' \x01\x00']}}}, @rthdr={{0x24, 0x29, 0x39, {0x16, 0x2, 0x2, 0x5, 0x0, [@mcast2]}}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x6}}, @dontfrag={{0x10, 0x29, 0x3e, 0x2}}], 0xdc}}, {{&(0x7f00000003c0)={0xa, 0x0, 0x7, @remote, 0x9}, 0x1c, &(0x7f00000004c0), 0x0, &(0x7f0000000d80)=[@pktinfo={{0x20, 0x29, 0x32, {@remote, r9}}}, @hopopts={{0x24, 0x29, 0x36, {0x2f, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x2a}, @ra={0x5, 0x2, 0x9}]}}}, @tclass={{0x10, 0x29, 0x43, 0x2}}, @dstopts_2292={{0x24, 0x29, 0x4, {0x3c, 0x1, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xd}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@local, r10}}}, @dstopts_2292={{0x4c, 0x29, 0x4, {0x32, 0x6, '\x00', [@padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0x0, [0x0, 0x1cd, 0x0, 0x1]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @dstopts_2292={{0x74, 0x29, 0x4, {0x1, 0xb, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @private0}, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}, @generic={0x80, 0x24, "caa4cd2296079dad6c5e9ae5c6297e521da2c41f3f3ffb770d5385466eda428e32f26bef"}]}}}], 0x158}}, {{&(0x7f0000000f40)={0xa, 0x4e21, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4eada94b}, 0x1c, &(0x7f0000002080)=[{&(0x7f0000000f80)}, {&(0x7f0000001f80)}], 0x2}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)="e87edac439198cffaa241991b55da62102ecbb700b2e44e52397085eb486b9c0313e08f4942fe726f857e93a3879f7da0d4a97f770ef", 0x36}, {&(0x7f0000002300)="93a41f75d96b0ed7771db6bb04a1cd30c5cb0c5bb1f43a0b6136e51baa02374031f59563742e9100add9e6c131b7202c690ba3a6", 0x34}], 0x2, &(0x7f0000002480)=[@dstopts_2292={{0x44, 0x29, 0x4, {0x0, 0x5, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @dev}, @ra={0x5, 0x2, 0x2}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@loopback}}}, @rthdr={{0x24, 0x29, 0x39, {0x6c, 0x2, 0x1, 0xfb, 0x0, [@local]}}}, @hopopts_2292={{0x3c, 0x29, 0x36, {0x2b, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x726929ed}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0xf}]}}}], 0xc4}}, {{&(0x7f00000025c0)={0xa, 0x4e20, 0x62a4, @dev={0xfe, 0x80, '\x00', 0x10}, 0x8000}, 0x1c, &(0x7f0000002780)=[{&(0x7f0000002600)="6bd52f8235f6776c7a5efa0acd549020c5d007c54e8482b61517f8338d8ec7077eef8d769d29ae251e0256478bf293b625317e559aecfd324eaf26e2655a67424699fec09a449d50d326de0718ca66d2292fb7989a4a814c66275fdb265447dd8b67eac6b4a36a613593bbe5daa96e2469c0f9cb53233068f53bff4ed0bd281a1b112282a0fa6811b69a0344e45c9937d1ba049aff4eed9e02ce131e6d802c1089b9cb194386a8dd84c080274bd6e4d7c5d5da3ec2bde4b9f8268617aef5d642eaad9efe3d2adad23ca690387458b398cb22cc5ce3c3073364bea57e1e440df50930ef", 0xe3}, {&(0x7f0000002700)="b8e9e904c9417bc25df5dc1890f37106fbc72acbd8791037f553dc394d2cb57d306b686b1e7047960d804d7779d521075f3ce60a2a7da8a3a6d307f9ecc20a2e2143863287d1cff8c8cf861fba4a3e4759e6d71da4edf06482de69de5de63414021a5d23", 0x64}], 0x2, &(0x7f00000027c0)=[@hoplimit={{0x10, 0x29, 0x34, 0x5688}}, @rthdr_2292={{0x74, 0x29, 0x39, {0x0, 0xc, 0x2, 0x8c, 0x0, [@remote, @rand_addr=' \x01\x00', @local, @loopback, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0x84}}, {{&(0x7f0000002880)={0xa, 0x4e21, 0x3, @mcast2, 0x101}, 0x1c, &(0x7f00000039c0)=[{&(0x7f00000028c0)="4db3a3d881a7de6add0187382e31006e2a4f173789711575bdb29bc20469ec5c8afcba443b4ca005d2f59ace82587510cac752543482b5d75b5b1160f2826356fab6f6fb0fd3ad8acc5a3150bc916a576458c1fa33146b6f8bad7f1bacd68d30df6a9ea5d7351326a863193e657ca8b7271166dd374c896a2f899a9326f0bd46567bcf060daf8ffde70b461271e14503472086eaf4394c14301932a44e0ce56c1ba007560ca8a961940f14531edfcc0bfa10eed83583d8ab030fc696311fac859fd093530b39f8d3943b8ec633dc9358928c5d6d037961100c4c1d2a67e386", 0xdf}, {&(0x7f00000029c0)="562903fd8ba93c81bb230893d47310cb7043d6f4b8c46bb440dfb0b04625d4c3c3b1aa58d1cd5df05ff1f6e3650d7c9e87cab688c0a8d0af2ab7f0c6cb4aef76b53e96649769bc9b3e03acca1e8fc6eb314dff21274974f75e5ac74eab994132bc8e53825273007676228275235ebe0c6c91fe53b70a23032ceb545690b844035a900e5181eb9b9b3739e6c51a13d8bcef5f25ff81e90a8028ef19a33e669ce10a8d644ffa7e4171734732242de72128b876964524e7b080d668decec5090a7b85458f72589122262363940cf7492505890b204d236bbf8aeb2ce41250d207c23bbab1af930fa156ec00e35dd529b60b39ff717b808fe01488053f09fd9ab8cf736897802205b7df5317162aedb5dbd03d88b1d4cc84720c08dbde52d21ccdf7a38de7c4e41d46491d1e3c97e55a28ef20e6cb919929f04ef5b84f57fe85f08aa6f75e7105ec002a1048ef26d0cc8b0281803cb2d911a6f0165a3af62cc4e2076cde7ad1f924652129b90501253c0e42b633fac778008b586e99ed4c54711261e4ed39dcbe950bab3c5a1c55c4bb085c3be30123c63e9d375d3ba2d222a41093012babc60453dfa44faa478fb4092def353e101a2756d952d266ca967a279d1723c74944d0f042e1d093fa48252a61cc75b859fbe1e43ea142cf39213cd7b4c4aa60413374ccced9c950a98cc978e46e9f72073a19c2993be912f0a1a32ba5861246af0079689a2626f9e6840c45bb3fb967a2e495531eea84a223fc970955e22749315b366193866026baaa5ecc2dbccfd810c070e72c0de04e3ee91d852bbc422b1fc4652e647e152895e2b091114ef7aa70c08212381e55782b76e15d83e22b847dc85c169362141eee0f6a3d90524a43d3329664d9a500d96a4b27faffd1f4608ccc95d6f1ea4a647c5359d10f9a2b9a76f9858f4536622c21e8a0b432be9bd248988d83d9db3b0a05c062e99041e0014cd210784a3eff17f9f228f53bea7d88c1628d27cc507554dbeef4393409a8221b014ff4f46ecd25e98b01692dbb5c8409dae67d7f75db289553351594a423d060c21d7f4cf7c8e2f4e7f2655aeefb04c101b85a330d831c371d88c4535dfca98cd3e82ae8718f05c8ab8d17c0408449d9fa75b77a414d18ae1b45bd0fdeed479755c6f6ec7fb344380b7d658e68778087a3d0123e190dc4ac1413d39064bbb4a7a0534642ed835432937d696085b68f2a93c539f18c366ba2192bbc2dc06bdd594a4dce239b3df270c02b373433e03208b850ddaef7c43d704fa64fea1fb8bff225f58524e6a399bc7bd84a5cb6918a0c7ce586ba557e5253f1b42cb6b33ed88422aa3473f0367500328544f0fc205ad345f7759a73f704181e2f3738f11e784f3963197f3ae963a02f5f069a18f7e2ffd9965a9f30c9ea7aae4609c6699f5da8d01984b4ddb07dfbb7f845a996cfce976515fd249ba11072a8f020558f2c0b1ee85792ad05744db2b24525dc772546ed5cc42a0bb904894dedd5efe335f9dd44bbdfb459bc118639ebf3fa81ba3f2f7b0c2195cfb5cf5cd1028461d32edb7ebba166694d272cfd654f40b85aa2ab6ab42008ee6d69e769d93fd838a819ec5974bfe6e423752e59673a23809f550a9c388face05583c1f79dce8d59f4040bf1f279a07cea8e4603268ed4d10c2c4bd88357535a03390f397c6d0dea995460024b8e8e1ea50fcdaac8344f370ee237bca0e0383d96880e25856a6f15963b40f48d69a9d01b9a4d625040192e092c52aa44e40f5504c99e66b6fa016fa1c6b26edb8468db91025dead21a6379c7613be7f63553f360f0e8b63e5da0888789971ba0a7de603b23b29b029b9e2c0bd218ee6eac1023e2235a4f3ba7eb792f859a40473c50b898d9dfee144e5703aa3fba03b82b385e2934e4a6da6e01889ea58b9ff1988b6e8c9898c444c468de50ce339d8073fc9977d144631bee149416574b373e9d4af160fc6eaf15675698792c63c654ea776126708edd75adf7325e8d9ca2f2ff85986008c8fa031a341bc26b859395c28bde96f753f21739626536c7e0f378d79e9648868e42ccf9d66d6f50e38b9511c880aadb7b70c4f4f07df879c09007edaf5cd8d37b7ee5b1a2a448776e48addd4657c7e0d7beb1f690034ec1eb44d03a69343ba7625ae28e455d263251bfeac10a23301054b0dc8746192c0539bf09a069c7e39766e8e8c4a19185a8e46b61971c78d43328cbb931d2d61e294a6727d2c58f5ecc87fb7f9bae86922767991ade97f0e962c45a9d5b571d6c4a9c62d3d1b0ed3cdab2df5ed3b4aa1e6e7322050795af0a2ea80a6d34e4bd6e7dda5186d806aa9feb1ef6166114f10b3b9d399402c756ab6586bc9ceb563ace720aa781339ed11d37f7c7c968a879ed9dbc17ae1495544e30649afd877c074a9dea4034fb2cd906c2f5b94257f2bc07e132951481c50b002fef6881a4317e875ba9584b7cf5ebf6d935e2aae77490d20316f820b3ce04df9acb184d720a96a9546860c24e5a30e60de3fe4c86c89c2f9a9a6e9c24956c6e4be1dec7ef78deb287349c4e78e0af32feba1de42bbf55fb64c2daa042de004ff1bceb5358d938cdc69d71d40a6838132195780bd360db0270d38f4c3727c958fc333df6800b4f4d4495421d82ba28f2464c967400d41f7ea832939827c510dd2490f13dff5b3c34b68a14c9e367d1d3bcc9aaa60b61f08f866b48fd96fbe9cdfa3b5a9e02db4376a57be475e5bb60308b549a0bf3ee01798975c2d3ba92c70602ddd236caf1471e783daeb03a8221ede6f4a85e6666ccd67d3a6ab43095a4aa4a2510a756ec0813531971325f7326086fde05cfd83dababea21fd42c3de1b5c84b7aa90a21ad31d6ea509f8a54b2f0ca895ce33818ecc022fe7fd234d2df02839fffa38aeebfe64108d12453bbaddf2fd8dadd89d5de72e9612caad16f88b8bad6e7e11d5a8b7cfbbf5c9c7509eb7d3cb70a19cf6fd21af3b0f4a4f1a612f18eae0476e9cd6ae9dedb5a3c9b56c6371bb5716cc3bde32819e047f0428a6eb3846f6291ebb190024b8673c3302efa8a7430d78b5de91e1e41821ebace65b3c04fb8883dc78e17f19daed921bc2255ab555f5baf64c896d6bdd3f96c30cd5a5c2f4e5f1f562115b4b16eb499483a8cea1b8e23ca5eb750fb5929a42b546e98d5095f161dd4323d449b1cfc042badb348fc9413c72bb48f844b08cae74fab51f8b8e2b7af025120b1db592a330e094fb52544c8013381b0771da85531d8dfa995f70439356af89d96aec6f1cf9502633b21df241522a6bf2e096a6a1940b46bb0ce2650f520a1ce543d7ee5e47a302ee64c090196685657abae6b4157c96547e529ee3be14a78ca675189cd198a94b473dfbe82ccd37380649375c52c75e22daaf529a1e05451990b9b63b52f8e4d7d8e9f363db55dd101565e792087e11023f9a632f60d18e165ea7818af5f6141e6e5e9a7393563d54e4f0ed6939ca438c7e56e992eb3b029cd6b200205c197d35c8eb0f8b59f1c98190037ea98470599486f332aa1f3b0127a9c540a663261d17bd491a40976d3e33b35ab4f9cc573ea4a92ecb23e03e4dffbe9ec09501932f5be6aadf28366ede278c949378655ec3a89afd3027824b047f3a7faf88368da0afe7805319a1f9bd7c6056a457244d8ef4d17ed82e9a983f337e46fa07d90107314e2aeae734e78fb5c8d065d5302125be5e721b6b20bb815983e960efacbbc8c56127e86d173fa3738fd55d16bf1ec59a73813cf621dbb8359c17d64aa28d823c15d83c0072bc632d4826cc80e968f06f6385577275b0fd95e0d15ab05a581dc9d60a0b05cb56ceb0c69ab6ccd910574436593ee1e2302decf2d1a59133ef37a6fe3aadff5f271a341e75b67f2585bf686e0fe238a9150bcaa6486bbadd8660023bc901aa60fdcce30bc2e72b534981591cb8d29d1d104ebe4d8e4847158f7c985afe24861a2cc7ba6a9cdd56580e69d41eda8fd01e99803a73a380dc0ce906924a53df6ccd6ec11435cc1af13d7c772eff7d72b5f6e51d91c51126659adf28c3849ac015a055e037782fd2a87bd3b727bddc5665d85afa9bd37e63090611b52011b3be9c7e59d789cb5d6fb40d3ab66224d26a7bc4c6c97cde7c45790f0f45f94c91737e494b46ab1633bd78deadd33e48f83d4b527cd949701f142ac88c6aded4231571d8fb167850c686702df0ad9c1b75eec91a73e37526de368765835b9f8132426aae196833352a2ef7589212125550d5cc05a440aaeed4b10877095d97516173be8d872621308eda7438ef899f9c9ff9617cef142b8a8d4cdd216768f0b7b62c65f45a6532ae3af78212581cfbef439010c11cc99e6c6abc3a6fd54432c02e66e9c2e71b103ef14c054d657d8c857cfdffa8ce956bda75727d175b93347719bd09223519d0ec7a0bf2bcd983d1f24fbea054ee559fd538c4d43cab2f9dd19c058dd4b682863066f6c967c9b9501e41da41e783d911097ae5a541aee99ee278eb0c75814329d383d46ac79d04167825c00e17887fc4f1103b9679e6df226933df7133e132a119d5f5454bed4bc951f08e362c5a549962b0b5332bf5b60fc303e20509bee7734b84f4f6a62b1dcf20be286346674f054b0b74d085dbce27ea9251488969d188d1ba559a706879c01ca9d3e86e8b1c06f38a3e34cd56b860a9a7a5c5b84a9fdac6405926ed79ac9f4af5970e962246570454cb2b7249ff1a359d43ef37db50e71322eae1bf2e3eb241a3670fffceb2c258a9ab2a8bad67b95686275dfc75b1a12dc1a1c6c799b4afed49b7da1a71f3665e35c220823971ddcf16d5d8cd1ca8c03bb28e1de3a6804e78616d232754f1f52ab04302b26e5b03a3feaea7afa9970fdd236b2321b9dce91b542ee2f19213083af9e86e4aef6088b1383a6164f8bff7f4c4b9b66a300d9cffbf99b7cc2d7d05207cdefb56010e5c7c108c0d9003e31ff7d164c36de157dbe12e7ea6ccd23ac5ef91fe0406eb246a61943c71af8c1365390884537e5819171f27dea3c562b241a8e6e51d27da474ee3321aace385046dcd7afa6b257af2d3d59870c0389cc0c6b9fcc8bea949192dd18d604628ff557b81324c24bd845b556b0a6a499478863ebbc52a62eb1cc58f14b561f59725f0e250321de419154d04584fe8a34c11a03c2e7a9ec32e308a6c6619afac347fa4a2a056b7d4789e346121602697f496ba152bf8ecfdf328d8407cde4a300b43642fe676b590682ffae180a1fd56764414718450a0837eb5ee5403d85e51170b63008345eca547cdc153d76fd98e4fb9979430b899f56299cedf39044d6e6e4eb4ad6b164546c40f512d9d565174906a15ec99dc76a67157803a54cd3af3270ffb0e48c4fbc5a10a029c8f21a254fa2f510576749efe3a5d7b824bff991185f704cc179e2b300b72a3983e72694707381f671e83ad2661db89b6d6b89d797e1f100b4aaef36ee9c6193aebf9f0a6ad7705a087f603d1ff8bab45e7bc52f3b3650157f9115f9bcb65dce239e89dd080b42ce46d8f67eb3bd175f7abfe15a1eeecec667d87a08b3ddacfd562fd2846ce7bd6a8f66c812a1d78b86afe65505e73457dce3715daac2b31da1ae3e3ee49ffbd05bdd992a1413ecfe95168a7fffacb28e541332616681d3265db9ebbb278c20b71c13545656edfb9ab9069ad47a6aaf879d347bed57c9ce2e74640a62775c36044de5eaf19f8b42013f42b4bfe011d2879f30f05ff98604e409b8f82af2c863b183608313246b50293b3d5ca83064cb92745c92f2b", 0x1000}], 0x2, &(0x7f0000003a00)=[@flowinfo={{0x10, 0x29, 0xb, 0x4}}, @hoplimit_2292={{0x10}}], 0x20}}, {{&(0x7f0000003a40)={0xa, 0x4e20, 0x59, @remote, 0x9}, 0x1c, &(0x7f0000003e00)=[{&(0x7f0000003a80)="fa5a0e307acf286ba033c0dd3ea90c49812a19a3cb6cc65f175665a7a93dde2e877612b3c015539481558521f95e67fa8c652da54a8f1cbe4d3eaeb2a663454649d55608a062c343514524f658db42903fae79cd237469aee4d6fa8439936278c5c8f1c1efcf45d8856ff0a056f0f677ba578cd341a1514a4b0c6c6414bbd1ea4499a89fcbf54e67e7f766ad1218ed19de0d131bcdf190453c3d650da4cb33bcc9a4752264258bd733b8288f2b5514408128", 0xb2}, {&(0x7f0000003b40)="9529a27546319afd43b0897d4d4ea24373eed3c737e93b9b7bf4d67a1476556b23ae58d2c0e34e57fe62258da2fd27337e905326b4f4b0683a8e3c5e9183466c77fb3f106460d7f1f3af29b87287f30b381f48867948c72dc4990e54055cabc09c717c65cf85c553b3470a83dea59ceeca06d7e40f5a32be48690f3afa1aabf2327f9b9bb975ec3f7d0c8d5b68efe47b032d96", 0x93}, {&(0x7f0000003c00)="bafd5457b43010ee90f49a526af1c94ac57e4ede1490ca5abeb5dfc75c6249d7517e4af3fe432ba5d3fad76d1559399cd40de557e1b28ccd837f40b6f23938f8d3e19c5c5d271f687d02c91e9435", 0x4e}, {&(0x7f0000003c80)}, {&(0x7f0000003cc0)}, {&(0x7f0000003d00)="e7fa7f90064713d5d6f1bee568bdf6567e501100693a95246e9d2c73ce245a19a7b0b22a41ff266796d2a9ab70e0e163b633bf07bf186a5503ca3ab69515d4dfc1708a4368daa6051686f8d20e175387f17ea47772b876fc5d39dd53e7f7f2478906b323838ee74bcec1917ecf5ef6dfc3579810808a1f78c81ff6ca8f83de5039cbd81fdfd3826b17e70b7f7bb5e1ea4153c93a54bdb279e686118b25c2c32795151f5bc8d06197e2f6514e584507510f3e41685f1c05f39db2a7886e8a985f3eaa6e252b7b3fdfb2c7f0818f5c797a7456df66e94e6cee6bdf5b963275e0", 0xdf}], 0x6, &(0x7f0000003e40)=[@hopopts={{0x94, 0x29, 0x36, {0x0, 0xf, '\x00', [@generic={0x4, 0x7d, "2709dfc50d70d95a5927eae70fd9c6b024e9f283e126c5b206f4c6a8336ba8d9bb6f5f4b1f9944c69114d55f34b1ad0b2453a2ba85e130da01402ea00e9fb24f507e208f660d5ffc80bbc35ef9c070c94e8df9505da79268d7df82c9d19d843793ee68f3b1dabe3e1523282357d5afa07f380d9b5beb428ed4db979781"}]}}}], 0x94}}, {{&(0x7f0000003f00)={0xa, 0x4e23, 0x1, @local, 0x6}, 0x1c, &(0x7f0000003f40)}}], 0x8, 0x4800) 1.78000813s ago: executing program 1 (id=399): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000440)={0x0, 0x0, 0x10100, 0x400}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) unshare(0x20000400) syz_open_dev$evdev(&(0x7f0000000000), 0xc0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) unshare(0x28000600) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="050000000a000000800000008000000000000000dfb1bc7e5f887687af2841f2f6c8e49350a2829ae97821cb43b13b0d8eb67a10f89b1bdeb21f557bb447cfdc22a31551d728a35da023b2e2573e2c2588101b61675cc7a058f6c76a7c5feddfb710eb7dddf9f6c1b352087ed25d601318c3805cac208e34fb61eaf52c798a694fb011e67ee7ac75a1d89ed0090be1fb63375e50b772a6324df8eae3258b67bc32fccada1d8921d30e75ac1f393a12d8d0a6198bcca540f36d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@link_local, @local, @void, {@generic={0xe803, "e5f3fe2e7fe4f033fbf9b099713a2ee35e479bf665e3f72a7b09cd9d6433ba8f935149c81159827f529239aba2e6d76b43f43bab99d0eaffc3210745284dfc38d2d87904915f96ab3dffb3ba11195170351ea50f427222a28264f223105af5fbcfb6ad3521b6123d213ebf65f8ec8654"}}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000280)={0x1e5, 0x6, 0x43, 0x7ff, 0x8}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xa, 0x9, 0x3}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000180)={r5, 0x1, 0x28, 0xe2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r7 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x26}) io_uring_enter(r7, 0x7a98, 0x0, 0x0, 0x0, 0x0) r10 = socket$inet(0xa, 0x2, 0x88) connect$inet(r10, &(0x7f0000004cc0)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'tunl0\x00'}) 493.693659ms ago: executing program 2 (id=404): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_extract_tcp_res(0x0, 0xfffffffc, 0x4) syz_emit_ethernet(0x42, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e08000c08"], 0xb) syz_io_uring_setup(0x3026, &(0x7f00000005c0)={0x0, 0x7356, 0x40, 0x0, 0x1c8}, &(0x7f0000000140), &(0x7f0000000240)) sched_setaffinity(0x0, 0x0, &(0x7f0000000040)=0x10000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x4000010, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x5, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x80800, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000300)=@l={0x92, 0x4, 0xc0, 0x10, 0x40, 0xd0, 0x7c}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000040)) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f70c9b3e6ee7ff7fc6e5539b9b3b0e8b9b411b5d30091b080d29428f0e1ac6e7049b3468959b4c9a242a9b67f3988f7ef319520200ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x100d}}, 0xfffffdef) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r5, 0x89e5, &(0x7f0000000340)={0x8, "47b90bff9c66bb96fc980844a047b9eb424b83401a79ae96845875ac81e14e7f27e3bdfd2f5d721170a04c0ad4aa2d1dded0d29abe36c855a12f13a141374367313bb9e0a38f211721afabdd786974dbd6c2c9ec7faa6b5828433e0e958151bf393cfef057b3c3e8f186d1bcd34bb3b6dd4859223964108280e7523383f86727"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00'}) 222.476757ms ago: executing program 1 (id=405): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) mknodat$loop(r0, &(0x7f00000004c0)='./file1\x00', 0x2000, 0x1) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x0, 0x82a80) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000040)=0xf0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000040)=0xf0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) openat$dir(0xffffff9c, &(0x7f0000000080)='./file0\x00', 0x1092c0, 0x1) mknodat$loop(r3, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) io_uring_enter(r0, 0x379b, 0x8938, 0x0, 0x0, 0x57) unlinkat(r3, &(0x7f0000000240)='./file1\x00', 0x0) 0s ago: executing program 2 (id=406): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) faccessat2(r6, &(0x7f0000000000)='\x00', 0x2, 0x1200) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, &(0x7f0000000580)={'sit0\x00', &(0x7f00000004c0)={@private=0xa010102, 0x0, 0x0, 0x70, 0x0, [{}, {@initdev}, {@initdev}, {@local}, {}, {@remote}, {@broadcast}]}}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000e80)=ANY=[@ANYBLOB="18410000f8ffffff00000000000000003405a4b9ca22987e1ab8e0a3b60bc0ea9423b6cc883ca6b1fddd42eeccaae1ee799d232074a5787cf4302148a57e18eb3d74b2db300bfe4795a855dbc437139742104d0196389b62087d6f27eb27d2df1f1b395587d4243c03a9ae948f17a013ddbb2f3bc55ff8422586784fc80c219c09516ce85b1679f02fbf05295895227b25f96b49152967a8f890295bcd054fcd3cc6bfc6973daae5f58cd2e36935e93a1b9ddd7193a3c9b2ca0407be864a86cf4f097ccb070d5c69"], &(0x7f0000000300)='GPL\x00', 0xc6f9, 0x0, 0x0, 0x41000, 0x5, '\x00', r4, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x9, 0x10000, 0xe}, 0x10, 0x15fd9, r1, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x5, 0x6, 0xa}, {0x4, 0x1, 0x9, 0xc}], 0x10, 0xe, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@cgroup=r6, 0x14, 0x1, 0x80000000, &(0x7f0000000400)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], &(0x7f00000006c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000e00)={0x80000001, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000dc0)={@fallback=r6, r7, 0x1a, 0x20, 0x0, @void, @void, @void, @value=r9, r8}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0xfdef, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r10, 0x4008af60, &(0x7f0000000100)={@host}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtaction={0x488, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x8, 0x0, 0x0, 0x0, 0x0, 0x80000001}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xce}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fsopen(&(0x7f0000000e40)='omfs\x00', 0x0) sendto$inet(r5, 0x0, 0x0, 0x2400c806, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) write$binfmt_elf64(r5, &(0x7f0000000300)=ANY=[], 0x678) kernel console output (not intermixed with test programs): 8.680189][ T5726] binder: 5725:5726 ioctl c018937b 20000e00 returned -22 [ 88.684976][ T5726] binder: 5725:5726 ioctl 400c620e 20000500 returned -22 [ 88.774852][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 88.774867][ T39] audit: type=1326 audit(1727859030.052:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5731 comm="syz.3.59" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x0 [ 89.273296][ T5745] netlink: 'syz.1.62': attribute type 9 has an invalid length. [ 89.275950][ T5745] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.62'. [ 89.943036][ T5770] xt_CT: No such helper "pptp" [ 90.130988][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.135074][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.312383][ T2786] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 90.462374][ T2786] usb 7-1: Using ep0 maxpacket: 8 [ 90.467305][ T2786] usb 7-1: config 0 has no interfaces? [ 90.471584][ T2786] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 90.475628][ T2786] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.478655][ T2786] usb 7-1: Product: syz [ 90.480287][ T2786] usb 7-1: Manufacturer: syz [ 90.482171][ T2786] usb 7-1: SerialNumber: syz [ 90.490052][ T2786] usb 7-1: config 0 descriptor?? [ 91.275139][ T5809] netlink: 'syz.0.82': attribute type 1 has an invalid length. [ 91.278185][ T5809] netlink: 224 bytes leftover after parsing attributes in process `syz.0.82'. [ 91.294319][ T5809] syz.0.82 uses obsolete (PF_INET,SOCK_PACKET) [ 91.470740][ T5813] can: request_module (can-proto-0) failed. [ 92.012292][ T64] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.163995][ T64] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 92.167116][ T64] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 92.170476][ T64] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 92.173380][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.179059][ T5821] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 92.186497][ T64] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 92.444208][ T64] usb 5-1: USB disconnect, device number 3 [ 92.605847][ T5834] FAULT_INJECTION: forcing a failure. [ 92.605847][ T5834] name failslab, interval 1, probability 0, space 0, times 1 [ 92.610172][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: syz.3.90 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 92.613746][ T5834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.617318][ T5834] Call Trace: [ 92.618469][ T5834] [ 92.619494][ T5834] dump_stack_lvl+0x16c/0x1f0 [ 92.621141][ T5834] should_fail_ex+0x497/0x5b0 [ 92.622761][ T5834] ? fs_reclaim_acquire+0xae/0x160 [ 92.624553][ T5834] should_failslab+0xc2/0x120 [ 92.626321][ T5834] kmem_cache_alloc_node_noprof+0x71/0x310 [ 92.628357][ T5834] ? __alloc_skb+0x2b3/0x380 [ 92.629983][ T5834] __alloc_skb+0x2b3/0x380 [ 92.631530][ T5834] ? __pfx___alloc_skb+0x10/0x10 [ 92.633212][ T5834] netlink_alloc_large_skb+0x69/0x130 [ 92.635008][ T5834] netlink_sendmsg+0x689/0xd70 [ 92.636643][ T5834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.638469][ T5834] ? lock_acquire+0x2f/0xb0 [ 92.640060][ T5834] ____sys_sendmsg+0x9ae/0xb40 [ 92.641732][ T5834] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.643553][ T5834] ? get_compat_msghdr+0x11b/0x170 [ 92.645357][ T5834] ? __pfx___lock_acquire+0x10/0x10 [ 92.647174][ T5834] ___sys_sendmsg+0x135/0x1e0 [ 92.648807][ T5834] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.650633][ T5834] ? lock_acquire+0x2f/0xb0 [ 92.652223][ T5834] ? __fget_files+0x40/0x3f0 [ 92.653854][ T5834] ? fdget+0x176/0x210 [ 92.655302][ T5834] __sys_sendmsg+0x117/0x1f0 [ 92.656923][ T5834] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.658679][ T5834] ? __fget_files+0x244/0x3f0 [ 92.660338][ T5834] __do_fast_syscall_32+0x73/0x120 [ 92.662195][ T5834] do_fast_syscall_32+0x32/0x80 [ 92.663922][ T5834] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.666128][ T5834] RIP: 0023:0xf744e579 [ 92.667554][ T5834] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 92.673882][ T5834] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 92.676717][ T5834] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000440 [ 92.679441][ T5834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.682153][ T5834] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 92.684872][ T5834] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 92.687564][ T5834] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.690300][ T5834] [ 92.813151][ T58] usb 7-1: USB disconnect, device number 2 [ 93.094631][ T5842] FAULT_INJECTION: forcing a failure. [ 93.094631][ T5842] name failslab, interval 1, probability 0, space 0, times 0 [ 93.098138][ T5842] CPU: 2 UID: 0 PID: 5842 Comm: syz.1.93 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 93.101833][ T5842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.105144][ T5842] Call Trace: [ 93.106024][ T5842] [ 93.106803][ T5842] dump_stack_lvl+0x16c/0x1f0 [ 93.108207][ T5842] should_fail_ex+0x497/0x5b0 [ 93.109466][ T5842] ? fs_reclaim_acquire+0xae/0x160 [ 93.110847][ T5842] should_failslab+0xc2/0x120 [ 93.112133][ T5842] __kmalloc_node_track_caller_noprof+0xcf/0x440 [ 93.113812][ T5842] ? kstrdup_const+0x63/0x80 [ 93.115041][ T5842] kstrdup+0x3c/0x80 [ 93.116096][ T5842] kstrdup_const+0x63/0x80 [ 93.117405][ T5842] __kernfs_new_node+0x9c/0x890 [ 93.119168][ T5842] ? __pfx___kernfs_new_node+0x10/0x10 [ 93.121120][ T5842] ? __pfx_lock_release+0x10/0x10 [ 93.122491][ T5842] ? kernfs_add_one+0x39d/0x520 [ 93.123772][ T5842] ? lock_acquire.part.0+0x11b/0x380 [ 93.125170][ T5842] ? find_held_lock+0x2d/0x110 [ 93.126421][ T5842] kernfs_new_node+0x186/0x240 [ 93.127824][ T5842] kernfs_create_link+0xcc/0x240 [ 93.129121][ T5842] sysfs_do_create_link_sd+0x90/0x140 [ 93.130517][ T5842] sysfs_create_link+0x61/0xc0 [ 93.131771][ T5842] device_add+0x62e/0x1a70 [ 93.132955][ T5842] ? __pfx_device_add+0x10/0x10 [ 93.134223][ T5842] ? __init_waitqueue_head+0xca/0x150 [ 93.135626][ T5842] netdev_register_kobject+0x187/0x3f0 [ 93.137072][ T5842] register_netdevice+0x1473/0x1e20 [ 93.138930][ T5842] ? __pfx_register_netdevice+0x10/0x10 [ 93.140905][ T5842] register_vlan_dev+0x372/0x940 [ 93.142647][ T5842] vlan_newlink+0x40e/0x6a0 [ 93.144281][ T5842] ? __pfx_vlan_newlink+0x10/0x10 [ 93.145666][ T5842] __rtnl_newlink+0x119c/0x1920 [ 93.147097][ T5842] ? __pfx___rtnl_newlink+0x10/0x10 [ 93.148978][ T5842] rtnl_newlink+0x67/0xa0 [ 93.150528][ T5842] ? __pfx_rtnl_newlink+0x10/0x10 [ 93.152278][ T5842] rtnetlink_rcv_msg+0x3c7/0xea0 [ 93.153594][ T5842] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 93.155020][ T5842] ? __pfx___dev_queue_xmit+0x10/0x10 [ 93.156422][ T5842] netlink_rcv_skb+0x165/0x410 [ 93.157893][ T5842] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 93.159784][ T5842] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.161181][ T5842] ? netlink_deliver_tap+0x1ae/0xcf0 [ 93.162567][ T5842] netlink_unicast+0x53c/0x7f0 [ 93.163824][ T5842] ? __pfx_netlink_unicast+0x10/0x10 [ 93.165229][ T5842] ? __phys_addr_symbol+0x30/0x80 [ 93.166542][ T5842] ? __check_object_size+0x488/0x710 [ 93.168271][ T5842] netlink_sendmsg+0x8b8/0xd70 [ 93.169975][ T5842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.171824][ T5842] ? lock_acquire+0x2f/0xb0 [ 93.173200][ T5842] ____sys_sendmsg+0x9ae/0xb40 [ 93.174650][ T5842] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.176515][ T5842] ? get_compat_msghdr+0x11b/0x170 [ 93.178336][ T5842] ? __pfx___lock_acquire+0x10/0x10 [ 93.180180][ T5842] ___sys_sendmsg+0x135/0x1e0 [ 93.181862][ T5842] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.183702][ T5842] ? lock_acquire+0x2f/0xb0 [ 93.185340][ T5842] ? __fget_files+0x40/0x3f0 [ 93.186997][ T5842] ? fdget+0x176/0x210 [ 93.188442][ T5842] __sys_sendmsg+0x117/0x1f0 [ 93.190101][ T5842] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.191912][ T5842] ? __fget_files+0x244/0x3f0 [ 93.193612][ T5842] __do_fast_syscall_32+0x73/0x120 [ 93.195323][ T5842] do_fast_syscall_32+0x32/0x80 [ 93.197050][ T5842] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.199281][ T5842] RIP: 0023:0xf743e579 [ 93.200572][ T5842] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 93.205566][ T5842] RSP: 002b:00000000f572656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 93.207936][ T5842] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000280 [ 93.209989][ T5842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.212038][ T5842] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 93.214101][ T5842] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 93.216143][ T5842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 93.218277][ T5842] [ 93.251409][ T5847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.255627][ T5847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.469829][ T5854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.96'. [ 93.834251][ T5863] netlink: 20 bytes leftover after parsing attributes in process `syz.3.99'. [ 93.834409][ T5862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.99'. [ 94.014323][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 95.122393][ T35] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.272309][ T35] usb 5-1: Using ep0 maxpacket: 16 [ 95.277099][ T35] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 95.280819][ T35] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 95.287709][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 95.292482][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 95.295899][ T35] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.313309][ T35] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 95.315706][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.317791][ T35] usb 5-1: Product: syz [ 95.318966][ T35] usb 5-1: Manufacturer: syz [ 95.320224][ T35] usb 5-1: SerialNumber: syz [ 95.325008][ T35] usb 5-1: config 0 descriptor?? [ 95.540275][ T35] appledisplay 5-1:0.0: Error while getting initial brightness: -71 [ 95.549139][ T35] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -71 [ 95.555747][ T35] usb 5-1: USB disconnect, device number 4 [ 95.761573][ T5929] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 96.115779][ T5924] block nbd3: shutting down sockets [ 97.034999][ T5931] syz.1.122[5931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.400100][ T5948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.127'. [ 98.436891][ T5948] fuse: Unknown parameter '„' [ 98.571054][ T5938] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 98.573033][ T5938] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 98.577565][ T5938] vhci_hcd vhci_hcd.0: Device attached [ 98.589340][ T5954] vhci_hcd: connection closed [ 98.592583][ T45] vhci_hcd: stop threads [ 98.596276][ T45] vhci_hcd: release socket [ 98.597827][ T45] vhci_hcd: disconnect device [ 99.823622][ T5969] capability: warning: `syz.3.133' uses deprecated v2 capabilities in a way that may be insecure [ 99.828420][ T5969] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 102.322703][ T6024] netlink: 36 bytes leftover after parsing attributes in process `syz.2.147'. [ 102.432117][ T6029] FAULT_INJECTION: forcing a failure. [ 102.432117][ T6029] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 102.439997][ T6029] CPU: 2 UID: 0 PID: 6029 Comm: syz.2.148 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 102.442879][ T6029] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.445790][ T6029] Call Trace: [ 102.446666][ T6029] [ 102.447492][ T6029] dump_stack_lvl+0x16c/0x1f0 [ 102.448758][ T6029] should_fail_ex+0x497/0x5b0 [ 102.450068][ T6029] ? fs_reclaim_acquire+0xae/0x160 [ 102.451405][ T6029] should_fail_alloc_page+0xe7/0x130 [ 102.453094][ T6029] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 102.454769][ T6029] ? __pfx_lock_release+0x10/0x10 [ 102.456162][ T6029] __alloc_pages_noprof+0x190/0x25c0 [ 102.457600][ T6029] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 102.459223][ T6029] ? lockdep_hardirqs_on+0x7c/0x110 [ 102.460668][ T6029] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 102.462484][ T6029] ? stack_depot_save_flags+0x31b/0x900 [ 102.463974][ T6029] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 102.465521][ T6029] ? copy_splice_read+0x1a8/0xb90 [ 102.466904][ T6029] ? kasan_save_stack+0x33/0x60 [ 102.468174][ T6029] ? kasan_save_track+0x14/0x30 [ 102.469536][ T6029] ? __kasan_kmalloc+0xaa/0xb0 [ 102.470858][ T6029] ? __kmalloc_noprof+0x1e8/0x410 [ 102.472314][ T6029] ? copy_splice_read+0x1a8/0xb90 [ 102.473813][ T6029] ? do_splice_read+0x282/0x370 [ 102.475164][ T6029] ? splice_direct_to_actor+0x2a4/0xa40 [ 102.476677][ T6029] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.478403][ T6029] alloc_pages_bulk_noprof+0x77c/0x1110 [ 102.479918][ T6029] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 102.481576][ T6029] ? trace_kmalloc+0x2d/0xe0 [ 102.482826][ T6029] ? __kmalloc_noprof+0x207/0x410 [ 102.484216][ T6029] copy_splice_read+0x1e3/0xb90 [ 102.485611][ T6029] ? look_up_lock_class+0x59/0x150 [ 102.486996][ T6029] ? __pfx_copy_splice_read+0x10/0x10 [ 102.488422][ T6029] ? __pfx_register_lock_class+0x10/0x10 [ 102.489992][ T6029] ? __pfx_copy_splice_read+0x10/0x10 [ 102.491462][ T6029] do_splice_read+0x282/0x370 [ 102.492987][ T6029] splice_direct_to_actor+0x2a4/0xa40 [ 102.494425][ T6029] ? __pfx_direct_splice_actor+0x10/0x10 [ 102.495951][ T6029] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 102.497569][ T6029] ? __fget_files+0x23a/0x3f0 [ 102.498790][ T6029] do_splice_direct+0x178/0x250 [ 102.500132][ T6029] ? __pfx_do_splice_direct+0x10/0x10 [ 102.501619][ T6029] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 102.503350][ T6029] do_sendfile+0xb0c/0xe40 [ 102.504617][ T6029] ? __pfx_do_sendfile+0x10/0x10 [ 102.505982][ T6029] ? __fget_files+0x244/0x3f0 [ 102.507218][ T6029] __ia32_compat_sys_sendfile+0x1e7/0x230 [ 102.508875][ T6029] ? ksys_write+0x1ad/0x260 [ 102.510067][ T6029] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 102.511756][ T6029] __do_fast_syscall_32+0x73/0x120 [ 102.513398][ T6029] do_fast_syscall_32+0x32/0x80 [ 102.514672][ T6029] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.516384][ T6029] RIP: 0023:0xf7f43579 [ 102.517519][ T6029] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 102.522593][ T6029] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 102.524848][ T6029] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000003 [ 102.526950][ T6029] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 102.529074][ T6029] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.531180][ T6029] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 102.533597][ T6029] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.535705][ T6029] [ 102.536634][ C2] vkms_vblank_simulate: vblank timer overrun [ 103.021789][ T6039] FAULT_INJECTION: forcing a failure. [ 103.021789][ T6039] name failslab, interval 1, probability 0, space 0, times 0 [ 103.021839][ T6039] CPU: 3 UID: 0 PID: 6039 Comm: syz.3.152 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 103.021852][ T6039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.021858][ T6039] Call Trace: [ 103.021862][ T6039] [ 103.021867][ T6039] dump_stack_lvl+0x16c/0x1f0 [ 103.021888][ T6039] should_fail_ex+0x497/0x5b0 [ 103.021910][ T6039] ? fs_reclaim_acquire+0xae/0x160 [ 103.021926][ T6039] should_failslab+0xc2/0x120 [ 103.021941][ T6039] __kmalloc_noprof+0xcb/0x410 [ 103.021958][ T6039] drm_atomic_state_init+0xe4/0x320 [ 103.021972][ T6039] ? __kasan_kmalloc+0xaa/0xb0 [ 