last executing test programs: 36.37048466s ago: executing program 1 (id=2145): r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8924, &(0x7f0000001300)={'nr0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x104) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r5, &(0x7f0000000300)='(', 0x1) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x5, 0x2, 0x1, 0x7b, 0x800006, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x10005, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x20003, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xceb, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x6, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x5, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f00000000c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) r9 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r9}}, 0x3c) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) 36.171000561s ago: executing program 1 (id=2146): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002100010000000000000000000200000000000000004df6e9b0a882000000080018c185e9e52106fb91537a3294549fd42ad92fd49eb987dddd3c4c6c8c4ae06bbac0ed9bb6c789053ab12f72f4ea12530ecddb67788bb6c29f7865d09f0e477ce2b956aaf5e29fdbb14c866752e3dc64bf0a7e5024cc410ba6ec71e683c2203ed2c486d025bc29e39aa830b28d8f29000000000000000000"], 0x24}}, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) (async) fcntl$setlease(r2, 0x400, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) r6 = socket$kcm(0x29, 0x2, 0x0) (async) r7 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) pwritev(r7, &(0x7f0000000040)=[{&(0x7f0000000480)="f6", 0x1}], 0x1, 0x4000001, 0x0) (async) sendfile(r6, r7, 0x0, 0x8000fb00) (async) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d89, 0x8, 0x0, 0xf0}, &(0x7f00000000c0), &(0x7f0000000040)) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0xffff, 0x100, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = fcntl$getown(r8, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x0, r9, 0x1, &(0x7f0000000000)) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r8, 0xffffffffffffffff, 0x2c, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40) 36.170569131s ago: executing program 1 (id=2147): r0 = syz_open_dev$vim2m(&(0x7f0000000440), 0x4, 0x2) memfd_create(&(0x7f0000001e00)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xefE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xd1\xa7@\xa1_B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7<\x7f\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xb0\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcd\x90\x95\xdd\x8a\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1d0x0}, &(0x7f00000003c0)=0xc) setresuid(0x0, r2, r2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) socket(0x1e, 0x4, 0x0) r4 = socket(0x2b, 0x6, 0x9) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) pidfd_getfd(r7, r7, 0x0) r9 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r9, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) r10 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$SG_GET_REQUEST_TABLE(r11, 0x2275, &(0x7f00000018c0)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) listen(r4, 0x0) 35.340508393s ago: executing program 1 (id=2150): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@dyn}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x150, 0x10, 0x713, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@loopback, 0xfe, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {0x0, 0x1}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}]}, 0x150}}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$netlink(0x10, 0x3, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f20000000000a01010000000000000000050000000900010073797a31000000002c0000000c0a0103000000000000100005000000040003800900010043c07bb600000000080004"], 0xd0}, 0x1, 0x0, 0x0, 0x40000000}, 0x4) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r11, 0x400454c9, 0x200000000000001) ioctl$TUNSETPERSIST(r11, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r11, 0x400454cb, 0x3) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xcc}, 0x1, 0xf000}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') 34.831025945s ago: executing program 1 (id=2156): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000080100001000078c32bfb0000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000208000a40000000000900020073797a32000000000900010073797a3000000000080005400000001e1c0011800b00100065787468647200000c000280080006400000001f140000001000010000000000000000000000000a"], 0xa0}}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000010c0)={{{@in6, @in6=@empty}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000001040)=0xe4) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x0, 0x2}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000640)={{0xa, 0x2, 0x81, 0x5, 'syz1\x00', 0x9}, 0x0, [0x380, 0xe8af, 0x1, 0xcc0, 0xe, 0x6, 0x80, 0xa6da, 0x2, 0x1, 0x9, 0x8, 0xb, 0xfffffff7, 0x8, 0x10, 0x5, 0x4, 0x40f, 0x80, 0x962, 0x2, 0x1, 0x400, 0x7fffffff, 0x9c, 0x80000001, 0x3, 0x60e3, 0xa12, 0x8, 0x10000, 0x7, 0x9, 0x7430, 0x2, 0x2, 0x609, 0x1, 0x3, 0x8, 0x5, 0x8001, 0x8, 0x9, 0x1, 0x1, 0x0, 0xffff1688, 0x2, 0x0, 0x4, 0x1000, 0xe93, 0x4, 0x7ff, 0x7, 0x6, 0x50a, 0x0, 0x6, 0x7ff, 0x1000, 0xffffffff, 0x4, 0x5, 0x7a, 0x2, 0x9, 0x2, 0x3, 0x7, 0xac, 0x7, 0x7, 0x4, 0x8000, 0x9, 0x4, 0x7, 0xd, 0x7, 0x7, 0x0, 0x0, 0x40, 0x2, 0x8000, 0xfff, 0x3, 0x3b9, 0x6, 0x4, 0x4660917f, 0x487d, 0x8000, 0x1, 0x5, 0x3, 0x0, 0x5, 0x4, 0xe, 0x1, 0x7, 0x9, 0xc, 0x4, 0x1, 0x1, 0x3ce, 0xa, 0x8, 0x9, 0x0, 0x6, 0xfffffff7, 0xffffbf90, 0x0, 0x7, 0x2, 0x0, 0x7, 0xa, 0x809, 0xc960, 0x73938332, 0x7763]}) r4 = io_uring_setup(0x2987, &(0x7f0000000240)={0x0, 0x40000000, 0x800, 0x4, 0x4}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r0, r4, 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c591", 0x5) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000880)=""/14, 0xe}, {&(0x7f0000000500)=""/4, 0x4}], 0x2}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000480)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)='jfs\x00', 0x2008215, 0x0) listen(r8, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix']) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r9, 0x84, 0x0, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) close_range(r4, 0xffffffffffffffff, 0x0) 19.839878874s ago: executing program 32 (id=2156): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000080100001000078c32bfb0000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000208000a40000000000900020073797a32000000000900010073797a3000000000080005400000001e1c0011800b00100065787468647200000c000280080006400000001f140000001000010000000000000000000000000a"], 0xa0}}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000010c0)={{{@in6, @in6=@empty}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000001040)=0xe4) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x0, 0x2}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000640)={{0xa, 0x2, 0x81, 0x5, 'syz1\x00', 0x9}, 0x0, [0x380, 0xe8af, 0x1, 0xcc0, 0xe, 0x6, 0x80, 0xa6da, 0x2, 0x1, 0x9, 0x8, 0xb, 0xfffffff7, 0x8, 0x10, 0x5, 0x4, 0x40f, 0x80, 0x962, 0x2, 0x1, 0x400, 0x7fffffff, 0x9c, 0x80000001, 0x3, 0x60e3, 0xa12, 0x8, 0x10000, 0x7, 0x9, 0x7430, 0x2, 0x2, 0x609, 0x1, 0x3, 0x8, 0x5, 0x8001, 0x8, 0x9, 0x1, 0x1, 0x0, 0xffff1688, 0x2, 0x0, 0x4, 0x1000, 0xe93, 0x4, 0x7ff, 0x7, 0x6, 0x50a, 0x0, 0x6, 0x7ff, 0x1000, 0xffffffff, 0x4, 0x5, 0x7a, 0x2, 0x9, 0x2, 0x3, 0x7, 0xac, 0x7, 0x7, 0x4, 0x8000, 0x9, 0x4, 0x7, 0xd, 0x7, 0x7, 0x0, 0x0, 0x40, 0x2, 0x8000, 0xfff, 0x3, 0x3b9, 0x6, 0x4, 0x4660917f, 0x487d, 0x8000, 0x1, 0x5, 0x3, 0x0, 0x5, 0x4, 0xe, 0x1, 0x7, 0x9, 0xc, 0x4, 0x1, 0x1, 0x3ce, 0xa, 0x8, 0x9, 0x0, 0x6, 0xfffffff7, 0xffffbf90, 0x0, 0x7, 0x2, 0x0, 0x7, 0xa, 0x809, 0xc960, 0x73938332, 0x7763]}) r4 = io_uring_setup(0x2987, &(0x7f0000000240)={0x0, 0x40000000, 0x800, 0x4, 0x4}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r0, r4, 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c591", 0x5) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000880)=""/14, 0xe}, {&(0x7f0000000500)=""/4, 0x4}], 0x2}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000480)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)='jfs\x00', 0x2008215, 0x0) listen(r8, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix']) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r9, 0x84, 0x0, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) close_range(r4, 0xffffffffffffffff, 0x0) 8.841196308s ago: executing program 4 (id=2336): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x13, r4, 0x1000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.60682507s ago: executing program 4 (id=2337): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaa2c7278b3e2900040000000000000000994b54b2121d7d23905466bbd90902907800000000e00000011102907800000000b3d234c074d13cb93c4821b9d864b4390a832ad4d94f"], 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000180)=0x810001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x0, [0x2, 0x0, 0x0, 0x7ff, 0x1951, 0x51d8, 0x7ff, 0x60f4, 0x100, 0x7, 0x8, 0x4, 0x1006, 0x8, 0xfffa, 0x0, 0x1, 0x9, 0x4, 0x71, 0x6, 0x1, 0x7, 0x7fff, 0xfffa, 0x5, 0x5, 0x8000, 0x40, 0xfd7d, 0x80, 0x3b, 0x401, 0xe, 0x7, 0xa, 0xfb, 0x5, 0x7, 0x0, 0x1, 0x9, 0x6, 0x7, 0x10, 0x0, 0x2, 0x5], 0x80000000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) syz_usbip_server_init(0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) userfaultfd(0x80801) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x20020680) syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 7.013128489s ago: executing program 4 (id=2347): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0xfffffffffffffff8, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ae1f69d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00', 0x20, 0x1000, 0x4a}, 0x2c) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{}, 0x0, 0x0, @inherit={0x50, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000d527000000000000000000000000000000000000000000feffffffffffffff00"/80]}, @devid}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002b80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010100ff0000000000002b00000008000300", @ANYRES32=r6, @ANYBLOB="0a003400020202020202000008002700010000000800260099090000"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r8 = syz_io_uring_setup(0x3b, &(0x7f00000004c0)={0x0, 0x0, 0x10100, 0x1, 0x3c5}, &(0x7f0000000000), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_NAPI(r8, 0x1b, &(0x7f0000000180)={0x4, 0x81}, 0x1) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r9, &(0x7f0000000340), 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r12 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r12, 0x10d, 0x2, &(0x7f0000010140), &(0x7f00000001c0)=0x4) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f00000000c0)={0x140002012}) 6.39107024s ago: executing program 4 (id=2354): sched_setattr(0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 5.56080933s ago: executing program 4 (id=2359): socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x8, 0xb, [{}, {}, {}, {}, {0x0, 0x1fb}], 0x0, 0x0, 0x0, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 64) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$kcm(0x29, 0x7, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) r2 = syz_usbip_server_init(0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x200000000000008d, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64) unshare(0x20020680) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40440, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) unshare(0x22020600) (async) unshare(0x2a020480) (async) read$FUSE(0xffffffffffffffff, &(0x7f000000c400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x42080040, 0x400, 0x0, 0x0, 0x9}}, 0x50) (async) syz_fuse_handle_req(r4, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x0, 0x0, {0x3, 0x40000001, 0x0, 0x800000000000, 0xffff, 0x0, 0x101, 0x0, 0x0, 0x8001, 0x3, r7, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r5, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x28, {0x86, 0x1, 0x1}, 0x0, r7, r8, 0x1, 0x7, 0xffffffffffffffff, 0xd, 0xb, 0x80000000, 0x8001, 0x13, 0x2, 0x1, 0xb, 0x6f72, 0x5, 0x4, 0xb}}, 0xa0) 4.680889422s ago: executing program 4 (id=2362): bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$rtc(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140640101000c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="ebff00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="48000000040000000000000000a9528faa4ee68db8a3114838c686be00000000", @ANYRES32=r5, @ANYRES16=r0], 0x48}, 0x1, 0x2, 0x0, 0x44965}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0xfffffffd, 0x34324152, 0x0, 0x4, [{}, {0x10}, {}, {0x0, 0x3}, {}, {}, {0x0, 0x800000}], 0x0, 0xff, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000680), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) eventfd(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xb, 0x1, 0x200, &(0x7f0000000cc0)="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"}) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0xfffffc6c) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 2.350937646s ago: executing program 3 (id=2373): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="09800000", @ANYRES16=r1, @ANYBLOB="000400000000000000000d0000000600080000000000050019000000000006000a000000000005001800000000000500070013000000050007000000000005001a000000000005001b00fe000000"], 0x54}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x1ff, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000300)={0x105102, 0x0, 0x21}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000021000383a00fe8000000000000000000000000000bbff020000000000000000000000000001010090780000282b5c6b335a88708a592174a957000060e6863400002f00fc010000000000000000000000000000fe800000000000000000"], 0x0) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) timer_delete(0x0) utimensat(r6, &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000280)={{0x0, 0x2710}, {0x77359400}}, 0x0) r7 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x129002) r8 = dup(r7) r9 = socket$inet_udp(0x2, 0x2, 0x0) connect(r9, &(0x7f00000000c0)=@ll={0x11, 0xd, 0x0, 0x1, 0xd, 0x6, @broadcast}, 0x80) bind$inet(r9, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000400)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 2.131355958s ago: executing program 3 (id=2374): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) fsopen(&(0x7f00000003c0)='hfsplus\x00', 0x1) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x3500, 0x4) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xf0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x20, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0c4}, 0x0) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 1.320920828s ago: executing program 0 (id=2379): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x2, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400001e1400041a000000000000eeff021f0000", @ANYRES32=r4, @ANYBLOB="080002000a0101001400030070696d72656730000000000000000000"], 0x34}}, 0x0) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1.260624904s ago: executing program 0 (id=2380): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRESDEC, @ANYRES64, @ANYRES64, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0xfffffffe, 0x10500) r2 = dup2(r1, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_dev$usbfs(0x0, 0xff, 0x4000) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x4, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x14b1, &(0x7f0000000380)={0x0, 0x1ffffe, 0x2, 0x0, 0x2d2, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) r10 = syz_io_uring_setup(0x16c2, &(0x7f0000000400)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000180)) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r10, 0x10, &(0x7f0000001540)={0x9, 0x0, 0x0, 0x0}, 0x20) syz_genetlink_get_family_id$devlink(0x0, r6) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fc=', @ANYRES64=0x0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) read$FUSE(0xffffffffffffffff, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r12, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x7, 0x0, 0xd, 0x0, {0x0, 0xfffffffffffffff7, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r13}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.191723416s ago: executing program 3 (id=2382): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x3c, r1, 0x1, 0xf00, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x3c}}, 0x0) 1.191485547s ago: executing program 3 (id=2383): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x6, [{}, {0x6, 0x6}, {0x0, 0x80000}, {0x1}, {}, {0xf747, 0x6}, {}, {0x4}], 0x0, 0x0, 0x8, 0x0, 0x2}}) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') r2 = dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRESHEX=r2, @ANYRESHEX=r0]) read$midi(r1, &(0x7f0000000000)=""/18, 0x12) socket(0x10, 0x6, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0xffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) r4 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r4, 0x0, 0x0) mq_open(&(0x7f00000006c0)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1cQ\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8x\xa2\xe46\"\xbc\xbe\x10\xe5xI:\x11wh\xebM\xa8H3\xa4^\xd2\xcc:\xaf\xb8\xf0Dkh/\xc5\x83o)\x0etyy\x818\xd6z\xdc4\xb45C\x164\xbf \xea\f\x049Z\xa5&F\xf3^@\xae0\xe4q@\x8c|IJ\x89L\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7079, 0x1, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) pipe(0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 1.020953652s ago: executing program 2 (id=2384): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'wlan1\x00', {0x2, 0x0, @private=0xa010102}}) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) (async, rerun: 64) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x5, @mcast2, 0xf}}, 0x3, 0xfff1, 0x6, 0x0, 0x5a, 0x3, 0x8}, 0x0) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 970.231839ms ago: executing program 2 (id=2385): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x408c800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a0f0000}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r0, r4, 0x0, 0x7ffff000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_SDP={0xc, 0x13, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [{0x4}]}]}, @NFC_ATTR_LLC_SDP={0x2c, 0x13, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, '#'}]}, {0x1c, 0x0, 0x0, 0x1, [{0x10, 0x1, '/dev/uinput\x00'}, {0x7, 0x1, '%-%'}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r7 = dup(r6) ioctl$UI_DEV_CREATE(r7, 0x5501) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="2000000004000000410000000000000001"], 0x48) write$uinput_user_dev(r7, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0xfffffff9, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0xa3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x4, 0x401, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x6) 765.935257ms ago: executing program 3 (id=2386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000a00)={&(0x7f0000000880)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10ab755aa1226bf3977ea77756591c0f1ceb8100"], 0x10}, 0x10) syz_open_dev$char_usb(0xc, 0xb4, 0x2) r2 = inotify_init1(0x800) read(r2, 0x0, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000", @ANYRES16=r4, @ANYBLOB="010002000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100001000bd003e2f090000000900020009000500c20005000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES16=r6, @ANYRES16=r7, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES8=r2, @ANYBLOB="04005b001b00"], 0x28}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x6, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x44) r11 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r11, 0xc1105511, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r12, @ANYBLOB="05005b"], 0x24}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r17 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r17, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000014000000000000000000000005000200000000000a000000000000000000000000000000000000000000000000040000000000000800120000000200000000000200000006000000000000008009000000000000000000000000000000000000180000006401010000000000000000000000000005000600008000000a"], 0xa0}}, 0x400c0) r18 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r18, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="2400f478", @ANYRES16=r15, @ANYBLOB="0100fdffffff000000003a00000008000300", @ANYRES32=r16, @ANYBLOB="05005b00dd000000"], 0x24}}, 0x0) 640.427802ms ago: executing program 3 (id=2387): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006840)={0x2020}, 0x2020) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, 0x0, &(0x7f0000000200)) syz_usb_connect(0x3, 