last executing test programs: 2m3.922249117s ago: executing program 1 (id=216): io_uring_setup(0x563b, &(0x7f00000001c0)={0x0, 0xfffffff6, 0x801, 0x400, 0x20002bb}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000240)="94", 0x1) tee(r0, r2, 0x8f5, 0x100000000000000) 2m3.769409094s ago: executing program 1 (id=217): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd26, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x289, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1c, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000300)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000600)={0x0, 0x9}, 0x8) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) socket$nl_rdma(0x10, 0x3, 0x14) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) write$char_usb(r6, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) ioctl$TIOCL_BLANKSCREEN(r5, 0x4b4b, &(0x7f0000000200)) socket$igmp6(0xa, 0x3, 0x2) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 2m1.826196962s ago: executing program 1 (id=225): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000009500000000000080000000000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) shutdown(r0, 0x1) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1600000000005da9ae0e0002040000000000000445ca0573bcca97f4503e4743469398277a1c13ce64", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000001000101000000000000000002000000c670f953bda7faefae2f85b8bcc98384360828edc8c56bb7f63e2716e7b043825e927fcd6f6154622e0d5e257caf4eaf60215d8b8dc007429db5ec60001671e1bbb175dabca02e97ca059db3a67ec31a"], 0x14}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r7}, 0x27) openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r8, &(0x7f0000006380)={0x2020}, 0xfffffffc) syz_fuse_handle_req(r8, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x44050) syz_open_dev$hidraw(0x0, 0x1, 0x200) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m1.06403418s ago: executing program 1 (id=226): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0xfffffffffffffeeb}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1a6f04d, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r4, 0x1) 1m59.609084005s ago: executing program 1 (id=233): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x18) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/cgroup', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/220, 0xdc) 1m59.210399146s ago: executing program 1 (id=234): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000009500000000000080000000000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) shutdown(r0, 0x1) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1600000000005da9ae0e0002040000000000000445ca0573bcca97f4503e4743469398277a1c13ce64", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000001000101000000000000000002000000c670f953bda7faefae2f85b8bcc98384360828edc8c56bb7f63e2716e7b043825e927fcd6f6154622e0d5e257caf4eaf60215d8b8dc007429db5ec60001671e1bbb175dabca02e97ca059db3a67ec31a"], 0x14}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r7}, 0x27) openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r8, &(0x7f0000006380)={0x2020}, 0xfffffffc) syz_fuse_handle_req(r8, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x44050) syz_open_dev$hidraw(0x0, 0x1, 0x200) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m59.143529615s ago: executing program 32 (id=234): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000009500000000000080000000000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) shutdown(r0, 0x1) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1600000000005da9ae0e0002040000000000000445ca0573bcca97f4503e4743469398277a1c13ce64", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000001000101000000000000000002000000c670f953bda7faefae2f85b8bcc98384360828edc8c56bb7f63e2716e7b043825e927fcd6f6154622e0d5e257caf4eaf60215d8b8dc007429db5ec60001671e1bbb175dabca02e97ca059db3a67ec31a"], 0x14}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r7}, 0x27) openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r8, &(0x7f0000006380)={0x2020}, 0xfffffffc) syz_fuse_handle_req(r8, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x44050) syz_open_dev$hidraw(0x0, 0x1, 0x200) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 6.228391451s ago: executing program 0 (id=958): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r5) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x30, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1ff}]}, 0x30}}, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000c80)={r3, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffc]}}) dup(r4) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f0000000500)={{0x8, 0x2, 0xfffffffd, 0xff, 'syz1\x00', 0x80000800}, 0x1, [0x56, 0x4, 0xa71, 0x4, 0x10000, 0x4, 0x0, 0xfffffff7, 0xfffffff8, 0x2, 0x0, 0x80000001, 0x3e, 0x10001, 0x1ff, 0x8, 0x70, 0x1, 0x8, 0x7d0f, 0x6, 0xf, 0x9, 0xb, 0x8, 0x3, 0x6, 0x0, 0xfffffff7, 0x3, 0x1, 0x80, 0x2, 0x6, 0x9, 0x100000, 0x40c1f881, 0x29b0, 0x1, 0x1d, 0x6, 0x6, 0x4, 0x8, 0x6, 0x6, 0xfff, 0x2, 0x5, 0xe1, 0x6, 0x3b233bf5, 0x1a, 0x81, 0x9, 0x4, 0x9, 0x10001, 0xc, 0x10001, 0x7d60, 0x64c2, 0x1000, 0x6, 0x81, 0x6, 0xfffffff9, 0x80000000, 0xd8, 0x6, 0x1, 0x9, 0x1, 0x7, 0x4, 0x10000, 0x5, 0xffffffff, 0x1000, 0x8, 0xd49b, 0x7f, 0x4, 0x2, 0xffff8001, 0x7, 0x4, 0x2e8d, 0x2, 0x2, 0x5, 0x800, 0x3, 0x1f, 0xffff, 0x7, 0xa7d, 0xfff, 0x6, 0x2, 0x1, 0x5, 0x9f0, 0x4, 0x8, 0x80000000, 0x2b5d, 0x8, 0x8724, 0x800, 0xffffffba, 0x4, 0x7f, 0x10001, 0x2, 0x5, 0x9, 0x6, 0xff, 0xffff, 0x73af9db5, 0xa4c, 0x6, 0x9072ee6, 0x5, 0x3, 0x5, 0x9]}) r7 = socket(0x8000000010, 0x2, 0x0) write(r7, &(0x7f00000002c0)="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", 0xfc) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008420000005010000"], 0x48) 5.335120293s ago: executing program 0 (id=960): setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000540)='string\x00\xa2\xb5\xbf4\x04`P\xfb\b}\xd6\xe1\"\xf9\xae\xa4N\x10\x13!\x04\x00\x97\xb6\x94\xc2\x0f8\x997Vg\xa2\xeb\xb4RU|\x99t\xe0N\x1c\xf4-\t\x80?\x10\xf7J\',\xd1Bxq\x16R\xe4\x88\x02\xfd\x81q<5n^.izR*\xcfL\xb7Q\xb8\xf2e\xbb\xd3r>\x86\x14\x963\xc0N\x18\x1cm%\x01w\xba*\xd1\xfa\xf8\xa3\xfabP\xaf\x9a\x0e\x9fjZ\xcaX\xdaV\x88`\xac\xe4\x86(\xfd\x0f\x96\xffd9;\xb5\xdd?\xbcc#\x17\xea\\\xc1\x12\xa2\xdcb\fB\xddk\xb3\x14=T\xcb\xe0\v\xeb\x18!_\xa6\x06\xb5*_^ns\xd7\xfe\xc1t\'\x1bJ4V\rV\xf0\xabP]\x18\x8c\xe3\xb0@\xe0A:', 0xca) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x120) openat$kvm(0xffffff9c, 0x0, 0x200241, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) read$FUSE(r0, &(0x7f0000002080)={0x2020, 0x0, 0x0}, 0x2020) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$can_raw(r5, &(0x7f0000000000)={&(0x7f0000000580), 0x10, &(0x7f0000000080)={&(0x7f00000005c0)=@canfd={{}, 0x19, 0x3, 0x0, 0x0, "0e7692fddc9d8ba5a0ac79669b2947a81f2e3c8973fc2af2a7fa10b9926ea28baed9b57d82ab23db557c307ae88da9c6c68d8ceae8e69b06707297b87f8c925a"}, 0x48}, 0x2, 0x0, 0x0, 0x4105}, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000400)={0x69, 0x0, r4, {{0x6, 0x3, 0x3f, 0x5, 0x6, 0x2b46, {0x0, 0x1, 0x5, 0x7, 0x5f23, 0x807c, 0x2, 0x5, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x81, 0x800}}, {0x0, 0x8}}}, 0xa0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4.227253515s ago: executing program 3 (id=967): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xce0a, 0x10100, 0x3, 0x370, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000680)=0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000004c0)={&(0x7f0000000480)=[{0xa, 0x0, 0xca, &(0x7f0000000380)="98ef24d42c48b4cb02f250f8a6d6c366b4cf88c88f21c493ee1d395fdc61dfb892d348abe51ee226e028b291ecf7f604efdaca52e64945f5cbae8edb9ce604c8c59a534f6f5f95d0598d63e6a52a0cd53d46d038c739d81337b62bea4fab3be48ebd6b3bc44b7d04678aee47d5e2e2866f0620bc3abcd76ac22811749c6216fb528d05c0c806c8ea1ba24b595af90c1400c9b05c3697d29f6c700c92feaed6775902abac08f7cab4dc1e5dfa8ecc5bd46df5ecf5057bb3d2d74b7208509586bb974d7f7e197329c274a3"}, {0xe6, 0x2000, 0x0, 0x0}], 0x2}) io_pgetevents(r5, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000700)={0x77359400}, 0x0) 4.196576886s ago: executing program 0 (id=968): r0 = io_uring_setup(0xad2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3d0}) close(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_async', 0x0, 0x8) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f00000000c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r5, &(0x7f00000001c0)={0x0, 0x3}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000400)={0x2, 0x7}, 0x2) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r7 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x1, 0x0}, 0x40012085) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) write$binfmt_misc(r8, &(0x7f0000001280), 0x6) syz_emit_ethernet(0x30b, &(0x7f0000000c80)={@broadcast, @remote, @val={@void, {0x8100, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x6, 0x6, "a72821", 0x2d1, 0x3a, 0x0, @remote, @mcast1, {[@routing={0x1, 0xe, 0x2, 0xf1, 0x0, [@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @mcast1, @private1, @mcast2, @empty]}, @routing={0x1, 0x4, 0x1, 0x3, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @empty]}], @time_exceed={0x3, 0x1, 0x0, 0x9, '\x00', {0x7, 0x6, "e18141", 0x8cbd, 0x0, 0xff, @empty, @loopback, [@srh={0x32, 0x6, 0x4, 0x3, 0x8, 0x0, 0x8, [@private0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @srh={0x21, 0x4, 0x4, 0x2, 0x5, 0x18, 0xed, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2a}]}, @fragment={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, @srh={0x2f, 0xe, 0x4, 0x7, 0x4, 0x8, 0x5, [@private0, @private2, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x17}]}, @fragment={0x2f, 0x0, 0x54, 0x1, 0x0, 0x1, 0x68}, @srh={0x2f, 0x4, 0x4, 0x2, 0x1, 0x8, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @loopback]}, @fragment={0x3c, 0x0, 0x2, 0x1, 0x0, 0x10, 0x64}, @srh={0x89, 0x4, 0x4, 0x2, 0x1, 0x20, 0x6, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0]}, @hopopts={0x84, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @pad1, @ra={0x5, 0x2, 0x17bd}]}, @fragment={0xc, 0x0, 0x5, 0x0, 0x0, 0x16, 0x65}], "9f9ea03d38169f6f53cfb380efa5ea7531af4eccddec5b708686c3b50de9f2b24d8d7535c30b77042e98cb079ae8c45e36e790785e3a1a9e954c0704572f31045386b54e970996763c7d0aed50efb6ec4b931dc864a3391bd0b83d8d4a625ae1c92a378cd912b5df204d39f7e9e0c784093d89069421a4d9ebcc5f7d6b33b67ed2a3431a449c783ab04e206a4f82d34585650b8d50cd81277ff67ad2c1195e39e1"}}}}}}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0186405, &(0x7f0000000340)={0x3, 0x8, {0x0}, {}, 0xffffffff, 0x2}) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0400d08008007500", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c00c500feaa00"/16], 0x3d8}}, 0x0) 3.279346346s ago: executing program 2 (id=969): r0 = io_uring_setup(0xad2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3d0}) close(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_async', 0x0, 0x8) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f00000000c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f00000001c0)={0x0, 0x3}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000400)={0x2, 0x7}, 0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r6 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x1, 0x0}, 0x40012085) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) write$binfmt_misc(r7, &(0x7f0000001280), 0x6) syz_emit_ethernet(0x30c, &(0x7f0000000c80)={@broadcast, @remote, @val={@void, {0x8100, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x6, 0x6, "a72821", 0x2d2, 0x3a, 0x0, @remote, @mcast1, {[@routing={0x1, 0xe, 0x2, 0xf1, 0x0, [@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @mcast1, @private1, @mcast2, @empty]}, @routing={0x1, 0x4, 0x1, 0x3, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @empty]}], @time_exceed={0x3, 0x1, 0x0, 0x9, '\x00', {0x7, 0x6, "e18141", 0x8cbd, 0x0, 0xff, @empty, @loopback, [@srh={0x32, 0x6, 0x4, 0x3, 0x8, 0x0, 0x8, [@private0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @srh={0x21, 0x4, 0x4, 0x2, 0x5, 0x18, 0xed, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2a}]}, @fragment={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, @srh={0x2f, 0xe, 0x4, 0x7, 0x4, 0x8, 0x5, [@private0, @private2, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x17}]}, @fragment={0x2f, 0x0, 0x54, 0x1, 0x0, 0x1, 0x68}, @srh={0x2f, 0x4, 0x4, 0x2, 0x1, 0x8, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @loopback]}, @fragment={0x3c, 0x0, 0x2, 0x1, 0x0, 0x10, 0x64}, @srh={0x89, 0x4, 0x4, 0x2, 0x1, 0x20, 0x6, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0]}, @hopopts={0x84, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @pad1, @ra={0x5, 0x2, 0x17bd}]}, @fragment={0xc, 0x0, 0x5, 0x0, 0x0, 0x16, 0x65}], "9f9ea03d38169f6f53cfb380efa5ea7531af4eccddec5b708686c3b50de9f2b24d8d7535c30b77042e98cb079ae8c45e36e790785e3a1a9e954c0704572f31045386b54e970996763c7d0aed50efb6ec4b931dc864a3391bd0b83d8d4a625ae1c92a378cd912b5df204d39f7e9e0c784093d89069421a4d9ebcc5f7d6b33b67ed2a3431a449c783ab04e206a4f82d34585650b8d50cd81277ff67ad2c1195e39e146"}}}}}}}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, &(0x7f0000000340)={0x3, 0x8, {}, {}, 0xffffffff, 0x2}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 3.202628811s ago: executing program 0 (id=970): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd74) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080), 0x1c) fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x7000000}}], 0xfdef, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2dc, 0x0, 0x111, 0x4b4, 0xec, 0xd4feffff, 0x214, 0x202, 0x225, 0x214, 0x278, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xfc}, @empty, [], [], 'veth1_vlan\x00', 'team_slave_0\x00'}, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [], [0x0, 0xffffffff], 'veth1_to_hsr\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@limit={{0x3c}, {0x0, 0x8000000}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xa, 'syz1\x00', {0x7f}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x338) r8 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/vlan/config\x00') pread64(r8, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) syz_emit_ethernet(0x336, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x300, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319c"}, {0x3, 0x14, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3}, {0x21, 0x6, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d1"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x40, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c814}, 0x20040015) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) socket$igmp6(0xa, 0x3, 0x2) 3.19128692s ago: executing program 3 (id=971): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) r1 = socket$packet(0x11, 0x2, 0x300) flistxattr(r1, &(0x7f0000000040)=""/7, 0x7) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1c8, 