last executing test programs: 4.833457349s ago: executing program 1 (id=1210): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x4, 0x70bd25, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x7fffffffffffef9, 0x40000002, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280), &(0x7f0000000200)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x7101}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000380)={0x0, 'veth0_vlan\x00', {0x2}, 0x100}) 3.702091534s ago: executing program 0 (id=1215): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, 0x0) keyctl$KEYCTL_MOVE(0x6, r0, 0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x41, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}, 0x1}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000756cff7c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$FUSE(r2, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = request_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000001400)={'syz', 0x1}, &(0x7f0000000640)='\x1aW\x966\xeb\xbb$\x89\xe1\xf6\t\x1b\x8d!\x88\xa7\xf4\xae\x00', 0xfffffffffffffffe) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000000680)={'syz', 0x1}, &(0x7f0000003840)="10cfc65d2c0ec555b058d7347d63528dcd000000000000", 0x17, r5) ptrace$getregset(0x4204, r4, 0x4, &(0x7f0000000100)={&(0x7f0000000400)=""/204, 0xcc}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) inotify_init() inotify_add_watch(r2, &(0x7f0000000080)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) process_vm_writev(r4, &(0x7f0000000140)=[{&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000580)=""/171, 0xab}, {&(0x7f0000002780)=""/140, 0x8c}], 0x3, &(0x7f0000000340), 0x0, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x811}, 0x1c) listen(r7, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010101}, 0x10) 3.131835308s ago: executing program 1 (id=1218): r0 = socket(0x10, 0x3, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 3.131409346s ago: executing program 3 (id=1219): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6000000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001000000000004001640aff2fe4b12b390e8cc1017764c1459047f784173810f6940726c8179dcad408e3e959e1057393b9dbda098a356e734483952ea982dafcd6c7ba215d81c4dcc"], 0x60}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYBLOB="071100000000000005e10100e90c000004000000000000000000009d659948c0d855386b0000000037c08cfe6e0000000000000000"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0x40505331, &(0x7f0000000180)={0xf, 0x0, 0x0, 'queue1\x00'}) ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000080)=0x0, 0x0) setresuid(0xffffffffffffffff, r3, 0x0) capset(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r4 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x2503, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000140)) getpid() lstat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00'}) openat$nci(0xffffff9c, &(0x7f0000003a40), 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x800448d7, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@cgroup, 0x2e, 0x1, 0x9bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) 2.793217139s ago: executing program 0 (id=1220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xa00}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x20050800) 2.776112813s ago: executing program 1 (id=1221): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000080601030000000000000000bc00000312fb1cb46e21f14f68704ff689b3009aec9994f2a392b0226c81ec7abf2ffb75c64e1dafb44bb4b9b9c1ded5690312ba8378ec66"], 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000180)={0x4}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x3c) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r11, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r11, 0x8004ae98, 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r12, 0x28543634fae43ad, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) 2.661693752s ago: executing program 0 (id=1222): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad101020301090224000100"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000003c0)='pstore\x00', 0x0, &(0x7f0000000300)='usrquota') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r2, 0x8b2c, &(0x7f0000000040)) r3 = getpgrp(0x0) getpgrp(r3) 2.491921538s ago: executing program 3 (id=1223): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000003e000701fcfffffffddbdf25047c0000040036800c003912bf51f6e586d60180060006008e0a0000"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004240)=@delqdisc={0x24, 0x25, 0x800, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x9}, {0xffef, 0xffff}, {0xc, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x20000884) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000)=0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r5, r4, 0x0, 0x20000023893) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x29, 0x0) ioctl$SG_IO(r6, 0x2285, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0x1, 0xff2b}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r7, 0x0, 0xff2e) syz_open_pts(r7, 0x0) 2.200782077s ago: executing program 1 (id=1224): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x200004, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r5 = openat$rdma_cm(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xc, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x9, @mcast2, 0x2}}}, 0x118) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x355, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x31f, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, [{0x0, 0x9, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac150"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x5}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500000000"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r8}, 0x8) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYRES8=r6], 0x0, 0x42, 0x0, 0x0, 0x1, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e00000004000000080000005e0000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="000000000200"/28], 0x48) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 2.113793199s ago: executing program 2 (id=1225): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x200004, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r5 = openat$rdma_cm(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xc, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x9, @mcast2, 0x2}}}, 0x118) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x355, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x31f, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, [{0x0, 0x9, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac150"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x5}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500000000"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r8}, 0x8) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYRES8=r6], 0x0, 0x42, 0x0, 0x0, 0x1, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e00000004000000080000005e0000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="000000000200"/28], 0x48) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 1.490924469s ago: executing program 3 (id=1226): syz_clone(0x4200311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x1, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc2c45513, &(0x7f0000000a00)={{0x7, 0x5, 0x2, 0x6b, 'syz0\x00', 0x4}, 0x0, [0x2, 0x7, 0x8, 0x7fff, 0x7, 0x8, 0x6, 0x7, 0x7, 0x0, 0x1, 0x3ff, 0x9, 0x3, 0x8, 0x6, 0x7f, 0x1, 0x101, 0x8, 0x6, 0x6, 0x77b1, 0x1, 0x1, 0x8, 0x30, 0x3, 0x3, 0x4, 0x1, 0x5, 0x6, 0x800, 0x3, 0x5, 0x8, 0x3, 0x4, 0x5, 0x3, 0xfdc, 0x6, 0x1, 0x9, 0xb08, 0x9, 0x70, 0xe0000000, 0xfffffff6, 0xcb, 0x7, 0x5, 0x9, 0x6, 0x1, 0x0, 0xd, 0x4, 0x9, 0xd, 0x7fff, 0x5, 0x7f, 0x0, 0x101, 0x1, 0x5, 0x9, 0x1ff, 0x10, 0x9a67, 0x0, 0x1, 0xffffffff, 0xfffffffe, 0xe56, 0x7c, 0x1, 0x81, 0x3, 0x100, 0x6, 0x6, 0xfff, 0x6, 0x100, 0x6, 0x8b, 0x3, 0x0, 0x3, 0x2, 0xd79, 0xffff, 0x50e00000, 0x103b, 0x1, 0x9, 0x80, 0x1800000, 0x5, 0x2, 0xffff, 0x5, 0x1, 0x7, 0x2, 0x3, 0x1, 0x5, 0x81, 0x8, 0x5, 0x5, 0x7, 0x6, 0x5, 0x8000, 0x7, 0x3ff, 0xca12, 0x71, 0xbca0, 0x8, 0xffffff80, 0x0, 0x8]}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xa, 0x0, 0x0) epoll_create1(0x80000) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = getpid() syz_pidfd_open(r2, 0x0) syz_open_dev$admmidi(&(0x7f0000000000), 0x800, 0x1699c0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) kcmp(0x0, 0x0, 0x1, r4, r5) open$dir(&(0x7f00000003c0)='./control/file0\x00', 0x84840, 0x0) r6 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r6, &(0x7f0000fc4fbe)=""/80, 0x50) unlink(&(0x7f00000001c0)='./control/file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './control\x00'}) unlinkat(r7, 0x0, 0x200) rmdir(&(0x7f0000000040)='./control\x00') 1.4114348s ago: executing program 3 (id=1227): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat2$dir(0xffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)={0x88940, 0x18c, 0xf}, 0x18) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r6}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000007401"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x30, r8, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xfffffff6, 0x400a}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x408d1}, 0x2840) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=@newneigh={0xbc, 0x1c, 0x10, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, 0x1, 0x84, 0x7}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_FDB_EXT_ATTRS={0x24, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x87}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x9}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x5f}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_LLADDR={0xa, 0x2, @remote}, @NDA_DST_IPV6={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @NDA_CACHEINFO={0x14, 0x3, {0x81, 0x200, 0xffff7fff, 0x9f}}, @NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_CACHEINFO={0x14, 0x3, {0x4, 0x2, 0x5, 0x5}}, @NDA_CACHEINFO={0x14, 0x3, {0x9, 0x60, 0x2, 0x1007}}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc4}, 0x48000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=@newlink={0x148, 0x10, 0x1, 0x3, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_AF_SPEC={0x128, 0x1a, 0x0, 0x1, [@AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x21}, {0x8, 0x18}, {0x8, 0x3}, {0x8, 0x9}, {0x8, 0xc}, {0x8, 0x12, 0x0, 0x0, 0x2}, {0x8, 0x1f}]}}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x10}}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x4}, {0x8, 0x19}, {0x8}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}, @AF_BRIDGE={0x4}]}]}, 0x148}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40046607, &(0x7f00000002c0)=0x1c) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r12, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) syz_io_uring_setup(0x4e3, &(0x7f0000000240)={0x0, 0x33f8, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000180), &(0x7f00000001c0)) r13 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r14, r15, &(0x7f00000009c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r13, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000400)="3dcdd2a9d7452fe36b940b4f67c9b9280dbf860aa42adec6fdee5b4d6b2d7d588e56d8ec3dacf314c7892d5ffc04b6c9e0227a232499115ef10e4d54a858cb5a9ffe555cd48b2e38fbd5c3e1565c47adb1965b4765b2d0dfc4816bc3011f6195b3efc401203f5d0f656c702281a323ea7fe41b2d9b34a19bdc986dac27c56a336eb57f5bfcf8ca9372", 0x89}, {&(0x7f00000004c0)="d9982c006ddf753170c73b1a1275b12d329ebbd4971a49e78fa46c52bd5a33415c53bb8b64b93e6958c19777ef4db4cb9aeb7648e28fe4bdd75a6379734f9fdc8a219dca042917290472069b044df085fe7a34b2573ffdc15743ecefd21f63eac38a6083e7fcc86bd6d1722b7b625eab39ff53741140bc", 0x77}, {0x0}, {0x0}], 0x10000000000002be}, 0x0, 0x1}) socket$unix(0x1, 0x1, 0x0) 1.34205116s ago: executing program 0 (id=1228): syz_emit_ethernet(0x62, &(0x7f0000000140)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x20, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr=0x4, {[@lsrr={0x83, 0x3, 0x2}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@private}, {@empty}, {@remote}]}]}}}}}}}, 0x0) 1.340542583s ago: executing program 0 (id=1229): syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x482) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000011c0)=""/4080, 0xff67}, {&(0x7f00000000c0)=""/118, 0x76}, {&(0x7f0000000140)=""/70, 0x46}], 0x3}, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r4, 0xc0045003, &(0x7f00000000c0)=0x1) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r4, 0x0) ioctl$SNDCTL_DSP_POST(r4, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000240)=ANY=[@ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0xffffffffffffff28, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) get_robust_list(0x0, 0x0, 0x0) 1.158990889s ago: executing program 3 (id=1230): r0 = socket(0x10, 0x3, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1.158222084s ago: executing program 1 (id=1231): syz_clone(0x4200311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x1, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc2c45513, &(0x7f0000000a00)={{0x7, 0x5, 0x2, 0x6b, 'syz0\x00', 0x4}, 0x0, [0x2, 0x7, 0x8, 0x7fff, 0x7, 0x8, 0x6, 0x7, 0x7, 0x0, 0x1, 0x3ff, 0x9, 0x3, 0x8, 0x6, 0x7f, 0x1, 0x101, 0x8, 0x6, 0x6, 0x77b1, 0x1, 0x1, 0x8, 0x30, 0x3, 0x3, 0x4, 0x1, 0x5, 0x6, 0x800, 0x3, 0x5, 0x8, 0x3, 0x4, 0x5, 0x3, 0xfdc, 0x6, 0x1, 0x9, 0xb08, 0x9, 0x70, 0xe0000000, 0xfffffff6, 0xcb, 0x7, 0x5, 0x9, 0x6, 0x1, 0x0, 0xd, 0x4, 0x9, 0xd, 0x7fff, 0x5, 0x7f, 0x0, 0x101, 0x1, 0x5, 0x9, 0x1ff, 0x10, 0x9a67, 0x0, 0x1, 0xffffffff, 0xfffffffe, 0xe56, 0x7c, 0x1, 0x81, 0x3, 0x100, 0x6, 0x6, 0xfff, 0x6, 0x100, 0x6, 0x8b, 0x3, 0x0, 0x3, 0x2, 0xd79, 0xffff, 0x50e00000, 0x103b, 0x1, 0x9, 0x80, 0x1800000, 0x5, 0x2, 0xffff, 0x5, 0x1, 0x7, 0x2, 0x3, 0x1, 0x5, 0x81, 0x8, 0x5, 0x5, 0x7, 0x6, 0x5, 0x8000, 0x7, 0x3ff, 0xca12, 0x71, 0xbca0, 0x8, 0xffffff80, 0x0, 0x8]}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xa, 0x0, 0x0) epoll_create1(0x80000) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r5 = dup(r2) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) fsetxattr$security_evm(r9, &(0x7f00000000c0), &(0x7f0000000200)=@md5={0x1, "dce2932cf5fa63fdb6774750c1319375"}, 0x11, 0x1) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xff}, {0x6, 0x0, 0x0, 0x6}]}, 0x8) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) io_uring_enter(r6, 0x2def, 0x4000, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x100000000000000, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.089809475s ago: executing program 2 (id=1232): syz_io_uring_setup(0x114, &(0x7f00000003c0)={0x0, 0x20000}, &(0x7f0000000280), &(0x7f0000000300)) syz_emit_vhci(0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x7f, 0x0, 0x56595559, 0x7, 0xa, [{0x0, 0xf}, {0x20010}, {}, {0x0, 0x200000}, {0x6}, {0x2fe}, {0x0, 0x800}], 0xf}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x1000000, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(r2, &(0x7f0000000300)) io_submit(0x0, 0x0, 0x0) 824.203074ms ago: executing program 1 (id=1233): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, 0x0) keyctl$KEYCTL_MOVE(0x6, r0, 0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x41, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}, 0x1}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000756cff7c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$FUSE(r2, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = request_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000001400)={'syz', 0x1}, &(0x7f0000000640)='\x1aW\x966\xeb\xbb$\x89\xe1\xf6\t\x1b\x8d!\x88\xa7\xf4\xae\x00', 0xfffffffffffffffe) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000000680)={'syz', 0x1}, &(0x7f0000003840)="10cfc65d2c0ec555b058d7347d63528dcd000000000000", 0x17, r5) ptrace$getregset(0x4204, r4, 0x4, &(0x7f0000000100)={&(0x7f0000000400)=""/204, 0xcc}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) inotify_init() inotify_add_watch(r2, &(0x7f0000000080)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) process_vm_writev(r4, &(0x7f0000000140)=[{&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000580)=""/171, 0xab}, {&(0x7f0000002780)=""/140, 0x8c}], 0x3, &(0x7f0000000340), 0x0, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x811}, 0x1c) listen(r7, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010101}, 0x10) 795.978729ms ago: executing program 3 (id=1234): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, 0x0) keyctl$KEYCTL_MOVE(0x6, r0, 0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x41, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}, 0x1}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000756cff7c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$FUSE(r2, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = request_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000001400)={'syz', 0x1}, &(0x7f0000000640)='\x1aW\x966\xeb\xbb$\x89\xe1\xf6\t\x1b\x8d!