last executing test programs: 5.844212048s ago: executing program 2 (id=2906): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000012c0)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x6, [{{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}]}, 0x38c) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x104) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) syz_io_uring_setup(0x117, 0x0, 0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) mkdir(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x4820) recvmmsg(r4, 0x0, 0x0, 0x40008062, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 5.694961801s ago: executing program 3 (id=2907): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x2, "5660359c36ad7d48ed510000000000000001000000ddffffffffffffff00"}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00'}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x586f, 0x772882271eeec2f6}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x0, 0x0, 0x8, 0x5, 0xb57, 0x5e, 0x3, 0x0, 0x4, 'syz0\x00'}) shutdown(r2, 0x1) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x85e1, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000030000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) unshare(0x62040200) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="c97d2abd7200fbdbdf2531000000080001002900000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00R\x00', @ANYRES32=r8], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0x40103e05, &(0x7f00000004c0)={""/32, 0x0, 0x0, 0x2e, 0x0, 0x0}) 5.573728809s ago: executing program 3 (id=2908): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SYMLINKAT={0x26, 0x40, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000007301310000000000950000000000000085be803b6dbc2c7cc34fc4df8408654bb17a35dc299920cfeb63acbad3e0e0f93c7550c304c97e5fb17958627cd753cae5d82c5164c6b4849a14261578f71a43df"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$cdrom(0xffffff9c, &(0x7f0000002d80), 0xc00, 0x0) ioctl$CDROMREADRAW(r4, 0x5314, &(0x7f0000002dc0)={0x0, 0x0, 0x24, 0x4, 0x8, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r5, 0x40045431, &(0x7f00000001c0)) ioctl$VIDIOC_S_EDID(r0, 0xc0245629, &(0x7f0000000280)={0x0, 0x40, 0x9, '\x00', &(0x7f0000000080)=0x7e}) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000002c0)={0x3, 0x1, 0x1}) 5.573448747s ago: executing program 3 (id=2909): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000005c0)={0x8000, 0xc2cf, 0xfffffffc, 0x4, 0xd, "00e4fdab790000fb00"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYRES8=r1], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0xfe}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) io_setup(0x20fe, &(0x7f00000001c0)) 4.874552809s ago: executing program 2 (id=2913): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r6) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r7, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4040054) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x20, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x4, 0x610c3}}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x4008040) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r8, 0xc4c03d12, &(0x7f00000000c0)={{0x1900000000000000}, {}, 0x0, 0x8}) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000000)=0xd84, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002000000000000000000000006001d004e210000080019"], 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r10 = accept4(r9, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/128, 0x80}, {&(0x7f00000001c0)=""/25, 0x19}], 0x2}, 0x10000000}], 0x2, 0x0, 0x0) 4.428426082s ago: executing program 3 (id=2914): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)=0x0) ioprio_set$pid(0x2, r2, 0x4007) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002fc0)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000042c0)=@newtfilter={0x248, 0x2c, 0xd2f, 0x287, 0xfffffffc, {0x0, 0x0, 0x0, r4, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x214, 0x2, [@TCA_MATCHALL_ACT={0x19c, 0x2, [@m_skbmod={0x38, 0x1b, 0x0, 0x0, {{0xb}, {0x4}, {0xc, 0x6, "7896acb08b49aeee"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x30, 0x4, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6, 0x3}}}}, @m_ctinfo={0x30, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x84, 0x17, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x9, 0x4, 0x4, 0xd5}, 0x2a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x2, 0x1, 0x6, 0x3}, 0x23}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x3, 0x1, 0x0, 0x5}, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_simple={0x50, 0x3, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, '}!#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x810, 0x0, 0x20000000, 0x1, 0x81}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_MATCHALL_ACT={0x6c, 0x2, [@m_bpf={0x68, 0x1c, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0x12, 0x6, './file0/file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xffff}}]}}]}, 0x248}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv4_newroute={0x74, 0x18, 0x1, 0x0, 0x1, {0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x50, 0x16, 0x0, 0x1, @SEG6_LOCAL_SRH={0x4c, 0x2, {0x0, 0x8, 0x4, 0x4, 0x6, 0x10, 0x5, [@loopback, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0]}}}]}, 0x74}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_control_io(r10, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0x19}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x80) 4.012298161s ago: executing program 2 (id=2919): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x3, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000cc0)=ANY=[@ANYRES16, @ANYRESOCT=0x0, @ANYBLOB="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", @ANYBLOB="d9b4acb560963f4ebeedcf8eaf5f0ad2080341ca0718a3758e6dc12e300350ea22a80adbc10847df593e1282a2331d6054421e66c10f6f218a7488476621e903cc10d0d01ee8fcd10215a81a33e734daa084752e43e6ba3c4c812fa3aca3ac5dc19de9a36a4e4c2d603fa718fb1427bc885c60e2d96b3d424c0454f65858e45e09dc3c9de4db85d9e53413c620669447936482bffa50635a0ad4a026ed8f257196a982129a30a29c84e6708aa42049a7dff9ec7b6dcdf03c79dfb6b4e044917ff1eb9375ffc06e708e4f6e4b12102f919eb581"], &(0x7f0000000000)='GPL\x00', 0x5, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="02000000a27168e0a4c606000000"], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002000010300000000000000000800060000000000"], 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4800000020000103000000000000000002001400000000000000000008000200ac1414bb08000d00000000000800ed4162f5dc3b9d76129b77bce1bad70b00030000001400030070"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4d801) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="04040000000000000600"/24], 0xd) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, &(0x7f0000000340)=@arm64={0x0, 0x2, 0xfd, '\x00', 0x3}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000380)=@x86={0x6, 0x3, 0x58, 0x0, 0x6, 0x3, 0x7, 0x8, 0x0, 0x5, 0xb, 0x7, 0x0, 0x4, 0xe, 0x40, 0x5, 0x4, 0x2, '\x00', 0x9, 0xffff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x17, 0x0, 0x0}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r9 = io_uring_setup(0x2195, &(0x7f0000000080)={0x0, 0x7899, 0x400, 0x1, 0x232}) io_uring_register$IORING_REGISTER_NAPI(r9, 0x1b, &(0x7f0000000240)={0x1ff, 0x2}, 0x1) 3.337569359s ago: executing program 3 (id=2921): r0 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {}, {}, {}, {}, {0xfffffffc}, {0x400000}], 0x0, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x44040000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x40045731, 0x0) r3 = memfd_create(0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000037000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000015000000850000000500000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) lseek(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x0, 0x0}}, 0xfc36) 3.336975589s ago: executing program 1 (id=2923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640000a00000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000000) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) fchown(r10, 0xffffffffffffffff, 0x0) mq_getsetattr(r9, &(0x7f0000000080)={0x0, 0x20006, 0x1830, 0x6}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x13) 3.223939869s ago: executing program 1 (id=2924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000106000000ffffffffffffff9e0a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a3000000100090003"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0xd8}, 0x0) 3.073993409s ago: executing program 1 (id=2925): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x2, "5660359c36ad7d48ed510000000000000001000000ddffffffffffffff00"}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00'}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x586f, 0x772882271eeec2f6}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x0, 0x0, 0x8, 0x5, 0xb57, 0x5e, 0x3, 0x0, 0x4, 'syz0\x00'}) shutdown(r2, 0x1) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x85e1, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000030000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) unshare(0x62040200) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="c97d2abd7200fbdbdf2531000000080001002900000008000300", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=r7], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0x40103e05, &(0x7f00000004c0)={""/32, 0x0, 0x0, 0x2e, 0x0, 0x0}) 3.073170697s ago: executing program 0 (id=2926): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x0, {0x7a}}, 0x14}}, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="141d0000060601020000f3ff000000000500000a287d56d2098c33ce5ff024518f22107a6b693996417a294fadff74cb76a82a21535361bdca03bc97a71299e90cc2e90d8421d96e51", @ANYRESOCT=r0], 0x14}}, 0x8000) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x4800) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800600010000000000000000000c00010000000000000000000c00010000000000000000000c000100000000000000000008000500", @ANYRES32=0x0, @ANYBLOB="84b82b1e1f43d8a68f5f10a88ac4ef3d7b4a5c8f7a0600000000000000529a6e4ec3fdf1f464dc56c3f96818851426862df3c20dedd4559a0e5a3f1d1a8e71970bdc5ecc767d282d999be689c040f72ebfd40b95451836339c792b39a0a6a2056ac7c42071e2f99a5c702b7088e656fa1986989dbe99b6f90cf05de7c711dbebd7c412f5f4cdf75fd864cb948849b4e0ff6e7fe5aee440fe93c47d0cb0a04be9e05d48431583bebf6afbec350d6351c0c1b5940830e94ba4228d41f0dd34d00ff74667ea5ded948d0d0513629499fca025fa32b14115340c5d8eb4ab5aea1fe37a170000000000000000"], 0x78}, 0x1, 0xba01}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400400010000104020000cc962c6b546e030000", @ANYRES32=r6, @ANYBLOB="00000000020000003400128009000100626f6e6400000000240002800800030004000400050006000000000008000f000000000005000d0001000000"], 0x54}}, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0x0, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.951002043s ago: executing program 1 (id=2927): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r6) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r7, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4040054) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x20, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x4, 0x610c3}}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x4008040) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r8, 0xc4c03d12, &(0x7f00000000c0)={{0x1900000000000000}, {}, 0x0, 0x8}) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000000)=0xd84, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002000000000000000000000006001d004e210000080019"], 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r10 = accept4(r9, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/128, 0x80}, {&(0x7f00000001c0)=""/25, 0x19}], 0x2}, 0x10000000}], 0x2, 0x0, 0x0) 2.694940257s ago: executing program 0 (id=2928): eventfd(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x6) r0 = getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_pidfd_open(r0, 0x0) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000d00", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 2.234714984s ago: executing program 0 (id=2929): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fsopen(0x0, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f8000000160001000000000000000000ff01000000000000000000000000000100000000000000000000ffffffffffff00000000000000000000802000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0100000000000000000000000000010000"], 0xf8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc000000000000000000000000000000000000000000000000000000000000f0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r1, 0x0) epoll_wait(r8, &(0x7f0000000340)=[{}], 0x1, 0x1000) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x15, 0x5, 0x0) 1.964625246s ago: executing program 1 (id=2930): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)=0x0) ioprio_set$pid(0x2, r2, 0x4007) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002fc0)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000042c0)=@newtfilter={0x248, 0x2c, 0xd2f, 0x287, 0xfffffffc, {0x0, 0x0, 0x0, r4, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x214, 0x2, [@TCA_MATCHALL_ACT={0x19c, 0x2, [@m_skbmod={0x38, 0x1b, 0x0, 0x0, {{0xb}, {0x4}, {0xc, 0x6, "7896acb08b49aeee"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x30, 0x4, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6, 0x3}}}}, @m_ctinfo={0x30, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x84, 0x17, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x9, 0x4, 0x4, 0xd5}, 0x2a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x2, 0x1, 0x6, 0x3}, 0x23}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x3, 0x1, 0x0, 0x5}, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_simple={0x50, 0x3, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, '}!#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x810, 0x0, 0x20000000, 0x1, 0x81}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_MATCHALL_ACT={0x6c, 0x2, [@m_bpf={0x68, 0x1c, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0x12, 0x6, './file0/file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xffff}}]}}]}, 0x248}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv4_newroute={0x74, 0x18, 0x1, 0x0, 0x1, {0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x50, 0x16, 0x0, 0x1, @SEG6_LOCAL_SRH={0x4c, 0x2, {0x0, 0x8, 0x4, 0x4, 0x6, 0x10, 0x5, [@loopback, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0]}}}]}, 0x74}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_control_io(r10, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0x19}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x80) 1.784748555s ago: executing program 2 (id=2931): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r2 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000000)={0x0, 0x3, 0x5, &(0x7f0000000040)={0x1, "fd5a44512b7e1b00bb4301002785000000080083ef10000000000000000000f3ff"}}) 1.313608836s ago: executing program 0 (id=2932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640000a00000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000000) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) fchown(r10, 0xffffffffffffffff, 0x0) mq_getsetattr(r9, &(0x7f0000000080)={0x0, 0x20006, 0x1830, 0x6}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x13) 1.313163057s ago: executing program 0 (id=2933): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$FS_IOC_GETVERSION(r2, 0x80047601, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e04e04020"], 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) close(r5) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000100)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x66}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.254890367s ago: executing program 2 (id=2934): r0 = mmap$IORING_OFF_CQ_RING(&(0x7f00009cb000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5708, &(0x7f0000000180)={0x0, 0x67, 0x400, 0x2, 0x346}, &(0x7f0000000280), &(0x7f0000000300)=0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000780)=@IORING_OP_WRITEV={0x2, 0x2, 0x7, @fd, 0x5, &(0x7f0000000740)=[{&(0x7f0000000340)="f23afe57a11480e346ef149fb66a56bba0f830c33680a5cf26c6408b07d3c344214a1492da6e96b40ba84917be4a2e99536b7e28abc01a6b96", 0x39}, {&(0x7f0000000380)="1d8755af97e57bab466d068ccd5d11695b78", 0x12}, {&(0x7f0000000400)="7f818328af264a51c32320d4edf33a1221711d16b128920f771603d95a18b1aff0ee0fce77f4887a19141f084dc206a9a8afd092c5eb46165778ea6b289af55ccde011d2981ee6e24f6b9b14c6af9edb84f0a46d989a08e1dd92ec2b30ae93ef54bf5e1a90aac05b9858452779b45360c67878b27f1e09ec0cd85fde4848b863400e38697071", 0x86}, {&(0x7f00000004c0)="3de288320c5cea9887530aefbda8328fdc6a2fc32f7f117456d82922044800123914025b5dcb0ddf4096a9cb71667a0206ae63d093eabbd67d7409fd5dd3ff757fd997fc2a755f15ce78b9801389ddec25dd73830d", 0x55}, {&(0x7f0000000540)="ef3786e8d1584eb2b7d8e0a005ae371bb6540e26fd469a3411f74468", 0x1c}, {&(0x7f0000000580)="cbf7052abb9c7ae6c89a5c981c97fb329806bfe87e7507374cb69bb67f9ab3e9426bf31072b7f88c3cf194c3", 0x2c}, {&(0x7f00000005c0)="b8045b7cbb6463a2b94d34e120cd36601234f64e820cd6d3a0f0edf57978f07a4f26fb00bbe35b67628267ea883c8df6b4c44d8d2c77d5202bcb353b5d72dd7a7756113353f01715f682a677d03afd76a0b549bc9a079323c438b8fb835c60f8d38efc05d37af4e2416351def82400168518730ef5ededc91028b5f5ea9951c7344bc3a95052f572a55e", 0x8a}, {&(0x7f0000000680)="2e064b885ecbb9b057bee88e8e484a9bf1ba9c79ee628e995fcbdbeec460a685219225c80b4454470c1b3ada3af7f87fd01de126721ce1fc2635d61f169c5370a4e66b3877135dac179bf746f735e246dea1de8f2a229919ab9ee26afa6750c7eed737f3625b3c3f8e4e9bcd77d7be6f7ac4bbfefed44561a726c3a0d554afdef113e9f6362c063dd6d0fac5db605169757dce468ddf3cbc8899a330b15a486d393d77fad0aa23afe22ead2a85a33cd7", 0xb0}], 