0x12) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x0) 2.390112418s ago: executing program 4 (id=974): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xce0a, 0x10100, 0x3, 0x370, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000680)=0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000004c0)={&(0x7f0000000480)=[{0xe6, 0x2000, 0x0, &(0x7f00000000c0)}], 0x1}) io_pgetevents(r5, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000700)={0x77359400}, 0x0) 2.335532156s ago: executing program 2 (id=975): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.236728416s ago: executing program 0 (id=976): r0 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010008000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020000087a32000000000900010073797a3000000000080005400000003d300011800b00010074617267657400002000028005000300c400000008000240000000000a000100"], 0xb4}, 0x1, 0x0, 0x0, 0x890}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000500)=""/25, 0x19}, {&(0x7f0000000540)=""/29, 0x1d}], 0x3, &(0x7f0000000800)=""/53, 0x35}, 0xfffffff3}], 0x1, 0x40012140, &(0x7f0000000a00)={0x0, 0x3938700}) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) socket(0x840000000002, 0x3, 0x100) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) 2.176454984s ago: executing program 2 (id=977): r0 = io_uring_setup(0xad2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3d0}) close(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_async', 0x0, 0x8) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f00000000c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r5, &(0x7f00000001c0)={0x0, 0x3}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000400)={0x2, 0x7}, 0x2) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r7 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x1, 0x0}, 0x40012085) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) write$binfmt_misc(r8, &(0x7f0000001280), 0x6) syz_emit_ethernet(0x30b, &(0x7f0000000c80)={@broadcast, @remote, @val={@void, {0x8100, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x6, 0x6, "a72821", 0x2d1, 0x3a, 0x0, @remote, @mcast1, {[@routing={0x1, 0xe, 0x2, 0xf1, 0x0, [@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @mcast1, @private1, @mcast2, @empty]}, @routing={0x1, 0x4, 0x1, 0x3, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @empty]}], @time_exceed={0x3, 0x1, 0x0, 0x9, '\x00', {0x7, 0x6, "e18141", 0x8cbd, 0x0, 0xff, @empty, @loopback, [@srh={0x32, 0x6, 0x4, 0x3, 0x8, 0x0, 0x8, [@private0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @srh={0x21, 0x4, 0x4, 0x2, 0x5, 0x18, 0xed, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2a}]}, @fragment={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, @srh={0x2f, 0xe, 0x4, 0x7, 0x4, 0x8, 0x5, [@private0, @private2, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x17}]}, @fragment={0x2f, 0x0, 0x54, 0x1, 0x0, 0x1, 0x68}, @srh={0x2f, 0x4, 0x4, 0x2, 0x1, 0x8, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @loopback]}, @fragment={0x3c, 0x0, 0x2, 0x1, 0x0, 0x10, 0x64}, @srh={0x89, 0x4, 0x4, 0x2, 0x1, 0x20, 0x6, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0]}, @hopopts={0x84, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @pad1, @ra={0x5, 0x2, 0x17bd}]}, @fragment={0xc, 0x0, 0x5, 0x0, 0x0, 0x16, 0x65}], "9f9ea03d38169f6f53cfb380efa5ea7531af4eccddec5b708686c3b50de9f2b24d8d7535c30b77042e98cb079ae8c45e36e790785e3a1a9e954c0704572f31045386b54e970996763c7d0aed50efb6ec4b931dc864a3391bd0b83d8d4a625ae1c92a378cd912b5df204d39f7e9e0c784093d89069421a4d9ebcc5f7d6b33b67ed2a3431a449c783ab04e206a4f82d34585650b8d50cd81277ff67ad2c1195e39e1"}}}}}}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0186405, &(0x7f0000000340)={0x3, 0x8, {0x0}, {}, 0xffffffff, 0x2}) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0400d08008007500", @ANYRES32=r10, @ANYBLOB="0400ac800400268004002f805ac4b98458f09f2dc850e282a843282a9e5186b44b09d86e4fa7281f7cb326768a99a425c71ed77e28137d925ea937564f1a0d4c309986f42fecfb21b2d9cb1272f352e06192bb040000004338b8d3a99eca37a3e355203fe670e2dd7d8c5dc8d8dd7bb4d6072b706feff4b8586a32e9577360fdea79e3495b670c6aa4c7a4a18781f7d1ed2df1d597ce160056f0a7df9ef0041afcf980a5ea00000081006c80040086800c00610001000000000000000400998008000900ac1414bb023747f76b25f96639a043898d3711835cb26e1d34e02e3550d995fabb358fa856912fbea0fc72e3291e9292c94f6ac722df902e1b415549110869e3615b6d8163ffc44036f6fec1be979d06b8ba64756124f1263bc4e7ece33ab0f9469e4bd6cb000000fec289ca90f8ad0c2fc20a9d793a2c6f7043e3c9a9f44f9bb611ecd892734298939b86b52ed5048b0917271edee9c2b1a082e24500e0323778e6e14407e221ff09d73278602ae6bc30cc3fc2982d7c89f5d7bb97b5146b6e097431dfcb5a7c2cc6fc219d12983fcc6f272321e7a63be1ebaf5531ac1f739470fa25f36f68fa95bc87a12dbe33fefac447c65a99cacb24c864dc79a3058cf0c16378346d5d0bc4068c78f985cd7eb59fffeee679992b07a41519fa59c9a7a81e429e560df6fc32e731fc53bf3c8ee85e100800b800", @ANYRES32=0x0, @ANYBLOB="0c00c500feaa00"/16], 0x3d8}}, 0x0) 1.340097375s ago: executing program 0 (id=978): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e77, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010100, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x48, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x6, 0x0, 0x400000000000000}, {0x0, 0x4, 0x400, 0xa78a}, 0xfffffffe, 0x6e6bb8, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000000300)={{0x3, 0x0, 0x80, {0x8080000, 0x80a0000}}, "f4cbeeb756336fcf354a429bfd496c66a6a4f391a9710cc234e0a8d04e9d6d0d53390ee30ef2ba18224437ed8df5c86b9713586059380fc7d773e3a3f0d06dfacb4acf381f5a5b537f66d15928472559b84684003d398f5d3bc1bca7aee5c39385bcd0062388842a1eaa099803119b61ff83003f7dfba2c0081223274eff7a2fe580a4233b21c1829a03dd7c60a1cce7bc783a2ab74c41b5b598332818dcd14c49c5352c4ce77bae6006bf89e7ac74ca18139fa0243743969692640b3ecf1fd9ae1ba224a2da12419f6733c466e8594b045b350c62c05176928fc37ee273864fde3aef1171730108a4b3eac583bdeb123252b2ff8c7f3183f5a3dd7872b3a7922e0cb24688273f7d64877ce789e7c6405bfedd12bc33c53738fd2d3de169dd9ad605bbab8f58618c9c170cae78c480438d87a12131be8e0014fb95b5f3ee54525ec93dbb3f06fb2c75edf5fd47bcc118c8c618c1b61109a9ce992441f83f42a0e7324e433d3cca61b0a96e60b650b5d42f5b8175311f8d2002407270ffdbea88bcc6a5920bc94d06851686c84224396f3ee2ec94676d3295ca98ddded2fa62603fe47d33f58a2594831df881623b18ebe95a00db267532b00ffcb501528c69632365d447ebcf2ecaab61d8727c7d2eb6bb0531c380961147d83686024682999e46db6a2ef4c0b29732fc75d72d0fdaba29a525a7a9e42342cc848034b93187170c0dffbe330ff955ddb4c4dce051c653da2db1f47992b9a6e71e05e31d9966123b59433f2ebe4e2faa307af9bd6d6569b81180f67c62a1d434ef19e88b2a49ddb4af972623054c5896b993b31388dd5d96f991aa6a37c151d37a5884eae88db6e4b77d6ef526e13ff31134228b64a5e844dbc3f8b549fffe41597abdfe235d080e3e3e9068eb37b0653a2dff65c846819b1427feca1a90247a69ba7699af1f04b90d1a0ceec2c1b1fc9bf20626f7531aa7c4e5ba6c84e761553fc4a76626cf9da7b9602464aba0515a1994b913eded69e623a452428d9037ddce882671f6ac133660296ce44118ab4bb5b3e6a3126a55168005227b3575673066258eb4ff5c23805ed1728f249283498b0e67e12dfba02bacae23f676a690e842bf02ab002b756e7c5153cf8bd4580e1be26ccc77e46a6d7166a5008034e1be6eaf5c6c44bd43a3a722f1697d6a46871eb49ca5773c7b3066ae24a6548841fb73320667ba1a0c6a484019d1aab525d85061e16cb129e9b4c1c93aa2ba5e193c214e158b69ff7cee0086535116d59c154e08f2817f66eb90af5f704ef6ec4cabfaef20eeba1ba54bd9cf6605c54706126f6701335bc8e8cbd1ced11ef86b8f4a20ddea4568983b4df60822f736e5970ac4a07af71cfbfff9292e9143f2cba391cc8a9495fd76a92f8bb6b01b8f94154e6397cb4bab66eaf623f590da17d7e244289485e00673a93a93b3fbaca0caf98529e788c9cceb457d803af7e7c2d5a27fff8d60f44a911f05fff39af3254151f1c0b43c80d9b6e67aa03fd1e9e0d2ac8f941d29ef65152a46d79f5a66b21867dd3446dd6c47fee6e8c94eccd58dbf37cb08536ece2d8e49892f25e2339faa66f6c04f12572e0ef4391b3db9ac8b509d43de347f7bd3c36542f701f8f9f1ea094ab71a0c83f0d3b78d6ff603b5f3ea0a8b2e36931cca5c1a9a27d582769a4f82053fae03a8cc17b19edd843a9ec6171b806af452eac111ac9f4940c4f8ff385fa07f43684fea51dc1610efbd6cf63427f084819f9e5525093d38b9977d7ba230ddbeccf05ddc7f12be568a81cbacb40e7e08da317b6ab01ff8102fe3539cc8d37e372fbb7d34201a6e1f4e208093011f3949d04eae986a93fedea49fa388142fbb14b9a04ee2b47843aa513628835c1e2079e726322deded47a30d2413028b1e62427ac13c59bb2cab4bf91a90dc1a48ce03c2fadcc86a7e45ba3bdef1671009c2d96f349cc9cdbaf538521c58d92f92a8b6c2fa1283a37c718a6f0c4480e35eb8264a00f6603e31d6a99d01782ed2a978f91387504134765faf606080203a722840cbdb0b59468c81484b7cd7fedc4bf6374515bdc2d881f9def756e454ebf06ce24c610313abc56d6884e27f56197580ef95ced24e6640dc9d6440d341934a75f877031e0440b6b89ca9088d6ac74d2acddfbbaa7881caeb8dbd8f4713b3c67ee60a0e8c43537bf1c6e24ddcbf2c13f45c227424156f6e1176424556652a0ce3dac4c76ba99763bc2d70e8916e2ba5fb46a94e9ec58ce304fa5b6dc5bc99aa82b84432d29917e3113c34e83beae5d047f7c85bc8af02f5c05e46a5bb5ad5a071b58b8cc6c70ee8ff80b223a0c60a9008503a647f2de9d3b9e9d245419a2b21535cf243d4c96a1e1db05c59ed172d72f2d65039650c8b8409750303b49095b0ddbed680ce4f281d40ad7b35ed4057057b7cae99099aa3cfbba62a7f1b8164d30b454a9d43cbb7129d3798a3e135f12fcea062c834c779eebd6e617dd36960632c9bfb18bfa506f4b0d3a01a33be4b1f78ab8c94ce7a1edadd8e1f1fa3ddedcd8dd8d08787c22920a770c75c565e2e34317338f4d09eeff2c5318bda4c141ecc9237c5715f76f1867e0033ae3c8b8d1b916579631c91b3d59c76c5ed64349f0964c836062a1dd74a3a8e7b26197acb18b25ceabf9d82b80ff44020878404be630776b24590e9ca70150e7ec739bd7a0fe941043925315a0dc6a31f55acb4f5c5a4c1f1894633a52c7e0a1ffac99db84c9a3a832570c2b6b1c22ad4705b793590b56d988c92213936cf038f94dfcfd863b39fb8b34838cd6dd77c8b6c9dfd491adfeab04a63d75498070dc383594b140d89ce405c20e748289d0d44dc24c594aa5619a0592872f84f975a70d9aba612d85c40224c5af31c65a31033213a6d31745f448797ed1506a023290af61e7f28e305d2ee8d4a5f4423ff9ec6acb0414f9a177ed43b087b645d5b49140a3165899fbc280697c0c6b6ce24e34107f0cfd50214086998675d476b71457e53582c81cad64483e07eace8c3d7f81ec239cd404afebd6b7703f0fea9d6d68efc46b018b2c029ebd65a0057dce75853d52d63c95ee9ae0970e3bd94173b368cb1c4d75af10b4d0f8f4ed217a927d978e5b663483b05df6d55be88a5c8eef612105a41497c877dc8603c9517f99416a94aefb56f4a193e2c7f7a5720ccee8a9f2c32a88d516b194f30774caa0d82da53041d856c676a7b1115268a0565d9f96631f351388680a6530665b3f602c49b5d256a4156ef9633c0f19b82115c131f4620619273acf00ddd903290e4c2464ea92678835233284f6f32590272e15a9742a8e1a2701d3b79460903816a21ccbcc6e87391c9b53bb740c63cc6ba67a1c5fd74c63bee4eada19c3713863724fa9165213045f90fa3a6cb0ba3a7cc8f339f547421680171be36b13b15f3e3c3db61b1db10657dabea859a4a4c4c86d6dc1a069060ba7f5ac4631226019692318e0024f0e564e1bfb942533aac251d5238a200915f827bfa98ef9f0ad8769899080e7e961419a550f339c3594906062c0813dde20769c4598b1e7851b0d564e7700de04ce0286d32135ca295631d792818a1d41da2d6d107a2eda082d7dd3cc790ad69c2ab29e1edf41932e5279fe9c605542f3cf442a5098f4fe7082969efe9d99f8ce41daaad5297a15741678629ecd009d102718d90dc0169ac9019a22a0fee9e74666d754cc737dbd26f7cfcd0017b3d96728e866a26f55e049bba592b5d77d4e638e2f8b04e9234398a4c1a265b4e058883a15828ffe19134166be7cbcc2efa4b05b6700318f09372b9b77a503f0cef6be3419a0539d3f11c5a10031babb91d22f65f36bc93632dfc7983480204760c537c1c672eb7033d23d2e694e8f54a5765395fa0cc7ab70366a2fbd6206f6f960ac5472ccc657ade101d59a0e2ed845be80a45d1c8ae08958e5b0e45ed9f1efcbfa4233b19797f22ebf0687bc7a00290878b80ea11d6e60f435f0a7ca52abea2bec404f5a6696bbd796f7b3e987eddae9f1ff2648dbf47bcce61604a35de7379cbbf8cabfc186be6d1cf8d1294acc6240eef87def4fa57127ed21b1f08030955d068b8a5fccd6d8ae1382272fe959cd96200b3e476005ab64f9f1dcbb63f7dbef447ca55a4a05b70c56b1b31dc6da9f72b0006f48b514f51c48d18ddc8256471a22da7278e3e92369c753b219b1dfcd3d7df750a4f40f114b75921cb6abc70b692e8324e846a3400650f00ba6dfd95db2e84c21676d15dcf48c67ab3241b949fcb87a260128ab0693f7b95df9afbd021721b2ac4d7b6ea14295c6adf76bf088beb49c5c52c8c121abb8ff2a0767ba042eca40804fad3bcd35d981586cd00430222e60dfce5a9c5851a1bd5a216ad393c39d2dea94599a32e16c375826ba191bb90a788b6bd19ddbf0d7f37c432a6eb53c5ace7fadd0f740e7c35ed073bad4d9a41b1c659e597e8f89455b057e798b172187b919a93f1e6a07008d70c3903eacc16574358ee064f41bf78090db48fde09a212f278a83c41b3b12df1441eac777bfa9d8d97d08cbafce1dd3043ecb7c4d8d710a2f3eec61965a518710c23175a92456565df30459ef5af71b24d29e29156ef75e0e29c169e6d8ab2292615bb021d5fd0dcea15586392e6b3ad45805316e0a581f8a579021d2323f6f5e61fa7ea3c04b3b52ffdaba8076f3a60868a30dd2a824b7f81598fb90e943ed8f5a4ed87f4bf090c37bcfe11dfa6432cfe7b1857a83c8186da769dad2c2816f2f6128644430180ffaa0ebf78b34c6f64586feffc7ac5d6785064c6ae6c1b1cc5246450a2aaf8e9e701745d3260fee5b0b5a83d3ed426c29bd830cca62b579fd25582a53a6f371c703703feae600feb47708a16b189eb08bbd01736c21ea31fc33feb2808a9c92ebeee90142312833f4086f0e5d0856b827c8291289f39cffcfd3847f50d94418fb69fc05b50fb9dc88b6fa1c0f1bd93f94adcdf8afced95cc3c688ca6a0869eb9cb8583f88664d8a5e40594bfb32e1e65c5683c65a9271ffe91766be4c4b80e4ca987e30c39ba985e1891041c7ac11c79bd0570eebf5f609105ca42fbe76f13b49a03eb8d8f1f1d94f945f23ac9b678811f82081acd59a520f6511a10b82230dee299652606eca7bef68cf2e2a7b65f2c44d761f9d4a110b64fda17787be8c48a9ba5dd76e069fc0ebc3c9f05928f4f01eee2d430318ff8146b7eb5eb3f61bb33be8182f652c1472d42e803bbe1744215c6b6d1a62cc523856db2111cd1423174bf79e9f5f6cf9ddae3f5e5d77ccd56b0299cfd05229f4871477b333e80123631db621a7a21348f7f54e4d0f968260fd22a4990a7fcc10475d4c4738c8d0714d65138e22ecbbb669ed9f1f86ab04298903273c2c4ac3892caea02b20b3aaeccacfd96f5f7618b0550427e2d2fbd9bc9b140974dfd71ded30a6b3ca95eaec0278258ee4b0ee46ed013de2eacd451d6e4f497371a8afb1ad147bb0f01f5582886546c35da6bacb40d536576a430f15da428835c9b83492ae39da41534dc1fab69145b4282090044dc713cda0bf4a2fd34430cf435978574a8d403612927f952985b38aae0e510d7d22513e6960c947ce3420d341e2f227bd73a23546e47ffe3f441c0d476495a783487dddda20e979718aac5233f986111ec63fe4846888275b63db19df930662185f826efb97113a6d4d20a0b2ec0a578d361d4d6890b68a0427f0a2d483f070cac4be55fdb25167910cfa7696ea44d6eda2addc51a00147971577ec387e5d72f77d250dbe783", "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"}) close(0x5) close(0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) 1.173514344s ago: executing program 2 (id=979): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x1) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x20000) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x10) 1.127081107s ago: executing program 3 (id=980): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c00"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd, 0x0, @void, @value}, 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) preadv(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0xffffffbf, 0x0) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_emit_vhci(0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0xfffffffc}, &(0x7f00000004c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2000, @fd, 0x1385, 0x8000, 0x2, 0x1c, 0x1, {0xffff}}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) write$binfmt_aout(r4, 0x0, 0xffffffdb) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 929.245754ms ago: executing program 4 (id=981): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x11, &(0x7f0000000700), 0x0) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) r2 = syz_io_uring_setup(0x22d, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x2001}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x26}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={0x0, r5}}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00", 0x4c}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) 928.898169ms ago: executing program 2 (id=982): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async, rerun: 32) r3 = socket$rxrpc(0x21, 0x2, 0x2) (rerun: 32) listen(r3, 0x2) (async, rerun: 64) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0, 0x14}], 0x1}, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3ed, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) connect$llc(r4, &(0x7f0000000040)={0x1a, 0x306, 0xf9, 0x8, 0x5, 0x55, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) listen(r3, 0x0) gettid() (async) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) 928.725646ms ago: executing program 4 (id=983): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="a3", 0x19fff}], 0x1) 907.273599ms ago: executing program 3 (id=984): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{}, {0x10}, {0x2}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0x80000) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 878.823883ms ago: executing program 4 (id=985): r0 = io_uring_setup(0xad2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3d0}) close(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_async', 0x0, 0x8) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f00000000c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r5, &(0x7f00000001c0)={0x0, 0x3}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000400)={0x2, 0x7}, 0x2) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r7 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x1, 0x0}, 0x40012085) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) write$binfmt_misc(r8, &(0x7f0000001280), 0x6) syz_emit_ethernet(0x29c, &(0x7f0000000c80)={@broadcast, @remote, @val={@void, {0x8100, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x6, 0x6, "a72821", 0x262, 0x3a, 0x0, @remote, @mcast1, {[@routing={0x1, 0x0, 0x2, 0xf1}, @routing={0x1, 0x4, 0x1, 0x3, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @empty]}], @time_exceed={0x3, 0x1, 0x0, 0x9, '\x00', {0x7, 0x6, "e18141", 0x8cbd, 0x0, 0xff, @empty, @loopback, [@srh={0x32, 0x6, 0x4, 0x3, 0x8, 0x0, 0x8, [@private0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @srh={0x21, 0x4, 0x4, 0x2, 0x5, 0x18, 0xed, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2a}]}, @fragment={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, @srh={0x2f, 0xe, 0x4, 0x7, 0x4, 0x8, 0x5, [@private0, @private2, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x17}]}, @fragment={0x2f, 0x0, 0x54, 0x1, 0x0, 0x1, 0x68}, @srh={0x2f, 0x4, 0x4, 0x2, 0x1, 0x8, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @loopback]}, @fragment={0x3c, 0x0, 0x2, 0x1, 0x0, 0x10, 0x64}, @srh={0x89, 0x4, 0x4, 0x2, 0x1, 0x20, 0x6, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0]}, @hopopts={0x84, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @pad1, @ra={0x5, 0x2, 0x17bd}]}, @fragment={0xc, 0x0, 0x5, 0x0, 0x0, 0x16, 0x65}], "9f9ea03d38169f6f53cfb380efa5ea7531af4eccddec5b708686c3b50de9f2b24d8d7535c30b77042e98cb079ae8c45e36e790785e3a1a9e954c0704572f31045386b54e970996763c7d0aed50efb6ec4b931dc864a3391bd0b83d8d4a625ae1c92a378cd912b5df204d39f7e9e0c784093d89069421a4d9ebcc5f7d6b33b67ed2a3431a449c783ab04e206a4f82d34585650b8d50cd81277ff67ad2c1195e39e146"}}}}}}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0186405, &(0x7f0000000340)={0x3, 0x8, {0x0}, {}, 0xffffffff, 0x2}) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0400d08008007500", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c00c500feaa00"/16], 0x3d8}}, 0x0) 279.333916ms ago: executing program 4 (id=986): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20) 279.019098ms ago: executing program 4 (id=987): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a, 0x4000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x4000, @empty, 0x10000}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) 119.18217ms ago: executing program 3 (id=988): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/mdstat\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000340)=""/157, 0x9d}], 0x1, 0x4, 0x0) 118.929588ms ago: executing program 3 (id=989): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xce0a, 0x10100, 0x3, 0x370, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000680)=0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000004c0)={&(0x7f0000000480)=[{0xa, 0x0, 0x0, 0x0}, {0xe6, 0x2000, 0x0, &(0x7f00000000c0)}], 0x2}) io_pgetevents(r5, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000700)={0x77359400}, 0x0) 0s ago: executing program 2 (id=990): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e00, 0x0) (fail_nth: 10) kernel console output (not intermixed with test programs): onfined pid=7609 comm="syz.0.366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 133.803822][ T40] audit: type=1326 audit(1749149133.820:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.2.362" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7fc00000 [ 133.888523][ T1328] libceph: connect (1)[c::]:6789 error -101 [ 133.890718][ T1328] libceph: mon0 (1)[c::]:6789 connect error [ 133.894837][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 133.937550][ T7625] netlink: 'syz.4.370': attribute type 2 has an invalid length. [ 133.940166][ T7625] netlink: 723 bytes leftover after parsing attributes in process `syz.4.370'. [ 133.945761][ T7625] Bluetooth: MGMT ver 1.23 [ 134.146557][ T1328] libceph: connect (1)[c::]:6789 error -101 [ 134.149160][ T1328] libceph: mon0 (1)[c::]:6789 connect error [ 134.164945][ T1337] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 134.334868][ T1337] usb 5-1: Using ep0 maxpacket: 8 [ 134.338348][ T1337] usb 5-1: config 0 has no interfaces? [ 134.340183][ T1337] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 134.343346][ T1337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.348558][ T1337] usb 5-1: config 0 descriptor?? [ 134.660679][ T1328] libceph: connect (1)[c::]:6789 error -101 [ 134.664601][ T1328] libceph: mon0 (1)[c::]:6789 connect error [ 134.924802][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 134.928285][ T40] audit: type=1326 audit(1749149134.960:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.2.376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7fc00000 [ 135.319524][ T7648] Cannot find del_set index 3 as target [ 135.423034][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.378'. [ 135.426239][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.378'. [ 135.774819][ T40] audit: type=1326 audit(1749149135.760:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.2.376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7fc00000 [ 135.964821][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 136.289388][ T1328] libceph: connect (1)[c::]:6789 error -101 [ 136.297969][ T1328] libceph: mon0 (1)[c::]:6789 connect error [ 136.596972][ T7677] netlink: 'syz.4.386': attribute type 3 has an invalid length. [ 136.600024][ T7677] netlink: 'syz.4.386': attribute type 1 has an invalid length. [ 136.600419][ T7671] syz.3.385: attempt to access beyond end of device [ 136.600419][ T7671] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 136.602435][ T7677] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.386'. [ 136.607734][ T7671] XFS (nbd3): SB validate failed with error -5. [ 136.756294][ T7679] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 136.758485][ T7679] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 136.864764][ T7621] ceph: No mds server is up or the cluster is laggy [ 136.866091][ T24] usb 5-1: USB disconnect, device number 3 [ 137.004837][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 137.102547][ T40] audit: type=1326 audit(1749149137.130:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7686 comm="syz.0.389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 137.235003][ T7698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.391'. [ 137.359846][ T7702] netlink: 24 bytes leftover after parsing attributes in process `syz.3.393'. [ 137.363356][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'. [ 137.556868][ T7708] FAULT_INJECTION: forcing a failure. [ 137.556868][ T7708] name failslab, interval 1, probability 0, space 0, times 0 [ 137.560919][ T7708] CPU: 1 UID: 0 PID: 7708 Comm: syz.4.394 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 137.560934][ T7708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 137.560941][ T7708] Call Trace: [ 137.560945][ T7708] [ 137.560949][ T7708] dump_stack_lvl+0x16c/0x1f0 [ 137.560968][ T7708] should_fail_ex+0x512/0x640 [ 137.560986][ T7708] ? fs_reclaim_acquire+0xae/0x150 [ 137.561001][ T7708] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 137.561016][ T7708] should_failslab+0xc2/0x120 [ 137.561027][ T7708] __kmalloc_noprof+0xd2/0x510 [ 137.561047][ T7708] tomoyo_realpath_from_path+0xc2/0x6e0 [ 137.561064][ T7708] ? tomoyo_profile+0x47/0x60 [ 137.561075][ T7708] tomoyo_path_number_perm+0x245/0x580 [ 137.561087][ T7708] ? tomoyo_path_number_perm+0x237/0x580 [ 137.561101][ T7708] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 137.561129][ T7708] ? find_held_lock+0x2b/0x80 [ 137.561140][ T7708] ? hook_file_ioctl_common+0x145/0x410 [ 137.561155][ T7708] ? __fget_files+0x20e/0x3c0 [ 137.561170][ T7708] ? __fput_deferred+0x470/0x480 [ 137.561183][ T7708] security_file_ioctl_compat+0x9b/0x240 [ 137.561199][ T7708] __ia32_compat_sys_ioctl+0xc3/0x370 [ 137.561215][ T7708] __do_fast_syscall_32+0x7c/0x3a0 [ 137.561233][ T7708] do_fast_syscall_32+0x32/0x80 [ 137.561249][ T7708] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.561263][ T7708] RIP: 0023:0xf7f24579 [ 137.561272][ T7708] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 137.561283][ T7708] RSP: 002b:00000000f502555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 137.561293][ T7708] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000000004b72 [ 137.561300][ T7708] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.561307][ T7708] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.561312][ T7708] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 137.561318][ T7708] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.561331][ T7708] [ 137.561336][ T7708] ERROR: Out of memory at tomoyo_realpath_from_path. [ 137.908601][ T40] audit: type=1326 audit(1749149137.940:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7686 comm="syz.0.389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 138.044937][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 138.222191][ T7727] netdevsim netdevsim3: Direct firmware load for ö×0”©Ûªq•ä…õD"€2ðNÿktT·Ej«³%¼Nµ§ failed with error -2 [ 138.222250][ T7727] netdevsim netdevsim3: Falling back to sysfs fallback for: ö×0”©Ûªq•ä…õD"€2ðNÿktT·Ej«³%¼Nµ§ [ 138.246886][ T1337] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 138.577505][ T7734] netlink: 16 bytes leftover after parsing attributes in process `syz.4.402'. [ 138.588973][ T1337] usb 7-1: config 0 has an invalid interface number: 201 but max is 0 [ 138.594789][ T1337] usb 7-1: config 0 has no interface number 0 [ 138.598077][ T1337] usb 7-1: config 0 interface 201 has no altsetting 0 [ 138.600163][ T1337] usb 7-1: New USB device found, idVendor=12d1, idProduct=b9ee, bcdDevice=11.78 [ 138.601064][ T7734] x_tables: ip6_tables: cgroup match: used from hooks FORWARD, but only valid from INPUT/OUTPUT/POSTROUTING [ 138.602928][ T1337] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.609329][ T1337] usb 7-1: config 0 descriptor?? [ 138.614717][ T1337] option 7-1:0.201: GSM modem (1-port) converter detected [ 138.624414][ T5359] udevd[5359]: worker [7114] terminated by signal 33 (Unknown signal 33) [ 138.627341][ T5359] udevd[5359]: worker [7114] failed while handling '/devices/platform/dummy_hcd.2/usb7/7-1' [ 138.940462][ T1337] usb 7-1: USB disconnect, device number 2 [ 138.945641][ T1337] option 7-1:0.201: device disconnected [ 139.084798][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 139.339261][ T7753] FAULT_INJECTION: forcing a failure. [ 139.339261][ T7753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.343699][ T7753] CPU: 3 UID: 0 PID: 7753 Comm: syz.3.409 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 139.343714][ T7753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.343721][ T7753] Call Trace: [ 139.343726][ T7753] [ 139.343734][ T7753] dump_stack_lvl+0x16c/0x1f0 [ 139.343753][ T7753] should_fail_ex+0x512/0x640 [ 139.343774][ T7753] _copy_to_user+0x32/0xd0 [ 139.343786][ T7753] simple_read_from_buffer+0xcb/0x170 [ 139.343802][ T7753] proc_fail_nth_read+0x197/0x270 [ 139.343817][ T7753] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.343831][ T7753] ? rw_verify_area+0xcf/0x680 [ 139.343845][ T7753] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.343858][ T7753] vfs_read+0x1e1/0xc60 [ 139.343874][ T7753] ? fdget_pos+0x2a2/0x370 [ 139.343892][ T7753] ? __pfx_vfs_read+0x10/0x10 [ 139.343906][ T7753] ? find_held_lock+0x2b/0x80 [ 139.343921][ T7753] ? __fget_files+0x20e/0x3c0 [ 139.343940][ T7753] ksys_read+0x12a/0x250 [ 139.343955][ T7753] ? __pfx_ksys_read+0x10/0x10 [ 139.343972][ T7753] ? rcu_is_watching+0x12/0xc0 [ 139.343986][ T7753] __do_fast_syscall_32+0x7c/0x3a0 [ 139.344003][ T7753] do_fast_syscall_32+0x32/0x80 [ 139.344020][ T7753] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.344034][ T7753] RIP: 0023:0xf702e579 [ 139.344043][ T7753] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 139.344054][ T7753] RSP: 002b:00000000f501e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 139.344064][ T7753] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f501e620 [ 139.344071][ T7753] RDX: 000000000000000f RSI: 00000000f7392ff4 RDI: 0000000000000000 [ 139.344077][ T7753] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 139.344082][ T7753] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 139.344088][ T7753] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.344101][ T7753] [ 139.509681][ T7758] netlink: 36 bytes leftover after parsing attributes in process `syz.0.410'. [ 140.001644][ T7791] FAULT_INJECTION: forcing a failure. [ 140.001644][ T7791] name failslab, interval 1, probability 0, space 0, times 0 [ 140.005640][ T7791] CPU: 3 UID: 0 PID: 7791 Comm: syz.4.424 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 140.005655][ T7791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.005662][ T7791] Call Trace: [ 140.005666][ T7791] [ 140.005671][ T7791] dump_stack_lvl+0x16c/0x1f0 [ 140.005691][ T7791] should_fail_ex+0x512/0x640 [ 140.005711][ T7791] should_failslab+0xc2/0x120 [ 140.005722][ T7791] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 140.005740][ T7791] ? alloc_io_context+0x21/0x2f0 [ 140.005755][ T7791] alloc_io_context+0x21/0x2f0 [ 140.005768][ T7791] set_task_ioprio+0x49e/0x670 [ 140.005782][ T7791] __do_sys_ioprio_set+0x55b/0xb50 [ 140.005799][ T7791] ? __do_sys_ioprio_set+0x3dd/0xb50 [ 140.005819][ T7791] __do_fast_syscall_32+0x7c/0x3a0 [ 140.005837][ T7791] do_fast_syscall_32+0x32/0x80 [ 140.005853][ T7791] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.005867][ T7791] RIP: 0023:0xf7f24579 [ 140.005875][ T7791] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 140.005886][ T7791] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000121 [ 140.005896][ T7791] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 140.005903][ T7791] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.005909][ T7791] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 140.005915][ T7791] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 140.005921][ T7791] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.005934][ T7791] [ 140.134798][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 140.142581][ T7792] FAULT_INJECTION: forcing a failure. [ 140.142581][ T7792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.146853][ T7792] CPU: 0 UID: 0 PID: 7792 Comm: syz.2.421 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 140.146888][ T7792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.146896][ T7792] Call Trace: [ 140.146900][ T7792] [ 140.146905][ T7792] dump_stack_lvl+0x16c/0x1f0 [ 140.146925][ T7792] should_fail_ex+0x512/0x640 [ 140.146945][ T7792] _copy_from_user+0x2e/0xd0 [ 140.146957][ T7792] get_compat_msghdr+0xa7/0x170 [ 140.146974][ T7792] ? __pfx_get_compat_msghdr+0x10/0x10 [ 140.146991][ T7792] ? __pfx__kstrtoull+0x10/0x10 [ 140.147008][ T7792] ___sys_sendmsg+0x1ae/0x1d0 [ 140.147030][ T7792] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.147045][ T7792] ? __lock_acquire+0x622/0x1c90 [ 140.147076][ T7792] __sys_sendmmsg+0x2f9/0x420 [ 140.147094][ T7792] ? __pfx___sys_sendmmsg+0x10/0x10 [ 140.147114][ T7792] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 140.147136][ T7792] ? fput+0x70/0xf0 [ 140.147147][ T7792] ? ksys_write+0x1ac/0x250 [ 140.147162][ T7792] ? __pfx_ksys_write+0x10/0x10 [ 140.147181][ T7792] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 140.147198][ T7792] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 140.147214][ T7792] __do_fast_syscall_32+0x7c/0x3a0 [ 140.147232][ T7792] do_fast_syscall_32+0x32/0x80 [ 140.147247][ T7792] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.147262][ T7792] RIP: 0023:0xf7fd5579 [ 140.147271][ T7792] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 140.147282][ T7792] RSP: 002b:00000000f50d555c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 140.147292][ T7792] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080007fc0 [ 140.147299][ T7792] RDX: 000000000800001d RSI: 0000000000000000 RDI: 0000000000000000 [ 140.147305][ T7792] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 140.147311][ T7792] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 140.147317][ T7792] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.147330][ T7792] [ 141.164923][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 142.204877][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 142.209175][ T40] audit: type=1326 audit(1749149142.240:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7815 comm="syz.4.433" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x0 [ 142.351585][ T7823] Invalid logical block size (254) [ 142.351774][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.433'. [ 142.634164][ T7838] syz_tun: entered allmulticast mode [ 142.643872][ T7837] syz_tun: left allmulticast mode [ 143.244793][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 143.297522][ T7830] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 143.300053][ T7830] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 143.307055][ T7830] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 143.312798][ T7830] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 143.315078][ T7830] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.318121][ T7830] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.322372][ T7830] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 143.325463][ T7830] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 143.328676][ T7830] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 143.331894][ T7830] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 143.334479][ T7830] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.340737][ T7830] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.491613][ T7849] wireguard0: entered promiscuous mode [ 143.494115][ T7849] wireguard0: entered allmulticast mode [ 143.878997][ T7870] FAULT_INJECTION: forcing a failure. [ 143.878997][ T7870] name failslab, interval 1, probability 0, space 0, times 0 [ 143.882972][ T7870] CPU: 3 UID: 0 PID: 7870 Comm: syz.3.449 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 143.882987][ T7870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.882994][ T7870] Call Trace: [ 143.882998][ T7870] [ 143.883003][ T7870] dump_stack_lvl+0x16c/0x1f0 [ 143.883024][ T7870] should_fail_ex+0x512/0x640 [ 143.883041][ T7870] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 143.883060][ T7870] should_failslab+0xc2/0x120 [ 143.883072][ T7870] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 143.883089][ T7870] ? __kernfs_new_node+0xd2/0x8e0 [ 143.883108][ T7870] __kernfs_new_node+0xd2/0x8e0 [ 143.883125][ T7870] ? __pfx___kernfs_new_node+0x10/0x10 [ 143.883144][ T7870] ? find_held_lock+0x2b/0x80 [ 143.883156][ T7870] ? kernfs_root+0xee/0x2a0 [ 143.883174][ T7870] kernfs_new_node+0x13c/0x1e0 [ 143.883193][ T7870] __kernfs_create_file+0x53/0x350 [ 143.883207][ T7870] sysfs_add_file_mode_ns+0x207/0x3c0 [ 143.883226][ T7870] internal_create_group+0x578/0xf30 [ 143.883245][ T7870] ? __pfx_internal_create_group+0x10/0x10 [ 143.883267][ T7870] loop_configure+0xc4c/0x1720 [ 143.883293][ T7870] ? __pfx_loop_configure+0x10/0x10 [ 143.883320][ T7870] lo_ioctl+0x1295/0x2760 [ 143.883334][ T7870] ? __pfx_stack_trace_save+0x10/0x10 [ 143.883347][ T7870] ? stack_depot_save_flags+0x28/0xa40 [ 143.883365][ T7870] ? __lock_acquire+0xb8a/0x1c90 [ 143.883380][ T7870] ? kasan_save_stack+0x42/0x60 [ 143.883395][ T7870] ? kasan_save_stack+0x33/0x60 [ 143.883410][ T7870] ? kasan_save_track+0x14/0x30 [ 143.883425][ T7870] ? kasan_save_free_info+0x3b/0x60 [ 143.883439][ T7870] ? __kasan_slab_free+0x51/0x70 [ 143.883454][ T7870] ? kfree+0x2b4/0x4d0 [ 143.883467][ T7870] ? tomoyo_path_number_perm+0x470/0x580 [ 143.883480][ T7870] ? security_file_ioctl_compat+0x9b/0x240 [ 143.883494][ T7870] ? __ia32_compat_sys_ioctl+0xc3/0x370 [ 143.883507][ T7870] ? __do_fast_syscall_32+0x7c/0x3a0 [ 143.883522][ T7870] ? do_fast_syscall_32+0x32/0x80 [ 143.883537][ T7870] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 143.883552][ T7870] ? __pfx_lo_ioctl+0x10/0x10 [ 143.883580][ T7870] ? kasan_quarantine_put+0x10a/0x240 [ 143.883596][ T7870] ? lockdep_hardirqs_on+0x7c/0x110 [ 143.883612][ T7870] ? find_held_lock+0x2b/0x80 [ 143.883623][ T7870] ? tomoyo_path_number_perm+0x295/0x580 [ 143.883637][ T7870] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 143.883672][ T7870] lo_compat_ioctl+0xb9/0x170 [ 143.883687][ T7870] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 143.883700][ T7870] compat_blkdev_ioctl+0x2eb/0x7a0 [ 143.883716][ T7870] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 143.883729][ T7870] ? __fput_deferred+0x470/0x480 [ 143.883743][ T7870] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 143.883761][ T7870] __ia32_compat_sys_ioctl+0x242/0x370 [ 143.883776][ T7870] __do_fast_syscall_32+0x7c/0x3a0 [ 143.883793][ T7870] do_fast_syscall_32+0x32/0x80 [ 143.883809][ T7870] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 143.883822][ T7870] RIP: 0023:0xf702e579 [ 143.883831][ T7870] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 143.883842][ T7870] RSP: 002b:00000000f501e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 143.883852][ T7870] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000004c0a [ 143.883859][ T7870] RDX: 0000000080000400 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.883865][ T7870] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 143.883871][ T7870] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 143.883877][ T7870] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 143.883890][ T7870] [ 143.884212][ T7870] loop3: detected capacity change from 0 to 1 [ 144.007514][ T7870] Dev loop3: unable to read RDB block 1 [ 144.012367][ T7870] loop3: AHDI p1 [ 144.013641][ T7870] loop3: partition table partially beyond EOD, truncated [ 144.284866][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 145.016087][ T5960] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.325187][ T5959] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.327970][ T5960] Bluetooth: hci3: command 0x0405 tx timeout [ 145.334798][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 145.415024][ T5960] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.808541][ T40] audit: type=1326 audit(1749149145.840:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7896 comm="syz.3.456" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x0 [ 145.980190][ T7904] netlink: 84 bytes leftover after parsing attributes in process `syz.0.457'. [ 146.003709][ T7903] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 146.150977][ T7907] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 146.364819][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 146.555832][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.462'. [ 146.558992][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.462'. [ 146.561527][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.462'. [ 146.566473][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.462'. [ 146.568933][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.462'. [ 147.085177][ T5960] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.404842][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 147.414965][ T5959] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.420083][ T5960] Bluetooth: hci3: command 0x0405 tx timeout [ 147.485029][ T5960] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.635400][ T40] audit: type=1326 audit(1749149147.670:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.4.467" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7fc00000 [ 148.440803][ T40] audit: type=1326 audit(1749149148.470:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.4.467" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7fc00000 [ 148.449728][ T40] audit: type=1326 audit(1749149148.470:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.4.467" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f24579 code=0x7fc00000 [ 148.454832][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 148.464360][ T7946] tmpfs: Unknown parameter 'c ©Îlocks' [ 148.474231][ T40] audit: type=1326 audit(1749149148.470:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.4.467" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7fc00000 [ 148.503414][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.472'. [ 148.506636][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.472'. [ 148.702359][ T7962] fuse: Unknown parameter '¤ ä$F' [ 149.120870][ T40] audit: type=1326 audit(1749149149.150:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.2.480" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7fc00000 [ 149.164963][ T5960] Bluetooth: hci0: command 0x0c1a tx timeout [ 149.485227][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 149.495102][ T5959] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.497946][ T5960] Bluetooth: hci3: command 0x0405 tx timeout [ 149.577987][ T5960] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.974836][ T40] audit: type=1326 audit(1749149149.980:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.2.480" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7fc00000 [ 150.009662][ T7984] hub 6-0:1.0: USB hub found [ 150.012566][ T7984] hub 6-0:1.0: 1 port detected [ 150.346406][ T7993] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.348915][ T7993] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.416530][ T7993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.422272][ T7993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.534896][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 150.570478][ T7993] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.573501][ T7993] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.576816][ T7993] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.579595][ T7993] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.790061][ T7993] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 150.793586][ T7993] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 150.797283][ T7993] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 150.801174][ T7993] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 151.058983][ T7992] orangefs_mount: mount request failed with -4 [ 151.172491][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'. [ 151.225714][ T8010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'. [ 151.564800][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 151.873375][ T8024] FAULT_INJECTION: forcing a failure. [ 151.873375][ T8024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.878076][ T8024] CPU: 2 UID: 0 PID: 8024 Comm: syz.2.493 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 151.878091][ T8024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 151.878099][ T8024] Call Trace: [ 151.878102][ T8024] [ 151.878107][ T8024] dump_stack_lvl+0x16c/0x1f0 [ 151.878144][ T8024] should_fail_ex+0x512/0x640 [ 151.878170][ T8024] _copy_to_user+0x32/0xd0 [ 151.878181][ T8024] simple_read_from_buffer+0xcb/0x170 [ 151.878197][ T8024] proc_fail_nth_read+0x197/0x270 [ 151.878212][ T8024] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 151.878226][ T8024] ? rw_verify_area+0xcf/0x680 [ 151.878241][ T8024] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 151.878254][ T8024] vfs_read+0x1e1/0xc60 [ 151.878270][ T8024] ? fdget_pos+0x2a2/0x370 [ 151.878287][ T8024] ? __pfx_vfs_read+0x10/0x10 [ 151.878302][ T8024] ? find_held_lock+0x2b/0x80 [ 151.878316][ T8024] ? __fget_files+0x20e/0x3c0 [ 151.878336][ T8024] ksys_read+0x12a/0x250 [ 151.878351][ T8024] ? __pfx_ksys_read+0x10/0x10 [ 151.878367][ T8024] ? rcu_is_watching+0x12/0xc0 [ 151.878381][ T8024] __do_fast_syscall_32+0x7c/0x3a0 [ 151.878399][ T8024] do_fast_syscall_32+0x32/0x80 [ 151.878416][ T8024] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.878430][ T8024] RIP: 0023:0xf7fd5579 [ 151.878438][ T8024] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 151.878449][ T8024] RSP: 002b:00000000f50f6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 