103.021986][ T6039] drm_atomic_state_alloc+0xd3/0x120 [ 103.021999][ T6039] drm_client_modeset_commit_atomic+0xd8/0x800 [ 103.022011][ T6039] ? drm_client_modeset_commit_locked+0x4c/0x580 [ 103.022025][ T6039] ? rcu_is_watching+0x12/0xc0 [ 103.022038][ T6039] ? trace_contention_end+0xea/0x140 [ 103.022055][ T6039] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 103.022066][ T6039] ? __mutex_lock+0x1a6/0x9c0 [ 103.022080][ T6039] ? __mutex_lock+0x1a6/0x9c0 [ 103.022099][ T6039] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 103.022117][ T6039] drm_client_modeset_commit_locked+0x14d/0x580 [ 103.022131][ T6039] drm_fb_helper_pan_display+0x2a5/0x990 [ 103.022164][ T6039] fb_pan_display+0x477/0x7d0 [ 103.022181][ T6039] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 103.022209][ T6039] bit_update_start+0x49/0x1f0 [ 103.022237][ T6039] fbcon_switch+0xc11/0x14f0 [ 103.022252][ T6039] ? __pfx_fbcon_switch+0x10/0x10 [ 103.022261][ T6039] ? __pfx___lock_acquire+0x10/0x10 [ 103.022283][ T6039] ? __msecs_to_jiffies+0x45/0x50 [ 103.022296][ T6039] ? fbcon_cursor+0x2ea/0x5f0 [ 103.022305][ T6039] ? __pfx_lock_release+0x10/0x10 [ 103.022323][ T6039] csi_J+0x868/0xad0 [ 103.022339][ T6039] do_con_write+0x3e87/0x7d00 [ 103.022353][ T6039] ? n_tty_write+0x533/0x1140 [ 103.022375][ T6039] ? __pfx_do_con_write+0x10/0x10 [ 103.022391][ T6039] ? __pfx___mutex_lock+0x10/0x10 [ 103.022408][ T6039] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 103.022430][ T6039] ? con_write+0x93/0xb0 [ 103.022447][ T6039] con_write+0x23/0xb0 [ 103.022462][ T6039] n_tty_write+0x419/0x1140 [ 103.022478][ T6039] ? __pfx_n_tty_write+0x10/0x10 [ 103.022487][ T6039] ? __virt_addr_valid+0x1a4/0x590 [ 103.022501][ T6039] ? __pfx_woken_wake_function+0x10/0x10 [ 103.022514][ T6039] ? __virt_addr_valid+0x5e/0x590 [ 103.022526][ T6039] ? __phys_addr_symbol+0x30/0x80 [ 103.022537][ T6039] ? __check_object_size+0x488/0x710 [ 103.022552][ T6039] ? __pfx_n_tty_write+0x10/0x10 [ 103.022562][ T6039] file_tty_write.constprop.0+0x506/0x9a0 [ 103.022580][ T6039] vfs_write+0x6b5/0x1140 [ 103.022591][ T6039] ? __pfx_tty_write+0x10/0x10 [ 103.022604][ T6039] ? trace_lock_acquire+0x14a/0x1d0 [ 103.022616][ T6039] ? __pfx_vfs_write+0x10/0x10 [ 103.022628][ T6039] ? __fget_files+0x40/0x3f0 [ 103.022648][ T6039] ksys_write+0x12f/0x260 [ 103.022659][ T6039] ? __pfx_ksys_write+0x10/0x10 [ 103.022674][ T6039] __do_fast_syscall_32+0x73/0x120 [ 103.022688][ T6039] do_fast_syscall_32+0x32/0x80 [ 103.022702][ T6039] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.022717][ T6039] RIP: 0023:0xf744e579 [ 103.022732][ T6039] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 103.022749][ T6039] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 103.022769][ T6039] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002080 [ 103.022781][ T6039] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.022792][ T6039] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.022802][ T6039] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 103.022809][ T6039] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.022822][ T6039] [ 103.677175][ T6045] syz.3.155: vmalloc error: size 1982232576, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 103.683421][ T6045] CPU: 3 UID: 0 PID: 6045 Comm: syz.3.155 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 103.687229][ T6045] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.691067][ T6045] Call Trace: [ 103.692274][ T6045] [ 103.693355][ T6045] dump_stack_lvl+0x16c/0x1f0 [ 103.695063][ T6045] warn_alloc+0x24d/0x3a0 [ 103.696603][ T6045] ? __pfx_warn_alloc+0x10/0x10 [ 103.698355][ T6045] ? __pfx___lock_acquire+0x10/0x10 [ 103.700232][ T6045] ? get_ctrl+0x394/0x4f0 [ 103.701798][ T6045] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 103.703806][ T6045] __vmalloc_node_range_noprof+0x11a7/0x15a0 [ 103.705988][ T6045] ? __mutex_trylock_common+0xea/0x250 [ 103.707944][ T6045] ? __pfx___mutex_trylock_common+0x10/0x10 [ 103.710061][ T6045] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 103.712221][ T6045] ? rcu_is_watching+0x12/0xc0 [ 103.713944][ T6045] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 103.716187][ T6045] ? rcu_is_watching+0x12/0xc0 [ 103.717895][ T6045] ? rcu_is_watching+0x12/0xc0 [ 103.719514][ T6045] ? trace_kmalloc+0x2d/0xe0 [ 103.721126][ T6045] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 103.723140][ T6045] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 103.725346][ T6045] __kvmalloc_node_noprof+0x14f/0x1a0 [ 103.727146][ T6045] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 103.729397][ T6045] __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 103.731609][ T6045] vivid_update_format_cap+0x127b/0x2530 [ 103.733758][ T6045] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 103.735950][ T6045] ? v4l2_match_dv_timings+0x1df/0x1010 [ 103.737926][ T6045] vivid_vid_cap_s_dv_timings+0xc0f/0xfb0 [ 103.739823][ T6045] vidioc_s_dv_timings+0xa5/0xc0 [ 103.741275][ T6045] ? v4l_stub_s_dv_timings+0x1b/0x60 [ 103.743174][ T6045] __video_do_ioctl+0xaf0/0xf00 [ 103.744964][ T6045] ? __pfx___video_do_ioctl+0x10/0x10 [ 103.746892][ T6045] video_usercopy+0x426/0x1500 [ 103.748576][ T6045] ? __pfx___video_do_ioctl+0x10/0x10 [ 103.750496][ T6045] ? __pfx_video_usercopy+0x10/0x10 [ 103.752320][ T6045] v4l2_ioctl+0x1ba/0x250 [ 103.753855][ T6045] v4l2_compat_ioctl32+0x214/0x2c0 [ 103.755669][ T6045] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 103.757668][ T6045] __do_compat_sys_ioctl+0x259/0x2b0 [ 103.759546][ T6045] __do_fast_syscall_32+0x73/0x120 [ 103.761548][ T6045] do_fast_syscall_32+0x32/0x80 [ 103.763246][ T6045] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.765505][ T6045] RIP: 0023:0xf744e579 [ 103.766941][ T6045] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 103.773608][ T6045] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 103.776640][ T6045] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0845657 [ 103.779548][ T6045] RDX: 0000000020000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.782444][ T6045] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.785297][ T6045] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 103.787705][ T6045] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.790561][ T6045] [ 103.795719][ T6045] Mem-Info: [ 103.797087][ T6045] active_anon:2763 inactive_anon:108 isolated_anon:0 [ 103.797087][ T6045] active_file:10592 inactive_file:31152 isolated_file:0 [ 103.797087][ T6045] unevictable:768 dirty:257 writeback:0 [ 103.797087][ T6045] slab_reclaimable:4392 slab_unreclaimable:52481 [ 103.797087][ T6045] mapped:17241 shmem:917 pagetables:713 [ 103.797087][ T6045] sec_pagetables:315 bounce:0 [ 103.797087][ T6045] kernel_misc_reclaimable:0 [ 103.797087][ T6045] free:95313 free_pcp:1356 free_cma:0 [ 103.813233][ T6045] Node 0 active_anon:16kB inactive_anon:336kB active_file:44kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:6440kB dirty:84kB writeback:0kB shmem:1572kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9536kB pagetables:1752kB sec_pagetables:1220kB all_unreclaimable? no [ 103.821487][ T6045] Node 1 active_anon:11036kB inactive_anon:20kB active_file:42324kB inactive_file:124476kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:62524kB dirty:944kB writeback:0kB shmem:2096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:1600kB pagetables:1024kB sec_pagetables:40kB all_unreclaimable? no [ 103.836292][ T6045] Node 0 DMA free:980kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:8kB inactive_file:28kB unevictable:0kB writepending:20kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:8kB free_cma:0kB [ 103.843680][ T6045] lowmem_reserve[]: 0 273 0 0 0 [ 103.845366][ T6045] Node 0 DMA32 free:21576kB boost:0kB min:13904kB low:17380kB high:20856kB reserved_highatomic:4096KB active_anon:456kB inactive_anon:60kB active_file:32kB inactive_file:108kB unevictable:1536kB writepending:64kB present:1032196kB managed:306284kB mlocked:0kB bounce:0kB free_pcp:1876kB local_pcp:392kB free_cma:0kB [ 103.854188][ T6045] lowmem_reserve[]: 0 0 0 0 0 [ 103.855872][ T6045] Node 1 DMA32 free:358588kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:10984kB inactive_anon:20kB active_file:42324kB inactive_file:124476kB unevictable:1536kB writepending:944kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:3648kB local_pcp:2228kB free_cma:0kB [ 103.867080][ T6048] netlink: 'syz.3.155': attribute type 1 has an invalid length. [ 103.869195][ T6045] lowmem_reserve[]: 0 0 0 0 0 [ 103.874739][ T6045] Node 0 DMA: 46*4kB (U) 35*8kB (U) 3*16kB (U) 16*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1024kB [ 103.878805][ T6045] Node 0 DMA32: 774*4kB (UMEH) 201*8kB (UMEH) 35*16kB (MEH) 45*32kB (UMEH) 39*64kB (UMEH) 20*128kB (UMEH) 5*256kB (UM) 8*512kB (UM) 3*1024kB (UM) 0*2048kB 0*4096kB = 20208kB [ 103.886375][ T6045] Node 1 DMA32: 444*4kB (UME) 415*8kB (UME) 353*16kB (UME) 515*32kB (UME) 300*64kB (UME) 69*128kB (UME) 55*256kB (UME) 43*512kB (UME) 34*1024kB (UME) 14*2048kB (UME) 50*4096kB (UM) = 359640kB [ 103.892977][ T6045] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 103.895380][ T6045] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 103.898021][ T6045] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 103.900645][ T6045] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 103.906078][ T6045] 43193 total pagecache pages [ 103.907302][ T6045] 532 pages in swap cache [ 103.908549][ T6045] Free swap = 112252kB [ 103.909605][ T6045] Total swap = 124996kB [ 103.910677][ T6045] 524155 pages RAM [ 103.911626][ T6045] 0 pages HighMem/MovableOnly [ 103.913275][ T6045] 206681 pages reserved [ 103.914363][ T6045] 0 pages cma reserved [ 103.994034][ T6054] vivid-000: ================= START STATUS ================= [ 104.017449][ T6054] vivid-000: Radio HW Seek Mode: Bounded [ 104.019771][ T6054] vivid-000: Radio Programmable HW Seek: false [ 104.022016][ T6054] vivid-000: RDS Rx I/O Mode: Block I/O [ 104.030838][ T6054] vivid-000: Generate RBDS Instead of RDS: false [ 104.034967][ T6054] vivid-000: RDS Reception: true [ 104.036561][ T6054] vivid-000: RDS Program Type: 0 inactive [ 104.038935][ T6054] vivid-000: RDS PS Name: inactive [ 104.040458][ T6054] vivid-000: RDS Radio Text: inactive [ 104.041936][ T6054] vivid-000: RDS Traffic Announcement: false inactive [ 104.043531][ T6061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.044807][ T6054] vivid-000: RDS Traffic Program: false inactive [ 104.049054][ T6054] vivid-000: RDS Music: false inactive [ 104.050305][ T6061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.050654][ T6054] vivid-000: ================== END STATUS ================== [ 104.056609][ T6053] vivid-000: ================= START STATUS ================= [ 104.062172][ T6053] vivid-000: Radio HW Seek Mode: Bounded [ 104.072077][ T6053] vivid-000: Radio Programmable HW Seek: false [ 104.078703][ T6053] vivid-000: RDS Rx I/O Mode: Block I/O [ 104.081108][ T6053] vivid-000: Generate RBDS Instead of RDS: false [ 104.083615][ T6053] vivid-000: RDS Reception: true [ 104.085235][ T6053] vivid-000: RDS Program Type: 0 inactive [ 104.087437][ T6053] vivid-000: RDS PS Name: inactive [ 104.103251][ T6053] vivid-000: RDS Radio Text: inactive [ 104.104828][ T6053] vivid-000: RDS Traffic Announcement: false inactive [ 104.106775][ T6053] vivid-000: RDS Traffic Program: false inactive [ 104.108583][ T6053] vivid-000: RDS Music: false inactive [ 104.110263][ T6053] vivid-000: ================== END STATUS ================== [ 104.488231][ T39] audit: type=1400 audit(1727859045.762:76): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=6071 comm="syz.3.160" [ 105.189146][ T6091] Illegal XDP return value 3603265410 on prog (id 40) dev syz_tun, expect packet loss! [ 105.251782][ T6095] netlink: 'syz.1.167': attribute type 33 has an invalid length. [ 105.257044][ T6095] netlink: 'syz.1.167': attribute type 13 has an invalid length. [ 105.259552][ T6095] netlink: 152 bytes leftover after parsing attributes in process `syz.1.167'. [ 105.326045][ T6095] netlink: 20 bytes leftover after parsing attributes in process `syz.1.167'. [ 105.383131][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 105.425428][ T6098] overlayfs: upper fs does not support tmpfile. [ 105.431189][ T6098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.534801][ T6095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.563950][ T6095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.600599][ T6095] netlink: 'syz.1.167': attribute type 33 has an invalid length. [ 105.949713][ T6107] mmap: syz.3.169 (6107) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 106.378322][ T6119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.174'. [ 106.701049][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'. [ 107.284328][ T6142] hub 2-0:1.0: USB hub found [ 107.292375][ T6142] hub 2-0:1.0: 2 ports detected [ 108.040488][ T6151] input: syz0 as /devices/virtual/input/input7 [ 108.484971][ T6163] capability: warning: `syz.1.185' uses 32-bit capabilities (legacy support in use) [ 109.945695][ T6180] fuse: Bad value for 'rootmode' [ 110.142539][ T8] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 110.157056][ T6184] netlink: 'syz.0.192': attribute type 12 has an invalid length. [ 110.304411][ T8] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.308004][ T8] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 110.310504][ T8] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 110.315037][ T8] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 110.317603][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.329159][ T6177] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 110.334270][ T8] hub 7-1:1.0: bad descriptor, ignoring hub [ 110.336315][ T8] hub 7-1:1.0: probe with driver hub failed with error -5 [ 110.339198][ T8] cdc_wdm 7-1:1.0: skipping garbage [ 110.341051][ T8] cdc_wdm 7-1:1.0: skipping garbage [ 110.349259][ T8] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 110.351231][ T8] cdc_wdm 7-1:1.0: Unknown control protocol [ 110.423584][ T6190] gfs2: path_lookup on c::: returned error -2 [ 111.288323][ T6200] netlink: 'syz.1.196': attribute type 1 has an invalid length. [ 111.291393][ T6200] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 111.293846][ T6200] IPv6: NLM_F_CREATE should be set when creating new route [ 111.314127][ T6176] cdc_wdm 7-1:1.0: Error autopm - -16 [ 111.314743][ T979] usb 7-1: USB disconnect, device number 3 [ 111.466345][ T979] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 111.626026][ T979] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.628908][ T979] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 111.631699][ T979] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 111.634562][ T6204] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 111.635133][ T979] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 111.640264][ T979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.649941][ T6177] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 111.652957][ T979] hub 7-1:1.0: bad descriptor, ignoring hub [ 111.655985][ T979] hub 7-1:1.0: probe with driver hub failed with error -5 [ 111.658534][ T979] cdc_wdm 7-1:1.0: skipping garbage [ 111.660259][ T979] cdc_wdm 7-1:1.0: skipping garbage [ 111.663862][ T979] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 111.665796][ T979] cdc_wdm 7-1:1.0: Unknown control protocol [ 111.687590][ T6204] netlink: 20 bytes leftover after parsing attributes in process `syz.3.197'. [ 111.962589][ T2786] usb 7-1: USB disconnect, device number 4 [ 112.409655][ C2] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 112.420741][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'. [ 112.424904][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'. [ 113.403667][ T6230] FAULT_INJECTION: forcing a failure. [ 113.403667][ T6230] name failslab, interval 1, probability 0, space 0, times 0 [ 113.407910][ T6230] CPU: 3 UID: 0 PID: 6230 Comm: syz.2.204 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 113.411745][ T6230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 113.415220][ T6230] Call Trace: [ 113.416330][ T6230] [ 113.417334][ T6230] dump_stack_lvl+0x16c/0x1f0 [ 113.418918][ T6230] should_fail_ex+0x497/0x5b0 [ 113.420492][ T6230] should_failslab+0xc2/0x120 [ 113.422055][ T6230] __kmalloc_cache_noprof+0x6b/0x310 [ 113.423787][ T6230] ? __sctp_v6_cmp_addr+0x206/0x530 [ 113.425680][ T6230] ? sctp_add_bind_addr+0x9d/0x3e0 [ 113.427585][ T6230] sctp_add_bind_addr+0x9d/0x3e0 [ 113.429436][ T6230] sctp_copy_local_addr_list+0x39e/0x5a0 [ 113.431565][ T6230] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 113.433731][ T6230] ? sctp_auth_asoc_copy_shkeys+0x2a7/0x360 [ 113.435692][ T6230] ? sctp_bind_addr_copy+0xe0/0x530 [ 113.437429][ T6230] sctp_bind_addr_copy+0xe0/0x530 [ 113.439122][ T6230] sctp_connect_new_asoc+0x1d8/0x790 [ 113.440884][ T6230] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 113.442827][ T6230] ? sctp_inet6_send_verify+0x119/0x390 [ 113.444867][ T6230] __sctp_connect+0x3f5/0xc60 [ 113.446690][ T6230] ? __pfx___sctp_connect+0x10/0x10 [ 113.448703][ T6230] __sctp_setsockopt_connectx+0xfc/0x170 [ 113.450761][ T6230] sctp_setsockopt+0x1703/0xb880 [ 113.452604][ T6230] ? __pfx_sctp_setsockopt+0x10/0x10 [ 113.454492][ T6230] ? __pfx_aa_sk_perm+0x10/0x10 [ 113.456087][ T6230] ? sock_common_setsockopt+0x2e/0xf0 [ 113.457698][ T6230] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 113.459600][ T6230] do_sock_setsockopt+0x222/0x480 [ 113.461341][ T6230] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 