0x8, 0x6, 0x1, {0x0, r2}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r3 = landlock_create_ruleset(&(0x7f00000007c0)={0x4, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) setfsuid(0xee00) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x2, @pix_mp={0x5, 0x7, 0x64737664, 0x5, 0x0, [{0x290f, 0x5}, {0x8000, 0x2}, {0xfffffffd, 0x8}, {0x2, 0x7}, {0x80000000, 0x8000}, {0x1}, {0x401, 0x9}, {0x3, 0x2}], 0x4, 0x4, 0x1, 0x0, 0x1}}}) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac0800010000000000090002"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x200, 0x807c2, 0x41414770, 0x8, 0x425, 0x10004, 0x6, 0x2, 0xfeedcafe, 0x3, 0x2, 0x1}}) 704.38393ms ago: executing program 1 (id=2935): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0x2}, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xc0) getdents(r8, &(0x7f00000002c0)=""/31, 0x1f) getdents(r8, &(0x7f00000000c0)=""/201, 0xc9) socket$caif_seqpacket(0x25, 0x5, 0x2) sendmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)="7ca213fa09646f936c093275a3fe6e03c938c5d1e9286274386a08516e1e9aebdf3573767fec202fad5ccfb31dedf411d5523d8e6269a5ad9283306ce5167b8255ffb570e519070fb1020654dc6870006611f5a09a2bc1c6e2e86abaa3acfed454a3c63462790ab7fac910c19f9355ea828286669ff22c9e7164f2a41343d82e184440be41738886da39919540f1f183e51b775db28b0186bad824400a7a6c763e15576d99fc13c306db87bbca48ab7688f09b6aa73382553c2707a5ba016f4df33c9e144dc797f6022dd9cd3745e7c86680bf1b21ff", 0xd6}, {&(0x7f00000004c0)="bef6856f12cb5838473d41dc84dd16d223e32d30c09f1f0c132ae1b047114048b4c69b53146700ccb46dcf0174", 0x2d}, {&(0x7f0000000500)="5b7280412d8663234faf3f233490616c7f3c19452eefc6fffbb520c9cfa3f91c2ef5b9ffa314102038e3611b136920cbf8e969f30319942c25fc97f82d234b2eec9fec7a3064e37264081e1b8c476fd07c5a3cf16f6df47c", 0x58}, {&(0x7f0000000580)="9a87cacbf609a0baeabcf9c366757ae19fc05a53fae7a1f1aef9e18f04e53c6453220a7fc306b8c063f3fbb171bbac32dd9b89425b3277005050ca29daa59cd22a2d679a168367aba5de6aa3c5ae565ac958bf0aa34b6cfcc8848d26fd423e438d439e7e00f27e7239", 0x69}, {&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000003580)="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", 0x1002}], 0x6, &(0x7f0000000640)=[{0xd4, 0x103, 0x7, "73f3543d8043fa17b03ab310134d90c04683dcb5448ec65f2b804ee73d34abb5545e023d1d050f89dd5a0d5401d1c205a451a0f1b18f15045465312290c7e91082b8417cf45a15f3f7785c628dd07078c95e939d02df1d5ae502252c3a39ccb7e9b0ce6af98b7287b10d209a34e8f4d3ed1f7d7e8aba0baabe0786b9fb9fd385fddbba5dd07ea14d35aafc1dd6f870d652eb1e2e65e696602d9487ac3d4a48db8fd7cfeab67dbc1cfc12d181624a6920dd9b3f196157140fe8bd385000d64baa09dd5183700f"}, {0xb4, 0x102, 0x7, "a9db7277b40ffbfc0e044d993cdc34c80bb12436e42cdc0b0e312520db2eb730a0e1f56105c044c359c8782ff6ffd60a0fb68c6facf9e52138e82d001604f4f503c028f7fbe4ff070000000000009bf26135f6604a5a5da094a917dbea5ca534a82b931c5123d406052bd48f33a9247088b9afec6db22d8e6414eadfd9a0b1eb1b70cd82dad8165e779c3fc52141d4aeff5a7ea10bbdf47b7d527ece943401c92e04000000224f"}, {0xa4, 0x0, 0xc5, "93e1abdf3d31256ea480168e6601afe3b4bca227573c81c4c07cae0dfddb82189cdd1ecaa46596f04cc495ca4570b22d2ee5fa64db8190e77d85d8b9231dae66843141f148109d2e7362e9c964eba38a4cf3e58fda53653b1eb27ca214fa301fbb08e61dcc2cfaf5cd38cf6b2a970f17506222d1a8e1baca0dd4475804cd3b4ce4dcd89ee59b0fa29af5daf3ec476fbc606a02f8efa1"}], 0x22c}}], 0x1, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000dc0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0) 703.961901ms ago: executing program 2 (id=2936): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000291524d18dccd8bbf5513ac59d61810e8743e4d9e38caa9aba4f7521a7a43f34e951e0ea25707f982d9e4daa489c074b4499e00cc0d4900f950c69943ee6e01096b897566ea98ef39ad8664c9c10b23ef0e5788210c776c422c763db60bd5bed8edebe89c2118cd0a29773d62a39b11aec7fceab17297f0c47ad2820568cfcb0107c613327431837", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2, 0x1}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) sendfile(r2, r3, 0x0, 0x7ffff000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xe, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003d0009000000000000000000010000000400000014000180100010800c0000000900000000000000080002"], 0x34}}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000021401002abd700002dcdf2508000100e80000000900020073797a3200000095ae583404e6e79ab96d630034783de3d7b6d1d543485266b811f4a40a1b98696ccdeb9615a44c0dbbeb6d51202d9760139599bb99db1ae7e6077bd163626e596f1287fef5164fe3881fbc77a53ecadcdf725a498cb4318fffd0b5750b449abedfd2799d924c65d2706c3f9d0e8301311af06d8617cdfe271affccc5bee0a8ab11f02a024e47102b1be5c02f08f9a6482d12db654c4442cc9b2dab6edf858c09f388b293fbfd93f697aef34d408c5e4caf2df18abd4fdba8f164a09d674071312c26b6a7f744f368cbe06ac1b098a7c92cf9ad42c820d04537687c2edd9a0d4d1d53d3"], 0x24}, 0x1, 0x0, 0x0, 0x4004815}, 0x40810) 149.523646ms ago: executing program 0 (id=2937): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$FS_IOC_GETVERSION(r2, 0x80047601, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e04e04020"], 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) close(r5) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x66}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 0s ago: executing program 3 (id=2938): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r6) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r7, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4040054) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x20, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x4, 0x610c3}}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x4008040) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r8, 0xc4c03d12, &(0x7f00000000c0)={{0x1900000000000000}, {}, 0x0, 0x8}) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000000)=0xd84, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002000000000000000000000006001d004e210000080019"], 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r10 = accept4(r9, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/128, 0x80}, {&(0x7f00000001c0)=""/25, 0x19}], 0x2}, 0x10000000}], 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): 79 code=0x7ffc0000 [ 406.001395][ T39] audit: type=1326 audit(1738405601.604:6035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14681 comm="syz.1.2455" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 406.009343][ T39] audit: type=1326 audit(1738405601.604:6036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14681 comm="syz.1.2455" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 406.017314][ T39] audit: type=1326 audit(1738405601.604:6037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14681 comm="syz.1.2455" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 406.025612][ T39] audit: type=1326 audit(1738405601.604:6038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14681 comm="syz.1.2455" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 406.033764][ T39] audit: type=1326 audit(1738405601.604:6039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14681 comm="syz.1.2455" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 406.041663][ T39] audit: type=1326 audit(1738405601.604:6040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14681 comm="syz.1.2455" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 406.051268][T14686] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 406.263319][ T5965] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 406.268248][ T5965] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 406.271147][ T5965] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 406.276896][ T5965] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 406.279377][ T5965] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 406.281596][ T5965] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 406.300471][T14693] lo speed is unknown, defaulting to 1000 [ 406.302817][T14693] lo speed is unknown, defaulting to 1000 [ 406.355460][T14697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2458'. [ 406.385170][T14693] chnl_net:caif_netlink_parms(): no params data found [ 406.426934][T14707] No such timeout policy "syz1" [ 406.443860][T14709] 9pnet_fd: Insufficient options for proto=fd [ 406.456020][T14693] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.459052][T14693] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.462300][T14693] bridge_slave_0: entered allmulticast mode [ 406.465576][T14693] bridge_slave_0: entered promiscuous mode [ 406.468259][T14693] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.470369][T14693] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.472592][T14693] bridge_slave_1: entered allmulticast mode [ 406.475032][T14693] bridge_slave_1: entered promiscuous mode [ 406.496009][T14693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.499828][T14693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.525659][T14712] 9pnet_fd: Insufficient options for proto=fd [ 406.527849][T14693] team0: Port device team_slave_0 added [ 406.532538][T14693] team0: Port device team_slave_1 added [ 406.556916][T14693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.559214][T14693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.569745][T14693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.574328][T14693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.576441][T14693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.584250][T14693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.651077][T14693] hsr_slave_0: entered promiscuous mode [ 406.653351][T14715] siw: device registration error -23 [ 406.659234][T14693] hsr_slave_1: entered promiscuous mode [ 406.666577][T14693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.670845][T14693] Cannot create hsr debugfs directory [ 406.847541][T14716] siw: device registration error -23 [ 406.851738][ T5954] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 406.857379][ T5954] Bluetooth: hci4: Injecting HCI hardware error event [ 406.863829][ T5965] Bluetooth: hci4: hardware error 0x00 [ 406.963919][T14693] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.998418][T14719] vlan2: entered promiscuous mode [ 407.000114][T14719] vlan2: entered allmulticast mode [ 407.001737][T14719] hsr_slave_1: entered allmulticast mode [ 407.008699][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2462'. [ 407.096142][T14719] hsr_slave_1 (unregistering): left allmulticast mode [ 407.108053][T14719] hsr_slave_1 (unregistering): left promiscuous mode [ 407.118628][T14693] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.193052][T14693] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.290359][T14693] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.406119][T14693] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 407.409469][T14693] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 407.412662][T14693] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 407.415847][T14693] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 407.456026][T14693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.466011][T14693] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.472401][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.474444][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.481722][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.483889][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.600080][T14693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.619464][T14693] veth0_vlan: entered promiscuous mode [ 407.626010][T14693] veth1_vlan: entered promiscuous mode [ 407.644067][T14693] veth0_macvtap: entered promiscuous mode [ 407.648210][T14693] veth1_macvtap: entered promiscuous mode [ 407.656840][T14693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.660583][T14693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.662052][ T835] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 407.665075][T14693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.669783][T14693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.673305][T14693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.676397][T14693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.679602][T14693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.682711][T14693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.685998][T14693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.690593][T14693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.697422][T14693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.700171][T14693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.703737][T14693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.706560][T14693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.709795][T14693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.712906][T14693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.715892][T14693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.720535][T14693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.726895][T14693] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.729506][T14693] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.732197][T14693] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.735004][T14693] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.768677][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.772286][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.783978][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.786452][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.833449][ T835] usb 7-1: Using ep0 maxpacket: 16 [ 407.951547][ T835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.954907][ T835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1296, setting to 1024 [ 407.958953][ T835] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 407.963287][ T835] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 407.966028][ T835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.969594][ T835] usb 7-1: config 0 descriptor?? [ 407.971647][T14724] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 408.014114][ T5954] Bluetooth: hci0: SCO packet for unknown connection handle 768 [ 408.084420][T14744] can0: slcan on ttyS3. [ 408.338885][ T835] usbhid 7-1:0.0: can't add hid device: -71 [ 408.340671][ T835] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 408.353059][ T835] usb 7-1: USB disconnect, device number 53 [ 408.372344][ T5954] Bluetooth: hci0: command tx timeout [ 408.494825][T14758] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2468'. [ 408.502901][T14760] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 408.521186][T14760] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 408.524692][T14760] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 408.528841][T14760] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 408.533515][T14760] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 408.536430][T14760] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 408.555869][T14757] lo speed is unknown, defaulting to 1000 [ 408.557999][T14757] lo speed is unknown, defaulting to 1000 [ 408.618059][T14757] chnl_net:caif_netlink_parms(): no params data found [ 408.673042][T14757] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.676075][T14757] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.679074][T14757] bridge_slave_0: entered allmulticast mode [ 408.682336][T14757] bridge_slave_0: entered promiscuous mode [ 408.686370][T14757] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.689298][T14757] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.692897][T14757] bridge_slave_1: entered allmulticast mode [ 408.696252][T14757] bridge_slave_1: entered promiscuous mode [ 408.768224][T14757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.775893][T14757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.806650][T14757] team0: Port device team_slave_0 added [ 408.809857][T14757] team0: Port device team_slave_1 added [ 408.826515][T14740] can0 (unregistered): slcan off ttyS3. [ 408.845986][T14757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.848072][T14757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.857015][T14775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2470'. [ 408.859930][T14757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.866964][T14757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.869830][T14757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.879640][T14757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.923776][ T5965] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 408.948623][T14757] hsr_slave_0: entered promiscuous mode [ 408.951508][T14757] hsr_slave_1: entered promiscuous mode [ 408.978573][T14757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 408.980837][T14757] Cannot create hsr debugfs directory [ 409.213899][T14757] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.267473][T14792] lo speed is unknown, defaulting to 1000 [ 409.312483][T14757] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.352137][T14792] lo speed is unknown, defaulting to 1000 [ 409.730561][T14804] __nla_validate_parse: 1 callbacks suppressed [ 409.730578][T14804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2475'. [ 409.740272][T14804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2475'. [ 409.749657][T14757] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.874055][T14757] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.998031][T14757] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 410.003869][T14757] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 410.026443][T14757] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 410.028637][T14813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2477'. [ 410.054468][T14757] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 410.117251][T14818] openvswitch: netlink: Actions may not be safe