0x777, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0x98, 0xf6, 0xdc, 0x40, 0xb05, 0x179d, 0x56ec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x765, 0x2, 0x7, 0x8, 0xc0, 0x4c, [{{0x9, 0x4, 0x47, 0x6f, 0xc, 0xeb, 0x28, 0x5e, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0x200, 0xb0}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x1, 0x5, [0x9, 0x1, 0x3, 0x8, 0x0], 0xb}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x305, 0x4, 0x4, 0x4}, @feature_unit={0x9, 0x24, 0x6, 0x4, 0x1, 0x1, [0x4], 0x7f}]}], [{{0x9, 0x5, 0x6, 0x10, 0x400, 0x9, 0xe7, 0x4}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x4, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x9}, @generic={0x32, 0x23, "356241209bff1872ad176141120013ed07a41c1155196a27237a9b2873ad82bca4b8e4f38d5bba54152534dcc7c1bf71"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x0, 0x7, 0x30, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0xc1, 0x5, 0x40}]}}, {{0x9, 0x5, 0x1, 0x2, 0x40, 0x2, 0x7, 0x21}}, {{0x9, 0x5, 0xd, 0x8, 0x200, 0xbb, 0x6, 0x4, [@generic={0xc3, 0x21, "d7b36050e03959ea0e49e3a40aa1beb7d94b37aae6cd6b6ad683dc5b26a157a66ec1b022860383945f74b63c83fa07ebf3e928b77b42803966c608448538f7bcef4671bdfe57ab9ac56428bb3035e669e3af347951f1c7a5de98fcc0560f4450aecab95e4b47e16149d57c0b4b025334ea6c25705fab92d31689dd8757ca5102041190210056c030f265580f43cb5a4a3cceddbe9837807918c1cc74998abafb30027bb001c2a3534f77c9253b6a34fcebda12802b937ea5b27dabe11acc315ee1"}, @generic={0x47, 0x21, "04272732c1b1587649efab0222235c11d17b8733af56610ecef1ace9addd2e58695809ddd65d4e27f4c0d1d8d9657eba0c89a91de64a842a61c140cbbeb44d2329247f8fa0"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x20, 0x7f, 0x1, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x71, 0x5}]}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x5, 0x6, 0xfd, [@generic={0xb5, 0xf, "1286153127707fc8241baec64746d9ea8c0807fd3f118b91332d93821f1cee27c6c15954a09a6554a678ab43e4cdf753301fd1994a6d80bddddecab2f5e11eaa9da424af445ff8075cbdb396248911110eee48ed52f0b2b3b198912c8ea0461609421a5f7ff151310619a7588932a085b215c7494e7581978247fc38c34b7540a54e8ac83265f3972f1efe7ca636ab17cd9a0a18dba041c7a3aaf02de55daf20a42f82563c1316483c461092b433b0ab8d36f1"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x1, 0x7, 0x0, [@generic={0x80, 0xf, "2ad3858cb0cd30138b2b4033b128fd1ce622294c4fc0257f1d936c06840d7835dc009319845b4e1da8359a6636b396e749942458af58c7679a9140988a98c687e53604a815b6b23b3001a1074a8736a5d793d6b8658b3e0f635fe5c41905ef66ff8d0fd6ae91acc77c2bcc8111983e28067d7d33ee0e02a3acd808e9eb06"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x6, 0xfb, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x26, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x7, 0xb, 0x53, [@generic={0x67, 0x11, "14a68e8f1f8a5e695606dd61522366f6c898867cb559aeebc3bce76ca79cea2fd8be142fb47ca273fa525a754d6b0cf1667521460aa1b8eda57098889fe64e686666642076826c674e0cd06f530522a08c8d16a8e3ee632945b88af9118c4bd09a0d890945"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x3, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4e, 0x6}, @generic={0x9c, 0x11, "5f1d1b13769056598fc26e064ca3f9813f886bd9ec4bfbadbdce8b82ff1dba7798915e3976f5c6fd22ec8dc9cf9918319e15e497b64223142cd6cdc898539eeb951556558d138a397a6f01adbc8ba21fabe0e580787041cf853aea04c2d1dcd80f32f99d76ace71e5617c691f48bb030b51dd9a78a2725116686962da17c1d07a1ae2e292e8b1dabd4582b91f967fe3942a6030b7800dbd25e6c"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x20, 0x0, 0x4, 0xc6}}]}}, {{0x9, 0x4, 0xac, 0x1, 0x6, 0xed, 0x16, 0x4b, 0xf8, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "d2e9bd9f550b"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x8f0, 0x83}, [@ncm={0x6, 0x24, 0x1a, 0x6, 0x10}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xfa}, @mdlm_detail={0xbf, 0x24, 0x13, 0x6, "eab6e19a5cc65a02a57920427da59b898a0fa27fc4dfd1662359c991627d9f3cb1974ea07582d5d3d17d3a904cc5e5b3afad23bfbcc0a0481be5d06b452ca6d4811b67e3c2889de13a76cbbcb1c2248e45baa6eaf2007dd8e91d199774a815e2a70d890fcd5629693b1a6956f509f57b01659c0dc175322c393dcb20ef6e0eaeb2dc4aab0c49da165d8ba4230b259632702fc19996ed8490d48e5b1e27ce92b49b73bde491c9daf05a7435cc57c099a62eec3f74b228f0aa9bd918"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7a}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x3, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x1af, 0xc2, 0x24, 0x4, 0x9e}]}, @generic={0x3, 0xb, "a1"}], [{{0x9, 0x5, 0x7, 0x3, 0x10, 0xd, 0x9, 0xff, [@generic={0xd2, 0x31, "47495af961d10b1ab2f44a1f9c02cdb42d038bc4f09492f7391c18604f41c26fb63302acf91fa7f2e6a0be4b636b1c3752eb40a641e1837ed5ca7915f704e9026f27a80a60981bdf30d5a208fa01d61ebedb032405086a5e3646c44a170a4730c62ad07717f1a732db6673be7ad9512dfb00ddc4ae38ea6accb020f2b7ec69c17c8776b77fd577679ac38f7741c87b94304b621a81bde8af73c87418537411f6d0628898f9a14f4b19bf4a46009d922b5b54c2cfaf6e8b8d1e5a23d6017f9cec872d88c37fdeb81696e01c1167c42582"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x3, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xcee}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x3cd}]}}, {{0x9, 0x5, 0xb, 0x8, 0x200, 0x2, 0xfa, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x29, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x8}]}}, {{0x9, 0x5, 0x4, 0xe, 0x400, 0x1d, 0x10, 0x6}}, {{0x9, 0x5, 0x1, 0x1, 0x200, 0x8c, 0x7, 0x1}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x7f, 0x9, 0x1, [@generic={0xe0, 0x9, "b7eb80d7694340bd1a91232714e1815366e6db766576ed4b91d7258f2ee7a164b9d165bd5924c0ce255f8a63688aaa07378c95dbd6152b3c76ebed8afa8ff636392d9f8b52efae0eb17c19008c3e21444003885e9ae42b7d82fa3e3cd29014f87616bfdbc5d7b550da8bad9ff2d47f25f214f468bb6cdd2bb8e26dea777cf52ddf0f0017dd7e224e3b28c49e0acce9f1bac0bb7e9b1ed529a019d3642448ff34774083537c2df497b335d9b0c13af2a4a2c8f8cbc2b115b7246555b51d823b0a1061f522b286737c621038fb140e7fd5eacb8b2aa7450664ff1c60299f3b"}]}}]}}]}}]}}, &(0x7f0000001480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x0, 0x2, 0xa7, 0x40, 0x2}, 0x35, &(0x7f0000000280)={0x5, 0xf, 0x35, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "a55a3ed779d39bdc5699a7dbf7d247c8"}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x5, 0xf000, 0x80, [0x3f00, 0x7fbf00, 0xff30, 0x3f00]}]}, 0x4, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2801}}, {0x4a, &(0x7f0000000300)=@string={0x4a, 0x3, "53359ebb47bd02d98a1c6525432e48ee8ad457a810e9340b134811525727deb7dde304de762b4711e0027745d4526de972120ca8ca794ba47247c222b866bd0ee8c3c368ceea8053"}}, {0xc9, &(0x7f0000001300)=@string={0xc9, 0x3, "41d449d0c57780b4da07f5b4e64eb7c820869e41f62beb0760ca34e569109ae52c3dc3b538a6740cf58ba46c088c107363bc59daa3e51b490003116ac609206f8a08385e68eb5dc89e5b84eedee59914e6d3f721ad14c33a7c9bf56f706002b81e98b2d868d11748afba5109406ecce8bb293da07313efaf5df84c006e0daa473c50bcc0131e8a06b745d3eae6086e790d2ccc3f021b2f83d7549f7aa70e43a76663f41ed6bd65a17b911631ab883c420b28d66d5ba42f463a72047d636b22a569bd7c9a118fc2"}}, {0x75, &(0x7f0000001400)=@string={0x75, 0x3, "ed84f0d04b66d58365ab6cd44d5f1ff89e43a1498d600c566936f48d84dcc42ae08fb66718927071d0acf0d448fb46e3ae195337b1ddd3cec3899b1e1ec40c01efc61a019f33e93d3980e35ee092ea639f5ecbacf500969e59d3a90e559bf2f98474dc84d7e7fd7f34d3c44a3696a477d02dd5"}}]}) socket(0x2b, 0x5, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r2, 0x0, 0x1ff) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, r4, 0x2e, 0x0, 0x0, @void, @value}, 0x20) sendfile(r3, r3, 0x0, 0x9) 602.125946ms ago: executing program 0 (id=2388): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) sync() r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002380)=@newqdisc={0x40, 0x24, 0xf3b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x8003, @TCA_ETF_PARMS={0x10}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0xc000) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) (async) setpgid(0x0, r3) lstat(&(0x7f0000000100)='./file2\x00', 0x0) (async) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) renameat2(r4, &(0x7f00000000c0)='./cgroup\x00', r4, &(0x7f0000000100)='./cgroup\x00', 0x1) 350.15527ms ago: executing program 2 (id=2389): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000e00000/0x1000)=nil) (fail_nth: 8) 180.970133ms ago: executing program 2 (id=2390): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x2, 0x13, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_lifetime={0x4, 0x3, 0x7ff, 0x4, 0xdee8, 0x1}]}, 0x98}, 0x1, 0x7}, 0x0) (fail_nth: 8) 80.548876ms ago: executing program 0 (id=2391): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r0, 0x2, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) (rerun: 64) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, 0x0, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) openat$drirender128(0xffffff9c, 0x0, 0x2000, 0x0) (async) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r7}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) (async) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"69890100660000000022000000000900", 0x0, 0x0, {0x4, 0x6}, {0x7, 0xc00000}, 0x5, [0x3, 0xa, 0x9, 0x9, 0x10001, 0x10000400, 0x8, 0x2, 0x4000000000008, 0x9, 0x10002, 0x800007a, 0xe4ef, 0x8de, 0x7]}) 80.363369ms ago: executing program 2 (id=2392): r0 = io_uring_setup(0x9, &(0x7f00000002c0)={0x0, 0x164e, 0x0, 0xffffffff}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0300140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000540)=ANY=[@ANYBLOB="e10931d8640a00000000000086dd600141e6f168ea4351c05ca3357a4f568419e700009c8c0020010000000000000000000000000000fe8000000000000000000000000000aa00000000009c90790100000000000000f2b8752df74fc125584876bb41cd7046d187bffa81bc105a233b8708a93caacfc41ccd6a271cad2acf982b788134d8ec9afb51254bb0650e7c32989cf320340c24af8c0a200000000000000000000000b51c9c0509370043ae34cc9c428084a079e30b80ad95e8f3dac626693da520730d36dc9b00ee5c3da9beeba5"], 0x0) socket$inet6(0xa, 0x1, 0x2) 80.197237ms ago: executing program 0 (id=2393): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) (fail_nth: 7) 439.987µs ago: executing program 2 (id=2394): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000000)=0x2) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006840)={0x2020}, 0x2020) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, 0x0, &(0x7f0000000200)=0x0) syz_usb_connect(0x3, 0x777, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0x98, 0xf6, 0xdc, 0x40, 0xb05, 0x179d, 0x56ec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x765, 0x2, 0x7, 0x8, 0xc0, 0x4c, [{{0x9, 0x4, 0x47, 0x6f, 0xc, 0xeb, 0x28, 0x5e, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0x200, 0xb0}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x1, 0x5, [0x9, 0x1, 0x3, 0x8, 0x0], 0xb}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x305, 0x4, 0x4, 0x4}, @feature_unit={0x9, 0x24, 0x6, 0x4, 0x1, 0x1, [0x4], 0x7f}]}], [{{0x9, 0x5, 0x6, 0x10, 0x400, 0x9, 0xe7, 0x4}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x4, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x9}, @generic={0x32, 0x23, "356241209bff1872ad176141120013ed07a41c1155196a27237a9b2873ad82bca4b8e4f38d5bba54152534dcc7c1bf71"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x0, 0x7, 0x30, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0xc1, 0x5, 0x40}]}}, {{0x9, 0x5, 0x1, 0x2, 0x40, 0x2, 0x7, 0x21}}, {{0x9, 0x5, 0xd, 0x8, 0x200, 0xbb, 0x6, 0x4, [@generic={0xc3, 0x21, "d7b36050e03959ea0e49e3a40aa1beb7d94b37aae6cd6b6ad683dc5b26a157a66ec1b022860383945f74b63c83fa07ebf3e928b77b42803966c608448538f7bcef4671bdfe57ab9ac56428bb3035e669e3af347951f1c7a5de98fcc0560f4450aecab95e4b47e16149d57c0b4b025334ea6c25705fab92d31689dd8757ca5102041190210056c030f265580f43cb5a4a3cceddbe9837807918c1cc74998abafb30027bb001c2a3534f77c9253b6a34fcebda12802b937ea5b27dabe11acc315ee1"}, @generic={0x47, 0x21, "04272732c1b1587649efab0222235c11d17b8733af56610ecef1ace9addd2e58695809ddd65d4e27f4c0d1d8d9657eba0c89a91de64a842a61c140cbbeb44d2329247f8fa0"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x20, 0x7f, 0x1, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x71, 0x5}]}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x5, 0x6, 0xfd, [@generic={0xb5, 0xf, "1286153127707fc8241baec64746d9ea8c0807fd3f118b91332d93821f1cee27c6c15954a09a6554a678ab43e4cdf753301fd1994a6d80bddddecab2f5e11eaa9da424af445ff8075cbdb396248911110eee48ed52f0b2b3b198912c8ea0461609421a5f7ff151310619a7588932a085b215c7494e7581978247fc38c34b7540a54e8ac83265f3972f1efe7ca636ab17cd9a0a18dba041c7a3aaf02de55daf20a42f82563c1316483c461092b433b0ab8d36f1"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x1, 0x7, 0x0, [@generic={0x80, 0xf, "2ad3858cb0cd30138b2b4033b128fd1ce622294c4fc0257f1d936c06840d7835dc009319845b4e1da8359a6636b396e749942458af58c7679a9140988a98c687e53604a815b6b23b3001a1074a8736a5d793d6b8658b3e0f635fe5c41905ef66ff8d0fd6ae91acc77c2bcc8111983e28067d7d33ee0e02a3acd808e9eb06"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x6, 0xfb, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x26, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x7, 0xb, 0x53, [@generic={0x67, 0x11, "14a68e8f1f8a5e695606dd61522366f6c898867cb559aeebc3bce76ca79cea2fd8be142fb47ca273fa525a754d6b0cf1667521460aa1b8eda57098889fe64e686666642076826c674e0cd06f530522a08c8d16a8e3ee632945b88af9118c4bd09a0d890945"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x3, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4e, 0x6}, @generic={0x9c, 0x11, "5f1d1b13769056598fc26e064ca3f9813f886bd9ec4bfbadbdce8b82ff1dba7798915e3976f5c6fd22ec8dc9cf9918319e15e497b64223142cd6cdc898539eeb951556558d138a397a6f01adbc8ba21fabe0e580787041cf853aea04c2d1dcd80f32f99d76ace71e5617c691f48bb030b51dd9a78a2725116686962da17c1d07a1ae2e292e8b1dabd4582b91f967fe3942a6030b7800dbd25e6c"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x20, 0x0, 0x4, 0xc6}}]}}, {{0x9, 0x4, 0xac, 0x1, 0x6, 0xed, 0x16, 0x4b, 0xf8, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "d2e9bd9f550b"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x8f0, 0x83}, [@ncm={0x6, 0x24, 0x1a, 0x6, 0x10}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xfa}, @mdlm_detail={0xbf, 0x24, 0x13, 0x6, "eab6e19a5cc65a02a57920427da59b898a0fa27fc4dfd1662359c991627d9f3cb1974ea07582d5d3d17d3a904cc5e5b3afad23bfbcc0a0481be5d06b452ca6d4811b67e3c2889de13a76cbbcb1c2248e45baa6eaf2007dd8e91d199774a815e2a70d890fcd5629693b1a6956f509f57b01659c0dc175322c393dcb20ef6e0eaeb2dc4aab0c49da165d8ba4230b259632702fc19996ed8490d48e5b1e27ce92b49b73bde491c9daf05a7435cc57c099a62eec3f74b228f0aa9bd918"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7a}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x3, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x1af, 0xc2, 0x24, 0x4, 0x9e}]}, @generic={0x3, 0xb, "a1"}], [{{0x9, 0x5, 0x7, 0x3, 0x10, 0xd, 0x9, 0xff, [@generic={0xd2, 0x31, "47495af961d10b1ab2f44a1f9c02cdb42d038bc4f09492f7391c18604f41c26fb63302acf91fa7f2e6a0be4b636b1c3752eb40a641e1837ed5ca7915f704e9026f27a80a60981bdf30d5a208fa01d61ebedb032405086a5e3646c44a170a4730c62ad07717f1a732db6673be7ad9512dfb00ddc4ae38ea6accb020f2b7ec69c17c8776b77fd577679ac38f7741c87b94304b621a81bde8af73c87418537411f6d0628898f9a14f4b19bf4a46009d922b5b54c2cfaf6e8b8d1e5a23d6017f9cec872d88c37fdeb81696e01c1167c42582"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x3, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xcee}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x3cd}]}}, {{0x9, 0x5, 0xb, 0x8, 0x200, 0x2, 0xfa, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x29, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x8}]}}, {{0x9, 0x5, 0x4, 0xe, 0x400, 0x1d, 0x10, 0x6}}, {{0x9, 0x5, 0x1, 0x1, 0x200, 0x8c, 0x7, 0x1}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x7f, 0x9, 0x1, [@generic={0xe0, 0x9, "b7eb80d7694340bd1a91232714e1815366e6db766576ed4b91d7258f2ee7a164b9d165bd5924c0ce255f8a63688aaa07378c95dbd6152b3c76ebed8afa8ff636392d9f8b52efae0eb17c19008c3e21444003885e9ae42b7d82fa3e3cd29014f87616bfdbc5d7b550da8bad9ff2d47f25f214f468bb6cdd2bb8e26dea777cf52ddf0f0017dd7e224e3b28c49e0acce9f1bac0bb7e9b1ed529a019d3642448ff34774083537c2df497b335d9b0c13af2a4a2c8f8cbc2b115b7246555b51d823b0a1061f522b286737c621038fb140e7fd5eacb8b2aa7450664ff1c60299f3b"}]}}]}}]}}]}}, &(0x7f0000001480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x0, 0x2, 0xa7, 0x40, 0x2}, 0x35, &(0x7f0000000280)={0x5, 0xf, 0x35, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "a55a3ed779d39bdc5699a7dbf7d247c8"}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x5, 0xf000, 0x80, [0x3f00, 0x7fbf00, 0xff30, 0x3f00]}]}, 0x4, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2801}}, {0x4a, &(0x7f0000000300)=@string={0x4a, 0x3, "53359ebb47bd02d98a1c6525432e48ee8ad457a810e9340b134811525727deb7dde304de762b4711e0027745d4526de972120ca8ca794ba47247c222b866bd0ee8c3c368ceea8053"}}, {0xc9, &(0x7f0000001300)=@string={0xc9, 0x3, "41d449d0c57780b4da07f5b4e64eb7c820869e41f62beb0760ca34e569109ae52c3dc3b538a6740cf58ba46c088c107363bc59daa3e51b490003116ac609206f8a08385e68eb5dc89e5b84eedee59914e6d3f721ad14c33a7c9bf56f706002b81e98b2d868d11748afba5109406ecce8bb293da07313efaf5df84c006e0daa473c50bcc0131e8a06b745d3eae6086e790d2ccc3f021b2f83d7549f7aa70e43a76663f41ed6bd65a17b911631ab883c420b28d66d5ba42f463a72047d636b22a569bd7c9a118fc2"}}, {0x75, &(0x7f0000001400)=@string={0x75, 0x3, "ed84f0d04b66d58365ab6cd44d5f1ff89e43a1498d600c566936f48d84dcc42ae08fb66718927071d0acf0d448fb46e3ae195337b1ddd3cec3899b1e1ec40c01efc61a019f33e93d3980e35ee092ea639f5ecbacf500969e59d3a90e559bf2f98474dc84d7e7fd7f34d3c44a3696a477d02dd5"}}]}) socket(0x2b, 0x5, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r5, 0x0, 0x1ff) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, r7, 0x2e, 0x0, 0x0, @void, @value}, 0x20) sendfile(r6, r6, 0x0, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r3, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r3, 0x6e2, 0x0, 0x1, 0x0, 0x0) 0s ago: executing program 0 (id=2395): creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf4, 0xf4, 0x0, 0xffffffff, 0xffffffff, 0x2cc, 0x2cc, 0x2cc, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010100, 0xffffff00, 0x0, 'batadv0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x5e, 0x1, 0x1}, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x0, 0x5, 0x9, 0x1, 0x1, 0x2], 0x2}}}, @common=@socket0={{0x20}}]}, @common=@inet=@TCPMSS={0x24}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff7f, 0xffffff00, 'netdevsim0\x00', 'batadv_slave_0\x00', {}, {}, 0x5c, 0x2, 0x22}, 0x0, 0xb0, 0x10c, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x2, 0x0, 0x0, 0x6, 0x6, 0x4], 0x5, 0x1}}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x8, 0x5, [0x1b, 0x9, 0x2d, 0x35, 0x26, 0x21, 0x3a, 0x18, 0x31, 0x7, 0x28, 0xc, 0x3, 0x1a, 0x8, 0x2c], 0x2, 0x5, 0x1}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x7, 0x2, [0x7, 0x18, 0x35, 0xe, 0x3, 0x30, 0x1e, 0x2a, 0x33, 0x13, 0x15, 0x22, 0x1c, 0x6, 0x35, 0x35], 0x1, 0x1000, 0xc0}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3bc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) tkill(r1, 0x2c) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7ff, 0x81, 0xd, 0x4005, 0x2}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x3, 0x4, 0x3fc, 0x0, 0x32}, 0x9c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000000a0a0101000000eaffffff00020000080c0010400000030800064000000000080007400000003a08000440000000020900020073797a3000000000300011800d00010073796e70726f7879400000001c000280060001400001000005000200ff000000050002000a000000"], 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0x200000d0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000100)=0xffffffff, 0x4) kernel console output (not intermixed with test programs): failure. [ 352.330025][T12227] name failslab, interval 1, probability 0, space 0, times 0 [ 352.334114][T12227] CPU: 2 UID: 0 PID: 12227 Comm: syz.2.2119 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 352.337098][T12227] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 352.340075][T12227] Call Trace: [ 352.341034][T12227] [ 352.341862][T12227] dump_stack_lvl+0x16c/0x1f0 [ 352.343112][T12227] should_fail_ex+0x497/0x5b0 [ 352.344303][T12227] ? fs_reclaim_acquire+0xae/0x150 [ 352.345599][T12227] should_failslab+0xc2/0x120 [ 352.346799][T12227] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 352.348147][T12227] ? __pfx_mark_lock+0x10/0x10 [ 352.349358][T12227] ? mark_lock+0xb5/0xc60 [ 352.350467][T12227] ? vm_area_dup+0x53/0x300 [ 352.351619][T12227] vm_area_dup+0x53/0x300 [ 352.352753][T12227] __split_vma+0x181/0x1210 [ 352.353913][T12227] ? mark_lock+0xb5/0xc60 [ 352.355035][T12227] ? __pfx___split_vma+0x10/0x10 [ 352.356284][T12227] ? __lock_acquire+0x15a9/0x3c40 [ 352.357753][T12227] vms_gather_munmap_vmas+0x1c3/0x1730 [ 352.359614][T12227] ? __pfx_mark_lock+0x10/0x10 [ 352.361232][T12227] ? hlock_class+0x4e/0x130 [ 352.362581][T12227] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 352.364540][T12227] ? __pfx___lock_acquire+0x10/0x10 [ 352.366393][T12227] ? hlock_class+0x4e/0x130 [ 352.367823][T12227] do_vmi_align_munmap+0x27f/0x890 [ 