\x88\xa7\xf4\xae\x00', 0xfffffffffffffffe) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000000680)={'syz', 0x1}, &(0x7f0000003840)="10cfc65d2c0ec555b058d7347d63528dcd000000000000", 0x17, r5) ptrace$getregset(0x4204, r4, 0x4, &(0x7f0000000100)={&(0x7f0000000400)=""/204, 0xcc}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) inotify_init() inotify_add_watch(r2, &(0x7f0000000080)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) process_vm_writev(r4, &(0x7f0000000140)=[{&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000580)=""/171, 0xab}, {&(0x7f0000002780)=""/140, 0x8c}], 0x3, &(0x7f0000000340), 0x0, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x811}, 0x1c) listen(r7, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010101}, 0x10) 241.903117ms ago: executing program 2 (id=1235): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x1f, 0x44}, 0x0) 241.438242ms ago: executing program 2 (id=1236): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = socket(0x1e, 0x1, 0x0) sendto$llc(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000200)={0x1e, 0x307, 0x8, 0x7e, 0x4, 0xb4, @local}, 0x10) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x4, 0x1, 0x0, "6cfef8b4b9fdcfc8bf98040c2599e8a8e9f887975c3cc41e122a623eb7c37334", 0x34343459}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000880), r3) sendmsg$NFC_CMD_LLC_SDREQ(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, r4, 0x901, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) (async, rerun: 32) socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9, 0x5, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9, 0x3, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) pread64(r0, &(0x7f0000000440)=""/40, 0x28, 0x1000) r12 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x101400, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r12, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x76, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r13, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 117.912583ms ago: executing program 2 (id=1237): syz_emit_ethernet(0x62, &(0x7f0000000140)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x20, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr=0x4, {[@lsrr={0x83, 0x3, 0x2}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@private}, {@empty}, {@remote}]}]}}}}}}}, 0x0) 116.866022ms ago: executing program 2 (id=1238): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000900)={'syz0\x00', {0x0, 0x1ff, 0x6, 0x5}, 0x2d, [0x2, 0x6, 0x1000, 0x1, 0x5, 0x8, 0x887a, 0xfffffff7, 0x4, 0x81, 0x8, 0x1, 0x7, 0x0, 0x4061, 0x8, 0x400, 0x6, 0x5, 0x55, 0xe, 0x1, 0x200, 0x9, 0x9, 0x5, 0x9, 0xd, 0x7fffffff, 0xfffffff7, 0x40000, 0x10001, 0x7, 0x5, 0x0, 0x6, 0x8001, 0x0, 0x5, 0x8, 0x7, 0x5, 0xa, 0xe, 0x2, 0x8d76, 0x4, 0x2, 0x7, 0x80000001, 0x4, 0xfffffffd, 0x6, 0x8, 0x5, 0xffffffff, 0x2, 0x2, 0x4, 0x2, 0xe, 0xfffffffa, 0xba6d, 0x9], [0x200, 0x3, 0x8, 0x0, 0x2, 0x4, 0x92, 0x2, 0x9, 0x3ff, 0xfffffffe, 0x1, 0xffffffff, 0xfffffff7, 0x5, 0x7fffffff, 0x5, 0x5, 0x0, 0x2, 0x2, 0x80000000, 0x1ff, 0x1, 0x1, 0x6, 0x2, 0x6, 0xff, 0x9, 0x86, 0x9d25, 0xa, 0x2, 0x9, 0x5, 0xffffff25, 0x5, 0x2, 0xf5, 0x4, 0x8, 0x3, 0x8, 0xf, 0x5, 0xfffff069, 0x2, 0x5, 0x8, 0x0, 0x10000, 0xaf9, 0xd000, 0x7, 0x3, 0x1, 0x40, 0x7ff, 0x1000, 0x7132, 0x37b, 0x35b66f23, 0x3], [0x4, 0x2, 0x9, 0xc, 0x1, 0x1, 0x7ff, 0x97d, 0x8, 0xf8b, 0x3, 0x4, 0x9, 0xf557, 0x7fffffff, 0x7, 0x7, 0x3, 0x80000000, 0x0, 0x6, 0x6, 0x6, 0x8, 0x39, 0x3, 0xfffffffa, 0x5, 0x9, 0x100, 0x5, 0x1, 0x9, 0xec51, 0x6c, 0x7e, 0x101, 0xf0, 0x7, 0x8, 0x9, 0x0, 0x32, 0x3ff, 0x0, 0x8, 0x41, 0x6, 0x8, 0x939, 0x100, 0x200, 0x80, 0x0, 0x80, 0x5, 0x101, 0x5, 0x80, 0x5, 0x5, 0x0, 0x0, 0x3], [0x1, 0x4ad5, 0x46, 0xe9, 0x80, 0x4, 0x2, 0x10000, 0x47a, 0x6, 0x7ff, 0x3, 0x5, 0x5, 0x7ff, 0x40, 0xef, 0xdf, 0x2, 0xbd5, 0xffff8000, 0x4, 0x1, 0x5, 0x15ee, 0x7, 0x7, 0x3, 0x2, 0x2, 0x81a2, 0x80000000, 0x1000, 0x3, 0xff3, 0x9a5b, 0x7, 0x8, 0x80000001, 0x7f, 0x9, 0x869, 0x200, 0x4, 0x0, 0x80, 0x7ff, 0x7, 0x1, 0x5c3aae93, 0x2, 0x1, 0x8001, 0x1, 0x5, 0x68f, 0x8000, 0x405, 0x2, 0x5, 0x2, 0x5, 0x107cda93, 0x8]}, 0x45c) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r8, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 0s ago: executing program 0 (id=1239): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x200004, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r5 = openat$rdma_cm(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xc, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x9, @mcast2, 0x2}}}, 0x118) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x355, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x31f, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, [{0x0, 0x9, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac150"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x5}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500000000"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r8}, 0x8) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYRES8=r6], 0x0, 0x42, 0x0, 0x0, 0x1, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e00000004000000080000005e0000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="000000000200"/28], 0x48) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 0s ago: executing program 3 (id=1240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'hsr0\x00'}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x20050800) kernel console output (not intermixed with test programs): [ T8595] ? rcu_is_watching+0x12/0xc0 [ 167.291168][ T8595] __do_fast_syscall_32+0x73/0x120 [ 167.291185][ T8595] do_fast_syscall_32+0x32/0x80 [ 167.291201][ T8595] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 167.291214][ T8595] RIP: 0023:0xf7ff1579 [ 167.291240][ T8595] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 167.291251][ T8595] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 167.291261][ T8595] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000040 [ 167.291267][ T8595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 167.291273][ T8595] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 167.291279][ T8595] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 167.291285][ T8595] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 167.291297][ T8595] [ 168.491046][ T1019] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 168.561251][ T8627] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 168.651561][ T1019] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 168.654445][ T1019] usb 8-1: config 0 interface 0 has no altsetting 0 [ 168.657946][ T1019] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 168.669862][ T1019] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 168.672302][ T1019] usb 8-1: Product: syz [ 168.673470][ T1019] usb 8-1: Manufacturer: syz [ 168.674773][ T1019] usb 8-1: SerialNumber: syz [ 168.678184][ T1019] usb 8-1: config 0 descriptor?? [ 168.683821][ T1019] usb 8-1: selecting invalid altsetting 0 [ 168.747771][ T40] kauditd_printk_skb: 335 callbacks suppressed [ 168.747785][ T40] audit: type=1326 audit(1744592038.671:12773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8630 comm="syz.0.647" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 168.759505][ T40] audit: type=1326 audit(1744592038.681:12774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8630 comm="syz.0.647" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 168.765785][ T40] audit: type=1326 audit(1744592038.681:12775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8630 comm="syz.0.647" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 168.771562][ T40] audit: type=1326 audit(1744592038.691:12776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8625 comm="syz.1.646" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 168.776913][ T40] audit: type=1326 audit(1744592038.691:12777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8625 comm="syz.1.646" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 168.782605][ T40] audit: type=1326 audit(1744592038.691:12778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8625 comm="syz.1.646" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 168.787962][ T40] audit: type=1326 audit(1744592038.691:12779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8625 comm="syz.1.646" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 168.793577][ T40] audit: type=1326 audit(1744592038.691:12780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8625 comm="syz.1.646" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 168.798770][ T40] audit: type=1326 audit(1744592038.691:12781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8625 comm="syz.1.646" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 168.804091][ T40] audit: type=1326 audit(1744592038.691:12782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8630 comm="syz.0.647" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 168.895736][ T34] usb 8-1: USB disconnect, device number 5 [ 169.182292][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.648'. [ 169.537720][ T8652] afs: Unknown parameter 'dyš2^.a' [ 169.592025][ T8650] Bluetooth: MGMT ver 1.23 [ 169.762487][ T8657] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 170.006832][ T8666] syz.0.656(8666): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 170.840843][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 171.301514][ T8704] FAULT_INJECTION: forcing a failure. [ 171.301514][ T8704] name failslab, interval 1, probability 0, space 0, times 0 [ 171.305080][ T8704] CPU: 1 UID: 0 PID: 8704 Comm: syz.2.667 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(full) [ 171.305104][ T8704] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 171.305112][ T8704] Call Trace: [ 171.305116][ T8704] [ 171.305120][ T8704] dump_stack_lvl+0x16c/0x1f0 [ 171.305139][ T8704] should_fail_ex+0x512/0x640 [ 171.305152][ T8704] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 171.305168][ T8704] should_failslab+0xc2/0x120 [ 171.305178][ T8704] __kmalloc_cache_noprof+0x6a/0x3e0 [ 171.305193][ T8704] ? copy_verifier_state+0xbc8/0xfa0 [ 171.305206][ T8704] copy_verifier_state+0xbc8/0xfa0 [ 171.305217][ T8704] ? kasan_save_track+0x14/0x30 [ 171.305234][ T8704] push_stack+0x1d2/0x550 [ 171.305245][ T8704] ? tnum_const+0x11/0x20 [ 171.305262][ T8704] check_cond_jmp_op+0xb40/0x7a70 [ 171.305277][ T8704] ? rcu_is_watching+0x12/0xc0 [ 171.305297][ T8704] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 171.305314][ T8704] ? __pfx___might_resched+0x10/0x10 [ 171.305333][ T8704] do_check_common+0x83ff/0xc2a0 [ 171.305361][ T8704] ? __pfx_do_check_common+0x10/0x10 [ 171.305375][ T8704] ? lockdep_hardirqs_on+0x7c/0x110 [ 171.305392][ T8704] ? kfree+0x2b6/0x4d0 [ 171.305404][ T8704] ? bpf_check+0x6c86/0xb460 [ 171.305418][ T8704] ? bpf_check+0x7b2f/0xb460 [ 171.305435][ T8704] bpf_check+0x7f51/0xb460 [ 171.305459][ T8704] ? __pfx_bpf_check+0x10/0x10 [ 171.305475][ T8704] ? rcu_is_watching+0x12/0xc0 [ 171.305487][ T8704] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 171.305505][ T8704] ? __lock_acquire+0xaa4/0x1ba0 [ 171.305529][ T8704] ? find_held_lock+0x2b/0x80 [ 171.305545][ T8704] ? __asan_memset+0x23/0x50 [ 171.305559][ T8704] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 171.305572][ T8704] bpf_prog_load+0xe41/0x2490 [ 171.305586][ T8704] ? __pfx_bpf_prog_load+0x10/0x10 [ 171.305608][ T8704] ? bpf_lsm_bpf+0x9/0x10 [ 171.305623][ T8704] __sys_bpf+0x433c/0x4d80 [ 171.305637][ T8704] ? __pfx___sys_bpf+0x10/0x10 [ 171.305649][ T8704] ? ksys_write+0x190/0x240 [ 171.305666][ T8704] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 171.305689][ T8704] ? fput+0x70/0xf0 [ 171.305699][ T8704] ? ksys_write+0x1b9/0x240 [ 171.305713][ T8704] ? __pfx_ksys_write+0x10/0x10 [ 171.305730][ T8704] __ia32_sys_bpf+0x76/0xe0 [ 171.305742][ T8704] __do_fast_syscall_32+0x73/0x120 [ 171.305759][ T8704] do_fast_syscall_32+0x32/0x80 [ 171.305776][ T8704] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 171.305789][ T8704] RIP: 0023:0xf7f66579 [ 171.305798][ T8704] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 171.305808][ T8704] RSP: 002b:00000000f504455c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 171.305823][ T8704] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800054c0 [ 171.305829][ T8704] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.305835][ T8704] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 171.305841][ T8704] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 171.305847][ T8704] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.305859][ T8704] [ 171.463666][ T8705] netlink: 'syz.0.663': attribute type 10 has an invalid length. [ 171.467580][ T8705] veth0_vlan: left promiscuous mode [ 171.477154][ T8705] veth0_vlan: entered promiscuous mode [ 171.488586][ T8705] team0: Device veth0_vlan failed to register rx_handler [ 171.508781][ T8706] FAULT_INJECTION: forcing a failure. [ 171.508781][ T8706] name failslab, interval 1, probability 0, space 0, times 0 [ 171.513615][ T8706] CPU: 1 UID: 0 PID: 8706 Comm: syz.1.668 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(full) [ 171.513647][ T8706] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 171.513657][ T8706] Call Trace: [ 171.513663][ T8706] [ 171.513669][ T8706] dump_stack_lvl+0x16c/0x1f0 [ 171.513694][ T8706] should_fail_ex+0x512/0x640 [ 171.513712][ T8706] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 171.513737][ T8706] should_failslab+0xc2/0x120 [ 171.513752][ T8706] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 171.513775][ T8706] ? alloc_empty_file+0x55/0x1e0 [ 171.513794][ T8706] alloc_empty_file+0x55/0x1e0 [ 171.513810][ T8706] path_openat+0xe0/0x2d40 [ 171.513836][ T8706] ? rcu_is_watching+0x12/0xc0 [ 171.513859][ T8706] ? trace_kmem_cache_alloc+0x28/0xc0 [ 171.513875][ T8706] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 171.513895][ T8706] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 171.513915][ T8706] ? __pfx_path_openat+0x10/0x10 [ 171.513938][ T8706] ? __asan_memcpy+0x3c/0x60 [ 171.513960][ T8706] do_file_open_root+0x322/0x610 [ 171.513980][ T8706] ? __kasan_slab_free+0x51/0x70 [ 171.514004][ T8706] ? __pfx_do_file_open_root+0x10/0x10 [ 171.514046][ T8706] ? do_raw_spin_lock+0x12c/0x2b0 [ 171.514066][ T8706] file_open_root+0x2a7/0x450 [ 171.514089][ T8706] ? __pfx_file_open_root+0x10/0x10 [ 171.514108][ T8706] ? _raw_spin_unlock+0x28/0x50 [ 171.514134][ T8706] do_handle_open+0x9e9/0xb70 [ 171.514157][ T8706] ? __pfx_do_handle_open+0x10/0x10 [ 171.514180][ T8706] ? xfd_validate_state+0x5d/0x180 [ 171.514198][ T8706] ? rcu_is_watching+0x12/0xc0 [ 171.514222][ T8706] ? __do_fast_syscall_32+0x73/0x120 [ 171.514243][ T8706] __do_fast_syscall_32+0x73/0x120 [ 171.514267][ T8706] do_fast_syscall_32+0x32/0x80 [ 171.514288][ T8706] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 171.514308][ T8706] RIP: 0023:0xf7ff1579 [ 171.514321][ T8706] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 171.514335][ T8706] RSP: 002b:00000000f50d455c EFLAGS: 00000296 ORIG_RAX: 0000000000000156 [ 171.514351][ T8706] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0 [ 171.514361][ T8706] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.514370][ T8706] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 171.514379][ T8706] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 171.514389][ T8706] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.514409][ T8706] [ 172.000683][ T8716] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 172.169622][ T8725] tipc: Started in network mode [ 172.171207][ T8725] tipc: Node identity ac14140e, cluster identity 4711 [ 172.173432][ T8725] tipc: New replicast peer: 255.255.255.255 [ 172.175725][ T8725] tipc: Enabled bearer , priority 10 [ 172.512250][ T8737] netlink: 32 bytes leftover after parsing attributes in process `syz.1.677'. [ 172.541391][ T8737] netlink: 'syz.1.677': attribute type 10 has an invalid length. [ 172.544074][ T8737] veth0_vlan: left promiscuous mode [ 172.547356][ T8737] veth0_vlan: entered promiscuous mode [ 172.550675][ T8737] team0: Device veth0_vlan failed to register rx_handler [ 173.080832][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 173.207072][ T8753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 173.211296][ T8753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.215792][ T8753] dummy0: entered promiscuous mode [ 173.217958][ T8753] macsec1: entered allmulticast mode [ 173.219994][ T8753] dummy0: entered allmulticast mode [ 173.225298][ T8753] dummy0: left allmulticast mode [ 173.227223][ T8753] dummy0: left promiscuous mode [ 173.302979][ T59] tipc: Node number set to 2886997006 [ 173.506506][ T8772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.688'. [ 174.277950][ T8787] sp0: Synchronizing with TNC [ 174.283950][ T8785] [U] è [ 174.299842][ T8789] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 174.497373][ T40] kauditd_printk_skb: 124 callbacks suppressed [ 174.497442][ T40] audit: type=1326 audit(1744592044.421:12907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.1.692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 174.509551][ T40] audit: type=1326 audit(1744592044.421:12908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.1.692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 174.517339][ T40] audit: type=1326 audit(1744592044.431:12909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.1.692" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 174.524474][ T40] audit: type=1326 audit(1744592044.431:12910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.1.692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 174.531236][ T40] audit: type=1326 audit(1744592044.431:12911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.1.692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 174.541037][ T40] audit: type=1326 audit(1744592044.431:12912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.1.692" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 174.566866][ T40] audit: type=1326 audit(1744592044.441:12913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.1.692" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 174.572790][ T40] audit: type=1326 audit(1744592044.441:12914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.1.692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 174.578528][ T40] audit: type=1326 audit(1744592044.441:12915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.1.692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 