on all matching packets [ 410.137934][T14757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.154704][T14757] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.159680][ T215] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.161756][ T215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.179844][ T215] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.181940][ T215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.332685][T14818] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 410.340138][T14757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.342859][T14818] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 410.352801][T14818] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 410.362533][T14818] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 410.364291][T14818] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 410.369631][T14757] veth0_vlan: entered promiscuous mode [ 410.379297][T14818] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 410.389696][T14757] veth1_vlan: entered promiscuous mode [ 410.410857][T14757] veth0_macvtap: entered promiscuous mode [ 410.418768][T14757] veth1_macvtap: entered promiscuous mode [ 410.435139][T14757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.445912][T14757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.448880][T14757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.453396][T14818] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 410.455181][T14818] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 410.457062][T14757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.462229][T14757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.465230][T14757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.472527][T14757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.475491][T14757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.482545][T14757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.485395][T14757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.500241][T14757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.504129][T14818] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 410.509456][T14757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.519506][T14757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.525944][T14757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.528939][T14757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.535616][T14757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.538762][T14757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.546805][T14757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.549878][T14757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.553497][T14757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.559150][T14757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.567920][T14757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.573588][T14757] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.577838][T14757] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.581168][T14757] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.583933][T14757] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.631431][T13584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.640473][T13584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.655463][ T215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.657712][ T215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.728933][T14829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2469'. [ 410.739618][T14829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2469'. [ 410.751352][T14829] bridge0: entered promiscuous mode [ 410.753567][T14829] ip6gretap0: entered promiscuous mode [ 410.755665][T14829] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 410.757989][T14829] Cannot create hsr debugfs directory [ 410.787088][T14820] FAULT_INJECTION: forcing a failure. [ 410.787088][T14820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.797137][T14820] CPU: 3 UID: 0 PID: 14820 Comm: syz.1.2478 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 410.797153][T14820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 410.797160][T14820] Call Trace: [ 410.797165][T14820] [ 410.797172][T14820] dump_stack_lvl+0x16c/0x1f0 [ 410.797289][T14820] should_fail_ex+0x50a/0x650 [ 410.797322][T14820] _copy_to_user+0x32/0xd0 [ 410.797341][T14820] simple_read_from_buffer+0xd0/0x160 [ 410.797368][T14820] proc_fail_nth_read+0x198/0x270 [ 410.797384][T14820] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 410.797399][T14820] ? rw_verify_area+0xcf/0x680 [ 410.797413][T14820] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 410.797429][T14820] vfs_read+0x1df/0xbf0 [ 410.797445][T14820] ? __fget_files+0x1fc/0x3a0 [ 410.797462][T14820] ? __pfx___mutex_lock+0x10/0x10 [ 410.797480][T14820] ? __pfx_vfs_read+0x10/0x10 [ 410.797492][T14820] ? __fget_files+0x206/0x3a0 [ 410.797506][T14820] ksys_read+0x12b/0x250 [ 410.797515][T14820] ? __pfx_ksys_read+0x10/0x10 [ 410.797528][T14820] __do_fast_syscall_32+0x73/0x120 [ 410.797544][T14820] do_fast_syscall_32+0x32/0x80 [ 410.797558][T14820] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 410.797574][T14820] RIP: 0023:0xf746e579 [ 410.797582][T14820] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 410.797591][T14820] RSP: 002b:00000000f50b4590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 410.797601][T14820] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f50b4620 [ 410.797607][T14820] RDX: 000000000000000f RSI: 00000000f745cff4 RDI: 0000000000000000 [ 410.797612][T14820] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 410.797617][T14820] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 410.797622][T14820] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 410.797633][T14820] [ 411.478199][T14853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2487'. [ 412.166118][ T39] kauditd_printk_skb: 15 callbacks suppressed [ 412.166129][ T39] audit: type=1326 audit(1738405607.814:6056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14858 comm="syz.0.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 412.174793][ T39] audit: type=1326 audit(1738405607.814:6057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14858 comm="syz.0.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 412.175453][T14859] lo speed is unknown, defaulting to 1000 [ 412.181072][ T39] audit: type=1326 audit(1738405607.814:6058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14858 comm="syz.0.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 412.189016][ T39] audit: type=1326 audit(1738405607.814:6059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14858 comm="syz.0.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 412.192748][T14859] lo speed is unknown, defaulting to 1000 [ 412.195713][ T39] audit: type=1326 audit(1738405607.814:6060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14858 comm="syz.0.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 412.203835][ T39] audit: type=1326 audit(1738405607.814:6061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14858 comm="syz.0.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 412.210095][ T39] audit: type=1326 audit(1738405607.814:6062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14858 comm="syz.0.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 412.219029][ T39] audit: type=1326 audit(1738405607.814:6063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14858 comm="syz.0.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 412.226037][ T39] audit: type=1326 audit(1738405607.814:6064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14858 comm="syz.0.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 412.232498][ T39] audit: type=1326 audit(1738405607.814:6065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14858 comm="syz.0.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 412.282122][ T5965] Bluetooth: hci3: command 0x0c1a tx timeout [ 412.290019][T14868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2491'. [ 412.401748][T14876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2495'. [ 412.438618][T14878] blktrace: Concurrent blktraces are not allowed on nbd3 [ 412.452201][ T5965] Bluetooth: hci0: command 0x040f tx timeout [ 412.716749][ T5965] Bluetooth: hci1: command 0x041b tx timeout [ 412.885672][T14893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2500'. [ 412.889186][T14893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2500'. [ 412.895533][T14893] bridge0: entered promiscuous mode [ 412.898387][T14893] ip6gretap0: entered promiscuous mode [ 412.901270][T14893] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 412.904265][T14893] Cannot create hsr debugfs directory [ 413.000247][T14896] g: renamed from vcan0 (while UP) [ 413.874265][T14914] netlink: 'syz.1.2507': attribute type 1 has an invalid length. [ 413.881003][T14914] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 414.354508][T14932] Cannot find add_set index 2 as target [ 414.360233][T14932] vlan2: entered allmulticast mode [ 414.362928][ T5965] Bluetooth: hci3: command 0x0c1a tx timeout [ 414.539797][ T5965] Bluetooth: hci0: command 0x040f tx timeout [ 414.667025][T14941] bond1 (unregistering): Released all slaves [ 414.763605][ T5965] Bluetooth: hci1: command 0x041b tx timeout [ 414.977670][T14950] x_tables: ip_tables: osf match: only valid for protocol 6 [ 415.140905][T14962] 9pnet_fd: Insufficient options for proto=fd [ 415.445478][T14966] siw: device registration error -23 [ 415.862601][T14972] __nla_validate_parse: 7 callbacks suppressed [ 415.862610][T14972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2527'. [ 415.912992][T14973] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2526'. [ 415.965474][T14979] netlink: 'syz.0.2530': attribute type 1 has an invalid length. [ 415.967955][T14979] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2530'. [ 415.971115][T14979] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2530'. [ 415.978435][T14979] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 416.452536][ T5965] Bluetooth: hci3: command 0x0c1a tx timeout [ 416.454477][ T7459] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 416.592418][T15003] x_tables: ip_tables: osf match: only valid for protocol 6 [ 416.602367][ T5965] Bluetooth: hci0: command 0x040f tx timeout [ 416.619532][T15005] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2538'. [ 416.622207][ T7459] usb 5-1: Using ep0 maxpacket: 16 [ 416.624676][T15005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2538'. [ 416.625511][ T7459] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 416.643114][ T7459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.646126][ T7459] usb 5-1: Product: syz [ 416.647828][ T7459] usb 5-1: Manufacturer: syz [ 416.649603][ T7459] usb 5-1: SerialNumber: syz [ 416.652801][ T7459] usb 5-1: config 0 descriptor?? [ 416.661950][ T7459] as10x_usb: device has been detected [ 416.664532][ T7459] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 416.674018][ T7459] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 416.680041][ T7459] as10x_usb: error during firmware upload part1 [ 416.681943][ T7459] Registered device Sky IT Digital Key (green led) [ 416.799005][T15013] 9pnet_fd: Insufficient options for proto=fd [ 416.842769][ T5965] Bluetooth: hci1: command 0x041b tx timeout [ 416.879928][T14997] random: crng reseeded on system resumption [ 416.899684][ T7459] usb 5-1: USB disconnect, device number 30 [ 416.909848][ T7459] Unregistered device Sky IT Digital Key (green led) [ 416.913253][ T7459] as10x_usb: device has been disconnected [ 417.023313][T15018] siw: device registration error -23 [ 417.142196][ T5952] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 417.303402][ T5952] usb 6-1: Using ep0 maxpacket: 16 [ 417.306735][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.310794][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1296, setting to 1024 [ 417.322031][ T5952] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 417.327618][ T5952] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 417.332761][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.335842][T15022] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2543'. [ 417.339237][ T5952] usb 6-1: config 0 descriptor?? [ 417.341155][T15016] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 417.450646][T15024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2544'. [ 417.549529][ T5952] usbhid 6-1:0.0: can't add hid device: -71 [ 417.551254][ T5952] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 417.556505][ T5952] usb 6-1: USB disconnect, device number 28 [ 417.665140][T15036] vlan2: entered promiscuous mode [ 417.666813][T15036] vlan2: entered allmulticast mode [ 417.668455][T15036] hsr_slave_1: entered allmulticast mode [ 417.676758][T15036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2548'. [ 417.722786][ T7459] libceph: connect (1)[c::]:6789 error -101 [ 417.725350][ T7459] libceph: mon0 (1)[c::]:6789 connect error [ 417.748640][ T35] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 417.782853][T15036] hsr_slave_1 (unregistering): left allmulticast mode [ 417.793388][T15036] hsr_slave_1 (unregistering): left promiscuous mode [ 417.902051][ T35] usb 5-1: Using ep0 maxpacket: 16 [ 417.904938][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.908662][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1296, setting to 1024 [ 417.913294][ T35] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 417.918254][ T35] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 417.921845][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.931392][ T35] usb 5-1: config 0 descriptor?? [ 417.934247][T15026] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 417.982791][ T835] libceph: connect (1)[c::]:6789 error -101 [ 417.985158][ T835] libceph: mon0 (1)[c::]:6789 connect error [ 418.139408][ T39] kauditd_printk_skb: 89 callbacks suppressed [ 418.139419][ T39] audit: type=1326 audit(1738405613.784:6155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.3.2551" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f90579 code=0x7ffc0000 [ 418.147598][ T39] audit: type=1326 audit(1738405613.784:6156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.3.2551" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f90579 code=0x7ffc0000 [ 418.156993][ T39] audit: type=1326 audit(1738405613.784:6157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.3.2551" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f90579 code=0x7ffc0000 [ 418.166246][ T39] audit: type=1326 audit(1738405613.804:6158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.3.2551" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f90579 code=0x7ffc0000 [ 418.174077][ T39] audit: type=1326 audit(1738405613.804:6159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.3.2551" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f90579 code=0x7ffc0000 [ 418.182719][ T39] audit: type=1326 audit(1738405613.804:6160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15052 comm="syz.3.2551" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f90579 code=0x7ffc0000 [ 418.191106][ T39] audit: type=1326 audit(1738405613.814:6161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.3.2551" exe="/syz-executor" sig=0 arch=40000003 syscall=270 compat=1 ip=0xf7f90579 code=0x7ffc0000 [ 418.199923][ T39] audit: type=1326 audit(1738405613.814:6162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.3.2551" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f90579 code=0x7ffc0000 [ 418.210374][ T39] audit: type=1326 audit(1738405613.814:6163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.3.2551" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f90579 code=0x7ffc0000 [ 418.210407][ T39] audit: type=1326 audit(1738405613.814:6164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15052 comm="syz.3.2551" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f90598 code=0x7ffc0000 [ 418.245852][ T35] usbhid 5-1:0.0: can't add hid device: -71 [ 418.245903][ T35] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 418.246763][ T35] usb 5-1: USB disconnect, device number 31 [ 418.497250][T15035] ceph: No mds server is up or the cluster is laggy [ 418.503512][ T835] libceph: connect (1)[c::]:6789 error -101 [ 418.505994][ T835] libceph: mon0 (1)[c::]:6789 connect error [ 418.642371][T15068] 9pnet_fd: Insufficient options for proto=fd [ 418.682093][ T5965] Bluetooth: hci0: command 0x040f tx timeout [ 418.925379][T15071] siw: device registration error -23 [ 418.932981][ T5965] Bluetooth: hci1: command 0x041b tx timeout [ 419.324366][T15080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2560'. [ 419.450109][T15090] loop7: detected capacity change from 0 to 16384 [ 419.710669][T15104] vlan2: entered promiscuous mode [ 419.713126][T15104] vlan2: entered allmulticast mode [ 419.714598][T15104] hsr_slave_1: entered allmulticast mode [ 419.722231][T15096] loop7: detected capacity change from 16384 to 16383 [ 419.893380][T15104] hsr_slave_1 (unregistering): left allmulticast mode [ 419.917144][T15104] hsr_slave_1 (unregistering): left promiscuous mode [ 421.664764][ T5965] Bluetooth: hci0: command 0x040f tx timeout [ 421.666996][ T5965] Bluetooth: hci1: command 0x041b tx timeout [ 421.702913][T15137] __nla_validate_parse: 4 callbacks suppressed [ 421.702930][T15137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2576'. [ 421.781576][T15144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2578'. [ 421.847675][T15148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.885941][T15151] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 