last executing test programs: 44.050393665s ago: executing program 3 (id=469): r0 = io_uring_setup(0x175c, &(0x7f000009df80)={0x0, 0x7ce, 0x40, 0xfffffffc}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, &(0x7f0000000340), 0x0, 0x142}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f00000000c0)) r6 = openat$uinput(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_END_FF_ERASE(r6, 0x400c55cb, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 43.921092268s ago: executing program 3 (id=474): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000180)=0x67e, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x231, 0x0, 0x0, &(0x7f00000001c0)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000020000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000680)="e0b9547ed387dbe9abc89b6f5bff", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_submit(0x0, r2, 0x0) ioperm(0x0, 0x82, 0x1f) sched_getattr(0x0, &(0x7f0000000000)={0x38}, 0x38, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20041, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x16) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r4, 0x0, 0x30, 0xe1515f8735398f3, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 43.414637897s ago: executing program 3 (id=479): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x92) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r1}, 0x10) sync() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14, r0, 0x1e571e7c5836dfbf}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x6, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0x10, 0xb}, {0x82, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r3, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r5, 0x0, &(0x7f00000000c0)) 43.191188779s ago: executing program 3 (id=481): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f02b, 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x25840, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x20000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x113, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xf, 0xff}, [@RTA_NH_ID={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r3, &(0x7f00000000c0)='./file0/file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x8914, 0x20000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r7}, 0x10) close(r2) socket(0x1d, 0x2, 0x6) pselect6(0x40, &(0x7f0000000100)={0x9, 0x7b, 0x1, 0x80000001, 0x5, 0x7, 0x6, 0x3ff}, 0x0, 0x0, &(0x7f00000003c0), 0x0) r8 = fsopen(&(0x7f0000003c40)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r8, 0x3, &(0x7f0000000140)='\x00\x91)\xf1{', &(0x7f0000003cc0)='./file0\x00', 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x4a080, 0x0, 0x0, 0x0, 0x0, 0x0) 43.04865472s ago: executing program 3 (id=484): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x70bdad, 0x24dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x101}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x50) (fail_nth: 2) 42.720954735s ago: executing program 3 (id=487): syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, &(0x7f0000002400)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket(0x2, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x8c6, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x235, &(0x7f00000002c0)={0x0, 0x4537, 0x10100, 0x0, 0x2b1}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r9, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, "30af0128ffffb70800000000000000ff7800"}) r10 = dup(r9) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000100)=0xff) sendmsg$nl_route_sched(r8, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x13) syz_emit_vhci(0x0, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r11, 0x4008af00, &(0x7f0000000080)=0x200000000) r12 = dup2(r11, r11) readv(r12, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/139, 0x8b}], 0x1) bind$inet6(r2, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @remote}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) 42.641322844s ago: executing program 32 (id=487): syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, &(0x7f0000002400)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket(0x2, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x8c6, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x235, &(0x7f00000002c0)={0x0, 0x4537, 0x10100, 0x0, 0x2b1}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r9, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, "30af0128ffffb70800000000000000ff7800"}) r10 = dup(r9) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000100)=0xff) sendmsg$nl_route_sched(r8, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x13) syz_emit_vhci(0x0, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r11, 0x4008af00, &(0x7f0000000080)=0x200000000) r12 = dup2(r11, r11) readv(r12, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/139, 0x8b}], 0x1) bind$inet6(r2, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @remote}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) 7.530653347s ago: executing program 4 (id=713): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040700c0df000000000000109022400010000000009040000010300000009210020070122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@local, 0x0}, &(0x7f0000000080)=0x14) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000900), 0x100, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r6, 0x80045105, &(0x7f0000000940)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x5, 0x4, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x6701bd8a7d3682f7, 0x8000, 0x7fffffff, 0x80000001}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x29, 0xb8, 0x3, 0x8, 0x0, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x8000, 0x8, 0x3}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r8}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000a8db0000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r10], 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x29, 0x64, 0xf9, 0x10, 0x18, @loopback, @local, 0x80, 0x7800, 0x5, 0x80000001}}) r11 = socket(0x400000000010, 0x800, 0x4) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000022c0)={'syztnl1\x00', &(0x7f0000002200)={'gretap0\x00', r5, 0x7, 0x1, 0x0, 0x27, {{0x20, 0x4, 0x0, 0x2, 0x80, 0x67, 0x0, 0x2, 0x4, 0x0, @multicast1, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0x8b, 0x3, 0x8, [{@broadcast, 0x101}, {@loopback, 0x426b}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xa7, 0x3, 0xb, [{@dev={0xac, 0x14, 0x14, 0x44}, 0xe}, {@empty, 0xcd}, {@rand_addr=0x64010102, 0xfd41}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x26, [@rand_addr=0x64010102]}, @cipso={0x86, 0x11, 0xfffffffffffffffa, [{0x7, 0x7, "e765a22324"}, {0x1, 0x4, "72f2"}]}, @timestamp={0x44, 0x14, 0x86, 0x0, 0x7, [0x1, 0x1, 0x3, 0xfff]}, @ssrr={0x89, 0xb, 0xac, [@multicast1, @remote]}]}}}}}) 5.870972921s ago: executing program 4 (id=721): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x200800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000005bd9010324bd7002fddbdf25010000000097f6b14c6d3cc0e0d7542aa0aaa177e526b4e1c7ae9a87b3bc57ecef7d577c5656fe3e50241038d8bdd570704b89b868d0fc6b4272a5370639331b92def4e02a05909e411dc8750ca6911ee8a6c5926f4157b6fd891c4c9d03733ece93e9e7cae342d9c6ad04de302b8777306907b59b8ea0c6dce67fbe70a9437cc269526b2c7761717e4ce4676a4e045f9b870471132ba4c4404005314ee9214e9fc7c0767cc77f3b4d199a4b15fe270f80637e4a2c7fe14815fefb3c"], 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat$vsock(0xffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendto$inet(r2, &(0x7f00000002c0)="9c8bd40a00"/20, 0x14, 0x48000, &(0x7f0000000300)={0x2, 0x4e21, @remote}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r5, 0x400455c8, 0x0) unshare(0x20000400) unshare(0x68020080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r6], 0xe4}, 0x1, 0x0, 0x0, 0x8040}, 0x4090) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000001c0)) 4.180307334s ago: executing program 2 (id=739): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000002000)='`', 0x88020) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1494}, 0x1, 0x0, 0x0, 0x80}, 0x4040) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r5}, 0x18) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = getpgrp(0x0) kcmp(r7, r8, 0x0, r6, r6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x244, 0x30, 0x1, 0x0, 0x0, {}, [{0x230, 0x1, [@m_xt={0x1e4, 0x1d, 0x0, 0x0, {{0x7}, {0x12c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x116, 0x6, {0x6, 'nat\x00', 0x26, 0x7ff, "8424a713274f12bce01015f80d32f05e8ee2aedcaf8f62d4267e2334c4151e6cb327d9e301d4b5a63709ae21d2a9e2263d6db664588171bcb251431651abd24085abc87ad68b7bbe8cc0d044d7bb618af2fb3920f3c3ac2510479d7cbb4e1bd43a653a9e424cfdd3e39224fcc2c5f97f5045a036a5661574f27e1aaac546b45b9691ea8328a56875c8aac59ee78d6146e67559fb1d97a508d2c2f33c23bbbf621ac97ff84fe0fb5a862f6e190f4ba6a3e5bf9e87155a85d6488c8566bea49d74e562a7690789114e90400186c4dbefeabc96ecfd79312fcc10167f250eacefabf1b95da75a38d215cf379933"}}, @TCA_IPT_INDEX={0x0, 0x3, 0x55f}]}, {0x91, 0x6, "e9a2fa9345ccbe258c21ffa49b90104a8ef9b092fb618d3aef5c39283459fcb3ef009c8ef6f806c56b98776fc66459469b263364d8daa671093a569c1dbe12acbe4556a56324359db7a0284e4b6cf3d6c798ff00c058a5c63b5eb9f67d33bd5665b1efd24bde7c450d8f4871737e5e61cfa2f7f6cff88dc54029f6c7e3ea530859e234cf07abb984fc4c7d2b0a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ife={0xa8, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r10 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r10, 0x28, 0x0, 0x0, 0x0) sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x4110, 0xffffffffffffffff, 0xec9f5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r12, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r9, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.424542544s ago: executing program 4 (id=746): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x40, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x24000044) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x30, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4183}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040011}, 0x80) 3.378616988s ago: executing program 4 (id=747): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40184810, &(0x7f0000000100)={0x23, 0xffffffff, 0x28e3, 0x4ffffd, 0x6, 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x9f, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x2, 0x1, 0x1, 0x50, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "76c1f37f6c99"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x200, 0xfffa, 0x200, 0x2}, {0x6, 0x24, 0x1a, 0x8, 0x15}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x8b, 0xe2}, @country_functional={0xe, 0x24, 0x7, 0x28, 0x8, [0x500, 0x8, 0x9, 0x0]}, @mdlm={0x15, 0x24, 0x12, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x80, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0xff, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3, 0x7, 0x7}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x4, 0x4, 0x38, 0x10, 0x8}, 0x6d, &(0x7f0000000240)={0x5, 0xf, 0x6d, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0xf, 0x8}, @generic={0x61, 0x10, 0x4, "647d319637ba84237564713305cf18bb416126d181e9d5899f28bc6c4586f5ffc79ac0a706e3846136b621762c5a1f7150d589446756e4366ea8b34976220717847c290bef90f0d489e2906289778dfafecf8fd59043c20ef56ddf8fae2b"}]}, 0x7, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x438}}, {0x50, &(0x7f00000002c0)=@string={0x50, 0x3, "b4bb11f526546ab99a536ebcf2ec3a14324787848d2a2f276228bebb38d18eca1621c24eed90bdfc85446d82875304ebda095423a7271baec67894724f228168a6790b33c72cbea886cce44d4528"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xfcbb}}, {0xda, &(0x7f0000000380)=@string={0xda, 0x3, "ba534a106ca64743b538ca410f519b6fa9f8fa8a5e991bf661cac2d9a48c4642c1fc799bb760ff80fa4b96ae41036b383f48ff54f2b80fc079907fb6f23298d9760c659e9bccc4b6582ff0867be3690d1f1bdff4e6b3968bc182c2f18723068070c642a3cc38c9c4f4be603a8d4b1a89769a05e5ba8c56ef0b51b59aee0a2f546903a912237ec9531a0b025882a27ca6ffa383e1f610b2415be914f92d9ded6650396f9c7a3adfa7df13713221ad054f9fb52b37e340ad432045cf972ea61dfa1a2cbc816b40c9af89f92771d05be2697a174cd3b6e42774"}}, {0x49, &(0x7f0000000780)=ANY=[@ANYBLOB="4903006078d06e016d8c456d6bec3f06b2b77f27c391c3dbfdbd6b1fad4bbb2a7deb8dd5431a8558fc0224481fe466b040bca3da8db309786224bcbd5177dd77a4e8a1a516a47534c0bd95ef5b8fbcff0a3bdd10a6ad6c8c4a2734d91672147555b7f5bc1db228f1b26adf641ededed3833628fcf651b266f4793f520500000000000000d2b692d23b757537bfa045b337fcf8288f06913c12972a1df221d437acdb665f4b2e5b3ef637c8c1a7a0d10c5a5612ac439cd482ff9b30abb97fc85776c75e52d6e051dbed6b5bde4be568"]}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x820}}, {0x69, &(0x7f0000000640)=ANY=[@ANYBLOB="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"]}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.30068318s ago: executing program 0 (id=752): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000240)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x3, &(0x7f0000000100)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a00000004"], 0x48) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890c, &(0x7f0000000000)) 1.550146241s ago: executing program 1 (id=754): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = syz_open_dev$sndpcmc(&(0x7f0000004a40), 0x0, 0x0) read(r0, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="7c0000000000000000000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="7c0000000000000000000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) epoll_create1(0x0) (async) r3 = epoll_create1(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0x4369, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000900007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000900007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080047000030000000000006907800000000000000008608ffffffff0002"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0x0, 0xe, 0x2000000, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x39f}, 0x28) write$tcp_congestion(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r9, 0x4068aea3, &(0x7f0000000300)={0x8f, 0x0, 0x6}) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r11, &(0x7f0000000f80)=""/4096, 0x1000) 1.435609008s ago: executing program 1 (id=755): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2a01, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x10003, 0x3, 0x4, 0x1000, &(0x7f0000feb000/0x1000)=nil}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f000000ac00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) chroot(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00') syz_fuse_handle_req(r3, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r3, &(0x7f0000000000)={0x10, 0x0, r5}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x2b, @local, 0x4e24, 0x7ffffffc, 'none\x00', 0x0, 0x0, 0x23}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) 1.433227748s ago: executing program 0 (id=756): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048c4) execve(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[], 0x14c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fsopen(&(0x7f0000000080)='pstore\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='si\x98d\x96\a\xf7\xceF\xda\x8c\x02\xfd\x8e#3Z:lent\x00', &(0x7f00000000c0)='\x00\x13\xf5\fa\x00\x00\x9c)\xe75\x978\x96\xb9;\x7f_.\xa5S\xeaC\xeb\xe9On\x03\x01\xefIy\x95\xc9W\xc5\xf6\xad\x84\xf4\xf5\x8fHe\xac\'x\xd4', 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000040)='silent\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffc000/0x3000)=nil) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0xf}, 0x1c) r6 = socket$kcm(0xa, 0x1, 0x106) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000340), 0x12) setsockopt$sock_attach_bpf(r6, 0x29, 0x1a, 0x0, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r9}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) 1.376932063s ago: executing program 0 (id=757): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x4000840) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff020070000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.120255328s ago: executing program 0 (id=758): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x4000840) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff020070000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.119905623s ago: executing program 2 (id=759): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff018}, {0x6, 0x0, 0x3}]}, 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/172, 0xac, 0x0, &(0x7f0000002580)=""/4096, 0x1000}, &(0x7f0000000280)=0x40) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r4, r3], 