352.369300][T12227] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 352.371307][T12227] do_vmi_munmap+0x20b/0x3e0 [ 352.372873][T12227] __vm_munmap+0x14f/0x340 [ 352.374388][T12227] ? __pfx___vm_munmap+0x10/0x10 [ 352.376169][T12227] ? __pfx_ksys_write+0x10/0x10 [ 352.378067][T12227] __ia32_sys_munmap+0x57/0x80 [ 352.379860][T12227] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 352.382310][T12227] __do_fast_syscall_32+0x73/0x120 [ 352.383836][T12227] do_fast_syscall_32+0x32/0x80 [ 352.385658][T12227] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 352.387580][T12227] RIP: 0023:0xf709e579 [ 352.388797][T12227] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 352.394815][T12227] RSP: 002b:00000000f509055c EFLAGS: 00000296 ORIG_RAX: 000000000000005b [ 352.397177][T12227] RAX: ffffffffffffffda RBX: 0000000020470000 RCX: 0000000000e06500 [ 352.399414][T12227] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.401646][T12227] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 352.403859][T12227] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 352.406091][T12227] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 352.408355][T12227] [ 352.477050][T12235] »»»»»» speed is unknown, defaulting to 1000 [ 352.505061][T12238] FAULT_INJECTION: forcing a failure. [ 352.505061][T12238] name failslab, interval 1, probability 0, space 0, times 0 [ 352.509536][T12238] CPU: 3 UID: 0 PID: 12238 Comm: syz.2.2126 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 352.513757][T12238] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 352.517965][T12238] Call Trace: [ 352.519302][T12238] [ 352.520488][T12238] dump_stack_lvl+0x16c/0x1f0 [ 352.522377][T12238] should_fail_ex+0x497/0x5b0 [ 352.524270][T12238] should_failslab+0xc2/0x120 [ 352.526165][T12238] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 352.528294][T12238] ? skb_clone+0x190/0x3f0 [ 352.529613][T12238] skb_clone+0x190/0x3f0 [ 352.530865][T12238] netlink_deliver_tap+0xafd/0xca0 [ 352.532347][T12238] netlink_unicast+0x5e1/0x7f0 [ 352.533752][T12238] ? __pfx_netlink_unicast+0x10/0x10 [ 352.534652][T12235] »»»»»» speed is unknown, defaulting to 1000 [ 352.535256][T12238] ? __phys_addr_symbol+0x30/0x80 [ 352.538513][T12238] ? __check_object_size+0x488/0x710 [ 352.540025][T12238] netlink_sendmsg+0x8b8/0xd70 [ 352.541398][T12238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.542921][T12238] ____sys_sendmsg+0x9ae/0xb40 [ 352.544297][T12238] ? __pfx_____sys_sendmsg+0x10/0x10 [ 352.545808][T12238] ? get_compat_msghdr+0x11b/0x170 [ 352.547274][T12238] ___sys_sendmsg+0x135/0x1e0 [ 352.548631][T12238] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.550137][T12238] ? __pfx_lock_release+0x10/0x10 [ 352.551578][T12238] ? trace_lock_acquire+0x14e/0x1f0 [ 352.553069][T12238] ? __pfx___bpf_get_stack+0x10/0x10 [ 352.554598][T12238] ? __fget_files+0x206/0x3a0 [ 352.555957][T12238] __sys_sendmsg+0x16e/0x220 [ 352.557276][T12238] ? __pfx___sys_sendmsg+0x10/0x10 [ 352.558774][T12238] ? rcu_is_watching+0x12/0xc0 [ 352.560156][T12238] __do_fast_syscall_32+0x73/0x120 [ 352.562017][T12238] do_fast_syscall_32+0x32/0x80 [ 352.563424][T12238] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 352.565248][T12238] RIP: 0023:0xf709e579 [ 352.566641][T12238] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 352.573817][T12238] RSP: 002b:00000000f509055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 352.576946][T12238] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000180 [ 352.579939][T12238] RDX: 0000000000004004 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.582122][T12241] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 352.582923][T12238] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 352.582937][T12238] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 352.582948][T12238] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 352.593484][T12238] [ 352.594767][ C3] vkms_vblank_simulate: vblank timer overrun [ 352.597896][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2126'. [ 352.614842][T12243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2128'. [ 352.650317][T12245] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2129'. [ 352.679047][T12249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2130'. [ 352.684734][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2130'. [ 353.047070][T12258] 8021q: adding VLAN 0 to HW filter on device bond1 [ 353.165195][T12266] 9pnet_virtio: no channels available for device syz [ 353.202610][T12271] FAULT_INJECTION: forcing a failure. [ 353.202610][T12271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.206384][T12271] CPU: 0 UID: 0 PID: 12271 Comm: syz.0.2136 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 353.209337][T12271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 353.212408][T12271] Call Trace: [ 353.213408][T12271] [ 353.214280][T12271] dump_stack_lvl+0x16c/0x1f0 [ 353.215653][T12271] should_fail_ex+0x497/0x5b0 [ 353.217009][T12271] _copy_from_iter+0x29b/0x1400 [ 353.218419][T12271] ? trace_lock_acquire+0x14e/0x1f0 [ 353.219912][T12271] ? __alloc_skb+0x200/0x380 [ 353.221253][T12271] ? __pfx__copy_from_iter+0x10/0x10 [ 353.222931][T12271] ? __virt_addr_valid+0x1a4/0x590 [ 353.224428][T12271] ? __virt_addr_valid+0x5e/0x590 [ 353.225888][T12271] ? __phys_addr_symbol+0x30/0x80 [ 353.227361][T12271] ? __check_object_size+0x488/0x710 [ 353.228886][T12271] netlink_sendmsg+0x813/0xd70 [ 353.230278][T12271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.231799][T12271] ____sys_sendmsg+0x9ae/0xb40 [ 353.233192][T12271] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.234733][T12271] ? get_compat_msghdr+0x11b/0x170 [ 353.236206][T12271] ___sys_sendmsg+0x135/0x1e0 [ 353.237560][T12271] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.239083][T12271] ? __pfx_lock_release+0x10/0x10 [ 353.240536][T12271] ? trace_lock_acquire+0x14e/0x1f0 [ 353.242061][T12271] ? __fget_files+0x206/0x3a0 [ 353.243466][T12271] __sys_sendmsg+0x16e/0x220 [ 353.244806][T12271] ? __pfx___sys_sendmsg+0x10/0x10 [ 353.246298][T12271] __do_fast_syscall_32+0x73/0x120 [ 353.247771][T12271] do_fast_syscall_32+0x32/0x80 [ 353.249174][T12271] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 353.250991][T12271] RIP: 0023:0xf708e579 [ 353.252164][T12271] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 353.257695][T12271] RSP: 002b:00000000f508055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 353.260084][T12271] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000580 [ 353.262364][T12271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 353.264670][T12271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 353.266955][T12271] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 353.269248][T12271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 353.271530][T12271] [ 353.372425][T12278] x_tables: duplicate underflow at hook 1 [ 353.841119][ T6017] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 353.991152][ T6017] usb 5-1: Using ep0 maxpacket: 8 [ 353.995617][ T6017] usb 5-1: config 0 has no interfaces? [ 354.001948][ T6017] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=76.8e [ 354.004457][ T6017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.006669][ T6017] usb 5-1: Product: syz [ 354.007953][ T6017] usb 5-1: Manufacturer: syz [ 354.009278][ T6017] usb 5-1: SerialNumber: syz [ 354.017463][ T6017] usb 5-1: config 0 descriptor?? [ 354.036564][T12300] autofs: Unknown parameter '' [ 354.060303][ T5638] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 354.211129][ T5638] usb 7-1: Using ep0 maxpacket: 8 [ 354.213703][ T5638] usb 7-1: config 0 has no interfaces? [ 354.216930][ T5638] usb 7-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=76.8e [ 354.220375][ T5638] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.223097][ T5638] usb 7-1: Product: syz [ 354.223699][T12281] FAULT_INJECTION: forcing a failure. [ 354.223699][T12281] name failslab, interval 1, probability 0, space 0, times 0 [ 354.224480][ T5638] usb 7-1: Manufacturer: syz [ 354.224491][ T5638] usb 7-1: SerialNumber: syz [ 354.229040][ T5638] usb 7-1: config 0 descriptor?? [ 354.229867][T12281] CPU: 0 UID: 0 PID: 12281 Comm: syz.0.2139 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 354.235280][T12281] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 354.238525][T12281] Call Trace: [ 354.239766][T12281] [ 354.240828][T12281] dump_stack_lvl+0x16c/0x1f0 [ 354.242360][T12281] should_fail_ex+0x497/0x5b0 [ 354.243653][T12281] ? fs_reclaim_acquire+0xae/0x150 [ 354.245143][T12281] should_failslab+0xc2/0x120 [ 354.246616][T12281] __kmalloc_cache_noprof+0x68/0x420 [ 354.248268][T12281] raw_ioctl_init+0x162/0x7a0 [ 354.249572][T12281] ? __pfx_raw_ioctl_init+0x10/0x10 [ 354.251120][T12281] raw_ioctl+0xc27/0x2a50 [ 354.252327][T12281] ? __pfx_raw_ioctl+0x10/0x10 [ 354.253654][T12281] ? __fget_files+0x206/0x3a0 [ 354.254970][T12281] ? __pfx_raw_ioctl+0x10/0x10 [ 354.256304][T12281] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 354.258074][T12281] __do_fast_syscall_32+0x73/0x120 [ 354.259506][T12281] do_fast_syscall_32+0x32/0x80 [ 354.260845][T12281] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 354.262596][T12281] RIP: 0023:0xf708e579 [ 354.263733][T12281] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 354.268944][T12281] RSP: 002b:00000000f508055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 354.271212][T12281] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000041015500 [ 354.273365][T12281] RDX: 0000000020000400 RSI: 0000000000000000 RDI: 0000000000000000 [ 354.275546][T12281] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 354.277867][T12281] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 354.280026][T12281] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 354.282250][T12281] [ 354.285796][ T6017] usb 5-1: USB disconnect, device number 54 [ 354.433995][ T5997] usb 7-1: USB disconnect, device number 48 [ 354.872237][T12307] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 354.932223][T12310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2150'. [ 354.935004][T12311] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 355.021774][T12316] tun0: tun_chr_ioctl cmd 1074025675 [ 355.023338][T12316] tun0: persist enabled [ 355.030473][T12316] tun0: tun_chr_ioctl cmd 1074025675 [ 355.032652][T12316] tun0: persist enabled [ 355.042051][T12323] FAULT_INJECTION: forcing a failure. [ 355.042051][T12323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.045762][T12323] CPU: 0 UID: 0 PID: 12323 Comm: syz.2.2152 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 355.048703][T12323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 355.051759][T12323] Call Trace: [ 355.052775][T12323] [ 355.053635][T12323] dump_stack_lvl+0x16c/0x1f0 [ 355.055022][T12323] should_fail_ex+0x497/0x5b0 [ 355.056365][T12323] _copy_to_user+0x32/0xd0 [ 355.057638][T12323] simple_read_from_buffer+0xd0/0x160 [ 355.059139][T12323] proc_fail_nth_read+0x198/0x270 [ 355.060575][T12323] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 355.062132][T12323] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 355.063685][T12323] vfs_read+0x1df/0xbe0 [ 355.064896][T12323] ? __fget_files+0x1fc/0x3a0 [ 355.066218][T12323] ? __pfx___mutex_lock+0x10/0x10 [ 355.067631][T12323] ? __pfx_vfs_read+0x10/0x10 [ 355.068972][T12323] ? __fget_files+0x206/0x3a0 [ 355.070303][T12323] ksys_read+0x12b/0x250 [ 355.071514][T12323] ? __pfx_ksys_read+0x10/0x10 [ 355.072912][T12323] __do_fast_syscall_32+0x73/0x120 [ 355.074403][T12323] do_fast_syscall_32+0x32/0x80 [ 355.075800][T12323] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 355.077643][T12323] RIP: 0023:0xf709e579 [ 355.078834][T12323] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 355.084266][T12323] RSP: 002b:00000000f5090590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 355.086649][T12323] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5090620 [ 355.088858][T12323] RDX: 000000000000000f RSI: 00000000f73d3ff4 RDI: 0000000000000000 [ 355.091578][T12323] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 355.094429][T12323] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 355.096969][T12323] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 355.099263][T12323] [ 355.299503][T12335] ======================================================= [ 355.299503][T12335] WARNING: The mand mount option has been deprecated and [ 355.299503][T12335] and is ignored by this kernel. Remove the mand [ 355.299503][T12335] option from the mount to silence this warning. [ 355.299503][T12335] ======================================================= [ 355.386777][T12337] syz.1.2156: attempt to access beyond end of device [ 355.386777][T12337] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 355.392933][T12337] syz.1.2156: attempt to access beyond end of device [ 355.392933][T12337] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 355.396833][T12337] Mount JFS Failure: -5 [ 355.456676][T12345] FAULT_INJECTION: forcing a failure. [ 355.456676][T12345] name failslab, interval 1, probability 0, space 0, times 0 [ 355.460279][T12345] CPU: 3 UID: 0 PID: 12345 Comm: syz.2.2158 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 355.463401][T12345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 355.466420][T12345] Call Trace: [ 355.467436][T12345] [ 355.468260][T12345] dump_stack_lvl+0x16c/0x1f0 [ 355.469584][T12345] should_fail_ex+0x497/0x5b0 [ 355.470978][T12345] should_failslab+0xc2/0x120 [ 355.472385][T12345] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 355.473906][T12345] ? skb_clone+0x190/0x3f0 [ 355.475179][T12345] skb_clone+0x190/0x3f0 [ 355.476412][T12345] netlink_deliver_tap+0xafd/0xca0 [ 355.477884][T12345] netlink_unicast+0x5e1/0x7f0 [ 355.479229][T12345] ? __pfx_netlink_unicast+0x10/0x10 [ 355.480802][T12345] ? __phys_addr_symbol+0x30/0x80 [ 355.482384][T12345] ? __check_object_size+0x488/0x710 [ 355.483966][T12345] netlink_sendmsg+0x8b8/0xd70 [ 355.485425][T12345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.487081][T12345] ____sys_sendmsg+0x9ae/0xb40 [ 355.488494][T12345] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.490036][T12345] ? get_compat_msghdr+0x11b/0x170 [ 355.491567][T12345] ___sys_sendmsg+0x135/0x1e0 [ 355.492980][T12345] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.494523][T12345] ? __pfx_lock_release+0x10/0x10 [ 355.496012][T12345] ? trace_lock_acquire+0x14e/0x1f0 [ 355.497523][T12345] ? __fget_files+0x206/0x3a0 [ 355.498921][T12345] __sys_sendmsg+0x16e/0x220 [ 355.500302][T12345] ? __pfx___sys_sendmsg+0x10/0x10 [ 355.501828][T12345] __do_fast_syscall_32+0x73/0x120 [ 355.503340][T12345] do_fast_syscall_32+0x32/0x80 [ 355.504809][T12345] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 355.506703][T12345] RIP: 0023:0xf709e579 [ 355.507958][T12345] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 355.513743][T12345] RSP: 002b:00000000f509055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 355.516277][T12345] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200003c0 [ 355.518640][T12345] RDX: 000000000000c810 RSI: 0000000000000000 RDI: 0000000000000000 [ 355.520966][T12345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 355.523364][T12345] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 355.525648][T12345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 355.527910][T12345] [ 355.528875][ C3] vkms_vblank_simulate: vblank timer overrun [ 355.670659][T12356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2162'. [ 355.876892][T12360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2162'. [ 355.882169][T12360] netlink: 177 bytes leftover after parsing attributes in process `syz.2.2162'. [ 355.889527][ T39] audit: type=1326 audit(2000000044.019:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12363 comm="syz.0.2164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 355.898135][ T39] audit: type=1326 audit(2000000044.019:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12363 comm="syz.0.2164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 355.907261][ T39] audit: type=1326 audit(2000000044.019:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12363 comm="syz.0.2164" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 355.915622][ T39] audit: type=1326 audit(2000000044.019:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12363 comm="syz.0.2164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 355.923649][ T39] audit: type=1326 audit(2000000044.019:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12363 comm="syz.0.2164" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 355.931521][ T39] audit: type=1326 audit(2000000044.019:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12363 comm="syz.0.2164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 355.939274][ T39] audit: type=1326 audit(2000000044.019:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12363 comm="syz.0.2164" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 355.946010][ T39] audit: type=1326 audit(2000000044.019:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12363 comm="syz.0.2164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 355.952316][ T39] audit: type=1326 audit(2000000044.019:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12363 comm="syz.0.2164" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 355.958894][ T39] audit: type=1326 audit(2000000044.019:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12363 comm="syz.0.2164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 356.401192][ T5997] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 356.551613][ T5997] usb 5-1: Using ep0 maxpacket: 32 [ 356.557509][ T5997] usb 5-1: New USB device found, idVendor=0413, idProduct=6029, bcdDevice=b2.3d [ 356.560118][ T5997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.563889][ T5997] usb 5-1: Product: syz [ 356.565162][ T5997] usb 5-1: Manufacturer: syz [ 356.566567][ T5997] usb 5-1: SerialNumber: syz [ 356.568816][ T5997] usb 5-1: config 0 descriptor?? [ 356.785223][ T5997] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 356.788995][ T5997] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 356.797405][ T5997] usb 5-1: USB disconnect, device number 55 [ 356.927450][T12376] FAULT_INJECTION: forcing a failure. [ 356.927450][T12376] name failslab, interval 1, probability 0, space 0, times 0 [ 356.932048][T12376] CPU: 2 UID: 0 PID: 12376 Comm: syz.2.2167 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 356.935215][T12376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 356.938286][T12376] Call Trace: [ 356.939252][T12376] [ 356.940105][T12376] dump_stack_lvl+0x16c/0x1f0 [ 356.941470][T12376] should_fail_ex+0x497/0x5b0 [ 356.942882][T12376] ? fs_reclaim_acquire+0xae/0x150 [ 356.944364][T12376] should_failslab+0xc2/0x120 [ 356.945741][T12376] __kmalloc_cache_noprof+0x68/0x420 [ 356.947281][T12376] device_add+0xccf/0x1a70 [ 356.948578][T12376] ? __pfx_device_add+0x10/0x10 [ 356.949998][T12376] ? lockdep_init_map_type+0x16d/0x7d0 [ 356.951565][T12376] ? lockdep_init_map_type+0x16d/0x7d0 [ 356.953174][T12376] ? __raw_spin_lock_init+0x3a/0x110 [ 356.954717][T12376] input_register_device+0x860/0x10e0 [ 356.956267][T12376] ? input_ff_create+0x251/0x320 [ 356.957729][T12376] uinput_ioctl_handler.isra.0+0x130c/0x1d70 [ 356.959456][T12376] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 356.961271][T12376] ? __pfx_lock_release+0x10/0x10 [ 356.962771][T12376] ? trace_lock_acquire+0x14e/0x1f0 [ 356.964259][T12376] ? __fget_files+0x206/0x3a0 [ 356.965580][T12376] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 356.967301][T12376] ? __pfx_uinput_compat_ioctl+0x10/0x10 [ 356.968964][T12376] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 356.970547][T12376] __do_fast_syscall_32+0x73/0x120 [ 356.971984][T12376] do_fast_syscall_32+0x32/0x80 [ 356.973411][T12376] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 356.975189][T12376] RIP: 0023:0xf709e579 [ 356.976351][T12376] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 356.981903][T12376] RSP: 002b:00000000f509055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 356.984266][T12376] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000005501 [ 356.986516][T12376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 356.988702][T12376] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 356.990907][T12376] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 356.993119][T12376] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 356.995351][T12376] [ 357.516694][T12387] FAULT_INJECTION: forcing a failure. [ 357.516694][T12387] name failslab, interval 1, probability 0, space 0, times 0 [ 357.520850][T12387] CPU: 2 UID: 0 PID: 12387 Comm: syz.0.2171 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 357.524092][T12387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 357.528137][T12387] Call Trace: [ 357.529136][T12387] [ 