422.014865][T15148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.469687][T15148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.562496][T15148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.643146][T15162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2582'. [ 422.727761][T15163] xt_time: unknown flags 0xf0 [ 422.731214][T15148] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.751782][T15148] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.774513][T15148] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.783162][T15148] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.524486][T15178] netlink: 'syz.3.2586': attribute type 1 has an invalid length. [ 423.527142][T15178] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2586'. [ 423.529664][T15176] lo speed is unknown, defaulting to 1000 [ 423.530481][T15178] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2586'. [ 423.533738][T15176] lo speed is unknown, defaulting to 1000 [ 423.541589][T15178] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 423.722837][ T5965] Bluetooth: hci1: command 0x041b tx timeout [ 424.333208][T15190] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2589'. [ 424.592085][ T6255] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 424.716468][T15200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2592'. [ 424.742125][ T6255] usb 8-1: Using ep0 maxpacket: 16 [ 424.745663][ T6255] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.748775][ T6255] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1296, setting to 1024 [ 424.757183][ T6255] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 424.760968][ T6255] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 424.765147][ T6255] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.787677][ T6255] usb 8-1: config 0 descriptor?? [ 424.796226][T15192] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 425.030729][ T6255] usbhid 8-1:0.0: can't add hid device: -71 [ 425.032878][ T6255] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 425.043270][ T6255] usb 8-1: USB disconnect, device number 62 [ 425.372680][ T39] kauditd_printk_skb: 45 callbacks suppressed [ 425.372696][ T39] audit: type=1326 audit(1738405621.024:6210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15207 comm="syz.1.2594" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 425.386522][ T39] audit: type=1326 audit(1738405621.034:6211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15207 comm="syz.1.2594" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 425.394249][ T39] audit: type=1326 audit(1738405621.044:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15207 comm="syz.1.2594" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 425.400752][ T39] audit: type=1326 audit(1738405621.044:6213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15207 comm="syz.1.2594" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 425.412196][ T39] audit: type=1326 audit(1738405621.044:6214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15207 comm="syz.1.2594" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 425.419587][ T39] audit: type=1326 audit(1738405621.044:6215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15207 comm="syz.1.2594" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 425.431570][T15208] lo speed is unknown, defaulting to 1000 [ 425.437776][ T39] audit: type=1326 audit(1738405621.044:6216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15207 comm="syz.1.2594" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 425.455139][ T39] audit: type=1326 audit(1738405621.044:6217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15207 comm="syz.1.2594" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 425.462446][T15208] lo speed is unknown, defaulting to 1000 [ 425.469158][ T39] audit: type=1326 audit(1738405621.054:6218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15207 comm="syz.1.2594" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 425.481550][ T39] audit: type=1326 audit(1738405621.054:6219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15207 comm="syz.1.2594" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 426.785362][T15236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2602'. [ 426.920867][T15245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2603'. [ 426.926659][T15245] loop7: detected capacity change from 0 to 16384 [ 427.148178][T15255] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 427.172639][T15248] loop7: detected capacity change from 16384 to 16383 [ 427.234908][T15260] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2608'. [ 427.284701][T15261] lo speed is unknown, defaulting to 1000 [ 427.287369][T15261] lo speed is unknown, defaulting to 1000 [ 427.943268][T15268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2612'. [ 427.946364][T15268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2612'. [ 427.950590][T15268] bridge0: entered promiscuous mode [ 427.953205][T15268] ip6gretap0: entered promiscuous mode [ 427.955217][T15268] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 427.957702][T15268] Cannot create hsr debugfs directory [ 428.061366][T15278] ieee802154 phy0 wpan0: encryption failed: -22 [ 428.105679][T15279] 9pnet_fd: Insufficient options for proto=fd [ 428.260946][T15282] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2616'. [ 428.417727][T15283] siw: device registration error -23 [ 428.640187][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2618'. [ 428.905322][T15295] netlink: 'syz.0.2621': attribute type 1 has an invalid length. [ 428.907604][T15295] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2621'. [ 428.912779][T15295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2621'. [ 428.913416][T15297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2622'. [ 428.917432][T15295] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 430.045939][T15334] FAULT_INJECTION: forcing a failure. [ 430.045939][T15334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.050632][T15334] CPU: 3 UID: 0 PID: 15334 Comm: syz.0.2636 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 430.050645][T15334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 430.050652][T15334] Call Trace: [ 430.050655][T15334] [ 430.050660][T15334] dump_stack_lvl+0x16c/0x1f0 [ 430.050680][T15334] should_fail_ex+0x50a/0x650 [ 430.050694][T15334] _copy_from_user+0x2e/0xd0 [ 430.050707][T15334] get_compat_msghdr+0xa8/0x170 [ 430.050720][T15334] ? __pfx_get_compat_msghdr+0x10/0x10 [ 430.050736][T15334] ___sys_sendmsg+0x1b0/0x1e0 [ 430.050746][T15334] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.050760][T15334] ? __pfx_lock_release+0x10/0x10 [ 430.050772][T15334] ? trace_lock_acquire+0x14e/0x1f0 [ 430.050785][T15334] ? __fget_files+0x206/0x3a0 [ 430.050798][T15334] __sys_sendmsg+0x16e/0x220 [ 430.050808][T15334] ? __pfx___sys_sendmsg+0x10/0x10 [ 430.050825][T15334] __do_fast_syscall_32+0x73/0x120 [ 430.050840][T15334] do_fast_syscall_32+0x32/0x80 [ 430.050855][T15334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 430.050870][T15334] RIP: 0023:0xf7fe2579 [ 430.050878][T15334] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 430.050888][T15334] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 430.050903][T15334] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 430.050909][T15334] RDX: 0000000000040810 RSI: 0000000000000000 RDI: 0000000000000000 [ 430.050915][T15334] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 430.050920][T15334] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 430.050925][T15334] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 430.050936][T15334] [ 430.110997][ C3] vkms_vblank_simulate: vblank timer overrun [ 430.558494][T15356] openvswitch: netlink: IPv6 tunnel dst address is zero [ 430.564740][T15356] fuse: Unknown parameter '0x000000000000000d' [ 431.331906][T15379] g: renamed from vcan0 (while UP) [ 431.488696][T15383] 9pnet_fd: Insufficient options for proto=fd [ 431.719446][T15385] siw: device registration error -23 [ 433.158493][T15414] __nla_validate_parse: 4 callbacks suppressed [ 433.158504][T15414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2659'. [ 433.276208][ T6164] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 433.284193][T15418] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2661'. [ 433.422251][ T6164] usb 5-1: Using ep0 maxpacket: 16 [ 433.425062][ T6164] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.428208][ T6164] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1296, setting to 1024 [ 433.431353][ T6164] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 433.435173][ T6164] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 433.437786][ T6164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.443680][ T6164] usb 5-1: config 0 descriptor?? [ 433.445787][T15409] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 433.564282][ T39] kauditd_printk_skb: 98 callbacks suppressed [ 433.564293][ T39] audit: type=1326 audit(1738405629.214:6318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15427 comm="syz.1.2664" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 433.572398][ T39] audit: type=1326 audit(1738405629.214:6319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15427 comm="syz.1.2664" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 433.576565][T15428] lo speed is unknown, defaulting to 1000 [ 433.580955][ T39] audit: type=1326 audit(1738405629.214:6320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15427 comm="syz.1.2664" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 433.583151][T15428] lo speed is unknown, defaulting to 1000 [ 433.591488][ T39] audit: type=1326 audit(1738405629.214:6321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15427 comm="syz.1.2664" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 433.601502][ T39] audit: type=1326 audit(1738405629.214:6322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15427 comm="syz.1.2664" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 433.608264][ T39] audit: type=1326 audit(1738405629.214:6323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15427 comm="syz.1.2664" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 433.617033][ T39] audit: type=1326 audit(1738405629.214:6324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15427 comm="syz.1.2664" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 433.625478][ T39] audit: type=1326 audit(1738405629.214:6325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15427 comm="syz.1.2664" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 433.633738][ T39] audit: type=1326 audit(1738405629.214:6326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15427 comm="syz.1.2664" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 433.642667][ T39] audit: type=1326 audit(1738405629.214:6327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15427 comm="syz.1.2664" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 433.687638][ T6164] usbhid 5-1:0.0: can't add hid device: -71 [ 433.689552][ T6164] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 433.698427][ T6164] usb 5-1: USB disconnect, device number 32 [ 433.727670][T15435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2666'. [ 433.731085][T15435] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2666'. [ 433.871507][T15453] netlink: 'syz.0.2671': attribute type 1 has an invalid length. [ 433.874077][T15453] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2671'. [ 433.877950][T15453] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2671'. [ 433.883553][T15453] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 434.360125][T15460] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2674'. [ 434.368996][T15460] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2674'. [ 434.943378][T15472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2678'. [ 434.970433][T15474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2679'. [ 435.002232][ T6018] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 435.063795][T15477] xt_time: unknown flags 0xf0 [ 435.202349][ T6018] usb 6-1: Using ep0 maxpacket: 16 [ 435.210612][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.219375][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1296, setting to 1024 [ 435.223637][ T6018] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 435.227526][ T6018] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 435.230161][ T6018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.250488][ T6018] usb 6-1: config 0 descriptor?? [ 435.257218][T15468] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 435.474157][T15487] 9pnet_fd: Insufficient options for proto=fd [ 435.639760][T15491] loop7: detected capacity change from 0 to 16384 [ 435.697536][T15487] lo speed is unknown, defaulting to 1000 [ 435.699618][T15487] lo speed is unknown, defaulting to 1000 [ 435.732678][T15496] FAULT_INJECTION: forcing a failure. [ 435.732678][T15496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.736315][T15496] CPU: 2 UID: 0 PID: 15496 Comm: syz.2.2685 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 435.736328][T15496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 435.736334][T15496] Call Trace: [ 435.736338][T15496] [ 435.736341][T15496] dump_stack_lvl+0x16c/0x1f0 [ 435.736359][T15496] should_fail_ex+0x50a/0x650 [ 435.736373][T15496] _copy_from_iter+0x29b/0x1400 [ 435.736387][T15496] ? trace_lock_acquire+0x14e/0x1f0 [ 435.736397][T15496] ? __alloc_skb+0x200/0x380 [ 435.736413][T15496] ? __pfx__copy_from_iter+0x10/0x10 [ 435.736425][T15496] ? __virt_addr_valid+0x1a4/0x590 [ 435.736436][T15496] ? __virt_addr_valid+0x5e/0x590 [ 435.736445][T15496] ? __phys_addr_symbol+0x30/0x80 [ 435.736458][T15496] ? __check_object_size+0x488/0x710 [ 435.736472][T15496] netlink_sendmsg+0x813/0xd70 [ 435.736488][T15496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.736505][T15496] ____sys_sendmsg+0x9ae/0xb40 [ 435.736518][T15496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 435.736530][T15496] ? get_compat_msghdr+0x11b/0x170 [ 435.736547][T15496] ___sys_sendmsg+0x135/0x1e0 [ 435.736557][T15496] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.736570][T15496] ? __pfx_lock_release+0x10/0x10 [ 435.736586][T15496] ? trace_lock_acquire+0x14e/0x1f0 [ 435.736599][T15496] ? __fget_files+0x206/0x3a0 [ 435.736613][T15496] __sys_sendmsg+0x16e/0x220 [ 435.736622][T15496] ? __pfx___sys_sendmsg+0x10/0x10 [ 435.736638][T15496] __do_fast_syscall_32+0x73/0x120 [ 435.736654][T15496] do_fast_syscall_32+0x32/0x80 [ 435.736668][T15496] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 435.736683][T15496] RIP: 0023:0xf7fe8579 [ 435.736691][T15496] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 435.736700][T15496] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 435.736709][T15496] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 435.736715][T15496] RDX: 0000000000040810 RSI: 0000000000000000 RDI: 0000000000000000 [ 435.736720][T15496] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 435.736725][T15496] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 435.736730][T15496] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 435.736741][T15496] [ 435.878799][T15492] loop7: detected capacity change from 16384 to 16383 [ 435.997806][ T6018] usbhid 6-1:0.0: can't add hid device: -71 [ 436.000108][ T6018] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 436.004069][ T6018] usb 6-1: USB disconnect, device number 29 [ 437.254277][ T6018] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 437.446456][ T6018] usb 7-1: Using ep0 maxpacket: 16 [ 437.449579][ T6018] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.453745][ T6018] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1296, setting to 1024 [ 437.457623][ T6018] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 437.462218][ T6018] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 437.465353][ T6018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.469700][ T6018] usb 7-1: config 0 descriptor?? [ 437.475242][T15529] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 437.577511][T15538] FAULT_INJECTION: forcing a failure. [ 437.577511][T15538] name failslab, interval 1, probability 0, space 0, times 0 [ 437.580602][T15538] CPU: 3 UID: 0 PID: 15538 Comm: syz.3.2699 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 437.580615][T15538] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 437.580620][T15538] Call Trace: [ 437.580624][T15538] [ 437.580628][T15538] dump_stack_lvl+0x16c/0x1f0 [ 437.580646][T15538] should_fail_ex+0x50a/0x650 [ 437.580658][T15538] ? fs_reclaim_acquire+0xae/0x150 [ 437.580674][T15538] should_failslab+0xc2/0x120 [ 437.580686][T15538] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 437.580698][T15538] ? __alloc_skb+0x2b3/0x380 [ 437.580716][T15538] __alloc_skb+0x2b3/0x380 [ 437.580730][T15538] ? __pfx___alloc_skb+0x10/0x10 [ 437.580745][T15538] ? lock_acquire+0x2f/0xb0 [ 437.580760][T15538] netlink_alloc_large_skb+0x69/0x130 [ 437.580775][T15538] netlink_sendmsg+0x689/0xd70 [ 437.580790][T15538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.580807][T15538] ____sys_sendmsg+0x9ae/0xb40 [ 437.580820][T15538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 437.580832][T15538] ? get_compat_msghdr+0x11b/0x170 [ 437.580849][T15538] ___sys_sendmsg+0x135/0x1e0 [ 437.580864][T15538] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.580878][T15538] ? __pfx_lock_release+0x10/0x10 [ 437.580889][T15538] ? trace_lock_acquire+0x14e/0x1f0 [ 437.580902][T15538] ? __fget_files+0x206/0x3a0 [ 437.580915][T15538] __sys_sendmsg+0x16e/0x220 [ 437.580942][T15538] ? __pfx___sys_sendmsg+0x10/0x10 [ 437.580960][T15538] __do_fast_syscall_32+0x73/0x120 [ 437.580975][T15538] do_fast_syscall_32+0x32/0x80 [ 437.580989][T15538] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 437.581004][T15538] RIP: 0023:0xf7f90579 [ 437.581012][T15538] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 437.581021][T15538] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 437.581031][T15538] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 437.581037][T15538] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 437.581042][T15538] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 437.581048][T15538] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 437.581053][T15538] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 437.581064][T15538] [ 437.693619][ T6018] usbhid 7-1:0.0: can't add hid device: -71 [ 437.695472][ T6018] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 437.699554][ T6018] usb 7-1: USB disconnect, device number 54 [ 437.885351][T15547] xt_time: unknown flags 0xf0 [ 437.948334][T15552] FAULT_INJECTION: forcing a failure. [ 437.948334][T15552] name failslab, interval 1, probability 0, space 0, times 0 [ 437.951769][T15552] CPU: 3 UID: 0 PID: 15552 Comm: syz.3.2703 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 437.951782][T15552] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 437.951788][T15552] Call Trace: [ 437.951791][T15552] [ 437.951800][T15552] dump_stack_lvl+0x16c/0x1f0 [ 437.951818][T15552] should_fail_ex+0x50a/0x650 [ 437.951830][T15552] ? fs_reclaim_acquire+0xae/0x150 [ 437.951846][T15552] should_failslab+0xc2/0x120 [ 437.951859][T15552] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 437.951870][T15552] ? __up_read+0x1fb/0x760 [ 437.951882][T15552] ? __alloc_skb+0x2b3/0x380 [ 437.951899][T15552] __alloc_skb+0x2b3/0x380 [ 437.951913][T15552] ? __pfx___alloc_skb+0x10/0x10 [ 437.951932][T15552] netlink_ack+0x164/0xb20 [ 437.951945][T15552] ? __pfx___lock_acquire+0x10/0x10 [ 437.951960][T15552] rdma_nl_rcv_skb.constprop.0.isra.0+0x346/0x450 [ 437.951986][T15552] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 437.952004][T15552] ? netlink_deliver_tap+0x1ae/0xca0 [ 437.952018][T15552] netlink_unicast+0x53c/0x7f0 [ 437.952032][T15552] ? __pfx_netlink_unicast+0x10/0x10 [ 437.952045][T15552] ? __phys_addr_symbol+0x30/0x80 [ 437.952060][T15552] ? __check_object_size+0x488/0x710 [ 437.952074][T15552] netlink_sendmsg+0x8b8/0xd70 [ 437.952088][T15552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.952105][T15552] ____sys_sendmsg+0x9ae/0xb40 [ 437.952118][T15552] ? __pfx_____sys_sendmsg+0x10/0x10 [ 437.952130][T15552] ? get_compat_msghdr+0x11b/0x170 [ 437.952147][T15552] ___sys_sendmsg+0x135/0x1e0 [ 437.952157][T15552] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.952171][T15552] ? __pfx_lock_release+0x10/0x10 [ 437.952182][T15552] ? trace_lock_acquire+0x14e/0x1f0 [ 437.952194][T15552] ? __fget_files+0x206/0x3a0 [ 437.952208][T15552] __sys_sendmsg+0x16e/0x220 [ 437.952217][T15552] ? __pfx___sys_sendmsg+0x10/0x10 [ 437.952234][T15552] __do_fast_syscall_32+0x73/0x120 [ 437.952249][T15552] do_fast_syscall_32+0x32/0x80 [ 437.952263][T15552] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 437.952279][T15552] RIP: 0023:0xf7f90579 [ 437.952287][T15552] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 437.952296][T15552] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 437.952305][T15552] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 437.952311][T15552] RDX: 0000000000040810 RSI: 0000000000000000 RDI: 0000000000000000 [ 437.952316][T15552] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 437.952321][T15552] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 437.952327][T15552] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 437.952337][T15552] [ 438.018566][T15553] lo speed is unknown, defaulting to 1000 [ 438.112887][T15553] lo speed is unknown, defaulting to 1000 [ 439.097258][T15576] __nla_validate_parse: 8 callbacks suppressed [ 439.097294][T15576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2707'. [ 439.320332][T15579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2711'. [ 439.412958][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.415644][ T1412] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.467189][T15585] FAULT_INJECTION: forcing a failure. [ 439.467189][T15585] name failslab, interval 1, probability 0, space 0, times 0 [ 439.472409][T15585] CPU: 3 UID: 0 PID: 15585 Comm: syz.2.2714 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 439.472429][T15585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 439.472440][T15585] Call Trace: [ 439.472445][T15585] [ 439.472452][T15585] dump_stack_lvl+0x16c/0x1f0 [ 439.472481][T15585] should_fail_ex+0x50a/0x650 [ 439.472500][T15585] ? fs_reclaim_acquire+0xae/0x150 [ 439.472528][T15585] should_failslab+0xc2/0x120 [ 439.472548][T15585] __kmalloc_noprof+0xce/0x4f0 [ 439.472568][T15585] ? tomoyo_encode2+0x100/0x3e0 [ 439.472591][T15585] tomoyo_encode2+0x100/0x3e0 [ 439.472613][T15585] tomoyo_realpath_from_path+0x1a7/0x710 [ 439.472641][T15585] ? tomoyo_path_number_perm+0x235/0x5b0 [ 439.472660][T15585] tomoyo_path_number_perm+0x248/0x5b0 [ 439.472675][T15585] ? tomoyo_path_number_perm+0x235/0x5b0 [ 439.472693][T15585] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 439.472730][T15585] ? __pfx_lock_release+0x10/0x10 [ 439.472749][T15585] ? trace_lock_acquire+0x14e/0x1f0 [ 439.472768][T15585] ? lock_acquire+0x2f/0xb0 [ 439.472785][T15585] ? __fget_files+0x40/0x3a0 [ 439.472806][T15585] ? __fget_files+0x206/0x3a0 [ 439.472826][T15585] security_file_ioctl_compat+0x9b/0x240 [ 439.472846][T15585] __do_compat_sys_ioctl+0x4e/0x2c0 [ 439.472873][T15585] __do_fast_syscall_32+0x73/0x120 [ 439.472899][T15585] do_fast_syscall_32+0x32/0x80 [ 439.472944][T15585] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 439.472969][T15585] RIP: 0023:0xf7fe8579 [ 439.472980][T15585] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 439.472995][T15585] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 439.473010][T15585] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 439.473019][T15585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 439.473028][T15585] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 439.473037][T15585] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 439.473046][T15585] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 439.473068][T15585] [ 439.473081][T15585] ERROR: Out of memory at tomoyo_realpath_from_path. [ 439.713317][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 439.713327][ T39] audit: type=1326 audit(1738405635.364:6345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15590 comm="syz.2.2716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 439.739746][ T39] audit: type=1326 audit(1738405635.364:6346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15590 comm="syz.2.2716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 439.748690][ T39] audit: type=1326 audit(1738405635.364:6347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15590 comm="syz.2.2716" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 439.757267][ T39] audit: type=1326 audit(1738405635.364:6348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15590 comm="syz.2.2716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 439.766748][ T39] audit: type=1326 audit(1738405635.364:6349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15590 comm="syz.2.2716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 439.775218][ T39] audit: type=1326 audit(1738405635.364:6350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15590 comm="syz.2.2716" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 439.792184][ T39] audit: type=1326 audit(1738405635.364:6351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15590 comm="syz.2.2716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 439.798769][ T39] audit: type=1326 audit(1738405635.364:6352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15590 comm="syz.2.2716" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 439.809165][ T39] audit: type=1326 audit(1738405635.364:6353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15590 comm="syz.2.2716" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 439.816301][ T39] audit: type=1326 audit(1738405635.364:6354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15590 comm="syz.2.2716" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fe8579 code=0x7ffc0000 [ 439.824333][T15596] ptrace attach of "/syz-executor exec"[14116] was attempted by "/syz-executor exec"[15596] [ 439.842392][T15591] lo speed is unknown, defaulting to 1000 [ 439.845048][T15591] lo speed is unknown, defaulting to 1000 [ 439.880387][T15593] lo speed is unknown, defaulting to 1000 [ 439.906429][T15593] lo speed is unknown, defaulting to 1000 [ 440.829687][T15618] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2720'. [ 441.474843][T15626] lo speed is unknown, defaulting to 1000 [ 441.477764][T15626] lo speed is unknown, defaulting to 1000 [ 441.854795][T15640] FAULT_INJECTION: forcing a failure. [ 441.854795][T15640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.858609][T15640] CPU: 3 UID: 0 PID: 15640 Comm: syz.2.2729 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 441.858622][T15640] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 441.858628][T15640] Call Trace: [ 441.858631][T15640] [ 441.858635][T15640] dump_stack_lvl+0x16c/0x1f0 [ 441.858654][T15640] should_fail_ex+0x50a/0x650 [ 441.858668][T15640] _copy_from_iter+0x29b/0x1400 [ 441.858682][T15640] ? trace_lock_acquire+0x14e/0x1f0 [ 441.858691][T15640] ? __alloc_skb+0x200/0x380 [ 441.858707][T15640] ? __pfx__copy_from_iter+0x10/0x10 [ 441.858718][T15640] ? __virt_addr_valid+0x1a4/0x590 [ 441.858729][T15640] ? __virt_addr_valid+0x5e/0x590 [ 441.858738][T15640] ? __phys_addr_symbol+0x30/0x80 [ 441.858752][T15640] ? __check_object_size+0x488/0x710 [ 441.858766][T15640] netlink_sendmsg+0x813/0xd70 [ 441.858782][T15640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.858803][T15640] ____sys_sendmsg+0x9ae/0xb40 [ 441.858816][T15640] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.858828][T15640] ? get_compat_msghdr+0x11b/0x170 [ 441.858845][T15640] ___sys_sendmsg+0x135/0x1e0 [ 441.858856][T15640] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.858870][T15640] ? __pfx_lock_release+0x10/0x10 [ 441.858880][T15640] ? trace_lock_acquire+0x14e/0x1f0 [ 441.858893][T15640] ? __fget_files+0x206/0x3a0 [ 441.858906][T15640] __sys_sendmsg+0x16e/0x220 [ 441.858916][T15640] ? __pfx___sys_sendmsg+0x10/0x10 [ 441.858932][T15640] __do_fast_syscall_32+0x73/0x120 [ 441.858948][T15640] do_fast_syscall_32+0x32/0x80 [ 441.858962][T15640] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 441.858977][T15640] RIP: 0023:0xf7fe8579 [ 441.858984][T15640] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 441.858994][T15640] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 441.859003][T15640] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 441.859008][T15640] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 441.859014][T15640] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 441.859019][T15640] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 441.859024][T15640] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 441.859035][T15640] [ 442.187078][T15655] xt_TCPMSS: Only works on TCP SYN packets [ 442.206995][T15657] lo speed is unknown, defaulting to 1000 [ 442.209221][T15657] lo speed is unknown, defaulting to 1000 [ 442.488938][T15681] lo speed is unknown, defaulting to 1000 [ 442.509874][T15681] lo speed is unknown, defaulting to 1000 [ 442.722312][T15688] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2743'. [ 442.729692][T15688] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.2743'. [ 442.738920][T15688] openvswitch: netlink: Message has 3068 unknown bytes. [ 442.796165][T15691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2744'. [ 442.848767][T15693] ntfs3(nullb0): Primary boot signature is not NTFS. [ 442.851299][T15693] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 443.021864][T15696] lo speed is unknown, defaulting to 1000 [ 443.024067][T15696] lo speed is unknown, defaulting to 1000 [ 443.767823][T15712] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2749'. [ 443.798216][T15714] PKCS8: Unsupported PKCS#8 version [ 443.799344][T15712] xt_time: unknown flags 0xf0 [ 443.801004][T15714] netlink: 'syz.2.2750': attribute type 5 has an invalid length. [ 443.836496][T15716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2751'. [ 444.111106][T15725] lo speed is unknown, defaulting to 1000 [ 444.113925][T15725] lo speed is unknown, defaulting to 1000 [ 444.282358][ T7459] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 444.453760][ T7459] usb 7-1: Using ep0 maxpacket: 16 [ 444.456649][ T7459] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.459960][ T7459] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1296, setting to 1024 [ 444.463442][ T7459] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 444.467475][ T7459] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 444.470532][ T7459] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.474227][ T7459] usb 7-1: config 0 descriptor?? [ 444.476163][T15723] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 444.487814][T15737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2758'. [ 444.528763][T15742] FAULT_INJECTION: forcing a failure. [ 444.528763][T15742] name failslab, interval 1, probability 0, space 0, times 0 [ 444.533817][T15742] CPU: 2 UID: 0 PID: 15742 Comm: syz.1.2759 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 444.533846][T15742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 444.533858][T15742] Call Trace: [ 444.533864][T15742] [ 444.533872][T15742] dump_stack_lvl+0x16c/0x1f0 [ 444.533915][T15742] should_fail_ex+0x50a/0x650 [ 444.533940][T15742] should_failslab+0xc2/0x120 [ 444.533963][T15742] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 444.533984][T15742] ? skb_clone+0x190/0x3f0 [ 444.534006][T15742] skb_clone+0x190/0x3f0 [ 444.534025][T15742] netlink_deliver_tap+0xafd/0xca0 [ 444.534053][T15742] netlink_unicast+0x5e1/0x7f0 [ 444.534080][T15742] ? __pfx_netlink_unicast+0x10/0x10 [ 444.534104][T15742] ? __phys_addr_symbol+0x30/0x80 [ 444.534128][T15742] ? __check_object_size+0x488/0x710 [ 444.534150][T15742] netlink_sendmsg+0x8b8/0xd70 [ 444.534174][T15742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.534204][T15742] ____sys_sendmsg+0x9ae/0xb40 [ 444.534226][T15742] ? __pfx_____sys_sendmsg+0x10/0x10 [ 444.534246][T15742] ? get_compat_msghdr+0x11b/0x170 [ 444.534276][T15742] ___sys_sendmsg+0x135/0x1e0 [ 444.534293][T15742] ? __pfx____sys_sendmsg+0x10/0x10 [ 444.534317][T15742] ? __pfx_lock_release+0x10/0x10 [ 444.534335][T15742] ? trace_lock_acquire+0x14e/0x1f0 [ 444.534351][T15742] ? __fget_files+0x206/0x3a0 [ 444.534365][T15742] __sys_sendmsg+0x16e/0x220 [ 444.534374][T15742] ? __pfx___sys_sendmsg+0x10/0x10 [ 444.534392][T15742] __do_fast_syscall_32+0x73/0x120 [ 444.534408][T15742] do_fast_syscall_32+0x32/0x80 [ 444.534423][T15742] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 444.534438][T15742] RIP: 0023:0xf746e579 [ 444.534448][T15742] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 444.534458][T15742] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 444.534467][T15742] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 444.534474][T15742] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 444.534479][T15742] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 444.534484][T15742] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 444.534490][T15742] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 444.534501][T15742] [ 444.741097][ T7459] usbhid 7-1:0.0: can't add hid device: -71 [ 444.743334][ T7459] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 444.746513][ T7459] usb 7-1: USB disconnect, device number 55 [ 445.455335][T15757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2763'. [ 445.460698][T15757] bio_check_eod: 2 callbacks suppressed [ 445.460707][T15757] syz.0.2763: attempt to access beyond end of device [ 445.460707][T15757] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 445.466731][T15757] syz.0.2763: attempt to access beyond end of device [ 445.466731][T15757] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 445.470439][T15757] syz.0.2763: attempt to access beyond end of device [ 445.470439][T15757] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 445.475309][T15757] syz.0.2763: attempt to access beyond end of device [ 445.475309][T15757] nbd0: rw=0, sector=18, nr_sectors = 2 limit=0 [ 445.478940][T15757] syz.0.2763: attempt to access beyond end of device [ 445.478940][T15757] nbd0: rw=0, sector=30, nr_sectors = 2 limit=0 [ 445.483123][T15757] syz.0.2763: attempt to access beyond end of device [ 445.483123][T15757] nbd0: rw=0, sector=36, nr_sectors = 2 limit=0 [ 445.487131][T15757] VFS: unable to find oldfs superblock on device nbd0 [ 445.585627][T15760] lo speed is unknown, defaulting to 1000 [ 445.587670][T15760] lo speed is unknown, defaulting to 1000 [ 445.969271][T15780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2769'. [ 445.995509][T15782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2770'. [ 446.616946][T15791] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 446.616993][T15790] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 446.623675][T15790] netem: change failed [ 446.654130][T15794] FAULT_INJECTION: forcing a failure. [ 446.654130][T15794] name failslab, interval 1, probability 0, space 0, times 0 [ 446.659080][T15794] CPU: 2 UID: 0 PID: 15794 Comm: syz.2.2773 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 446.659096][T15794] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 