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01000000000000000000050000000800020000000001"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000f80)=ANY=[@ANYBLOB="770153925c1b8737c8080000", @ANYRES16=0x0, @ANYBLOB="200025bd7000fedbdf25390000000c009900cc0000007d0000000c025a8074000280050006000200000014000300040001800300090001f0008000007f000500060001000000050007000200000009000100021b181b090000000900010005240348160000001d000100050c6048480b600104481b211b056c0b122402121660402748000000050001000b0000000400010074000280050004005a0000001400030003000400782011dc08003f000100090014000300ff7f01800800ff0fff0f3a02060084063d0002002538142d141e27330d0b0a065642184c2e0107063e48054e3a4d1101502e512f010f36520136224d390c1b3c1042192c0650500125241d270c000000600001801e00010006066c480b0318031b0160021203020b023060030c180509031600000500070000000000050007000100000024000200464936142903531a053527394b220e2b44192f3607412a0b450a2223483913460500060000000000c000038014000300ff0fff010900f9ff05000600080003005100020021091f2b01444345040915384145534128244b214723300e29371403283a3b1129143128440b144b264d0429402740101a081905211556412a1a052152470447135705022c1b0d20290f331d52000000420002003e1521560118364448153e3803190b094f0816250624174710043f384c5739020a39261530200c2d500d010b194051572a293236061322020e4c261319230000100001001602050c16120c1b000760053c015a805c0003801400030006000800baf30400e78c0100feff018014000500090022020000fbff80ff090000000b00050004000000000014000500090010000400070004001bff2b00000014000300060081000b000101b80009000b0001010c0003800500060000000000140003800500060000000000050004000000000050000180050004000200000005000400020000001400050002000a00001002000500080002000200090002001938124e53000000140003000800030002000200870a0010c901050005000400000000006c00038005000600020000002300010004160216480103360b04031636120006361b16020c0009131b180c500b0202003a0002004108414f370a343c00115056334042484115015112502e55570d3a4a000e3b00192012413d482015212e0043564d373d4b501d29000d000080005a801800038014000500ca3d05004000050007000300ff07070064000280390002000a1651302851222a35514d373f3f2d3e3a08160637122431462d0b1e40114e37551a39381242232b1c1a452a0e35201020352b53070000000c0001000c48364f0030362b05000400020000000500070002000000050006000200000094025a806c000280310002000b0c394d120957480b2a50170c46b6480e1439365657434f4e1d3820294551510d431b50190a0a1e2926502002000000140003000700080001ff01000a000900ff0f09000e0001001602122403020502051b0000050004000200000005000400020000003c0002801400050058ea0200fffb06000004000003000500050004000200000014000300ff000180f600030000025aaaf7ff000105000400020000009400018005000700000000002d0002004a0d3113194c573b2e2b0b3c2d400018092c4e2509221851085638431816322320310e404c5005124e000000140003000400001003000dff810004000000e0081800010048601b361215016c16011b60121b042400166c0917000100360503160b0360240648040405054809120103001400030007000c000d0003001dcb0400ff0781008c00038014000300000004006d00020002000100060006000500070001000000140005007beb010005000900010001000b00050005000700010000003e0002000010041a0e394d2f50013b32444253003f252e1634311938280c32031617410215541a1b3d343a1e2f40371b401822280f1e4f09513d000f4d4e000005000600010000000500070002000000c800018005000700020000004400020024014a1a2d571b2d210c303311261836372948031b114728252d2a1139180d0c271d394201311e2d4531564851190f51121225203b400d244007022211213c1c05000600010000000500060000000000140003000600080000000900ff0302000000080040000200161c150505040f40544a1223511c55304b2f1f370511081e364c44400e2e370142303130533708220056182738243610253107350d38515039415036140003004a5b050090040300ff4b2954030008004c025a805400018022000200130808203e004f09420e4c41091f2040175034051d2b40081d3f39352a0c00000500070002000000050006000100000014000500040006000000018003000c00090000000500060000000000b4000180050007000100000014000500080000000600950a07000004fcff0400140005000400070099000000080001fc010104000500070001000000050004000000000004000100140005000300ff0113000400a5478100020003000d000100606c03053036300909000000470002000333443b303251401e4f4225063928044c0f21544a29184b294b0f2800104a574a0d4424274c2c461917222b31203e222c2841183544ec201c282510232f20283d2a09002400028014000500070000000800250000040600ff0705000b0001000203020c05186c0084000080050007000100000005000600020000000500070001000000140005000000080004000e04010002000300010014000500ee790500080007000002060001800700050002004a000000350002002624340b4c000b1d1e2927041f4f113927174853424b152a4d1d1c173f2036360e0c3056090b032f44401532191320301400000048000080420002003f0b1e05244a441c430a1b1a521d162932ef352e1f2a4c1f10344a3a3952563e2406531514472a4e2416414f18182050463b56430c44060901301f141239000050000080140003000300dd0bff0307008000010006000400050006000000000014000300100007004325040081000300080000001400030004000700400081007b090b00018009000500010009000000"], 0x8c8}, 0x1, 0x0, 0x0, 0x800}, 0x20000804) 1.117945297s ago: executing program 2 (id=760): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mount$9p_virtio(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x210a0a0, &(0x7f0000000580)={'trans=virtio,', {[{@access_client}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'GPL\x00'}}, {@subj_user={'subj_user', 0x3d, '/dev/vhost-vsock\x00'}}]}}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x1df67, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8a00007b8af0ff00000000bfa10000000056ec4c1aeb755bfe6651206bc4ca8defc434e0d67ce47d819ffadbdbe04b222573742bd9abdb43eea300fae54f77a8f32cee5dc75a95060df487f25baf020570eeeed6c6550bcce0c066473a6a30044b2a03400e30bc391d6462bda2d4f2b1502d0a6d1c565eb4463e61665b3ab1b19f94f59a3e232d813b262dd9e8e696d84bcf247f1708dcef15ce19d6be9b70e337aaff15e4f070caba143b7355a5bfad7225489a01faa811831743f42a45e2434f832c3a97b491b4479ebeea53d4c7fa6635da149c40f86f70d5", @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x35, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000440)="b9ff03006844268ced65feee554c2e4f", 0x0, 0xfd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) eventfd(0x8001) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x40000, 0x0, 0xfffffffc, 0x356}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, &(0x7f00000004c0)}) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_uring_enter(r6, 0x3f70, 0x0, 0x0, 0x0, 0x0) 908.491771ms ago: executing program 0 (id=761): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000015000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000140300000ee600f06702000014000000160300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2002, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x31}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r6, 0x5501) preadv(r5, &(0x7f0000003780)=[{&(0x7f0000001300)=""/170, 0xaa}], 0x1, 0xffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{}k%@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) readv(r4, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x10) 711.738685ms ago: executing program 4 (id=762): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000001000a00000800040001000000", 0x24) 640.250098ms ago: executing program 4 (id=763): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$setperm(0x5, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000180)=""/47, 0x2f}], 0x1, 0x0, 0x3) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$pptp(0x18, 0x1, 0x2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000000c0)=0x2000) write$binfmt_elf32(r4, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000100)=0x1) write$dsp(r4, &(0x7f0000000140)="755a5398d512d39077459e67ee110daa", 0x10) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000040)={0x1, 0x5b}, 0x2) syz_clone(0xa0320080, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x2b, 0x3, 0x1) setsockopt$inet_tcp_int(r2, 0x6, 0x6, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r5, 0x0) 469.624701ms ago: executing program 1 (id=764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="050035"], 0x2c}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x29, 0x0, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "4e000000f000", "13f4036c5528f5e05dc70a4a0a0e4289", "27d5e718", "00ef8fc78b80988b"}, 0x28) setsockopt$inet6_tcp_int(r3, 0x11a, 0x4, &(0x7f0000000100), 0x1) r5 = socket(0x10, 0x80002, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a40)=@newsa={0x180, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in6=@private2, @in6=@empty, 0x4000, 0x6, 0x3, 0x3}, {@in6=@mcast2, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, {0x0, 0xfffffffffffffffd, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x180}}, 0x20000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x114, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x100, 0x1, [@m_mpls={0xfc, 0x10, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf3471}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xe0000000, 0x8, 0x0, 0x0, 0x1}, 0x3}}, @TCA_MPLS_TC={0x5, 0x6, 0x2}]}, {0x89, 0x6, "09ad09e1a7747f7c5a9e34a111f0ccd6c94fe2bd428929f4bbe5c6e62b07fba5032bbab6aa4a84c375a6f0b9f987a9021aa77e72e1d94ae3d1be64421b4876acb26995dfe4c6724e06a7ca2d22c8606d192915c2276c2b679b218844cf4809559502af1e7cf605f5acced0fe7a9e5972a061c9847e9bb5165da87492cc2bce8c1afd285843"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x114}}, 0x24004809) 310.600662ms ago: executing program 1 (id=765): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048c4) execve(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[], 0x14c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fsopen(&(0x7f0000000080)='pstore\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='si\x98d\x96\a\xf7\xceF\xda\x8c\x02\xfd\x8e#3Z:lent\x00', &(0x7f00000000c0)='\x00\x13\xf5\fa\x00\x00\x9c)\xe75\x978\x96\xb9;\x7f_.\xa5S\xeaC\xeb\xe9On\x03\x01\xefIy\x95\xc9W\xc5\xf6\xad\x84\xf4\xf5\x8fHe\xac\'x\xd4', 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000040)='silent\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffc000/0x3000)=nil) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0xf}, 0x1c) r6 = socket$kcm(0xa, 0x1, 0x106) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000340), 0x12) setsockopt$sock_attach_bpf(r6, 0x29, 0x1a, 0x0, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r9}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) 252.601633ms ago: executing program 1 (id=766): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x4000840) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff020070000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 168.580546ms ago: executing program 2 (id=767): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000180)=0x67e, 0x4) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) openat$tun(0xffffff9c, &(0x7f0000000140), 0x418001, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) (async, rerun: 64) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) (async, rerun: 64) r5 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='jbd2_handle_stats\x00', r8}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') fchdir(r9) (async) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) inotify_init1(0x0) poll(0x0, 0x0, 0xe1) 168.461357ms ago: executing program 2 (id=768): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4091}, 0x0) 132.623602ms ago: executing program 2 (id=769): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x3, 0xa, [{}, {0x5}, {}, {}, {0x0, 0xfffffffe}, {0x0, 0x7ff}], 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="b6f8d2f73ec3c0e302fb04cfdbb729761721feaf71c87da50175dc8803e5c6c7b914a3ab12c2817c1a148333b7d005e7c020ae205a4e5cda", @ANYRESOCT=r4], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="fb64a10200000047191f2b4d927966641d", @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRES16=r7, @ANYBLOB=',']) 698.193Āµs ago: executing program 1 (id=770): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000180)) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb950368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0) rmdir(0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$bt_sco(r3, &(0x7f0000000000)={0x1f, @none}, 0x8) shutdown(r3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x30df5ae70c2bc9e7, 0x3, &(0x7f0000000000)=ANY=[@ANYRES8=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r7, 0x6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 0s ago: executing program 0 (id=771): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000180)) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0) rmdir(0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$bt_sco(r3, &(0x7f0000000000)={0x1f, @none}, 0x8) shutdown(r3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x30df5ae70c2bc9e7, 0x3, &(0x7f0000000000)=ANY=[@ANYRES8=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r7, 0x6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) kernel console output (not intermixed with test programs): endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.200854][ T6640] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.204068][ T6640] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 110.209466][ T6640] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.213611][ T6640] usb 6-1: config 0 descriptor?? [ 110.640265][ T7421] warning: `syz.0.305' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.877318][ T6640] usbhid 6-1:0.0: can't add hid device: -71 [ 110.879547][ T6640] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 110.884756][ T6640] usb 6-1: USB disconnect, device number 5 [ 111.172543][ T7430] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 111.172543][ T7430] program syz.3.307 not setting count and/or reply_len properly [ 111.557061][ T7438] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.310'. [ 111.560117][ T7438] netlink: zone id is out of range [ 111.561635][ T7438] netlink: zone id is out of range [ 111.563085][ T7438] netlink: get zone limit has 8 unknown bytes [ 111.758914][ T7446] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 112.267206][ T7456] process 'syz.2.314' launched './file0' with NULL argv: empty string added [ 112.387172][ T7438] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 112.389781][ T7438] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 112.402783][ T7438] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 112.407782][ T7438] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 112.409884][ T7438] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 112.414246][ T7438] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 112.418111][ T7438] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 112.419889][ T7438] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.421980][ T7438] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.424533][ T7438] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 112.427979][ T7438] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 112.431043][ T7438] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 112.484466][ T7462] netlink: 20 bytes leftover after parsing attributes in process `syz.0.316'. [ 112.540198][ T7468] vivid-007: disconnect [ 113.065614][ T6032] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 113.218953][ T6032] usb 6-1: config 0 has no interfaces? [ 113.221023][ T6032] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 113.224040][ T6032] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.229338][ T6032] usb 6-1: config 0 descriptor?? [ 113.374729][ T7467] vivid-007: reconnect [ 113.512036][ T7486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.517299][ T7486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.527509][ T7475] usb usb9: usbfs: process 7475 (syz.1.319) did not claim interface 0 before use [ 113.685434][ T5945] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.853950][ T39] audit: type=1326 audit(1734573095.266:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.2.323" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 113.862676][ T39] audit: type=1326 audit(1734573095.266:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.2.323" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 113.868557][ T39] audit: type=1326 audit(1734573095.276:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.2.323" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 113.875821][ T39] audit: type=1326 audit(1734573095.276:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.2.323" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 113.882861][ T39] audit: type=1326 audit(1734573095.276:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.2.323" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 113.889986][ T39] audit: type=1326 audit(1734573095.276:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.2.323" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 113.897040][ T39] audit: type=1326 audit(1734573095.276:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.2.323" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 113.904090][ T39] audit: type=1326 audit(1734573095.276:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.2.323" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 113.911249][ T39] audit: type=1326 audit(1734573095.276:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.2.323" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 113.918423][ T39] audit: type=1326 audit(1734573095.276:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.2.323" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 114.102392][ T5979] usb 6-1: USB disconnect, device number 6 [ 114.476418][ T5945] Bluetooth: hci3: command 0x040f tx timeout [ 114.476629][ T5954] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.476646][ T5952] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.860927][ T7511] netlink: 'syz.2.328': attribute type 10 has an invalid length. [ 114.914649][ T7513] netlink: 'syz.2.328': attribute type 10 has an invalid length. [ 114.917993][ T7513] netlink: 2 bytes leftover after parsing attributes in process `syz.2.328'. [ 115.542001][ T7511] batman_adv: batadv0: Adding interface: team0 [ 115.543530][ T7511] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.549780][ T7511] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 115.555975][ T7513] team0: entered promiscuous mode [ 115.557329][ T7513] team_slave_0: entered promiscuous mode [ 115.558809][ T7513] team_slave_1: entered promiscuous mode [ 115.566971][ T7513] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.568816][ T7513] batman_adv: batadv0: Interface activated: team0 [ 115.570876][ T7513] batman_adv: batadv0: Interface deactivated: team0 [ 115.580964][ T7513] batman_adv: batadv0: Removing interface: team0 [ 115.583481][ T7513] bridge0: port 3(team0) entered blocking state [ 115.587992][ T7513] bridge0: port 3(team0) entered disabled state [ 115.591006][ T7513] team0: entered allmulticast mode [ 115.592891][ T7513] team_slave_0: entered allmulticast mode [ 115.594944][ T7513] team_slave_1: entered allmulticast mode [ 115.598922][ T7513] bridge0: port 3(team0) entered blocking state [ 115.600822][ T7513] bridge0: port 3(team0) entered forwarding state [ 115.755677][ T5954] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.470768][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.336'. [ 116.556841][ T5954] Bluetooth: hci3: command 0x040f tx timeout [ 116.558498][ T5954] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.565456][ T5954] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.963351][ T7560] FAULT_INJECTION: forcing a failure. [ 116.963351][ T7560] name failslab, interval 1, probability 0, space 0, times 0 [ 116.967152][ T7560] CPU: 0 UID: 0 PID: 7560 Comm: syz.3.339 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 116.970389][ T7560] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.973467][ T7560] Call Trace: [ 116.974346][ T7560] [ 116.975165][ T7560] dump_stack_lvl+0x16c/0x1f0 [ 116.976454][ T7560] should_fail_ex+0x497/0x5b0 [ 116.978046][ T7560] ? fs_reclaim_acquire+0xae/0x150 [ 116.979496][ T7560] should_failslab+0xc2/0x120 [ 116.980776][ T7560] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 116.982285][ T7560] ? __alloc_skb+0x2b3/0x380 [ 116.983552][ T7560] __alloc_skb+0x2b3/0x380 [ 116.984827][ T7560] ? __pfx___alloc_skb+0x10/0x10 [ 116.986173][ T7560] ? lock_acquire+0x2f/0xb0 [ 116.987460][ T7560] netlink_alloc_large_skb+0x69/0x130 [ 116.989214][ T7560] netlink_sendmsg+0x689/0xd70 [ 116.990945][ T7560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.992364][ T7560] ____sys_sendmsg+0x9ae/0xb40 [ 116.993678][ T7560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.995178][ T7560] ? get_compat_msghdr+0x11b/0x170 [ 116.996579][ T7560] ___sys_sendmsg+0x135/0x1e0 [ 116.997998][ T7560] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.999595][ T7560] ? __pfx_lock_release+0x10/0x10 [ 117.001027][ T7560] ? trace_lock_acquire+0x14e/0x1f0 [ 117.002422][ T7560] ? __fget_files+0x206/0x3a0 [ 117.003774][ T7560] __sys_sendmsg+0x16e/0x220 [ 117.005080][ T7560] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.006518][ T7560] ? __pfx_lock_release+0x10/0x10 [ 117.008148][ T7560] ? __might_fault+0xe3/0x190 [ 117.009452][ T7560] ? rcu_is_watching+0x12/0xc0 [ 117.010771][ T7560] __do_fast_syscall_32+0x73/0x120 [ 117.012184][ T7560] do_fast_syscall_32+0x32/0x80 [ 117.013571][ T7560] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.015267][ T7560] RIP: 0023:0xf705e579 [ 117.016382][ T7560] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 117.022071][ T7560] RSP: 002b:00000000f505055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 117.024354][ T7560] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000600 [ 117.026465][ T7560] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.028700][ T7560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.030825][ T7560] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 117.032937][ T7560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.035048][ T7560] [ 117.605340][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.347'. [ 117.835808][ T5954] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.138320][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.350'. [ 118.141601][ T7616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.144421][ T7616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.172536][ T7616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.175338][ T7616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.635489][ T5945] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.637375][ T5952] Bluetooth: hci3: command 0x040f tx timeout [ 118.639163][ T5954] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.073084][ T7645] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 119.228558][ T7651] input: syz0 as /devices/virtual/input/input14 [ 119.230254][ T7651] input: failed to attach handler leds to device input14, error: -6 [ 119.295663][ T6379] libceph: connect (1)[c::]:6789 error -101 [ 119.309883][ T6379] libceph: mon0 (1)[c::]:6789 connect error [ 119.616151][ T5979] libceph: connect (1)[c::]:6789 error -101 [ 119.618247][ T5979] libceph: mon0 (1)[c::]:6789 connect error [ 119.911298][ T7651] ceph: No mds server is up or the cluster is laggy [ 120.699530][ T7676] netlink: 28 bytes leftover after parsing attributes in process `syz.3.366'. [ 120.756124][ T39] kauditd_printk_skb: 14 callbacks suppressed [ 120.756139][ T39] audit: type=1326 audit(1734573102.166:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.0.367" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x0 [ 120.815712][ T7678] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.821400][ T7678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.367'. [ 121.036132][ T5952] Bluetooth: hci3: command 0x040f tx timeout [ 121.100493][ T39] audit: type=1326 audit(1734573102.516:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 121.112204][ T39] audit: type=1326 audit(1734573102.516:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 121.119681][ T39] audit: type=1326 audit(1734573102.526:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.371" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 121.133816][ T39] audit: type=1326 audit(1734573102.526:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.371" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 121.142422][ T39] audit: type=1326 audit(1734573102.526:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.371" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 121.150132][ T39] audit: type=1326 audit(1734573102.526:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.371" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 121.166245][ T39] audit: type=1326 audit(1734573102.526:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.371" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 121.171725][ T39] audit: type=1326 audit(1734573102.526:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 121.177533][ T39] audit: type=1326 audit(1734573102.526:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 121.204372][ T7700] input: syz0 as /devices/virtual/input/input15 [ 121.206260][ T7700] input: failed to attach handler leds to device input15, error: -6 [ 121.226339][ T5979] libceph: connect (1)[c::]:6789 error -101 [ 121.230933][ T5979] libceph: mon0 (1)[c::]:6789 connect error [ 121.630652][ T6379] libceph: connect (1)[c::]:6789 error -101 [ 121.632616][ T6379] libceph: mon0 (1)[c::]:6789 connect error [ 121.737963][ T7700] ceph: No mds server is up or the cluster is laggy [ 122.032641][ T7717] fuse: Unknown parameter 'ūd”' [ 122.519149][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.378'. [ 122.521461][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.378'. [ 122.527400][ T7723] pimreg: entered allmulticast mode [ 122.990549][ T7712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.415707][ T7756] FAULT_INJECTION: forcing a failure. [ 123.415707][ T7756] name failslab, interval 1, probability 0, space 0, times 0 [ 123.420116][ T7756] CPU: 3 UID: 0 PID: 7756 Comm: syz.1.389 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 123.423763][ T7756] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.427474][ T7756] Call Trace: [ 123.428644][ T7756] [ 123.429677][ T7756] dump_stack_lvl+0x16c/0x1f0 [ 123.431321][ T7756] should_fail_ex+0x497/0x5b0 [ 123.432961][ T7756] ? fs_reclaim_acquire+0xae/0x150 [ 123.434741][ T7756] should_failslab+0xc2/0x120 [ 123.436379][ T7756] __kmalloc_cache_noprof+0x68/0x420 [ 123.438248][ T7756] ipvlan_init+0x604/0xe90 [ 123.439800][ T7756] ? kasan_save_track+0x14/0x30 [ 123.441504][ T7756] ? __pfx_ipvlan_init+0x10/0x10 [ 123.443235][ T7756] register_netdevice+0x672/0x1e20 [ 123.445034][ T7756] ? validate_linkmsg+0x57d/0xb60 [ 123.446984][ T7756] ? sized_strscpy+0xae/0x2e0 [ 123.448651][ T7756] ? __pfx_register_netdevice+0x10/0x10 [ 123.450565][ T7756] ? dev_addr_mod+0x2c9/0x390 [ 123.452202][ T7756] ipvlan_link_new+0x353/0xbf0 [ 123.453888][ T7756] ? __pfx_ipvlan_link_new+0x10/0x10 [ 123.455741][ T7756] rtnl_newlink+0xbae/0x1d70 [ 123.457410][ T7756] ? __pfx_rtnl_newlink+0x10/0x10 [ 123.459191][ T7756] ? __pfx___lock_acquire+0x10/0x10 [ 123.461030][ T7756] ? kmem_cache_free+0x152/0x4c0 [ 123.462773][ T7756] ? aa_get_newest_label+0x376/0x680 [ 123.464655][ T7756] ? find_held_lock+0x2d/0x110 [ 123.466338][ T7756] ? find_held_lock+0x2d/0x110 [ 123.468050][ T7756] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 123.469854][ T7756] ? __pfx_lock_release+0x10/0x10 [ 123.471615][ T7756] ? trace_lock_acquire+0x14e/0x1f0 [ 123.473455][ T7756] ? __pfx_rtnl_newlink+0x10/0x10 [ 123.475211][ T7756] rtnetlink_rcv_msg+0x95b/0xea0 [ 123.476976][ T7756] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 123.478876][ T7756] ? __pfx___dev_queue_xmit+0x10/0x10 [ 123.480770][ T7756] netlink_rcv_skb+0x165/0x410 [ 123.482461][ T7756] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 123.484398][ T7756] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 123.486256][ T7756] ? netlink_deliver_tap+0x1ae/0xca0 [ 123.488119][ T7756] netlink_unicast+0x53c/0x7f0 [ 123.489806][ T7756] ? __pfx_netlink_unicast+0x10/0x10 [ 123.491631][ T7756] ? __phys_addr_symbol+0x30/0x80 [ 123.493221][ T7756] ? __check_object_size+0x488/0x710 [ 123.495014][ T7756] netlink_sendmsg+0x8b8/0xd70 [ 123.496750][ T7756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.498663][ T7756] ____sys_sendmsg+0x9ae/0xb40 [ 123.500412][ T7756] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.502252][ T7756] ? get_compat_msghdr+0x11b/0x170 [ 123.503600][ T7756] ___sys_sendmsg+0x135/0x1e0 [ 123.504831][ T7756] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.506193][ T7756] ? __pfx_lock_release+0x10/0x10 [ 123.507513][ T7756] ? trace_lock_acquire+0x14e/0x1f0 [ 123.508869][ T7756] ? __fget_files+0x206/0x3a0 [ 123.510098][ T7756] __sys_sendmsg+0x16e/0x220 [ 123.511299][ T7756] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.512640][ T7756] __do_fast_syscall_32+0x73/0x120 [ 123.513965][ T7756] do_fast_syscall_32+0x32/0x80 [ 123.515222][ T7756] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 123.516909][ T7756] RIP: 0023:0xf7f48579 [ 123.517985][ T7756] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 123.522895][ T7756] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 123.525162][ T7756] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000280 [ 123.527797][ T7756] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.529842][ T7756] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 123.531863][ T7756] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 123.533888][ T7756] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.536044][ T7756] [ 123.845648][ T6640] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 123.998144][ T6640] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.001123][ T6640] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.004399][ T6640] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 124.007868][ T6640] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.012424][ T6640] usb 6-1: config 0 descriptor?? [ 124.222159][ T7778] vivid-007: disconnect [ 124.375048][ T7781] FAULT_INJECTION: forcing a failure. [ 124.375048][ T7781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.378753][ T7781] CPU: 1 UID: 0 PID: 7781 Comm: syz.3.395 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 124.381972][ T7781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 124.385450][ T7781] Call Trace: [ 124.386357][ T7781] [ 124.387193][ T7781] dump_stack_lvl+0x16c/0x1f0 [ 124.388470][ T7781] should_fail_ex+0x497/0x5b0 [ 124.389771][ T7781] _copy_from_iter+0x29b/0x1400 [ 124.391092][ T7781] ? trace_lock_acquire+0x14e/0x1f0 [ 124.392590][ T7781] ? __pfx__copy_from_iter+0x10/0x10 [ 124.394073][ T7781] ? __virt_addr_valid+0x1a4/0x590 [ 124.395453][ T7781] ? __virt_addr_valid+0x5e/0x590 [ 124.396799][ T7781] ? __phys_addr_symbol+0x30/0x80 [ 124.398179][ T7781] ? __check_object_size+0x488/0x710 [ 124.399617][ T7781] kernfs_fop_write_iter+0x19d/0x500 [ 124.401074][ T7781] vfs_write+0x5ae/0x1150 [ 124.402280][ T7781] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 124.403869][ T7781] ? __pfx___mutex_lock+0x10/0x10 [ 124.405232][ T7781] ? __pfx_vfs_write+0x10/0x10 [ 124.406466][ T7781] ksys_write+0x12b/0x250 [ 124.407634][ T7781] ? __pfx_ksys_write+0x10/0x10 [ 124.408959][ T7781] __do_fast_syscall_32+0x73/0x120 [ 124.410369][ T7781] do_fast_syscall_32+0x32/0x80 [ 124.411778][ T7781] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 124.413520][ T7781] RIP: 0023:0xf705e579 [ 124.414674][ T7781] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 124.419846][ T7781] RSP: 002b:00000000f500e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 124.422094][ T7781] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020000200 [ 124.424184][ T7781] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.426269][ T7781] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 124.428396][ T7781] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 124.430530][ T7781] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 124.432698][ T7781] [ 124.851094][ T6640] usbhid 6-1:0.0: can't add hid device: -71 [ 124.856496][ T6640] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 124.859799][ T6640] usb 6-1: USB disconnect, device number 7 [ 125.066772][ T7777] vivid-007: reconnect [ 125.313538][ T7792] fuse: Unknown parameter 'ūd”' [ 125.889157][ T7789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.243407][ T7811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.403'. [ 126.587169][ T7828] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 126.590877][ T7831] tmpfs: Unknown parameter 'euid' [ 126.626069][ T7833] input: syz0 as /devices/virtual/input/input16 [ 126.627710][ T7833] input: failed to attach handler leds to device input16, error: -6 [ 126.655840][ T6379] libceph: connect (1)[c::]:6789 error -101 [ 126.657862][ T6379] libceph: mon0 (1)[c::]:6789 connect error [ 126.899540][ T7850] vivid-007: disconnect [ 126.917025][ T6379] libceph: connect (1)[c::]:6789 error -101 [ 126.919781][ T6379] libceph: mon0 (1)[c::]:6789 connect error [ 127.210152][ T7833] ceph: No mds server is up or the cluster is laggy [ 127.800120][ T7875] FAULT_INJECTION: forcing a failure. [ 127.800120][ T7875] name failslab, interval 1, probability 0, space 0, times 0 [ 127.804841][ T7875] CPU: 2 UID: 0 PID: 7875 Comm: syz.3.415 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 127.808671][ T7875] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.812393][ T7875] Call Trace: [ 127.813639][ T7875] [ 127.814726][ T7875] dump_stack_lvl+0x16c/0x1f0 [ 127.816456][ T7875] should_fail_ex+0x497/0x5b0 [ 127.818195][ T7875] should_failslab+0xc2/0x120 [ 127.819902][ T7875] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 127.821616][ T7875] ? dst_alloc+0x99/0x1a0 [ 127.822744][ T7875] dst_alloc+0x99/0x1a0 [ 127.823849][ T7875] rt_dst_alloc+0x35/0x3a0 [ 127.825044][ T7875] ip_route_output_key_hash_rcu+0x8a5/0x2770 [ 127.826609][ T7875] ip_route_output_key_hash+0x138/0x2e0 [ 127.828037][ T7875] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 127.829811][ T7875] ? __pfx_lock_release+0x10/0x10 [ 127.831121][ T7875] ? trace_lock_acquire+0x14e/0x1f0 [ 127.832482][ T7875] ? __page_table_check_zero+0x2d7/0x360 [ 127.833948][ T7875] ip_route_output_flow+0x27/0x150 [ 127.835276][ T7875] raw_sendmsg+0xb94/0x3870 [ 127.836464][ T7875] ? __pfx_raw_sendmsg+0x10/0x10 [ 127.837764][ T7875] ? hlock_class+0x4e/0x130 [ 127.838955][ T7875] ? __pfx___might_resched+0x10/0x10 [ 127.840384][ T7875] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 127.841938][ T7875] ? aa_sk_perm+0x2f5/0xb20 [ 127.843159][ T7875] ? __import_iovec+0x1f2/0x6d0 [ 127.844435][ T7875] ? __pfx_raw_sendmsg+0x10/0x10 [ 127.845728][ T7875] inet_sendmsg+0x119/0x140 [ 127.846907][ T7875] ____sys_sendmsg+0x907/0xb40 [ 127.848169][ T7875] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.849549][ T7875] ? get_compat_msghdr+0x11b/0x170 [ 127.851073][ T7875] ___sys_sendmsg+0x135/0x1e0 [ 127.852357][ T7875] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.853825][ T7875] ? trace_lock_acquire+0x14e/0x1f0 [ 127.855351][ T7875] __sys_sendmmsg+0x2fa/0x420 [ 127.856573][ T7875] ? __pfx___sys_sendmmsg+0x10/0x10 [ 127.857995][ T7875] ? __pfx___lock_acquire+0x10/0x10 [ 127.859355][ T7875] ? find_held_lock+0x2d/0x110 [ 127.860635][ T7875] ? lock_acquire+0x2f/0xb0 [ 127.861864][ T7875] ? __might_fault+0xe3/0x190 [ 127.863115][ T7875] ? __might_fault+0xe3/0x190 [ 127.864363][ T7875] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 127.865831][ T7875] __do_fast_syscall_32+0x73/0x120 [ 127.867174][ T7875] do_fast_syscall_32+0x32/0x80 [ 127.868451][ T7875] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 127.870086][ T7875] RIP: 0023:0xf705e579 [ 127.871135][ T7875] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 127.876333][ T7875] RSP: 002b:00000000f505055c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 127.878519][ T7875] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020005240 [ 127.880556][ T7875] RDX: 0000000004000095 RSI: 000000000401eb94 RDI: 0000000000000000 [ 127.882658][ T7875] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.885407][ T7875] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 127.888214][ T7875] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.891022][ T7875] [ 128.051286][ T7849] vivid-007: reconnect [ 128.219584][ T7895] FAULT_INJECTION: forcing a failure. [ 128.219584][ T7895] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 128.223549][ T7895] CPU: 0 UID: 0 PID: 7895 Comm: syz.1.424 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 128.226665][ T7895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.229520][ T7895] Call Trace: [ 128.230440][ T7895] [ 128.231232][ T7895] dump_stack_lvl+0x16c/0x1f0 [ 128.232467][ T7895] should_fail_ex+0x497/0x5b0 [ 128.233774][ T7895] ? fs_reclaim_acquire+0xae/0x150 [ 128.235256][ T7895] should_fail_alloc_page+0xe7/0x130 [ 128.236806][ T7895] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 128.238472][ T7895] ? mark_lock+0xb5/0xc60 [ 128.239614][ T7895] __alloc_pages_noprof+0x190/0x25b0 [ 128.241136][ T7895] ? __pfx_mark_lock+0x10/0x10 [ 128.242403][ T7895] ? hlock_class+0x4e/0x130 [ 128.243638][ T7895] ? mark_lock+0xb5/0xc60 [ 128.244865][ T7895] ? __pfx_mark_lock+0x10/0x10 [ 128.246138][ T7895] ? __pfx_lock_release+0x10/0x10 [ 128.247498][ T7895] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 128.249050][ T7895] ? hlock_class+0x4e/0x130 [ 128.250324][ T7895] ? mark_lock+0xb5/0xc60 [ 128.251471][ T7895] ? hlock_class+0x4e/0x130 [ 128.252686][ T7895] ? mark_lock+0xb5/0xc60 [ 128.253844][ T7895] ? __pfx_mark_lock+0x10/0x10 [ 128.255120][ T7895] ? hlock_class+0x4e/0x130 [ 128.256420][ T7895] ? __lock_acquire+0xcc5/0x3c40 [ 128.257762][ T7895] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 128.259331][ T7895] ? policy_nodemask+0xea/0x4e0 [ 128.260653][ T7895] alloc_pages_mpol_noprof+0x2c9/0x610 [ 128.262094][ T7895] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 128.263868][ T7895] ? __lock_acquire+0xcc5/0x3c40 [ 128.265237][ T7895] folio_alloc_mpol_noprof+0x36/0xd0 [ 128.266761][ T7895] vma_alloc_folio_noprof+0xee/0x1b0 [ 128.268249][ T7895] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 128.269777][ T7895] ? find_held_lock+0x2d/0x110 [ 128.271119][ T7895] do_pte_missing+0x2017/0x3e00 [ 128.272391][ T7895] __handle_mm_fault+0x103c/0x2a40 [ 128.273820][ T7895] ? __pfx___handle_mm_fault+0x10/0x10 [ 128.275287][ T7895] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 128.276837][ T7895] ? find_vma+0xc0/0x140 [ 128.278003][ T7895] ? __pfx_find_vma+0x10/0x10 [ 128.279385][ T7895] handle_mm_fault+0x3fa/0xaa0 [ 128.280780][ T7895] do_user_addr_fault+0x7a3/0x13f0 [ 128.282176][ T7895] exc_page_fault+0x5c/0xc0 [ 128.283595][ T7895] asm_exc_page_fault+0x26/0x30 [ 128.285019][ T7895] RIP: 0010:_copy_to_iter+0x52a/0x1400 [ 128.286505][ T7895] Code: e8 3b 88 02 fd 48 8b 4c 24 18 44 89 e6 48 8b 44 24 28 4c 8d 2c 01 4c 89 ef e8 32 fa 64 fd 0f 01 cb 4c 89 e1 4c 89 f7 4c 89 ee a4 0f 1f 00 0f 01 ca 4c 89 e0 4d 29 e7 48 29 c8 49 01 cf 48 01 [ 128.292285][ T7895] RSP: 0018:ffffc9000e1e79c0 EFLAGS: 00050246 [ 128.293962][ T7895] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000ffe [ 128.296098][ T7895] RDX: 0000000000000000 RSI: ffff88806aa08000 RDI: 0000000020005480 [ 128.298255][ T7895] RBP: ffffc9000e1e7bc8 R08: 0000000000000000 R09: ffffed100d5411ff [ 128.300456][ T7895] R10: ffff88806aa08ffd R11: 0000000000000000 R12: 0000000000000ffe [ 128.302746][ T7895] R13: ffff88806aa08000 R14: 