174.837135][ T40] audit: type=1326 audit(1744592044.761:12916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.0.698" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 175.310903][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 177.417112][ T8870] netlink: 32 bytes leftover after parsing attributes in process `syz.3.710'. [ 177.617095][ T8864] netlink: 'syz.3.710': attribute type 10 has an invalid length. [ 177.621682][ T8864] veth0_vlan: left promiscuous mode [ 177.623998][ T8864] veth0_vlan: entered promiscuous mode [ 177.626838][ T8864] team0: Device veth0_vlan failed to register rx_handler [ 177.644407][ T8879] netlink: 32 bytes leftover after parsing attributes in process `syz.1.713'. [ 179.437425][ T8949] netlink: 32 bytes leftover after parsing attributes in process `syz.2.728'. [ 179.481458][ T8949] netlink: 'syz.2.728': attribute type 10 has an invalid length. [ 179.484316][ T8949] veth0_vlan: left promiscuous mode [ 179.487585][ T8949] veth0_vlan: entered promiscuous mode [ 179.490507][ T8949] team0: Device veth0_vlan failed to register rx_handler [ 179.508680][ T8951] netlink: 32 bytes leftover after parsing attributes in process `syz.1.729'. [ 179.772327][ T8957] netlink: 'syz.3.732': attribute type 4 has an invalid length. [ 180.259106][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.735'. [ 180.392490][ T40] kauditd_printk_skb: 291 callbacks suppressed [ 180.392502][ T40] audit: type=1326 audit(1744592050.321:13208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8967 comm="syz.2.736" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 180.402029][ T40] audit: type=1326 audit(1744592050.321:13209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8967 comm="syz.2.736" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 180.417896][ T40] audit: type=1326 audit(1744592050.331:13210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8967 comm="syz.2.736" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 180.428214][ T40] audit: type=1326 audit(1744592050.331:13211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8967 comm="syz.2.736" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 180.434049][ T40] audit: type=1326 audit(1744592050.331:13212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8967 comm="syz.2.736" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 180.443072][ T40] audit: type=1326 audit(1744592050.331:13213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8967 comm="syz.2.736" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f66598 code=0x7ffc0000 [ 180.462282][ T40] audit: type=1326 audit(1744592050.331:13214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8967 comm="syz.2.736" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f66598 code=0x7ffc0000 [ 180.472191][ T40] audit: type=1326 audit(1744592050.331:13215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8967 comm="syz.2.736" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f66598 code=0x7ffc0000 [ 180.482902][ T40] audit: type=1326 audit(1744592050.341:13216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8967 comm="syz.2.736" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f66598 code=0x7ffc0000 [ 180.504793][ T40] audit: type=1326 audit(1744592050.341:13217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8967 comm="syz.2.736" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f66598 code=0x7ffc0000 [ 181.721312][ T8995] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 181.818076][ T8989] netlink: 'syz.1.742': attribute type 10 has an invalid length. [ 181.820351][ T8989] veth0_vlan: left promiscuous mode [ 181.822438][ T8989] veth0_vlan: entered promiscuous mode [ 181.826142][ T8989] team0: Device veth0_vlan failed to register rx_handler [ 181.903806][ T8999] netlink: 32 bytes leftover after parsing attributes in process `syz.0.744'. [ 182.882694][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'. [ 183.183210][ T9029] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 183.966075][ T9039] netlink: 32 bytes leftover after parsing attributes in process `syz.0.755'. [ 184.138599][ T9041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.756'. [ 184.142119][ T9041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.756'. [ 184.200844][ C3] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 184.502207][ T9047] /dev/sr0: Can't open blockdev [ 184.669062][ T9063] netlink: 52 bytes leftover after parsing attributes in process `syz.2.763'. [ 184.962101][ T9066] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 185.893312][ T9080] netlink: 52 bytes leftover after parsing attributes in process `syz.0.767'. [ 186.040856][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 186.163196][ T9080] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.233904][ T9085] netlink: 52 bytes leftover after parsing attributes in process `syz.2.769'. [ 186.243198][ T9085] netlink: 24 bytes leftover after parsing attributes in process `syz.2.769'. [ 186.707869][ T9091] netlink: 32 bytes leftover after parsing attributes in process `syz.3.770'. [ 186.751637][ T9101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 187.212069][ T9113] netlink: 'syz.0.776': attribute type 9 has an invalid length. [ 187.214347][ T9113] netlink: 'syz.0.776': attribute type 7 has an invalid length. [ 187.216480][ T9113] netlink: 'syz.0.776': attribute type 8 has an invalid length. [ 187.552399][ T9124] FAULT_INJECTION: forcing a failure. [ 187.552399][ T9124] name failslab, interval 1, probability 0, space 0, times 0 [ 187.556977][ T9124] CPU: 1 UID: 0 PID: 9124 Comm: syz.3.779 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(full) [ 187.556992][ T9124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 187.557000][ T9124] Call Trace: [ 187.557004][ T9124] [ 187.557020][ T9124] dump_stack_lvl+0x16c/0x1f0 [ 187.557043][ T9124] should_fail_ex+0x512/0x640 [ 187.557063][ T9124] should_failslab+0xc2/0x120 [ 187.557075][ T9124] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 187.557094][ T9124] ? skb_clone+0x190/0x3f0 [ 187.557112][ T9124] skb_clone+0x190/0x3f0 [ 187.557127][ T9124] netlink_deliver_tap+0xabd/0xd30 [ 187.557143][ T9124] ? __pfx_neightbl_dump_info+0x10/0x10 [ 187.557163][ T9124] netlink_dump+0x638/0xd00 [ 187.557180][ T9124] ? __pfx_netlink_dump+0x10/0x10 [ 187.557194][ T9124] ? __pfx___skb_recv_datagram+0x10/0x10 [ 187.557213][ T9124] ? skb_recv_datagram+0x88/0xc0 [ 187.557229][ T9124] netlink_recvmsg+0xa15/0xf20 [ 187.557245][ T9124] ? __pfx_netlink_recvmsg+0x10/0x10 [ 187.557260][ T9124] ? __lock_acquire+0xaa4/0x1ba0 [ 187.557283][ T9124] ? iovec_from_user+0xbb/0x140 [ 187.557300][ T9124] ____sys_recvmsg+0x5f6/0x6b0 [ 187.557321][ T9124] ? __pfx_____sys_recvmsg+0x10/0x10 [ 187.557337][ T9124] ? import_iovec+0x109/0x140 [ 187.557355][ T9124] ? __lock_acquire+0x5ca/0x1ba0 [ 187.557374][ T9124] ___sys_recvmsg+0x114/0x1a0 [ 187.557389][ T9124] ? __pfx____sys_recvmsg+0x10/0x10 [ 187.557410][ T9124] ? ktime_get_ts64+0x2d2/0x400 [ 187.557426][ T9124] ? __pfx___might_resched+0x10/0x10 [ 187.557442][ T9124] ? read_tsc+0x9/0x20 [ 187.557458][ T9124] ? ktime_get_ts64+0x256/0x400 [ 187.557475][ T9124] do_recvmmsg+0x568/0x740 [ 187.557491][ T9124] ? __pfx_do_recvmmsg+0x10/0x10 [ 187.557503][ T9124] ? find_held_lock+0x2b/0x80 [ 187.557516][ T9124] ? __might_fault+0xe3/0x190 [ 187.557533][ T9124] ? __might_fault+0x13b/0x190 [ 187.557555][ T9124] ? __pfx_get_old_timespec32+0x10/0x10 [ 187.557572][ T9124] ? __pfx___schedule+0x10/0x10 [ 187.557587][ T9124] ? __fget_files+0x20e/0x3c0 [ 187.557606][ T9124] __sys_recvmmsg+0x110/0x280 [ 187.557621][ T9124] ? __pfx___sys_recvmmsg+0x10/0x10 [ 187.557639][ T9124] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 187.557655][ T9124] ? lockdep_hardirqs_on+0x7c/0x110 [ 187.557670][ T9124] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 187.557686][ T9124] __do_fast_syscall_32+0x73/0x120 [ 187.557704][ T9124] do_fast_syscall_32+0x32/0x80 [ 187.557720][ T9124] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.557734][ T9124] RIP: 0023:0xf742e579 [ 187.557743][ T9124] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 187.557754][ T9124] RSP: 002b:00000000f507455c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 187.557765][ T9124] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080002ec0 [ 187.557772][ T9124] RDX: 0000000000000ec0 RSI: 0000000000000002 RDI: 00000000800001c0 [ 187.557778][ T9124] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.557784][ T9124] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 187.557790][ T9124] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.557802][ T9124] [ 188.217586][ T9129] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 188.488006][ T40] kauditd_printk_skb: 191 callbacks suppressed [ 188.488022][ T40] audit: type=1326 audit(1744592058.411:13409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9126 comm="syz.1.780" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 188.499397][ T40] audit: type=1326 audit(1744592058.411:13410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9126 comm="syz.1.780" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 188.507492][ T40] audit: type=1326 audit(1744592058.411:13411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9126 comm="syz.1.780" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 188.515468][ T40] audit: type=1326 audit(1744592058.411:13412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9126 comm="syz.1.780" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 188.523699][ T40] audit: type=1326 audit(1744592058.411:13413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9126 comm="syz.1.780" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 188.531725][ T40] audit: type=1326 audit(1744592058.411:13414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9126 comm="syz.1.780" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 188.539993][ T40] audit: type=1326 audit(1744592058.411:13415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9126 comm="syz.1.780" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 188.550557][ T40] audit: type=1326 audit(1744592058.411:13416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9126 comm="syz.1.780" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 188.557064][ T40] audit: type=1326 audit(1744592058.411:13417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9126 comm="syz.1.780" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 188.563015][ T40] audit: type=1326 audit(1744592058.411:13418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9126 comm="syz.1.780" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 189.270515][ T9147] netlink: 'syz.0.783': attribute type 10 has an invalid length. [ 189.377047][ T9147] veth0_vlan: left promiscuous mode [ 189.379197][ T9147] veth0_vlan: entered promiscuous mode [ 189.385686][ T9147] team0: Device veth0_vlan failed to register rx_handler [ 189.585383][ T9152] FAULT_INJECTION: forcing a failure. [ 189.585383][ T9152] name failslab, interval 1, probability 0, space 0, times 0 [ 189.587240][ T1195] Bluetooth: hci4: Frame reassembly failed (-84) [ 189.588907][ T9152] CPU: 3 UID: 0 PID: 9152 Comm: syz.1.786 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(full) [ 189.588922][ T9152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 189.588929][ T9152] Call Trace: [ 189.588934][ T9152] [ 189.588938][ T9152] dump_stack_lvl+0x16c/0x1f0 [ 189.588958][ T9152] should_fail_ex+0x512/0x640 [ 189.588972][ T9152] ? fs_reclaim_acquire+0xae/0x150 [ 189.588986][ T9152] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 189.589001][ T9152] should_failslab+0xc2/0x120 [ 189.589012][ T9152] __kmalloc_noprof+0xd2/0x510 [ 189.589031][ T9152] tomoyo_realpath_from_path+0xc2/0x6e0 [ 189.589047][ T9152] ? tomoyo_profile+0x47/0x60 [ 189.589065][ T9152] tomoyo_path_number_perm+0x245/0x580 [ 189.589077][ T9152] ? tomoyo_path_number_perm+0x237/0x580 [ 189.589090][ T9152] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 189.589103][ T9152] ? find_held_lock+0x2b/0x80 [ 189.589139][ T9152] ? find_held_lock+0x2b/0x80 [ 189.589153][ T9152] ? hook_file_ioctl_common+0x145/0x410 [ 189.589168][ T9152] ? __fget_files+0x20e/0x3c0 [ 189.589186][ T9152] security_file_ioctl_compat+0x9b/0x240 [ 189.589202][ T9152] __do_compat_sys_ioctl+0x4e/0x2c0 [ 189.589216][ T9152] __do_fast_syscall_32+0x73/0x120 [ 189.589234][ T9152] do_fast_syscall_32+0x32/0x80 [ 189.589250][ T9152] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.589264][ T9152] RIP: 0023:0xf7ff1579 [ 189.589277][ T9152] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 189.589292][ T9152] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 189.589304][ T9152] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005412 [ 189.589311][ T9152] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.589317][ T9152] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.589323][ T9152] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 189.589329][ T9152] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.589342][ T9152] [ 189.593548][ T9152] ERROR: Out of memory at tomoyo_realpath_from_path. [ 189.656787][ T9154] netfs: Couldn't get user pages (rc=-14) [ 189.657700][ T9152] Bluetooth: hci4: Frame reassembly failed (-84) [ 189.682527][ T9161] __nla_validate_parse: 1 callbacks suppressed [ 189.682539][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.790'. [ 189.732548][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.789'. [ 189.781456][ T9166] input: syz0 as /devices/virtual/input/input9 [ 190.605016][ T9171] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 191.456874][ T9183] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 191.631314][ T5964] Bluetooth: hci4: command 0x1003 tx timeout [ 191.634552][ T5962] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 191.711882][ T5304] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 191.711972][ T5962] Bluetooth: hci5: command 0x1003 tx timeout [ 191.978497][ T9197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 192.031707][ T9198] netlink: 'syz.1.797': attribute type 10 has an invalid length. [ 192.035007][ T9198] veth0_vlan: left promiscuous mode [ 192.037886][ T9198] veth0_vlan: entered promiscuous mode [ 192.053471][ T9198] team0: Device veth0_vlan failed to register rx_handler [ 192.293200][ T9207] block device autoloading is deprecated and will be removed. [ 192.501090][ T5992] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 192.517167][ T9212] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 192.670904][ T5992] usb 7-1: Using ep0 maxpacket: 8 [ 192.677462][ T5992] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 192.694248][ T5992] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 192.698831][ T5992] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 192.704280][ T5992] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 192.711794][ T5992] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 192.721504][ T5992] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 192.725330][ T5992] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 192.729520][ T5992] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 192.744635][ T5992] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 192.749802][ T5992] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 192.762051][ T5992] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 192.765807][ T5992] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 192.770191][ T5992] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 192.774733][ T5992] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 192.779206][ T5992] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 192.806635][ T5992] usb 7-1: string descriptor 0 read error: -22 [ 192.811154][ T5992] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 192.815604][ T5992] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.949535][ T5992] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 193.541856][ T9235] netlink: 'syz.1.806': attribute type 10 has an invalid length. [ 193.550391][ T9235] veth0_vlan: left promiscuous mode [ 193.556676][ T9235] veth0_vlan: entered promiscuous mode [ 193.583737][ T9235] team0: Device veth0_vlan failed to register rx_handler [ 193.688529][ T40] kauditd_printk_skb: 212 callbacks suppressed [ 193.688573][ T40] audit: type=1326 audit(1744592063.611:13631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.0.809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 193.713385][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.717202][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.732942][ T40] audit: type=1326 audit(1744592063.611:13632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.0.809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 193.750915][ T40] audit: type=1326 audit(1744592063.611:13633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.0.809" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 193.759014][ T40] audit: type=1326 audit(1744592063.631:13634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.0.809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 193.777322][ T40] audit: type=1326 audit(1744592063.631:13636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.0.809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 193.785992][ T40] audit: type=1326 audit(1744592063.631:13635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.0.809" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 193.792872][ T40] audit: type=1326 audit(1744592063.681:13637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.0.809" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 193.799613][ T40] audit: type=1326 