446.659106][T15794] Call Trace: [ 446.659112][T15794] [ 446.659118][T15794] dump_stack_lvl+0x16c/0x1f0 [ 446.659146][T15794] should_fail_ex+0x50a/0x650 [ 446.659163][T15794] ? fs_reclaim_acquire+0xae/0x150 [ 446.659185][T15794] should_failslab+0xc2/0x120 [ 446.659219][T15794] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 446.659239][T15794] ? copy_process+0x49c/0x6f20 [ 446.659260][T15794] copy_process+0x49c/0x6f20 [ 446.659292][T15794] ? __pfx_copy_process+0x10/0x10 [ 446.659335][T15794] ? lockdep_init_map_type+0x16d/0x7d0 [ 446.659356][T15794] ? __raw_spin_lock_init+0x3a/0x110 [ 446.659379][T15794] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 446.659401][T15794] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 446.659423][T15794] vhost_task_create+0x1bd/0x2b0 [ 446.659439][T15794] ? __pfx_vhost_task_create+0x10/0x10 [ 446.659463][T15794] ? __pfx_vhost_task_fn+0x10/0x10 [ 446.659487][T15794] kvm_mmu_post_init_vm+0x273/0x380 [ 446.659505][T15794] kvm_arch_vcpu_ioctl_run+0x66/0x17f0 [ 446.659520][T15794] ? lock_acquire+0x2f/0xb0 [ 446.659537][T15794] ? kvm_vcpu_ioctl+0x14be/0x16b0 [ 446.659558][T15794] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 446.659578][T15794] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 446.659594][T15794] ? tomoyo_path_number_perm+0x190/0x5b0 [ 446.659610][T15794] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 446.659625][T15794] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 446.659647][T15794] ? do_vfs_ioctl+0x513/0x1950 [ 446.659669][T15794] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 446.659700][T15794] ? __pfx_lock_release+0x10/0x10 [ 446.659717][T15794] ? trace_lock_acquire+0x14e/0x1f0 [ 446.659734][T15794] kvm_vcpu_compat_ioctl+0x210/0x3d0 [ 446.659758][T15794] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 446.659772][T15794] ? __fget_files+0x206/0x3a0 [ 446.659793][T15794] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 446.659811][T15794] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 446.659835][T15794] __do_fast_syscall_32+0x73/0x120 [ 446.659855][T15794] do_fast_syscall_32+0x32/0x80 [ 446.659877][T15794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 446.659901][T15794] RIP: 0023:0xf7fe8579 [ 446.659914][T15794] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 446.659928][T15794] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 446.659939][T15794] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 446.659947][T15794] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 446.659956][T15794] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 446.659965][T15794] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 446.659973][T15794] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 446.659994][T15794] [ 446.930511][T15800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2775'. [ 447.844358][T15815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2779'. [ 448.134519][T15826] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2780'. [ 448.154276][T15827] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2782'. [ 448.165673][T15829] 9pnet_fd: Insufficient options for proto=fd [ 448.393184][T15831] siw: device registration error -23 [ 448.434885][ T39] kauditd_printk_skb: 98 callbacks suppressed [ 448.434895][ T39] audit: type=1326 audit(1738405644.084:6453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15832 comm="syz.0.2785" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 448.444298][ T39] audit: type=1326 audit(1738405644.084:6454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15832 comm="syz.0.2785" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 448.450574][ T39] audit: type=1326 audit(1738405644.084:6455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15832 comm="syz.0.2785" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 448.457553][ T39] audit: type=1326 audit(1738405644.094:6456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15832 comm="syz.0.2785" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 448.470934][ T39] audit: type=1326 audit(1738405644.094:6457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15832 comm="syz.0.2785" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 448.478876][ T39] audit: type=1326 audit(1738405644.104:6458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15834 comm="syz.0.2785" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 448.489538][ T39] audit: type=1326 audit(1738405644.124:6459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15832 comm="syz.0.2785" exe="/syz-executor" sig=0 arch=40000003 syscall=270 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 448.499149][ T39] audit: type=1326 audit(1738405644.124:6460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15832 comm="syz.0.2785" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 448.512923][ T39] audit: type=1326 audit(1738405644.124:6461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15832 comm="syz.0.2785" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 448.521648][ T39] audit: type=1326 audit(1738405644.134:6462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15832 comm="syz.0.2785" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 448.819237][T15841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2787'. [ 448.954098][T15845] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2786'. [ 449.323261][T15862] FAULT_INJECTION: forcing a failure. [ 449.323261][T15862] name failslab, interval 1, probability 0, space 0, times 0 [ 449.327568][T15862] CPU: 2 UID: 0 PID: 15862 Comm: syz.0.2795 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 449.327582][T15862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 449.327588][T15862] Call Trace: [ 449.327592][T15862] [ 449.327596][T15862] dump_stack_lvl+0x16c/0x1f0 [ 449.327637][T15862] should_fail_ex+0x50a/0x650 [ 449.327654][T15862] ? fs_reclaim_acquire+0xae/0x150 [ 449.327670][T15862] should_failslab+0xc2/0x120 [ 449.327683][T15862] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 449.327694][T15862] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 449.327706][T15862] ? __alloc_skb+0x2b3/0x380 [ 449.327725][T15862] __alloc_skb+0x2b3/0x380 [ 449.327739][T15862] ? __pfx___alloc_skb+0x10/0x10 [ 449.327760][T15862] ? __pfx___nla_validate_parse+0x10/0x10 [ 449.327774][T15862] ? net_generic+0xea/0x2a0 [ 449.327787][T15862] ? __pfx_lock_release+0x10/0x10 [ 449.327801][T15862] netlink_dump+0x699/0xd00 [ 449.327814][T15862] ? __nla_parse+0x40/0x60 [ 449.327827][T15862] ? __pfx_netlink_dump+0x10/0x10 [ 449.327845][T15862] ? netlink_lookup+0x3d/0x270 [ 449.327860][T15862] __netlink_dump_start+0x6d9/0x980 [ 449.327874][T15862] ip_set_dump+0x180/0x210 [ 449.327887][T15862] ? __pfx_ip_set_dump+0x10/0x10 [ 449.327899][T15862] ? __pfx_ip_set_dump_start+0x10/0x10 [ 449.327913][T15862] ? __pfx_ip_set_dump_do+0x10/0x10 [ 449.327926][T15862] ? __pfx_ip_set_dump_done+0x10/0x10 [ 449.327944][T15862] nfnetlink_rcv_msg+0x9c3/0x11e0 [ 449.327963][T15862] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 449.327978][T15862] ? find_held_lock+0x2d/0x110 [ 449.328008][T15862] netlink_rcv_skb+0x165/0x410 [ 449.328021][T15862] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 449.328036][T15862] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 449.328048][T15862] ? __pfx_aa_get_newest_label+0x10/0x10 [ 449.328068][T15862] ? bpf_lsm_capable+0x9/0x10 [ 449.328081][T15862] ? security_capable+0x7e/0x260 [ 449.328095][T15862] ? ns_capable+0xd7/0x110 [ 449.328109][T15862] nfnetlink_rcv+0x1b4/0x430 [ 449.328122][T15862] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 449.328135][T15862] ? netlink_deliver_tap+0x1ae/0xca0 [ 449.328150][T15862] netlink_unicast+0x53c/0x7f0 [ 449.328165][T15862] ? __pfx_netlink_unicast+0x10/0x10 [ 449.328178][T15862] ? __phys_addr_symbol+0x30/0x80 [ 449.328192][T15862] ? __check_object_size+0x488/0x710 [ 449.328206][T15862] netlink_sendmsg+0x8b8/0xd70 [ 449.328221][T15862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.328239][T15862] ____sys_sendmsg+0x9ae/0xb40 [ 449.328251][T15862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.328263][T15862] ? get_compat_msghdr+0x11b/0x170 [ 449.328281][T15862] ___sys_sendmsg+0x135/0x1e0 [ 449.328291][T15862] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.328305][T15862] ? __pfx_lock_release+0x10/0x10 [ 449.328316][T15862] ? trace_lock_acquire+0x14e/0x1f0 [ 449.328329][T15862] ? __fget_files+0x206/0x3a0 [ 449.328343][T15862] __sys_sendmsg+0x16e/0x220 [ 449.328352][T15862] ? __pfx___sys_sendmsg+0x10/0x10 [ 449.328370][T15862] __do_fast_syscall_32+0x73/0x120 [ 449.328386][T15862] do_fast_syscall_32+0x32/0x80 [ 449.328400][T15862] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 449.328415][T15862] RIP: 0023:0xf7fe2579 [ 449.328423][T15862] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 449.328432][T15862] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 449.328441][T15862] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 449.328447][T15862] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 449.328453][T15862] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 449.328458][T15862] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 449.328463][T15862] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 449.328475][T15862] [ 449.659813][T15869] __nla_validate_parse: 2 callbacks suppressed [ 449.659898][T15869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2797'. [ 450.273851][T15883] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2802'. [ 450.281308][T15883] xt_time: unknown flags 0xf0 [ 451.093353][T15893] x_tables: ip_tables: osf match: only valid for protocol 6 [ 451.119943][T15895] netlink: 'syz.2.2805': attribute type 1 has an invalid length. [ 451.122341][T15895] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2805'. [ 451.125587][T15895] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2805'. [ 451.130632][T15895] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 451.474242][T15917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2809'. [ 452.051384][T15926] lo speed is unknown, defaulting to 1000 [ 452.053712][T15926] lo speed is unknown, defaulting to 1000 [ 452.099742][T15935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2814'. [ 452.205698][T15948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2813'. [ 452.208954][T15946] FAULT_INJECTION: forcing a failure. [ 452.208954][T15946] name failslab, interval 1, probability 0, space 0, times 0 [ 452.213401][T15948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2813'. [ 452.216285][T15946] CPU: 0 UID: 0 PID: 15946 Comm: syz.3.2817 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 452.216298][T15946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 452.216304][T15946] Call Trace: [ 452.216307][T15946] [ 452.216311][T15946] dump_stack_lvl+0x16c/0x1f0 [ 452.216330][T15946] should_fail_ex+0x50a/0x650 [ 452.216342][T15946] ? fs_reclaim_acquire+0xae/0x150 [ 452.216370][T15946] should_failslab+0xc2/0x120 [ 452.216383][T15946] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 452.216395][T15946] ? alloc_pid+0xc7/0xbd0 [ 452.216407][T15946] alloc_pid+0xc7/0xbd0 [ 452.216420][T15946] copy_process+0x4122/0x6f20 [ 452.216443][T15946] ? __pfx_copy_process+0x10/0x10 [ 452.216458][T15946] ? lockdep_init_map_type+0x16d/0x7d0 [ 452.216471][T15946] ? __raw_spin_lock_init+0x3a/0x110 [ 452.216484][T15946] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 452.216499][T15946] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 452.216515][T15946] vhost_task_create+0x1bd/0x2b0 [ 452.216526][T15946] ? __pfx_vhost_task_create+0x10/0x10 [ 452.216539][T15946] ? __pfx_vhost_task_fn+0x10/0x10 [ 452.216553][T15946] kvm_mmu_post_init_vm+0x273/0x380 [ 452.216567][T15946] kvm_arch_vcpu_ioctl_run+0x66/0x17f0 [ 452.216578][T15946] ? lock_acquire+0x2f/0xb0 [ 452.216587][T15946] ? kvm_vcpu_ioctl+0x14be/0x16b0 [ 452.216601][T15946] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 452.216613][T15946] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 452.216624][T15946] ? tomoyo_path_number_perm+0x190/0x5b0 [ 452.216636][T15946] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 452.216645][T15946] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 452.216658][T15946] ? do_vfs_ioctl+0x513/0x1950 [ 452.216673][T15946] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 452.216693][T15946] ? __pfx_lock_release+0x10/0x10 [ 452.216704][T15946] ? trace_lock_acquire+0x14e/0x1f0 [ 452.216714][T15946] kvm_vcpu_compat_ioctl+0x210/0x3d0 [ 452.216725][T15946] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 452.216737][T15946] ? __fget_files+0x206/0x3a0 [ 452.216749][T15946] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 452.216761][T15946] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 452.216776][T15946] __do_fast_syscall_32+0x73/0x120 [ 452.216808][T15946] do_fast_syscall_32+0x32/0x80 [ 452.216822][T15946] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 452.216837][T15946] RIP: 0023:0xf7f90579 [ 452.216845][T15946] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 452.216855][T15946] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 452.216864][T15946] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 452.216870][T15946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 452.216875][T15946] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 452.216880][T15946] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 452.216885][T15946] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 452.216897][T15946] [ 452.309649][ C0] vkms_vblank_simulate: vblank timer overrun [ 452.564313][T15958] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2819'. [ 452.655811][T15963] x_tables: ip_tables: osf match: only valid for protocol 6 [ 452.737931][T15967] lo speed is unknown, defaulting to 1000 [ 452.740034][T15967] lo speed is unknown, defaulting to 1000 [ 452.824988][T15974] netlink: 'syz.0.2825': attribute type 1 has an invalid length. [ 452.827316][T15974] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2825'. [ 452.832821][T15974] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 453.579130][T15997] FAULT_INJECTION: forcing a failure. [ 453.579130][T15997] name failslab, interval 1, probability 0, space 0, times 0 [ 453.583948][T15997] CPU: 3 UID: 0 PID: 15997 Comm: syz.3.2832 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 453.583960][T15997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 453.583966][T15997] Call Trace: [ 453.583971][T15997] [ 453.583975][T15997] dump_stack_lvl+0x16c/0x1f0 [ 453.583993][T15997] should_fail_ex+0x50a/0x650 [ 453.584007][T15997] should_failslab+0xc2/0x120 [ 453.584019][T15997] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 453.584032][T15997] ? skb_clone+0x190/0x3f0 [ 453.584044][T15997] skb_clone+0x190/0x3f0 [ 453.584054][T15997] netlink_deliver_tap+0xafd/0xca0 [ 453.584070][T15997] netlink_unicast+0x5e1/0x7f0 [ 453.584084][T15997] ? __pfx_netlink_unicast+0x10/0x10 [ 453.584098][T15997] ? __phys_addr_symbol+0x30/0x80 [ 453.584113][T15997] ? __check_object_size+0x488/0x710 [ 453.584127][T15997] netlink_sendmsg+0x8b8/0xd70 [ 453.584142][T15997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.584159][T15997] ____sys_sendmsg+0x9ae/0xb40 [ 453.584172][T15997] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.584184][T15997] ? get_compat_msghdr+0x11b/0x170 [ 453.584202][T15997] ___sys_sendmsg+0x135/0x1e0 [ 453.584212][T15997] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.584226][T15997] ? __pfx_lock_release+0x10/0x10 [ 453.584238][T15997] ? trace_lock_acquire+0x14e/0x1f0 [ 453.584251][T15997] ? __fget_files+0x206/0x3a0 [ 453.584264][T15997] __sys_sendmsg+0x16e/0x220 [ 453.584274][T15997] ? __pfx___sys_sendmsg+0x10/0x10 [ 453.584291][T15997] __do_fast_syscall_32+0x73/0x120 [ 453.584307][T15997] do_fast_syscall_32+0x32/0x80 [ 453.584321][T15997] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 453.584337][T15997] RIP: 0023:0xf7f90579 [ 453.584344][T15997] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 453.584354][T15997] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 453.584363][T15997] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000200 [ 453.584369][T15997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 453.584374][T15997] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 453.584380][T15997] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 453.584385][T15997] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 453.584396][T15997] [ 454.238834][T16010] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.241538][T16010] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.243938][T16010] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.246210][T16010] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.255989][T16010] vxlan0: entered promiscuous mode [ 454.647802][T16022] xt_time: unknown flags 0xf0 [ 455.084687][T16008] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 455.314172][T16026] input: syz0 as /devices/virtual/input/input22 [ 455.347491][T16026] __nla_validate_parse: 6 callbacks suppressed [ 455.347501][T16026] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2839'. [ 455.548712][ T39] kauditd_printk_skb: 51 callbacks suppressed [ 455.548724][ T39] audit: type=1326 audit(1738405651.194:6514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16036 comm="syz.3.2843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f90579 code=0x7ffc0000 [ 455.560115][ T39] audit: type=1326 audit(1738405651.194:6515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16036 comm="syz.3.2843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f90579 code=0x7ffc0000 [ 455.566810][ T39] audit: type=1326 