357.530109][T12387] dump_stack_lvl+0x16c/0x1f0 [ 357.531500][T12387] should_fail_ex+0x497/0x5b0 [ 357.532909][T12387] ? fs_reclaim_acquire+0xae/0x150 [ 357.534485][T12387] should_failslab+0xc2/0x120 [ 357.536386][T12387] __kmalloc_node_noprof+0xd1/0x520 [ 357.538510][T12387] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 357.540722][T12387] __kvmalloc_node_noprof+0xad/0x1a0 [ 357.542880][T12387] __nf_hook_entries_try_shrink+0x15f/0x400 [ 357.545265][T12387] __nf_unregister_net_hook+0x2e5/0x680 [ 357.547274][T12387] nf_unregister_net_hooks+0x11b/0x160 [ 357.549200][T12387] ip_vs_unregister_hooks+0xd8/0x140 [ 357.551348][T12387] ip_vs_unlink_service+0x954/0xba0 [ 357.553476][T12387] ? __might_fault+0xe3/0x190 [ 357.555388][T12387] ip_vs_flush+0x1c0/0x230 [ 357.557245][T12387] do_ip_vs_set_ctl+0xd62/0x1070 [ 357.559281][T12387] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 357.561444][T12387] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 357.563893][T12387] ? __pfx_lock_release+0x10/0x10 [ 357.565941][T12387] ? rcu_is_watching+0x12/0xc0 [ 357.567428][T12387] ? __mutex_lock+0x1cc/0xa60 [ 357.568831][T12387] ? __mutex_unlock_slowpath+0x164/0x690 [ 357.570553][T12387] ? nf_setsockopt+0x8a/0xf0 [ 357.572027][T12387] nf_setsockopt+0x8a/0xf0 [ 357.573364][T12387] ip_setsockopt+0xcb/0xf0 [ 357.574875][T12387] sctp_setsockopt+0x16a/0xb880 [ 357.576767][T12387] ? __pfx_sctp_setsockopt+0x10/0x10 [ 357.578789][T12387] ? __pfx_aa_sk_perm+0x10/0x10 [ 357.580678][T12387] ? sock_common_setsockopt+0x2e/0xf0 [ 357.582870][T12387] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 357.585234][T12387] do_sock_setsockopt+0x222/0x480 [ 357.587276][T12387] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 357.589483][T12387] ? lock_acquire+0x2f/0xb0 [ 357.591338][T12387] __sys_setsockopt+0x1a0/0x230 [ 357.593336][T12387] __ia32_sys_setsockopt+0xbc/0x160 [ 357.595453][T12387] ? lockdep_hardirqs_on+0x7c/0x110 [ 357.597429][T12387] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 357.599327][T12387] __do_fast_syscall_32+0x73/0x120 [ 357.601301][T12387] do_fast_syscall_32+0x32/0x80 [ 357.603300][T12387] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 357.605844][T12387] RIP: 0023:0xf708e579 [ 357.607515][T12387] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 357.615206][T12387] RSP: 002b:00000000f508055c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 357.618569][T12387] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 357.621758][T12387] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000000 [ 357.624929][T12387] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 357.628095][T12387] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 357.631271][T12387] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 357.634478][T12387] [ 357.981223][ T5638] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 358.131145][ T5638] usb 5-1: Using ep0 maxpacket: 16 [ 358.134182][ T5638] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.137216][ T5638] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 358.139975][ T5638] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 358.142993][ T5638] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.149021][ T5638] usb 5-1: config 0 descriptor?? [ 358.162683][ T5997] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 358.311194][ T5997] usb 7-1: Using ep0 maxpacket: 16 [ 358.314709][ T5997] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.318693][ T5997] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.322614][ T5997] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 358.325898][ T5997] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.330731][ T5997] usb 7-1: config 0 descriptor?? [ 358.356062][T12393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.359326][T12393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.364919][ T837] usb 5-1: USB disconnect, device number 56 [ 358.846051][ T5997] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:05AC:8241.000A/input/input95 [ 358.903725][ T5997] appleir 0003:05AC:8241.000A: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 360.081288][ T5997] usb 7-1: reset high-speed USB device number 49 using dummy_hcd [ 360.312847][T12420] FAULT_INJECTION: forcing a failure. [ 360.312847][T12420] name failslab, interval 1, probability 0, space 0, times 0 [ 360.316651][T12420] CPU: 2 UID: 0 PID: 12420 Comm: syz.0.2182 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 360.319727][T12420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 360.322842][T12420] Call Trace: [ 360.324096][T12420] [ 360.325221][T12420] dump_stack_lvl+0x16c/0x1f0 [ 360.326744][T12420] should_fail_ex+0x497/0x5b0 [ 360.328059][T12420] should_failslab+0xc2/0x120 [ 360.329411][T12420] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 360.330966][T12420] ? skb_clone+0x190/0x3f0 [ 360.332288][T12420] skb_clone+0x190/0x3f0 [ 360.333535][T12420] netlink_deliver_tap+0xafd/0xca0 [ 360.335075][T12420] netlink_unicast+0x5e1/0x7f0 [ 360.336481][T12420] ? __pfx_netlink_unicast+0x10/0x10 [ 360.338038][T12420] ? __phys_addr_symbol+0x30/0x80 [ 360.339493][T12420] ? __check_object_size+0x488/0x710 [ 360.341011][T12420] netlink_sendmsg+0x8b8/0xd70 [ 360.342423][T12420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.343955][T12420] ____sys_sendmsg+0x9ae/0xb40 [ 360.345899][T12420] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.348046][T12420] ? get_compat_msghdr+0x11b/0x170 [ 360.350150][T12420] ___sys_sendmsg+0x135/0x1e0 [ 360.352077][T12420] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.354011][T12420] ? __pfx_lock_release+0x10/0x10 [ 360.356038][T12420] ? trace_lock_acquire+0x14e/0x1f0 [ 360.357771][T12420] ? __fget_files+0x206/0x3a0 [ 360.359200][T12420] __sys_sendmsg+0x16e/0x220 [ 360.360984][T12420] ? __pfx___sys_sendmsg+0x10/0x10 [ 360.363042][T12420] __do_fast_syscall_32+0x73/0x120 [ 360.364594][T12420] do_fast_syscall_32+0x32/0x80 [ 360.365931][T12420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 360.367742][T12420] RIP: 0023:0xf708e579 [ 360.368859][T12420] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 360.374299][T12420] RSP: 002b:00000000f508055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 360.377215][T12420] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 360.379613][T12420] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 360.381691][T12420] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 360.383834][T12420] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 360.385985][T12420] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 360.388159][T12420] [ 360.389367][T12420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2182'. [ 360.764071][T12426] syz.0.2183 (12426): drop_caches: 2 [ 360.996367][T12435] ALSA: seq fatal error: cannot create timer (-19) [ 361.111143][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2187'. [ 361.706088][T12450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2189'. [ 361.714255][ T837] usb 7-1: USB disconnect, device number 49 [ 362.238960][ T5956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.245635][ T5956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.249393][ T5956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.255516][ T5956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.258590][ T5956] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 362.261330][ T5956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.287290][T12452] »»»»»» speed is unknown, defaulting to 1000 [ 362.324665][T12452] »»»»»» speed is unknown, defaulting to 1000 [ 362.385830][T12452] chnl_net:caif_netlink_parms(): no params data found [ 362.414016][T12460] syzkaller1: entered promiscuous mode [ 362.415734][T12460] syzkaller1: entered allmulticast mode [ 362.445618][T12452] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.447785][T12452] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.450525][T12452] bridge_slave_0: entered allmulticast mode [ 362.454311][T12452] bridge_slave_0: entered promiscuous mode [ 362.457959][T12452] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.460048][T12452] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.463474][T12452] bridge_slave_1: entered allmulticast mode [ 362.466666][T12452] bridge_slave_1: entered promiscuous mode [ 362.507796][T12452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.512788][T12452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.547001][T12452] team0: Port device team_slave_0 added [ 362.553925][T12452] team0: Port device team_slave_1 added [ 362.588551][T12452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.591478][T12452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.601903][T12452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.607688][T12452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.610460][T12452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.620669][T12452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.667881][T12452] hsr_slave_0: entered promiscuous mode [ 362.670989][T12452] hsr_slave_1: entered promiscuous mode [ 362.675059][T12452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.678047][T12452] Cannot create hsr debugfs directory [ 362.746243][T12452] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.842626][T12452] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.924467][T12452] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.036401][T12452] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.177681][T12467] FAULT_INJECTION: forcing a failure. [ 363.177681][T12467] name failslab, interval 1, probability 0, space 0, times 0 [ 363.184998][T12467] CPU: 1 UID: 0 PID: 12467 Comm: syz.2.2193 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 363.188034][T12467] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 363.191166][T12467] Call Trace: [ 363.192272][T12467] [ 363.193197][T12467] dump_stack_lvl+0x16c/0x1f0 [ 363.194538][T12467] should_fail_ex+0x497/0x5b0 [ 363.195913][T12467] ? fs_reclaim_acquire+0xae/0x150 [ 363.197364][T12467] should_failslab+0xc2/0x120 [ 363.198767][T12467] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 363.200316][T12467] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 363.202107][T12467] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 363.203804][T12467] ? vmx_set_apic_access_page_addr+0x6a4/0x900 [ 363.205559][T12467] mmu_topup_memory_caches+0x22/0xd0 [ 363.207089][T12467] kvm_mmu_load+0xda/0x21f0 [ 363.208379][T12467] ? kvm_apic_has_interrupt+0xb6/0x190 [ 363.209903][T12467] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 363.211566][T12467] ? vmx_get_rflags+0x100/0x420 [ 363.212969][T12467] ? kvm_apic_accept_pic_intr+0xe8/0x1a0 [ 363.214770][T12467] ? __pfx_kvm_mmu_load+0x10/0x10 [ 363.216349][T12467] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 363.218212][T12467] ? kvm_check_and_inject_events+0x725/0x12e0 [ 363.220019][T12467] vcpu_run+0x2e2e/0x4c00 [ 363.221329][T12467] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 363.222909][T12467] ? __pfx_vcpu_run+0x10/0x10 [ 363.224235][T12467] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 363.225829][T12467] ? rcu_is_watching+0x12/0xc0 [ 363.227213][T12467] ? lockdep_hardirqs_on+0x7c/0x110 [ 363.228717][T12467] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 363.230365][T12467] ? lock_acquire+0x2f/0xb0 [ 363.231634][T12467] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 363.233262][T12467] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 363.234889][T12467] kvm_vcpu_ioctl+0x6ce/0x1520 [ 363.236233][T12467] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 363.237808][T12467] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 363.239243][T12467] ? tomoyo_path_number_perm+0x190/0x5b0 [ 363.240827][T12467] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 363.242514][T12467] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 363.244207][T12467] ? do_vfs_ioctl+0x513/0x1950 [ 363.245516][T12467] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 363.246917][T12467] ? __pfx_lock_release+0x10/0x10 [ 363.248312][T12467] ? trace_lock_acquire+0x14e/0x1f0 [ 363.249767][T12467] kvm_vcpu_compat_ioctl+0x210/0x3f0 [ 363.251215][T12467] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 363.252860][T12467] ? __fget_files+0x206/0x3a0 [ 363.254212][T12467] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 363.255875][T12467] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 363.257348][T12467] __do_fast_syscall_32+0x73/0x120 [ 363.258799][T12467] do_fast_syscall_32+0x32/0x80 [ 363.260145][T12467] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 363.261871][T12467] RIP: 0023:0xf709e579 [ 363.262398][T12452] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 363.263043][T12467] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 363.270271][T12467] RSP: 002b:00000000f509055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 363.272697][T12467] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 363.275071][T12467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 363.277602][T12467] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 363.279938][T12467] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 363.282295][T12467] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 363.284595][T12467] [ 363.289145][T12452] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 363.304095][T12452] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 363.309361][T12452] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 363.340727][T12452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.348607][T12452] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.353136][T12124] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.355221][T12124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.368072][T12452] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 363.372481][T12452] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.397762][T12124] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.399843][T12124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.457499][T12452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.488362][T12452] veth0_vlan: entered promiscuous mode [ 363.493335][T12452] veth1_vlan: entered promiscuous mode [ 363.503104][T12452] veth0_macvtap: entered promiscuous mode [ 363.509060][T12452] veth1_macvtap: entered promiscuous mode [ 363.515132][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.518809][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.522654][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.526454][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.529543][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.532742][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.535624][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.538753][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.542158][T12452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.545383][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.548311][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.551330][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.554300][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.556975][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.559933][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.562909][T12452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.565855][T12452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.569354][T12452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.573713][T12452] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.576182][T12452] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.578662][T12452] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.581224][T12452] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.626947][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.629872][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.643589][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.646006][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.671432][T12481] Process accounting resumed [ 363.978477][T12491] input: syz0 as /devices/virtual/input/input96 [ 364.067897][T12492] netlink: 'syz.0.2197': attribute type 12 has an invalid length. [ 364.321161][ T5956] Bluetooth: hci3: command tx timeout [ 364.517767][T12512] netlink: 'syz.2.2200': attribute type 1 has an invalid length. [ 364.520572][T12512] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2200'. [ 364.831009][T12518] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2201'. [ 365.099914][T12530] openvswitch: netlink: Key type 34 is out of range max 32 [ 365.175655][T12545] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 365.186896][T12545] netlink: 'syz.2.2208': attribute type 10 has an invalid length. [ 365.192428][T12545] team0: Port device netdevsim0 removed [ 365.195241][T12545] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 365.424369][T12563] FAULT_INJECTION: forcing a failure. [ 365.424369][T12563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.428448][T12563] CPU: 3 UID: 0 PID: 12563 Comm: syz.2.2213 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 365.431633][T12563] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 365.435514][T12563] Call Trace: [ 365.436890][T12563] [ 365.438089][T12563] dump_stack_lvl+0x16c/0x1f0 [ 365.439616][T12563] should_fail_ex+0x497/0x5b0 [ 365.441043][T12563] _copy_to_user+0x32/0xd0 [ 365.442355][T12563] simple_read_from_buffer+0xd0/0x160 [ 365.443980][T12563] proc_fail_nth_read+0x198/0x270 [ 365.445444][T12563] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 365.447078][T12563] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 365.448635][T12563] vfs_read+0x1df/0xbe0 [ 365.449781][T12563] ? __fget_files+0x1fc/0x3a0 [ 365.451083][T12563] ? __pfx___mutex_lock+0x10/0x10 [ 365.452762][T12563] ? __pfx_vfs_read+0x10/0x10 [ 365.454210][T12563] ? __fget_files+0x206/0x3a0 [ 365.455556][T12563] ksys_read+0x12b/0x250 [ 365.456801][T12563] ? __pfx_ksys_read+0x10/0x10 [ 365.458131][T12563] __do_fast_syscall_32+0x73/0x120 [ 365.459596][T12563] do_fast_syscall_32+0x32/0x80 [ 365.461000][T12563] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 365.462815][T12563] RIP: 0023:0xf709e579 [ 365.464058][T12563] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 365.469551][T12563] RSP: 002b:00000000f5090590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 365.471914][T12563] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5090620 [ 365.474238][T12563] RDX: 000000000000000f RSI: 00000000f73d3ff4 RDI: 0000000000000000 [ 365.476428][T12563] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 365.478727][T12563] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 365.480869][T12563] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 365.483113][T12563] [ 365.538388][T12570] fuse: Bad value for 'fd' [ 365.541559][T12570] ip6t_srh: unknown srh invflags 6BE9 [ 365.659972][T12575] syzkaller1: entered promiscuous mode [ 365.662465][T12575] syzkaller1: entered allmulticast mode [ 365.666331][T12575] FAULT_INJECTION: forcing a failure. [ 365.666331][T12575] name failslab, interval 1, probability 0, space 0, times 0 [ 365.669965][T12575] CPU: 0 UID: 0 PID: 12575 Comm: syz.0.2219 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 365.673119][T12575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 365.676190][T12575] Call Trace: [ 365.677167][T12575] [ 365.678067][T12575] dump_stack_lvl+0x16c/0x1f0 [ 365.679480][T12575] should_fail_ex+0x497/0x5b0 [ 365.680845][T12575] should_failslab+0xc2/0x120 [ 365.682228][T12575] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 365.683824][T12575] ? __pfx_lock_release+0x10/0x10 [ 365.685315][T12575] ? dst_alloc+0x99/0x1a0 [ 365.686603][T12575] dst_alloc+0x99/0x1a0 [ 365.687807][T12575] ? fib_validate_source+0x13d/0x730 [ 365.689357][T12575] rt_dst_alloc+0x35/0x3a0 [ 365.690716][T12575] ip_route_input_slow+0x1661/0x3910 [ 365.692271][T12575] ? __pfx_ip_route_input_slow+0x10/0x10 [ 365.693931][T12575] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 365.695566][T12575] ? ip_route_input_noref+0xb6/0x2e0 [ 365.697086][T12575] ? lock_acquire+0x2f/0xb0 [ 365.698516][T12575] ? ip_route_input_noref+0xb6/0x2e0 [ 365.700111][T12575] ip_route_input_noref+0x121/0x2e0 [ 365.701632][T12575] ? __pfx_ip_route_input_noref+0x10/0x10 [ 365.703347][T12575] ? tcp_v4_early_demux+0x46c/0xb50 [ 365.704841][T12575] ? tcp_v4_early_demux+0xae/0xb50 [ 365.706335][T12575] ip_rcv_finish_core.constprop.0+0x46f/0x2290 [ 365.708112][T12575] ip_rcv+0x1c0/0x5d0 [ 365.709280][T12575] ? __pfx_ip_rcv+0x10/0x10 [ 365.710574][T12575] __netif_receive_skb_one_core+0x199/0x1e0 [ 365.712284][T12575] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 365.714079][T12575] ? rcu_is_watching+0x12/0xc0 [ 365.715468][T12575] ? ktime_get_with_offset+0x273/0x3a0 [ 365.717041][T12575] ? lockdep_hardirqs_on+0x7c/0x110 [ 365.718553][T12575] ? netif_receive_skb+0x109/0x7b0 [ 365.720202][T12575] __netif_receive_skb+0x1d/0x160 [ 365.721692][T12575] netif_receive_skb+0x13f/0x7b0 [ 365.723151][T12575] ? __pfx_netif_receive_skb+0x10/0x10 [ 365.724771][T12575] ? _copy_from_iter+0x159/0x1400 [ 365.726247][T12575] ? __pfx___lock_acquire+0x10/0x10 [ 365.727754][T12575] ? trace_lock_acquire+0x14e/0x1f0 [ 365.729257][T12575] tun_rx_batched.isra.0+0x3eb/0x730 [ 365.730784][T12575] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 365.732506][T12575] ? hlock_class+0x4e/0x130 [ 365.733841][T12575] ? tun_get_user+0x13c9/0x3e40 [ 365.735257][T12575] ? lock_acquire+0x2f/0xb0 [ 365.736575][T12575] ? tun_get_user+0x13c9/0x3e40 [ 365.738049][T12575] tun_get_user+0x2a0d/0x3e40 [ 365.739428][T12575] ? __pfx_tun_get_user+0x10/0x10 [ 365.740871][T12575] ? find_held_lock+0x2d/0x110 [ 365.742272][T12575] ? __pfx_lock_release+0x10/0x10 [ 365.743775][T12575] tun_chr_write_iter+0xdc/0x210 [ 365.745235][T12575] vfs_write+0x5ae/0x1150 [ 365.746515][T12575] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 365.748140][T12575] ? __pfx_vfs_write+0x10/0x10 [ 365.749531][T12575] ? __fget_files+0x40/0x3a0 [ 365.751355][T12575] ksys_write+0x12b/0x250 [ 365.752776][T12575] ? __pfx_ksys_write+0x10/0x10 [ 365.754204][T12575] __do_fast_syscall_32+0x73/0x120 [ 365.755653][T12575] do_fast_syscall_32+0x32/0x80 [ 365.757126][T12575] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 365.758981][T12575] RIP: 0023:0xf70fe579 [ 365.760464][T12575] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 365.767216][T12575] RSP: 002b:00000000f50f055c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 365.769677][T12575] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020001240 [ 365.771958][T12575] RDX: 0000000000000036 RSI: 0000000000000000 RDI: 0000000000000000 [ 365.774256][T12575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 365.776485][T12575] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 365.778688][T12575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 365.780985][T12575] [ 365.812038][ T39] kauditd_printk_skb: 24 callbacks suppressed [ 365.812048][ T39] audit: type=1326 audit(2000000053.949:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.3.2221" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 365.820516][ T39] audit: type=1326 audit(2000000053.949:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.3.2221" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 365.826626][ T39] audit: type=1326 audit(2000000053.949:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.3.2221" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 365.832703][ T39] audit: type=1326 audit(2000000053.949:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.3.2221" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 365.839906][ T39] audit: type=1326 audit(2000000053.949:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.3.2221" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 365.848184][ T39] audit: type=1326 audit(2000000053.959:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.3.2221" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 365.856713][ T39] audit: type=1326 audit(2000000053.959:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.3.2221" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 365.865043][ T39] audit: type=1326 audit(2000000053.959:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.3.2221" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 365.873193][ T39] audit: type=1326 audit(2000000053.959:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.3.2221" exe="/syz-executor" sig=0 arch=40000003 syscall=30 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 365.879259][ T39] audit: type=1326 audit(2000000053.959:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.3.2221" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 366.401163][ T5956] Bluetooth: hci3: command tx timeout [ 366.579623][T12588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2224'. [ 366.695769][T12590] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 366.806029][T12595] FAULT_INJECTION: forcing a failure. [ 366.806029][T12595] name failslab, interval 1, probability 0, space 0, times 0 [ 366.809584][T12595] CPU: 1 UID: 0 PID: 12595 Comm: syz.3.2226 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 366.812657][T12595] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 366.815711][T12595] Call Trace: [ 366.816688][T12595] [ 366.817538][T12595] dump_stack_lvl+0x16c/0x1f0 [ 366.818905][T12595] should_fail_ex+0x497/0x5b0 [ 366.820254][T12595] ? fs_reclaim_acquire+0xae/0x150 [ 366.821785][T12595] should_failslab+0xc2/0x120 [ 366.823166][T12595] __kmalloc_noprof+0xce/0x4f0 [ 366.824567][T12595] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 366.826684][T12595] ? lockdep_hardirqs_on+0x7c/0x110 [ 366.828175][T12595] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 366.830226][T12595] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 366.831937][T12595] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 366.833791][T12595] ? genl_get_cmd+0x195/0x580 [ 366.835157][T12595] ? bpf_lsm_capable+0x9/0x10 [ 366.836520][T12595] ? security_capable+0x7e/0x260 [ 366.837954][T12595] ? ns_capable+0xd7/0x110 [ 366.839241][T12595] genl_rcv_msg+0x565/0x800 [ 366.840556][T12595] ? __pfx_genl_rcv_msg+0x10/0x10 [ 366.842013][T12595] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 366.843579][T12595] ? __pfx_nl80211_join_ibss+0x10/0x10 [ 366.845129][T12595] ? __pfx_nl80211_post_doit+0x10/0x10 [ 366.846657][T12595] netlink_rcv_skb+0x165/0x410 [ 366.848104][T12595] ? __pfx_genl_rcv_msg+0x10/0x10 [ 366.849854][T12595] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 366.851396][T12595] ? down_read+0xc9/0x330 [ 366.852683][T12595] ? __pfx_down_read+0x10/0x10 [ 366.854101][T12595] ? netlink_deliver_tap+0x1ae/0xca0 [ 366.855619][T12595] genl_rcv+0x28/0x40 [ 366.856788][T12595] netlink_unicast+0x53c/0x7f0 [ 366.858188][T12595] ? __pfx_netlink_unicast+0x10/0x10 [ 366.859702][T12595] ? __phys_addr_symbol+0x30/0x80 [ 366.861140][T12595] ? __check_object_size+0x488/0x710 [ 366.862711][T12595] netlink_sendmsg+0x8b8/0xd70 [ 366.864110][T12595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.865644][T12595] ____sys_sendmsg+0x9ae/0xb40 [ 366.867034][T12595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.868554][T12595] ? get_compat_msghdr+0x11b/0x170 [ 366.870040][T12595] ___sys_sendmsg+0x135/0x1e0 [ 366.871407][T12595] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.872919][T12595] ? __pfx_lock_release+0x10/0x10 [ 366.874389][T12595] ? trace_lock_acquire+0x14e/0x1f0 [ 366.875899][T12595] ? __fget_files+0x206/0x3a0 [ 366.877260][T12595] __sys_sendmsg+0x16e/0x220 [ 366.878608][T12595] ? __pfx___sys_sendmsg+0x10/0x10 [ 366.880080][T12595] __do_fast_syscall_32+0x73/0x120 [ 366.881550][T12595] do_fast_syscall_32+0x32/0x80 [ 366.882955][T12595] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 366.884779][T12595] RIP: 0023:0xf706e579 [ 366.885994][T12595] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 366.891460][T12595] RSP: 002b:00000000f506055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 366.893881][T12595] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000540 [ 366.896150][T12595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 366.898422][T12595] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 366.900668][T12595] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 366.902996][T12595] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 366.905412][T12595] [ 367.024492][T12602] FAULT_INJECTION: forcing a failure. [ 367.024492][T12602] name failslab, interval 1, probability 0, space 0, times 0 [ 367.028094][T12602] CPU: 3 UID: 0 PID: 12602 Comm: syz.2.2229 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 367.031154][T12602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 367.034221][T12602] Call Trace: [ 367.035163][T12602] [ 367.036225][T12602] dump_stack_lvl+0x16c/0x1f0 [ 367.038177][T12602] should_fail_ex+0x497/0x5b0 [ 367.040092][T12602] ? fs_reclaim_acquire+0xae/0x150 [ 367.041757][T12602] should_failslab+0xc2/0x120 [ 367.043162][T12602] __kmalloc_node_track_caller_noprof+0xcf/0x520 [ 367.044990][T12602] ? kstrdup_const+0x63/0x80 [ 367.046680][T12602] kstrdup+0x42/0xb0 [ 367.048015][T12602] kstrdup_const+0x63/0x80 [ 367.049311][T12602] __kernfs_new_node+0x9c/0x890 [ 367.050730][T12602] ? hlock_class+0x4e/0x130 [ 367.052050][T12602] ? __pfx___kernfs_new_node+0x10/0x10 [ 367.053667][T12602] ? __pfx___lock_acquire+0x10/0x10 [ 367.055172][T12602] kernfs_new_node+0x186/0x240 [ 367.056599][T12602] ? lock_acquire.part.0+0x11b/0x380 [ 367.058124][T12602] kernfs_create_dir_ns+0x4c/0x150 [ 367.059623][T12602] sysfs_create_dir_ns+0x13b/0x2b0 [ 367.061102][T12602] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 367.062746][T12602] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 367.064301][T12602] ? kobject_add_internal+0x12d/0x990 [ 367.065898][T12602] ? class_dir_child_ns_type+0xd/0x60 [ 367.067451][T12602] kobject_add_internal+0x2c8/0x990 [ 367.068952][T12602] kobject_add+0x16f/0x240 [ 367.070260][T12602] ? __pfx_kobject_add+0x10/0x10 [ 367.071691][T12602] ? lock_acquire+0x2f/0xb0 [ 367.073154][T12602] ? get_device_parent+0x11f/0x4e0 [ 367.074710][T12602] ? kobject_put+0xab/0x5a0 [ 367.076056][T12602] ? device_add+0xc02/0x1a70 [ 367.077400][T12602] device_add+0x289/0x1a70 [ 367.078706][T12602] ? __pfx_device_add+0x10/0x10 [ 367.080111][T12602] ? lockdep_init_map_type+0x16d/0x7d0 [ 367.081686][T12602] ? lockdep_init_map_type+0x16d/0x7d0 [ 367.083243][T12602] ? __raw_spin_lock_init+0x3a/0x110 [ 367.084763][T12602] input_register_device+0x860/0x10e0 [ 367.086649][T12602] ? input_ff_create+0x251/0x320 [ 367.088524][T12602] uinput_ioctl_handler.isra.0+0x130c/0x1d70 [ 367.090743][T12602] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 367.093094][T12602] ? __pfx_lock_release+0x10/0x10 [ 367.094958][T12602] ? trace_lock_acquire+0x14e/0x1f0 [ 367.096897][T12602] ? __fget_files+0x206/0x3a0 [ 367.098659][T12602] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 367.100863][T12602] ? __pfx_uinput_compat_ioctl+0x10/0x10 [ 367.102962][T12602] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 367.104910][T12602] __do_fast_syscall_32+0x73/0x120 [ 367.106813][T12602] do_fast_syscall_32+0x32/0x80 [ 367.108613][T12602] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 367.110930][T12602] RIP: 0023:0xf709e579 [ 367.112605][T12602] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 367.120309][T12602] RSP: 002b:00000000f509055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 367.123764][T12602] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000005501 [ 367.126953][T12602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 367.129860][T12602] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 367.132874][T12602] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 367.135248][T12602] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 367.137526][T12602] [ 367.143313][T12602] kobject: kobject_add_internal failed for input98 (error: -12 parent: input) [ 367.207078][T12610] FAULT_INJECTION: forcing a failure. [ 367.207078][T12610] name failslab, interval 1, probability 0, space 0, times 0 [ 367.210993][T12610] CPU: 1 UID: 0 PID: 12610 Comm: syz.3.2231 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 367.214538][T12610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 367.217586][T12610] Call Trace: [ 367.218572][T12610] [ 367.219432][T12610] dump_stack_lvl+0x16c/0x1f0 [ 367.220803][T12610] should_fail_ex+0x497/0x5b0 [ 367.222180][T12610] ? fs_reclaim_acquire+0xae/0x150 [ 367.223751][T12610] should_failslab+0xc2/0x120 [ 367.225106][T12610] __kmalloc_noprof+0xce/0x4f0 [ 367.226606][T12610] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 367.228710][T12610] ? lockdep_hardirqs_on+0x7c/0x110 [ 367.230257][T12610] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 367.232293][T12610] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 367.234410][T12610] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 367.236824][T12610] ? genl_get_cmd+0x195/0x580 [ 367.238756][T12610] ? bpf_lsm_capable+0x9/0x10 [ 367.240689][T12610] ? security_capable+0x7e/0x260 [ 367.242738][T12610] ? ns_capable+0xd7/0x110 [ 367.244554][T12610] genl_rcv_msg+0x565/0x800 [ 367.246409][T12610] ? __pfx_genl_rcv_msg+0x10/0x10 [ 367.248411][T12610] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 367.250540][T12610] ? __pfx_nl80211_join_ibss+0x10/0x10 [ 367.252755][T12610] ? __pfx_nl80211_post_doit+0x10/0x10 [ 367.254841][T12610] netlink_rcv_skb+0x165/0x410 [ 367.256724][T12610] ? __pfx_genl_rcv_msg+0x10/0x10 [ 367.258783][T12610] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 367.260915][T12610] ? down_read+0xc9/0x330 [ 367.262697][T12610] ? __pfx_down_read+0x10/0x10 [ 367.264686][T12610] ? netlink_deliver_tap+0x1ae/0xca0 [ 367.266696][T12610] genl_rcv+0x28/0x40 [ 367.268236][T12610] netlink_unicast+0x53c/0x7f0 [ 367.270106][T12610] ? __pfx_netlink_unicast+0x10/0x10 [ 367.272270][T12610] ? __phys_addr_symbol+0x30/0x80 [ 367.274241][T12610] ? __check_object_size+0x488/0x710 [ 367.276376][T12610] netlink_sendmsg+0x8b8/0xd70 [ 367.278320][T12610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.280486][T12610] ____sys_sendmsg+0x9ae/0xb40 [ 367.282341][T12610] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.284412][T12610] ? get_compat_msghdr+0x11b/0x170 [ 367.286441][T12610] ___sys_sendmsg+0x135/0x1e0 [ 367.288392][T12610] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.290307][T12610] ? __pfx_lock_release+0x10/0x10 [ 367.292323][T12610] ? trace_lock_acquire+0x14e/0x1f0 [ 367.293142][T12614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2232'. [ 367.294241][T12610] ? __fget_files+0x206/0x3a0 [ 367.294262][T12610] __sys_sendmsg+0x16e/0x220 [ 367.294279][T12610] ? __pfx___sys_sendmsg+0x10/0x10 [ 367.300900][T12610] __do_fast_syscall_32+0x73/0x120 [ 367.302392][T12610] do_fast_syscall_32+0x32/0x80 [ 367.303771][T12610] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 367.305505][T12610] RIP: 0023:0xf706e579 [ 367.306629][T12610] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 367.311715][T12610] RSP: 002b:00000000f506055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 367.313965][T12610] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000300 [ 367.316053][T12610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 367.318307][T12610] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 367.320410][T12610] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 367.322662][T12610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 367.324953][T12610] [ 367.370135][T12612] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 367.438947][T12620] 8021q: VLANs not supported on lo [ 367.507218][T12626] overlayfs: missing 'lowerdir' [ 367.742498][ T5638] IPVS: starting estimator thread 0... [ 367.745683][T12632] FAULT_INJECTION: forcing a failure. [ 367.745683][T12632] name failslab, interval 1, probability 0, space 0, times 0 [ 367.750604][T12632] CPU: 3 UID: 0 PID: 12632 Comm: syz.0.2235 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 367.754534][T12632] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 367.758865][T12632] Call Trace: [ 367.760237][T12632] [ 367.761385][T12632] dump_stack_lvl+0x16c/0x1f0 [ 367.763521][T12632] should_fail_ex+0x497/0x5b0 [ 367.765421][T12632] ? fs_reclaim_acquire+0xae/0x150 [ 367.767485][T12632] should_failslab+0xc2/0x120 [ 367.769430][T12632] __kmalloc_node_noprof+0xd1/0x520 [ 367.771559][T12632] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 367.773756][T12632] __kvmalloc_node_noprof+0xad/0x1a0 [ 367.775835][T12632] __nf_hook_entries_try_shrink+0x15f/0x400 [ 367.778247][T12632] __nf_unregister_net_hook+0x2e5/0x680 [ 367.780675][T12632] nf_unregister_net_hooks+0x11b/0x160 [ 367.782865][T12632] ip_vs_unregister_hooks+0xd8/0x140 [ 367.784859][T12632] ip_vs_unlink_service+0x954/0xba0 [ 367.786937][T12632] ? __might_fault+0xe3/0x190 [ 367.788870][T12632] ip_vs_flush+0x1c0/0x230 [ 367.790717][T12632] do_ip_vs_set_ctl+0xd62/0x1070 [ 367.792723][T12632] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 367.794798][T12632] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 367.797052][T12632] ? __pfx_lock_release+0x10/0x10 [ 367.798989][T12632] ? rcu_is_watching+0x12/0xc0 [ 367.801058][T12632] ? __mutex_lock+0x1cc/0xa60 [ 367.802899][T12632] ? __mutex_unlock_slowpath+0x164/0x690 [ 367.805135][T12632] ? nf_setsockopt+0x8a/0xf0 [ 367.807043][T12632] nf_setsockopt+0x8a/0xf0 [ 367.808847][T12632] ip_setsockopt+0xcb/0xf0 [ 367.810727][T12632] sctp_setsockopt+0x16a/0xb880 [ 367.812638][T12632] ? __pfx_sctp_setsockopt+0x10/0x10 [ 367.814744][T12632] ? __pfx_aa_sk_perm+0x10/0x10 [ 367.816660][T12632] ? sock_common_setsockopt+0x2e/0xf0 [ 367.818729][T12632] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 367.820972][T12632] do_sock_setsockopt+0x222/0x480 [ 367.823120][T12632] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 367.825230][T12632] ? lock_acquire+0x2f/0xb0 [ 367.827058][T12632] __sys_setsockopt+0x1a0/0x230 [ 367.829071][T12632] __ia32_sys_setsockopt+0xbc/0x160 [ 367.831249][T12632] ? lockdep_hardirqs_on+0x7c/0x110 [ 367.833419][T12632] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 367.836098][T12632] __do_fast_syscall_32+0x73/0x120 [ 367.838239][T12632] do_fast_syscall_32+0x32/0x80 [ 367.840259][T12632] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 367.842858][T12632] RIP: 0023:0xf70fe579 [ 367.844526][T12632] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 367.852576][T12632] RSP: 002b:00000000f50f055c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 367.855950][T12632] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 367.859167][T12632] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000000 [ 367.862387][T12632] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 367.865581][T12632] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 367.868663][T12632] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 367.872176][T12632] [ 367.961381][T12633] IPVS: using max 37 ests per chain, 88800 per kthread [ 368.215579][T12644] batadv_slave_1: entered promiscuous mode [ 368.392489][T12650] IPVS: set_ctl: invalid protocol: 226 224.0.0.2:20003 [ 368.419961][ T835] hid-generic 0000:0000:0000.000B: hidraw1: HID v0.00 Device [syz1] on syz1 [ 368.462745][T12651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.466966][T12651] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 368.481656][ T5956] Bluetooth: hci3: command tx timeout [ 368.554564][T12641] batadv_slave_1: left promiscuous mode [ 369.151142][ T59] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 369.288764][T12661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2243'. [ 369.301727][ T59] usb 5-1: Using ep0 maxpacket: 8 [ 369.301831][T12661] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.305020][ T59] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 369.306403][T12661] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.309416][ T59] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 369.312022][T12661] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.315819][ T59] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 369.318388][T12661] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.323262][ T59] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 369.323284][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.326071][ T59] usbtmc 5-1:16.0: bulk endpoints not found [ 370.086624][T12670] »»»»»» speed is unknown, defaulting to 1000 [ 370.160509][T12670] »»»»»» speed is unknown, defaulting to 1000 [ 370.315448][T12680] FAULT_INJECTION: forcing a failure. [ 370.315448][T12680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.319506][T12680] CPU: 1 UID: 0 PID: 12680 Comm: syz.3.2247 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 370.322564][T12680] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 370.325635][T12680] Call Trace: [ 370.326611][T12680] [ 370.327470][T12680] dump_stack_lvl+0x16c/0x1f0 [ 370.328806][T12680] should_fail_ex+0x497/0x5b0 [ 370.330154][T12680] _copy_to_user+0x32/0xd0 [ 370.331406][T12680] bpf_test_finish.isra.0+0x52b/0x680 [ 370.332930][T12680] ? lock_acquire+0x2f/0xb0 [ 370.334264][T12680] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 370.335970][T12680] ? _copy_from_user+0x59/0xd0 [ 370.337370][T12680] bpf_prog_test_run_xdp+0xa0b/0x1570 [ 370.338929][T12680] ? lock_acquire+0x2f/0xb0 [ 370.340245][T12680] ? __fget_files+0x40/0x3a0 [ 370.341590][T12680] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 370.343423][T12680] ? __fget_files+0x206/0x3a0 [ 370.344802][T12680] ? fput+0x67/0x440 [ 370.345943][T12680] ? __bpf_prog_get+0xa0/0x290 [ 370.347326][T12680] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 370.349009][T12680] __sys_bpf+0x1921/0x57a0 [ 