audit(1744592063.681:13638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.0.809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 193.805781][ T40] audit: type=1326 audit(1744592063.681:13639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.0.809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 193.812237][ T40] audit: type=1326 audit(1744592063.681:13640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.0.809" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 194.774726][ T9248] netlink: 'syz.1.812': attribute type 10 has an invalid length. [ 194.781036][ T9248] veth0_vlan: left promiscuous mode [ 194.783551][ T9248] veth0_vlan: entered promiscuous mode [ 194.786144][ T9248] team0: Device veth0_vlan failed to register rx_handler [ 195.202598][ T9263] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 195.249978][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.815'. [ 195.388875][ T34] usb 7-1: USB disconnect, device number 4 [ 195.953240][ T9276] input: syz0 as /devices/virtual/input/input10 [ 195.961368][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.818'. [ 196.127889][ T9279] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 197.150963][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 198.692230][ T9303] netlink: 'syz.0.826': attribute type 10 has an invalid length. [ 198.695182][ T9303] veth0_vlan: left promiscuous mode [ 198.697618][ T9303] veth0_vlan: entered promiscuous mode [ 198.700815][ T9303] team0: Device veth0_vlan failed to register rx_handler [ 198.706957][ T40] kauditd_printk_skb: 878 callbacks suppressed [ 198.706965][ T40] audit: type=1326 audit(1744592068.631:14519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.2.829" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 198.717392][ T40] audit: type=1326 audit(1744592068.641:14520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.2.829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 198.723732][ T40] audit: type=1326 audit(1744592068.641:14521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.2.829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 198.729577][ T40] audit: type=1326 audit(1744592068.641:14522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.2.829" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 198.792482][ T9324] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 198.839505][ T40] audit: type=1326 audit(1744592068.761:14523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9318 comm="syz.2.829" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 198.852334][ T40] audit: type=1326 audit(1744592068.761:14524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.2.829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 198.858331][ T40] audit: type=1326 audit(1744592068.761:14525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.2.829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 198.980926][ T40] audit: type=1326 audit(1744592068.901:14526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.0.833" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 198.986856][ T40] audit: type=1326 audit(1744592068.901:14527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.0.833" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 198.998713][ T40] audit: type=1326 audit(1744592068.901:14528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.0.833" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 199.870936][ C2] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 200.249454][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.842'. [ 200.863574][ T9367] netlink: 'syz.0.841': attribute type 10 has an invalid length. [ 200.866206][ T9367] veth0_vlan: left promiscuous mode [ 200.868151][ T9367] veth0_vlan: entered promiscuous mode [ 200.875762][ T9367] team0: Device veth0_vlan failed to register rx_handler [ 202.122403][ T9401] netlink: 'syz.1.851': attribute type 10 has an invalid length. [ 202.125568][ T9401] veth0_vlan: left promiscuous mode [ 202.127719][ T9401] veth0_vlan: entered promiscuous mode [ 202.130482][ T9401] team0: Device veth0_vlan failed to register rx_handler [ 202.546336][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.854'. [ 203.005177][ T9427] netlink: 'syz.0.855': attribute type 10 has an invalid length. [ 203.007988][ T9427] veth0_vlan: left promiscuous mode [ 203.025578][ T9427] veth0_vlan: entered promiscuous mode [ 203.041367][ T9427] team0: Device veth0_vlan failed to register rx_handler [ 203.259404][ T9436] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 203.585329][ T9446] CIFS mount error: No usable UNC path provided in device string! [ 203.585329][ T9446] [ 203.588922][ T9446] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 203.711051][ T5962] Bluetooth: hci0: command 0x0c1a tx timeout [ 203.961412][ T5962] Bluetooth: hci2: command 0x0c1a tx timeout [ 204.091267][ T40] kauditd_printk_skb: 856 callbacks suppressed [ 204.091278][ T40] audit: type=1326 audit(1744592074.021:15385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.1.860" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 204.101075][ T40] audit: type=1326 audit(1744592074.021:15386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.1.860" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 204.115339][ T40] audit: type=1326 audit(1744592074.021:15387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.1.860" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 204.126690][ T40] audit: type=1326 audit(1744592074.021:15388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.1.860" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 204.139618][ T40] audit: type=1326 audit(1744592074.031:15389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.1.860" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 204.156566][ T40] audit: type=1326 audit(1744592074.031:15390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.1.860" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 204.162591][ T40] audit: type=1326 audit(1744592074.031:15391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.1.860" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 204.168945][ T40] audit: type=1326 audit(1744592074.031:15392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.1.860" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 204.177099][ T40] audit: type=1326 audit(1744592074.031:15393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.1.860" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 204.183963][ T40] audit: type=1326 audit(1744592074.031:15394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.1.860" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 204.456639][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.863'. [ 204.617812][ T9463] netlink: 'syz.2.871': attribute type 10 has an invalid length. [ 204.621090][ T9463] veth0_vlan: left promiscuous mode [ 204.626164][ T9463] veth0_vlan: entered promiscuous mode [ 204.632081][ T9463] team0: Device veth0_vlan failed to register rx_handler [ 204.711577][ T9464] netlink: 32 bytes leftover after parsing attributes in process `syz.1.864'. [ 204.923235][ T9465] netlink: 'syz.3.866': attribute type 10 has an invalid length. [ 204.927642][ T9465] veth0_vlan: left promiscuous mode [ 204.932037][ T9465] veth0_vlan: entered promiscuous mode [ 204.943804][ T9465] team0: Device veth0_vlan failed to register rx_handler [ 205.598266][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.869'. [ 206.202800][ T9487] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 207.230840][ C3] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 207.562119][ T9491] netlink: 32 bytes leftover after parsing attributes in process `syz.2.873'. [ 207.655267][ T9491] netlink: 'syz.2.873': attribute type 10 has an invalid length. [ 207.662080][ T9491] veth0_vlan: left promiscuous mode [ 207.666944][ T9491] veth0_vlan: entered promiscuous mode [ 207.672964][ T9491] team0: Device veth0_vlan failed to register rx_handler [ 207.918934][ T9512] netlink: 32 bytes leftover after parsing attributes in process `syz.3.876'. [ 207.977756][ T9514] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 207.984033][ T9512] netlink: 'syz.3.876': attribute type 10 has an invalid length. [ 207.987007][ T9512] veth0_vlan: left promiscuous mode [ 207.990120][ T9512] veth0_vlan: entered promiscuous mode [ 208.007863][ T9512] team0: Device veth0_vlan failed to register rx_handler [ 208.805999][ T9523] netlink: 'syz.2.879': attribute type 10 has an invalid length. [ 208.808789][ T9523] veth0_vlan: left promiscuous mode [ 208.820173][ T9523] veth0_vlan: entered promiscuous mode [ 208.826798][ T9523] team0: Device veth0_vlan failed to register rx_handler [ 209.563899][ T40] kauditd_printk_skb: 603 callbacks suppressed [ 209.563914][ T40] audit: type=1326 audit(1744592079.341:15998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9524 comm="syz.0.880" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 209.572074][ T40] audit: type=1326 audit(1744592079.341:15999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9524 comm="syz.0.880" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 209.802841][ T40] audit: type=1326 audit(1744592079.731:16000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9524 comm="syz.0.880" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 209.835084][ T40] audit: type=1326 audit(1744592079.731:16001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9524 comm="syz.0.880" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 209.875241][ T40] audit: type=1326 audit(1744592079.771:16002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9524 comm="syz.0.880" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 209.928107][ T40] audit: type=1326 audit(1744592079.851:16003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9524 comm="syz.0.880" exe="/syz-executor" sig=0 arch=40000003 syscall=261 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 209.942982][ T40] audit: type=1326 audit(1744592079.851:16004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9524 comm="syz.0.880" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 209.952059][ T40] audit: type=1326 audit(1744592079.851:16005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9524 comm="syz.0.880" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 209.959533][ T40] audit: type=1326 audit(1744592079.851:16006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9524 comm="syz.0.880" exe="/syz-executor" sig=0 arch=40000003 syscall=248 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 209.966683][ T40] audit: type=1326 audit(1744592079.851:16007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9524 comm="syz.0.880" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 211.190755][ T9565] netlink: 68 bytes leftover after parsing attributes in process `syz.2.891'. [ 211.313930][ T9565] CIFS mount error: No usable UNC path provided in device string! [ 211.313930][ T9565] [ 211.317072][ T9565] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 211.851851][ T9574] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 212.192457][ T9583] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 213.230896][ C2] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 213.266019][ T9607] netlink: 32 bytes leftover after parsing attributes in process `syz.0.900'. [ 213.328626][ T9608] netlink: 'syz.0.900': attribute type 10 has an invalid length. [ 213.331430][ T9608] veth0_vlan: left promiscuous mode [ 213.341790][ T9608] veth0_vlan: entered promiscuous mode [ 213.344961][ T9608] team0: Device veth0_vlan failed to register rx_handler [ 214.151416][ T9631] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 214.209665][ T9632] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 215.169085][ T9644] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 215.232825][ T40] kauditd_printk_skb: 1031 callbacks suppressed [ 215.236995][ T40] audit: type=1326 audit(1744592085.141:17039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9642 comm="syz.2.910" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 215.306834][ T40] audit: type=1326 audit(1744592085.141:17040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9642 comm="syz.2.910" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 215.362295][ T40] audit: type=1326 audit(1744592085.141:17041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9642 comm="syz.2.910" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 215.391001][ T40] audit: type=1326 audit(1744592085.141:17042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9642 comm="syz.2.910" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 215.434959][ T40] audit: type=1326 audit(1744592085.141:17043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9642 comm="syz.2.910" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 215.444567][ T40] audit: type=1326 audit(1744592085.141:17044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9642 comm="syz.2.910" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f66598 code=0x7ffc0000 [ 215.516617][ T40] audit: type=1326 audit(1744592085.141:17045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9642 comm="syz.2.910" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f66598 code=0x7ffc0000 [ 215.600966][ T40] audit: type=1326 audit(1744592085.141:17046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9642 comm="syz.2.910" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f66598 code=0x7ffc0000 [ 215.638848][ T40] audit: type=1326 audit(1744592085.141:17047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9642 comm="syz.2.910" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f66598 code=0x7ffc0000 [ 215.671072][ T40] audit: type=1326 audit(1744592085.141:17048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9642 comm="syz.2.910" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f66598 code=0x7ffc0000 [ 216.356470][ T9656] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 217.351106][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.917'. [ 217.627620][ T9678] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 218.930232][ T9702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.927'. [ 218.932802][ T9702] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 219.302141][ T9712] netlink: 'syz.2.928': attribute type 10 has an invalid length. [ 219.304839][ T9712] veth0_vlan: left promiscuous mode [ 219.308314][ T9712] veth0_vlan: entered promiscuous mode [ 219.312835][ T9712] team0: Device veth0_vlan failed to register rx_handler [ 220.294397][ T9716] netlink: 'syz.0.930': attribute type 10 has an invalid length. [ 220.297450][ T9716] veth0_vlan: left promiscuous mode [ 220.302830][ T9716] veth0_vlan: entered promiscuous mode [ 220.306527][ T9716] team0: Device veth0_vlan failed to register rx_handler [ 220.628085][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.934'. [ 220.978983][ T40] kauditd_printk_skb: 1111 callbacks suppressed [ 220.979054][ T40] audit: type=1326 audit(1744592090.901:18160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.3.936" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 221.000903][ T40] audit: type=1326 audit(1744592090.921:18161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.3.936" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 221.119428][ T40] audit: type=1326 audit(1744592090.921:18162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.3.936" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 221.130972][ T40] audit: type=1326 audit(1744592090.921:18163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.3.936" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 221.137968][ T40] audit: type=1326 audit(1744592090.921:18164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.3.936" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 221.148303][ T40] audit: type=1326 audit(1744592090.921:18165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.3.936" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 221.154674][ T40] audit: type=1326 audit(1744592090.921:18166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.3.936" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf742e5a7 code=0x7ffc0000 [ 221.160662][ T40] audit: type=1326 audit(1744592090.921:18167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.3.936" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf742e598 code=0x7ffc0000 [ 221.166673][ T40] audit: type=1326 audit(1744592090.921:18168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.3.936" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf742e598 code=0x7ffc0000 [ 221.172740][ T40] audit: type=1326 audit(1744592090.921:18169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.3.936" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf742e598 code=0x7ffc0000 [ 221.652943][ T9761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.942'. [ 222.672237][ T9771] netlink: 'syz.3.944': attribute type 10 has an invalid length. [ 222.675003][ T9771] veth0_vlan: left promiscuous mode [ 222.678437][ T9771] veth0_vlan: entered promiscuous mode [ 222.684743][ T9771] team0: Device veth0_vlan failed to register rx_handler [ 223.437497][ T9784] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 224.665117][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.953'. [ 224.721068][ T9810] netlink: 'syz.1.950': attribute type 10 has an invalid length. [ 224.723829][ T9810] veth0_vlan: left promiscuous mode [ 224.726448][ T9810] veth0_vlan: entered promiscuous mode [ 224.730150][ T9810] team0: Device veth0_vlan failed to register rx_handler [ 226.106167][ T9823] netlink: 'syz.3.958': attribute type 10 has an invalid length. [ 226.111220][ T9823] veth0_vlan: left promiscuous mode [ 226.114879][ T9823] veth0_vlan: entered promiscuous mode [ 226.119584][ T9823] team0: Device veth0_vlan failed to register rx_handler [ 226.208476][ T40] kauditd_printk_skb: 476 callbacks suppressed [ 226.208486][ T40] audit: type=1326 audit(1744592096.131:18646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.1.964" exe="/syz-executor" sig=0 arch=40000003 syscall=261 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 226.220850][ T40] audit: type=1326 audit(1744592096.131:18647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.1.964" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 226.229432][ T40] audit: type=1326 audit(1744592096.131:18648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.1.964" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 226.235823][ T40] audit: type=1326 audit(1744592096.131:18649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.1.964" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 226.241878][ T40] audit: type=1326 audit(1744592096.131:18650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.1.964" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 226.251040][ T40] audit: type=1326 audit(1744592096.141:18651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.1.964" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 226.257462][ T40] audit: type=1326 audit(1744592096.141:18652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.1.964" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 226.263580][ T40] audit: type=1326 audit(1744592096.141:18653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.1.964" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 226.269640][ T40] audit: type=1326 audit(1744592096.141:18654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.1.964" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 226.276321][ T40] audit: type=1326 audit(1744592096.141:18655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.1.964" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 226.706234][ T9841] netlink: 64 bytes leftover after parsing attributes in process `syz.1.960'. [ 226.775062][ T9842] netlink: 'syz.1.960': attribute type 10 has an invalid length. [ 226.777827][ T9842] veth0_vlan: left promiscuous mode [ 226.789477][ T9842] veth0_vlan: entered promiscuous mode [ 226.803027][ T9842] team0: Device veth0_vlan failed to register rx_handler [ 226.932033][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.962'. [ 227.537763][ T9856] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 228.590878][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 228.660717][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.970'. [ 230.474233][ T9888] netlink: 64 bytes leftover after parsing attributes in process `syz.2.973'. [ 230.531871][ T9889] netlink: 'syz.2.973': attribute type 10 has an invalid length. [ 230.534386][ T9889] veth0_vlan: left promiscuous mode [ 230.546110][ T9889] veth0_vlan: entered promiscuous mode [ 230.553938][ T9889] team0: Device veth0_vlan failed to register rx_handler [ 231.073573][ T9908] netlink: 'syz.1.977': attribute type 10 has an invalid length. [ 231.081790][ T9908] veth0_vlan: left promiscuous mode [ 231.084593][ T9908] veth0_vlan: entered promiscuous mode [ 231.095077][ T9908] team0: Device veth0_vlan failed to register rx_handler [ 231.660725][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.980'. [ 231.931118][ T9917] netlink: 'syz.3.983': attribute type 10 has an invalid length. [ 231.934162][ T9917] veth0_vlan: left promiscuous mode [ 231.939350][ T9917] veth0_vlan: entered promiscuous mode [ 231.943179][ T9917] team0: Device veth0_vlan failed to register rx_handler [ 232.570180][ T40] kauditd_printk_skb: 1936 callbacks suppressed [ 232.570196][ T40] audit: type=1326 audit(1744592102.491:20592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9931 comm="syz.3.987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 232.581067][ T40] audit: type=1326 audit(1744592102.491:20593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9931 comm="syz.3.987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 232.588164][ T40] audit: type=1326 audit(1744592102.501:20594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9931 comm="syz.3.987" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 232.610816][ T40] audit: type=1326 audit(1744592102.501:20595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9931 comm="syz.3.987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 232.617355][ T40] audit: type=1326 audit(1744592102.501:20596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9931 comm="syz.3.987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 232.629565][ T40] audit: type=1326 audit(1744592102.501:20597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9931 comm="syz.3.987" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 232.637258][ T40] audit: type=1326 audit(1744592102.501:20598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9931 comm="syz.3.987" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf742e598 code=0x7ffc0000 [ 232.643087][ T40] audit: type=1326 audit(1744592102.501:20599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9931 comm="syz.3.987" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf742e598 code=0x7ffc0000 [ 232.650282][ T40] audit: type=1326 audit(1744592102.501:20600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9931 comm="syz.3.987" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf742e598 code=0x7ffc0000 [ 232.657735][ T40] audit: type=1326 audit(1744592102.501:20601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9931 comm="syz.3.987" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf742e598 code=0x7ffc0000 [ 232.853916][ T9937] netlink: 'syz.1.995': attribute type 10 has an invalid length. [ 232.856870][ T9937] veth0_vlan: left promiscuous mode [ 232.860359][ T9937] veth0_vlan: entered promiscuous mode [ 233.022332][ T9937] team0: Device veth0_vlan failed to register rx_handler [ 233.198161][ T9951] netlink: 64 bytes leftover after parsing attributes in process `syz.2.988'. [ 233.241637][ T9951] netlink: 'syz.2.988': attribute type 10 has an invalid length. [ 233.244517][ T9951] veth0_vlan: left promiscuous mode [ 233.246944][ T9951] veth0_vlan: entered promiscuous mode [ 233.251147][ T9951] team0: Device veth0_vlan failed to register rx_handler [ 233.784261][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.993'. [ 234.720017][ T9970] FAULT_INJECTION: forcing a failure. [ 234.720017][ T9970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.725283][ T9970] CPU: 1 UID: 0 PID: 9970 Comm: syz.3.997 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(full) [ 234.725306][ T9970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 234.725316][ T9970] Call Trace: [ 234.725322][ T9970] [ 234.725328][ T9970] dump_stack_lvl+0x16c/0x1f0 [ 234.725371][ T9970] should_fail_ex+0x512/0x640 [ 234.725398][ T9970] _copy_from_iter+0x2a4/0x15b0 [ 234.725420][ T9970] ? aa_file_perm+0x4d6/0xfb0 [ 234.725442][ T9970] ? __pfx__copy_from_iter+0x10/0x10 [ 234.725463][ T9970] ? __pfx_aa_file_perm+0x10/0x10 [ 234.725489][ T9970] vhost_chr_write_iter+0xc8/0x10f0 [ 234.725521][ T9970] ? __pfx_vhost_chr_write_iter+0x10/0x10 [ 234.725548][ T9970] ? bpf_lsm_file_permission+0x9/0x10 [ 234.725567][ T9970] ? security_file_permission+0x71/0x210 [ 234.725588][ T9970] ? rw_verify_area+0xcf/0x680 [ 234.725610][ T9970] vfs_write+0x5ba/0x1180 [ 234.725631][ T9970] ? __pfx_vhost_net_chr_write_iter+0x10/0x10 [ 234.725666][ T9970] ? __pfx_vfs_write+0x10/0x10 [ 234.725686][ T9970] ? find_held_lock+0x2b/0x80 [ 234.725719][ T9970] ksys_write+0x12a/0x240 [ 234.725740][ T9970] ? __pfx_ksys_write+0x10/0x10 [ 234.725759][ T9970] ? rcu_is_watching+0x12/0xc0 [ 234.725780][ T9970] ? rcu_is_watching+0x12/0xc0 [ 234.725802][ T9970] __do_fast_syscall_32+0x73/0x120 [ 234.725825][ T9970] do_fast_syscall_32+0x32/0x80 [ 234.725841][ T9970] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 234.725854][ T9970] RIP: 0023:0xf742e579 [ 234.725863][ T9970] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 234.725874][ T9970] RSP: 002b:00000000f507455c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 234.725884][ T9970] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000180 [ 234.725891][ T9970] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 234.725897][ T9970] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 234.725903][ T9970] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 234.725908][ T9970] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 234.725921][ T9970] [ 235.016399][ T9977] FAULT_INJECTION: forcing a failure. [ 235.016399][ T9977] name failslab, interval 1, probability 0, space 0, times 0 [ 235.019921][ T9977] CPU: 1 UID: 0 PID: 9977 Comm: syz.0.1000 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(full) [ 235.019935][ T9977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 235.019942][ T9977] Call Trace: [ 235.019946][ T9977] [ 235.019950][ T9977] dump_stack_lvl+0x16c/0x1f0 [ 235.019970][ T9977] should_fail_ex+0x512/0x640 [ 235.019982][ T9977] ? __kmalloc_noprof+0xbf/0x510 [ 235.019999][ T9977] ? fib6_info_alloc+0x40/0x160 [ 235.020012][ T9977] should_failslab+0xc2/0x120 [ 235.020023][ T9977] __kmalloc_noprof+0xd2/0x510 [ 235.020038][ T9977] ? fib6_get_table+0x16e/0x3b0 [ 235.020053][ T9977] fib6_info_alloc+0x40/0x160 [ 235.020066][ T9977] ip6_route_info_create+0x33f/0x18e0 [ 235.020080][ T9977] ? __pfx_ip6_route_info_create+0x10/0x10 [ 235.020091][ T9977] ? __asan_memcpy+0x3c/0x60 [ 235.020107][ T9977] ip6_route_multipath_add+0xa96/0x1f90 [ 235.020120][ T9977] ? __do_fast_syscall_32+0x73/0x120 [ 235.020138][ T9977] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 235.020159][ T9977] ? __mutex_trylock_common+0xe9/0x250 [ 235.020170][ T9977] ? __pfx___mutex_trylock_common+0x10/0x10 [ 235.020188][ T9977] ? inet6_rtm_newroute+0xe4/0x170 [ 235.020199][ T9977] inet6_rtm_newroute+0xe4/0x170 [ 235.020210][ T9977] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 235.020232][ T9977] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 235.020243][ T9977] rtnetlink_rcv_msg+0x3c6/0xe90 [ 235.020261][ T9977] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 235.020281][ T9977] netlink_rcv_skb+0x16a/0x440 [ 235.020298][ T9977] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 235.020313][ T9977] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 235.020336][ T9977] ? netlink_deliver_tap+0x1ae/0xd30 [ 235.020353][ T9977] netlink_unicast+0x53a/0x7f0 [ 235.020370][ T9977] ? __pfx_netlink_unicast+0x10/0x10 [ 235.020389][ T9977] netlink_sendmsg+0x8d1/0xdd0 [ 235.020407][ T9977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.020423][ T9977] ? __import_iovec+0x1c8/0x660 [ 235.020440][ T9977] ____sys_sendmsg+0xa95/0xc70 [ 235.020452][ T9977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.020461][ T9977] ? get_compat_msghdr+0x11a/0x170 [ 235.020480][ T9977] ___sys_sendmsg+0x134/0x1d0 [ 235.020495][ T9977] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.020524][ T9977] __sys_sendmsg+0x16d/0x220 [ 235.020538][ T9977] ? __pfx___sys_sendmsg+0x10/0x10 [ 235.020557][ T9977] ? rcu_is_watching+0x12/0xc0 [ 235.020572][ T9977] __do_fast_syscall_32+0x73/0x120 [ 235.020589][ T9977] do_fast_syscall_32+0x32/0x80 [ 235.020605][ T9977] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 235.020619][ T9977] RIP: 0023:0xf740e579 [ 235.020627][ T9977] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 235.020637][ T9977] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 235.020648][ T9977] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 235.020655][ T9977] RDX: 0000000000048002 RSI: 0000000000000000 RDI: 0000000000000000 [ 235.020661][ T9977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 235.020667][ T9977] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 235.020672][ T9977] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 235.020684][ T9977] [ 235.153443][ T9983] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 235.207526][ T9982] input: syz0 as /devices/virtual/input/input11 [ 235.276448][ T9987] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1005'. [ 235.432728][T10000] 9pnet_fd: p9_fd_create_unix (10000): problem connecting socket: ./file0/file0: -2 [ 235.623773][T10013] sch_tbf: burst 8791 is lower than device lo mtu (65550) ! [ 235.630340][T10013] sch_tbf: burst 8787 is lower than device lo mtu (65550) ! [ 235.726968][T10030] FAULT_INJECTION: forcing a failure. [ 235.726968][T10030] name failslab, interval 1, probability 0, space 0, times 0 [ 235.730522][T10030] CPU: 0 UID: 0 PID: 10030 Comm: syz.2.1014 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(full) [ 235.730537][T10030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 235.730544][T10030] Call Trace: [ 235.730554][T10030] [ 235.730559][T10030] dump_stack_lvl+0x16c/0x1f0 [ 235.730589][T10030] should_fail_ex+0x512/0x640 [ 235.730607][T10030] ? fs_reclaim_acquire+0xae/0x150 [ 235.730621][T10030] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 235.730636][T10030] should_failslab+0xc2/0x120 [ 235.730646][T10030] __kmalloc_noprof+0xd2/0x510 [ 235.730665][T10030] tomoyo_realpath_from_path+0xc2/0x6e0 [ 235.730681][T10030] ? tomoyo_profile+0x47/0x60 [ 235.730699][T10030] tomoyo_path_number_perm+0x245/0x580 [ 235.730711][T10030] ? tomoyo_path_number_perm+0x237/0x580 [ 235.730724][T10030] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 235.730748][T10030] ? d_alloc_parallel+0x979/0x12e0 [ 235.730773][T10030] ? current_check_access_path+0x33c/0x460 [ 235.730788][T10030] ? __pfx_current_check_access_path+0x10/0x10 [ 235.730805][T10030] tomoyo_path_mknod+0x10c/0x190 [ 235.730822][T10030] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 235.730840][T10030] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 235.730867][T10030] security_path_mknod+0x161/0x310 [ 235.730883][T10030] lookup_open.isra.0+0xc17/0x1580 [ 235.730900][T10030] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 235.730921][T10030] ? __pfx_down_write+0x10/0x10 [ 235.730930][T10030] ? mnt_get_write_access+0x20c/0x300 [ 235.730945][T10030] path_openat+0x905/0x2d40 [ 235.730965][T10030] ? __pfx_path_openat+0x10/0x10 [ 235.730984][T10030] do_filp_open+0x20b/0x470 [ 235.731000][T10030] ? __pfx_do_filp_open+0x10/0x10 [ 235.731025][T10030] ? _raw_spin_unlock+0x28/0x50 [ 235.731037][T10030] ? alloc_fd+0x471/0x7d0 [ 235.731056][T10030] do_sys_openat2+0x11b/0x1d0 [ 235.731068][T10030] ? __pfx_do_sys_openat2+0x10/0x10 [ 235.731079][T10030] ? __fget_files+0x20e/0x3c0 [ 235.731098][T10030] __ia32_sys_creat+0xcb/0x120 [ 235.731110][T10030] ? __pfx___ia32_sys_creat+0x10/0x10 [ 235.731121][T10030] ? __pfx_ksys_write+0x10/0x10 [ 235.731137][T10030] ? rcu_is_watching+0x12/0xc0 [ 235.731150][T10030] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 235.731167][T10030] ? lockdep_hardirqs_on+0x7c/0x110 [ 235.731182][T10030] __do_fast_syscall_32+0x73/0x120 [ 235.731199][T10030] do_fast_syscall_32+0x32/0x80 [ 235.731215][T10030] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 235.731228][T10030] RIP: 0023:0xf7f66579 [ 235.731237][T10030] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 235.731302][T10030] RSP: 002b:00000000f506555c EFLAGS: 00000296 ORIG_RAX: 0000000000000008 [ 235.731321][T10030] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000020 [ 235.731365][T10030] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 235.731375][T10030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 235.731381][T10030] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 235.731388][T10030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 235.731402][T10030] [ 235.761493][T10031] netlink: 'syz.3.1008': attribute type 10 has an invalid length. [ 235.761923][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.772041][T10031] veth0_vlan: left promiscuous mode [ 235.804973][T10030] ERROR: Out of memory at tomoyo_realpath_from_path. [ 235.807527][T10031] veth0_vlan: entered promiscuous mode [ 235.831690][T10031] team0: Device veth0_vlan failed to register rx_handler [ 235.889378][T10024] netlink: 'syz.0.1015': attribute type 5 has an invalid length. [ 236.391524][T10062] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 237.012871][T10075] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 237.023440][T10075] process 'syz.0.1022' launched '/dev/fd/6' with NULL argv: empty string added [ 237.308938][T10081] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 237.320855][ T5962] Bluetooth: hci0: command 0x0c1a tx timeout [ 237.347803][T10083] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 237.421112][ T66] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 237.423069][ T66] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 237.988798][T10090] netlink: 'syz.1.1025': attribute type 10 has an invalid length. [ 237.992325][T10090] veth0_vlan: left promiscuous mode [ 237.996113][T10090] veth0_vlan: entered promiscuous mode [ 238.000155][T10090] team0: Device veth0_vlan failed to register rx_handler [ 238.664600][T10106] FAULT_INJECTION: forcing a failure. [ 238.664600][T10106] name failslab, interval 1, probability 0, space 0, times 0 [ 238.669307][T10106] CPU: 3 UID: 0 PID: 10106 Comm: syz.2.1028 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(full) [ 238.669321][T10106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 238.669328][T10106] Call Trace: [ 238.669332][T10106] [ 238.669337][T10106] dump_stack_lvl+0x16c/0x1f0 [ 238.669356][T10106] should_fail_ex+0x512/0x640 [ 238.669369][T10106] ? fs_reclaim_acquire+0xae/0x150 [ 238.669382][T10106] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 238.669403][T10106] should_failslab+0xc2/0x120 [ 238.669414][T10106] __kmalloc_noprof+0xd2/0x510 [ 238.669433][T10106] tomoyo_realpath_from_path+0xc2/0x6e0 [ 238.669449][T10106] ? tomoyo_profile+0x47/0x60 [ 238.669466][T10106] tomoyo_path_number_perm+0x245/0x580 [ 238.669478][T10106] ? tomoyo_path_number_perm+0x237/0x580 [ 238.669491][T10106] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 238.669504][T10106] ? find_held_lock+0x2b/0x80 [ 238.669538][T10106] ? find_held_lock+0x2b/0x80 [ 238.669556][T10106] ? hook_file_ioctl_common+0x145/0x410 [ 238.669578][T10106] ? __fget_files+0x20e/0x3c0 [ 238.669605][T10106] security_file_ioctl_compat+0x9b/0x240 [ 238.669627][T10106] __do_compat_sys_ioctl+0x4e/0x2c0 [ 238.669650][T10106] __do_fast_syscall_32+0x73/0x120 [ 238.669677][T10106] do_fast_syscall_32+0x32/0x80 [ 238.669700][T10106] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 238.669721][T10106] RIP: 0023:0xf7f66579 [ 238.669734][T10106] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 238.669750][T10106] RSP: 002b:00000000f506555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 238.669766][T10106] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000004008af00 [ 238.669776][T10106] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 238.669786][T10106] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 238.669796][T10106] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 238.669806][T10106] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 238.669828][T10106] [ 238.669835][T10106] ERROR: Out of memory at tomoyo_realpath_from_path. [ 239.481291][ T5962] Bluetooth: hci1: command 0x0c1a tx timeout [ 239.542176][ T66] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 239.543973][ T66] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 239.545379][ T40] kauditd_printk_skb: 1389 callbacks suppressed [ 239.545392][ T40] audit: type=1326 audit(1744592365.466:21991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.2.1035" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 239.558272][ T40] audit: type=1326 audit(1744592365.466:21992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.2.1035" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 239.566773][ T40] audit: type=1326 audit(1744592365.466:21993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.2.1035" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 239.575870][ T40] audit: type=1326 audit(1744592365.466:21994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.2.1035" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 239.584779][ T40] audit: type=1326 audit(1744592365.466:21995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.2.1035" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 239.593477][ T40] audit: type=1326 audit(1744592365.466:21996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.2.1035" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f66598 code=0x7ffc0000 [ 239.603626][ T40] audit: type=1326 audit(1744592365.466:21997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.2.1035" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f66598 code=0x7ffc0000 [ 239.611946][ T40] audit: type=1326 audit(1744592365.476:21998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.2.1035" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f66598 code=0x7ffc0000 [ 239.625882][ T40] audit: type=1326 audit(1744592365.476:21999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.2.1035" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f66598 code=0x7ffc0000 [ 239.670938][ T40] audit: type=1326 audit(1744592365.476:22000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.2.1035" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f66598 code=0x7ffc0000 [ 239.839761][T10135] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 240.352614][T10138] afs: Unknown parameter 'vyn' [ 240.630945][ T29] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 240.646566][T10145] netlink: 'syz.2.1039': attribute type 10 has an invalid length. [ 240.685193][T10145] veth0_vlan: left promiscuous mode [ 240.747674][T10145] veth0_vlan: entered promiscuous mode [ 240.780877][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 240.785473][ T29] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 240.787889][ T29] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 240.790231][ T29] usb 8-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 240.796724][ T29] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 240.831663][T10145] team0: Device veth0_vlan failed to register rx_handler [ 240.836061][ T29] usb 8-1: config 250 has no interface number 0 [ 240.837813][ T29] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 240.840591][ T29] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 240.849622][ T29] usb 8-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 240.871402][ T29] usb 8-1: config 250 interface 228 has no altsetting 0 [ 240.875476][ T29] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 240.878013][ T29] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 240.882480][ T29] usb 8-1: Product: syz [ 240.883712][ T29] usb 8-1: SerialNumber: syz [ 240.892698][ T29] hub 8-1:250.228: bad descriptor, ignoring hub [ 240.898856][ T29] hub 8-1:250.228: probe with driver hub failed with error -5 [ 241.174214][T10152] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1042'. [ 241.180164][T10152] netlink: 'syz.1.1042': attribute type 10 has an invalid length. [ 241.182868][T10152] veth0_vlan: left promiscuous mode [ 241.186503][T10152] veth0_vlan: entered promiscuous mode [ 241.193060][T10152] team0: Device veth0_vlan failed to register rx_handler [ 241.550917][ T5962] Bluetooth: hci3: command 0x0c1a tx timeout [ 241.550979][ T66] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 241.554730][ T66] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 242.005118][ T5957] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 242.168699][T10172] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 242.286273][ T5957] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.294310][ T5957] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.302360][ T5957] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 242.311931][ T5957] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.318689][ T5957] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.337478][ T5957] usb 7-1: config 0 descriptor?? [ 242.772343][T10174] infiniband syz1: set active [ 242.773818][T10174] infiniband syz1: added syz_tun [ 242.804373][T10174] RDS/IB: syz1: added [ 242.806149][T10174] smc: adding ib device syz1 with port count 1 [ 242.808458][T10174] smc: ib device syz1 port 1 has pnetid [ 242.821547][ T6036] usb 8-1: USB disconnect, device number 6 [ 243.072361][T10178] bridge0: port 3(netdevsim0) entered disabled state [ 243.074333][T10178] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.076666][T10178] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.088784][T10178] batman_adv: batadv0: Interface deactivated: dummy0 [ 243.091454][T10178] batman_adv: batadv0: Removing interface: dummy0 [ 243.107050][T10178] 0ªX¹¦À: left allmulticast mode [ 243.136782][T10178] bridge_slave_0: left allmulticast mode [ 243.138357][T10178] bridge_slave_0: left promiscuous mode [ 243.140023][T10178] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.147032][T10178] bridge_slave_1: left allmulticast mode [ 243.148604][T10178] bridge_slave_1: left promiscuous mode [ 243.150187][T10178] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.158809][T10178] bond0: (slave bond_slave_0): Releasing backup interface [ 243.168858][T10178] bond0: (slave bond_slave_1): Releasing backup interface [ 243.175109][T10178] team0: Port device team_slave_0 removed [ 243.182258][T10178] team0: Port device team_slave_1 removed [ 243.185798][T10178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.189351][T10178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.195731][T10178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.201792][T10178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.253494][T10178] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.256046][T10178] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.258485][T10178] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.261426][T10178] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.272165][T10178] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 243.274448][T10178] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 243.276669][T10178] bridge0: port 3(netdevsim0) entered disabled state [ 243.301844][T10178] vlan2: left promiscuous mode [ 243.303275][T10178] bridge0: left promiscuous mode [ 243.304733][T10178] vlan2: left allmulticast mode [ 243.306151][T10178] bridge0: left allmulticast mode [ 243.312333][ T1457] syz1: Port: 1 Link DOWN [ 243.348629][T10192] FAULT_INJECTION: forcing a failure. [ 243.348629][T10192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.361204][T10192] CPU: 1 UID: 0 PID: 10192 Comm: syz.1.1054 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(full) [ 243.361230][T10192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 243.361237][T10192] Call Trace: [ 243.361241][T10192] [ 243.361246][T10192] dump_stack_lvl+0x16c/0x1f0 [ 243.361266][T10192] should_fail_ex+0x512/0x640 [ 243.361281][T10192] _copy_from_user+0x2e/0xd0 [ 243.361295][T10192] get_compat_msghdr+0xa7/0x170 [ 243.361309][T10192] ? __pfx_get_compat_msghdr+0x10/0x10 [ 243.361327][T10192] ___sys_sendmsg+0x1ae/0x1d0 [ 243.361343][T10192] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.361372][T10192] __sys_sendmsg+0x16d/0x220 [ 243.361385][T10192] ? __pfx___sys_sendmsg+0x10/0x10 [ 243.361405][T10192] ? rcu_is_watching+0x12/0xc0 [ 243.361421][T10192] __do_fast_syscall_32+0x73/0x120 [ 243.361437][T10192] do_fast_syscall_32+0x32/0x80 [ 243.361453][T10192] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.361467][T10192] RIP: 0023:0xf7ff1579 [ 243.361475][T10192] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 243.361485][T10192] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 243.361496][T10192] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000540 [ 243.361502][T10192] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 243.361508][T10192] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 243.361514][T10192] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 243.361520][T10192] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.361532][T10192] [ 243.424371][T10195] netlink: 'syz.3.1053': attribute type 10 has an invalid length. [ 243.427039][T10195] veth0_vlan: left promiscuous mode [ 243.429138][T10195] veth0_vlan: entered promiscuous mode [ 243.431999][T10195] team0: Device veth0_vlan failed to register rx_handler [ 243.631049][ T5964] Bluetooth: hci2: command 0x0c1a tx timeout [ 243.730084][ T66] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 243.742858][ T66] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 243.997509][T10198] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1056'. [ 244.062078][T10198] netlink: 'syz.1.1056': attribute type 10 has an invalid length. [ 244.064544][T10198] veth0_vlan: left promiscuous mode [ 244.066539][T10198] veth0_vlan: entered promiscuous mode [ 244.069277][T10198] team0: Device veth0_vlan failed to register rx_handler [ 244.585532][T10183] block nbd2: shutting down sockets [ 244.621810][ T5957] usbhid 7-1:0.0: can't add hid device: -71 [ 244.624064][ T5957] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 244.644096][ T5957] usb 7-1: USB disconnect, device number 5 [ 244.808648][T10236] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 244.992126][ T40] kauditd_printk_skb: 336 callbacks suppressed [ 244.992141][ T40] audit: type=1326 audit(1744592370.906:22337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.3.1058" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf742e598 code=0x7ffc0000 [ 245.006058][ T40] audit: type=1326 audit(1744592370.916:22338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.3.1058" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf742e598 code=0x7ffc0000 [ 245.020879][ T40] audit: type=1326 audit(1744592370.916:22339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.3.1058" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf742e598 code=0x7ffc0000 [ 245.027968][ T40] audit: type=1326 audit(1744592370.916:22340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.3.1058" exe="/syz-executor" sig=0 arch=40000003 syscall=261 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 245.034613][ T40] audit: type=1326 audit(1744592370.916:22341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.3.1058" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 245.040449][ T40] audit: type=1326 audit(1744592370.916:22342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.3.1058" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 245.047469][ T40] audit: type=1326 audit(1744592370.916:22343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.3.1058" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf742e598 code=0x7ffc0000 [ 245.057676][ T40] audit: type=1326 audit(1744592370.916:22344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.3.1058" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf742e598 code=0x7ffc0000 [ 245.063732][ T40] audit: type=1326 audit(1744592370.916:22345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.3.1058" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf742e598 code=0x7ffc0000 [ 245.146381][ T40] audit: type=1326 audit(1744592370.916:22346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.3.1058" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf742e598 code=0x7ffc0000 [ 245.523723][T10255] netlink: 'syz.3.1066': attribute type 10 has an invalid length. [ 245.527872][T10255] veth0_vlan: left promiscuous mode [ 245.534120][T10255] veth0_vlan: entered promiscuous mode [ 245.549413][T10255] team0: Device veth0_vlan failed to register rx_handler [ 246.028006][T10260] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1068'. [ 246.083412][T10260] netlink: 'syz.2.1068': attribute type 10 has an invalid length. [ 246.090229][T10260] veth0_vlan: left promiscuous mode [ 246.092562][T10260] veth0_vlan: entered promiscuous mode [ 246.098795][T10260] team0: Device veth0_vlan failed to register rx_handler [ 246.156370][T10264] netlink: 'syz.0.1070': attribute type 8 has an invalid length. [ 246.340407][T10267] raw_sendmsg: syz.3.1071 forgot to set AF_INET. Fix it! [ 246.452441][T10273] netlink: 'syz.3.1073': attribute type 23 has an invalid length. [ 247.244067][T10290] netlink: 'syz.1.1077': attribute type 2 has an invalid length. [ 248.168320][T10307] netlink: 'syz.3.1079': attribute type 10 has an invalid length. [ 248.175378][T10305] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1080'. [ 248.188881][T10307] veth0_vlan: left promiscuous mode [ 248.193995][T10307] veth0_vlan: entered promiscuous mode [ 248.199862][T10307] team0: Device veth0_vlan failed to register rx_handler [ 248.765153][T10313] netlink: 'syz.3.1082': attribute type 17 has an invalid length. [ 248.767137][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1082'. [ 248.769315][T10313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1082'. [ 248.960084][T10320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1085'. [ 249.063825][T10324] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1083'. [ 249.115646][T10316] netlink: 'syz.3.1083': attribute type 10 has an invalid length. [ 249.118146][T10316] veth0_vlan: left promiscuous mode [ 249.120603][T10316] veth0_vlan: entered promiscuous mode [ 249.124982][T10316] team0: Device veth0_vlan failed to register rx_handler [ 249.220095][T10330] FAULT_INJECTION: forcing a failure. [ 249.220095][T10330] name failslab, interval 1, probability 0, space 0, times 0 [ 249.225266][T10330] CPU: 3 UID: 0 PID: 10330 Comm: syz.0.1087 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(full) [ 249.225282][T10330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 249.225289][T10330] Call Trace: [ 249.225293][T10330] [ 249.225298][T10330] dump_stack_lvl+0x16c/0x1f0 [ 249.225317][T10330] should_fail_ex+0x512/0x640 [ 249.225330][T10330] ? fs_reclaim_acquire+0xae/0x150 [ 249.225349][T10330] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 249.225365][T10330] should_failslab+0xc2/0x120 [ 249.225375][T10330] __kmalloc_noprof+0xd2/0x510 [ 249.225395][T10330] tomoyo_realpath_from_path+0xc2/0x6e0 [ 249.225413][T10330] tomoyo_check_open_permission+0x2ab/0x3c0 [ 249.225426][T10330] ? init_file+0x93/0x4c0 [ 249.225436][T10330] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 249.225449][T10330] ? ovl_open+0x1dd/0x330 [ 249.225465][T10330] ? path_openat+0x1e5e/0x2d40 [ 249.225479][T10330] ? do_filp_open+0x20b/0x470 [ 249.225505][T10330] ? find_held_lock+0x2b/0x80 [ 249.225523][T10330] tomoyo_file_open+0x6b/0x90 [ 249.225541][T10330] security_file_open+0x84/0x1e0 [ 249.225555][T10330] do_dentry_open+0x596/0x1c10 [ 249.225574][T10330] vfs_open+0x82/0x3f0 [ 249.225584][T10330] ? do_raw_spin_unlock+0x172/0x230 [ 249.225598][T10330] backing_file_open+0xac/0x110 [ 249.225616][T10330] ovl_open_realfile+0x27e/0x3b0 [ 249.225633][T10330] ovl_open+0x1dd/0x330 [ 249.225648][T10330] ? __pfx_ovl_open+0x10/0x10 [ 249.225665][T10330] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 249.225683][T10330] do_dentry_open+0x741/0x1c10 [ 249.225698][T10330] ? __pfx_ovl_open+0x10/0x10 [ 249.225716][T10330] vfs_open+0x82/0x3f0 [ 249.225728][T10330] path_openat+0x1e5e/0x2d40 [ 249.225748][T10330] ? __pfx_path_openat+0x10/0x10 [ 249.225768][T10330] do_filp_open+0x20b/0x470 [ 249.225783][T10330] ? __pfx_do_filp_open+0x10/0x10 [ 249.225808][T10330] ? _raw_spin_unlock+0x28/0x50 [ 249.225822][T10330] ? alloc_fd+0x471/0x7d0 [ 249.225841][T10330] do_sys_openat2+0x11b/0x1d0 [ 249.225852][T10330] ? __pfx_do_sys_openat2+0x10/0x10 [ 249.225865][T10330] ? __fget_files+0x20e/0x3c0 [ 249.225885][T10330] __ia32_compat_sys_open+0x146/0x1e0 [ 249.225898][T10330] ? __pfx___ia32_compat_sys_open+0x10/0x10 [ 249.225912][T10330] ? rcu_is_watching+0x12/0xc0 [ 249.225926][T10330] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 249.225944][T10330] __do_fast_syscall_32+0x73/0x120 [ 249.225961][T10330] do_fast_syscall_32+0x32/0x80 [ 249.225977][T10330] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 249.225990][T10330] RIP: 0023:0xf740e579 [ 249.226000][T10330] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 249.226010][T10330] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 249.226021][T10330] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000000141042 [ 249.226027][T10330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 249.226033][T10330] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 249.226039][T10330] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 249.226045][T10330] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.226058][T10330] [ 249.226062][T10330] ERROR: Out of memory at tomoyo_realpath_from_path. [ 249.437760][T10334] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1089'. [ 249.492342][T10335] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1088'. [ 249.798855][T10344] netlink: 'syz.2.1090': attribute type 10 has an invalid length. [ 249.854533][T10344] veth0_vlan: left promiscuous mode [ 249.896694][T10344] veth0_vlan: entered promiscuous mode [ 249.948885][T10344] team0: Device veth0_vlan failed to register rx_handler [ 250.439068][T10368] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1097'. [ 250.633434][T10374] xt_connbytes: Forcing CT accounting to be enabled [ 250.635564][T10374] xt_CT: You must specify a L4 protocol and not use inversions on it [ 251.075391][T10378] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1100'. [ 251.160234][T10379] netlink: 'syz.0.1100': attribute type 10 has an invalid length. [ 251.177524][T10379] veth0_vlan: left promiscuous mode [ 251.190882][T10379] veth0_vlan: entered promiscuous mode [ 251.209019][T10379] team0: Device veth0_vlan failed to register rx_handler [ 251.308373][ T40] kauditd_printk_skb: 130 callbacks suppressed [ 251.308437][ T40] audit: type=1326 audit(1744592633.227:22477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.1.1101" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x0 [ 251.752979][T10389] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.977619][ T40] audit: type=1326 audit(1744592633.897:22478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10387 comm="syz.1.