audit(1738405651.194:6516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16036 comm="syz.3.2843" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f90579 code=0x7ffc0000 [ 455.573067][ T39] audit: type=1326 audit(1738405651.194:6517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16036 comm="syz.3.2843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f90579 code=0x7ffc0000 [ 455.579201][ T39] audit: type=1326 audit(1738405651.194:6518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16036 comm="syz.3.2843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f90579 code=0x7ffc0000 [ 455.585736][ T39] audit: type=1326 audit(1738405651.194:6519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16036 comm="syz.3.2843" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f90579 code=0x7ffc0000 [ 455.591935][ T39] audit: type=1326 audit(1738405651.194:6520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16036 comm="syz.3.2843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f90579 code=0x7ffc0000 [ 455.598055][ T39] audit: type=1326 audit(1738405651.194:6521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16036 comm="syz.3.2843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f90579 code=0x7ffc0000 [ 455.604396][ T39] audit: type=1326 audit(1738405651.194:6522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16036 comm="syz.3.2843" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f90579 code=0x7ffc0000 [ 455.610468][ T39] audit: type=1326 audit(1738405651.194:6523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16036 comm="syz.3.2843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f90579 code=0x7ffc0000 [ 456.312079][ T35] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 456.429206][T16054] Process accounting resumed [ 456.431021][T16054] kernel write not supported for file /287/clear_refs (pid: 16054 comm: syz.1.2848) [ 456.462074][ T35] usb 8-1: Using ep0 maxpacket: 16 [ 456.466471][T16057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2849'. [ 456.472874][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.476524][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1296, setting to 1024 [ 456.479701][ T35] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 456.492063][ T35] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 456.495219][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.519807][ T35] usb 8-1: config 0 descriptor?? [ 456.522474][T16048] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 456.657901][T16067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2852'. [ 456.683456][T16067] JFS: charset not found [ 456.701835][T16069] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2847'. [ 456.939537][ T35] usbhid 8-1:0.0: can't add hid device: -71 [ 456.941320][ T35] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 456.952164][ T35] usb 8-1: USB disconnect, device number 63 [ 457.031832][T16077] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 457.034306][T16077] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 457.036060][T16077] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 457.091503][T16089] FAULT_INJECTION: forcing a failure. [ 457.091503][T16089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.095571][T16089] CPU: 2 UID: 0 PID: 16089 Comm: syz.3.2857 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 457.095592][T16089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 457.095602][T16089] Call Trace: [ 457.095607][T16089] [ 457.095613][T16089] dump_stack_lvl+0x16c/0x1f0 [ 457.095641][T16089] should_fail_ex+0x50a/0x650 [ 457.095663][T16089] _copy_to_user+0x32/0xd0 [ 457.095684][T16089] simple_read_from_buffer+0xd0/0x160 [ 457.095709][T16089] proc_fail_nth_read+0x198/0x270 [ 457.095733][T16089] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 457.095756][T16089] ? rw_verify_area+0xcf/0x680 [ 457.095779][T16089] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 457.095800][T16089] vfs_read+0x1df/0xbf0 [ 457.095815][T16089] ? __fget_files+0x1fc/0x3a0 [ 457.095831][T16089] ? __pfx___mutex_lock+0x10/0x10 [ 457.095855][T16089] ? __pfx_vfs_read+0x10/0x10 [ 457.095876][T16089] ? __fget_files+0x206/0x3a0 [ 457.095907][T16089] ksys_read+0x12b/0x250 [ 457.095922][T16089] ? __pfx_ksys_read+0x10/0x10 [ 457.095943][T16089] __do_fast_syscall_32+0x73/0x120 [ 457.095969][T16089] do_fast_syscall_32+0x32/0x80 [ 457.095992][T16089] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 457.096016][T16089] RIP: 0023:0xf7f90579 [ 457.096027][T16089] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 457.096040][T16089] RSP: 002b:00000000f50b6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 457.096054][T16089] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50b6620 [ 457.096063][T16089] RDX: 000000000000000f RSI: 00000000f741cff4 RDI: 0000000000000000 [ 457.096071][T16089] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 457.096079][T16089] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 457.096105][T16089] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 457.096126][T16089] [ 457.165479][T16091] ax25_connect(): syz.1.2858 uses autobind, please contact jreuter@yaina.de [ 457.170716][T16092] ax25_connect(): syz.1.2858 uses autobind, please contact jreuter@yaina.de [ 457.353966][T16098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2859'. [ 457.371722][T16098] loop7: detected capacity change from 0 to 16384 [ 457.675316][T16104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2861'. [ 457.717257][T16107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2863'. [ 457.752553][T16100] loop7: detected capacity change from 16384 to 16383 [ 457.837157][T16114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2862'. [ 457.871196][T16113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2864'. [ 458.151602][T16118] lo speed is unknown, defaulting to 1000 [ 458.153914][T16118] lo speed is unknown, defaulting to 1000 [ 458.502400][T16129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2868'. [ 458.650619][T16134] FAULT_INJECTION: forcing a failure. [ 458.650619][T16134] name failslab, interval 1, probability 0, space 0, times 0 [ 458.659487][T16134] CPU: 2 UID: 0 PID: 16134 Comm: syz.0.2869 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 458.659503][T16134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 458.659509][T16134] Call Trace: [ 458.659512][T16134] [ 458.659517][T16134] dump_stack_lvl+0x16c/0x1f0 [ 458.659536][T16134] should_fail_ex+0x50a/0x650 [ 458.659548][T16134] ? fs_reclaim_acquire+0xae/0x150 [ 458.659565][T16134] should_failslab+0xc2/0x120 [ 458.659577][T16134] __kmalloc_node_noprof+0xd1/0x520 [ 458.659588][T16134] ? __get_vm_area_node+0x1dc/0x2f0 [ 458.659602][T16134] ? __vmalloc_node_range_noprof+0x3d8/0x1530 [ 458.659614][T16134] __vmalloc_node_range_noprof+0x3d8/0x1530 [ 458.659629][T16134] ? vhost_task_create+0x1bd/0x2b0 [ 458.659641][T16134] ? __memcg_slab_post_alloc_hook+0x4fc/0x9b0 [ 458.659654][T16134] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 458.659665][T16134] ? rcu_is_watching+0x12/0xc0 [ 458.659680][T16134] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 458.659694][T16134] ? kmem_cache_alloc_node_noprof+0x219/0x3b0 [ 458.659705][T16134] ? vhost_task_create+0x1bd/0x2b0 [ 458.659716][T16134] copy_process+0x29b3/0x6f20 [ 458.659730][T16134] ? vhost_task_create+0x1bd/0x2b0 [ 458.659745][T16134] ? __pfx_copy_process+0x10/0x10 [ 458.659760][T16134] ? lockdep_init_map_type+0x16d/0x7d0 [ 458.659772][T16134] ? __raw_spin_lock_init+0x3a/0x110 [ 458.659786][T16134] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 458.659801][T16134] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 458.659817][T16134] vhost_task_create+0x1bd/0x2b0 [ 458.659826][T16134] ? __pfx_vhost_task_create+0x10/0x10 [ 458.659840][T16134] ? __pfx_vhost_task_fn+0x10/0x10 [ 458.659854][T16134] kvm_mmu_post_init_vm+0x273/0x380 [ 458.659866][T16134] kvm_arch_vcpu_ioctl_run+0x66/0x17f0 [ 458.659877][T16134] ? lock_acquire+0x2f/0xb0 [ 458.659887][T16134] ? kvm_vcpu_ioctl+0x14be/0x16b0 [ 458.659900][T16134] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 458.659912][T16134] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 458.659923][T16134] ? tomoyo_path_number_perm+0x190/0x5b0 [ 458.659935][T16134] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 458.659944][T16134] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 458.659958][T16134] ? do_vfs_ioctl+0x513/0x1950 [ 458.659972][T16134] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 458.659992][T16134] ? __pfx_lock_release+0x10/0x10 [ 458.660003][T16134] ? trace_lock_acquire+0x14e/0x1f0 [ 458.660013][T16134] kvm_vcpu_compat_ioctl+0x210/0x3d0 [ 458.660025][T16134] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 458.660037][T16134] ? __fget_files+0x206/0x3a0 [ 458.660049][T16134] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 458.660060][T16134] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 458.660075][T16134] __do_fast_syscall_32+0x73/0x120 [ 458.660091][T16134] do_fast_syscall_32+0x32/0x80 [ 458.660105][T16134] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 458.660120][T16134] RIP: 0023:0xf7fe2579 [ 458.660128][T16134] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 458.660137][T16134] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 458.660147][T16134] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 458.660153][T16134] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 458.660169][T16134] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 458.660174][T16134] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 458.660179][T16134] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 458.660191][T16134] [ 458.660417][T16134] syz.0.2869: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 458.787076][T16134] CPU: 2 UID: 0 PID: 16134 Comm: syz.0.2869 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 458.787090][T16134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 458.787096][T16134] Call Trace: [ 458.787099][T16134] [ 458.787104][T16134] dump_stack_lvl+0x16c/0x1f0 [ 458.787122][T16134] warn_alloc+0x24d/0x3a0 [ 458.787136][T16134] ? __pfx_warn_alloc+0x10/0x10 [ 458.787146][T16134] ? dump_stack_lvl+0x1a3/0x1f0 [ 458.787160][T16134] ? should_fail_ex+0x34f/0x650 [ 458.787173][T16134] ? rcu_is_watching+0x12/0xc0 [ 458.787187][T16134] ? trace_kmalloc+0x2d/0xd0 [ 458.787200][T16134] ? __get_vm_area_node+0x1dc/0x2f0 [ 458.787218][T16134] __vmalloc_node_range_noprof+0x1102/0x1530 [ 458.787233][T16134] ? vhost_task_create+0x1bd/0x2b0 [ 458.787245][T16134] ? __memcg_slab_post_alloc_hook+0x4fc/0x9b0 [ 458.787258][T16134] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 458.787269][T16134] ? rcu_is_watching+0x12/0xc0 [ 458.787282][T16134] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 458.787296][T16134] ? kmem_cache_alloc_node_noprof+0x219/0x3b0 [ 458.787308][T16134] ? vhost_task_create+0x1bd/0x2b0 [ 458.787318][T16134] copy_process+0x29b3/0x6f20 [ 458.787331][T16134] ? vhost_task_create+0x1bd/0x2b0 [ 458.787347][T16134] ? __pfx_copy_process+0x10/0x10 [ 458.787362][T16134] ? lockdep_init_map_type+0x16d/0x7d0 [ 458.787373][T16134] ? __raw_spin_lock_init+0x3a/0x110 [ 458.787387][T16134] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 458.787401][T16134] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 458.787417][T16134] vhost_task_create+0x1bd/0x2b0 [ 458.787427][T16134] ? __pfx_vhost_task_create+0x10/0x10 [ 458.787440][T16134] ? __pfx_vhost_task_fn+0x10/0x10 [ 458.787454][T16134] kvm_mmu_post_init_vm+0x273/0x380 [ 458.787467][T16134] kvm_arch_vcpu_ioctl_run+0x66/0x17f0 [ 458.787478][T16134] ? lock_acquire+0x2f/0xb0 [ 458.787488][T16134] ? kvm_vcpu_ioctl+0x14be/0x16b0 [ 458.787501][T16134] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 458.787513][T16134] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 458.787524][T16134] ? tomoyo_path_number_perm+0x190/0x5b0 [ 458.787536][T16134] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 458.787545][T16134] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 458.787558][T16134] ? do_vfs_ioctl+0x513/0x1950 [ 458.787572][T16134] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 458.787593][T16134] ? __pfx_lock_release+0x10/0x10 [ 458.787604][T16134] ? trace_lock_acquire+0x14e/0x1f0 [ 458.787614][T16134] kvm_vcpu_compat_ioctl+0x210/0x3d0 [ 458.787631][T16134] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 458.787643][T16134] ? __fget_files+0x206/0x3a0 [ 458.787655][T16134] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 458.787666][T16134] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 458.787681][T16134] __do_fast_syscall_32+0x73/0x120 [ 458.787697][T16134] do_fast_syscall_32+0x32/0x80 [ 458.787711][T16134] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 458.787726][T16134] RIP: 0023:0xf7fe2579 [ 458.787735][T16134] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 458.787744][T16134] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 458.787753][T16134] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 458.787759][T16134] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 458.787765][T16134] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 458.787770][T16134] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 458.787775][T16134] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 458.787786][T16134] [ 458.787790][T16134] Mem-Info: [ 458.826005][T16136] netlink: 'syz.2.2870': attribute type 1 has an invalid length. [ 458.827148][T16134] active_anon:10932 inactive_anon:129 isolated_anon:0 [ 458.827148][T16134] active_file:4118 inactive_file:31275 isolated_file:0 [ 458.827148][T16134] unevictable:1820 dirty:248 writeback:0 [ 458.827148][T16134] slab_reclaimable:7488 slab_unreclaimable:72501 [ 458.827148][T16134] mapped:31943 shmem:8088 pagetables:877 [ 458.827148][T16134] sec_pagetables:315 bounce:0 [ 458.827148][T16134] kernel_misc_reclaimable:0 [ 458.827148][T16134] free:47884 free_pcp:2198 free_cma:0 [ 458.919339][T16134] Node 0 active_anon:2444kB inactive_anon:516kB active_file:304kB inactive_file:1556kB unevictable:3604kB isolated(anon):0kB isolated(file):0kB mapped:1756kB dirty:0kB writeback:0kB shmem:4000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9652kB pagetables:1192kB sec_pagetables:1132kB all_unreclaimable? yes [ 458.929887][T16134] Node 1 active_anon:41284kB inactive_anon:0kB active_file:16168kB inactive_file:123544kB unevictable:3676kB isolated(anon):0kB isolated(file):0kB mapped:126116kB dirty:992kB writeback:0kB shmem:28352kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3712kB pagetables:2416kB sec_pagetables:128kB all_unreclaimable? no [ 458.939143][T16134] Node 0 DMA free:2972kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:60kB inactive_anon:0kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:456kB local_pcp:172kB free_cma:0kB [ 458.947174][T16134] lowmem_reserve[]: 0 297 0 0 0 [ 458.948695][T16134] Node 0 DMA32 free:22628kB boost:4096kB min:17768kB low:21184kB high:24600kB reserved_highatomic:4096KB active_anon:2384kB inactive_anon:516kB active_file:304kB inactive_file:1540kB unevictable:3604kB writepending:0kB present:1032196kB managed:305072kB mlocked:68kB bounce:0kB free_pcp:1936kB local_pcp:120kB free_cma:0kB [ 458.957480][T16134] lowmem_reserve[]: 0 0 0 0 0 [ 458.959068][T16134] Node 1 DMA32 free:168004kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:41284kB inactive_anon:0kB active_file:16168kB inactive_file:123544kB unevictable:3676kB writepending:992kB present:1048432kB managed:948252kB mlocked:140kB bounce:0kB free_pcp:4752kB local_pcp:972kB free_cma:0kB [ 458.967609][T16134] lowmem_reserve[]: 0 0 0 0 0 [ 458.969006][T16134] Node 0 DMA: 11*4kB (UM) 16*8kB (UM) 23*16kB (UM) 12*32kB (UM) 14*64kB (UM) 7*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2972kB [ 458.973394][T16134] Node 0 DMA32: 217*4kB (UMEH) 111*8kB (UEH) 62*16kB (UMEH) 97*32kB (UMEH) 68*64kB (UMEH) 24*128kB (UMEH) 12*256kB (UME) 4*512kB (M) 2*1024kB (M) 1*2048kB (U) 0*4096kB = 22492kB [ 458.978441][T16134] Node 1 DMA32: 205*4kB (UME) 240*8kB (UME) 389*16kB (UME) 490*32kB (UME) 292*64kB (UME) 128*128kB (UME) 95*256kB (UME) 34*512kB (UME) 11*1024kB (M) 17*2048kB (UM) 5*4096kB (U) = 168004kB [ 458.983848][T16134] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 458.986608][T16134] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 458.989263][T16134] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 458.992203][T16134] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 458.994881][T16134] 43729 total pagecache pages [ 458.996251][T16134] 195 pages in swap cache [ 458.997525][T16134] Free swap = 121924kB [ 458.998736][T16134] Total swap = 124996kB [ 458.999960][T16134] 524155 pages RAM [ 459.001079][T16134] 0 pages HighMem/MovableOnly [ 459.002570][T16134] 206984 pages reserved [ 459.003783][T16134] 0 pages cma reserved [ 459.079300][T16143] Bluetooth: MGMT ver 1.23 [ 459.082374][ T5954] Bluetooth: hci1: command 0x041b tx timeout [ 459.082515][ T5965] Bluetooth: hci0: command 0x040f tx timeout [ 459.084311][ T5954] Bluetooth: hci3: command 0x0c1a tx timeout [ 459.128853][T16149] lo speed is unknown, defaulting to 1000 [ 459.130974][T16149] lo speed is unknown, defaulting to 1000 [ 459.215837][ T5954] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 459.216320][T16161] x_tables: duplicate underflow at hook 2 [ 459.255441][T16164] loop7: detected capacity change from 0 to 16384 [ 459.625079][T16163] overlayfs: failed to resolve './file0': -2 [ 459.639153][T16163] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 459.922380][T16167] loop7: detected capacity change from 16384 to 16383 [ 460.181560][T16189] lo speed is unknown, defaulting to 1000 [ 460.185373][T16189] lo speed is unknown, defaulting