113.463261][ T6230] ? fdget+0x176/0x210 [ 113.464841][ T6230] __sys_setsockopt+0x1a4/0x270 [ 113.466656][ T6230] ? __pfx___sys_setsockopt+0x10/0x10 [ 113.468646][ T6230] ? fput+0x30/0x390 [ 113.470104][ T6230] ? ksys_write+0x1ad/0x260 [ 113.471781][ T6230] ? __pfx_ksys_write+0x10/0x10 [ 113.473496][ T6230] __ia32_sys_setsockopt+0xbc/0x160 [ 113.475200][ T6230] ? lockdep_hardirqs_on+0x7c/0x110 [ 113.477064][ T6230] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 113.479385][ T6230] __do_fast_syscall_32+0x73/0x120 [ 113.481287][ T6230] do_fast_syscall_32+0x32/0x80 [ 113.483236][ T6230] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.485891][ T6230] RIP: 0023:0xf7f43579 [ 113.487384][ T6230] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 113.494176][ T6230] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 113.497205][ T6230] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 113.500002][ T6230] RDX: 000000000000006b RSI: 0000000020000380 RDI: 000000000000001c [ 113.502881][ T6230] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.505854][ T6230] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 113.508870][ T6230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.511726][ T6230] [ 114.518809][ T6261] netlink: 156 bytes leftover after parsing attributes in process `syz.3.214'. [ 116.616803][ T6287] fuse: Unknown parameter 'f‹4(;%}Ò×Nï°%zfÌ·ŸARN' [ 119.043649][ T6334] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 119.048302][ T6334] FAULT_INJECTION: forcing a failure. [ 119.048302][ T6334] name failslab, interval 1, probability 0, space 0, times 0 [ 119.058197][ T6334] CPU: 3 UID: 0 PID: 6334 Comm: syz.3.234 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 119.061476][ T6334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.064640][ T6334] Call Trace: [ 119.065610][ T6334] [ 119.066573][ T6334] dump_stack_lvl+0x16c/0x1f0 [ 119.067938][ T6334] should_fail_ex+0x497/0x5b0 [ 119.069375][ T6334] ? fs_reclaim_acquire+0xae/0x160 [ 119.070896][ T6334] should_failslab+0xc2/0x120 [ 119.072468][ T6334] __kmalloc_node_noprof+0xd1/0x440 [ 119.074048][ T6334] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 119.075468][ T6334] __kvmalloc_node_noprof+0xad/0x1a0 [ 119.076860][ T6334] __nf_hook_entries_try_shrink+0x15f/0x400 [ 119.078556][ T6334] __nf_unregister_net_hook+0x2e5/0x680 [ 119.080550][ T6334] nf_unregister_net_hooks+0x11b/0x160 [ 119.082329][ T6334] ? __pfx_conntrack_mt_destroy+0x10/0x10 [ 119.083963][ T6334] nf_defrag_ipv4_disable+0x9a/0xb0 [ 119.085921][ T6334] nf_ct_netns_do_put+0x115/0x2f0 [ 119.087623][ T6334] nf_ct_netns_put+0x71/0x80 [ 119.088853][ T6334] cleanup_entry+0x17e/0x380 [ 119.090081][ T6334] ? __pfx_cleanup_entry+0x10/0x10 [ 119.091431][ T6334] ? kvfree+0x47/0x50 [ 119.092491][ T6334] translate_table+0xd5f/0x1730 [ 119.093826][ T6334] ? __pfx_translate_table+0x10/0x10 [ 119.095154][ T6334] ? translate_compat_table+0x110f/0x18c0 [ 119.096625][ T6334] translate_compat_table+0x13d9/0x18c0 [ 119.098086][ T6334] ? __pfx_translate_compat_table+0x10/0x10 [ 119.099638][ T6334] ? __might_fault+0x13b/0x190 [ 119.100920][ T6334] ? __pfx_lock_release+0x10/0x10 [ 119.102255][ T6334] compat_do_replace+0x35d/0x500 [ 119.103593][ T6334] ? __pfx_compat_do_replace+0x10/0x10 [ 119.105094][ T6334] ? aa_get_newest_label+0x376/0x680 [ 119.106503][ T6334] ? __pfx_aa_get_newest_label+0x10/0x10 [ 119.107997][ T6334] ? bpf_lsm_capable+0x9/0x10 [ 119.109265][ T6334] ? security_capable+0x7e/0x260 [ 119.110582][ T6334] do_ipt_set_ctl+0x686/0xc10 [ 119.111836][ T6334] ? trace_contention_end+0xea/0x140 [ 119.113250][ T6334] ? __mutex_lock+0x1a6/0x9c0 [ 119.114874][ T6334] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 119.116752][ T6334] ? __pfx___mutex_lock+0x10/0x10 [ 119.118500][ T6334] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 119.120620][ T6334] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 119.122549][ T6334] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 119.124733][ T6334] nf_setsockopt+0x8a/0xf0 [ 119.126239][ T6334] ip_setsockopt+0xcb/0xf0 [ 119.127438][ T6334] udp_setsockopt+0x7d/0xd0 [ 119.128643][ T6334] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 119.130187][ T6334] do_sock_setsockopt+0x222/0x480 [ 119.131506][ T6334] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 119.132967][ T6334] ? fdget+0x176/0x210 [ 119.134070][ T6334] __sys_setsockopt+0x1a4/0x270 [ 119.135347][ T6334] ? __pfx___sys_setsockopt+0x10/0x10 [ 119.136759][ T6334] ? fput+0x30/0x390 [ 119.137790][ T6334] ? ksys_write+0x1ad/0x260 [ 119.138982][ T6334] ? __pfx_ksys_write+0x10/0x10 [ 119.140259][ T6334] __ia32_sys_setsockopt+0xbc/0x160 [ 119.141575][ T6334] ? lockdep_hardirqs_on+0x7c/0x110 [ 119.142928][ T6334] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 119.145004][ T6334] __do_fast_syscall_32+0x73/0x120 [ 119.146353][ T6334] do_fast_syscall_32+0x32/0x80 [ 119.147639][ T6334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.149287][ T6334] RIP: 0023:0xf744e579 [ 119.150359][ T6334] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 119.155394][ T6334] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 119.157843][ T6334] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 119.159897][ T6334] RDX: 0000000000000040 RSI: 0000000020000400 RDI: 0000000000000414 [ 119.161966][ T6334] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 119.164203][ T6334] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 119.166246][ T6334] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.168342][ T6334] [ 121.232429][ T2786] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 121.411039][ T35] usb 6-1: USB disconnect, device number 2 [ 121.413403][ T2786] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.416100][ T2786] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 121.418925][ T2786] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 121.429073][ T2786] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.436014][ T2786] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.438452][ T2786] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.441342][ T2786] usb 7-1: config 0 descriptor?? [ 121.493155][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.497949][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.503218][ T67] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.506442][ T67] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.508720][ T67] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 121.510820][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.614528][ T6365] chnl_net:caif_netlink_parms(): no params data found [ 121.679782][ T6365] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.681939][ T6365] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.688288][ T6365] bridge_slave_0: entered allmulticast mode [ 121.690548][ T6365] bridge_slave_0: entered promiscuous mode [ 121.694161][ T6365] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.696282][ T6365] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.698350][ T6365] bridge_slave_1: entered allmulticast mode [ 121.700473][ T6365] bridge_slave_1: entered promiscuous mode [ 121.729947][ T6365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.738047][ T6365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.768750][ T6365] team0: Port device team_slave_0 added [ 121.771799][ T6365] team0: Port device team_slave_1 added [ 121.799738][ T6365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.801626][ T6365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.809722][ T6365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.813825][ T6365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.815763][ T6365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.822437][ T6365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.875531][ T2786] usbhid 7-1:0.0: can't add hid device: -71 [ 121.877174][ T2786] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 121.884474][ T2786] usb 7-1: USB disconnect, device number 5 [ 121.888611][ T6365] hsr_slave_0: entered promiscuous mode [ 121.893098][ T6365] hsr_slave_1: entered promiscuous mode [ 121.949942][ T6376] MPI: mpi too large (185152 bits) [ 121.959284][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.244'. [ 122.013534][ T6365] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.116895][ T6365] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.209563][ T6365] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.327034][ T6365] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.467059][ T6365] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 122.471694][ T6365] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 122.480993][ T6365] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 122.493793][ T6365] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 122.514145][ T6365] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.516074][ T6365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.519067][ T6365] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.521753][ T6365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.546209][ T6365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.554877][ T6365] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.560879][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.571894][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.590734][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.592625][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.604663][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.606458][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.701895][ T6365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.730102][ T6393] tipc: Started in network mode [ 122.731868][ T6393] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 122.736136][ T6393] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 122.739575][ T6393] tipc: Enabled bearer , priority 10 [ 122.744118][ T6365] veth0_vlan: entered promiscuous mode [ 122.748825][ T6365] veth1_vlan: entered promiscuous mode [ 122.765859][ T6365] veth0_macvtap: entered promiscuous mode [ 122.770408][ T6365] veth1_macvtap: entered promiscuous mode [ 122.789254][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.798395][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.801723][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.806276][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.809636][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.818905][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.823177][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.826990][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.831833][ T6365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.840188][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.844355][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.847911][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.851446][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.856156][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.859743][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.868442][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.872141][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.877427][ T6365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.882110][ T6365] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.884898][ T6365] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.887215][ T6365] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.889618][ T6365] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.922800][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.924904][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.938953][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.941033][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.542463][ T67] Bluetooth: hci0: command tx timeout [ 123.635322][ T6395] tipc: Enabling of bearer rejected, already enabled [ 123.717468][ T6401] IPVS: length: 195 != 8 [ 123.724164][ T6401] binder: 6400:6401 ioctl c018620c 20003640 returned -22 [ 123.734744][ T2786] tipc: Node number set to 1 [ 124.102445][ T64] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 124.265499][ T64] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 124.268830][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 124.272745][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 124.276127][ T64] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.280597][ T64] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.283993][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.291306][ T64] usb 5-1: config 0 descriptor?? [ 124.713914][ T64] usbhid 5-1:0.0: can't add hid device: -71 [ 124.715545][ T64] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 124.719752][ T64] usb 5-1: USB disconnect, device number 5 [ 125.153329][ T6416] block nbd1: NBD_DISCONNECT [ 125.282102][ T39] audit: type=1326 audit(1727859066.552:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.3.263" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x0 [ 125.616620][ T67] Bluetooth: hci0: command tx timeout [ 125.639317][ T6432] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 125.646871][ T6432] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 125.647372][ T39] audit: type=1326 audit(1727859066.922:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.0.262" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x0 [ 125.673801][ T6432] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 125.683279][ T6432] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 125.691797][ T6432] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 125.707919][ T6432] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 125.710658][ T6432] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.714175][ T6432] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 125.721248][ T6432] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 125.725178][ T6432] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 125.726796][ T6432] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 125.730022][ T6432] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 125.740551][ T6432] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 125.743275][ T6432] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 125.747955][ T6432] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 126.667302][ T6476] FAULT_INJECTION: forcing a failure. [ 126.667302][ T6476] name failslab, interval 1, probability 0, space 0, times 0 [ 126.670712][ T6476] CPU: 1 UID: 0 PID: 6476 Comm: syz.0.274 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 126.673577][ T6476] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.676416][ T6476] Call Trace: [ 126.677320][ T6476] [ 126.678125][ T6476] dump_stack_lvl+0x16c/0x1f0 [ 126.679634][ T6476] should_fail_ex+0x497/0x5b0 [ 126.680918][ T6476] ? fs_reclaim_acquire+0xae/0x160 [ 126.682307][ T6476] should_failslab+0xc2/0x120 [ 126.683579][ T6476] __kmalloc_noprof+0xcb/0x410 [ 126.684887][ T6476] ? rcu_is_watching+0x12/0xc0 [ 126.686174][ T6476] lsm_blob_alloc+0x68/0x90 [ 126.687395][ T6476] security_sk_alloc+0x30/0x270 [ 126.688737][ T6476] sk_prot_alloc+0xfb/0x2a0 [ 126.689969][ T6476] sk_alloc+0x36/0xb90 [ 126.691069][ T6476] inet_create+0x3a1/0x1070 [ 126.692298][ T6476] ? inet_create+0x90/0x1070 [ 126.693559][ T6476] __sock_create+0x32e/0x800 [ 126.694804][ T6476] mptcp_pm_nl_create_listen_socket+0x11c/0x6c0 [ 126.696473][ T6476] ? __pfx_mptcp_pm_nl_create_listen_socket+0x10/0x10 [ 126.698263][ T6476] mptcp_pm_nl_add_addr_doit+0x2ea/0xc80 [ 126.699746][ T6476] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 126.701330][ T6476] ? __pfx___nla_validate_parse+0x10/0x10 [ 126.702843][ T6476] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 126.704793][ T6476] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 126.706744][ T6476] genl_family_rcv_msg_doit+0x202/0x2f0 [ 126.708132][ T6476] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 126.709723][ T6476] ? bpf_lsm_capable+0x9/0x10 [ 126.710976][ T6476] ? security_capable+0x7e/0x260 [ 126.712286][ T6476] ? ns_capable+0xd7/0x110 [ 126.713511][ T6476] genl_rcv_msg+0x565/0x800 [ 126.714746][ T6476] ? __pfx_genl_rcv_msg+0x10/0x10 [ 126.716095][ T6476] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 126.717795][ T6476] netlink_rcv_skb+0x165/0x410 [ 126.719047][ T6476] ? __pfx_genl_rcv_msg+0x10/0x10 [ 126.720392][ T6476] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 126.721880][ T6476] ? down_read+0xc9/0x330 [ 126.723049][ T6476] ? __pfx_down_read+0x10/0x10 [ 126.724664][ T6476] ? netlink_deliver_tap+0x1ae/0xcf0 [ 126.726052][ T6476] genl_rcv+0x28/0x40 [ 126.727161][ T6476] netlink_unicast+0x53c/0x7f0 [ 126.728466][ T6476] ? __pfx_netlink_unicast+0x10/0x10 [ 126.729894][ T6476] ? __phys_addr_symbol+0x30/0x80 [ 126.731288][ T6476] ? __check_object_size+0x488/0x710 [ 126.732713][ T6476] netlink_sendmsg+0x8b8/0xd70 [ 126.733995][ T6476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.735420][ T6476] ? lock_acquire+0x2f/0xb0 [ 126.736672][ T6476] ____sys_sendmsg+0x9ae/0xb40 [ 126.737966][ T6476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.739575][ T6476] ? get_compat_msghdr+0x11b/0x170 [ 126.740979][ T6476] ? __pfx___lock_acquire+0x10/0x10 [ 126.742427][ T6476] ___sys_sendmsg+0x135/0x1e0 [ 126.743806][ T6476] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.745375][ T6476] ? lock_acquire+0x2f/0xb0 [ 126.746585][ T6476] ? __fget_files+0x40/0x3f0 [ 126.747872][ T6476] ? fdget+0x176/0x210 [ 126.748981][ T6476] __sys_sendmsg+0x117/0x1f0 [ 126.750193][ T6476] ? __pfx___sys_sendmsg+0x10/0x10 [ 126.751563][ T6476] ? __fget_files+0x244/0x3f0 [ 126.752821][ T6476] __do_fast_syscall_32+0x73/0x120 [ 126.754712][ T6476] do_fast_syscall_32+0x32/0x80 [ 126.756326][ T6476] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 126.758115][ T6476] RIP: 0023:0xf741e579 [ 126.759400][ T6476] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 126.765034][ T6476] RSP: 002b:00000000f56e556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 126.767629][ T6476] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000400 [ 126.770236][ T6476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 126.772723][ T6476] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 126.775047][ T6476] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 126.777524][ T6476] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 126.780131][ T6476] [ 127.454659][ T67] Bluetooth: hci4: command 0x0c1a tx timeout [ 127.540652][ T6498] warning: `syz.2.281' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 127.676361][ T6500] xt_hashlimit: max too large, truncated to 1048576 [ 127.692462][ T67] Bluetooth: hci5: command 0x0c1a tx timeout [ 127.772355][ T67] Bluetooth: hci0: command 0x0419 tx timeout [ 127.772386][ T4775] Bluetooth: hci6: command 0x0c1a tx timeout [ 127.772703][ T5352] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.015848][ T6505] netlink: 44 bytes leftover after parsing attributes in process `syz.0.282'. [ 129.380297][ T6525] ieee802154 phy0 wpan0: encryption failed: -22 [ 129.397148][ T6528] netlink: 268 bytes leftover after parsing attributes in process `syz.2.287'. [ 129.592286][ T4775] Bluetooth: hci4: command 0x0c1a tx timeout [ 129.782308][ T4775] Bluetooth: hci5: command 0x0c1a tx timeout [ 129.852373][ T4775] Bluetooth: hci6: command 0x0c1a tx timeout [ 129.853901][ T4775] Bluetooth: hci0: command 0x0419 tx timeout [ 129.855389][ T4775] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.257873][ T6543] netlink: 'syz.0.292': attribute type 1 has an invalid length. [ 130.260459][ T6543] netlink: 9312 bytes leftover after parsing attributes in process `syz.0.292'. [ 130.267623][ T6543] netlink: 'syz.0.292': attribute type 1 has an invalid length. [ 130.525782][ T6543] 9pnet_virtio: no channels available for device syz [ 130.800062][ T6559] FAULT_INJECTION: forcing a failure. [ 130.800062][ T6559] name failslab, interval 1, probability 0, space 0, times 0 [ 130.804210][ T6559] CPU: 2 UID: 0 PID: 6559 Comm: syz.1.297 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 130.807346][ T6559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.810188][ T6559] Call Trace: [ 130.811073][ T6559] [ 130.811851][ T6559] dump_stack_lvl+0x16c/0x1f0 [ 130.813115][ T6559] should_fail_ex+0x497/0x5b0 [ 130.814356][ T6559] ? fs_reclaim_acquire+0xae/0x160 [ 130.815740][ T6559] should_failslab+0xc2/0x120 [ 130.816976][ T6559] kmem_cache_alloc_node_noprof+0x71/0x310 [ 130.818693][ T6559] ? copy_process+0x4a3/0x6f00 [ 130.819979][ T6559] ? _raw_spin_unlock_irq+0x23/0x50 [ 130.821455][ T6559] copy_process+0x4a3/0x6f00 [ 130.822803][ T6559] ? find_held_lock+0x2d/0x110 [ 130.824387][ T6559] ? __pfx_copy_process+0x10/0x10 [ 130.825872][ T6559] ? trace_lock_acquire+0x14a/0x1d0 [ 130.827326][ T6559] kernel_clone+0xfd/0x960 [ 130.828537][ T6559] ? __pfx_kernel_clone+0x10/0x10 [ 130.829849][ T6559] ? __schedule+0xefd/0x5750 [ 130.831077][ T6559] __do_compat_sys_ia32_clone+0xb7/0x100 [ 130.832526][ T6559] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 130.834018][ T6559] __do_fast_syscall_32+0x73/0x120 [ 130.835334][ T6559] do_fast_syscall_32+0x32/0x80 [ 130.836547][ T6559] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.838087][ T6559] RIP: 0023:0xf7fc5579 [ 130.839093][ T6559] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 130.843656][ T6559] RSP: 002b:00000000f574651c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 130.845697][ T6559] RAX: ffffffffffffffda RBX: 0000000062000000 RCX: 0000000000000000 [ 130.847615][ T6559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.849642][ T6559] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.851710][ T6559] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 130.853857][ T6559] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.855942][ T6559] [ 130.959581][ T39] audit: type=1326 audit(1727859072.232:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.297" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 130.965427][ T39] audit: type=1326 audit(1727859072.232:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.297" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 130.970887][ T39] audit: type=1326 audit(1727859072.232:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.297" exe="/syz-executor" sig=0 arch=40000003 syscall=271 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 130.981265][ T39] audit: type=1326 audit(1727859072.232:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.297" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 130.983309][ T6561] veth0_vlan: left promiscuous mode [ 130.989459][ T39] audit: type=1326 audit(1727859072.232:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.297" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 130.998019][ T39] audit: type=1326 audit(1727859072.252:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.297" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 131.022594][ T39] audit: type=1326 audit(1727859072.252:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.297" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 131.029939][ T39] audit: type=1326 audit(1727859072.252:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.297" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 131.041460][ T39] audit: type=1326 audit(1727859072.252:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.297" exe="/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 131.612671][ T67] Bluetooth: hci4: command 0x0c1a tx timeout [ 131.733758][ T39] audit: type=1326 audit(1727859073.002:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.3.300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 131.853092][ T67] Bluetooth: hci5: command 0x0c1a tx timeout [ 131.932443][ T67] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.934599][ T67] Bluetooth: hci0: command 0x0419 tx timeout [ 131.936615][ T67] Bluetooth: hci6: command 0x0c1a tx timeout [ 132.177971][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.180364][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.832993][ T6595] overlayfs: overlapping lowerdir path [ 132.838731][ T2786] IPVS: starting estimator thread 0... [ 132.922559][ T6596] IPVS: using max 16 ests per chain, 38400 per kthread [ 133.047459][ T6600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.292584][ T2786] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 133.366831][ T6602] fuse: Unknown parameter '‰Z†|¡åW‹Íf‰zåƒ"m #EÞVú“G¹²^‡ç€“9§(!' [ 133.462952][ T2786] usb 7-1: Using ep0 maxpacket: 8 [ 133.465971][ T2786] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 133.468240][ T2786] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 133.473832][ T2786] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 133.478931][ T2786] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 133.489232][ T2786] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 133.497793][ T2786] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 133.500947][ T2786] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 133.508268][ T2786] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 133.510734][ T2786] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 133.515133][ T2786] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 133.517526][ T2786] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 133.520512][ T2786] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 133.523913][ T2786] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 133.527058][ T2786] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 133.530722][ T2786] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 133.534367][ T2786] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 133.541278][ T2786] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 133.543799][ T2786] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 133.547416][ T2786] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 133.550360][ T2786] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 133.554126][ T2786] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 133.567198][ T2786] usb 7-1: string descriptor 0 read error: -22 [ 133.568886][ T2786] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 133.574003][ T2786] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.591822][ T2786] adutux 7-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 133.829898][ T5352] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 133.832125][ T5381] usb 7-1: USB disconnect, device number 6 [ 133.832370][ T5352] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 134.012674][ T5352] Bluetooth: hci0: command 0x0419 tx timeout [ 135.008822][ T6625] block device autoloading is deprecated and will be removed. [ 135.167100][ T6624] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.169559][ T6624] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.171861][ T6624] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.174223][ T6624] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.179492][ T6624] vxlan0: entered promiscuous mode [ 135.180911][ T6624] vxlan0: entered allmulticast mode [ 135.191637][ T6624] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.193988][ T6624] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.196269][ T6624] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.198611][ T6624] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.627992][ T6639] macvlan0: entered allmulticast mode [ 135.630630][ T6639] veth1_vlan: entered allmulticast mode [ 135.635452][ T6639] netlink: 24 bytes leftover after parsing attributes in process `syz.3.317'. [ 135.640311][ T6639] veth1_vlan: left allmulticast mode [ 135.655882][ T6639] macvlan0 (unregistering): left allmulticast mode [ 135.808849][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 136.350613][ T30] IPVS: starting estimator thread 0... [ 136.442437][ T6653] IPVS: using max 35 ests per chain, 84000 per kthread [ 136.518719][ T6654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.772344][ T58] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 136.922362][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 136.928662][ T58] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 136.931587][ T58] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 136.934839][ T58] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 136.937364][ T58] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 136.940549][ T58] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 136.944309][ T58] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 136.947590][ T58] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 136.968851][ T58] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 136.974185][ T58] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 136.979397][ T58] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 136.985238][ T58] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 136.989601][ T58] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 136.994785][ T58] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 136.999366][ T58] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 137.016782][ T58] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 137.019750][ T58] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 137.023295][ T58] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 137.026830][ T58] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 137.029888][ T58] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 137.033156][ T58] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 137.036428][ T58] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 137.058634][ T58] usb 5-1: string descriptor 0 read error: -22 [ 137.060526][ T58] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 137.065466][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.080998][ T58] adutux 5-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 137.292318][ T58] usb 5-1: USB disconnect, device number 6 [ 139.175616][ T6691] netlink: 'syz.2.333': attribute type 10 has an invalid length. [ 139.603345][ T6699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.826473][ T5352] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 139.861944][ T6705] syz.1.337 (6705): drop_caches: 2 [ 139.872560][ T64] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 139.894612][ T6708] syz.1.337 (6708): drop_caches: 2 [ 139.897019][ T6708] syz.1.337 (6708): drop_caches: 2 [ 139.902004][ T6705] syz.1.337 (6705): drop_caches: 2 [ 139.911704][ T6708] syz.1.337 (6708): drop_caches: 2 [ 139.919773][ T6708] syz.1.337 (6708): drop_caches: 2 [ 140.022434][ T64] usb 7-1: Using ep0 maxpacket: 8 [ 140.037743][ T64] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 140.040777][ T64] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 140.043812][ T64] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 140.046903][ T64] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 140.050932][ T64] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 140.054446][ T64] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 140.057360][ T64] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 140.060919][ T64] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 140.064055][ T64] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 140.066786][ T64] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 140.069855][ T64] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 140.074697][ T64] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 140.078583][ T64] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 140.102796][ T64] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 140.107570][ T64] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 140.110686][ T64] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 140.116727][ T64] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 140.123113][ T64] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 140.127566][ T64] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 140.131155][ T64] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 140.135346][ T64] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 140.141512][ T64] usb 7-1: string descriptor 0 read error: -22 [ 140.144450][ T64] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 140.147697][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.163087][ T64] adutux 7-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 140.204758][ T39] kauditd_printk_skb: 39 callbacks suppressed [ 140.204776][ T39] audit: type=1326 audit(1727859081.482:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.0.340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 140.205048][ T6713] FAULT_INJECTION: forcing a failure. [ 140.205048][ T6713] name failslab, interval 1, probability 0, space 0, times 0 [ 140.207059][ T39] audit: type=1326 audit(1727859081.482:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.0.340" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 140.214466][ T6713] CPU: 2 UID: 0 PID: 6713 Comm: syz.0.340 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 140.222310][ T39] audit: type=1326 audit(1727859081.482:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.0.340" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 140.225276][ T6713] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.225289][ T6713] Call Trace: [ 140.232374][ T39] audit: type=1326 audit(1727859081.482:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.0.340" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 140.235750][ T6713] [ 140.249348][ T6713] dump_stack_lvl+0x16c/0x1f0 [ 140.251101][ T6713] should_fail_ex+0x497/0x5b0 [ 140.252742][ T6713] ? fs_reclaim_acquire+0xae/0x160 [ 140.254441][ T6713] should_failslab+0xc2/0x120 [ 140.255824][ T6713] kmem_cache_alloc_node_noprof+0x71/0x310 [ 140.257870][ T6713] ? __alloc_skb+0x2b3/0x380 [ 140.259512][ T6713] __alloc_skb+0x2b3/0x380 [ 140.261177][ T6713] ? __pfx___alloc_skb+0x10/0x10 [ 140.262967][ T6713] ? rcu_watching_snap_stopped_since+0x70/0x110 [ 140.265159][ T6713] ? trace_kmem_cache_alloc+0x2d/0xe0 [ 140.267021][ T6713] ? kmem_cache_alloc_noprof+0x174/0x2f0 [ 140.268937][ T6713] ? audit_log_start+0x2bc/0x7e0 [ 140.270679][ T6713] audit_log_start+0x2e1/0x7e0 [ 140.271958][ T6713] ? __pfx_audit_log_start+0x10/0x10 [ 140.273449][ T6713] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 140.274852][ T6713] ? migrate_enable+0x1ef/0x260 [ 140.276132][ T6713] ? __pfx_migrate_enable+0x10/0x10 [ 140.277467][ T6713] audit_seccomp+0x61/0x280 [ 140.278635][ T6713] __seccomp_filter+0x816/0xf40 [ 140.279883][ T6713] ? __pfx___seccomp_filter+0x10/0x10 [ 140.281401][ T6713] ? __pfx___ia32_compat_sys_timer_create+0x10/0x10 [ 140.283565][ T6713] ? ksys_write+0x1ad/0x260 [ 140.285196][ T6713] __secure_computing+0x26c/0x3f0 [ 140.287258][ T6713] syscall_trace_enter+0x8b/0x240 [ 140.289050][ T6713] __do_fast_syscall_32+0xc2/0x120 [ 140.290782][ T6713] do_fast_syscall_32+0x32/0x80 [ 140.292558][ T6713] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.295031][ T6713] RIP: 0023:0xf741e579 [ 140.296485][ T6713] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 140.303467][ T6713] RSP: 002b:00000000f57065a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 