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 252.008259][ T40] audit: type=1326 audit(1744592633.897:22479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10387 comm="syz.1.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 252.019998][ T40] audit: type=1326 audit(1744592633.927:22480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10387 comm="syz.1.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 252.026486][ T40] audit: type=1326 audit(1744592633.927:22481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10387 comm="syz.1.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 252.032620][ T40] audit: type=1326 audit(1744592633.937:22482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10387 comm="syz.1.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 252.124828][ T40] audit: type=1326 audit(1744592634.037:22483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10387 comm="syz.1.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 252.133348][ T40] audit: type=1326 audit(1744592634.057:22484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10387 comm="syz.1.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 252.149197][ T40] audit: type=1326 audit(1744592634.057:22485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10387 comm="syz.1.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 252.158268][ T40] audit: type=1326 audit(1744592634.077:22486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10387 comm="syz.1.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 252.583078][T10407] netlink: 'syz.2.1106': attribute type 10 has an invalid length. [ 252.585374][T10407] veth0_vlan: left promiscuous mode [ 252.587668][T10407] veth0_vlan: entered promiscuous mode [ 252.593883][T10407] team0: Device veth0_vlan failed to register rx_handler [ 252.771358][T10420] netlink: 'syz.3.1108': attribute type 1 has an invalid length. [ 252.810319][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1108'. [ 252.817474][T10420] 8021q: adding VLAN 0 to HW filter on device batadv14 [ 252.831689][T10420] bond1: (slave batadv14): Enslaving as a backup interface with an up link [ 253.676412][T10440] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.282276][T10453] netlink: 'syz.3.1118': attribute type 1 has an invalid length. [ 254.371870][T10453] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.537811][T10457] netlink: 'syz.2.1119': attribute type 9 has an invalid length. [ 254.539988][T10457] netlink: 'syz.2.1119': attribute type 6 has an invalid length. [ 254.845876][T10473] FAULT_INJECTION: forcing a failure. [ 254.845876][T10473] name failslab, interval 1, probability 0, space 0, times 0 [ 254.849967][T10473] CPU: 2 UID: 0 PID: 10473 Comm: syz.1.1124 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(full) [ 254.850004][T10473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 254.850014][T10473] Call Trace: [ 254.850021][T10473] [ 254.850028][T10473] dump_stack_lvl+0x16c/0x1f0 [ 254.850055][T10473] should_fail_ex+0x512/0x640 [ 254.850074][T10473] ? fs_reclaim_acquire+0xae/0x150 [ 254.850096][T10473] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 254.850119][T10473] should_failslab+0xc2/0x120 [ 254.850135][T10473] __kmalloc_noprof+0xd2/0x510 [ 254.850166][T10473] tomoyo_realpath_from_path+0xc2/0x6e0 [ 254.850191][T10473] ? tomoyo_profile+0x47/0x60 [ 254.850218][T10473] tomoyo_path_number_perm+0x245/0x580 [ 254.850237][T10473] ? tomoyo_path_number_perm+0x237/0x580 [ 254.850258][T10473] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 254.850279][T10473] ? find_held_lock+0x2b/0x80 [ 254.850331][T10473] ? find_held_lock+0x2b/0x80 [ 254.850350][T10473] ? hook_file_ioctl_common+0x145/0x410 [ 254.850375][T10473] ? __fget_files+0x20e/0x3c0 [ 254.850402][T10473] security_file_ioctl_compat+0x9b/0x240 [ 254.850424][T10473] __do_compat_sys_ioctl+0x4e/0x2c0 [ 254.850447][T10473] __do_fast_syscall_32+0x73/0x120 [ 254.850473][T10473] do_fast_syscall_32+0x32/0x80 [ 254.850496][T10473] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 254.850516][T10473] RIP: 0023:0xf7ff1579 [ 254.850529][T10473] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 254.850545][T10473] RSP: 002b:00000000f50f555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 254.850560][T10473] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000800452d2 [ 254.850570][T10473] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 254.850580][T10473] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 254.850589][T10473] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 254.850598][T10473] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 254.850619][T10473] [ 254.868227][T10473] ERROR: Out of memory at tomoyo_realpath_from_path. [ 255.156819][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.159119][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.792224][T10489] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1128'. [ 255.853356][T10490] netlink: 'syz.1.1128': attribute type 10 has an invalid length. [ 255.855685][T10490] veth0_vlan: left promiscuous mode [ 255.859281][T10490] veth0_vlan: entered promiscuous mode [ 255.863281][T10490] team0: Device veth0_vlan failed to register rx_handler [ 256.311782][ T40] kauditd_printk_skb: 429 callbacks suppressed [ 256.311795][ T40] audit: type=1326 audit(1744592638.237:22916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10492 comm="syz.2.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f66598 code=0x7ffc0000 [ 256.337839][ T40] audit: type=1326 audit(1744592638.237:22917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10492 comm="syz.2.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f66598 code=0x7ffc0000 [ 256.354232][ T40] audit: type=1326 audit(1744592638.237:22918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10492 comm="syz.2.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f66598 code=0x7ffc0000 [ 256.368217][ T40] audit: type=1326 audit(1744592638.237:22919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10492 comm="syz.2.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f66598 code=0x7ffc0000 [ 256.385402][ T40] audit: type=1326 audit(1744592638.237:22920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10492 comm="syz.2.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f66598 code=0x7ffc0000 [ 256.395517][ T40] audit: type=1326 audit(1744592638.237:22921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10492 comm="syz.2.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f66598 code=0x7ffc0000 [ 256.407967][ T40] audit: type=1326 audit(1744592638.237:22922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10492 comm="syz.2.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f66598 code=0x7ffc0000 [ 256.421436][ T40] audit: type=1326 audit(1744592638.247:22923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10492 comm="syz.2.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f66598 code=0x7ffc0000 [ 256.434808][ T40] audit: type=1326 audit(1744592638.247:22924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10492 comm="syz.2.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f66598 code=0x7ffc0000 [ 256.449029][ T40] audit: type=1326 audit(1744592638.247:22925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10492 comm="syz.2.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f66598 code=0x7ffc0000 [ 257.174178][T10519] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1140'. [ 257.240496][T10524] FAULT_INJECTION: forcing a failure. [ 257.240496][T10524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.244679][T10524] CPU: 0 UID: 0 PID: 10524 Comm: syz.1.1142 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(full) [ 257.244693][T10524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 257.244701][T10524] Call Trace: [ 257.244705][T10524] [ 257.244709][T10524] dump_stack_lvl+0x16c/0x1f0 [ 257.244729][T10524] should_fail_ex+0x512/0x640 [ 257.244744][T10524] _copy_from_user+0x2e/0xd0 [ 257.244759][T10524] get_compat_msghdr+0xa7/0x170 [ 257.244774][T10524] ? __pfx_get_compat_msghdr+0x10/0x10 [ 257.244792][T10524] ___sys_sendmsg+0x1ae/0x1d0 [ 257.244807][T10524] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.244837][T10524] __sys_sendmsg+0x16d/0x220 [ 257.244850][T10524] ? __pfx___sys_sendmsg+0x10/0x10 [ 257.244868][T10524] ? rcu_is_watching+0x12/0xc0 [ 257.244883][T10524] ? rcu_is_watching+0x12/0xc0 [ 257.244897][T10524] __do_fast_syscall_32+0x73/0x120 [ 257.244915][T10524] do_fast_syscall_32+0x32/0x80 [ 257.244931][T10524] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.244944][T10524] RIP: 0023:0xf7ff1579 [ 257.244953][T10524] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 257.244964][T10524] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 257.244974][T10524] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000540 [ 257.244980][T10524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 257.244986][T10524] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.244992][T10524] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 257.245002][T10524] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.245015][T10524] [ 257.601117][ T1324] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 257.750896][ T1324] usb 8-1: Using ep0 maxpacket: 8 [ 257.754413][ T1324] usb 8-1: config 0 has no interfaces? [ 257.757702][ T1324] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 257.760357][ T1324] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.764095][ T1324] usb 8-1: Product: syz [ 257.765307][ T1324] usb 8-1: Manufacturer: syz [ 257.766679][ T1324] usb 8-1: SerialNumber: syz [ 257.769558][ T1324] usb 8-1: config 0 descriptor?? [ 257.850892][T10533] netlink: 'syz.1.1143': attribute type 10 has an invalid length. [ 257.871568][T10533] veth0_vlan: left promiscuous mode [ 257.951738][T10533] veth0_vlan: entered promiscuous mode [ 257.985575][ T10] usb 8-1: USB disconnect, device number 7 [ 258.081006][T10533] team0: Device veth0_vlan failed to register rx_handler [ 258.677592][T10558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1148'. [ 258.694059][T10558] macvtap1: entered promiscuous mode [ 258.696023][T10558] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 258.704005][T10558] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 258.857411][T10564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1153'. [ 258.870625][T10564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1153'. [ 258.874744][T10565] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 259.960855][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.133357][T10589] netlink: 'syz.0.1157': attribute type 10 has an invalid length. [ 260.135693][T10589] veth0_vlan: left promiscuous mode [ 260.145927][T10589] veth0_vlan: entered promiscuous mode [ 260.151021][T10589] team0: Device veth0_vlan failed to register rx_handler [ 260.252212][T10597] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.846565][T10570] netlink: 'syz.2.1154': attribute type 10 has an invalid length. [ 260.848734][T10570] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1154'. [ 260.851716][T10570] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 261.494204][T10628] netlink: 'syz.0.1171': attribute type 10 has an invalid length. [ 261.500903][T10628] veth0_vlan: left promiscuous mode [ 261.515796][T10628] veth0_vlan: entered promiscuous mode [ 261.531189][T10628] team0: Device veth0_vlan failed to register rx_handler [ 261.585535][T10623] virt_wifi0 speed is unknown, defaulting to 1000 [ 261.587917][T10623] virt_wifi0 speed is unknown, defaulting to 1000 [ 261.601226][T10623] virt_wifi0 speed is unknown, defaulting to 1000 [ 261.625027][T10623] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 261.690647][T10623] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 261.744020][T10623] virt_wifi0 speed is unknown, defaulting to 1000 [ 261.748602][T10623] virt_wifi0 speed is unknown, defaulting to 1000 [ 261.751738][T10623] virt_wifi0 speed is unknown, defaulting to 1000 [ 261.754423][T10623] virt_wifi0 speed is unknown, defaulting to 1000 [ 262.349498][T10639] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 262.835566][T10660] warning: `syz.0.1182' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 263.390864][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 263.553529][T10670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1183'. [ 263.652497][T10672] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 263.771315][T10675] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 264.005899][ T40] kauditd_printk_skb: 1491 callbacks suppressed [ 264.005967][ T40] audit: type=1326 audit(1744592645.927:24417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10673 comm="syz.1.1186" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 264.025378][ T40] audit: type=1326 audit(1744592645.937:24418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10673 comm="syz.1.1186" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 264.033101][ T40] audit: type=1326 audit(1744592645.957:24419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10673 comm="syz.1.1186" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 264.039208][ T40] audit: type=1326 audit(1744592645.957:24420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10673 comm="syz.1.1186" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 264.045512][ T40] audit: type=1326 audit(1744592645.957:24421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10673 comm="syz.1.1186" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 264.058023][ T40] audit: type=1326 audit(1744592645.977:24422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10673 comm="syz.1.1186" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 264.083025][ T40] audit: type=1326 audit(1744592645.977:24423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10673 comm="syz.1.1186" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 264.088903][ T40] audit: type=1326 audit(1744592645.987:24424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10673 comm="syz.1.1186" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 264.095106][ T40] audit: type=1326 audit(1744592645.997:24425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10673 comm="syz.1.1186" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 264.101250][ T40] audit: type=1326 audit(1744592645.997:24426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10673 comm="syz.1.1186" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 264.469238][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1191'. [ 265.160890][T10712] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 265.170745][T10715] bridge0: port 1(netdevsim0) entered blocking state [ 265.173750][T10715] bridge0: port 1(netdevsim0) entered disabled state [ 265.175719][T10715] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 265.180686][T10715] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 265.198518][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1196'. [ 265.760233][T10723] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 