0000000020005480 R15: 0000000000000ffe [ 128.304914][ T7895] ? __pfx__copy_to_iter+0x10/0x10 [ 128.306329][ T7895] ? __virt_addr_valid+0x1a4/0x590 [ 128.307721][ T7895] ? __virt_addr_valid+0x5e/0x590 [ 128.309129][ T7895] ? __phys_addr_symbol+0x30/0x80 [ 128.310509][ T7895] ? __check_object_size+0x488/0x710 [ 128.312014][ T7895] seq_read_iter+0xd00/0x12b0 [ 128.313597][ T7895] seq_read+0x39f/0x4e0 [ 128.314737][ T7895] ? __pfx_seq_read+0x10/0x10 [ 128.315984][ T7895] ? __pfx_seq_read+0x10/0x10 [ 128.317320][ T7895] proc_reg_read+0x23d/0x330 [ 128.318557][ T7895] ? __pfx_proc_reg_read+0x10/0x10 [ 128.319912][ T7895] vfs_read+0x1df/0xbe0 [ 128.321091][ T7895] ? __fget_files+0x1fc/0x3a0 [ 128.322503][ T7895] ? __pfx___mutex_lock+0x10/0x10 [ 128.323794][ T7895] ? __pfx_vfs_read+0x10/0x10 [ 128.325041][ T7895] ? __fget_files+0x206/0x3a0 [ 128.326524][ T7895] ksys_read+0x12b/0x250 [ 128.327668][ T7895] ? __pfx_ksys_read+0x10/0x10 [ 128.328984][ T7895] ? __might_fault+0xe3/0x190 [ 128.330279][ T7895] ? rcu_is_watching+0x12/0xc0 [ 128.331581][ T7895] __do_fast_syscall_32+0x73/0x120 [ 128.333419][ T7895] do_fast_syscall_32+0x32/0x80 [ 128.335189][ T7895] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 128.337511][ T7895] RIP: 0023:0xf7f48579 [ 128.338987][ T7895] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 128.345631][ T7895] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 128.347895][ T7895] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020005480 [ 128.350035][ T7895] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.352154][ T7895] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 128.354695][ T7895] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 128.357674][ T7895] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 128.360532][ T7895] [ 129.082931][ T7914] netlink: 'syz.3.428': attribute type 1 has an invalid length. [ 129.184937][ T7920] netlink: 'syz.2.431': attribute type 11 has an invalid length. [ 129.187693][ T7920] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 129.386426][ T7926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.392923][ T7926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.401312][ T7926] bond0 (unregistering): Released all slaves [ 129.687058][ T7939] kAFS: unable to lookup cell '' [ 129.737531][ T7935] veth0_vlan: left promiscuous mode [ 129.739535][ T7935] veth0_vlan: entered promiscuous mode [ 129.838763][ T7935] syz.1.437 (7935) used greatest stack depth: 21392 bytes left [ 129.939986][ T7943] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 129.961376][ T7943] capability: warning: `syz.1.438' uses deprecated v2 capabilities in a way that may be insecure [ 130.259269][ T7967] capability: warning: `syz.0.445' uses 32-bit capabilities (legacy support in use) [ 130.380059][ T7965] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 130.381866][ T7965] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 130.385337][ T7965] vhci_hcd vhci_hcd.0: Device attached [ 130.388292][ T7973] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 130.392683][ T11] vhci_hcd: stop threads [ 130.394221][ T11] vhci_hcd: release socket [ 130.397474][ T11] vhci_hcd: disconnect device [ 131.049514][ T7986] Process accounting resumed [ 131.149818][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.453'. [ 131.153077][ T7990] netlink: 32 bytes leftover after parsing attributes in process `syz.3.453'. [ 131.206573][ T7992] snd_dummy snd_dummy.0: control 3:184:1024:syz1:2107285500 is already present [ 132.034721][ T8006] FAULT_INJECTION: forcing a failure. [ 132.034721][ T8006] name failslab, interval 1, probability 0, space 0, times 0 [ 132.039098][ T8006] CPU: 3 UID: 0 PID: 8006 Comm: syz.2.456 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 132.041788][ T8006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.044581][ T8006] Call Trace: [ 132.045446][ T8006] [ 132.046221][ T8006] dump_stack_lvl+0x16c/0x1f0 [ 132.047477][ T8006] should_fail_ex+0x497/0x5b0 [ 132.048672][ T8006] ? fs_reclaim_acquire+0xae/0x150 [ 132.049973][ T8006] should_failslab+0xc2/0x120 [ 132.051360][ T8006] __kmalloc_noprof+0xce/0x4f0 [ 132.053063][ T8006] ? tomoyo_encode2+0x100/0x3e0 [ 132.054758][ T8006] tomoyo_encode2+0x100/0x3e0 [ 132.055934][ T8006] tomoyo_realpath_from_path+0x1a7/0x710 [ 132.057352][ T8006] ? tomoyo_path_number_perm+0x235/0x5b0 [ 132.058732][ T8006] tomoyo_path_number_perm+0x248/0x5b0 [ 132.060076][ T8006] ? tomoyo_path_number_perm+0x235/0x5b0 [ 132.061497][ T8006] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 132.062984][ T8006] ? __pfx_lock_release+0x10/0x10 [ 132.064221][ T8006] ? trace_lock_acquire+0x14e/0x1f0 [ 132.065545][ T8006] ? lock_acquire+0x2f/0xb0 [ 132.066746][ T8006] ? __fget_files+0x40/0x3a0 [ 132.067984][ T8006] ? __fget_files+0x206/0x3a0 [ 132.069240][ T8006] security_file_ioctl_compat+0x9b/0x240 [ 132.070658][ T8006] __do_compat_sys_ioctl+0x4e/0x2c0 [ 132.072056][ T8006] __do_fast_syscall_32+0x73/0x120 [ 132.073333][ T8006] do_fast_syscall_32+0x32/0x80 [ 132.074511][ T8006] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.076427][ T8006] RIP: 0023:0xf7ff0579 [ 132.077936][ T8006] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 132.084403][ T8006] RSP: 002b:00000000f514655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 132.087265][ T8006] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008004b708 [ 132.090047][ T8006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 132.092768][ T8006] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 132.095451][ T8006] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 132.097774][ T8006] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.099685][ T8006] [ 132.136339][ T8006] ERROR: Out of memory at tomoyo_realpath_from_path. [ 132.157232][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.159183][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.489261][ T8010] input: syz0 as /devices/virtual/input/input17 [ 132.490987][ T8010] input: failed to attach handler leds to device input17, error: -6 [ 132.532814][ T5979] libceph: connect (1)[c::]:6789 error -101 [ 132.534730][ T5979] libceph: mon0 (1)[c::]:6789 connect error [ 132.805768][ T5979] libceph: connect (1)[c::]:6789 error -101 [ 132.808880][ T5979] libceph: mon0 (1)[c::]:6789 connect error [ 133.138982][ T8027] input: syz0 as /devices/virtual/input/input18 [ 133.141458][ T8027] input: failed to attach handler leds to device input18, error: -6 [ 133.150552][ T8010] ceph: No mds server is up or the cluster is laggy [ 133.353739][ T9] libceph: connect (1)[c::]:6789 error -101 [ 133.355617][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 133.625632][ T9] libceph: connect (1)[c::]:6789 error -101 [ 133.627552][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 133.680089][ T8026] ceph: No mds server is up or the cluster is laggy [ 133.782575][ T8049] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 133.804095][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 133.804109][ T39] audit: type=1800 audit(1734573115.216:57): pid=8049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.468" name="file0" dev="overlay" ino=634 res=0 errno=0 [ 133.858016][ T8054] netlink: 'syz.0.470': attribute type 2 has an invalid length. [ 133.988027][ T8067] block device autoloading is deprecated and will be removed. [ 134.389929][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'. [ 134.707262][ T8089] ======================================================= [ 134.707262][ T8089] WARNING: The mand mount option has been deprecated and [ 134.707262][ T8089] and is ignored by this kernel. Remove the mand [ 134.707262][ T8089] option from the mount to silence this warning. [ 134.707262][ T8089] ======================================================= [ 135.307837][ T8113] input: syz1 as /devices/virtual/input/input20 [ 135.482500][ T8119] netlink: 248 bytes leftover after parsing attributes in process `syz.0.492'. [ 135.506824][ T5952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 135.511334][ T5952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 135.518261][ T5952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 135.521614][ T5952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 135.525674][ T5952] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 135.527773][ T5952] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 135.593171][ T39] audit: type=1326 audit(1734573117.006:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.1.491" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x0 [ 135.598100][ T8123] chnl_net:caif_netlink_parms(): no params data found [ 135.652820][ T8123] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.654843][ T8123] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.657027][ T8123] bridge_slave_0: entered allmulticast mode [ 135.659293][ T8123] bridge_slave_0: entered promiscuous mode [ 135.662073][ T8123] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.664064][ T8123] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.666366][ T8123] bridge_slave_1: entered allmulticast mode [ 135.668547][ T8123] bridge_slave_1: entered promiscuous mode [ 135.697423][ T8123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.702442][ T8123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.725018][ T8123] team0: Port device team_slave_0 added [ 135.729421][ T8123] team0: Port device team_slave_1 added [ 135.748897][ T8123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.750906][ T8123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.757894][ T8123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.761529][ T8123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.763517][ T8123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.770593][ T8123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.795283][ T8123] hsr_slave_0: entered promiscuous mode [ 135.798129][ T8123] hsr_slave_1: entered promiscuous mode [ 135.800673][ T8123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.804384][ T8123] Cannot create hsr debugfs directory [ 135.922153][ T8123] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 135.928619][ T8123] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 135.932957][ T8123] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 135.939228][ T8123] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 135.984451][ T8123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.994078][ T8123] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.998512][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.001308][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.010985][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.013411][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.118564][ T8123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.239873][ T8123] veth0_vlan: entered promiscuous mode [ 136.246063][ T8123] veth1_vlan: entered promiscuous mode [ 136.263253][ T8123] veth0_macvtap: entered promiscuous mode [ 136.270061][ T8123] veth1_macvtap: entered promiscuous mode [ 136.277776][ T8123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.280567][ T8123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.283269][ T8123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.287228][ T8123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.290135][ T8123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.292922][ T8123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.296532][ T8123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.303913][ T8123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.308012][ T8123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.310566][ T8123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.313253][ T8123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.315910][ T8123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.319231][ T8123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.322434][ T8123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.326925][ T8123] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.329987][ T8123] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.332918][ T8123] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.336587][ T8123] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.371811][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.373890][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.395694][ T222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.398456][ T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.785498][ T5979] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 136.911811][ T8169] netlink: 'syz.1.498': attribute type 1 has an invalid length. [ 136.921201][ T8169] bond0: entered promiscuous mode [ 136.940855][ T8169] team0: Port device team_slave_1 removed [ 136.945155][ T8169] bond0: (slave team_slave_1): making interface the new active one [ 136.948156][ T8169] team_slave_1: entered promiscuous mode [ 136.950978][ T8169] bond0: (slave team_slave_1): Enslaving as an active interface with an up link [ 136.957762][ T5979] usb 7-1: config 0 has no interfaces? [ 136.960001][ T5979] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 136.963336][ T5979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.979631][ T5979] usb 7-1: config 0 descriptor?? [ 137.027098][ T8172] netlink: 40 bytes leftover after parsing attributes in process `syz.1.499'. [ 137.279649][ T8162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.282009][ T8162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.355466][ T1462] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 137.569985][ T8180] input: syz0 as /devices/virtual/input/input21 [ 137.572186][ T8180] input: failed to attach handler leds to device input21, error: -6 [ 137.595613][ T5954] Bluetooth: hci1: command tx timeout [ 137.599275][ T6001] libceph: connect (1)[c::]:6789 error -101 [ 137.601600][ T6001] libceph: mon0 (1)[c::]:6789 connect error [ 137.825472][ T1462] usb 9-1: Using ep0 maxpacket: 16 [ 137.828032][ T1462] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 137.833209][ T1462] usb 9-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 137.836073][ T1462] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.838209][ T1462] usb 9-1: Product: syz [ 137.839348][ T1462] usb 9-1: Manufacturer: syz [ 137.840616][ T1462] usb 9-1: SerialNumber: syz [ 137.845289][ T1462] usb 9-1: config 0 descriptor?? [ 137.848828][ T1462] hub 9-1:0.0: bad descriptor, ignoring hub [ 137.851149][ T1462] hub 9-1:0.0: probe with driver hub failed with error -5 [ 137.859607][ T1462] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 137.866112][ T5979] libceph: connect (1)[c::]:6789 error -101 [ 137.869165][ T5979] libceph: mon0 (1)[c::]:6789 connect error [ 138.040787][ T1462] usb 7-1: USB disconnect, device number 4 [ 138.049173][ T8176] FAULT_INJECTION: forcing a failure. [ 138.049173][ T8176] name failslab, interval 1, probability 0, space 0, times 0 [ 138.052631][ T8176] CPU: 0 UID: 0 PID: 8176 Comm: syz.4.500 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 138.055333][ T8176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 138.058075][ T8176] Call Trace: [ 138.058905][ T8176] [ 138.059609][ T8176] dump_stack_lvl+0x16c/0x1f0 [ 138.060784][ T8176] should_fail_ex+0x497/0x5b0 [ 138.061908][ T8176] ? fs_reclaim_acquire+0xae/0x150 [ 138.063150][ T8176] should_failslab+0xc2/0x120 [ 138.064341][ T8176] __kmalloc_cache_noprof+0x68/0x420 [ 138.065652][ T8176] ? __pfx_snd_hrtimer_open+0x10/0x10 [ 138.066992][ T8176] snd_hrtimer_open+0x43/0x110 [ 138.068204][ T8176] snd_timer_open+0xb2c/0x1020 [ 138.069428][ T8176] ? __pfx_snd_timer_open+0x10/0x10 [ 138.070727][ T8176] ? kstrdup+0x8b/0xb0 [ 138.071753][ T8176] snd_seq_timer_open+0x281/0x5c0 [ 138.073042][ T8176] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 138.074462][ T8176] ? mark_held_locks+0x9f/0xe0 [ 138.075690][ T8176] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 138.077190][ T8176] ? lockdep_hardirqs_on+0x7c/0x110 [ 138.078533][ T8176] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 138.080020][ T8176] queue_use+0xe3/0x250 [ 138.081095][ T8176] snd_seq_queue_alloc+0x2e5/0x550 [ 138.082390][ T8176] snd_seq_ioctl_create_queue+0xa9/0x310 [ 138.083832][ T8176] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 138.085249][ T8176] alloc_seq_queue+0xc2/0x160 [ 138.086448][ T8176] ? __pfx_alloc_seq_queue+0x10/0x10 [ 138.087825][ T8176] ? mark_held_locks+0x9f/0xe0 [ 138.089066][ T8176] ? _raw_spin_unlock_irq+0x23/0x50 [ 138.090402][ T8176] snd_seq_oss_open+0x38c/0xa20 [ 138.091653][ T8176] odev_open+0x6f/0x90 [ 138.092687][ T8176] ? __pfx_odev_open+0x10/0x10 [ 138.093907][ T8176] soundcore_open+0x409/0x580 [ 138.095106][ T8176] ? __pfx_soundcore_open+0x10/0x10 [ 138.096414][ T8176] chrdev_open+0x237/0x6a0 [ 138.097555][ T8176] ? __pfx_apparmor_file_open+0x10/0x10 [ 138.098961][ T8176] ? __pfx_chrdev_open+0x10/0x10 [ 138.100210][ T8176] do_dentry_open+0xf59/0x1ea0 [ 138.101457][ T8176] ? __pfx_chrdev_open+0x10/0x10 [ 138.102706][ T8176] ? inode_permission+0xdd/0x5f0 [ 138.103959][ T8176] vfs_open+0x82/0x3f0 [ 138.104983][ T8176] ? may_open+0x1f2/0x400 [ 138.106089][ T8176] path_openat+0x1e6a/0x2d60 [ 138.107288][ T8176] ? __pfx_path_openat+0x10/0x10 [ 138.108515][ T8176] ? __pfx___lock_acquire+0x10/0x10 [ 138.109773][ T8176] ? lock_acquire.part.0+0x11b/0x380 [ 138.111057][ T8176] ? find_held_lock+0x2d/0x110 [ 138.112264][ T8176] do_filp_open+0x20c/0x470 [ 138.113422][ T8176] ? __pfx_do_filp_open+0x10/0x10 [ 138.114686][ T8176] ? find_held_lock+0x2d/0x110 [ 138.115898][ T8176] ? alloc_fd+0x41f/0x760 [ 138.117043][ T8176] do_sys_openat2+0x17a/0x1e0 [ 138.118257][ T8176] ? __pfx_do_sys_openat2+0x10/0x10 [ 138.119604][ T8176] ? __fget_files+0x206/0x3a0 [ 138.120801][ T8176] __ia32_compat_sys_openat+0x16e/0x210 [ 138.122214][ T8176] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 138.123788][ T8176] ? ksys_write+0x1ba/0x250 [ 138.124976][ T8176] __do_fast_syscall_32+0x73/0x120 [ 138.126288][ T8176] do_fast_syscall_32+0x32/0x80 [ 138.127581][ T8176] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 138.129194][ T8176] RIP: 0023:0xf7f23579 [ 138.130233][ T8176] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 138.135109][ T8176] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 138.137248][ T8176] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000040 [ 138.139300][ T8176] RDX: 0000000000008002 RSI: 0000000000000000 RDI: 0000000000000000 [ 138.141223][ T8176] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 138.143278][ T8176] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 138.145362][ T8176] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 