370.350308][T12680] ? __pfx_lock_release+0x10/0x10 [ 370.351749][T12680] ? __pfx___sys_bpf+0x10/0x10 [ 370.353211][T12680] ? vfs_write+0x306/0x1150 [ 370.354542][T12680] ? __mutex_unlock_slowpath+0x164/0x690 [ 370.356163][T12680] ? fput+0x67/0x440 [ 370.357262][T12680] ? ksys_write+0x1ba/0x250 [ 370.358709][T12680] ? __pfx_ksys_write+0x10/0x10 [ 370.360105][T12680] __ia32_sys_bpf+0x76/0xe0 [ 370.361405][T12680] __do_fast_syscall_32+0x73/0x120 [ 370.362901][T12680] do_fast_syscall_32+0x32/0x80 [ 370.364315][T12680] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 370.366136][T12680] RIP: 0023:0xf706e579 [ 370.367311][T12680] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 370.373768][T12680] RSP: 002b:00000000f506055c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 370.376685][T12680] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000640 [ 370.379697][T12680] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 370.382667][T12680] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 370.385649][T12680] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 370.388549][T12680] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 370.391306][T12680] [ 370.491000][ T5296] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 370.497442][ T5296] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 370.502285][ T5296] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 370.505098][ T5296] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 370.507383][ T5296] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 370.509748][ T5296] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 370.543853][T12684] »»»»»» speed is unknown, defaulting to 1000 [ 370.571214][ T5956] Bluetooth: hci3: command tx timeout [ 370.602083][T12684] »»»»»» speed is unknown, defaulting to 1000 [ 370.674711][T12684] chnl_net:caif_netlink_parms(): no params data found [ 370.784955][T12684] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.787884][T12684] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.790722][T12684] bridge_slave_0: entered allmulticast mode [ 370.797050][T12684] bridge_slave_0: entered promiscuous mode [ 370.800593][T12684] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.803751][T12684] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.806738][T12684] bridge_slave_1: entered allmulticast mode [ 370.809917][T12684] bridge_slave_1: entered promiscuous mode [ 370.854340][T12684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.860099][T12684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.897310][T12684] team0: Port device team_slave_0 added [ 370.904127][T12684] team0: Port device team_slave_1 added [ 370.949361][T12684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.952238][T12684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.960583][T12684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.967990][T12684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.970785][T12684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.979149][T12684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.013798][T12684] hsr_slave_0: entered promiscuous mode [ 371.016750][T12684] hsr_slave_1: entered promiscuous mode [ 371.019518][T12684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.022184][T12684] Cannot create hsr debugfs directory [ 371.101099][ T6021] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 371.112953][T12684] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 371.116559][T12684] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 371.119992][T12684] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 371.123744][T12684] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 371.134493][T12684] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.136542][T12684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.138701][T12684] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.140743][T12684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.163382][T12684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.170252][ T1204] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.174184][ T1204] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.185535][T12684] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.192291][ T1204] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.194526][ T1204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.207319][T12124] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.210245][T12124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.261130][ T6021] usb 7-1: Using ep0 maxpacket: 8 [ 371.263909][ T6021] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 371.267128][ T6021] usb 7-1: config 0 has no interface number 0 [ 371.269434][ T6021] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 371.274150][ T6021] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 371.278846][ T6021] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 371.280578][T12684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.282967][ T6021] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.290049][ T6021] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 371.292918][ T6021] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.295727][ T6021] usb 7-1: Product: syz [ 371.297427][ T6021] usb 7-1: Manufacturer: syz [ 371.298883][ T6021] usb 7-1: SerialNumber: syz [ 371.306095][ T6021] usb 7-1: config 0 descriptor?? [ 371.376446][T12684] veth0_vlan: entered promiscuous mode [ 371.380231][T12684] veth1_vlan: entered promiscuous mode [ 371.391918][T12684] veth0_macvtap: entered promiscuous mode [ 371.395898][T12684] veth1_macvtap: entered promiscuous mode [ 371.404580][T12684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.408837][T12684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.413015][T12684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.417098][T12684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.420723][T12684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.424614][T12684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.428183][T12684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.431448][T12684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.434369][T12684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.437402][T12684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.441513][T12684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.449004][T12684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.452239][T12684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.455379][T12684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.459633][T12684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.462997][T12684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.465954][T12684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.469400][T12684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.474341][T12684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.477786][T12684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.480809][T12684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.485222][T12684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.489309][T12684] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.491972][T12684] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.494533][T12684] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.497020][T12684] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.519920][ T6021] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 371.525421][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.528445][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.541800][T12124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.544058][T12124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.665867][T12710] tmpfs: Unknown parameter 'np_in†Ç' [ 371.698128][T12714] input: syz0 as /devices/virtual/input/input99 [ 371.910600][ T6021] usb 5-1: USB disconnect, device number 57 [ 371.969083][T12721] overlayfs: failed to resolve './file1': -2 [ 371.977357][T12719] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 372.029900][ T59] usb 7-1: USB disconnect, device number 50 [ 372.029971][ C1] iowarrior 7-1:0.186: iowarrior_callback - usb_submit_urb failed with result -19 [ 372.436416][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 372.436428][ T39] audit: type=1326 audit(2000000060.569:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.0.2257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 372.444466][ T39] audit: type=1326 audit(2000000060.569:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.0.2257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 372.450502][ T39] audit: type=1326 audit(2000000060.569:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.0.2257" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 372.451787][T12728] dlm: non-version read from control device 100663296 [ 372.460818][ T39] audit: type=1326 audit(2000000060.569:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.0.2257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 372.477291][ T39] audit: type=1326 audit(2000000060.569:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.0.2257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 372.486564][ T39] audit: type=1326 audit(2000000060.569:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.0.2257" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 372.493078][ T39] audit: type=1326 audit(2000000060.569:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.0.2257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 372.499266][ T39] audit: type=1326 audit(2000000060.569:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.0.2257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 372.507878][ T39] audit: type=1326 audit(2000000060.569:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.0.2257" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 372.514717][ T39] audit: type=1326 audit(2000000060.569:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.0.2257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 372.574420][ T5956] Bluetooth: hci4: command tx timeout [ 372.854414][T12749] netlink: 'syz.4.2259': attribute type 4 has an invalid length. [ 372.857266][T12749] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2259'. [ 373.481571][T12752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2260'. [ 373.568004][T12755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.712592][T12763] ptrace attach of "/syz-executor exec"[5961] was attempted by "/syz-executor exec"[12763] [ 373.957964][T12775] FAULT_INJECTION: forcing a failure. [ 373.957964][T12775] name failslab, interval 1, probability 0, space 0, times 0 [ 373.964594][T12775] CPU: 1 UID: 0 PID: 12775 Comm: syz.2.2265 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 373.967788][T12775] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 373.970990][T12775] Call Trace: [ 373.972234][T12775] [ 373.973254][T12775] dump_stack_lvl+0x16c/0x1f0 [ 373.975077][T12775] should_fail_ex+0x497/0x5b0 [ 373.976863][T12775] ? fs_reclaim_acquire+0xae/0x150 [ 373.978451][T12775] should_failslab+0xc2/0x120 [ 373.979851][T12775] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 373.981304][T12775] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 373.983156][T12775] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 373.985158][T12775] ? vmx_set_apic_access_page_addr+0x6a4/0x900 [ 373.987110][T12775] mmu_topup_memory_caches+0x22/0xd0 [ 373.988675][T12775] kvm_mmu_load+0xda/0x21f0 [ 373.989965][T12775] ? kvm_apic_has_interrupt+0xb6/0x190 [ 373.991515][T12775] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 373.993666][T12775] ? vmx_get_rflags+0x100/0x420 [ 373.995114][T12775] ? kvm_apic_accept_pic_intr+0xe8/0x1a0 [ 373.997258][T12775] ? __pfx_kvm_mmu_load+0x10/0x10 [ 373.999120][T12775] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 374.000873][T12775] ? kvm_check_and_inject_events+0x725/0x12e0 [ 374.002708][T12775] vcpu_run+0x2e2e/0x4c00 [ 374.003998][T12775] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 374.005664][T12775] ? __pfx_vcpu_run+0x10/0x10 [ 374.007071][T12775] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 374.008731][T12775] ? rcu_is_watching+0x12/0xc0 [ 374.010170][T12775] ? lockdep_hardirqs_on+0x7c/0x110 [ 374.011722][T12775] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 374.013449][T12775] ? lock_acquire+0x2f/0xb0 [ 374.015055][T12775] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 374.017234][T12775] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 374.019382][T12775] kvm_vcpu_ioctl+0x6ce/0x1520 [ 374.021210][T12775] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 374.023410][T12775] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 374.025380][T12775] ? tomoyo_path_number_perm+0x190/0x5b0 [ 374.027529][T12775] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 374.029820][T12775] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 374.032343][T12775] ? do_vfs_ioctl+0x513/0x1950 [ 374.034196][T12775] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 374.036181][T12775] ? __pfx_lock_release+0x10/0x10 [ 374.038095][T12775] ? trace_lock_acquire+0x14e/0x1f0 [ 374.040086][T12775] kvm_vcpu_compat_ioctl+0x210/0x3f0 [ 374.042123][T12775] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 374.044378][T12775] ? __fget_files+0x206/0x3a0 [ 374.046179][T12775] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 374.048362][T12775] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 374.050381][T12775] __do_fast_syscall_32+0x73/0x120 [ 374.052339][T12775] do_fast_syscall_32+0x32/0x80 [ 374.054240][T12775] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 374.056472][T12775] RIP: 0023:0xf709e579 [ 374.057560][T12775] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 374.063530][T12775] RSP: 002b:00000000f509055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 374.066480][T12775] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 374.069274][T12775] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 374.071839][T12775] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 374.074179][T12775] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 374.076715][T12775] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 374.079309][T12775] [ 374.133105][T12780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2267'. [ 374.336330][T12791] netlink: 'syz.3.2266': attribute type 10 has an invalid length. [ 374.481134][ T59] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 374.554109][T12798] overlay: Bad value for 'nfs_export' [ 374.653833][ T59] usb 9-1: Using ep0 maxpacket: 16 [ 374.656720][ T59] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.659735][ T59] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 374.663986][ T59] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 374.666612][ T59] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.670038][ T59] usb 9-1: config 0 descriptor?? [ 374.674308][ T59] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 374.876933][T12784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.879595][T12784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.883623][ T59] usb 9-1: USB disconnect, device number 2 [ 375.531388][T12812] »»»»»» speed is unknown, defaulting to 1000 [ 375.568757][T12812] »»»»»» speed is unknown, defaulting to 1000 [ 375.601435][ T5956] Bluetooth: hci4: command tx timeout [ 375.893790][T12829] FAULT_INJECTION: forcing a failure. [ 375.893790][T12829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.899038][T12829] CPU: 0 UID: 0 PID: 12829 Comm: syz.0.2278 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 375.903372][T12829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 375.907570][T12829] Call Trace: [ 375.908932][T12829] [ 375.910160][T12829] dump_stack_lvl+0x16c/0x1f0 [ 375.912122][T12829] should_fail_ex+0x497/0x5b0 [ 375.914096][T12829] _copy_from_user+0x2e/0xd0 [ 375.915997][T12829] binder_ioctl+0x502/0x7080 [ 375.917879][T12829] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 375.920064][T12829] ? tomoyo_path_number_perm+0x190/0x5b0 [ 375.922217][T12829] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 375.924619][T12829] ? __pfx_binder_ioctl+0x10/0x10 [ 375.926685][T12829] ? do_vfs_ioctl+0x513/0x1950 [ 375.928622][T12829] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 375.930655][T12829] ? trace_lock_acquire+0x14e/0x1f0 [ 375.932825][T12829] ? __fget_files+0x206/0x3a0 [ 375.934759][T12829] ? __pfx_binder_ioctl+0x10/0x10 [ 375.936798][T12829] compat_ptr_ioctl+0x6b/0xa0 [ 375.938705][T12829] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 375.940853][T12829] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 375.942988][T12829] __do_fast_syscall_32+0x73/0x120 [ 375.945023][T12829] do_fast_syscall_32+0x32/0x80 [ 375.946985][T12829] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 375.949421][T12829] RIP: 0023:0xf70fe579 [ 375.950944][T12829] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 375.958433][T12829] RSP: 002b:00000000f50cf55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 375.961725][T12829] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0306201 [ 375.964627][T12829] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 375.967739][T12829] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 375.970890][T12829] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 375.974029][T12829] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 375.977276][T12829] [ 375.985313][T12829] binder: 12825:12829 ioctl c0306201 200001c0 returned -14 [ 376.147776][T12843] FAULT_INJECTION: forcing a failure. [ 376.147776][T12843] name failslab, interval 1, probability 0, space 0, times 0 [ 376.151572][T12843] CPU: 3 UID: 0 PID: 12843 Comm: syz.0.2285 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 376.154707][T12843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 376.157763][T12843] Call Trace: [ 376.158806][T12843] [ 376.159698][T12843] dump_stack_lvl+0x16c/0x1f0 [ 376.161095][T12843] should_fail_ex+0x497/0x5b0 [ 376.162492][T12843] ? fs_reclaim_acquire+0xae/0x150 [ 376.164033][T12843] should_failslab+0xc2/0x120 [ 376.165470][T12843] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 376.167423][T12843] ? __alloc_skb+0x2b3/0x380 [ 376.169224][T12843] ? bpf_lsm_capable+0x9/0x10 [ 376.171031][T12843] __alloc_skb+0x2b3/0x380 [ 376.172782][T12843] ? __pfx___alloc_skb+0x10/0x10 [ 376.174692][T12843] ? genl_rcv_msg+0x480/0x800 [ 376.176489][T12843] ? genl_rcv_msg+0x4bd/0x800 [ 376.178303][T12843] netlink_ack+0x164/0xb20 [ 376.180021][T12843] netlink_rcv_skb+0x327/0x410 [ 376.181805][T12843] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.183678][T12843] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 376.185676][T12843] ? down_read+0xc9/0x330 [ 376.187274][T12843] ? __pfx_down_read+0x10/0x10 [ 376.189077][T12843] ? netlink_deliver_tap+0x1ae/0xca0 [ 376.191004][T12843] genl_rcv+0x28/0x40 [ 376.192518][T12843] netlink_unicast+0x53c/0x7f0 [ 376.194304][T12843] ? __pfx_netlink_unicast+0x10/0x10 [ 376.196275][T12843] ? __phys_addr_symbol+0x30/0x80 [ 376.198131][T12843] ? __check_object_size+0x488/0x710 [ 376.200064][T12843] netlink_sendmsg+0x8b8/0xd70 [ 376.201862][T12843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.203846][T12843] ____sys_sendmsg+0x9ae/0xb40 [ 376.205644][T12843] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.207627][T12843] ? get_compat_msghdr+0x11b/0x170 [ 376.209506][T12843] ___sys_sendmsg+0x135/0x1e0 [ 376.211255][T12843] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.213235][T12843] ? __pfx_lock_release+0x10/0x10 [ 376.215089][T12843] ? trace_lock_acquire+0x14e/0x1f0 [ 376.216993][T12843] ? __fget_files+0x206/0x3a0 [ 376.218730][T12843] __sys_sendmsg+0x16e/0x220 [ 376.220387][T12843] ? __pfx___sys_sendmsg+0x10/0x10 [ 376.222280][T12843] __do_fast_syscall_32+0x73/0x120 [ 376.224152][T12843] do_fast_syscall_32+0x32/0x80 [ 376.225910][T12843] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 376.227811][T12843] RIP: 0023:0xf70fe579 [ 376.228955][T12843] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 376.234096][T12843] RSP: 002b:00000000f50f055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 376.236377][T12843] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200002c0 [ 376.238665][T12843] RDX: 0000000020004810 RSI: 0000000000000000 RDI: 0000000000000000 [ 376.240812][T12843] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 376.243066][T12843] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 376.245242][T12843] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 376.247416][T12843] [ 376.255473][ T59] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 376.371541][ T58] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 376.382640][T12850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2286'. [ 376.401429][ T59] usb 9-1: Using ep0 maxpacket: 16 [ 376.404163][ T59] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.407358][ T59] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.410151][ T59] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 376.414396][ T59] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 376.417042][ T59] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.423992][ T59] usb 9-1: config 0 descriptor?? [ 376.531164][ T58] usb 7-1: Using ep0 maxpacket: 16 [ 376.534920][ T58] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.539001][ T58] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 376.543137][ T58] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 376.546547][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.550673][ T58] usb 7-1: config 0 descriptor?? [ 376.555336][ T58] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 376.633126][T12831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.638283][T12831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.652707][ T59] usbhid 9-1:0.0: can't add hid device: -71 [ 376.654623][ T59] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 376.657646][ T59] usb 9-1: USB disconnect, device number 3 [ 376.757237][T12837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.760131][T12837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.763609][ T58] usb 7-1: USB disconnect, device number 51 [ 376.957295][T12852] IPVS: set_ctl: invalid protocol: 20551 172.20.20.170:0 [ 377.227712][T12859] : renamed from bond0 (while UP) [ 377.313794][T12869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2290'. [ 377.316852][T12871] input: syz0 as /devices/virtual/input/input100 [ 377.483602][T12873] binder: 12872:12873 unknown command 53098 [ 377.492047][T12873] binder: 12872:12873 ioctl c0306201 20000180 returned -22 [ 377.501123][ T6021] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 377.651267][ T6021] usb 9-1: Using ep0 maxpacket: 16 [ 377.658451][ T6021] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.662422][ T6021] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.666264][ T6021] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 377.670286][ T6021] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 377.673060][ T6021] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.677095][ T6021] usb 9-1: config 0 descriptor?? [ 377.691159][ T5956] Bluetooth: hci4: command tx timeout [ 377.870053][T12882] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:0 [ 377.927408][T12868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.931890][T12868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.940906][ T6021] usbhid 9-1:0.0: can't add hid device: -71 [ 377.943579][ T6021] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 377.949820][ T6021] usb 9-1: USB disconnect, device number 4 [ 378.347753][ T59] libceph: connect (1)[c::]:6789 error -101 [ 378.349846][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 378.456789][T12887] ceph: No mds server is up or the cluster is laggy [ 378.592031][T12908] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 378.602963][T12908] FAULT_INJECTION: forcing a failure. [ 378.602963][T12908] name failslab, interval 1, probability 0, space 0, times 0 [ 378.606639][T12908] CPU: 0 UID: 0 PID: 12908 Comm: syz.4.2302 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 378.609928][T12908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 378.613101][T12908] Call Trace: [ 378.614082][T12908] [ 378.614947][T12908] dump_stack_lvl+0x16c/0x1f0 [ 378.616324][T12908] should_fail_ex+0x497/0x5b0 [ 378.617727][T12908] should_failslab+0xc2/0x120 [ 378.619094][T12908] __kmalloc_cache_noprof+0x68/0x420 [ 378.620628][T12908] ? rcu_is_watching+0x12/0xc0 [ 378.622050][T12908] ? trace_lock_acquire+0x14e/0x1f0 [ 378.623599][T12908] sctp_add_bind_addr+0x9d/0x3e0 [ 378.625039][T12908] sctp_copy_local_addr_list+0x39e/0x5a0 [ 378.626679][T12908] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 378.628597][T12908] ? sctp_auth_asoc_copy_shkeys+0x2a7/0x360 [ 378.630379][T12908] ? sctp_bind_addr_copy+0xe0/0x530 [ 378.631907][T12908] sctp_bind_addr_copy+0xe0/0x530 [ 378.633836][T12908] sctp_connect_new_asoc+0x1d8/0x790 [ 378.635814][T12908] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 378.637998][T12908] ? mark_held_locks+0x9f/0xe0 [ 378.639804][T12908] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 378.642002][T12908] sctp_sendmsg+0x162a/0x1f10 [ 378.643923][T12908] ? __pfx___lock_acquire+0x10/0x10 [ 378.645791][T12908] ? __pfx_sctp_sendmsg+0x10/0x10 [ 378.647686][T12908] ? __pfx_aa_sk_perm+0x10/0x10 [ 378.649169][T12908] ? __pfx_sctp_sendmsg+0x10/0x10 [ 378.650660][T12908] inet_sendmsg+0x119/0x140 [ 378.651995][T12908] __sys_sendto+0x42a/0x4f0 [ 378.653366][T12908] ? __pfx___sys_sendto+0x10/0x10 [ 378.654870][T12908] ? ksys_write+0x1ba/0x250 [ 378.656199][T12908] ? __pfx_ksys_write+0x10/0x10 [ 378.657645][T12908] __ia32_sys_sendto+0xdd/0x1b0 [ 378.659060][T12908] ? lockdep_hardirqs_on+0x7c/0x110 [ 378.660563][T12908] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 378.662513][T12908] __do_fast_syscall_32+0x73/0x120 [ 378.664024][T12908] do_fast_syscall_32+0x32/0x80 [ 378.665397][T12913] syzkaller1: entered promiscuous mode [ 378.665424][T12908] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 378.669418][T12908] RIP: 0023:0xf7f01579 [ 378.670234][T12913] syzkaller1: entered allmulticast mode [ 378.671042][T12908] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 378.671063][T12908] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 378.671080][T12908] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000500 [ 378.671087][T12908] RDX: 0000000000034000 RSI: 000000002000c851 RDI: 0000000020000140 [ 378.671094][T12908] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 378.671101][T12908] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 378.671108][T12908] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 378.671122][T12908] [ 378.828411][T12922] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 378.909014][T12929] FAULT_INJECTION: forcing a failure. [ 378.909014][T12929] name failslab, interval 1, probability 0, space 0, times 0 [ 378.917960][T12929] CPU: 1 UID: 0 PID: 12929 Comm: syz.0.2311 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 378.921181][T12929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 378.924400][T12929] Call Trace: [ 378.925530][T12929] [ 378.926531][T12929] dump_stack_lvl+0x16c/0x1f0 [ 378.928145][T12929] should_fail_ex+0x497/0x5b0 [ 378.929535][T12929] ? fs_reclaim_acquire+0xae/0x150 [ 378.931004][T12929] should_failslab+0xc2/0x120 [ 378.932370][T12929] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 378.934272][T12929] ? __alloc_skb+0x2b3/0x380 [ 378.935615][T12929] __alloc_skb+0x2b3/0x380 [ 378.936874][T12929] ? __pfx___alloc_skb+0x10/0x10 [ 378.938219][T12929] ? __phys_addr_symbol+0x30/0x80 [ 378.939572][T12929] pfkey_sendmsg+0x47f/0x840 [ 378.940871][T12929] ____sys_sendmsg+0x9ae/0xb40 [ 378.942157][T12929] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.943592][T12929] ? get_compat_msghdr+0x11b/0x170 [ 378.945079][T12929] ___sys_sendmsg+0x135/0x1e0 [ 378.946677][T12929] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.948208][T12929] ? __pfx_lock_release+0x10/0x10 [ 378.949657][T12929] ? trace_lock_acquire+0x14e/0x1f0 [ 378.951046][T12929] ? __fget_files+0x206/0x3a0 [ 378.952353][T12929] __sys_sendmsg+0x16e/0x220 [ 378.953658][T12929] ? __pfx___sys_sendmsg+0x10/0x10 [ 378.955056][T12929] __do_fast_syscall_32+0x73/0x120 [ 378.956748][T12929] do_fast_syscall_32+0x32/0x80 [ 378.958597][T12929] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 378.960564][T12929] RIP: 0023:0xf70fe579 [ 378.961706][T12929] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 378.967624][T12929] RSP: 002b:00000000f50f055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 378.970570][T12929] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 378.973529][T12929] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 378.976177][T12929] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 378.978342][T12929] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 378.980477][T12929] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 378.982711][T12929] [ 378.983674][ C1] vkms_vblank_simulate: vblank timer overrun [ 378.991795][T12926] C: renamed from team_slave_0 (while UP) [ 378.995553][T12926] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2310'. [ 379.052566][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2314'. [ 379.059927][T12938] binder: Unknown parameter 'rtatsg–1' [ 381.210667][T13000] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2333'. [ 381.768445][T13022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2338'. [ 381.768786][T13029] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 381.771167][T13022] FAULT_INJECTION: forcing a failure. [ 381.771167][T13022] name failslab, interval 1, probability 0, space 0, times 0 [ 381.772999][T13029] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 381.776536][T13022] CPU: 3 UID: 0 PID: 13022 Comm: syz.2.2338 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 381.781008][T13029] vhci_hcd vhci_hcd.0: Device attached [ 381.781846][T13022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 381.781857][T13022] Call Trace: [ 381.781861][T13022] [ 381.781866][T13022] dump_stack_lvl+0x16c/0x1f0 [ 381.781945][T13022] should_fail_ex+0x497/0x5b0 [ 381.781977][T13022] ? fs_reclaim_acquire+0xae/0x150 [ 381.781991][T13022] should_failslab+0xc2/0x120 [ 381.782006][T13022] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 381.782021][T13022] ? __alloc_skb+0x2b3/0x380 [ 381.782037][T13022] __alloc_skb+0x2b3/0x380 [ 381.782051][T13022] ? __pfx___alloc_skb+0x10/0x10 [ 381.782066][T13022] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 381.782083][T13022] netlink_ack+0x164/0xb20 [ 381.782099][T13022] netlink_rcv_skb+0x327/0x410 [ 381.782111][T13022] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 381.782125][T13022] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 381.782143][T13022] ? netlink_deliver_tap+0x1ae/0xca0 [ 381.782157][T13022] netlink_unicast+0x53c/0x7f0 [ 381.782170][T13022] ? __pfx_netlink_unicast+0x10/0x10 [ 381.782182][T13022] ? __phys_addr_symbol+0x30/0x80 [ 381.813546][T13022] ? __check_object_size+0x488/0x710 [ 381.815074][T13022] netlink_sendmsg+0x8b8/0xd70 [ 381.816461][T13022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.818561][T13022] ____sys_sendmsg+0x9ae/0xb40 [ 381.820480][T13022] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.822726][T13022] ? get_compat_msghdr+0x11b/0x170 [ 381.824901][T13022] ___sys_sendmsg+0x135/0x1e0 [ 381.826787][T13022] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.828299][T13022] ? __pfx_lock_release+0x10/0x10 [ 381.829835][T13022] ? trace_lock_acquire+0x14e/0x1f0 [ 381.831895][T13022] ? __fget_files+0x206/0x3a0 [ 381.833839][T13022] __sys_sendmsg+0x16e/0x220 [ 381.835714][T13022] ? __pfx___sys_sendmsg+0x10/0x10 [ 381.837759][T13022] __do_fast_syscall_32+0x73/0x120 [ 381.839853][T13022] do_fast_syscall_32+0x32/0x80 [ 381.841808][T13022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 381.844327][T13022] RIP: 0023:0xf709e579 [ 381.845975][T13022] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 381.851598][T13022] RSP: 002b:00000000f509055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 381.854005][T13022] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 381.856255][T13022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 381.858545][T13022] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 381.860774][T13022] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 381.863027][T13022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 381.865265][T13022] [ 382.001321][ T835] vhci_hcd: vhci_device speed not set [ 382.074156][ T835] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 382.159444][T13039] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 382.162061][T13039] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 382.169534][T13039] vhci_hcd vhci_hcd.0: Device attached [ 382.196775][T13040] vhci_hcd: connection closed [ 382.203973][T12124] vhci_hcd: stop threads [ 382.206623][T12124] vhci_hcd: release socket [ 382.208338][T12124] vhci_hcd: disconnect device [ 382.257340][T13042] random: crng reseeded on system resumption [ 383.123443][T13030] vhci_hcd: connection reset by peer [ 383.151279][ T79] vhci_hcd: stop threads [ 383.152569][ T79] vhci_hcd: release socket [ 383.153933][ T79] vhci_hcd: disconnect device [ 383.205087][ T59] IPVS: starting estimator thread 0... [ 383.292799][T13070] IPVS: using max 26 ests per chain, 62400 per kthread [ 383.460500][T13082] netlink: 'syz.2.2351': attribute type 1 has an invalid length. [ 383.611157][ T6017] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 383.761205][ T6017] usb 5-1: Using ep0 maxpacket: 8 [ 383.763944][ T6017] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 383.766196][ T6017] usb 5-1: config 0 has no interface number 0 [ 383.767924][ T6017] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 383.770931][ T6017] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 383.774586][ T6017] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 383.777668][ T6017] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 383.784849][ T6017] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 383.787387][ T6017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.789591][ T6017] usb 5-1: Product: syz [ 383.790757][ T6017] usb 5-1: Manufacturer: syz [ 383.793181][ T6017] usb 5-1: SerialNumber: syz [ 383.795644][ T6017] usb 5-1: config 0 descriptor?? [ 383.965476][T13092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.004189][ T6017] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 384.319704][T13101] infiniband sz1: set active [ 384.381951][ T6017] »»»»»» speed is unknown, defaulting to 1000 [ 384.392391][T13102] infiniband sz1: set active [ 384.452614][ T6074] »»»»»» speed is unknown, defaulting to 1000 [ 384.510667][T13103] overlayfs: failed to resolve './file1': -2 [ 384.949527][T13111] loop6: detected capacity change from 0 to 63 [ 385.366039][T13114] netlink: 'syz.2.2361': attribute type 4 has an invalid length. [ 385.387824][T13114] infiniband sz1: set down [ 385.389724][ T6017] »»»»»» speed is unknown, defaulting to 1000 [ 385.393393][ T58] »»»»»» speed is unknown, defaulting to 1000 [ 385.396057][ T58] »»»»»» speed is unknown, defaulting to 1000 [ 385.514896][ T39] kauditd_printk_skb: 19 callbacks suppressed [ 385.514911][ T39] audit: type=1326 audit(2000000073.649:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13113 comm="syz.2.2361" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 385.666536][T13122] overlayfs: failed to resolve './file0': -2 [ 386.212454][ T5296] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 386.218873][ T5296] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 386.222401][ T5296] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 386.226231][ T5296] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 386.230994][ T5296] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 386.235075][ T5296] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 386.253035][T13125] »»»»»» speed is unknown, defaulting to 1000 [ 386.287018][T13125] »»»»»» speed is unknown, defaulting to 1000 [ 386.404067][ T5997] usb 5-1: USB disconnect, device number 59 [ 386.443811][T13125] chnl_net:caif_netlink_parms(): no params data found [ 386.650839][T13125] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.671324][T13125] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.673734][T13125] bridge_slave_0: entered allmulticast mode [ 386.680882][T13125] bridge_slave_0: entered promiscuous mode [ 386.711326][T13125] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.721713][T13125] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.723798][T13125] bridge_slave_1: entered allmulticast mode [ 386.731565][T13125] bridge_slave_1: entered promiscuous mode [ 386.807443][T13144] sg_write: process 138 (syz.0.2368) changed security contexts after opening file descriptor, this is not allowed. [ 386.881796][T13125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.886395][T13125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.915217][T13125] team0: Port device team_slave_0 added [ 386.919793][T13125] team0: Port device team_slave_1 added [ 386.949230][T13125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.952259][T13125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.959949][T13125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.964041][T13125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.966025][T13125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.973483][T13125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.004648][T13125] hsr_slave_0: entered promiscuous mode [ 387.006834][T13125] hsr_slave_1: entered promiscuous mode [ 387.008861][T13125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.011313][T13125] Cannot create hsr debugfs directory [ 387.208012][ T835] vhci_hcd: vhci_device speed not set [ 387.539050][T13125] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.600685][T13125] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.712818][T13125] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.784304][T13125] bond0: (slave netdevsim0): Releasing backup interface [ 387.788905][T13125] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.903693][T13125] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 387.913220][T13125] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 387.922288][T13125] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 387.937541][T13125] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 387.983207][T13125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.997667][T13125] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.002923][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.005006][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.012377][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.014430][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.026468][T13125] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 388.029527][T13125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.153765][T13125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.172876][T13125] veth0_vlan: entered promiscuous mode [ 388.188783][T13125] veth1_vlan: entered promiscuous mode [ 388.246008][ T5296] Bluetooth: hci1: command tx timeout [ 388.267005][T13125] veth0_macvtap: entered promiscuous mode [ 388.279938][T13125] veth1_macvtap: entered promiscuous mode [ 388.298623][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.302483][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.305379][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.308436][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.311853][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.315134][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.318714][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.322830][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.326313][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.329947][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.333023][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.336087][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.352858][T13125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.360883][T13169] openvswitch: netlink: Flow actions attr not present in new flow. [ 388.393986][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.400261][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.411399][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.415082][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.417928][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.428186][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.455232][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.459005][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.471096][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.475255][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.478117][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.481234][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.486091][T13125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.490153][T13125] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.492824][T13125] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.495420][T13125] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.497993][T13125] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.608127][ T1204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.655034][ T1204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.667092][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.669374][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.800009][T13178] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 