266.092088][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 266.265888][ T10] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 266.268541][ T10] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 266.271874][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 266.275502][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 266.279735][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 266.299623][ T10] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 266.351289][ T10] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 266.355787][ T10] usb 7-1: Product: syz [ 266.358869][ T10] usb 7-1: Manufacturer: syz [ 266.857283][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 266.859009][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 266.861488][ T10] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 266.863391][ T10] cdc_wdm 7-1:1.0: Unknown control protocol [ 267.192706][T10745] netlink: 'syz.0.1205': attribute type 10 has an invalid length. [ 267.204319][T10745] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 267.219389][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1205'. [ 267.222226][T10745] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 267.225012][T10745] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 267.227770][T10745] bridge0: port 1(netdevsim0) entered disabled state [ 267.257364][T10745] bond0: (slave bridge0): Releasing backup interface [ 267.402826][T10747] netlink: 'syz.3.1204': attribute type 10 has an invalid length. [ 267.405418][T10747] veth0_vlan: left promiscuous mode [ 267.408407][T10747] veth0_vlan: entered promiscuous mode [ 267.420470][T10747] team0: Device veth0_vlan failed to register rx_handler [ 267.576268][T10753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1206'. [ 267.640888][T10756] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 268.368704][T10765] FAULT_INJECTION: forcing a failure. [ 268.368704][T10765] name failslab, interval 1, probability 0, space 0, times 0 [ 268.374522][T10765] CPU: 3 UID: 0 PID: 10765 Comm: syz.0.1209 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(full) [ 268.374546][T10765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 268.374578][T10765] Call Trace: [ 268.374584][T10765] [ 268.374591][T10765] dump_stack_lvl+0x16c/0x1f0 [ 268.374620][T10765] should_fail_ex+0x512/0x640 [ 268.374638][T10765] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 268.374666][T10765] should_failslab+0xc2/0x120 [ 268.374683][T10765] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 268.374709][T10765] ? kasprintf+0xc7/0x100 [ 268.374733][T10765] kvasprintf+0xbc/0x160 [ 268.374753][T10765] ? __pfx_kvasprintf+0x10/0x10 [ 268.374783][T10765] kasprintf+0xc7/0x100 [ 268.374803][T10765] ? __pfx_kasprintf+0x10/0x10 [ 268.374824][T10765] ? __is_module_percpu_address+0x1e0/0x440 [ 268.374858][T10765] alloc_workqueue+0x114/0x200 [ 268.374884][T10765] ? __pfx_alloc_workqueue+0x10/0x10 [ 268.374922][T10765] hci_register_dev+0x240/0xc60 [ 268.374942][T10765] hci_uart_tty_ioctl+0x7e2/0xc30 [ 268.374963][T10765] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 268.374979][T10765] tty_compat_ioctl+0x381/0x4d0 [ 268.374995][T10765] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 268.375012][T10765] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 268.375035][T10765] __do_fast_syscall_32+0x73/0x120 [ 268.375061][T10765] do_fast_syscall_32+0x32/0x80 [ 268.375086][T10765] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 268.375105][T10765] RIP: 0023:0xf740e579 [ 268.375119][T10765] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 268.375133][T10765] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 268.375155][T10765] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400455c8 [ 268.375166][T10765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 268.375176][T10765] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 268.375185][T10765] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 268.375194][T10765] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 268.375218][T10765] [ 268.465323][ T5962] Bluetooth: hci4: sending frame failed (-49) [ 268.468282][ T5304] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 268.566501][T10771] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 268.855939][ T10] usb 7-1: USB disconnect, device number 6 [ 270.213375][T10795] netlink: 'syz.1.1218': attribute type 10 has an invalid length. [ 270.225853][T10795] bridge0: port 1(netdevsim0) entered disabled state [ 270.257238][T10795] bridge0: port 1(netdevsim0) entered blocking state [ 270.259310][T10795] bridge0: port 1(netdevsim0) entered forwarding state [ 270.269158][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'. [ 270.291777][T10795] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 270.305314][T10799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 270.315869][T10798] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 270.328160][T10798] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 270.338046][T10798] bridge0: port 1(netdevsim0) entered disabled state [ 270.355266][T10798] bond0: (slave bridge0): Releasing backup interface [ 270.745623][T10808] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 270.808499][T10813] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 270.900838][ T6036] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 271.134838][ T6036] usb 5-1: Using ep0 maxpacket: 16 [ 271.137731][ T6036] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.143351][ T6036] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 271.155204][ T6036] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 271.160949][ T6036] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.163868][ T6036] usb 5-1: Product: syz [ 271.165098][ T6036] usb 5-1: Manufacturer: syz [ 271.166811][ T6036] usb 5-1: SerialNumber: syz [ 271.169868][ T6036] usb 5-1: config 0 descriptor?? [ 271.383625][T10821] netlink: 'syz.1.1224': attribute type 10 has an invalid length. [ 271.391615][ T6036] usb 5-1: USB disconnect, device number 4 [ 271.479524][T10821] veth0_vlan: left promiscuous mode [ 271.502023][T10821] veth0_vlan: entered promiscuous mode [ 271.546102][T10821] team0: Device veth0_vlan failed to register rx_handler [ 271.622334][T10822] netlink: 'syz.2.1225': attribute type 10 has an invalid length. [ 271.625746][T10822] veth0_vlan: left promiscuous mode [ 271.629931][T10822] veth0_vlan: entered promiscuous mode [ 271.636040][T10822] team0: Device veth0_vlan failed to register rx_handler [ 272.101807][T10835] netlink: 'syz.3.1230': attribute type 10 has an invalid length. [ 272.105187][T10835] bridge0: port 3(netdevsim0) entered disabled state [ 272.107817][T10835] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.110826][T10835] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.117422][T10835] bridge0: port 3(netdevsim0) entered blocking state [ 272.120083][T10835] bridge0: port 3(netdevsim0) entered forwarding state [ 272.122868][T10835] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.125473][T10835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.128318][T10835] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.131065][T10835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.136843][T10835] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 272.149905][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1230'. [ 272.152725][T10835] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 272.154685][T10835] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 272.156696][T10835] bridge0: port 3(netdevsim0) entered disabled state [ 272.162513][T10835] bridge_slave_1: left allmulticast mode [ 272.164137][T10835] bridge_slave_1: left promiscuous mode [ 272.166024][T10835] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.174652][T10835] bridge_slave_0: left allmulticast mode [ 272.176773][T10835] bridge_slave_0: left promiscuous mode [ 272.179051][T10835] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.204025][T10835] bond0: (slave bridge0): Releasing backup interface [ 273.364938][T10871] [ 273.365660][T10871] ====================================================== [ 273.367620][T10871] WARNING: possible circular locking dependency detected [ 273.369522][T10871] 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 Not tainted [ 273.372263][T10871] ------------------------------------------------------ [ 273.375303][T10871] syz.3.1240/10871 is trying to acquire lock: [ 273.376973][T10871] ffffffff9012e528 (rtnl_mutex){+.+.}-{4:4}, at: start_sync_thread+0x120/0x28b0 [ 273.379478][T10871] [ 273.379478][T10871] but task is already holding lock: [ 273.381498][T10871] ffff88806a7fad28 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x100/0xa00 [ 273.384297][T10871] [ 273.384297][T10871] which lock already depends on the new lock. [ 273.384297][T10871] [ 273.387119][T10871] [ 273.387119][T10871] the existing dependency chain (in reverse order) is: [ 273.389583][T10871] [ 273.389583][T10871] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 273.392152][T10871] __mutex_lock+0x199/0xb90 [ 273.393658][T10871] smc_switch_to_fallback+0x2d/0x9f0 [ 273.395810][T10871] smc_sendmsg+0x13d/0x520 [ 273.397633][T10871] __sys_sendto+0x495/0x510 [ 273.399501][T10871] __ia32_sys_sendto+0xdd/0x1b0 [ 273.401091][T10871] __do_fast_syscall_32+0x73/0x120 [ 273.402694][T10871] do_fast_syscall_32+0x32/0x80 [ 273.404183][T10871] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.406037][T10871] [ 273.406037][T10871] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 273.408154][T10871] lock_sock_nested+0x41/0xf0 [ 273.409623][T10871] sockopt_lock_sock+0x54/0x70 [ 273.411104][T10871] do_ip_setsockopt+0xfe/0x3240 [ 273.412598][T10871] ip_setsockopt+0x59/0xf0 [ 273.413966][T10871] raw_setsockopt+0xb7/0x2a0 [ 273.415500][T10871] do_sock_setsockopt+0x221/0x470 [ 273.417100][T10871] __sys_setsockopt+0x1a0/0x230 [ 273.418608][T10871] __ia32_sys_setsockopt+0xbc/0x160 [ 273.420226][T10871] __do_fast_syscall_32+0x73/0x120 [ 273.421785][T10871] do_fast_syscall_32+0x32/0x80 [ 273.423297][T10871] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.425165][T10871] [ 273.425165][T10871] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 273.427157][T10871] __lock_acquire+0x1173/0x1ba0 [ 273.428683][T10871] lock_acquire+0x179/0x350 [ 273.430120][T10871] __mutex_lock+0x199/0xb90 [ 273.431558][T10871] start_sync_thread+0x120/0x28b0 [ 273.433153][T10871] do_ip_vs_set_ctl+0x451/0x11d0 [ 273.434655][T10871] nf_setsockopt+0x8a/0xf0 [ 273.436024][T10871] ip_setsockopt+0xcb/0xf0 [ 273.437390][T10871] tcp_setsockopt+0xa4/0x100 [ 273.438834][T10871] smc_setsockopt+0x1b3/0xa00 [ 273.440322][T10871] do_sock_setsockopt+0x221/0x470 [ 273.441888][T10871] __sys_setsockopt+0x1a0/0x230 [ 273.443381][T10871] __ia32_sys_setsockopt+0xbc/0x160 [ 273.444960][T10871] __do_fast_syscall_32+0x73/0x120 [ 273.446524][T10871] do_fast_syscall_32+0x32/0x80 [ 273.447995][T10871] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.449877][T10871] [ 273.449877][T10871] other info that might help us debug this: [ 273.449877][T10871] [ 273.452679][T10871] Chain exists of: [ 273.452679][T10871] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 273.452679][T10871] [ 273.456346][T10871] Possible unsafe locking scenario: [ 273.456346][T10871] [ 273.458389][T10871] CPU0 CPU1 [ 273.459911][T10871] ---- ---- [ 273.461411][T10871] lock(&smc->clcsock_release_lock); [ 273.462936][T10871] lock(sk_lock-AF_INET); [ 273.464813][T10871] lock(&smc->clcsock_release_lock); [ 273.466978][T10871] lock(rtnl_mutex); [ 273.468091][T10871] [ 273.468091][T10871] *** DEADLOCK *** [ 273.468091][T10871] [ 273.470307][T10871] 1 lock held by syz.3.1240/10871: [ 273.471759][T10871] #0: ffff88806a7fad28 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x100/0xa00 [ 273.474636][T10871] [ 273.474636][T10871] stack backtrace: [ 273.476276][T10871] CPU: 2 UID: 0 PID: 10871 Comm: syz.3.1240 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(full) [ 273.476290][T10871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 273.476297][T10871] Call Trace: [ 273.476301][T10871] [ 273.476305][T10871] dump_stack_lvl+0x116/0x1f0 [ 273.476322][T10871] print_circular_bug+0x275/0x350 [ 273.476340][T10871] check_noncircular+0x14c/0x170 [ 273.476357][T10871] __lock_acquire+0x1173/0x1ba0 [ 273.476376][T10871] lock_acquire+0x179/0x350 [ 273.476385][T10871] ? start_sync_thread+0x120/0x28b0 [ 273.476401][T10871] ? __pfx___might_resched+0x10/0x10 [ 273.476416][T10871] __mutex_lock+0x199/0xb90 [ 273.476430][T10871] ? start_sync_thread+0x120/0x28b0 [ 273.476444][T10871] ? start_sync_thread+0x120/0x28b0 [ 273.476457][T10871] ? __pfx___mutex_lock+0x10/0x10 [ 273.476473][T10871] ? __lock_acquire+0xaa4/0x1ba0 [ 273.476489][T10871] ? start_sync_thread+0x120/0x28b0 [ 273.476502][T10871] ? rtnl_lock+0x9/0x20 [ 273.476511][T10871] start_sync_thread+0x120/0x28b0 [ 273.476525][T10871] ? __lock_acquire+0xaa4/0x1ba0 [ 273.476541][T10871] ? __pfx_start_sync_thread+0x10/0x10 [ 273.476556][T10871] ? find_held_lock+0x2b/0x80 [ 273.476567][T10871] ? __might_fault+0xe3/0x190 [ 273.476583][T10871] ? __might_fault+0xe3/0x190 [ 273.476597][T10871] ? __might_fault+0x13b/0x190 [ 273.476614][T10871] ? do_ip_vs_set_ctl+0x451/0x11d0 [ 273.476623][T10871] do_ip_vs_set_ctl+0x451/0x11d0 [ 273.476632][T10871] ? __lock_acquire+0xaa4/0x1ba0 [ 273.476647][T10871] ? __mutex_trylock_common+0x90/0x250 [ 273.476657][T10871] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 273.476666][T10871] ? __pfx___mutex_trylock_common+0x10/0x10 [ 273.476676][T10871] ? __pfx___might_resched+0x10/0x10 [ 273.476691][T10871] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 273.476707][T10871] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 273.476726][T10871] ? nf_setsockopt+0x8a/0xf0 [ 273.476739][T10871] nf_setsockopt+0x8a/0xf0 [ 273.476753][T10871] ip_setsockopt+0xcb/0xf0 [ 273.476763][T10871] tcp_setsockopt+0xa4/0x100 [ 273.476775][T10871] smc_setsockopt+0x1b3/0xa00 [ 273.476786][T10871] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 273.476802][T10871] ? __pfx_smc_setsockopt+0x10/0x10 [ 273.476813][T10871] ? errseq_sample+0x53/0x70 [ 273.476827][T10871] ? __pfx_smc_setsockopt+0x10/0x10 [ 273.476838][T10871] do_sock_setsockopt+0x221/0x470 [ 273.476853][T10871] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 273.476871][T10871] __sys_setsockopt+0x1a0/0x230 [ 273.476884][T10871] __ia32_sys_setsockopt+0xbc/0x160 [ 273.476896][T10871] ? lockdep_hardirqs_on+0x7c/0x110 [ 273.476910][T10871] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 273.476925][T10871] __do_fast_syscall_32+0x73/0x120 [ 273.476940][T10871] do_fast_syscall_32+0x32/0x80 [ 273.476955][T10871] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.476967][T10871] RIP: 0023:0xf742e579 [ 273.476976][T10871] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 273.476986][T10871] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 273.476996][T10871] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 273.477003][T10871] RDX: 000000000000048b RSI: 0000000080000000 RDI: 0000000000000018 [ 273.477009][T10871] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 273.477014][T10871] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 273.477020][T10871] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 273.477029][T10871] [ 273.577069][T10874] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 273.749575][T10877] netlink: 'syz.0.1239': attribute type 10 has an invalid length. [ 273.758034][T10877] veth0_vlan: left promiscuous mode [ 273.761138][T10877] veth0_vlan: entered promiscuous mode [ 273.765213][T10877] team0: Device veth0_vlan failed to register rx_handler VM DIAGNOSIS: 00:55:43 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000002 RBX=ffff8880719a3540 RCX=ffffffff8a13180e RDX=ffff888026cc4880 RSI=ffffffff8a131860 RDI=0000000000000006 RBP=ffff88804ee2a940 RSP=ffffc9000f2077e8 R8 =0000000000000006 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000002 R13=ffff88804ee2aeb0 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81bb3d01 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977b9000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ff965fb0 CR3=0000000024116000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000080000 RBX=ffffc90003adf7b0 RCX=ffffc9000c402000 RDX=0000000000080000 RSI=ffffffff8b6e4841 RDI=0000000000000007 RBP=0000000000000003 RSP=ffffc90003adf528 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000003 R11=000000000001044f R12=0000000000000003 R13=ffffc90003adf7c8 R14=0000000000000003 R15=ffffffff81f1c790 RIP=ffffffff81bb3d1a RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880978b9000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7399914 CR3=000000006dc40000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854bd5a5 RDI=ffffffff9ae12b40 RBP=ffffffff9ae12b00 RSP=ffffc90021156f28 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff9ae12b00 R15=ffffffff854bd540 RIP=ffffffff854bd5cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880979b9000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080000000 CR3=0000000070502000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000026a4fc RBX=0000000000000003 RCX=ffffffff8b703439 RDX=ffffed10056a65be RSI=ffffffff8bf44f00 RDI=ffffffff8191a751 RBP=ffffed1003b56000 RSP=ffffc9000048fdf8 R8 =0000000000000000 R9 =ffffed10056a65bd R10=ffff88802b532deb R11=0000000000000001 R12=0000000000000003 R13=ffff88801dab0000 R14=ffffffff90867f10 R15=0000000000000000 RIP=ffffffff8b701ccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097ab9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f8ffffc CR3=0000000070502000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000