138.147443][ T8176] [ 138.153306][ T6640] usb 9-1: USB disconnect, device number 2 [ 138.200338][ T8180] ceph: No mds server is up or the cluster is laggy [ 138.688621][ T8199] netlink: 20 bytes leftover after parsing attributes in process `syz.4.505'. [ 138.803451][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.508'. [ 138.980265][ T8211] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.011476][ T8211] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.014159][ T8211] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address [ 139.018490][ T8211] bond3: (slave wireguard1): Error -95 calling set_mac_address [ 139.045981][ T8216] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 139.049286][ T8216] bond3: (slave batadv3): Enslaving as an active interface with an up link [ 139.675478][ T5952] Bluetooth: hci1: command tx timeout [ 139.895895][ T8217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.380496][ T8246] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 140.382215][ T8246] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 140.384947][ T8246] vhci_hcd vhci_hcd.0: Device attached [ 140.392092][ T8246] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 140.394502][ T8246] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 140.399323][ T8246] vhci_hcd vhci_hcd.0: Device attached [ 140.411592][ T8246] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8) [ 140.413372][ T8246] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 140.420041][ T8246] vhci_hcd vhci_hcd.0: Device attached [ 140.424411][ T8246] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10) [ 140.426823][ T8246] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 140.430083][ T8246] vhci_hcd vhci_hcd.0: Device attached [ 140.435553][ T8254] vhci_hcd: connection closed [ 140.439136][ T8252] vhci_hcd: connection closed [ 140.439278][ T8250] vhci_hcd: connection closed [ 140.440493][ T45] vhci_hcd: stop threads [ 140.443029][ T8247] vhci_hcd: connection closed [ 140.443089][ T45] vhci_hcd: release socket [ 140.447156][ T45] vhci_hcd: disconnect device [ 140.448552][ T45] vhci_hcd: stop threads [ 140.449696][ T45] vhci_hcd: release socket [ 140.450904][ T45] vhci_hcd: disconnect device [ 140.452353][ T45] vhci_hcd: stop threads [ 140.453530][ T45] vhci_hcd: release socket [ 140.454725][ T45] vhci_hcd: disconnect device [ 140.455453][ T35] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 140.457437][ T45] vhci_hcd: stop threads [ 140.459428][ T45] vhci_hcd: release socket [ 140.460651][ T45] vhci_hcd: disconnect device [ 140.565503][ T1462] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 140.627448][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.630369][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.633038][ T35] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 140.635552][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.642726][ T35] usb 7-1: config 0 descriptor?? [ 140.717871][ T1462] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.721126][ T1462] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 140.723945][ T1462] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 140.726931][ T1462] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.730793][ T1462] usb 6-1: config 0 descriptor?? [ 140.735344][ T1462] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 140.738562][ T1462] dvb-usb: bulk message failed: -22 (3/0) [ 140.746388][ T1462] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 140.749451][ T1462] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 140.751815][ T1462] usb 6-1: media controller created [ 140.755283][ T1462] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.763670][ T1462] dvb-usb: bulk message failed: -22 (6/0) [ 140.765854][ T1462] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 140.769590][ T1462] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input22 [ 140.776050][ T1462] dvb-usb: schedule remote query interval to 150 msecs. [ 140.778337][ T1462] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 140.938290][ T1462] dvb-usb: bulk message failed: -22 (1/0) [ 140.940954][ T1462] dvb-usb: error while querying for an remote control event. [ 140.941826][ T8244] dvb-usb: bulk message failed: -22 (4/0) [ 140.984308][ T1462] usb 6-1: USB disconnect, device number 8 [ 141.016412][ T1462] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 141.282325][ T35] usbhid 7-1:0.0: can't add hid device: -71 [ 141.284079][ T35] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 141.288148][ T35] usb 7-1: USB disconnect, device number 5 [ 141.558575][ T8281] batadv0: entered promiscuous mode [ 141.560612][ T8281] team0: entered promiscuous mode [ 141.561969][ T8281] team_slave_0: entered promiscuous mode [ 141.564377][ T8281] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 141.566479][ T8281] Cannot create hsr debugfs directory [ 141.567983][ T8281] hsr1: entered promiscuous mode [ 141.569299][ T8281] hsr1: entered allmulticast mode [ 141.570614][ T8281] batadv0: entered allmulticast mode [ 141.571992][ T8281] team0: entered allmulticast mode [ 141.573635][ T8281] team_slave_0: entered allmulticast mode [ 141.599094][ T8281] kvm: Disabled LAPIC found during irq injection [ 141.699723][ T8284] FAULT_INJECTION: forcing a failure. [ 141.699723][ T8284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.703333][ T8284] CPU: 1 UID: 0 PID: 8284 Comm: syz.4.528 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 141.706166][ T8284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.709914][ T8284] Call Trace: [ 141.711152][ T8284] [ 141.712018][ T8284] dump_stack_lvl+0x16c/0x1f0 [ 141.713261][ T8284] should_fail_ex+0x497/0x5b0 [ 141.714489][ T8284] _copy_from_user+0x2e/0xd0 [ 141.715700][ T8284] get_compat_msghdr+0xa8/0x170 [ 141.716979][ T8284] ? __pfx_get_compat_msghdr+0x10/0x10 [ 141.718394][ T8284] ___sys_sendmsg+0x1b0/0x1e0 [ 141.719628][ T8284] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.720990][ T8284] ? __pfx_lock_release+0x10/0x10 [ 141.722300][ T8284] ? trace_lock_acquire+0x14e/0x1f0 [ 141.723676][ T8284] ? __fget_files+0x206/0x3a0 [ 141.724917][ T8284] __sys_sendmsg+0x16e/0x220 [ 141.726137][ T8284] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.727502][ T8284] __do_fast_syscall_32+0x73/0x120 [ 141.729323][ T8284] do_fast_syscall_32+0x32/0x80 [ 141.730919][ T8284] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 141.732574][ T8284] RIP: 0023:0xf7f23579 [ 141.733647][ T8284] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 141.738656][ T8284] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 141.740815][ T8284] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000340 [ 141.742866][ T8284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.744920][ T8284] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 141.747127][ T8284] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 141.749859][ T8284] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 141.751891][ T8284] [ 141.755697][ T5952] Bluetooth: hci1: command 0x040f tx timeout [ 141.756550][ T8283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.768588][ T8285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.215808][ T1462] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 142.330511][ T8298] pim6reg: entered allmulticast mode [ 142.337710][ T8298] pim6reg: left allmulticast mode [ 142.376962][ T1462] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 142.380253][ T1462] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 142.383093][ T1462] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 142.386014][ T1462] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.389782][ T1462] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.392111][ T1462] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.394927][ T1462] usb 7-1: config 0 descriptor?? [ 142.399594][ T8294] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 142.817947][ T1462] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 142.822080][ T1462] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 142.832206][ T1462] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 143.162244][ T8304] input: syz0 as /devices/virtual/input/input24 [ 143.163979][ T8304] input: failed to attach handler leds to device input24, error: -6 [ 143.181833][ T1462] libceph: connect (1)[c::]:6789 error -101 [ 143.183580][ T1462] libceph: mon0 (1)[c::]:6789 connect error [ 143.446230][ T1462] libceph: connect (1)[c::]:6789 error -101 [ 143.452965][ T1462] libceph: mon0 (1)[c::]:6789 connect error [ 143.632746][ T8304] ceph: No mds server is up or the cluster is laggy [ 143.845529][ T5954] Bluetooth: hci1: command 0x040f tx timeout [ 144.005469][ T6001] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 144.168573][ T6001] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.171542][ T6001] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.174020][ T6001] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 144.176422][ T6001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.182714][ T6001] usb 6-1: config 0 descriptor?? [ 144.185619][ T1462] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 144.435497][ T1462] usb 5-1: config 0 has no interfaces? [ 144.445021][ T1462] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 144.452459][ T1462] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.575762][ T1462] usb 5-1: config 0 descriptor?? [ 144.655504][ T6640] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 144.808305][ T6640] usb 9-1: config 0 has no interfaces? [ 144.810287][ T6640] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 144.813314][ T6640] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.822858][ T6640] usb 9-1: config 0 descriptor?? [ 144.833170][ T6001] usbhid 6-1:0.0: can't add hid device: -71 [ 144.834975][ T6001] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 144.842444][ T6001] usb 6-1: USB disconnect, device number 9 [ 144.850887][ T8318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.854029][ T8318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.860826][ T8318] usb usb9: usbfs: process 8318 (syz.0.537) did not claim interface 0 before use [ 145.003796][ T6379] usb 7-1: USB disconnect, device number 6 [ 145.105141][ T8327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.107793][ T8327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.124735][ T8322] usb usb9: usbfs: process 8322 (syz.4.539) did not claim interface 0 before use [ 145.292890][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'. [ 145.799090][ T6379] usb 9-1: USB disconnect, device number 3 [ 145.925651][ T5954] Bluetooth: hci1: command 0x040f tx timeout [ 146.741938][ T1016] usb 5-1: USB disconnect, device number 6 [ 146.767006][ T8353] FAULT_INJECTION: forcing a failure. [ 146.767006][ T8353] name failslab, interval 1, probability 0, space 0, times 0 [ 146.771164][ T8353] CPU: 3 UID: 0 PID: 8353 Comm: syz.0.547 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 146.773902][ T8353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.776527][ T8353] Call Trace: [ 146.777352][ T8353] [ 146.778144][ T8353] dump_stack_lvl+0x16c/0x1f0 [ 146.779477][ T8353] should_fail_ex+0x497/0x5b0 [ 146.781070][ T8353] ? fs_reclaim_acquire+0xae/0x150 [ 146.782571][ T8353] should_failslab+0xc2/0x120 [ 146.783855][ T8353] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 146.785304][ T8353] ? skb_clone+0x190/0x3f0 [ 146.786489][ T8353] skb_clone+0x190/0x3f0 [ 146.787630][ T8353] pfkey_process+0xc7/0x840 [ 146.788850][ T8353] ? rcu_is_watching+0x12/0xc0 [ 146.790118][ T8353] ? __pfx_pfkey_process+0x10/0x10 [ 146.791446][ T8353] ? __virt_addr_valid+0x5e/0x590 [ 146.792796][ T8353] ? __phys_addr_symbol+0x30/0x80 [ 146.794136][ T8353] pfkey_sendmsg+0x43b/0x840 [ 146.795362][ T8353] ____sys_sendmsg+0x9ae/0xb40 [ 146.796636][ T8353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.798154][ T8353] ? get_compat_msghdr+0x11b/0x170 [ 146.799512][ T8353] ___sys_sendmsg+0x135/0x1e0 [ 146.800782][ T8353] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.802164][ T8353] ? __pfx_lock_release+0x10/0x10 [ 146.803519][ T8353] ? trace_lock_acquire+0x14e/0x1f0 [ 146.804908][ T8353] ? __fget_files+0x206/0x3a0 [ 146.806161][ T8353] __sys_sendmsg+0x16e/0x220 [ 146.807413][ T8353] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.808790][ T8353] __do_fast_syscall_32+0x73/0x120 [ 146.810145][ T8353] do_fast_syscall_32+0x32/0x80 [ 146.811450][ T8353] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 146.813121][ T8353] RIP: 0023:0xf7f81579 [ 146.814220][ T8353] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 146.819279][ T8353] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 146.821484][ T8353] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000180 [ 146.823546][ T8353] RDX: 0000000000040084 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.825685][ T8353] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 146.828012][ T8353] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 146.830100][ T8353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.832213][ T8353] [ 146.923700][ T8357] netlink: 300 bytes leftover after parsing attributes in process `syz.2.549'. [ 146.926388][ T8357] netlink: 300 bytes leftover after parsing attributes in process `syz.2.549'. [ 147.088650][ T8361] input: syz0 as /devices/virtual/input/input25 [ 147.090392][ T8361] input: failed to attach handler leds to device input25, error: -6 [ 147.117483][ T8347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.180004][ T6379] libceph: connect (1)[c::]:6789 error -101 [ 147.182688][ T6379] libceph: mon0 (1)[c::]:6789 connect error [ 147.435819][ T6379] libceph: connect (1)[c::]:6789 error -101 [ 147.437623][ T6379] libceph: mon0 (1)[c::]:6789 connect error [ 147.679597][ T8374] netlink: 'syz.4.554': attribute type 10 has an invalid length. [ 147.690422][ T8374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.692774][ T8374] team0: Port device bond0 added [ 147.697276][ T8374] 9pnet_fd: Insufficient options for proto=fd [ 147.731823][ T8361] ceph: No mds server is up or the cluster is laggy [ 148.111361][ T8386] input: syz0 as /devices/virtual/input/input26 [ 148.113110][ T8386] input: failed to attach handler leds to device input26, error: -6 [ 148.302937][ T6379] libceph: connect (1)[c::]:6789 error -101 [ 148.304609][ T6379] libceph: mon0 (1)[c::]:6789 connect error [ 148.375131][ T39] audit: type=1326 audit(1734573129.786:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 148.381590][ T39] audit: type=1326 audit(1734573129.786:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 148.387646][ T39] audit: type=1326 audit(1734573129.786:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.556" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 148.394178][ T39] audit: type=1326 audit(1734573129.796:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 148.400018][ T39] audit: type=1326 audit(1734573129.796:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 148.405595][ T39] audit: type=1326 audit(1734573129.796:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.556" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 148.412543][ T39] audit: type=1326 audit(1734573129.816:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 148.418341][ T39] audit: type=1326 audit(1734573129.816:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 148.425001][ T39] audit: type=1326 audit(1734573129.826:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.556" exe="/syz-executor" sig=0 arch=40000003 syscall=333 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 148.430656][ T39] audit: type=1326 audit(1734573129.826:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 148.566551][ T6379] libceph: connect (1)[c::]:6789 error -101 [ 148.568413][ T6379] libceph: mon0 (1)[c::]:6789 connect error [ 148.694756][ T8386] ceph: No mds server is up or the cluster is laggy [ 148.769896][ T8406] vivid-007: disconnect [ 149.349902][ T8411] netlink: 'syz.1.564': attribute type 1 has an invalid length. [ 149.367805][ T8411] 8021q: adding VLAN 0 to HW filter on device bond4 [ 149.394320][ T8401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.406144][ T8411] 8021q: adding VLAN 0 to HW filter on device bond4 [ 149.408069][ T8411] bond4: (slave wireguard1): The slave device specified does not support setting the MAC address [ 149.411290][ T8411] bond4: (slave wireguard1): Error -95 calling set_mac_address [ 149.438499][ T8414] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 149.441907][ T8414] bond4: (slave batadv4): Enslaving as an active interface with an up link [ 149.619544][ T8405] vivid-007: reconnect [ 149.681172][ T8420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.567'. [ 149.755573][ T35] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 149.907300][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.910463][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.913092][ T35] usb 9-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 149.918205][ T35] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.923645][ T35] usb 9-1: config 0 descriptor?? [ 150.582184][ T35] usbhid 9-1:0.0: can't add hid device: -71 [ 150.583845][ T35] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 150.590944][ T35] usb 9-1: USB disconnect, device number 4 [ 150.814802][ T8444] hfs: unable to load iocharset "io#harset" [ 150.848927][ T8444] fuse: Bad value for 'user_id' [ 150.850429][ T8444] fuse: Bad value for 'user_id' [ 151.193448][ T8451] netlink: 'syz.4.574': attribute type 2 has an invalid length. [ 151.278168][ T8454] input: syz0 as /devices/virtual/input/input27 [ 151.280090][ T8454] input: failed to attach handler leds to device input27, error: -6 [ 151.450006][ T6379] libceph: connect (1)[c::]:6789 error -101 [ 151.498359][ T6379] libceph: mon0 (1)[c::]:6789 connect error [ 151.755637][ T6379] libceph: connect (1)[c::]:6789 error -101 [ 151.761578][ T6379] libceph: mon0 (1)[c::]:6789 connect error [ 151.866018][ T8454] ceph: No mds server is up or the cluster is laggy [ 151.967560][ T8470] vivid-007: disconnect [ 152.789677][ T8469] vivid-007: reconnect [ 153.656042][ T8505] FAULT_INJECTION: forcing a failure. [ 153.656042][ T8505] name failslab, interval 1, probability 0, space 0, times 0 [ 153.659330][ T8505] CPU: 3 UID: 0 PID: 8505 Comm: syz.0.587 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 153.661945][ T8505] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 153.664717][ T8505] Call Trace: [ 153.665637][ T8505] [ 153.666396][ T8505] dump_stack_lvl+0x16c/0x1f0 [ 153.667584][ T8505] should_fail_ex+0x497/0x5b0 [ 153.668800][ T8505] should_failslab+0xc2/0x120 [ 153.669966][ T8505] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 153.671320][ T8505] ? skb_clone+0x190/0x3f0 [ 153.672471][ T8505] skb_clone+0x190/0x3f0 [ 153.673570][ T8505] netlink_deliver_tap+0xafd/0xca0 [ 153.675084][ T8505] netlink_unicast+0x5e1/0x7f0 [ 153.676331][ T8505] ? __pfx_netlink_unicast+0x10/0x10 [ 153.677681][ T8505] ? __phys_addr_symbol+0x30/0x80 [ 153.678995][ T8505] ? __check_object_size+0x488/0x710 [ 153.680333][ T8505] netlink_sendmsg+0x8b8/0xd70 [ 153.681553][ T8505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.683136][ T8505] ____sys_sendmsg+0x9ae/0xb40 [ 153.684769][ T8505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.686549][ T8505] ? get_compat_msghdr+0x11b/0x170 [ 153.688301][ T8505] ___sys_sendmsg+0x135/0x1e0 [ 153.689913][ T8505] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.691687][ T8505] ? __pfx_lock_release+0x10/0x10 [ 153.693316][ T8505] ? trace_lock_acquire+0x14e/0x1f0 [ 153.695125][ T8505] ? __fget_files+0x206/0x3a0 [ 153.696851][ T8505] __sys_sendmsg+0x16e/0x220 [ 153.698463][ T8505] ? __pfx___sys_sendmsg+0x10/0x10 [ 153.700086][ T8505] __do_fast_syscall_32+0x73/0x120 [ 153.701847][ T8505] do_fast_syscall_32+0x32/0x80 [ 153.703533][ T8505] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.705731][ T8505] RIP: 0023:0xf7f81579 [ 153.707158][ T8505] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 153.713773][ T8505] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 153.716070][ T8508] input: syz0 as /devices/virtual/input/input28 [ 153.716658][ T8505] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000200 [ 153.716672][ T8505] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.718345][ T8508] input: failed to attach handler leds to device input28, error: -6 [ 153.721038][ T8505] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 153.721052][ T8505] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 153.730768][ T8505] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.733430][ T8505] [ 153.742705][ T8505] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.745598][ T8505] IPv6: NLM_F_CREATE should be set when creating new route [ 153.763394][ T5979] libceph: connect (1)[c::]:6789 error -101 [ 153.765838][ T5979] libceph: mon0 (1)[c::]:6789 connect error [ 154.025662][ T5979] libceph: connect (1)[c::]:6789 error -101 [ 154.027446][ T5979] libceph: mon0 (1)[c::]:6789 connect error [ 154.335949][ T8508] ceph: No mds server is up or the cluster is laggy [ 154.715694][ T8527] FAULT_INJECTION: forcing a failure. [ 154.715694][ T8527] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 154.725582][ T8527] CPU: 3 UID: 0 PID: 8527 Comm: syz.1.592 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 154.729208][ T8527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 154.732803][ T8527] Call Trace: [ 154.733952][ T8527] [ 154.734984][ T8527] dump_stack_lvl+0x16c/0x1f0 [ 154.736617][ T8527] should_fail_ex+0x497/0x5b0 [ 154.738238][ T8527] ? fs_reclaim_acquire+0xae/0x150 [ 154.739995][ T8527] should_fail_alloc_page+0xe7/0x130 [ 154.741796][ T8527] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 154.743896][ T8527] __alloc_pages_noprof+0x190/0x25b0 [ 154.745552][ T8527] ? finish_task_switch.isra.0+0x212/0xcc0 [ 154.747468][ T8527] ? __pfx_lock_release+0x10/0x10 [ 154.749207][ T8527] ? rcu_is_watching+0x12/0xc0 [ 154.750835][ T8527] ? mark_held_locks+0x9f/0xe0 [ 154.752428][ T8527] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 154.754216][ T8527] ? finish_task_switch.isra.0+0x217/0xcc0 [ 154.756205][ T8527] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 154.758206][ T8527] ? __switch_to+0x749/0x1190 [ 154.759833][ T8527] ? hlock_class+0x4e/0x130 [ 154.761415][ T8527] ? mark_lock+0xb5/0xc60 [ 154.762898][ T8527] ? __pfx_mark_lock+0x10/0x10 [ 154.764551][ T8527] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 154.766658][ T8527] ? policy_nodemask+0xea/0x4e0 [ 154.768428][ T8527] alloc_pages_mpol_noprof+0x2c9/0x610 [ 154.770221][ T8527] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 154.772228][ T8527] ? mark_held_locks+0x9f/0xe0 [ 154.773966][ T8527] folio_alloc_mpol_noprof+0x36/0xd0 [ 154.775771][ T8527] vma_alloc_folio_noprof+0xee/0x1b0 [ 154.777599][ T8527] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 154.779628][ T8527] ? do_wp_page+0xfa9/0x4670 [ 154.781269][ T8527] do_wp_page+0x1f68/0x4670 [ 154.782879][ T8527] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 154.784879][ T8527] ? __pfx_do_wp_page+0x10/0x10 [ 154.786604][ T8527] ? rcu_is_watching+0x12/0xc0 [ 154.788278][ T8527] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 154.790184][ T8527] ? lock_acquire+0x2f/0xb0 [ 154.791779][ T8527] ? __handle_mm_fault+0xdfa/0x2a40 [ 154.793595][ T8527] __handle_mm_fault+0x1ade/0x2a40 [ 154.795396][ T8527] ? lock_vma_under_rcu+0x6b9/0x980 [ 154.797203][ T8527] ? __pfx___handle_mm_fault+0x10/0x10 [ 154.799108][ T8527] ? __fget_files+0x206/0x3a0 [ 154.800783][ T8527] handle_mm_fault+0x3fa/0xaa0 [ 154.802501][ T8527] do_user_addr_fault+0x60d/0x13f0 [ 154.804364][ T8527] exc_page_fault+0x5c/0xc0 [ 154.805980][ T8527] asm_exc_page_fault+0x26/0x30 [ 154.807709][ T8527] RIP: 0023:0xf71c5362 [ 154.809154][ T8527] Code: c7 bd ec 20 00 56 53 83 ec 1c 8b 6c 24 30 8b 55 1c 65 a1 68 00 00 00 39 c2 0f 84 11 01 00 00 80 7d 18 02 74 2b b8 08 00 00 00 0f c1 45 00 83 c0 08 85 c0 0f 88 0e 01 00 00 a8 01 75 7a 31 d2 [ 154.815889][ T8527] RSP: 002b:00000000f5074350 EFLAGS: 00010293 [ 154.818021][ T8527] RAX: 0000000000000008 RBX: 00000000f73d3ff4 RCX: 00000000ffffffff [ 154.820888][ T8527] RDX: 0000000000000000 RSI: 00000000f72b5916 RDI: 00000000f73d3ff4 [ 154.823630][ T8527] RBP: 00000000f7f36e40 R08: 0000000000000000 R09: 0000000000000000 [ 154.826373][ T8527] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 154.829155][ T8527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 154.831999][ T8527] [ 154.833862][ T8527] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 155.079197][ T8530] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 155.224353][ T8537] batman_adv: batadv0: Adding interface: dummy0 [ 155.226606][ T8537] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.234871][ T8537] batman_adv: batadv0: Interface activated: dummy0 [ 155.260971][ T8537] batadv0: mtu less than device minimum [ 155.264303][ T8537] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.268136][ T8537] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.271536][ T8537] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.274901][ T8537] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.278366][ T8537] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.281731][ T8537] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.285872][ T8537] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.290674][ T8537] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.295577][ T8537] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.507263][ T8548] netlink: 20 bytes leftover after parsing attributes in process `syz.4.600'. [ 155.511524][ T8548] netlink: 'syz.4.600': attribute type 1 has an invalid length. [ 155.513551][ T8548] netlink: 228 bytes leftover after parsing attributes in process `syz.4.600'. [ 155.574446][ T8555] netlink: 20 bytes leftover after parsing attributes in process `syz.4.600'. [ 155.584072][ T8555] netlink: 24 bytes leftover after parsing attributes in process `syz.4.600'. [ 155.680922][ T8561] input: syz0 as /devices/virtual/input/input29 [ 155.682811][ T8561] input: failed to attach handler leds to device input29, error: -6 [ 155.725087][ T8564] vivid-007: disconnect [ 156.271733][ T8561] ceph: No mds server is up or the cluster is laggy [ 156.616708][ T8560] vivid-007: reconnect [ 157.035257][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.612'. [ 157.158135][ T8588] netlink: 'syz.4.609': attribute type 10 has an invalid length. [ 157.174754][ T8588] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 157.336859][ T8616] input: syz0 as /devices/virtual/input/input30 [ 157.339274][ T8616] input: failed to attach handler leds to device input30, error: -6 [ 157.399494][ T6001] libceph: connect (1)[c::]:6789 error -101 [ 157.401379][ T6001] libceph: mon0 (1)[c::]:6789 connect error [ 157.685699][ T6001] libceph: connect (1)[c::]:6789 error -101 [ 157.687639][ T6001] libceph: mon0 (1)[c::]:6789 connect error [ 157.949744][ T8616] ceph: No mds server is up or the cluster is laggy [ 158.112262][ T8643] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 158.114169][ T8643] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 158.120327][ T8643] vhci_hcd vhci_hcd.0: Device attached [ 158.129056][ T8643] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 158.131237][ T8643] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 158.133783][ T8643] vhci_hcd vhci_hcd.0: Device attached [ 158.138551][ T8647] vhci_hcd: connection closed [ 158.140037][ T1248] vhci_hcd: stop threads [ 158.142864][ T1248] vhci_hcd: release socket [ 158.143343][ T8644] vhci_hcd: connection closed [ 158.144123][ T1248] vhci_hcd: disconnect device [ 158.146816][ T1248] vhci_hcd: stop threads [ 158.147953][ T1248] vhci_hcd: release socket [ 158.149157][ T1248] vhci_hcd: disconnect device [ 158.540078][ T8662] FAULT_INJECTION: forcing a failure. [ 158.540078][ T8662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.544602][ T8662] CPU: 0 UID: 0 PID: 8662 Comm: syz.0.621 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 158.548194][ T8662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 158.551859][ T8662] Call Trace: [ 158.553025][ T8662] [ 158.554053][ T8662] dump_stack_lvl+0x16c/0x1f0 [ 158.555688][ T8662] should_fail_ex+0x497/0x5b0 [ 158.557375][ T8662] _copy_to_user+0x32/0xd0 [ 158.558920][ T8662] simple_read_from_buffer+0xd0/0x160 [ 158.560791][ T8662] proc_fail_nth_read+0x198/0x270 [ 158.562537][ T8662] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.564480][ T8662] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.566356][ T8662] vfs_read+0x1df/0xbe0 [ 158.567799][ T8662] ? __fget_files+0x1fc/0x3a0 [ 158.569445][ T8662] ? __pfx___mutex_lock+0x10/0x10 [ 158.571192][ T8662] ? __pfx_vfs_read+0x10/0x10 [ 158.572841][ T8662] ? __fget_files+0x206/0x3a0 [ 158.574272][ T8662] ksys_read+0x12b/0x250 [ 158.575733][ T8662] ? __pfx_ksys_read+0x10/0x10 [ 158.577429][ T8662] __do_fast_syscall_32+0x73/0x120 [ 158.579199][ T8662] do_fast_syscall_32+0x32/0x80 [ 158.580885][ T8662] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.583060][ T8662] RIP: 0023:0xf7f81579 [ 158.584466][ T8662] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 158.590987][ T8662] RSP: 002b:00000000f50d6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 158.593828][ T8662] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f50d6620 [ 158.596518][ T8662] RDX: 000000000000000f RSI: 00000000f7413ff4 RDI: 0000000000000000 [ 158.599219][ T8662] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 158.601939][ T8662] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 158.604644][ T8662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.607366][ T8662] [ 158.890929][ T8675] input: syz0 as /devices/virtual/input/input31 [ 158.892714][ T8675] input: failed to attach handler leds to device input31, error: -6 [ 159.518303][ T8675] ceph: No mds server is up or the cluster is laggy [ 159.545617][ T5980] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 159.736326][ T5980] usb 6-1: config 0 has no interfaces? [ 159.738188][ T5980] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 159.741269][ T5980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.755190][ T5980] usb 6-1: config 0 descriptor?? [ 159.798606][ T8692] FAULT_INJECTION: forcing a failure. [ 159.798606][ T8692] name failslab, interval 1, probability 0, space 0, times 0 [ 159.801932][ T8692] CPU: 0 UID: 0 PID: 8692 Comm: syz.0.629 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 159.804681][ T8692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 159.807477][ T8692] Call Trace: [ 159.808372][ T8692] [ 159.809145][ T8692] dump_stack_lvl+0x16c/0x1f0 [ 159.810330][ T8692] should_fail_ex+0x497/0x5b0 [ 159.811491][ T8692] ? fs_reclaim_acquire+0xae/0x150 [ 159.812810][ T8692] should_failslab+0xc2/0x120 [ 159.814064][ T8692] __kmalloc_noprof+0xce/0x4f0 [ 159.815334][ T8692] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 159.816872][ T8692] ? tomoyo_realpath_from_path+0xbf/0x710 [ 159.818372][ T8692] tomoyo_realpath_from_path+0xbf/0x710 [ 159.819820][ T8692] ? tomoyo_path_number_perm+0x235/0x5b0 [ 159.821314][ T8692] tomoyo_path_number_perm+0x248/0x5b0 [ 159.822764][ T8692] ? tomoyo_path_number_perm+0x235/0x5b0 [ 159.824204][ T8692] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 159.825700][ T8692] ? __pfx_lock_release+0x10/0x10 [ 159.827044][ T8692] ? trace_lock_acquire+0x14e/0x1f0 [ 159.828433][ T8692] ? lock_acquire+0x2f/0xb0 [ 159.829632][ T8692] ? __fget_files+0x40/0x3a0 [ 159.830864][ T8692] ? __fget_files+0x206/0x3a0 [ 159.832129][ T8692] security_file_ioctl_compat+0x9b/0x240 [ 159.833637][ T8692] __do_compat_sys_ioctl+0x4e/0x2c0 [ 159.835024][ T8692] __do_fast_syscall_32+0x73/0x120 [ 159.836406][ T8692] do_fast_syscall_32+0x32/0x80 [ 159.837749][ T8692] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.839414][ T8692] RIP: 0023:0xf7f81579 [ 159.840505][ T8692] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 159.845535][ T8692] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 159.847745][ T8692] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400454d9 [ 159.849831][ T8692] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.851930][ T8692] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.854025][ T8692] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 159.856099][ T8692] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.858189][ T8692] [ 159.872535][ T8692] ERROR: Out of memory at tomoyo_realpath_from_path. [ 159.946412][ T8694] batman_adv: batadv0: Adding interface: dummy0 [ 159.948124][ T8694] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.956628][ T8694] batman_adv: batadv0: Interface activated: dummy0 [ 159.976438][ T8696] netlink: 'syz.2.631': attribute type 1 has an invalid length. [ 159.978631][ T8696] netlink: 224 bytes leftover after parsing attributes in process `syz.2.631'. [ 159.997417][ T8698] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 159.999825][ T8698] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 160.002559][ T8698] vhci_hcd vhci_hcd.0: Device attached [ 160.007376][ T8698] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 160.009117][ T8698] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 160.018457][ T8698] vhci_hcd vhci_hcd.0: Device attached [ 160.028272][ T8701] vhci_hcd: connection closed [ 160.037196][ T1169] vhci_hcd: stop threads [ 160.039578][ T1169] vhci_hcd: release socket [ 160.040763][ T1169] vhci_hcd: disconnect device [ 160.042164][ T8699] vhci_hcd: connection closed [ 160.042469][ T1169] vhci_hcd: stop threads [ 160.045019][ T1169] vhci_hcd: release socket [ 160.047669][ T1169] vhci_hcd: disconnect device [ 160.293330][ T8674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.297691][ T8674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.304529][ T8674] usb usb9: usbfs: process 8674 (syz.1.624) did not claim interface 0 before use [ 160.309251][ T5980] usb 6-1: USB disconnect, device number 10 [ 160.409699][ T8710] input: syz0 as /devices/virtual/input/input32 [ 160.412048][ T8710] input: failed to attach handler leds to device input32, error: -6 [ 160.662556][ T5979] libceph: connect (1)[c::]:6789 error -101 [ 160.664763][ T5979] libceph: mon0 (1)[c::]:6789 connect error [ 160.935728][ T6001] libceph: connect (1)[c::]:6789 error -101 [ 160.937484][ T6001] libceph: mon0 (1)[c::]:6789 connect error [ 160.989719][ T8710] ceph: No mds server is up or the cluster is laggy [ 161.169093][ T8728] exFAT-fs (loop2): mounting with "discard" option, but the device does not support discard [ 161.173775][ T8728] syz.2.639: attempt to access beyond end of device [ 161.173775][ T8728] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 161.177902][ T8728] exFAT-fs (loop2): unable to read boot sector [ 161.179677][ T8728] exFAT-fs (loop2): failed to read boot sector [ 161.181358][ T8728] exFAT-fs (loop2): failed to recognize exfat type [ 161.294813][ T8728] netlink: 'syz.2.639': attribute type 10 has an invalid length. [ 161.297108][ T8728] netlink: 40 bytes leftover after parsing attributes in process `syz.2.639'. [ 161.300754][ T8728] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 161.306753][ T8728] net_ratelimit: 30 callbacks suppressed [ 161.306801][ T8728] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.322057][ T8737] vivid-007: disconnect [ 161.489015][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.642'. [ 161.492905][ T8744] FAULT_INJECTION: forcing a failure. [ 161.492905][ T8744] name failslab, interval 1, probability 0, space 0, times 0 [ 161.496316][ T8744] CPU: 1 UID: 0 PID: 8744 Comm: syz.0.642 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 161.499069][ T8744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.501781][ T8744] Call Trace: [ 161.502682][ T8744] [ 161.503430][ T8744] dump_stack_lvl+0x16c/0x1f0 [ 161.504665][ T8744] should_fail_ex+0x497/0x5b0 [ 161.505854][ T8744] ? fs_reclaim_acquire+0xae/0x150 [ 161.507204][ T8744] should_failslab+0xc2/0x120 [ 161.508443][ T8744] __kmalloc_cache_noprof+0x68/0x420 [ 161.509797][ T8744] ? __pfx_bpf_trace_run2+0x10/0x10 [ 161.511223][ T8744] device_add+0xccf/0x1a70 [ 161.512508][ T8744] ? __pfx_device_add+0x10/0x10 [ 161.513778][ T8744] ? kfree+0x274/0x4b0 [ 161.514851][ T8744] device_create_groups_vargs+0x1f8/0x270 [ 161.516305][ T8744] device_create+0xe9/0x130 [ 161.517488][ T8744] ? __pfx_device_create+0x10/0x10 [ 161.518777][ T8744] ? rcu_is_watching+0x12/0xc0 [ 161.520042][ T8744] ? do_init_timer+0xc9/0x110 [ 161.521299][ T8744] ? ieee80211_roc_setup+0x136/0x270 [ 161.522699][ T8744] ? ieee80211_alloc_hw_nm+0x231/0x2260 [ 161.524122][ T8744] mac80211_hwsim_new_radio+0x3df/0x56c0 [ 161.525606][ T8744] ? _printk+0xc8/0x100 [ 161.526683][ T8744] ? __pfx__printk+0x10/0x10 [ 161.528014][ T8744] ? ___ratelimit+0x24c/0x570 [ 161.529354][ T8744] ? rcu_is_watching+0x12/0xc0 [ 161.530742][ T8744] ? do_trace_netlink_extack+0x17b/0x1f0 [ 161.532347][ T8744] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 161.533942][ T8744] hwsim_new_radio_nl+0xb42/0x12b0 [ 161.535265][ T8744] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 161.536666][ T8744] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 161.538571][ T8744] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 161.540500][ T8744] genl_family_rcv_msg_doit+0x202/0x2f0 [ 161.541955][ T8744] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 161.543532][ T8744] ? genl_get_cmd+0x195/0x580 [ 161.544682][ T8744] ? bpf_lsm_capable+0x9/0x10 [ 161.545848][ T8744] ? security_capable+0x7e/0x260 [ 161.547118][ T8744] ? ns_capable+0xd7/0x110 [ 161.548291][ T8744] genl_rcv_msg+0x565/0x800 [ 161.549489][ T8744] ? __pfx_genl_rcv_msg+0x10/0x10 [ 161.550838][ T8744] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 161.552298][ T8744] ? __pfx___lock_acquire+0x10/0x10 [ 161.553663][ T8744] netlink_rcv_skb+0x165/0x410 [ 161.554928][ T8744] ? __pfx_genl_rcv_msg+0x10/0x10 [ 161.556255][ T8744] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 161.557707][ T8744] ? down_read+0xc9/0x330 [ 161.558808][ T8744] ? __pfx_down_read+0x10/0x10 [ 161.560023][ T8744] ? netlink_deliver_tap+0x1ae/0xca0 [ 161.561365][ T8744] genl_rcv+0x28/0x40 [ 161.562464][ T8744] netlink_unicast+0x53c/0x7f0 [ 161.563721][ T8744] ? __pfx_netlink_unicast+0x10/0x10 [ 161.565096][ T8744] ? __phys_addr_symbol+0x30/0x80 [ 161.566378][ T8744] ? __check_object_size+0x488/0x710 [ 161.567760][ T8744] netlink_sendmsg+0x8b8/0xd70 [ 161.569010][ T8744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.570392][ T8744] ____sys_sendmsg+0x9ae/0xb40 [ 161.571676][ T8744] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.573091][ T8744] ? get_compat_msghdr+0x11b/0x170 [ 161.574446][ T8744] ___sys_sendmsg+0x135/0x1e0 [ 161.575684][ T8744] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.577097][ T8744] ? __pfx_lock_release+0x10/0x10 [ 161.578441][ T8744] ? trace_lock_acquire+0x14e/0x1f0 [ 161.579811][ T8744] ? __fget_files+0x206/0x3a0 [ 161.581039][ T8744] __sys_sendmsg+0x16e/0x220 [ 161.582243][ T8744] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.583577][ T8744] __do_fast_syscall_32+0x73/0x120 [ 161.584893][ T8744] do_fast_syscall_32+0x32/0x80 [ 161.586122][ T8744] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.587765][ T8744] RIP: 0023:0xf7f81579 [ 161.588823][ T8744] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 161.593799][ T8744] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 161.595954][ T8744] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000040 [ 161.598021][ T8744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 161.600022][ T8744] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.602040][ T8744] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 161.604022][ T8744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.606087][ T8744] [ 161.607069][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.071930][ T8729] vivid-007: reconnect [ 162.092154][ T8758] FAULT_INJECTION: forcing a failure. [ 162.092154][ T8758] name failslab, interval 1, probability 0, space 0, times 0 [ 162.095553][ T8758] CPU: 1 UID: 0 PID: 8758 Comm: syz.1.646 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 162.098305][ T8758] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 162.101069][ T8758] Call Trace: [ 162.102057][ T8758] [ 162.102844][ T8758] dump_stack_lvl+0x16c/0x1f0 [ 162.104078][ T8758] should_fail_ex+0x497/0x5b0 [ 162.105325][ T8758] ? fs_reclaim_acquire+0xae/0x150 [ 162.106662][ T8758] should_failslab+0xc2/0x120 [ 162.108049][ T8758] __kmalloc_noprof+0xce/0x4f0 [ 162.109323][ T8758] ? __pfx___mutex_trylock_common+0x10/0x10 [ 162.110851][ T8758] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 162.112757][ T8758] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 162.114776][ T8758] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 162.116206][ T8758] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 162.117780][ T8758] ? genl_get_cmd+0x195/0x580 [ 162.119005][ T8758] ? bpf_lsm_capable+0x9/0x10 [ 162.120222][ T8758] ? security_capable+0x7e/0x260 [ 162.121681][ T8758] genl_rcv_msg+0x565/0x800 [ 162.122995][ T8758] ? __pfx_genl_rcv_msg+0x10/0x10 [ 162.124298][ T8758] ? __pfx_nfc_genl_start_poll+0x10/0x10 [ 162.125749][ T8758] ? __pfx___lock_acquire+0x10/0x10 [ 162.127115][ T8758] netlink_rcv_skb+0x165/0x410 [ 162.128366][ T8758] ? __pfx_genl_rcv_msg+0x10/0x10 [ 162.129672][ T8758] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 162.130992][ T8758] ? down_read+0xc9/0x330 [ 162.132145][ T8758] ? __pfx_down_read+0x10/0x10 [ 162.133407][ T8758] ? netlink_deliver_tap+0x1ae/0xca0 [ 162.134781][ T8758] genl_rcv+0x28/0x40 [ 162.135844][ T8758] netlink_unicast+0x53c/0x7f0 [ 162.137120][ T8758] ? __pfx_netlink_unicast+0x10/0x10 [ 162.138512][ T8758] ? __phys_addr_symbol+0x30/0x80 [ 162.139796][ T8758] ? __check_object_size+0x488/0x710 [ 162.141079][ T8758] netlink_sendmsg+0x8b8/0xd70 [ 162.142418][ T8758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.143813][ T8758] ____sys_sendmsg+0x9ae/0xb40 [ 162.145192][ T8758] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.146511][ T8758] ? get_compat_msghdr+0x11b/0x170 [ 162.147877][ T8758] ___sys_sendmsg+0x135/0x1e0 [ 162.149116][ T8758] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.150662][ T8758] ? __pfx_lock_release+0x10/0x10 [ 162.152056][ T8758] ? trace_lock_acquire+0x14e/0x1f0 [ 162.153409][ T8758] ? __fget_files+0x206/0x3a0 [ 162.154632][ T8758] __sys_sendmsg+0x16e/0x220 [ 162.155830][ T8758] ? __pfx___sys_sendmsg+0x10/0x10 [ 162.157180][ T8758] __do_fast_syscall_32+0x73/0x120 [ 162.158501][ T8758] do_fast_syscall_32+0x32/0x80 [ 162.159776][ T8758] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.161432][ T8758] RIP: 0023:0xf7f48579 [ 162.162503][ T8758] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 162.167225][ T8758] RSP: 002b:00000000f507555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 162.169291][ T8758] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000440 [ 162.171204][ T8758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.173194][ T8758] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.175124][ T8758] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 162.177149][ T8758] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.179179][ T8758] [ 162.180122][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.287952][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 162.287963][ T39] audit: type=1326 audit(1734573143.696:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.4.649" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 162.294966][ T39] audit: type=1326 audit(1734573143.696:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.4.649" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 162.301938][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.650'. [ 162.302044][ T39] audit: type=1326 audit(1734573143.696:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.4.649" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 162.304557][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.650'. [ 162.312236][ T39] audit: type=1326 audit(1734573143.696:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.4.649" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 162.325456][ T39] audit: type=1326 audit(1734573143.696:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.4.649" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 162.331894][ T39] audit: type=1326 audit(1734573143.706:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.4.649" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 162.340546][ T39] audit: type=1326 audit(1734573143.706:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.4.649" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 162.347763][ T39] audit: type=1326 audit(1734573143.706:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.4.649" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 162.354917][ T39] audit: type=1326 audit(1734573143.706:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.4.649" exe="/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 162.362278][ T39] audit: type=1326 audit(1734573143.706:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.4.649" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 162.937342][ T8780] netlink: 168 bytes leftover after parsing attributes in process `syz.0.653'. [ 163.285138][ T8799] bridge0: port 3(netdevsim0) entered blocking state [ 163.288869][ T8799] bridge0: port 3(netdevsim0) entered disabled state [ 163.291481][ T8799] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 163.295666][ T8799] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 163.298754][ T8799] bridge0: port 3(netdevsim0) entered blocking state [ 163.301356][ T8799] bridge0: port 3(netdevsim0) entered forwarding state [ 163.309550][ T8802] fuse: Unknown parameter 'd' [ 163.384105][ T8807] fuse: Unknown parameter 'd' [ 164.272012][ T8827] 9pnet_virtio: no channels available for device syz [ 164.274204][ T8827] 9pnet_virtio: no channels available for device syz [ 164.289160][ T8828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.291405][ T8828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.535464][ T6640] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 164.611237][ T8835] input: syz0 as /devices/virtual/input/input33 [ 164.688827][ T8840] FAULT_INJECTION: forcing a failure. [ 164.688827][ T8840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.692263][ T8840] CPU: 1 UID: 0 PID: 8840 Comm: syz.1.671 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 164.694964][ T8840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 164.696873][ T6640] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 164.697633][ T8840] Call Trace: [ 164.699627][ T6640] usb 9-1: config 0 has no interface number 0 [ 164.700517][ T8840] [ 164.700524][ T8840] dump_stack_lvl+0x16c/0x1f0 [ 164.702118][ T6640] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 164.702897][ T8840] should_fail_ex+0x497/0x5b0 [ 164.704115][ T6640] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 164.706855][ T8840] _copy_from_user+0x2e/0xd0 [ 164.706875][ T8840] kstrtouint_from_user+0xd7/0x1c0 [ 164.706886][ T8840] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 164.706901][ T8840] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 164.706913][ T8840] proc_fail_nth_write+0x84/0x250 [ 164.708125][ T6640] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 164.711047][ T8840] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 164.712256][ T6640] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 164.713584][ T8840] ? ksys_write+0x12b/0x250 [ 164.715055][ T6640] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 164.716667][ T8840] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 164.716686][ T8840] vfs_write+0x24c/0x1150 [ 164.716697][ T8840] ? __fget_files+0x1fc/0x3a0 [ 164.716709][ T8840] ? __pfx___mutex_lock+0x10/0x10 [ 164.716724][ T8840] ? __pfx_vfs_write+0x10/0x10 [ 164.716738][ T8840] ? __fget_files+0x206/0x3a0 [ 164.716753][ T8840] ksys_write+0x12b/0x250 [ 164.716764][ T8840] ? __pfx_ksys_write+0x10/0x10 [ 164.716779][ T8840] __do_fast_syscall_32+0x73/0x120 [ 164.716792][ T8840] do_fast_syscall_32+0x32/0x80 [ 164.716804][ T8840] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 164.716819][ T8840] RIP: 0023:0xf7f48579 [ 164.716829][ T8840] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 164.716839][ T8840] RSP: 002b:00000000f5096590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 164.716850][ T8840] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f5096620 [ 164.716856][ T8840] RDX: 0000000000000001 RSI: 00000000f73d3ff4 RDI: 0000000000000000 [ 164.716863][ T8840] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 164.716869][ T8840] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 164.716875][ T8840] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 164.716887][ T8840] [ 164.722068][ T6640] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 164.722569][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.727375][ T6640] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.779691][ T6640] usb 9-1: config 0 descriptor?? [ 164.782311][ T8827] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 164.787833][ T6640] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 164.814318][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.817545][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.844812][ T8844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.985477][ T6032] usb 9-1: USB disconnect, device number 5 [ 164.999466][ T6032] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 165.815537][ T6032] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 166.055201][ T8878] input: syz0 as /devices/virtual/input/input34 [ 166.057025][ T8878] input: failed to attach handler leds to device input34, error: -6 [ 166.094933][ T5979] libceph: connect (1)[c::]:6789 error -101 [ 166.097190][ T5979] libceph: mon0 (1)[c::]:6789 connect error [ 166.228410][ T6032] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.230877][ T6032] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 166.233052][ T6032] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 166.235287][ T6032] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.238494][ T6032] usb 9-1: config 0 descriptor?? [ 166.241491][ T6032] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 166.243426][ T6032] dvb-usb: bulk message failed: -22 (3/0) [ 166.247861][ T6032] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 166.250372][ T6032] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 166.252433][ T6032] usb 9-1: media controller created [ 166.254141][ T6032] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.258561][ T6032] dvb-usb: bulk message failed: -22 (6/0) [ 166.260267][ T6032] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 166.263044][ T6032] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input35 [ 166.269041][ T6032] dvb-usb: schedule remote query interval to 150 msecs. [ 166.271036][ T6032] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 166.355800][ T5979] libceph: connect (1)[c::]:6789 error -101 [ 166.358059][ T5979] libceph: mon0 (1)[c::]:6789 connect error [ 166.425759][ T6032] dvb-usb: bulk message failed: -22 (1/0) [ 166.427286][ T6032] dvb-usb: error while querying for an remote control event. [ 166.549836][ T8884] FAULT_INJECTION: forcing a failure. [ 166.549836][ T8884] name failslab, interval 1, probability 0, space 0, times 0 [ 166.553583][ T8884] CPU: 1 UID: 0 PID: 8884 Comm: syz.4.677 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 166.556608][ T8884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 166.559870][ T8884] Call Trace: [ 166.560770][ T8884] [ 166.561556][ T8884] dump_stack_lvl+0x16c/0x1f0 [ 166.562760][ T8884] should_fail_ex+0x497/0x5b0 [ 166.563996][ T8884] ? fs_reclaim_acquire+0xae/0x150 [ 166.565335][ T8884] should_failslab+0xc2/0x120 [ 166.566563][ T8884] __kmalloc_noprof+0xce/0x4f0 [ 166.567868][ T8884] ? fsnotify_free_mark+0x9d/0x140 [ 166.569237][ T8884] ? inotify_handle_inode_event+0x1c7/0x600 [ 166.570808][ T8884] inotify_handle_inode_event+0x1c7/0x600 [ 166.572317][ T8884] inotify_ignored_and_remove_idr+0x28/0x70 [ 166.573880][ T8884] ? __pfx_inotify_freeing_mark+0x10/0x10 [ 166.575386][ T8884] fsnotify_free_mark+0xe9/0x140 [ 166.576736][ T8884] fsnotify_destroy_marks+0x256/0x3b0 [ 166.578165][ T8884] ? __pfx_fsnotify_destroy_marks+0x10/0x10 [ 166.579732][ T8884] ? do_raw_spin_lock+0x12d/0x2c0 [ 166.581085][ T8884] dentry_unlink_inode+0x3cb/0x480 [ 166.582440][ T8884] d_delete+0x20e/0x280 [ 166.583558][ T8884] vfs_rmdir+0x369/0x690 [ 166.584695][ T8884] do_rmdir+0x3a2/0x410 [ 166.585737][ T6032] dvb-usb: bulk message failed: -22 (1/0) [ 166.585797][ T8884] ? __pfx_do_rmdir+0x10/0x10 [ 166.587327][ T6032] dvb-usb: error while querying for an remote control event. [ 166.588568][ T8884] ? getname_flags.part.0+0x1c5/0x550 [ 166.592182][ T8884] __ia32_sys_rmdir+0xc4/0x110 [ 166.593570][ T8884] __do_fast_syscall_32+0x73/0x120 [ 166.594935][ T8884] do_fast_syscall_32+0x32/0x80 [ 166.596343][ T8884] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 166.598168][ T8884] RIP: 0023:0xf7f23579 [ 166.599407][ T8884] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 166.604556][ T8884] RSP: 002b:00000000f503455c EFLAGS: 00000296 ORIG_RAX: 0000000000000028 [ 166.606757][ T8884] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 0000000000000000 [ 166.608823][ T8884] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 166.610886][ T8884] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 166.612941][ T8884] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 166.614977][ T8884] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 166.617043][ T8884] [ 166.617958][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.641591][ T6640] usb 9-1: USB disconnect, device number 6 [ 166.662669][ T6640] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 166.766696][ T8878] ceph: No mds server is up or the cluster is laggy [ 166.856630][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.685'. [ 166.905575][ T8893] input: syz0 as /devices/virtual/input/input36 [ 166.907334][ T8893] input: failed to attach handler leds to device input36, error: -6 [ 167.420966][ T8910] input: syz0 as /devices/virtual/input/input37 [ 167.422766][ T8910] input: failed to attach handler leds to device input37, error: -6 [ 167.451231][ T5979] libceph: connect (1)[c::]:6789 error -101 [ 167.453286][ T5979] libceph: mon0 (1)[c::]:6789 connect error [ 167.613154][ T8893] ceph: No mds server is up or the cluster is laggy [ 167.680908][ T8916] FAULT_INJECTION: forcing a failure. [ 167.680908][ T8916] name failslab, interval 1, probability 0, space 0, times 0 [ 167.684994][ T8916] CPU: 0 UID: 0 PID: 8916 Comm: syz.0.689 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 167.688535][ T8916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 167.692055][ T8916] Call Trace: [ 167.693197][ T8916] [ 167.694205][ T8916] dump_stack_lvl+0x16c/0x1f0 [ 167.695796][ T8916] should_fail_ex+0x497/0x5b0 [ 167.697102][ T8916] ? fs_reclaim_acquire+0xae/0x150 [ 167.698442][ T8916] should_failslab+0xc2/0x120 [ 167.699688][ T8916] __kmalloc_noprof+0xce/0x4f0 [ 167.700973][ T8916] ? __pfx___mutex_trylock_common+0x10/0x10 [ 167.702511][ T8916] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 167.704435][ T8916] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 167.705728][ T5979] libceph: connect (1)[c::]:6789 error -101 [ 167.706263][ T8916] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 167.708033][ T5979] libceph: mon0 (1)[c::]:6789 connect error [ 167.709348][ T8916] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 167.709364][ T8916] ? genl_get_cmd+0x195/0x580 [ 167.713778][ T8916] ? bpf_lsm_capable+0x9/0x10 [ 167.715017][ T8916] ? security_capable+0x7e/0x260 [ 167.716335][ T8916] genl_rcv_msg+0x565/0x800 [ 167.717533][ T8916] ? __pfx_genl_rcv_msg+0x10/0x10 [ 167.718849][ T8916] ? __pfx_nfc_genl_start_poll+0x10/0x10 [ 167.720327][ T8916] ? __pfx___lock_acquire+0x10/0x10 [ 167.721689][ T8916] netlink_rcv_skb+0x165/0x410 [ 167.722959][ T8916] ? __pfx_genl_rcv_msg+0x10/0x10 [ 167.724289][ T8916] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 167.725675][ T8916] ? down_read+0xc9/0x330 [ 167.726827][ T8916] ? __pfx_down_read+0x10/0x10 [ 167.728085][ T8916] ? netlink_deliver_tap+0x1ae/0xca0 [ 167.729473][ T8916] genl_rcv+0x28/0x40 [ 167.730530][ T8916] netlink_unicast+0x53c/0x7f0 [ 167.731782][ T8916] ? __pfx_netlink_unicast+0x10/0x10 [ 167.733155][ T8916] ? __phys_addr_symbol+0x30/0x80 [ 167.734467][ T8916] ? __check_object_size+0x4a1/0x710 [ 167.735854][ T8916] netlink_sendmsg+0x8b8/0xd70 [ 167.737147][ T8916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.738526][ T8916] ____sys_sendmsg+0x9ae/0xb40 [ 167.739785][ T8916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.741172][ T8916] ? get_compat_msghdr+0x11b/0x170 [ 167.742525][ T8916] ___sys_sendmsg+0x135/0x1e0 [ 167.743775][ T8916] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.745148][ T8916] ? __pfx_lock_release+0x10/0x10 [ 167.746457][ T8916] ? trace_lock_acquire+0x14e/0x1f0 [ 167.747829][ T8916] ? __fget_files+0x206/0x3a0 [ 167.749074][ T8916] __sys_sendmsg+0x16e/0x220 [ 167.750286][ T8916] ? __pfx___sys_sendmsg+0x10/0x10 [ 167.751627][ T8916] __do_fast_syscall_32+0x73/0x120 [ 167.752976][ T8916] do_fast_syscall_32+0x32/0x80 [ 167.754251][ T8916] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 167.755895][ T8916] RIP: 0023:0xf7f81579 [ 167.756978][ T8916] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 167.761930][ T8916] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 167.764088][ T8916] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000440 [ 167.766124][ T8916] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 167.768172][ T8916] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 167.770220][ T8916] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 167.772277][ T8916] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 167.774305][ T8916] [ 167.806002][ T8918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.690'. [ 167.932129][ T8923] netlink: 72 bytes leftover after parsing attributes in process `syz.2.691'. [ 168.050654][ T8910] ceph: No mds server is up or the cluster is laggy [ 168.679861][ T8949] vlan0: entered promiscuous mode [ 168.694370][ T8949] team0: Port device vlan0 added [ 169.108231][ T8969] netlink: 'syz.1.706': attribute type 10 has an invalid length. [ 169.502869][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 169.804559][ T8986] loop7: detected capacity change from 0 to 16384 [ 170.079599][ T8993] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 170.081368][ T8993] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 170.083342][ T8993] vhci_hcd vhci_hcd.0: Device attached [ 170.259805][ T6640] vhci_hcd: vhci_device speed not set [ 170.315901][ T6640] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 170.403705][ T8999] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 170.406145][ T8999] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 170.409126][ T8999] vhci_hcd vhci_hcd.0: Device attached [ 170.416630][ T8999] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 170.418359][ T8999] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 170.420509][ T8999] vhci_hcd vhci_hcd.0: Device attached [ 170.423158][ T9002] vhci_hcd: connection closed [ 170.423222][ T9000] vhci_hcd: connection closed [ 170.424554][ T12] vhci_hcd: stop threads [ 170.428310][ T12] vhci_hcd: release socket [ 170.429983][ T12] vhci_hcd: disconnect device [ 170.432684][ T12] vhci_hcd: stop threads [ 170.434259][ T12] vhci_hcd: release socket [ 170.436015][ T12] vhci_hcd: disconnect device [ 170.606143][ T5980] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 170.768716][ T5980] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.774907][ T5980] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.779057][ T5980] usb 9-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 170.781697][ T5980] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.795048][ T5980] usb 9-1: config 0 descriptor?? [ 171.020213][ T8994] vhci_hcd: connection reset by peer [ 171.021856][ T12] vhci_hcd: stop threads [ 171.023013][ T12] vhci_hcd: release socket [ 171.025956][ T12] vhci_hcd: disconnect device [ 171.450401][ T5980] usbhid 9-1:0.0: can't add hid device: -71 [ 171.452569][ T5980] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 171.455615][ T5980] usb 9-1: USB disconnect, device number 7 [ 171.814597][ T9036] input: syz0 as /devices/virtual/input/input38 [ 171.816557][ T9036] input: failed to attach handler leds to device input38, error: -6 [ 171.912264][ T6379] libceph: connect (1)[c::]:6789 error -101 [ 171.914554][ T6379] libceph: mon0 (1)[c::]:6789 connect error [ 172.175641][ T6379] libceph: connect (1)[c::]:6789 error -101 [ 172.177589][ T6379] libceph: mon0 (1)[c::]:6789 connect error [ 172.297104][ T9048] Bluetooth: hci4: Frame reassembly failed (-84) [ 172.348223][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 172.454695][ T9036] ceph: No mds server is up or the cluster is laggy [ 172.725709][ T9064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.729'. [ 173.220818][ T9085] openvswitch: netlink: IP tunnel dst address not specified [ 173.266181][ T9085] xt_CT: No such helper "pptp" [ 173.564741][ T9092] input: syz0 as /devices/virtual/input/input39 [ 173.566903][ T9092] input: failed to attach handler leds to device input39, error: -6 [ 173.705807][ T9098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.738'. [ 173.743361][ T6379] libceph: connect (1)[c::]:6789 error -101 [ 173.745693][ T6379] libceph: mon0 (1)[c::]:6789 connect error [ 174.052428][ T6379] libceph: connect (1)[c::]:6789 error -101 [ 174.054147][ T6379] libceph: mon0 (1)[c::]:6789 connect error [ 174.075528][ T5945] Bluetooth: hci0: command 0x0c1a tx timeout [ 174.179770][ T9092] ceph: No mds server is up or the cluster is laggy [ 174.259025][ T9115] FAULT_INJECTION: forcing a failure. [ 174.259025][ T9115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.262460][ T9115] CPU: 3 UID: 0 PID: 9115 Comm: syz.1.743 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 174.265189][ T9115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 174.267755][ T9115] Call Trace: [ 174.268525][ T9115] [ 174.269206][ T9115] dump_stack_lvl+0x16c/0x1f0 [ 174.270280][ T9115] should_fail_ex+0x497/0x5b0 [ 174.271361][ T9115] _copy_to_user+0x32/0xd0 [ 174.272530][ T9115] simple_read_from_buffer+0xd0/0x160 [ 174.273932][ T9115] proc_fail_nth_read+0x198/0x270 [ 174.275249][ T9115] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.276695][ T9115] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.278133][ T9115] vfs_read+0x1df/0xbe0 [ 174.279221][ T9115] ? __fget_files+0x1fc/0x3a0 [ 174.280456][ T9115] ? __pfx___mutex_lock+0x10/0x10 [ 174.281775][ T9115] ? __pfx_vfs_read+0x10/0x10 [ 174.283033][ T9115] ? __fget_files+0x206/0x3a0 [ 174.284272][ T9115] ksys_read+0x12b/0x250 [ 174.285376][ T9115] ? __pfx_ksys_read+0x10/0x10 [ 174.286628][ T9115] __do_fast_syscall_32+0x73/0x120 [ 174.287961][ T9115] do_fast_syscall_32+0x32/0x80 [ 174.289233][ T9115] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.290870][ T9115] RIP: 0023:0xf7f48579 [ 174.291927][ T9115] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 174.296852][ T9115] RSP: 002b:00000000f5096590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 174.299006][ T9115] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5096620 [ 174.301148][ T9115] RDX: 000000000000000f RSI: 00000000f73d3ff4 RDI: 0000000000000000 [ 174.303324][ T9115] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 174.305565][ T9115] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 174.307636][ T9115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.309702][ T9115] [ 174.310650][ C3] vkms_vblank_simulate: vblank timer overrun [ 174.325515][ T5954] Bluetooth: hci4: command 0x1003 tx timeout [ 174.328024][ T5952] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 174.472194][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.746'. [ 174.477195][ T9121] tipc: Started in network mode [ 174.479457][ T9121] tipc: Node identity , cluster identity 4711 [ 174.634226][ T9130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.748'. [ 174.785624][ T6379] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 174.906743][ T9134] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 174.908500][ T9134] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 174.910770][ T9134] vhci_hcd vhci_hcd.0: Device attached [ 174.914026][ T9136] vhci_hcd: connection closed [ 174.914286][ T12] vhci_hcd: stop threads [ 174.920082][ T12] vhci_hcd: release socket [ 174.923562][ T12] vhci_hcd: disconnect device [ 174.956780][ T6379] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.959512][ T6379] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.962106][ T6379] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.965710][ T6379] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.967966][ T6379] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.970931][ T6379] usb 9-1: config 0 descriptor?? [ 175.400679][ T6379] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 175.402864][ T6379] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 175.407595][ T6379] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 175.426223][ T6640] vhci_hcd: vhci_device speed not set [ 175.639852][ T9146] input: syz0 as /devices/virtual/input/input42 [ 175.641586][ T9146] input: failed to attach handler leds to device input42, error: -6 [ 175.668049][ T6379] libceph: connect (1)[c::]:6789 error -101 [ 175.669927][ T6379] libceph: mon0 (1)[c::]:6789 connect error [ 175.721219][ T9151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.724449][ T9151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.926315][ T6379] libceph: connect (1)[c::]:6789 error -101 [ 175.928351][ T6379] libceph: mon0 (1)[c::]:6789 connect error [ 176.275494][ T9146] ceph: No mds server is up or the cluster is laggy [ 176.549118][ T9171] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20004 [ 176.550154][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'. [ 176.776978][ T9175] netlink: 28 bytes leftover after parsing attributes in process `syz.0.758'. [ 177.245843][ T9189] input: syz0 as /devices/virtual/input/input43 [ 177.247502][ T9189] input: failed to attach handler leds to device input43, error: -6 [ 177.434218][ T6640] usb 9-1: USB disconnect, device number 8 [ 177.445016][ T9197] misc userio: Can't change port type on an already running userio instance [ 177.456887][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.764'. [ 177.533573][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 177.629516][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.766'. [ 177.863995][ T9189] ceph: No mds server is up or the cluster is laggy [ 177.925758][ T9229] fuse: Unknown parameter 'ūd”' [ 178.135838][ T5952] ------------[ cut here ]------------ [ 178.137574][ T5952] WARNING: CPU: 1 PID: 5952 at net/bluetooth/hci_conn.c:567 hci_conn_timeout+0x11a/0x210 [ 178.140259][ T5952] Modules linked in: [ 178.141419][ T5952] CPU: 1 UID: 0 PID: 5952 Comm: kworker/u33:6 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 178.145468][ T5952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 178.148464][ T5952] Workqueue: hci1 hci_conn_timeout [ 178.149800][ T5952] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 178.151228][ T5952] Code: 00 e8 4a 75 7f f7 4c 89 f1 4c 89 e2 48 c7 c6 80 b8 92 8c 48 c7 c7 b0 86 18 90 e8 21 be ac fa e9 4d ff ff ff e8 27 75 7f f7 90 <0f> 0b 90 e8 1e 75 7f f7 48 8d bb 55 f7 ff ff 48 b8 00 00 00 00 00 [ 178.156366][ T5952] RSP: 0018:ffffc90003aafca0 EFLAGS: 00010293 [ 178.158036][ T5952] RAX: 0000000000000000 RBX: ffff888075efc8e8 RCX: ffffffff8a19d91f [ 178.160135][ T5952] RDX: ffff8880245aa440 RSI: ffffffff8a19d9c9 RDI: 0000000000000005 [ 178.162182][ T5952] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 178.164249][ T5952] R10: 00000000ffffffff R11: 0000000000000001 R12: ffff888075efc000 [ 178.166358][ T5952] R13: ffff88804414d000 R14: 0000000000000001 R15: ffffc90003aafd80 [ 178.168411][ T5952] FS: 0000000000000000(0000) GS:ffff88802b500000(0000) knlGS:0000000000000000 [ 178.170694][ T5952] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.172408][ T5952] CR2: 0000000020021000 CR3: 000000005f75c000 CR4: 0000000000352ef0 [ 178.174465][ T5952] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 178.176612][ T5952] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 178.178642][ T5952] Call Trace: [ 178.179502][ T5952] [ 178.180269][ T5952] ? __warn+0xea/0x3c0 [ 178.181332][ T5952] ? hci_conn_timeout+0x11a/0x210 [ 178.182649][ T5952] ? report_bug+0x3c0/0x580 [ 178.183808][ T5952] ? handle_bug+0x54/0xa0 [ 178.184928][ T5952] ? exc_invalid_op+0x17/0x50 [ 178.186200][ T5952] ? asm_exc_invalid_op+0x1a/0x20 [ 178.187504][ T5952] ? hci_conn_timeout+0x6f/0x210 [ 178.188799][ T5952] ? hci_conn_timeout+0x119/0x210 [ 178.190260][ T5952] ? hci_conn_timeout+0x11a/0x210 [ 178.191576][ T5952] process_one_work+0x958/0x1b30 [ 178.192866][ T5952] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 178.194311][ T5952] ? __pfx_process_one_work+0x10/0x10 [ 178.195751][ T5952] ? rcu_is_watching+0x12/0xc0 [ 178.197010][ T5952] ? assign_work+0x1a0/0x250 [ 178.198216][ T5952] worker_thread+0x6c8/0xf00 [ 178.199423][ T5952] ? __pfx_worker_thread+0x10/0x10 [ 178.200758][ T5952] kthread+0x2c1/0x3a0 [ 178.201820][ T5952] ? _raw_spin_unlock_irq+0x23/0x50 [ 178.203173][ T5952] ? __pfx_kthread+0x10/0x10 [ 178.204389][ T5952] ret_from_fork+0x45/0x80 [ 178.205663][ T5952] ? __pfx_kthread+0x10/0x10 [ 178.206954][ T5952] ret_from_fork_asm+0x1a/0x30 [ 178.208300][ T5952] [ 178.209124][ T5952] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 178.211006][ T5952] CPU: 1 UID: 0 PID: 5952 Comm: kworker/u33:6 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 178.213788][ T5952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 178.216542][ T5952] Workqueue: hci1 hci_conn_timeout [ 178.217887][ T5952] Call Trace: [ 178.218757][ T5952] [ 178.219526][ T5952] dump_stack_lvl+0x3d/0x1f0 [ 178.220743][ T5952] panic+0x71d/0x800 [ 178.221767][ T5952] ? __pfx_panic+0x10/0x10 [ 178.222949][ T5952] ? show_trace_log_lvl+0x29d/0x3d0 [ 178.224309][ T5952] ? check_panic_on_warn+0x1f/0xb0 [ 178.225674][ T5952] ? hci_conn_timeout+0x11a/0x210 [ 178.227117][ T5952] check_panic_on_warn+0xab/0xb0 [ 178.228448][ T5952] __warn+0xf6/0x3c0 [ 178.229477][ T5952] ? hci_conn_timeout+0x11a/0x210 [ 178.230797][ T5952] report_bug+0x3c0/0x580 [ 178.231921][ T5952] handle_bug+0x54/0xa0 [ 178.233014][ T5952] exc_invalid_op+0x17/0x50 [ 178.234195][ T5952] asm_exc_invalid_op+0x1a/0x20 [ 178.235484][ T5952] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 178.236955][ T5952] Code: 00 e8 4a 75 7f f7 4c 89 f1 4c 89 e2 48 c7 c6 80 b8 92 8c 48 c7 c7 b0 86 18 90 e8 21 be ac fa e9 4d ff ff ff e8 27 75 7f f7 90 <0f> 0b 90 e8 1e 75 7f f7 48 8d bb 55 f7 ff ff 48 b8 00 00 00 00 00 [ 178.241684][ T5952] RSP: 0018:ffffc90003aafca0 EFLAGS: 00010293 [ 178.243263][ T5952] RAX: 0000000000000000 RBX: ffff888075efc8e8 RCX: ffffffff8a19d91f [ 178.245304][ T5952] RDX: ffff8880245aa440 RSI: ffffffff8a19d9c9 RDI: 0000000000000005 [ 178.247349][ T5952] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 178.249382][ T5952] R10: 00000000ffffffff R11: 0000000000000001 R12: ffff888075efc000 [ 178.251409][ T5952] R13: ffff88804414d000 R14: 0000000000000001 R15: ffffc90003aafd80 [ 178.253457][ T5952] ? hci_conn_timeout+0x6f/0x210 [ 178.254745][ T5952] ? hci_conn_timeout+0x119/0x210 [ 178.256144][ T5952] process_one_work+0x958/0x1b30 [ 178.257455][ T5952] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 178.258901][ T5952] ? __pfx_process_one_work+0x10/0x10 [ 178.260290][ T5952] ? rcu_is_watching+0x12/0xc0 [ 178.261535][ T5952] ? assign_work+0x1a0/0x250 [ 178.262729][ T5952] worker_thread+0x6c8/0xf00 [ 178.263919][ T5952] ? __pfx_worker_thread+0x10/0x10 [ 178.265227][ T5952] kthread+0x2c1/0x3a0 [ 178.266291][ T5952] ? _raw_spin_unlock_irq+0x23/0x50 [ 178.267651][ T5952] ? __pfx_kthread+0x10/0x10 [ 178.268864][ T5952] ret_from_fork+0x45/0x80 [ 178.270023][ T5952] ? __pfx_kthread+0x10/0x10 [ 178.271227][ T5952] ret_from_fork_asm+0x1a/0x30 [ 178.272491][ T5952] [ 178.273880][ T5952] Kernel Offset: disabled [ 178.275061][ T5952] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:52:39 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffff88802b63ed00 RCX=0000000000000100 RDX=0000000000000001 RSI=0000000000000004 RDI=ffffffff8d82fcf8 RBP=dffffc0000000000 RSP=ffffc90000007cc8 R8 =ffffed1005687f89 R9 =ffffed10056c7da0 R10=ffff88802b63ed03 R11=0000000000000002 R12=0000000000000000 R13=0000000000007e85 R14=ffff88802b43fc40 R15=ffffed10056c7da0 RIP=ffffffff8b1c9cd5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020001000 CR3=000000005f75c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000006c RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851417b5 RDI=ffffffff9a6672c0 RBP=ffffffff9a667280 RSP=ffffc90003aaf608 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000006 R12=0000000000000000 R13=000000000000006c R14=ffffffff85141750 R15=0000000000000000 RIP=ffffffff851417df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020021000 CR3=000000005f75c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000003340c5 RBX=0000000000000002 RCX=ffffffff8b1a0819 RDX=0000000000000000 RSI=ffffffff8b4cd180 RDI=ffffffff8bb16d40 RBP=ffffed10039df000 RSP=ffffc9000048fe08 R8 =0000000000000001 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=0000000000000000 R12=0000000000000002 R13=ffff88801cef8000 R14=ffffffff901ce110 R15=0000000000000000 RIP=ffffffff8b1a1bff RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020002000 CR3=00000000674ec000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000002e705b RBX=0000000000000003 RCX=ffffffff8b1a0819 RDX=0000000000000000 RSI=ffffffff8b4cd180 RDI=ffffffff8bb16d40 RBP=ffffed10039df488 RSP=ffffc9000049fe08 R8 =0000000000000001 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801cefa440 R14=ffffffff901ce110 R15=0000000000000000 RIP=ffffffff8b1a1bff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002001e000 CR3=00000000674ec000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7483ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000