389.146220][T13200] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.148872][T13200] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.151505][T13200] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.154001][T13200] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.261166][ T39] audit: type=1326 audit(2000000077.389:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.2.2385" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 389.267425][ T39] audit: type=1326 audit(2000000077.389:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.2.2385" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 389.273571][ T39] audit: type=1326 audit(2000000077.389:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.2.2385" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 389.279757][ T39] audit: type=1326 audit(2000000077.389:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.2.2385" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 389.286169][ T39] audit: type=1326 audit(2000000077.389:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.2.2385" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 389.292335][ T39] audit: type=1326 audit(2000000077.389:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.2.2385" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 389.298714][ T39] audit: type=1326 audit(2000000077.389:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.2.2385" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 389.305118][ T39] audit: type=1326 audit(2000000077.389:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.2.2385" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 389.311905][ T39] audit: type=1326 audit(2000000077.389:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.2.2385" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 389.373435][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.972419][T13219] FAULT_INJECTION: forcing a failure. [ 389.972419][T13219] name failslab, interval 1, probability 0, space 0, times 0 [ 389.976050][T13219] CPU: 3 UID: 0 PID: 13219 Comm: syz.2.2390 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 389.979680][T13219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 389.983071][T13219] Call Trace: [ 389.984036][T13219] [ 389.984891][T13219] dump_stack_lvl+0x16c/0x1f0 [ 389.986258][T13219] should_fail_ex+0x497/0x5b0 [ 389.987484][T13219] ? fs_reclaim_acquire+0xae/0x150 [ 389.988966][T13219] should_failslab+0xc2/0x120 [ 389.990342][T13219] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 389.991895][T13219] ? pfkey_broadcast+0x268/0x460 [ 389.993328][T13219] ? skb_clone+0x190/0x3f0 [ 389.994636][T13219] skb_clone+0x190/0x3f0 [ 389.995867][T13219] pfkey_broadcast_one+0xb9/0x380 [ 389.997316][T13219] pfkey_broadcast+0x28f/0x460 [ 389.998714][T13219] pfkey_sendmsg+0x743/0x840 [ 390.000058][T13219] ____sys_sendmsg+0x9ae/0xb40 [ 390.001444][T13219] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.002983][T13219] ? get_compat_msghdr+0x11b/0x170 [ 390.004474][T13219] ___sys_sendmsg+0x135/0x1e0 [ 390.005846][T13219] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.007351][T13219] ? __pfx_lock_release+0x10/0x10 [ 390.008788][T13219] ? trace_lock_acquire+0x14e/0x1f0 [ 390.010303][T13219] ? __fget_files+0x206/0x3a0 [ 390.011764][T13219] __sys_sendmsg+0x16e/0x220 [ 390.013177][T13219] ? __pfx___sys_sendmsg+0x10/0x10 [ 390.014675][T13219] __do_fast_syscall_32+0x73/0x120 [ 390.016159][T13219] do_fast_syscall_32+0x32/0x80 [ 390.017580][T13219] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 390.019401][T13219] RIP: 0023:0xf70ee579 [ 390.020586][T13219] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 390.026108][T13219] RSP: 002b:00000000f50e055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 390.028498][T13219] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 390.030766][T13219] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 390.033037][T13219] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 390.035307][T13219] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 390.037566][T13219] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 390.039835][T13219] [ 390.321164][ T5296] Bluetooth: hci1: command 0x041b tx timeout [ 390.421390][T13237] [ 390.422147][T13237] ====================================================== [ 390.424129][T13237] WARNING: possible circular locking dependency detected [ 390.426110][T13237] 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 Not tainted [ 390.429249][T13237] ------------------------------------------------------ [ 390.431995][T13237] syz.0.2395/13237 is trying to acquire lock: [ 390.433774][T13237] ffff88804b4f1f20 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xe3/0x190 [ 390.436273][T13237] [ 390.436273][T13237] but task is already holding lock: [ 390.438393][T13237] ffff8880439f6120 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x33/0x70 [ 390.441045][T13237] [ 390.441045][T13237] which lock already depends on the new lock. [ 390.441045][T13237] [ 390.444034][T13237] [ 390.444034][T13237] the existing dependency chain (in reverse order) is: [ 390.446615][T13237] [ 390.446615][T13237] -> #5 (&q->debugfs_mutex){+.+.}-{4:4}: [ 390.448849][T13237] __mutex_lock+0x19b/0xa60 [ 390.450332][T13237] blk_mq_init_sched+0x42b/0x640 [ 390.451912][T13237] elevator_init_mq+0x2cd/0x420 [ 390.453488][T13237] add_disk_fwnode+0x113/0x1300 [ 390.455036][T13237] sd_probe+0xa66/0xfa0 [ 390.456405][T13237] really_probe+0x23e/0xa90 [ 390.457863][T13237] __driver_probe_device+0x1de/0x440 [ 390.459538][T13237] driver_probe_device+0x4c/0x1b0 [ 390.461135][T13237] __device_attach_driver+0x1df/0x310 [ 390.462842][T13237] bus_for_each_drv+0x157/0x1e0 [ 390.464384][T13237] __device_attach_async_helper+0x1d3/0x290 [ 390.466223][T13237] async_run_entry_fn+0x9c/0x530 [ 390.467784][T13237] process_one_work+0x958/0x1b30 [ 390.469297][T13237] worker_thread+0x6c8/0xf00 [ 390.470784][T13237] kthread+0x2c1/0x3a0 [ 390.472222][T13237] ret_from_fork+0x45/0x80 [ 390.473662][T13237] ret_from_fork_asm+0x1a/0x30 [ 390.473885][ T58] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 390.475175][T13237] [ 390.475175][T13237] -> #4 (&q->q_usage_counter(queue)#51){++++}-{0:0}: [ 390.479866][T13237] blk_queue_enter+0x50f/0x640 [ 390.481405][T13237] blk_mq_alloc_request+0x59b/0x950 [ 390.483040][T13237] scsi_execute_cmd+0x20a/0xf30 [ 390.484585][T13237] read_capacity_16+0x21a/0xe20 [ 390.486129][T13237] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 390.487949][T13237] sd_probe+0x8ee/0xfa0 [ 390.489311][T13237] really_probe+0x23e/0xa90 [ 390.490747][T13237] __driver_probe_device+0x1de/0x440 [ 390.492457][T13237] driver_probe_device+0x4c/0x1b0 [ 390.494055][T13237] __device_attach_driver+0x1df/0x310 [ 390.495757][T13237] bus_for_each_drv+0x157/0x1e0 [ 390.497307][T13237] __device_attach_async_helper+0x1d3/0x290 [ 390.499148][T13237] async_run_entry_fn+0x9c/0x530 [ 390.500724][T13237] process_one_work+0x958/0x1b30 [ 390.502304][T13237] worker_thread+0x6c8/0xf00 [ 390.503781][T13237] kthread+0x2c1/0x3a0 [ 390.505115][T13237] ret_from_fork+0x45/0x80 [ 390.506542][T13237] ret_from_fork_asm+0x1a/0x30 [ 390.508071][T13237] [ 390.508071][T13237] -> #3 (&q->limits_lock){+.+.}-{4:4}: [ 390.510275][T13237] __mutex_lock+0x19b/0xa60 [ 390.511731][T13237] loop_reconfigure_limits+0x407/0x8c0 [ 390.513472][T13237] lo_ioctl+0x8f4/0x18a0 [ 390.514850][T13237] lo_compat_ioctl+0xb9/0x170 [ 390.516346][T13237] compat_blkdev_ioctl+0x2f7/0x750 [ 390.517960][T13237] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 390.519539][T13237] __do_fast_syscall_32+0x73/0x120 [ 390.521162][T13237] do_fast_syscall_32+0x32/0x80 [ 390.522740][T13237] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 390.524700][T13237] [ 390.524700][T13237] -> #2 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 390.527155][T13237] blk_mq_submit_bio+0x1fb6/0x24c0 [ 390.528817][T13237] __submit_bio+0x384/0x540 [ 390.530317][T13237] submit_bio_noacct_nocheck+0x698/0xd70 [ 390.532100][T13237] submit_bio_noacct+0x93a/0x1e20 [ 390.533760][T13237] mpage_readahead+0x41d/0x590 [ 390.535183][T13237] read_pages+0x1a8/0xdc0 [ 390.536468][T13237] page_cache_ra_unbounded+0x3dc/0x750 [ 390.538192][T13237] force_page_cache_ra+0x24b/0x340 [ 390.539806][T13237] page_cache_sync_ra+0x110/0x9c0 [ 390.541423][T13237] filemap_get_pages+0xd7b/0x1be0 [ 390.543029][T13237] filemap_read+0x3ca/0xd70 [ 390.544484][T13237] blkdev_read_iter+0x187/0x480 [ 390.546025][T13237] vfs_read+0x87f/0xbe0 [ 390.547385][T13237] ksys_read+0x12b/0x250 [ 390.548767][T13237] do_syscall_64+0xcd/0x250 [ 390.550240][T13237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.552091][T13237] [ 390.552091][T13237] -> #1 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 390.554504][T13237] down_read+0x9a/0x330 [ 390.555859][T13237] page_cache_ra_unbounded+0x173/0x750 [ 390.557579][T13237] page_cache_ra_order+0x8f2/0xc80 [ 390.559179][T13237] page_cache_async_ra+0x5cb/0x8a0 [ 390.560809][T13237] filemap_fault+0xd69/0x2820 [ 390.562329][T13237] __do_fault+0x10a/0x490 [ 390.563726][T13237] do_pte_missing+0xebd/0x3e00 [ 390.565247][T13237] __handle_mm_fault+0x103c/0x2a40 [ 390.566866][T13237] handle_mm_fault+0x3fa/0xaa0 [ 390.568385][T13237] __get_user_pages+0x8d9/0x3b50 [ 390.569960][T13237] get_user_pages_unlocked+0x1c2/0x780 [ 390.571696][T13237] hva_to_pfn+0x8be/0xc20 [ 390.573121][T13237] kvm_follow_pfn+0x29f/0x3f0 [ 390.574627][T13237] __kvm_faultin_pfn+0x11c/0x1a0 [ 390.576186][T13237] kvm_mmu_faultin_pfn+0x469/0x1f30 [ 390.577740][T13237] kvm_tdp_page_fault+0x182/0x3d0 [ 390.579335][T13237] kvm_mmu_do_page_fault+0x58d/0x690 [ 390.581022][T13237] kvm_mmu_page_fault+0x20f/0x1bb0 [ 390.582650][T13237] handle_ept_violation+0x25a/0x640 [ 390.584290][T13237] vmx_handle_exit+0x733/0x1f70 [ 390.585844][T13237] vcpu_run+0x2aaf/0x4c00 [ 390.587246][T13237] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 390.588956][T13237] kvm_vcpu_ioctl+0x6ce/0x1520 [ 390.590486][T13237] kvm_vcpu_compat_ioctl+0x210/0x3f0 [ 390.592160][T13237] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 390.593841][T13237] __do_fast_syscall_32+0x73/0x120 [ 390.595451][T13237] do_fast_syscall_32+0x32/0x80 [ 390.596987][T13237] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 390.598933][T13237] [ 390.598933][T13237] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 390.600915][T13239] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2395'. [ 390.601083][T13237] __lock_acquire+0x249e/0x3c40 [ 390.601096][T13237] lock_acquire.part.0+0x11b/0x380 [ 390.601104][T13237] __might_fault+0x11b/0x190 [ 390.601119][T13237] _copy_from_user+0x29/0xd0 [ 390.601132][T13237] __blk_trace_setup+0xa8/0x180 [ 390.611960][T13237] blk_trace_setup+0x47/0x70 [ 390.613460][T13237] sg_ioctl+0x7a3/0x26b0 [ 390.614849][T13237] compat_ptr_ioctl+0x6b/0xa0 [ 390.616356][T13237] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 390.618040][T13237] __do_fast_syscall_32+0x73/0x120 [ 390.619652][T13237] do_fast_syscall_32+0x32/0x80 [ 390.621205][T13237] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 390.623191][T13237] [ 390.623191][T13237] other info that might help us debug this: [ 390.623191][T13237] [ 390.626092][T13237] Chain exists of: [ 390.626092][T13237] &mm->mmap_lock --> &q->q_usage_counter(queue)#51 --> &q->debugfs_mutex [ 390.626092][T13237] [ 390.630163][T13237] Possible unsafe locking scenario: [ 390.630163][T13237] [ 390.632294][T13237] CPU0 CPU1 [ 390.633854][T13237] ---- ---- [ 390.635385][T13237] lock(&q->debugfs_mutex); [ 390.636721][T13237] lock(&q->q_usage_counter(queue)#51); [ 390.638994][T13237] lock(&q->debugfs_mutex); [ 390.640939][T13237] rlock(&mm->mmap_lock); [ 390.642245][T13237] [ 390.642245][T13237] *** DEADLOCK *** [ 390.642245][T13237] [ 390.644517][T13237] 1 lock held by syz.0.2395/13237: [ 390.645999][T13237] #0: ffff8880439f6120 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x33/0x70 [ 390.648755][T13237] [ 390.648755][T13237] stack backtrace: [ 390.650469][T13237] CPU: 1 UID: 0 PID: 13237 Comm: syz.0.2395 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 390.653508][T13237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 390.656577][T13237] Call Trace: [ 390.657551][T13237] [ 390.658415][T13237] dump_stack_lvl+0x116/0x1f0 [ 390.659778][T13237] print_circular_bug+0x41c/0x610 [ 390.661239][T13237] check_noncircular+0x31a/0x400 [ 390.662696][T13237] ? __pfx_check_noncircular+0x10/0x10 [ 390.664259][T13237] ? lockdep_lock+0xc6/0x200 [ 390.665613][T13237] ? __pfx_lockdep_lock+0x10/0x10 [ 390.667070][T13237] __lock_acquire+0x249e/0x3c40 [ 390.668475][T13237] ? __pfx___lock_acquire+0x10/0x10 [ 390.669973][T13237] ? __pfx_mark_lock+0x10/0x10 [ 390.671365][T13237] lock_acquire.part.0+0x11b/0x380 [ 390.672854][T13237] ? __might_fault+0xe3/0x190 [ 390.674235][T13237] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 390.675847][T13237] ? rcu_is_watching+0x12/0xc0 [ 390.677231][T13237] ? trace_lock_acquire+0x14e/0x1f0 [ 390.678749][T13237] ? blk_trace_setup+0x33/0x70 [ 390.680147][T13237] ? __might_fault+0xe3/0x190 [ 390.681525][T13237] ? lock_acquire+0x2f/0xb0 [ 390.682844][T13237] ? __might_fault+0xe3/0x190 [ 390.684210][T13237] ? __might_fault+0xe3/0x190 [ 390.685586][T13237] __might_fault+0x11b/0x190 [ 390.686931][T13237] ? __might_fault+0xe3/0x190 [ 390.688292][T13237] _copy_from_user+0x29/0xd0 [ 390.689640][T13237] __blk_trace_setup+0xa8/0x180 [ 390.691054][T13237] ? __pfx___blk_trace_setup+0x10/0x10 [ 390.692614][T13237] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 390.694308][T13237] blk_trace_setup+0x47/0x70 [ 390.695648][T13237] sg_ioctl+0x7a3/0x26b0 [ 390.696887][T13237] ? __pfx_sg_ioctl+0x10/0x10 [ 390.698259][T13237] ? __pfx_lock_release+0x10/0x10 [ 390.699707][T13237] ? trace_lock_acquire+0x14e/0x1f0 [ 390.701211][T13237] ? __pfx___schedule+0x10/0x10 [ 390.702619][T13237] ? __fget_files+0x206/0x3a0 [ 390.703970][T13237] ? __pfx_sg_ioctl+0x10/0x10 [ 390.705334][T13237] compat_ptr_ioctl+0x6b/0xa0 [ 390.706703][T13237] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 390.708247][T13237] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 390.709778][T13237] __do_fast_syscall_32+0x73/0x120 [ 390.711263][T13237] do_fast_syscall_32+0x32/0x80 [ 390.712636][T13237] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 390.714334][T13237] RIP: 0023:0xf70fe579 [ 390.715506][T13237] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 390.720999][T13237] RSP: 002b:00000000f50ae55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 390.723417][T13237] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000c0481273 [ 390.725682][T13237] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 390.727937][T13237] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 390.730224][T13237] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 390.732518][T13237] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 390.734775][T13237] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 390.811106][ T58] usb 7-1: Using ep0 maxpacket: 16 [ 390.872780][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.876458][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.879224][ T58] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 390.883086][ T58] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 390.885707][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.888484][ T58] usb 7-1: config 0 descriptor?? [ 391.092359][T13232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.094861][T13232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.103997][ T58] usbhid 7-1:0.0: can't add hid device: -71 [ 391.105727][ T58] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 391.108366][ T58] usb 7-1: USB disconnect, device number 52 [ 391.126691][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.201638][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.295892][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.374787][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.503270][ T41] bridge_slave_1: left allmulticast mode [ 391.505418][ T41] bridge_slave_1: left promiscuous mode [ 391.507547][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.512790][ T41] bridge_slave_0: left allmulticast mode [ 391.514905][ T41] bridge_slave_0: left promiscuous mode [ 391.516727][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.752224][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.762610][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.766489][ T41] bond0 (unregistering): Released all slaves [ 392.197870][ T41] hsr_slave_0: left promiscuous mode [ 392.200216][ T41] hsr_slave_1: left promiscuous mode [ 392.203178][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.205373][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.208361][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.210528][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.215481][ T41] veth1_macvtap: left promiscuous mode [ 392.217074][ T41] veth0_macvtap: left promiscuous mode [ 392.218676][ T41] veth1_vlan: left promiscuous mode [ 392.220264][ T41] veth0_vlan: left promiscuous mode [ 392.481673][ T41] team0 (unregistering): Port device team_slave_1 removed [ 392.549757][ T41] team0 (unregistering): Port device team_slave_0 removed [ 393.402155][ T41] IPVS: stop unused estimator thread 0... [ 393.486250][ T41] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.490355][ T41] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.624357][ T41] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.627338][ T41] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.683441][ T41] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.686534][ T41] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.773627][ T41] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.776570][ T41] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.881372][ T41] bridge_slave_1: left allmulticast mode [ 393.883216][ T41] bridge_slave_1: left promiscuous mode [ 393.885311][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.921237][ T41] bridge_slave_0: left allmulticast mode [ 393.922910][ T41] bridge_slave_0: left promiscuous mode [ 393.924494][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.112740][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.141441][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.152029][ T41] bond0 (unregistering): Released all slaves [ 394.431126][ T41] hsr_slave_0: left promiscuous mode [ 394.433110][ T41] hsr_slave_1: left promiscuous mode [ 394.435032][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.437131][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.439552][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.441914][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.445144][ T41] veth1_macvtap: left promiscuous mode [ 394.446740][ T41] veth0_macvtap: left promiscuous mode [ 394.448318][ T41] veth1_vlan: left promiscuous mode [ 394.449775][ T41] veth0_vlan: left promiscuous mode [ 394.782196][ T41] team0 (unregistering): Port device team_slave_1 removed [ 394.856400][ T41] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 00:27:44 Registers: info registers vcpu 0 CPU#0 RAX=00000000004dc42d RBX=0000000000000000 RCX=ffffffff8b1a9889 RDX=0000000000000000 RSI=ffffffff8b4cd300 RDI=ffffffff8bb17380 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20 R8 =0000000000000001 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901cfcd0 R15=0000000000000000 RIP=ffffffff8b1aac6f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020187000 CR3=0000000073618000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85146410 RDI=ffffffff9a66a200 RBP=ffffffff9a66a1c0 RSP=ffffc90006c9f278 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e33312e36 R12=0000000000000000 R13=0000000000000060 R14=fffffbfff34cd492 R15=dffffc0000000000 RIP=ffffffff85146437 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000073618000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000046 RBX=ffff888048a66bc0 RCX=1ffffffff203a5fa RDX=0000000000000000 RSI=ffffffff8bb17300 RDI=0000000000000001 RBP=0000000000000282 RSP=ffffc900039cf500 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff901cfcd7 R11=0000000000000000 R12=ffffc900039cf5d8 R13=ffff888048a66bc0 R14=0000000000000282 R15=ffffc900039cf5f0 RIP=ffffffff8167b8d0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002e506ffc CR3=000000006f27a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000002c400000000 0000000800000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000080000 RBX=ffff888053278000 RCX=ffffc90030223000 RDX=0000000000080000 RSI=ffffffff88facdbe RDI=0000000000000005 RBP=ffff88805327819c RSP=ffffc90006d5f708 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff8880532780e8 R13=0000000000000000 R14=ffff8880532780e8 R15=ffffc90006d5f898 RIP=ffffffff81994e40 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002e513ffc CR3=0000000073618000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000