140.305885][ T6713] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5706620 [ 140.308549][ T6713] RDX: 000000000000000f RSI: 00000000f740bff4 RDI: 0000000000000000 [ 140.311357][ T6713] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 140.314106][ T6713] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 140.316863][ T6713] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.319599][ T6713] [ 140.325999][ T6713] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 140.328035][ T6713] audit: out of memory in audit_log_start [ 140.330710][ T39] audit: type=1326 audit(1727859081.602:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.0.340" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 140.355191][ T39] audit: type=1326 audit(1727859081.602:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.0.340" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 140.364111][ T39] audit: type=1326 audit(1727859081.602:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.0.340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 140.376513][ T64] usb 7-1: USB disconnect, device number 7 [ 140.379530][ T39] audit: type=1326 audit(1727859081.602:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.0.340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 140.537301][ T6729] FAULT_INJECTION: forcing a failure. [ 140.537301][ T6729] name failslab, interval 1, probability 0, space 0, times 0 [ 140.541459][ T6729] CPU: 2 UID: 0 PID: 6729 Comm: syz.1.346 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 140.545077][ T6729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.548889][ T6729] Call Trace: [ 140.550091][ T6729] [ 140.551155][ T6729] dump_stack_lvl+0x16c/0x1f0 [ 140.552870][ T6729] should_fail_ex+0x497/0x5b0 [ 140.554597][ T6729] ? fs_reclaim_acquire+0xae/0x160 [ 140.556371][ T6729] should_failslab+0xc2/0x120 [ 140.558080][ T6729] __kmalloc_noprof+0xcb/0x410 [ 140.559919][ T6729] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 140.562180][ T6729] tomoyo_realpath_from_path+0xbf/0x710 [ 140.564400][ T6729] ? tomoyo_path_number_perm+0x232/0x5b0 [ 140.566395][ T6729] tomoyo_path_number_perm+0x245/0x5b0 [ 140.568207][ T6729] ? tomoyo_path_number_perm+0x232/0x5b0 [ 140.570264][ T6729] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 140.572502][ T6729] ? trace_lock_acquire+0x14a/0x1d0 [ 140.574340][ T6729] ? lock_acquire+0x2f/0xb0 [ 140.575915][ T6729] ? __fget_files+0x40/0x3f0 [ 140.577564][ T6729] ? __fget_files+0x244/0x3f0 [ 140.579199][ T6729] security_file_ioctl_compat+0x9b/0x240 [ 140.581168][ T6729] __do_compat_sys_ioctl+0x52/0x2b0 [ 140.583103][ T6729] __do_fast_syscall_32+0x73/0x120 [ 140.585060][ T6729] do_fast_syscall_32+0x32/0x80 [ 140.586859][ T6729] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.589142][ T6729] RIP: 0023:0xf7fc5579 [ 140.590542][ T6729] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 140.597068][ T6729] RSP: 002b:00000000f574656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 140.600274][ T6729] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 140.603035][ T6729] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.605726][ T6729] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 140.608423][ T6729] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 140.611205][ T6729] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.614100][ T6729] [ 140.619802][ T6729] ERROR: Out of memory at tomoyo_realpath_from_path. [ 140.640757][ T6730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.341'. [ 142.459486][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.353'. [ 142.861532][ T6760] bond1: entered promiscuous mode [ 143.583046][ T5544] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 143.742405][ T5544] usb 5-1: Using ep0 maxpacket: 8 [ 143.748792][ T5544] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 143.751542][ T5544] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.755517][ T5544] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 143.767425][ T5544] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 143.771924][ T5544] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.776923][ T5544] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 143.780223][ T5544] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.782585][ T35] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 143.952491][ T35] usb 8-1: Using ep0 maxpacket: 8 [ 143.959572][ T35] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 143.965404][ T35] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.968921][ T35] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 143.972609][ T35] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 143.976086][ T35] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.980707][ T35] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 143.989336][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.080122][ T5544] usb 5-1: GET_CAPABILITIES returned 0 [ 144.085729][ T5544] usbtmc 5-1:16.0: can't read capabilities [ 144.220505][ T35] usb 8-1: GET_CAPABILITIES returned 0 [ 144.224972][ T35] usbtmc 8-1:16.0: can't read capabilities [ 144.474769][ T35] usb 8-1: USB disconnect, device number 2 [ 144.532075][ T5544] usb 5-1: USB disconnect, device number 7 [ 145.549701][ T58] IPVS: starting estimator thread 0... [ 145.653291][ T6807] IPVS: using max 24 ests per chain, 57600 per kthread [ 146.193452][ T5544] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 146.342408][ T5544] usb 7-1: Using ep0 maxpacket: 8 [ 146.345076][ T5544] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 146.347344][ T5544] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 146.350673][ T5544] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 146.354411][ T5544] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 146.357921][ T5544] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.361832][ T5544] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 146.365254][ T5544] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.578210][ T5544] usb 7-1: GET_CAPABILITIES returned 0 [ 146.580135][ T5544] usbtmc 7-1:16.0: can't read capabilities [ 146.693446][ T6817] ceph: No mds server is up or the cluster is laggy [ 146.794996][ T5381] usb 7-1: USB disconnect, device number 8 [ 147.620545][ T6844] netlink: 'syz.0.378': attribute type 27 has an invalid length. [ 147.771299][ T6844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.780665][ T6844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.829904][ T6844] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.833018][ T6844] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.835340][ T6844] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.837776][ T6844] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.871252][ T6844] batadv0: left promiscuous mode [ 148.121799][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 148.121809][ T39] audit: type=1326 audit(1727859089.392:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.1.382" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 148.130829][ T39] audit: type=1326 audit(1727859089.402:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.1.382" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 148.139039][ T39] audit: type=1326 audit(1727859089.412:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.1.382" exe="/syz-executor" sig=0 arch=40000003 syscall=45 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 148.146583][ T39] audit: type=1326 audit(1727859089.412:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.1.382" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 148.152203][ T39] audit: type=1326 audit(1727859089.422:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.1.382" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 148.160897][ T39] audit: type=1326 audit(1727859089.432:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.1.382" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 148.169220][ T39] audit: type=1326 audit(1727859089.432:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.1.382" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 148.177182][ T39] audit: type=1326 audit(1727859089.432:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.1.382" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 148.193586][ T39] audit: type=1326 audit(1727859089.442:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.1.382" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 148.201468][ T39] audit: type=1326 audit(1727859089.462:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.1.382" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 148.917558][ T6870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.385'. [ 149.114976][ T5424] udevd[5424]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 149.248570][ T6884] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 149.365723][ T6881] netlink: 9 bytes leftover after parsing attributes in process `syz.3.387'. [ 149.398364][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'. [ 149.415651][ T6892] netlink: 'syz.0.391': attribute type 10 has an invalid length. [ 149.419871][ T6892] wlan1: mtu less than device minimum [ 149.443053][ T5352] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 150.204706][ T6899] FAULT_INJECTION: forcing a failure. [ 150.204706][ T6899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.212099][ T6899] CPU: 1 UID: 0 PID: 6899 Comm: syz.3.394 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 150.215803][ T6899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 150.219218][ T6899] Call Trace: [ 150.220356][ T6899] [ 150.221488][ T6899] dump_stack_lvl+0x16c/0x1f0 [ 150.223141][ T6899] should_fail_ex+0x497/0x5b0 [ 150.224861][ T6899] _copy_from_user+0x30/0xf0 [ 150.226515][ T6899] input_event_from_user+0x22d/0x3b0 [ 150.228371][ T6899] ? __pfx_input_event_from_user+0x10/0x10 [ 150.230375][ T6899] ? input_inject_event+0x193/0x370 [ 150.232255][ T6899] evdev_write+0x377/0x750 [ 150.233864][ T6899] ? __pfx_evdev_write+0x10/0x10 [ 150.235590][ T6899] ? bpf_lsm_file_permission+0x9/0x10 [ 150.237454][ T6899] ? security_file_permission+0x71/0x210 [ 150.239380][ T6899] ? __pfx_evdev_write+0x10/0x10 [ 150.241140][ T6899] vfs_write+0x28e/0x1140 [ 150.242675][ T6899] ? __fget_files+0x23a/0x3f0 [ 150.244348][ T6899] ? __pfx_lock_release+0x10/0x10 [ 150.246084][ T6899] ? trace_lock_acquire+0x14a/0x1d0 [ 150.247896][ T6899] ? __pfx_vfs_write+0x10/0x10 [ 150.249605][ T6899] ? lock_acquire+0x2f/0xb0 [ 150.251227][ T6899] ? __fget_files+0x40/0x3f0 [ 150.252520][ T6899] ? __fget_files+0x244/0x3f0 [ 150.253786][ T6899] ksys_write+0x1fa/0x260 [ 150.254918][ T6899] ? __pfx_ksys_write+0x10/0x10 [ 150.256314][ T6899] __do_fast_syscall_32+0x73/0x120 [ 150.258088][ T6899] do_fast_syscall_32+0x32/0x80 [ 150.259822][ T6899] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.262039][ T6899] RIP: 0023:0xf744e579 [ 150.263678][ T6899] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 150.269755][ T6899] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 150.271989][ T6899] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 150.274075][ T6899] RDX: 0000000000000918 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.276470][ T6899] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.279308][ T6899] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 150.282233][ T6899] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.285159][ T6899] [ 150.649080][ T6906] netlink: 56 bytes leftover after parsing attributes in process `syz.2.397'. [ 172.094790][ T67] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.382341][ T67] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.426008][ T4775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 172.432950][ T4775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.443325][ T5351] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.450574][ T5351] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.450624][ T5346] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 172.453568][ T5351] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.456654][ T5346] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 172.459151][ T5351] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.459669][ T5346] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 172.461655][ T5351] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 172.466118][ T5351] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.478832][ T5351] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 172.514215][ T4775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 172.525017][ T5351] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 172.525549][ T4775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.531598][ T5351] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 172.535446][ T5351] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 172.552768][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 172.566020][ T5351] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 172.582060][ T5351] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 172.584382][ T5351] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 172.587950][ T5351] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 172.654773][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.793107][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.945514][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.955089][ T6918] chnl_net:caif_netlink_parms(): no params data found [ 172.987860][ T6914] chnl_net:caif_netlink_parms(): no params data found [ 173.033895][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.041732][ T6912] chnl_net:caif_netlink_parms(): no params data found [ 173.164886][ T6916] chnl_net:caif_netlink_parms(): no params data found [ 173.196447][ T6918] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.198592][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.200701][ T6918] bridge_slave_0: entered allmulticast mode [ 173.206411][ T6918] bridge_slave_0: entered promiscuous mode [ 173.273052][ T6918] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.275837][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.280033][ T6918] bridge_slave_1: entered allmulticast mode [ 173.288491][ T6918] bridge_slave_1: entered promiscuous mode [ 173.392672][ T6914] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.394698][ T6914] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.396684][ T6914] bridge_slave_0: entered allmulticast mode [ 173.400812][ T6914] bridge_slave_0: entered promiscuous mode [ 173.418038][ T6918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.420553][ T6912] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.424348][ T6912] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.427011][ T6912] bridge_slave_0: entered allmulticast mode [ 173.430015][ T6912] bridge_slave_0: entered promiscuous mode [ 173.433686][ T6914] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.435727][ T6914] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.438169][ T6914] bridge_slave_1: entered allmulticast mode [ 173.442117][ T6914] bridge_slave_1: entered promiscuous mode [ 173.515463][ T6918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.518097][ T6912] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.520033][ T6912] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.521998][ T6912] bridge_slave_1: entered allmulticast mode [ 173.525806][ T6912] bridge_slave_1: entered promiscuous mode [ 173.595883][ T6916] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.597855][ T6916] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.600143][ T6916] bridge_slave_0: entered allmulticast mode [ 173.604208][ T6916] bridge_slave_0: entered promiscuous mode [ 173.663603][ T6914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.667536][ T6914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.681704][ T6916] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.689159][ T6916] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.691807][ T6916] bridge_slave_1: entered allmulticast mode [ 173.700554][ T6916] bridge_slave_1: entered promiscuous mode [ 173.731739][ T6918] team0: Port device team_slave_0 added [ 173.757737][ T6912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.763425][ T6912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.784333][ T12] bridge_slave_1: left allmulticast mode [ 173.785845][ T12] bridge_slave_1: left promiscuous mode [ 173.787362][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.799462][ T12] bridge_slave_0: left allmulticast mode [ 173.801503][ T12] bridge_slave_0: left promiscuous mode [ 173.804055][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.181922][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.190218][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.204996][ T12] bond0 (unregistering): Released all slaves [ 174.241229][ T6918] team0: Port device team_slave_1 added [ 174.365342][ T6916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.418264][ T6914] team0: Port device team_slave_0 added [ 174.449250][ T6916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.457085][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.459257][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.467250][ T6918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.486269][ T6912] team0: Port device team_slave_0 added [ 174.493757][ T5346] Bluetooth: hci0: command tx timeout [ 174.496641][ T6914] team0: Port device team_slave_1 added [ 174.536348][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.538279][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.546726][ T6918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.555448][ T6912] team0: Port device team_slave_1 added [ 174.572582][ T5346] Bluetooth: hci2: command tx timeout [ 174.595179][ T6916] team0: Port device team_slave_0 added [ 174.649621][ T6916] team0: Port device team_slave_1 added [ 174.653408][ T5346] Bluetooth: hci1: command tx timeout [ 174.656015][ T5346] Bluetooth: hci3: command tx timeout [ 174.676825][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.678707][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.686278][ T6912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.691287][ T6914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.694466][ T6914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.703080][ T6914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.756604][ T6918] hsr_slave_0: entered promiscuous mode [ 174.760353][ T6918] hsr_slave_1: entered promiscuous mode [ 174.772618][ T6918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.775418][ T6918] Cannot create hsr debugfs directory [ 174.785317][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.788174][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.798892][ T6912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.816349][ T6914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.818975][ T6914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.829555][ T6914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.931875][ T6916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.935025][ T6916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.944952][ T6916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.016913][ T6914] hsr_slave_0: entered promiscuous mode [ 175.020252][ T6914] hsr_slave_1: entered promiscuous mode [ 175.028152][ T6914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.030988][ T6914] Cannot create hsr debugfs directory [ 175.037589][ T12] hsr_slave_0: left promiscuous mode [ 175.041778][ T12] hsr_slave_1: left promiscuous mode [ 175.052709][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.056000][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.059749][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.062530][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.121529][ T12] veth1_macvtap: left promiscuous mode [ 175.124004][ T12] veth0_macvtap: left promiscuous mode [ 175.126257][ T12] veth1_vlan: left promiscuous mode [ 176.161355][ T12] team0 (unregistering): Port device team_slave_1 removed [ 176.273085][ T12] team0 (unregistering): Port device team_slave_0 removed [ 176.582385][ T5351] Bluetooth: hci0: command tx timeout [ 176.652402][ T5351] Bluetooth: hci2: command tx timeout [ 176.732697][ T5346] Bluetooth: hci1: command tx timeout [ 176.734603][ T5351] Bluetooth: hci3: command tx timeout [ 176.977447][ T6916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.979870][ T6916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.988972][ T6916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.027546][ T6912] hsr_slave_0: entered promiscuous mode [ 177.030147][ T6912] hsr_slave_1: entered promiscuous mode [ 177.032909][ T6912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.035325][ T6912] Cannot create hsr debugfs directory [ 177.204430][ T6916] hsr_slave_0: entered promiscuous mode [ 177.207160][ T6916] hsr_slave_1: entered promiscuous mode [ 177.218313][ T6916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.220497][ T6916] Cannot create hsr debugfs directory [ 177.421373][ T6914] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.538228][ T6914] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.569826][ T12] IPVS: stop unused estimator thread 0... [ 177.612022][ T6914] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.692562][ T6914] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.819573][ T6918] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.953867][ T6918] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.071414][ T6918] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.173717][ T6918] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.323772][ T12] bridge_slave_1: left allmulticast mode [ 178.325410][ T12] bridge_slave_1: left promiscuous mode [ 178.327392][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.331539][ T12] bridge_slave_0: left allmulticast mode [ 178.333755][ T12] bridge_slave_0: left promiscuous mode [ 178.336194][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.341091][ T12] bridge_slave_1: left allmulticast mode [ 178.342912][ T12] bridge_slave_1: left promiscuous mode [ 178.344543][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.349034][ T12] bridge_slave_0: left allmulticast mode [ 178.351141][ T12] bridge_slave_0: left promiscuous mode [ 178.353723][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.357333][ T12] bridge_slave_1: left allmulticast mode [ 178.358853][ T12] bridge_slave_1: left promiscuous mode [ 178.360388][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.369749][ T12] bridge_slave_0: left allmulticast mode [ 178.371275][ T12] bridge_slave_0: left promiscuous mode [ 178.374235][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.623299][ T12] erspan0 (unregistering): left promiscuous mode [ 178.662408][ T5351] Bluetooth: hci0: command tx timeout [ 178.742357][ T5351] Bluetooth: hci2: command tx timeout [ 178.822730][ T5351] Bluetooth: hci3: command tx timeout [ 178.822761][ T5346] Bluetooth: hci1: command tx timeout [ 179.067704][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.075451][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.081732][ T12] bond0 (unregistering): Released all slaves [ 179.178879][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.184103][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.190925][ T12] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 179.195961][ T12] bond0 (unregistering): Released all slaves [ 179.290666][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.297367][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.301768][ T12] bond0 (unregistering): Released all slaves [ 179.309211][ T12] bond1 (unregistering): Released all slaves [ 179.390777][ T6918] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 179.401903][ T6918] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 179.409643][ T6918] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 179.415855][ T6918] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 179.570149][ T12] tipc: Disabling bearer [ 179.582681][ T12] tipc: Left network mode [ 179.615774][ T6918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.621786][ T6918] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.684818][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.686813][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.698689][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.701311][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.929766][ T6912] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 179.939212][ T6912] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 180.050435][ T6912] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 180.057461][ T6912] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 180.085384][ T6918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.294349][ T6918] veth0_vlan: entered promiscuous mode [ 180.300340][ T6918] veth1_vlan: entered promiscuous mode [ 180.419368][ T6918] veth0_macvtap: entered promiscuous mode [ 180.437975][ T6912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.451282][ T12] hsr_slave_0: left promiscuous mode [ 180.457863][ T12] hsr_slave_1: left promiscuous mode [ 180.460271][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.465241][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.468339][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.470953][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.474697][ T12] batadv_slave_1: left promiscuous mode [ 180.480787][ T12] hsr_slave_0: left promiscuous mode [ 180.484816][ T12] hsr_slave_1: left promiscuous mode [ 180.493314][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.496774][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.503226][ T12] hsr_slave_0: left promiscuous mode [ 180.505760][ T12] hsr_slave_1: left promiscuous mode [ 180.508568][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.510551][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.513794][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.515727][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.570150][ T12] veth1_macvtap: left promiscuous mode [ 180.571768][ T12] veth0_macvtap: left promiscuous mode [ 180.574142][ T12] veth1_vlan: left promiscuous mode [ 180.576237][ T12] veth0_vlan: left promiscuous mode [ 180.580633][ T12] veth1_macvtap: left promiscuous mode [ 180.582165][ T12] veth0_macvtap: left promiscuous mode [ 180.584030][ T12] veth1_vlan: left promiscuous mode [ 180.585566][ T12] veth0_vlan: left promiscuous mode [ 180.742398][ T5346] Bluetooth: hci0: command tx timeout [ 180.822461][ T5346] Bluetooth: hci2: command tx timeout [ 180.893381][ T5346] Bluetooth: hci3: command tx timeout [ 180.905046][ T5346] Bluetooth: hci1: command tx timeout [ 181.511023][ T12] team0 (unregistering): Port device team_slave_1 removed [ 181.610847][ T12] team0 (unregistering): Port device team_slave_0 removed [ 182.851593][ T12] team0 (unregistering): Port device team_slave_1 removed [ 182.947231][ T12] team0 (unregistering): Port device team_slave_0 removed [ 184.268677][ T12] team0 (unregistering): Port device team_slave_1 removed [ 184.390134][ T12] team0 (unregistering): Port device team_slave_0 removed [ 184.940672][ T6918] veth1_macvtap: entered promiscuous mode [ 184.950287][ T6912] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.959664][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.969557][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.981427][ T6918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.985296][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.988045][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.992780][ T6918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.008462][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.010146][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.016058][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.017833][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.038431][ T6918] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.040793][ T6918] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.043679][ T6918] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.046014][ T6918] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.146935][ T6916] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 185.161176][ T6916] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 185.180675][ T6916] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 185.201234][ T6916] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 185.238237][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.240234][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.251824][ T6912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.296570][ T6914] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 185.301065][ T6914] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 185.304881][ T6912] veth0_vlan: entered promiscuous mode [ 185.311979][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.312670][ T6914] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 185.315457][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.328562][ T6914] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 185.337128][ T6912] veth1_vlan: entered promiscuous mode [ 185.448145][ T6912] veth0_macvtap: entered promiscuous mode [ 185.458195][ T6912] veth1_macvtap: entered promiscuous mode [ 185.468040][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.471642][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.475053][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.478546][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.483168][ T6912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.487570][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.491156][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.494784][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.498863][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.503691][ T6912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.510106][ T6912] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.513360][ T6912] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.516494][ T6912] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.519472][ T6912] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.573640][ T7040] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 185.576064][ T7040] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 185.600285][ T7040] vhci_hcd vhci_hcd.0: Device attached [ 185.600897][ T6916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.660876][ T6916] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.677095][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.679101][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.706628][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.708567][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.730827][ T6914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.775318][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.777926][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.792570][ T829] vhci_hcd: vhci_device speed not set [ 185.834087][ T6916] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 185.836709][ T6916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.976841][ T6916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.010533][ T6916] veth0_vlan: entered promiscuous mode [ 186.017858][ T6916] veth1_vlan: entered promiscuous mode [ 186.028544][ T6916] veth0_macvtap: entered promiscuous mode [ 186.032083][ T6916] veth1_macvtap: entered promiscuous mode [ 186.046534][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.049226][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.051938][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.055307][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.057831][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.060537][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.065275][ T6916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.068391][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.071089][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.077296][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.080024][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.083604][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.086551][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.090608][ T6916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.095167][ T6916] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.097432][ T6916] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.099721][ T6916] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.101951][ T6916] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.129989][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.132092][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.148828][ T829] usb 17-1: new full-speed USB device number 2 using vhci_hcd [ 186.151731][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.151895][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.154028][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.160997][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.187404][ T6914] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.226343][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.228259][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.239458][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.241313][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.349178][ T7064] tmpfs: Bad value for 'mpol' [ 186.350464][ T39] kauditd_printk_skb: 10 callbacks suppressed [ 186.350511][ T39] audit: type=1804 audit(1727859127.622:161): pid=7064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.401" name="/newroot/0/file0/file0" dev="9p" ino=36049769 res=1 errno=0 [ 186.447296][ T6914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.474735][ T6914] veth0_vlan: entered promiscuous mode [ 186.480070][ T6914] veth1_vlan: entered promiscuous mode [ 186.513935][ T6914] veth0_macvtap: entered promiscuous mode [ 186.520341][ T6914] veth1_macvtap: entered promiscuous mode [ 186.548547][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.556010][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.573476][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.587585][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.596369][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.598976][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.601485][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.612065][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.632987][ T6914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.644828][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.647528][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.650137][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.662594][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.665178][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.682449][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.685078][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.702387][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.711603][ T6914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.721420][ T6914] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.742778][ T6914] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.745204][ T6914] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.747575][ T6914] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.798480][ T7042] vhci_hcd: connection reset by peer [ 186.802669][ T11] vhci_hcd: stop threads [ 186.803982][ T11] vhci_hcd: release socket [ 186.805912][ T11] vhci_hcd: disconnect device [ 186.947076][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.949593][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.976137][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.978688][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.611454][ T12] IPVS: stop unused estimator thread 0... [ 187.638507][ T12] IPVS: stop unused estimator thread 0... [ 188.756292][ T7121] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xc0 pfn:0x6d956 [ 188.759268][ T7121] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 188.761327][ T7121] raw: 04fff00000000000 ffffea0001b655c8 ffffea0001b056c8 0000000000000000 [ 188.767334][ T7121] raw: 00000000000000c0 0000000000000000 00000000ffffffff 0000000000000000 [ 188.771162][ T7121] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 188.775814][ T7121] page_owner tracks the page as freed [ 188.781361][ T7121] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 7106, tgid 7106 (dhcpcd-run-hook), ts 187627687109, free_ts 188213418724 [ 188.791453][ T7121] post_alloc_hook+0x2d1/0x350 [ 188.803343][ T7121] get_page_from_freelist+0x101e/0x3070 [ 188.806812][ T7121] __alloc_pages_noprof+0x223/0x25c0 [ 188.808796][ T7121] alloc_pages_mpol_noprof+0x2c9/0x610 [ 188.815914][ T7121] folio_alloc_mpol_noprof+0x36/0xd0 [ 188.818099][ T7121] vma_alloc_folio_noprof+0xee/0x1b0 [ 188.821565][ T7121] do_wp_page+0x2012/0x4930 [ 188.823946][ T7121] __handle_mm_fault+0x1a93/0x2a10 [ 188.826259][ T7121] handle_mm_fault+0x3fa/0xaa0 [ 188.828136][ T7121] do_user_addr_fault+0x60d/0x13f0 [ 188.829912][ T7121] exc_page_fault+0x5c/0xc0 [ 188.831329][ T7121] asm_exc_page_fault+0x26/0x30 [ 188.838333][ T7121] page last free pid 7106 tgid 7106 stack trace: [ 188.840280][ T7121] free_unref_folios+0x956/0x1310 [ 188.841767][ T7121] folios_put_refs+0x551/0x750 [ 188.843940][ T7121] free_pages_and_swap_cache+0x36d/0x510 [ 188.858923][ T7121] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 188.860708][ T7121] tlb_finish_mmu+0x168/0x7b0 [ 188.862125][ T7121] exit_mmap+0x3df/0xb30 [ 188.868340][ T7121] __mmput+0x12a/0x480 [ 188.869821][ T7121] mmput+0x62/0x70 [ 188.871071][ T7121] do_exit+0x9bf/0x2d70 [ 188.873920][ T7121] do_group_exit+0xd3/0x2a0 [ 188.875367][ T7121] __x64_sys_exit_group+0x3e/0x50 [ 188.876895][ T7121] x64_sys_call+0x14a9/0x16a0 [ 188.878875][ T7121] do_syscall_64+0xcd/0x250 [ 188.880525][ T7121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.889269][ T7121] ------------[ cut here ]------------ [ 188.890821][ T7121] kernel BUG at include/linux/mm.h:1444! [ 188.896061][ T7121] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 188.898970][ T7121] CPU: 0 UID: 0 PID: 7121 Comm: syz.1.405 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 188.901805][ T7121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 188.904673][ T7121] RIP: 0010:__iov_iter_get_pages_alloc+0x1d10/0x2230 [ 188.906498][ T7121] Code: b0 8b 48 89 df e8 f0 23 4b fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 40 75 05 fd 48 c7 c6 a0 c6 b0 8b 4c 89 e7 e8 d1 23 4b fd 90 <0f> 0b e8 29 75 05 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 188.911784][ T7121] RSP: 0018:ffffc9000403e010 EFLAGS: 00010283 [ 188.913452][ T7121] RAX: 0000000000026cfb RBX: 0000000000000004 RCX: ffffc900230a1000 [ 188.915633][ T7121] RDX: 0000000000040000 RSI: ffffffff84873a3f RDI: ffff888021ee8444 [ 188.917750][ T7121] RBP: ffffea0001b655b4 R08: 0000000000000001 R09: fffffbfff2d315a6 [ 188.919862][ T7121] R10: ffffffff9698ad37 R11: ffff88802b728a40 R12: ffffea0001b65580 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 188.921998][ T7121] R13: ffff8880665a6c00 R14: 0000000000001000 R15: 0000000000001000 [ 188.924387][ T7121] FS: 0000000000000000(0000) GS:ffff88802b400000(0063) knlGS:00000000f5756b40 [ 188.926782][ T7121] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 188.928843][ T7121] CR2: 0000000034015ff8 CR3: 0000000061558000 CR4: 0000000000352ef0 [ 188.931048][ T7121] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 188.933145][ T7121] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 188.935489][ T7121] Call Trace: [ 188.936418][ T7121] [ 188.937208][ T7121] ? die+0x31/0x80 [ 188.938197][ T7121] ? do_trap+0x232/0x430 [ 188.939310][ T7121] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 188.940923][ T7121] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 188.942550][ T7121] ? do_error_trap+0xf4/0x230 [ 188.943804][ T7121] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 188.945422][ T7121] ? handle_invalid_op+0x34/0x40 [ 188.946699][ T7121] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 188.948297][ T7121] ? exc_invalid_op+0x2e/0x50 [ 188.949546][ T7121] ? asm_exc_invalid_op+0x1a/0x20 [ 188.950868][ T7121] ? __iov_iter_get_pages_alloc+0x1d0f/0x2230 [ 188.952405][ T7121] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 188.954018][ T7121] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 188.955653][ T7121] ? delete_node+0x207/0x8e0 [ 188.956888][ T7121] iov_iter_get_pages_alloc2+0x53/0xf0 [ 188.958305][ T7121] p9_get_mapped_pages.part.0.constprop.0+0x4ca/0x7d0 [ 188.960046][ T7121] ? p9pdu_vwritef+0x368/0x21d0 [ 188.961323][ T7121] ? __pfx_p9_get_mapped_pages.part.0.constprop.0+0x10/0x10 [ 188.963140][ T7121] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 188.964487][ T7121] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 188.965827][ T7121] ? p9_tag_alloc+0x4cc/0x870 [ 188.967009][ T7121] ? reacquire_held_locks+0x464/0x4c0 [ 188.968421][ T7121] p9_virtio_zc_request+0x991/0x1460 [ 188.969806][ T7121] ? p9pdu_writef+0xc4/0x100 [ 188.971011][ T7121] ? __pfx_p9pdu_writef+0x10/0x10 [ 188.972342][ T7121] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 188.973655][ T7121] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 188.975161][ T7121] ? rcu_is_watching+0x12/0xc0 [ 188.976390][ T7121] ? trace_9p_protocol_dump+0x192/0x220 [ 188.977806][ T7121] ? rcu_is_watching+0x12/0xc0 [ 188.979046][ T7121] ? p9_client_prepare_req+0x111/0x4d0 [ 188.980480][ T7121] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 188.982059][ T7121] p9_client_zc_rpc.constprop.0+0x29a/0x880 [ 188.983676][ T7121] ? __pfx_p9_client_zc_rpc.constprop.0+0x10/0x10 [ 188.985360][ T7121] ? kmem_cache_free+0x31d/0x4b0 [ 188.986673][ T7121] ? p9_req_put+0x1c6/0x250 [ 188.987875][ T7121] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 188.989426][ T7121] p9_client_read_once+0x443/0x820 [ 188.990758][ T7121] ? __pfx_p9_client_read_once+0x10/0x10 [ 188.992205][ T7121] ? lockdep_hardirqs_on+0x7c/0x110 [ 188.993529][ T7121] ? __pfx_mark_lock+0x10/0x10 [ 188.994854][ T7121] ? __debug_object_init+0x34a/0x480 [ 188.996260][ T7121] p9_client_read+0x13f/0x1b0 [ 188.997504][ T7121] v9fs_issue_read+0x115/0x310 [ 188.998801][ T7121] ? __pfx_v9fs_issue_read+0x10/0x10 [ 189.000224][ T7121] ? __local_bh_enable_ip+0xa4/0x120 [ 189.001638][ T7121] netfs_read_to_pagecache+0x5c9/0x9a0 [ 189.003042][ T7121] netfs_readahead+0x7fa/0xaa0 [ 189.004250][ T7121] ? __pfx_netfs_readahead+0x10/0x10 [ 189.005573][ T7121] read_pages+0x1a8/0xd80 [ 189.006686][ T7121] ? __folio_batch_add_and_move+0x689/0xc60 [ 189.008155][ T7121] ? __folio_batch_add_and_move+0x612/0xc60 [ 189.009632][ T7121] ? __pfx_read_pages+0x10/0x10 [ 189.010854][ T7121] ? find_held_lock+0x2d/0x110 [ 189.012049][ T7121] page_cache_ra_unbounded+0x3c0/0x6c0 [ 189.013401][ T7121] page_cache_ra_order+0x7d9/0xc90 [ 189.014790][ T7121] ? page_cache_async_ra+0x5fa/0x820 [ 189.016117][ T7121] page_cache_async_ra+0x5cb/0x820 [ 189.017406][ T7121] filemap_get_pages+0x367/0x1be0 [ 189.018673][ T7121] ? lockdep_hardirqs_on+0x7c/0x110 [ 189.019992][ T7121] ? __pfx_filemap_get_pages+0x10/0x10 [ 189.021355][ T7121] ? __pfx___might_resched+0x10/0x10 [ 189.022669][ T7121] ? __pfx_mark_lock+0x10/0x10 [ 189.023934][ T7121] filemap_read+0x3a9/0xd00 [ 189.025075][ T7121] ? __pfx___schedule+0x10/0x10 [ 189.026305][ T7121] ? __pfx_filemap_read+0x10/0x10 [ 189.027571][ T7121] ? irqentry_exit+0x3b/0x90 [ 189.028742][ T7121] ? __pfx___up_read+0x10/0x10 [ 189.029940][ T7121] ? __lock_acquire+0x163e/0x3ce0 [ 189.031220][ T7121] netfs_buffered_read_iter+0x117/0x190 [ 189.032609][ T7121] netfs_file_read_iter+0x10f/0x190 [ 189.033913][ T7121] v9fs_file_read_iter+0x9b/0x100 [ 189.035212][ T7121] __kernel_read+0x3f1/0xb50 [ 189.036375][ T7121] ? __pfx___kernel_read+0x10/0x10 [ 189.037671][ T7121] ? kernel_fpu_begin_mask+0x168/0x270 [ 189.039053][ T7121] integrity_kernel_read+0x7f/0xb0 [ 189.040348][ T7121] ? __pfx_integrity_kernel_read+0x10/0x10 [ 189.041804][ T7121] ? _sha256_update+0x93/0x220 [ 189.042985][ T7121] ? __pfx_sha256_ni_transform+0x10/0x10 [ 189.044461][ T7121] ? kasan_save_track+0x14/0x30 [ 189.045651][ T7121] ima_calc_file_hash_tfm+0x2c9/0x3e0 [ 189.046927][ T7121] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 189.048365][ T7121] ? generic_fillattr+0x663/0x8c0 [ 189.049613][ T7121] ? ima_alloc_tfm+0x21d/0x2d0 [ 189.050802][ T7121] ima_calc_file_hash+0x1ba/0x490 [ 189.052049][ T7121] ima_collect_measurement+0x8a7/0xa10 [ 189.053407][ T7121] ? __pfx_ima_collect_measurement+0x10/0x10 [ 189.054933][ T7121] ? __pfx_mark_lock+0x10/0x10 [ 189.056119][ T7121] ? is_bad_inode+0xd/0x40 [ 189.057233][ T7121] ? xattr_resolve_name+0x27b/0x3f0 [ 189.058529][ T7121] ? vfs_getxattr_alloc+0xf1/0x340 [ 189.059804][ T7121] ? ima_get_hash_algo+0x27d/0x410 [ 189.061096][ T7121] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 189.062452][ T7121] ? process_measurement+0x1271/0x2370 [ 189.063825][ T7121] process_measurement+0x1271/0x2370 [ 189.065155][ T7121] ? __pfx_process_measurement+0x10/0x10 [ 189.066598][ T7121] ? find_held_lock+0x2d/0x110 [ 189.067782][ T7121] ? v9fs_open_fid_add+0x102/0x190 [ 189.069037][ T7121] ? __pfx_lock_release+0x10/0x10 [ 189.070290][ T7121] ? do_raw_spin_lock+0x12d/0x2c0 [ 189.071586][ T7121] ? __pfx_v9fs_file_open+0x10/0x10 [ 189.072936][ T7121] ? bpf_lsm_file_open+0x9/0x10 [ 189.074197][ T7121] ? inode_to_bdi+0x9e/0x160 [ 189.075400][ T7121] ima_file_check+0xc1/0x110 [ 189.076593][ T7121] ? __pfx_ima_file_check+0x10/0x10 [ 189.077892][ T7121] ? inode_permission+0xdd/0x5f0 [ 189.079152][ T7121] security_file_post_open+0x8e/0x210 [ 189.080524][ T7121] path_openat+0x1419/0x2d60 [ 189.081667][ T7121] ? __pfx_path_openat+0x10/0x10 [ 189.082886][ T7121] ? __pfx___lock_acquire+0x10/0x10 [ 189.084207][ T7121] do_filp_open+0x1dc/0x430 [ 189.085378][ T7121] ? __pfx_do_filp_open+0x10/0x10 [ 189.086672][ T7121] ? find_held_lock+0x2d/0x110 [ 189.087907][ T7121] ? _raw_spin_unlock+0x28/0x50 [ 189.089181][ T7121] ? alloc_fd+0x2d7/0x6c0 [ 189.090297][ T7121] do_sys_openat2+0x17a/0x1e0 [ 189.091519][ T7121] ? __pfx_do_sys_openat2+0x10/0x10 [ 189.092862][ T7121] __ia32_compat_sys_openat+0x16e/0x210 [ 189.094385][ T7121] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 189.096027][ T7121] __do_fast_syscall_32+0x73/0x120 [ 189.097344][ T7121] do_fast_syscall_32+0x32/0x80 [ 189.098599][ T7121] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.100230][ T7121] RIP: 0023:0xf746e579 [ 189.101285][ T7121] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 189.106212][ T7121] RSP: 002b:00000000f575656c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 189.108355][ T7121] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200000c0 [ 189.110367][ T7121] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.112392][ T7121] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.114438][ T7121] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 189.116457][ T7121] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.118472][ T7121] [ 189.119272][ T7121] Modules linked in: [ 189.122356][ T7121] ---[ end trace 0000000000000000 ]--- [ 189.125171][ T7121] RIP: 0010:__iov_iter_get_pages_alloc+0x1d10/0x2230 [ 189.127023][ T7121] Code: b0 8b 48 89 df e8 f0 23 4b fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 40 75 05 fd 48 c7 c6 a0 c6 b0 8b 4c 89 e7 e8 d1 23 4b fd 90 <0f> 0b e8 29 75 05 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 189.148927][ T7121] RSP: 0018:ffffc9000403e010 EFLAGS: 00010283 [ 189.156569][ T7121] RAX: 0000000000026cfb RBX: 0000000000000004 RCX: ffffc900230a1000 [ 189.168535][ T7121] RDX: 0000000000040000 RSI: ffffffff84873a3f RDI: ffff888021ee8444 [ 189.180544][ T7121] RBP: ffffea0001b655b4 R08: 0000000000000001 R09: fffffbfff2d315a6 [ 189.186927][ T7121] R10: ffffffff9698ad37 R11: ffff88802b728a40 R12: ffffea0001b65580 [ 189.192965][ T7121] R13: ffff8880665a6c00 R14: 0000000000001000 R15: 0000000000001000 [ 189.198452][ T7121] FS: 0000000000000000(0000) GS:ffff88802b600000(0063) knlGS:00000000f5756b40 [ 189.205295][ T7121] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 189.210274][ T7121] CR2: 00007f533e4d7000 CR3: 0000000061558000 CR4: 0000000000352ef0 [ 189.217638][ T7121] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.224976][ T7121] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.270328][ T7121] Kernel panic - not syncing: Fatal exception [ 189.272556][ T7121] Kernel Offset: disabled [ 189.273688][ T7121] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:52:10 Registers: info registers vcpu 0 CPU#0 RAX=0000000000007ff8 RBX=ffff88802b43fdc8 RCX=0000000000000004 RDX=0000000000000000 RSI=0000000000000003 RDI=ffffffff8d819b90 RBP=ffff88802b63fdc0 RSP=ffffc90000007610 R8 =ffffed1005687fb9 R9 =ffffed10056c7dd0 R10=ffff88802b63ee83 R11=0000000000000000 R12=ffffed10056c7fba R13=ffff88802b63fdd4 R14=ffff88802b43fdc0 R15=0000000000040000 RIP=ffffffff8b15856d RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000034015ff8 CR3=0000000061558000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000005de7cf RBX=0000000000000001 RCX=ffffffff8b12f739 RDX=0000000000000000 RSI=ffffffff8b4cc8e0 RDI=ffffffff8bb12060 RBP=ffffed10036ed910 RSP=ffffc90000477e08 R8 =0000000000000001 R9 =ffffed10056a7025 R10=ffff88802b53812b R11=0000000000000000 R12=0000000000000001 R13=ffff88801b76c880 R14=ffffffff901cc608 R15=0000000000000000 RIP=ffffffff8b130b1f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020281000 CR3=0000000021846000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdd08a8c20 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3178302f39613431 78302b6c6c61635f 7379735f34367820 205d313231375400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3172302533613431 7230216666616355 7373735534367220 2057313231375400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5b3e343c00216d6d 6162205d34312036 54205b000030202d 20312e3036202020 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5134200000212026 3030203030302030 0000320000302020 20232e3036202020 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7e556f6f786c2a26 333a3b3d323c3d38 3c3d323b2a797e2a 2623616565622764 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 51343e360a2b7967 6f666865787a2a6e 63657c0a0a3a2a27 2a3b323a3c2a7e78 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000020faf4 RBX=0000000000000002 RCX=ffffffff8b12f739 RDX=ffffed10056c7026 RSI=ffffffff8bb11fe0 RDI=ffffffff8164098c RBP=ffffed10036f0000 RSP=ffffc90000487e08 R8 =0000000000000000 R9 =ffffed10056c7025 R10=ffff88802b63812b R11=0000000000000001 R12=0000000000000002 R13=ffff88801b780000 R14=ffffffff901cc608 R15=0000000000000000 RIP=ffffffff8b130b1f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020000240 CR3=0000000061c60000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=0000000000000003 RCX=ffffffff8b05f820 RDX=1ffff9200062fee3 RSI=ffffffff8b05e26f RDI=ffffc9000317f700 RBP=ffffc9000317f700 RSP=ffffc9000317f540 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000003 R11=00000000000a2012 R12=dffffc0000000000 R13=0000000000000000 R14=0000000000000000 R15=ffffc9000317f700 RIP=ffffffff8b05e2b6 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f533eaacd00 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055bed26c2000 CR3=0000000048040000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=bb965941bb965941 bb965941bb965941 bb965941bb965941 bb965941bb965941 bb965941bb965941 bb965941bb965941 bb965941bb965941 bb965941bb965941 ZMM22=23a04fa423a04fa4 23a04fa423a04fa4 23a04fa423a04fa4 23a04fa423a04fa4 23a04fa423a04fa4 23a04fa423a04fa4 23a04fa423a04fa4 23a04fa423a04fa4 ZMM23=7bc0a48c7bc0a48c 7bc0a48c7bc0a48c 7bc0a48c7bc0a48c 7bc0a48c7bc0a48c 7bc0a48c7bc0a48c 7bc0a48c7bc0a48c 7bc0a48c7bc0a48c 7bc0a48c7bc0a48c ZMM24=1bef997e1bef997e 1bef997e1bef997e 1bef997e1bef997e 1bef997e1bef997e 1bef997e1bef997e 1bef997e1bef997e 1bef997e1bef997e 1bef997e1bef997e ZMM25=8abd26208abd2620 8abd26208abd2620 8abd26208abd2620 8abd26208abd2620 8abd26208abd2620 8abd26208abd2620 8abd26208abd2620 8abd26208abd2620 ZMM26=b6b1b0c2b6b1b0c2 b6b1b0c2b6b1b0c2 b6b1b0c2b6b1b0c2 b6b1b0c2b6b1b0c2 b6b1b0c2b6b1b0c2 b6b1b0c2b6b1b0c2 b6b1b0c2b6b1b0c2 b6b1b0c2b6b1b0c2 ZMM27=a3cd1889a3cd1889 a3cd1889a3cd1889 a3cd1889a3cd1889 a3cd1889a3cd1889 a3cd1889a3cd1889 a3cd1889a3cd1889 a3cd1889a3cd1889 a3cd1889a3cd1889 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=af040000af040000 af040000af040000 af040000af040000 af040000af040000 af040000af040000 af040000af040000 af040000af040000 af040000af040000