to 1000 [ 460.320179][T16202] xt_time: unknown flags 0xf0 [ 460.457668][ T5954] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 460.636348][T16211] __nla_validate_parse: 41 callbacks suppressed [ 460.636488][T16211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2890'. [ 461.302206][ T39] kauditd_printk_skb: 168 callbacks suppressed [ 461.302218][ T39] audit: type=1326 audit(1738405656.824:6692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16224 comm="syz.1.2893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 461.314504][ T39] audit: type=1326 audit(1738405656.824:6693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16224 comm="syz.1.2893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 461.320998][ T39] audit: type=1326 audit(1738405656.824:6694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16224 comm="syz.1.2893" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 461.330612][ T39] audit: type=1326 audit(1738405656.824:6695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16224 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 461.341817][ T39] audit: type=1326 audit(1738405656.824:6696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16224 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 461.350784][ T39] audit: type=1326 audit(1738405656.824:6697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16224 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 461.360748][ T39] audit: type=1326 audit(1738405656.824:6698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16224 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 461.369889][ T39] audit: type=1326 audit(1738405656.824:6699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16224 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 461.568480][T16232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2894'. [ 461.719054][T16232] loop7: detected capacity change from 0 to 16384 [ 462.025980][ T39] audit: type=1326 audit(1738405657.674:6700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16241 comm="syz.0.2897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 462.033517][ T39] audit: type=1326 audit(1738405657.674:6701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16241 comm="syz.0.2897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 462.038655][T16242] lo speed is unknown, defaulting to 1000 [ 462.043216][T16242] lo speed is unknown, defaulting to 1000 [ 462.092238][T16240] loop7: detected capacity change from 16384 to 16383 [ 462.282166][ T57] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 462.482074][ T57] usb 7-1: Using ep0 maxpacket: 16 [ 462.485456][ T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.489117][ T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1296, setting to 1024 [ 462.492502][ T57] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 462.496233][ T57] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 462.498850][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.502328][T16260] 9pnet_fd: Insufficient options for proto=fd [ 462.505797][ T57] usb 7-1: config 0 descriptor?? [ 462.507659][T16244] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 462.603586][T16263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2904'. [ 462.732896][T16267] siw: device registration error -23 [ 462.945526][ T57] usbhid 7-1:0.0: can't add hid device: -71 [ 462.947559][ T57] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 462.952076][ T57] usb 7-1: USB disconnect, device number 56 [ 463.153674][T16274] lo speed is unknown, defaulting to 1000 [ 463.155925][T16274] lo speed is unknown, defaulting to 1000 [ 464.138384][T16297] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2912'. [ 464.587499][T16304] x_tables: ip_tables: osf match: only valid for protocol 6 [ 464.643321][T16306] lo speed is unknown, defaulting to 1000 [ 464.645665][T16306] lo speed is unknown, defaulting to 1000 [ 464.702469][ T6164] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 464.852479][ T6164] usb 8-1: Using ep0 maxpacket: 16 [ 464.859935][T16315] 9pnet_fd: Insufficient options for proto=fd [ 464.860340][ T6164] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.867581][ T6164] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1296, setting to 1024 [ 464.893788][T16319] FAULT_INJECTION: forcing a failure. [ 464.893788][T16319] name failslab, interval 1, probability 0, space 0, times 0 [ 464.897342][T16319] CPU: 1 UID: 0 PID: 16319 Comm: syz.1.2920 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 464.897355][T16319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 464.897361][T16319] Call Trace: [ 464.897364][T16319] [ 464.897368][T16319] dump_stack_lvl+0x16c/0x1f0 [ 464.897404][T16319] should_fail_ex+0x50a/0x650 [ 464.897421][T16319] ? fs_reclaim_acquire+0xae/0x150 [ 464.897437][T16319] should_failslab+0xc2/0x120 [ 464.897450][T16319] __kmalloc_node_noprof+0xd1/0x520 [ 464.897462][T16319] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 464.897474][T16319] __kvmalloc_node_noprof+0xad/0x1a0 [ 464.897484][T16319] __kvm_mmu_topup_memory_cache+0x451/0x600 [ 464.897501][T16319] mmu_topup_memory_caches+0x25/0x170 [ 464.897513][T16319] kvm_mmu_load+0xda/0x22a0 [ 464.897524][T16319] ? kvm_apic_has_interrupt+0xb6/0x190 [ 464.897538][T16319] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 464.897552][T16319] ? kvm_guest_time_update+0x71e/0xeb0 [ 464.897564][T16319] ? __pfx_kvm_mmu_load+0x10/0x10 [ 464.897574][T16319] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 464.897587][T16319] ? kvm_check_and_inject_events+0x725/0x12e0 [ 464.897600][T16319] vcpu_run+0x2e2e/0x4c00 [ 464.897610][T16319] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 464.897625][T16319] ? __pfx_vcpu_run+0x10/0x10 [ 464.897633][T16319] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 464.897646][T16319] ? rcu_is_watching+0x12/0xc0 [ 464.897660][T16319] ? trace_lock_acquire+0x14e/0x1f0 [ 464.897668][T16319] ? __local_bh_enable_ip+0xa4/0x120 [ 464.897681][T16319] ? lockdep_hardirqs_on+0x7c/0x110 [ 464.897695][T16319] ? kvm_arch_vcpu_ioctl_run+0x1a8/0x17f0 [ 464.897706][T16319] ? lock_acquire+0x2f/0xb0 [ 464.897718][T16319] ? kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 464.897728][T16319] kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 464.897742][T16319] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 464.897755][T16319] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 464.897766][T16319] ? tomoyo_path_number_perm+0x190/0x5b0 [ 464.897777][T16319] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 464.897786][T16319] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 464.897800][T16319] ? do_vfs_ioctl+0x513/0x1950 [ 464.897814][T16319] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 464.897835][T16319] ? __pfx_lock_release+0x10/0x10 [ 464.897845][T16319] ? trace_lock_acquire+0x14e/0x1f0 [ 464.897856][T16319] kvm_vcpu_compat_ioctl+0x210/0x3d0 [ 464.897868][T16319] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 464.897880][T16319] ? __fget_files+0x206/0x3a0 [ 464.897892][T16319] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 464.897904][T16319] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 464.897919][T16319] __do_fast_syscall_32+0x73/0x120 [ 464.897934][T16319] do_fast_syscall_32+0x32/0x80 [ 464.897948][T16319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 464.897964][T16319] RIP: 0023:0xf746e579 [ 464.897972][T16319] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 464.897981][T16319] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 464.897991][T16319] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 464.897997][T16319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 464.898002][T16319] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 464.898007][T16319] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 464.898013][T16319] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 464.898024][T16319] [ 464.965809][ T6164] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 465.003166][ T6164] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 465.005621][ T6164] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.009000][ T6164] usb 8-1: config 0 descriptor?? [ 465.011124][T16302] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 465.118943][T16323] siw: device registration error -23 [ 465.337252][ T6164] usbhid 8-1:0.0: can't add hid device: -71 [ 465.338986][ T6164] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 465.343516][ T6164] usb 8-1: USB disconnect, device number 64 [ 465.501310][T16328] lo speed is unknown, defaulting to 1000 [ 465.503527][T16328] lo speed is unknown, defaulting to 1000 [ 465.790401][T16337] lo speed is unknown, defaulting to 1000 [ 465.797646][T16337] lo speed is unknown, defaulting to 1000 [ 465.823084][T16339] netlink: 'syz.0.2926': attribute type 10 has an invalid length. [ 465.833990][T16339] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.836727][T16339] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.213870][T16347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2928'. [ 466.226640][T16347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2928'. [ 466.716892][T16352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2929'. [ 466.720342][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2929'. [ 467.142086][ T6018] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 467.312057][ T6018] usb 6-1: Using ep0 maxpacket: 16 [ 467.316909][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.319941][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1296, setting to 1024 [ 467.323432][ T6018] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 467.326864][ T6018] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 467.329325][ T6018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.333491][ T6018] usb 6-1: config 0 descriptor?? [ 467.338185][T16356] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 467.562560][ T5954] Bluetooth: hci1: command 0x041b tx timeout [ 467.808351][ T6018] usbhid 6-1:0.0: can't add hid device: -71 [ 467.812997][ T6018] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 467.821533][ T6018] usb 6-1: USB disconnect, device number 30 [ 468.216845][T16375] 9pnet_fd: Insufficient options for proto=fd [ 468.257725][T16376] openvswitch: netlink: IP tunnel dst address not specified [ 468.432540][T16378] siw: device registration error -23 [ 468.990836][T16372] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 468.994414][T16372] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 468.995139][T16373] caif:caif_disconnect_client(): nothing to disconnect [ 468.997246][T16372] CPU: 0 UID: 0 PID: 16372 Comm: syz.2.2936 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 469.003097][T16372] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 469.006460][T16372] RIP: 0010:iter_file_splice_write+0xa2d/0x10b0 [ 469.008357][T16372] Code: 00 48 89 fa 48 c1 ea 03 80 3c 1a 00 0f 85 b1 04 00 00 4d 8b 65 10 49 c7 45 10 00 00 00 00 49 8d 7c 24 08 48 89 fa 48 c1 ea 03 <80> 3c 1a 00 0f 85 1a 05 00 00 49 8b 54 24 08 4c 89 ee 4c 89 ff 83 [ 469.013748][T16372] RSP: 0018:ffffc900042d7928 EFLAGS: 00010202 [ 469.015444][T16372] RAX: 0000000000080000 RBX: dffffc0000000000 RCX: ffffc9000cc04000 [ 469.017638][T16372] RDX: 0000000000000001 RSI: ffffffff823d8a35 RDI: 0000000000000008 [ 469.019970][T16372] RBP: 00000000000000e2 R08: 0000000000000006 R09: 0000000000000000 [ 469.022172][T16372] R10: 7fffffffffffefff R11: 0000000000000000 R12: 0000000000000000 [ 469.024358][T16372] R13: ffff888060dc5850 R14: 7fffffffffffefff R15: ffff888013389c00 [ 469.026530][T16372] FS: 0000000000000000(0000) GS:ffff88802b400000(0063) knlGS:00000000f5106b40 [ 469.028976][T16372] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 469.030810][T16372] CR2: 000000002e3faffc CR3: 000000005eff0000 CR4: 0000000000352ef0 [ 469.033103][T16372] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 469.035258][T16372] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 469.037560][T16372] Call Trace: [ 469.038474][T16372] [ 469.039341][T16372] ? die_addr+0x3b/0xa0 [ 469.040545][T16372] ? exc_general_protection+0x155/0x230 [ 469.042220][T16372] ? asm_exc_general_protection+0x26/0x30 [ 469.043800][T16372] ? iter_file_splice_write+0x9f5/0x10b0 [ 469.045346][T16372] ? iter_file_splice_write+0xa2d/0x10b0 [ 469.047091][T16372] ? iter_file_splice_write+0x9f5/0x10b0 [ 469.048646][T16372] ? __pfx_iter_file_splice_write+0x10/0x10 [ 469.050260][T16372] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 469.051954][T16372] ? splice_direct_to_actor+0x346/0xa40 [ 469.053485][T16372] ? __pfx_iter_file_splice_write+0x10/0x10 [ 469.055146][T16372] direct_splice_actor+0x18f/0x6c0 [ 469.056654][T16372] splice_direct_to_actor+0x346/0xa40 [ 469.058155][T16372] ? __pfx_direct_splice_actor+0x10/0x10 [ 469.059766][T16372] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 469.061569][T16372] ? __fget_files+0x1fc/0x3a0 [ 469.062901][T16372] do_splice_direct+0x178/0x250 [ 469.064282][T16372] ? __pfx_do_splice_direct+0x10/0x10 [ 469.065938][T16372] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 469.067639][T16372] ? rw_verify_area+0xcf/0x680 [ 469.068981][T16372] do_sendfile+0xafb/0xe40 [ 469.070221][T16372] ? __pfx_do_sendfile+0x10/0x10 [ 469.071752][T16372] ? __ia32_sys_futex_time32+0x1da/0x460 [ 469.073285][T16372] ? __ia32_sys_futex_time32+0x2fd/0x460 [ 469.074820][T16372] __ia32_compat_sys_sendfile+0x1e7/0x230 [ 469.076744][T16372] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 469.078587][T16372] ? syscall_user_dispatch+0x77/0x140 [ 469.080113][T16372] __do_fast_syscall_32+0x73/0x120 [ 469.081566][T16372] do_fast_syscall_32+0x32/0x80 [ 469.083029][T16372] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 469.084809][T16372] RIP: 0023:0xf7fe8579 [ 469.085976][T16372] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 469.091468][T16372] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 469.093816][T16372] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000004 [ 469.096034][T16372] RDX: 0000000000000000 RSI: 000000007ffff000 RDI: 0000000000000000 [ 469.098281][T16372] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 469.100501][T16372] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 469.102712][T16372] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 469.104921][T16372] [ 469.105817][T16372] Modules linked in: [ 469.108021][T16372] ---[ end trace 0000000000000000 ]--- [ 469.212302][T16372] RIP: 0010:iter_file_splice_write+0xa2d/0x10b0 [ 469.214677][T16372] Code: 00 48 89 fa 48 c1 ea 03 80 3c 1a 00 0f 85 b1 04 00 00 4d 8b 65 10 49 c7 45 10 00 00 00 00 49 8d 7c 24 08 48 89 fa 48 c1 ea 03 <80> 3c 1a 00 0f 85 1a 05 00 00 49 8b 54 24 08 4c 89 ee 4c 89 ff 83 [ 469.221505][T16372] RSP: 0018:ffffc900042d7928 EFLAGS: 00010202 [ 469.224209][T16372] RAX: 0000000000080000 RBX: dffffc0000000000 RCX: ffffc9000cc04000 [ 469.226842][T16372] RDX: 0000000000000001 RSI: ffffffff823d8a35 RDI: 0000000000000008 [ 469.229427][T16372] RBP: 00000000000000e2 R08: 0000000000000006 R09: 0000000000000000 [ 469.231592][T16372] R10: 7fffffffffffefff R11: 0000000000000000 R12: 0000000000000000 [ 469.234046][T16372] R13: ffff888060dc5850 R14: 7fffffffffffefff R15: ffff888013389c00 [ 469.236237][T16372] FS: 0000000000000000(0000) GS:ffff88802b600000(0063) knlGS:00000000f5106b40 [ 469.238676][T16372] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 469.240511][T16372] CR2: 00000000f74426c0 CR3: 000000005eff0000 CR4: 0000000000352ef0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 469.242999][T16372] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 469.245681][T16372] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 469.248048][T16372] Kernel panic - not syncing: Fatal exception [ 469.250508][T16372] Kernel Offset: disabled [ 469.251784][T16372] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:27:44 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853824b5 RDI=ffffffff9aacfea0 RBP=ffffffff9aacfe60 RSP=ffffc900042d7320 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000066 R14=ffffffff9aacfe60 R15=0000000000000000 RIP=ffffffff853824df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002e3faffc CR3=000000005eff0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000002a800000000 0000000500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=fffffbfff20bf8a2 RBX=fffffbfff20bf8a3 RCX=ffffffff81961bd9 RDX=fffffbfff20bf8a3 RSI=0000000000000008 RDI=ffffffff905fc510 RBP=fffffbfff20bf8a2 RSP=ffffc9000047fcc0 R8 =0000000000000000 R9 =fffffbfff20bf8a2 R10=ffffffff905fc517 R11=0000000000000001 R12=ffffffff9a81e1c8 R13=dffffc0000000000 R14=ffffffff905fc510 R15=0000000000000000 RIP=ffffffff821bb41e RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2c26d9 CR3=0000000054bae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000002a800000000 0000000500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000002000008fb RBX=0000000000000001 RCX=0000000000000830 RDX=0000000000000002 RSI=00000000000000fb RDI=0000000000000002 RBP=0000000000000001 RSP=ffffc90003c27610 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=0000000000000000 R14=ffff88802b53ed00 R15=ffff888021ada801 RIP=ffffffff81678038 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f74426c0 CR3=0000000054bae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853824b5 RDI=ffffffff9aacfea0 RBP=ffffffff9aacfe60 RSP=ffffc900042c7718 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6961633a66696163 R12=0000000000000000 R13=0000000000000063 R14=ffffffff9aacfe60 R15=0000000000000000 RIP=ffffffff853824df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000003211bffe CR3=000000005d454000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000