151.878459][ T8024] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50f6620 [ 151.878466][ T8024] RDX: 000000000000000f RSI: 00000000f7462ff4 RDI: 0000000000000000 [ 151.878483][ T8024] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 151.878488][ T8024] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 151.878495][ T8024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.878508][ T8024] [ 152.100413][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 152.103382][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 152.106295][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 152.110652][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 152.113353][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 152.183673][ T8034] wireguard0: entered promiscuous mode [ 152.188206][ T8034] wireguard0: entered allmulticast mode [ 152.230565][ T8036] openvswitch: netlink: Duplicate or invalid key (type 0). [ 152.233484][ T8036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.604988][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 152.962658][ T8047] lo speed is unknown, defaulting to 1000 [ 153.654809][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 154.414341][ T40] audit: type=1326 audit(1749149154.440:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz.3.508" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 154.429438][ T40] audit: type=1326 audit(1749149154.440:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz.3.508" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 154.437066][ T40] audit: type=1326 audit(1749149154.440:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz.3.508" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 154.443732][ T40] audit: type=1326 audit(1749149154.450:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz.3.508" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 154.452064][ T40] audit: type=1326 audit(1749149154.450:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz.3.508" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 154.459009][ T40] audit: type=1326 audit(1749149154.450:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz.3.508" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 154.466151][ T40] audit: type=1326 audit(1749149154.450:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz.3.508" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 154.473222][ T40] audit: type=1326 audit(1749149154.450:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz.3.508" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 154.480004][ T40] audit: type=1326 audit(1749149154.450:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz.3.508" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 154.489551][ T40] audit: type=1326 audit(1749149154.450:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz.3.508" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 154.684914][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 154.874975][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.511'. [ 155.204871][ T6021] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 155.450346][ T8107] lo speed is unknown, defaulting to 1000 [ 155.527035][ T6021] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.530326][ T6021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 155.533879][ T6021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 155.537262][ T6021] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 155.543120][ T6021] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 155.546256][ T6021] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 155.548805][ T6021] usb 5-1: Manufacturer: syz [ 155.552556][ T6021] usb 5-1: config 0 descriptor?? [ 155.724833][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 155.814975][ T6021] rc_core: IR keymap rc-hauppauge not found [ 155.819009][ T6021] Registered IR keymap rc-empty [ 155.820868][ T6021] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 155.834961][ T6021] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 155.835323][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.518'. [ 155.856507][ T6021] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 155.862075][ T6021] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input98 [ 155.873176][ T6021] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 155.896096][ T6021] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 155.924911][ T6021] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 155.945091][ T6021] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 155.964937][ T6021] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 155.985369][ T6021] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 156.005210][ T6021] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 156.034997][ T6021] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 156.065323][ T6021] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 156.085013][ T6021] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 156.106297][ T6021] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 156.109460][ T6021] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 156.587192][ T6021] usb 5-1: USB disconnect, device number 4 [ 156.612070][ T8126] Driver unsupported XDP return value 0 on prog (id 95) dev N/A, expect packet loss! [ 156.664998][ T8129] xt_SECMARK: invalid mode: 0 [ 156.764984][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 157.011517][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.525'. [ 157.014411][ T8139] netlink: 'syz.3.525': attribute type 5 has an invalid length. [ 157.017346][ T8139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.525'. [ 157.037204][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'. [ 157.040930][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'. [ 157.070522][ T8139] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 157.084462][ T8139] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 157.112330][ T8139] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 157.126773][ T8139] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 157.130465][ T8139] geneve2: entered promiscuous mode [ 157.150182][ T8139] geneve2: entered allmulticast mode [ 157.805481][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 158.350125][ T8157] lo speed is unknown, defaulting to 1000 [ 158.440942][ T8160] io-wq is not configured for unbound workers [ 158.844929][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 158.877476][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'. [ 159.388055][ T8176] netlink: 56 bytes leftover after parsing attributes in process `syz.3.535'. [ 159.449250][ T8180] netlink: 'syz.3.535': attribute type 1 has an invalid length. [ 159.452181][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.535'. [ 159.629946][ T8183] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.536'. [ 159.894924][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 160.291538][ T8197] binder: 8196:8197 ioctl 540f 80000240 returned -22 [ 160.509103][ T8201] trusted_key: encrypted_key: keylen parameter is missing [ 160.767950][ T8209] netlink: 'syz.0.544': attribute type 10 has an invalid length. [ 160.770771][ T8209] netlink: 18 bytes leftover after parsing attributes in process `syz.0.544'. [ 160.773580][ T8209] dummy0: entered promiscuous mode [ 160.778020][ T8209] bridge0: port 3(dummy0) entered blocking state [ 160.780247][ T8209] bridge0: port 3(dummy0) entered disabled state [ 160.782728][ T8209] dummy0: entered allmulticast mode [ 160.786458][ T8209] bridge0: port 3(dummy0) entered blocking state [ 160.788603][ T8209] bridge0: port 3(dummy0) entered forwarding state [ 160.829832][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 160.934927][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 160.949360][ T8219] netlink: set zone limit has 4 unknown bytes [ 161.895003][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 161.895015][ T40] audit: type=1326 audit(1749149161.930:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.4.552" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7fc00000 [ 161.974841][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 162.121656][ T8240] ipvlan2: entered promiscuous mode [ 162.182204][ T8243] overlayfs: failed to resolve './file0': -2 [ 162.299553][ T8244] __nla_validate_parse: 5 callbacks suppressed [ 162.299565][ T8244] netlink: 56 bytes leftover after parsing attributes in process `syz.0.555'. [ 162.496511][ T40] audit: type=1804 audit(1749149162.530:522): pid=8247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.553" name="/newroot/151/file0/bus/bus" dev="ramfs" ino=19214 res=1 errno=0 [ 162.505287][ T40] audit: type=1804 audit(1749149162.530:523): pid=8247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.553" name="/newroot/151/file0/bus/bus" dev="ramfs" ino=19214 res=1 errno=0 [ 162.881436][ T40] audit: type=1326 audit(1749149162.910:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.4.552" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7fc00000 [ 163.015827][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 163.214853][ T6016] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 163.380754][ T6016] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.385819][ T6016] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 163.391966][ T6016] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 163.396410][ T6016] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.401769][ T6016] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.401790][ T6016] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.403804][ T6016] usb 9-1: config 0 descriptor?? [ 163.835881][ T6016] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 163.840031][ T6016] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 163.917490][ T40] audit: type=1326 audit(1749149163.950:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.3.565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7fc00000 [ 164.054877][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 164.726484][ T40] audit: type=1326 audit(1749149164.750:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.3.565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7fc00000 [ 164.745970][ T40] audit: type=1326 audit(1749149164.750:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.3.565" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702e579 code=0x7fc00000 [ 164.752528][ T40] audit: type=1326 audit(1749149164.750:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.3.565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7fc00000 [ 164.759106][ T40] audit: type=1326 audit(1749149164.750:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.3.565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7fc00000 [ 164.766001][ T40] audit: type=1326 audit(1749149164.750:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.3.565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7fc00000 [ 165.084991][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 165.110954][ T8292] netlink: 'syz.0.566': attribute type 1 has an invalid length. [ 165.113409][ T8292] netlink: 'syz.0.566': attribute type 2 has an invalid length. [ 165.221536][ T6016] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 165.246906][ T8296] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 166.030190][ T8305] binder: 8302:8305 ioctl c018620c 80000380 returned -22 [ 166.135037][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 166.405380][ T53] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 167.164861][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 167.267608][ T8322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 167.309419][ T6007] usb 9-1: USB disconnect, device number 2 [ 167.415215][ T6016] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 167.576890][ T6016] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 167.582363][ T6016] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.585338][ T6016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.587750][ T6016] usb 5-1: Product: syz [ 167.589546][ T6016] usb 5-1: Manufacturer: syz [ 167.591022][ T6016] usb 5-1: SerialNumber: syz [ 167.594683][ T8319] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 167.653052][ T5960] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 167.737285][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.576'. [ 167.764872][ T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 167.828924][ T6016] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 167.836526][ T6016] usb 5-1: USB disconnect, device number 5 [ 167.951843][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 167.954627][ T29] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 167.960107][ T29] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 167.963307][ T29] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 167.966152][ T29] usb 7-1: Product: syz [ 167.967465][ T29] usb 7-1: Manufacturer: syz [ 167.968924][ T29] usb 7-1: SerialNumber: syz [ 167.972830][ T29] usb 7-1: config 0 descriptor?? [ 167.975191][ T8324] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 168.204976][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 168.252060][ T8337] 9pnet_fd: Insufficient options for proto=fd [ 168.255954][ T8337] loop6: detected capacity change from 0 to 524287999 [ 168.374631][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.579'. [ 168.378037][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.579'. [ 168.381529][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.579'. [ 168.386423][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.579'. [ 168.390102][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.579'. [ 168.444825][ T29] usb 7-1: USB disconnect, device number 3 [ 168.938983][ T8349] atomic_op ffff8880247ab198 conn xmit_atomic 0000000000000000 [ 168.948794][ T8349] atomic_op ffff88806c78c998 conn xmit_atomic 0000000000000000 [ 169.244845][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 169.253628][ T8356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.809991][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.588'. [ 169.812950][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.588'. [ 169.817411][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.588'. [ 169.821055][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.588'. [ 169.834218][ T8374] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 169.899080][ T8379] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 169.901837][ T8379] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 170.284843][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 170.565057][ T6182] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 170.726210][ T6182] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 170.729884][ T6182] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 170.732965][ T6182] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 170.742533][ T6182] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 170.747634][ T6182] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.751146][ T6182] usb 7-1: Product: syz [ 170.753080][ T6182] usb 7-1: Manufacturer: syz [ 170.756386][ T6182] usb 7-1: SerialNumber: syz [ 170.761514][ T6182] usb 7-1: config 0 descriptor?? [ 170.996087][ T6182] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 171.161340][ T8399] nbd: nbd0 already in use [ 171.200076][ T6182] usb 7-1: USB disconnect, device number 4 [ 171.334830][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 171.631885][ T8411] loop6: detected capacity change from 0 to 524287999 [ 171.647434][ T8411] netlink: 'syz.3.598': attribute type 12 has an invalid length. [ 171.976362][ T5960] Bluetooth: hci1: Dropping invalid advertising data [ 171.979028][ T5960] Bluetooth: hci1: Malformed LE Event: 0x02 [ 172.364915][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 172.601242][ T8415] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 172.878649][ T8431] tipc: Started in network mode [ 172.880419][ T8431] tipc: Node identity ac141425, cluster identity 4711 [ 172.883132][ T8431] tipc: New replicast peer: 0.0.0.0 [ 172.885329][ T8431] tipc: Enabled bearer , priority 10 [ 172.891611][ T8431] tipc: New replicast peer: 172.20.20.170 [ 173.237788][ T8438] __nla_validate_parse: 6 callbacks suppressed [ 173.237800][ T8438] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.605'. [ 173.290182][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.606'. [ 173.293007][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.606'. [ 173.296408][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.606'. [ 173.299627][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.606'. [ 173.302403][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.606'. [ 173.404890][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 173.797846][ T8443] fuseblk: Bad value for 'fd' [ 173.964881][ T5960] Bluetooth: hci0: command 0x0c1a tx timeout [ 173.991180][ T29] tipc: Node number set to 2886997029 [ 174.126031][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 174.126046][ T40] audit: type=1326 audit(1749149174.160:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.0.610" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 174.444834][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 174.558346][ T8462] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 174.923451][ T8472] FAULT_INJECTION: forcing a failure. [ 174.923451][ T8472] name failslab, interval 1, probability 0, space 0, times 0 [ 174.923560][ T40] audit: type=1326 audit(1749149174.950:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.0.610" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 174.937980][ T8472] CPU: 0 UID: 0 PID: 8472 Comm: syz.2.615 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 174.937996][ T8472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 174.938003][ T8472] Call Trace: [ 174.938007][ T8472] [ 174.938011][ T8472] dump_stack_lvl+0x16c/0x1f0 [ 174.938030][ T8472] should_fail_ex+0x512/0x640 [ 174.938047][ T8472] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 174.938066][ T8472] should_failslab+0xc2/0x120 [ 174.938080][ T8472] __kmalloc_cache_node_noprof+0x6d/0x420 [ 174.938099][ T8472] ? post_alloc_hook+0x1af/0x230 [ 174.938113][ T8472] ? __get_vm_area_node+0x101/0x330 [ 174.938129][ T8472] __get_vm_area_node+0x101/0x330 [ 174.938144][ T8472] __vmalloc_node_range_noprof+0x271/0x14b0 [ 174.938159][ T8472] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 174.938178][ T8472] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 174.938195][ T8472] ? __kernel_text_address+0xd/0x40 [ 174.938212][ T8472] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 174.938227][ T8472] ? aa_get_newest_label+0x375/0x680 [ 174.938240][ T8472] ? __pfx_aa_get_newest_label+0x10/0x10 [ 174.938256][ T8472] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 174.938280][ T8472] __vmalloc_node_noprof+0xad/0xf0 [ 174.938297][ T8472] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 174.938313][ T8472] bpf_prog_alloc_no_stats+0x54/0x630 [ 174.938327][ T8472] ? security_capable+0x7e/0x260 [ 174.938339][ T8472] bpf_prog_alloc+0x3b/0x230 [ 174.938352][ T8472] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 174.938370][ T8472] bpf_prog_load+0x1a04/0x2490 [ 174.938390][ T8472] ? __pfx_bpf_prog_load+0x10/0x10 [ 174.938420][ T8472] __sys_bpf+0x433c/0x4d80 [ 174.938432][ T8472] ? __pfx___sys_bpf+0x10/0x10 [ 174.938442][ T8472] ? ksys_write+0x190/0x250 [ 174.938466][ T8472] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 174.938495][ T8472] ? fput+0x70/0xf0 [ 174.938506][ T8472] ? ksys_write+0x1ac/0x250 [ 174.938521][ T8472] ? __pfx_ksys_write+0x10/0x10 [ 174.938539][ T8472] __ia32_sys_bpf+0x76/0xe0 [ 174.938550][ T8472] __do_fast_syscall_32+0x7c/0x3a0 [ 174.938568][ T8472] do_fast_syscall_32+0x32/0x80 [ 174.938584][ T8472] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.938597][ T8472] RIP: 0023:0xf7fd5579 [ 174.938606][ T8472] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 174.938617][ T8472] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 174.938628][ T8472] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 174.938634][ T8472] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 174.938641][ T8472] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 174.938647][ T8472] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 174.938653][ T8472] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.938666][ T8472] [ 174.938672][ T8472] warn_alloc: 1 callbacks suppressed [ 174.938677][ T8472] syz.2.615: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 175.060929][ T8472] CPU: 3 UID: 0 PID: 8472 Comm: syz.2.615 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 175.060945][ T8472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 175.060951][ T8472] Call Trace: [ 175.060956][ T8472] [ 175.060960][ T8472] dump_stack_lvl+0x16c/0x1f0 [ 175.060980][ T8472] warn_alloc+0x248/0x3a0 [ 175.060998][ T8472] ? __pfx_warn_alloc+0x10/0x10 [ 175.061015][ T8472] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 175.061031][ T8472] ? post_alloc_hook+0x1af/0x230 [ 175.061047][ T8472] ? __kasan_kmalloc+0x8a/0xb0 [ 175.061064][ T8472] ? __get_vm_area_node+0x208/0x330 [ 175.061081][ T8472] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 175.061100][ T8472] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 175.061118][ T8472] ? __kernel_text_address+0xd/0x40 [ 175.061135][ T8472] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 175.061150][ T8472] ? aa_get_newest_label+0x375/0x680 [ 175.061163][ T8472] ? __pfx_aa_get_newest_label+0x10/0x10 [ 175.061176][ T8472] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 175.061190][ T8472] __vmalloc_node_noprof+0xad/0xf0 [ 175.061229][ T8472] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 175.061246][ T8472] bpf_prog_alloc_no_stats+0x54/0x630 [ 175.061260][ T8472] ? security_capable+0x7e/0x260 [ 175.061273][ T8472] bpf_prog_alloc+0x3b/0x230 [ 175.061286][ T8472] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 175.061303][ T8472] bpf_prog_load+0x1a04/0x2490 [ 175.061324][ T8472] ? __pfx_bpf_prog_load+0x10/0x10 [ 175.061355][ T8472] __sys_bpf+0x433c/0x4d80 [ 175.061366][ T8472] ? __pfx___sys_bpf+0x10/0x10 [ 175.061377][ T8472] ? ksys_write+0x190/0x250 [ 175.061395][ T8472] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 175.061419][ T8472] ? fput+0x70/0xf0 [ 175.061430][ T8472] ? ksys_write+0x1ac/0x250 [ 175.061445][ T8472] ? __pfx_ksys_write+0x10/0x10 [ 175.061463][ T8472] __ia32_sys_bpf+0x76/0xe0 [ 175.061478][ T8472] __do_fast_syscall_32+0x7c/0x3a0 [ 175.061495][ T8472] do_fast_syscall_32+0x32/0x80 [ 175.061511][ T8472] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.061525][ T8472] RIP: 0023:0xf7fd5579 [ 175.061534][ T8472] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 175.061545][ T8472] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 175.061556][ T8472] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 175.061562][ T8472] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.061568][ T8472] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 175.061574][ T8472] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 175.061580][ T8472] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.061593][ T8472] [ 175.061608][ T8472] Mem-Info: [ 175.150990][ T8472] active_anon:8906 inactive_anon:129 isolated_anon:0 [ 175.150990][ T8472] active_file:5624 inactive_file:34012 isolated_file:0 [ 175.150990][ T8472] unevictable:1768 dirty:432 writeback:0 [ 175.150990][ T8472] slab_reclaimable:7067 slab_unreclaimable:57508 [ 175.150990][ T8472] mapped:30306 shmem:6529 pagetables:1012 [ 175.150990][ T8472] sec_pagetables:313 bounce:0 [ 175.150990][ T8472] kernel_misc_reclaimable:0 [ 175.150990][ T8472] free:55787 free_pcp:7424 free_cma:0 [ 175.164569][ T8472] Node 0 active_anon:1376kB inactive_anon:456kB active_file:500kB inactive_file:104kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:3308kB dirty:4kB writeback:0kB shmem:4644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8324kB pagetables:1332kB sec_pagetables:1148kB all_unreclaimable? no Balloon:0kB [ 175.175047][ T8472] Node 1 active_anon:34296kB inactive_anon:60kB active_file:21996kB inactive_file:135944kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:118160kB dirty:1736kB writeback:0kB shmem:21472kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3632kB pagetables:2736kB sec_pagetables:104kB all_unreclaimable? no Balloon:0kB [ 175.185318][ T8472] Node 0 DMA free:2092kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:644kB local_pcp:128kB free_cma:0kB [ 175.194021][ T8472] lowmem_reserve[]: 0 289 289 289 289 [ 175.195806][ T8472] Node 0 DMA32 free:17504kB boost:0kB min:13332kB low:16664kB high:19996kB reserved_highatomic:2048KB free_highatomic:976KB active_anon:1376kB inactive_anon:456kB active_file:500kB inactive_file:104kB unevictable:3536kB writepending:4kB present:1032196kB managed:296728kB mlocked:0kB bounce:0kB free_pcp:9416kB local_pcp:3256kB free_cma:0kB [ 175.205969][ T8472] lowmem_reserve[]: 0 0 0 0 0 [ 175.207503][ T8472] Node 1 DMA32 free:198264kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34296kB inactive_anon:60kB active_file:21996kB inactive_file:135944kB unevictable:3536kB writepending:1736kB present:1048432kB managed:948268kB mlocked:0kB bounce:0kB free_pcp:19748kB local_pcp:1396kB free_cma:0kB [ 175.217271][ T8472] lowmem_reserve[]: 0 0 0 0 0 [ 175.218791][ T8472] Node 0 DMA: 3*4kB (UM) 4*8kB (UM) 4*16kB (UM) 8*32kB (UM) 3*64kB (UM) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2092kB [ 175.223188][ T8472] Node 0 DMA32: 162*4kB (UMEH) 163*8kB (UMEH) 34*16kB (UMEH) 71*32kB (MEH) 69*64kB (UMEH) 23*128kB (UMH) 11*256kB (UME) 5*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 17504kB [ 175.228486][ T8472] Node 1 DMA32: 1102*4kB (UME) 434*8kB (UME) 140*16kB (UME) 398*32kB (UME) 328*64kB (UME) 120*128kB (UME) 75*256kB (UME) 54*512kB (UME) 44*1024kB (UM) 9*2048kB (M) 7*4096kB (UM) = 198216kB [ 175.234263][ T8472] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.237277][ T8472] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 175.240131][ T8472] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.243082][ T8472] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 175.246500][ T8472] 46619 total pagecache pages [ 175.248266][ T8472] 457 pages in swap cache [ 175.249703][ T8472] Free swap = 120580kB [ 175.251245][ T8472] Total swap = 124996kB [ 175.252587][ T8472] 524155 pages RAM [ 175.253909][ T8472] 0 pages HighMem/MovableOnly [ 175.255707][ T8472] 209066 pages reserved [ 175.257299][ T8472] 0 pages cma reserved [ 175.296295][ T1328] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 175.484889][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 175.535139][ T1328] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 175.583041][ T8496] fido_id[8496]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 175.604775][ T8490] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.608061][ T8490] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.697433][ T8490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.708493][ T8490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.754700][ T8490] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.758667][ T8490] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.761883][ T8490] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.765454][ T8490] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.784313][ T8490] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 175.788517][ T8490] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 175.792155][ T8490] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 175.796055][ T8490] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 175.804375][ T24] lo speed is unknown, defaulting to 1000 [ 175.812569][ T24] syz0: Port: 1 Link DOWN [ 175.994400][ T8505] FAULT_INJECTION: forcing a failure. [ 175.994400][ T8505] name failslab, interval 1, probability 0, space 0, times 0 [ 175.998732][ T8505] CPU: 3 UID: 0 PID: 8505 Comm: syz.4.623 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 175.998747][ T8505] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 175.998754][ T8505] Call Trace: [ 175.998758][ T8505] [ 175.998762][ T8505] dump_stack_lvl+0x16c/0x1f0 [ 175.998782][ T8505] should_fail_ex+0x512/0x640 [ 175.998798][ T8505] ? __kmalloc_noprof+0xbf/0x510 [ 175.998817][ T8505] ? bpf_test_init.isra.0+0x9e/0x140 [ 175.998832][ T8505] should_failslab+0xc2/0x120 [ 175.998843][ T8505] __kmalloc_noprof+0xd2/0x510 [ 175.998859][ T8505] ? __lock_acquire+0x622/0x1c90 [ 175.998875][ T8505] bpf_test_init.isra.0+0x9e/0x140 [ 175.998892][ T8505] bpf_prog_test_run_xdp+0x4f0/0x1590 [ 175.998914][ T8505] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 175.998932][ T8505] ? folio_get+0xa0/0xa0 [ 175.998950][ T8505] ? fput+0x70/0xf0 [ 175.998961][ T8505] ? __bpf_prog_get+0x97/0x2a0 [ 175.998976][ T8505] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 175.998993][ T8505] __sys_bpf+0x1488/0x4d80 [ 175.999005][ T8505] ? __pfx___sys_bpf+0x10/0x10 [ 175.999015][ T8505] ? ksys_write+0x190/0x250 [ 175.999033][ T8505] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 175.999057][ T8505] ? fput+0x70/0xf0 [ 175.999067][ T8505] ? ksys_write+0x1ac/0x250 [ 175.999082][ T8505] ? __pfx_ksys_write+0x10/0x10 [ 175.999100][ T8505] __ia32_sys_bpf+0x76/0xe0 [ 175.999112][ T8505] __do_fast_syscall_32+0x7c/0x3a0 [ 175.999129][ T8505] do_fast_syscall_32+0x32/0x80 [ 175.999145][ T8505] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.999159][ T8505] RIP: 0023:0xf7f24579 [ 175.999168][ T8505] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 175.999179][ T8505] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 175.999189][ T8505] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000600 [ 175.999196][ T8505] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.999202][ T8505] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 175.999208][ T8505] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 175.999214][ T8505] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.999227][ T8505] [ 176.159003][ T8487] orangefs_mount: mount request failed with -4 [ 176.185845][ T40] audit: type=1326 audit(1749149176.220:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.4.624" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7fc00000 [ 176.524892][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 176.811375][ T8507] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 176.832623][ T8523] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 176.964937][ T40] audit: type=1326 audit(1749149176.980:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.4.624" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7fc00000 [ 177.530495][ T8518] orangefs_mount: mount request failed with -4 [ 177.564798][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 178.125261][ T5960] Bluetooth: hci0: command 0x0c1a tx timeout [ 178.604845][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 179.281072][ T40] audit: type=1326 audit(1749149179.310:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8559 comm="syz.0.640" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 179.644867][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 179.648467][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 179.652187][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 179.854888][ T29] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 179.994933][ T29] usb 7-1: device descriptor read/64, error -71 [ 180.070589][ T40] audit: type=1326 audit(1749149180.100:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8559 comm="syz.0.640" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 180.254848][ T29] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 180.394869][ T29] usb 7-1: device descriptor read/64, error -71 [ 180.573222][ T29] usb usb7-port1: attempt power cycle [ 180.694831][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 180.876779][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.651'. [ 180.924993][ T29] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 180.945320][ T29] usb 7-1: device descriptor read/8, error -71 [ 181.144885][ T6016] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 181.214980][ T29] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 181.238501][ T29] usb 7-1: device descriptor read/8, error -71 [ 181.306473][ T6016] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.310125][ T6016] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.313218][ T6016] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 181.317408][ T6016] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 181.320679][ T6016] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.328161][ T6016] usb 9-1: config 0 descriptor?? [ 181.345443][ T29] usb usb7-port1: unable to enumerate USB device [ 181.406241][ T40] audit: type=1326 audit(1749149181.440:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.0.655" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 181.495503][ T40] audit: type=1326 audit(1749149181.530:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8609 comm="syz.3.657" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7fc00000 [ 181.734800][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 181.812023][ T6016] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 181.815351][ T6016] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 181.818119][ T6016] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 181.820570][ T6016] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 181.823835][ T6016] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 181.827102][ T6016] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 181.847202][ T6016] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 181.920235][ T6016] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 182.012440][ T8598] xt_nat: multiple ranges no longer supported [ 182.234407][ T40] audit: type=1326 audit(1749149182.250:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.0.655" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 182.262339][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.658'. [ 182.266511][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.658'. [ 182.326954][ T40] audit: type=1326 audit(1749149182.360:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8609 comm="syz.3.657" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7fc00000 [ 182.451067][ T8624] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 182.764814][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 183.804858][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 183.946208][ T6007] usb 9-1: USB disconnect, device number 3 [ 184.097401][ T8660] netlink: 'syz.2.671': attribute type 27 has an invalid length. [ 184.104374][ T8660] geneve2: left promiscuous mode [ 184.106857][ T8660] geneve2: left allmulticast mode [ 184.137973][ T8662] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 184.814438][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.675'. [ 184.818510][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.675'. [ 184.844848][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 185.162693][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'. [ 185.166034][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'. [ 185.168901][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'. [ 185.172621][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'. [ 185.175789][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'. [ 185.576401][ T40] audit: type=1326 audit(1749149185.610:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.0.679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 185.894853][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 185.981065][ T8687] netlink: 'syz.2.680': attribute type 1 has an invalid length. [ 186.010250][ T8687] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 186.020404][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 186.021297][ T8687] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.031100][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.680'. [ 186.034893][ T8687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.680'. [ 186.135476][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 186.174123][ T8693] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 186.394954][ T40] audit: type=1326 audit(1749149186.420:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.0.679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 186.402727][ T40] audit: type=1326 audit(1749149186.420:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.0.679" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf710e579 code=0x7fc00000 [ 186.414864][ T40] audit: type=1326 audit(1749149186.420:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.0.679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 186.421421][ T40] audit: type=1326 audit(1749149186.420:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.0.679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 186.428135][ T40] audit: type=1326 audit(1749149186.420:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.0.679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 186.434710][ T40] audit: type=1326 audit(1749149186.420:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.0.679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 186.441590][ T40] audit: type=1326 audit(1749149186.420:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.0.679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 186.449271][ T40] audit: type=1326 audit(1749149186.420:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.0.679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 186.455939][ T40] audit: type=1326 audit(1749149186.420:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.0.679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 186.549959][ T8715] pim6reg: entered allmulticast mode [ 186.557930][ T8715] pim6reg: left allmulticast mode [ 186.585048][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.688'. [ 186.924812][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 187.212602][ T8742] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 187.510888][ T8749] netlink: 'syz.2.698': attribute type 1 has an invalid length. [ 187.964853][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 188.720751][ T8763] syz.0.701 (8763) used greatest stack depth: 20472 bytes left [ 189.014793][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 189.378811][ T8790] kernel profiling enabled (shift: 17) [ 189.726686][ T8796] netlink: 'syz.3.710': attribute type 10 has an invalid length. [ 189.953450][ T8799] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 190.054829][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 190.201323][ T1139] Bluetooth: (null): Invalid header checksum [ 190.203769][ T1139] Bluetooth: (null): Invalid header checksum [ 190.334990][ T214] Bluetooth: (null): Invalid header checksum [ 190.456143][ T214] Bluetooth: (null): Invalid header checksum [ 190.566685][ T214] Bluetooth: (null): Invalid header checksum [ 190.695414][ T12] Bluetooth: (null): Invalid header checksum [ 190.802236][ T214] Bluetooth: (null): Invalid header checksum [ 190.885824][ T214] Bluetooth: (null): Invalid header checksum [ 191.016236][ T40] kauditd_printk_skb: 61 callbacks suppressed [ 191.016247][ T40] audit: type=1326 audit(1749149191.050:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8803 comm="syz.0.713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 191.094925][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 191.346801][ T8835] loop6: detected capacity change from 0 to 524287999 [ 191.362285][ T8835] netlink: 'syz.2.720': attribute type 12 has an invalid length. [ 191.723718][ T8847] __nla_validate_parse: 2 callbacks suppressed [ 191.723729][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.726'. [ 191.729101][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.726'. [ 191.732849][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.725'. [ 191.736162][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.725'. [ 192.095566][ T40] audit: type=1326 audit(1749149192.130:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8852 comm="syz.2.728" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7fc00000 [ 192.101675][ T8861] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 192.135004][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 192.435774][ T8872] FAULT_INJECTION: forcing a failure. [ 192.435774][ T8872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.440757][ T8872] CPU: 0 UID: 0 PID: 8872 Comm: syz.4.732 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 192.440772][ T8872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 192.440779][ T8872] Call Trace: [ 192.440784][ T8872] [ 192.440788][ T8872] dump_stack_lvl+0x16c/0x1f0 [ 192.440825][ T8872] should_fail_ex+0x512/0x640 [ 192.440849][ T8872] _copy_from_user+0x2e/0xd0 [ 192.440860][ T8872] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 192.440874][ T8872] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 192.440891][ T8872] do_ipv6_setsockopt+0x865/0x4300 [ 192.440905][ T8872] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 192.440919][ T8872] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 192.440933][ T8872] ? __lock_acquire+0x622/0x1c90 [ 192.440957][ T8872] ? __pfx___might_resched+0x10/0x10 [ 192.440972][ T8872] ? aa_sk_perm+0x2f4/0xb10 [ 192.440986][ T8872] ? ipv6_setsockopt+0xcb/0x170 [ 192.440996][ T8872] ipv6_setsockopt+0xcb/0x170 [ 192.441009][ T8872] udpv6_setsockopt+0x7d/0xd0 [ 192.441023][ T8872] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 192.441035][ T8872] do_sock_setsockopt+0x221/0x470 [ 192.441073][ T8872] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 192.441103][ T8872] __sys_setsockopt+0x120/0x1a0 [ 192.441131][ T8872] __ia32_sys_setsockopt+0xbc/0x160 [ 192.441153][ T8872] ? lockdep_hardirqs_on+0x7c/0x110 [ 192.441177][ T8872] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 192.441195][ T8872] __do_fast_syscall_32+0x7c/0x3a0 [ 192.441212][ T8872] do_fast_syscall_32+0x32/0x80 [ 192.441228][ T8872] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.441242][ T8872] RIP: 0023:0xf7f24579 [ 192.441251][ T8872] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 192.441262][ T8872] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 192.441272][ T8872] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 192.441279][ T8872] RDX: 000000000000001c RSI: 00000000800001c0 RDI: 0000000000000014 [ 192.441285][ T8872] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.441291][ T8872] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 192.441297][ T8872] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.441310][ T8872] [ 192.618649][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.736'. [ 192.621438][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.736'. [ 192.624438][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.736'. [ 192.627758][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.736'. [ 192.630526][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.736'. [ 192.935086][ T40] audit: type=1326 audit(1749149192.970:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8852 comm="syz.2.728" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7fc00000 [ 193.164836][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 193.439590][ T8881] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 193.658823][ T8908] lo speed is unknown, defaulting to 1000 [ 193.736528][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.738540][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.748423][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.746'. [ 194.204887][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 194.236561][ T8935] FAULT_INJECTION: forcing a failure. [ 194.236561][ T8935] name failslab, interval 1, probability 0, space 0, times 0 [ 194.240729][ T8935] CPU: 1 UID: 0 PID: 8935 Comm: syz.2.755 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 194.240745][ T8935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 194.240751][ T8935] Call Trace: [ 194.240756][ T8935] [ 194.240760][ T8935] dump_stack_lvl+0x16c/0x1f0 [ 194.240780][ T8935] should_fail_ex+0x512/0x640 [ 194.240797][ T8935] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 194.240816][ T8935] should_failslab+0xc2/0x120 [ 194.240827][ T8935] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 194.240844][ T8935] ? __d_alloc+0x31/0xaa0 [ 194.240856][ T8935] __d_alloc+0x31/0xaa0 [ 194.240865][ T8935] ? __d_lookup+0x266/0x4a0 [ 194.240878][ T8935] d_alloc+0x4a/0x1e0 [ 194.240888][ T8935] lookup_one_qstr_excl_raw.part.0+0x96/0x160 [ 194.240901][ T8935] ? lookup_dcache+0x66/0x170 [ 194.240914][ T8935] lookup_one_qstr_excl+0x3e/0x120 [ 194.240927][ T8935] filename_create+0x1e7/0x4a0 [ 194.240942][ T8935] ? __pfx_filename_create+0x10/0x10 [ 194.240957][ T8935] ? find_held_lock+0x2b/0x80 [ 194.240973][ T8935] do_mkdirat+0xaa/0x3e0 [ 194.240990][ T8935] ? __pfx_do_mkdirat+0x10/0x10 [ 194.241006][ T8935] ? getname_flags.part.0+0x1c5/0x550 [ 194.241038][ T8935] __ia32_sys_mkdirat+0x82/0xb0 [ 194.241058][ T8935] __do_fast_syscall_32+0x7c/0x3a0 [ 194.241076][ T8935] do_fast_syscall_32+0x32/0x80 [ 194.241092][ T8935] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 194.241105][ T8935] RIP: 0023:0xf7fd5579 [ 194.241114][ T8935] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 194.241125][ T8935] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000128 [ 194.241135][ T8935] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 194.241142][ T8935] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 194.241148][ T8935] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 194.241154][ T8935] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 194.241160][ T8935] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 194.241174][ T8935] [ 194.844995][ T5960] Bluetooth: hci0: command 0x0c1a tx timeout [ 195.244800][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 195.425486][ T40] audit: type=1804 audit(1749149195.440:679): pid=8975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.769" name="/newroot/190/bus/bus" dev="overlay" ino=1017 res=1 errno=0 [ 195.431935][ T40] audit: type=1804 audit(1749149195.450:680): pid=8975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.769" name="/newroot/190/bus/bus" dev="overlay" ino=1017 res=1 errno=0 [ 195.724427][ T40] audit: type=1326 audit(1749149195.750:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.0.773" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 195.734378][ T40] audit: type=1326 audit(1749149195.750:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.0.773" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 195.741674][ T40] audit: type=1326 audit(1749149195.760:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.0.773" exe="/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 195.749415][ T40] audit: type=1326 audit(1749149195.760:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.0.773" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 195.756114][ T40] audit: type=1326 audit(1749149195.760:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.0.773" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 195.818048][ T8990] mmap: syz.0.773 (8990) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 196.284865][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 197.029417][ T9027] loop6: detected capacity change from 0 to 524287999 [ 197.048616][ T9027] netlink: 'syz.3.786': attribute type 12 has an invalid length. [ 197.289100][ T9030] __nla_validate_parse: 15 callbacks suppressed [ 197.289115][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.787'. [ 197.299656][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.787'. [ 197.304137][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.787'. [ 197.308728][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.787'. [ 197.312384][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.787'. [ 197.317677][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'. [ 197.320500][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'. [ 197.323305][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'. [ 197.324814][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 197.326448][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'. [ 197.330971][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'. [ 197.556986][ T40] kauditd_printk_skb: 52 callbacks suppressed [ 197.557023][ T40] audit: type=1326 audit(1749149197.590:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9044 comm="syz.0.794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 197.834193][ T9058] loop6: detected capacity change from 0 to 524287999 [ 197.841043][ T9058] netlink: 'syz.4.796': attribute type 12 has an invalid length. [ 198.364813][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 198.371765][ T9072] lo speed is unknown, defaulting to 1000 [ 198.400935][ T40] audit: type=1326 audit(1749149198.430:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9044 comm="syz.0.794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 198.525632][ T9081] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 199.120741][ T9111] FAULT_INJECTION: forcing a failure. [ 199.120741][ T9111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.124957][ T9111] CPU: 1 UID: 0 PID: 9111 Comm: syz.4.812 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 199.124996][ T9111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 199.125004][ T9111] Call Trace: [ 199.125009][ T9111] [ 199.125013][ T9111] dump_stack_lvl+0x16c/0x1f0 [ 199.125033][ T9111] should_fail_ex+0x512/0x640 [ 199.125053][ T9111] _copy_to_user+0x32/0xd0 [ 199.125064][ T9111] simple_read_from_buffer+0xcb/0x170 [ 199.125080][ T9111] proc_fail_nth_read+0x197/0x270 [ 199.125094][ T9111] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 199.125108][ T9111] ? rw_verify_area+0xcf/0x680 [ 199.125123][ T9111] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 199.125135][ T9111] vfs_read+0x1e1/0xc60 [ 199.125151][ T9111] ? fdget_pos+0x2a2/0x370 [ 199.125169][ T9111] ? __pfx_vfs_read+0x10/0x10 [ 199.125183][ T9111] ? find_held_lock+0x2b/0x80 [ 199.125198][ T9111] ? __fget_files+0x20e/0x3c0 [ 199.125217][ T9111] ksys_read+0x12a/0x250 [ 199.125232][ T9111] ? __pfx_ksys_read+0x10/0x10 [ 199.125253][ T9111] ? rcu_is_watching+0x12/0xc0 [ 199.125266][ T9111] __do_fast_syscall_32+0x7c/0x3a0 [ 199.125283][ T9111] do_fast_syscall_32+0x32/0x80 [ 199.125299][ T9111] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 199.125313][ T9111] RIP: 0023:0xf7f24579 [ 199.125322][ T9111] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 199.125333][ T9111] RSP: 002b:00000000f5004590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 199.125343][ T9111] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f5004620 [ 199.125350][ T9111] RDX: 000000000000000f RSI: 00000000f73b2ff4 RDI: 0000000000000000 [ 199.125356][ T9111] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 199.125362][ T9111] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 199.125368][ T9111] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 199.125386][ T9111] [ 199.387453][ T9119] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 199.404898][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 199.664861][ T6021] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 199.709720][ T9131] loop6: detected capacity change from 0 to 524287999 [ 199.731813][ T9131] netlink: 'syz.0.820': attribute type 12 has an invalid length. [ 199.826017][ T6021] usb 7-1: config 0 has an invalid interface number: 198 but max is 0 [ 199.828616][ T6021] usb 7-1: config 0 has no interface number 0 [ 199.830475][ T6021] usb 7-1: config 0 interface 198 altsetting 8 endpoint 0x4 has invalid maxpacket 64, setting to 8 [ 199.833668][ T6021] usb 7-1: config 0 interface 198 altsetting 8 endpoint 0x86 is Bulk; changing to Interrupt [ 199.837521][ T6021] usb 7-1: config 0 interface 198 has no altsetting 0 [ 199.839688][ T6021] usb 7-1: New USB device found, idVendor=1b3d, idProduct=0138, bcdDevice=74.e6 [ 199.842395][ T6021] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.848275][ T6021] usb 7-1: config 0 descriptor?? [ 199.851517][ T9121] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 199.853802][ T9121] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 200.078287][ T6021] usb 7-1: string descriptor 0 read error: -71 [ 200.083457][ T6021] ftdi_sio 7-1:0.198: FTDI USB Serial Device converter detected [ 200.091201][ T6021] ftdi_sio ttyUSB0: unknown device type: 0x74e6 [ 200.097208][ T6021] usb 7-1: USB disconnect, device number 9 [ 200.106536][ T6021] ftdi_sio 7-1:0.198: device disconnected [ 200.376651][ T9136] wireguard0: entered promiscuous mode [ 200.379741][ T9136] wireguard0: entered allmulticast mode [ 200.399786][ T9143] netlink: 'syz.0.826': attribute type 1 has an invalid length. [ 200.444876][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 200.458111][ T9144] loop2: detected capacity change from 0 to 7 [ 200.462937][ T9013] Dev loop2: unable to read RDB block 7 [ 200.464851][ T9013] loop2: unable to read partition table [ 200.466908][ T9013] loop2: partition table beyond EOD, truncated [ 200.471134][ T9144] Dev loop2: unable to read RDB block 7 [ 200.473107][ T9144] loop2: unable to read partition table [ 200.475138][ T9144] loop2: partition table beyond EOD, truncated [ 200.477246][ T9144] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 200.616807][ T5359] Dev loop2: unable to read RDB block 7 [ 200.618613][ T5359] loop2: unable to read partition table [ 200.620459][ T5359] loop2: partition table beyond EOD, truncated [ 200.698773][ T9148] lo speed is unknown, defaulting to 1000 [ 200.703191][ T9148] lo speed is unknown, defaulting to 1000 [ 200.706031][ T9148] lo speed is unknown, defaulting to 1000 [ 200.739466][ T9148] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 200.775096][ T9148] lo speed is unknown, defaulting to 1000 [ 200.778727][ T9148] lo speed is unknown, defaulting to 1000 [ 200.781266][ T9148] lo speed is unknown, defaulting to 1000 [ 200.793195][ T9148] lo speed is unknown, defaulting to 1000 [ 200.834077][ T9161] netlink: 'syz.3.833': attribute type 3 has an invalid length. [ 200.874837][ T5359] Dev loop2: unable to read RDB block 7 [ 200.876622][ T5359] loop2: unable to read partition table [ 200.878583][ T5359] loop2: partition table beyond EOD, truncated [ 201.431548][ T9177] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 201.433691][ T9177] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 201.443314][ T9177] vhci_hcd vhci_hcd.0: Device attached [ 201.453270][ T9178] usbip_core: unknown command [ 201.457701][ T9178] vhci_hcd: unknown pdu 1433422097 [ 201.460940][ T9178] usbip_core: unknown command [ 201.464464][ T12] vhci_hcd: stop threads [ 201.466630][ T12] vhci_hcd: release socket [ 201.468636][ T12] vhci_hcd: disconnect device [ 201.484951][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 201.841902][ T9181] SET target dimension over the limit! [ 202.063156][ T9189] bridge_slave_1: left allmulticast mode [ 202.065884][ T9189] bridge_slave_1: left promiscuous mode [ 202.071855][ T9189] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.085188][ T9189] bridge_slave_0: left allmulticast mode [ 202.087871][ T9189] bridge_slave_0: left promiscuous mode [ 202.091957][ T9189] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.121221][ T9192] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 202.123341][ T9192] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 202.129887][ T9192] vhci_hcd vhci_hcd.0: Device attached [ 202.130389][ T9196] FAULT_INJECTION: forcing a failure. [ 202.130389][ T9196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.133345][ T9192] FAULT_INJECTION: forcing a failure. [ 202.133345][ T9192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.136108][ T9196] CPU: 0 UID: 0 PID: 9196 Comm: syz.3.842 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 202.136143][ T9196] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 202.136151][ T9196] Call Trace: [ 202.136155][ T9196] [ 202.136160][ T9196] dump_stack_lvl+0x16c/0x1f0 [ 202.136184][ T9196] should_fail_ex+0x512/0x640 [ 202.136204][ T9196] _copy_from_iter+0x29f/0x16f0 [ 202.136216][ T9196] ? __alloc_skb+0x200/0x380 [ 202.136232][ T9196] ? __pfx__copy_from_iter+0x10/0x10 [ 202.136243][ T9196] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 202.136266][ T9196] netlink_sendmsg+0x829/0xdd0 [ 202.136279][ T9196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.136291][ T9196] ? __import_iovec+0x1dd/0x650 [ 202.136305][ T9196] ____sys_sendmsg+0xa95/0xc70 [ 202.136318][ T9196] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.136328][ T9196] ? get_compat_msghdr+0x11a/0x170 [ 202.136351][ T9196] ___sys_sendmsg+0x134/0x1d0 [ 202.136367][ T9196] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.136389][ T9196] ? find_held_lock+0x2b/0x80 [ 202.136409][ T9196] __sys_sendmsg+0x16d/0x220 [ 202.136424][ T9196] ? __pfx___sys_sendmsg+0x10/0x10 [ 202.136446][ T9196] ? rcu_is_watching+0x12/0xc0 [ 202.136459][ T9196] __do_fast_syscall_32+0x7c/0x3a0 [ 202.136476][ T9196] do_fast_syscall_32+0x32/0x80 [ 202.136492][ T9196] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.136505][ T9196] RIP: 0023:0xf702e579 [ 202.136514][ T9196] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 202.136525][ T9196] RSP: 002b:00000000f501e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 202.136535][ T9196] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 202.136542][ T9196] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.136548][ T9196] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 202.136554][ T9196] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 202.136560][ T9196] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.136573][ T9196] [ 202.221028][ T9192] CPU: 2 UID: 0 PID: 9192 Comm: syz.0.843 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 202.221045][ T9192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 202.221052][ T9192] Call Trace: [ 202.221056][ T9192] [ 202.221061][ T9192] dump_stack_lvl+0x16c/0x1f0 [ 202.221081][ T9192] should_fail_ex+0x512/0x640 [ 202.221100][ T9192] _copy_from_iter+0x29f/0x16f0 [ 202.221114][ T9192] ? __pfx__copy_from_iter+0x10/0x10 [ 202.221130][ T9192] skb_copy_datagram_from_iter+0x124/0x740 [ 202.221149][ T9192] ? unix_scm_to_skb+0x241/0x520 [ 202.221164][ T9192] unix_stream_sendmsg+0x4af/0x11d0 [ 202.221185][ T9192] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 202.221200][ T9192] ? __pfx_aa_sk_perm+0x10/0x10 [ 202.221219][ T9192] sock_write_iter+0x4ff/0x5b0 [ 202.221231][ T9192] ? __pfx_sock_write_iter+0x10/0x10 [ 202.221248][ T9192] ? __lock_acquire+0x622/0x1c90 [ 202.221264][ T9192] do_iter_readv_writev+0x654/0x950 [ 202.221281][ T9192] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 202.221298][ T9192] ? bpf_lsm_file_permission+0x9/0x10 [ 202.221311][ T9192] ? security_file_permission+0x71/0x210 [ 202.221326][ T9192] ? rw_verify_area+0xcf/0x680 [ 202.221342][ T9192] vfs_writev+0x35f/0xde0 [ 202.221360][ T9192] ? __pfx_vfs_writev+0x10/0x10 [ 202.221375][ T9192] ? find_held_lock+0x2b/0x80 [ 202.221394][ T9192] ? __fget_files+0x20e/0x3c0 [ 202.221408][ T9192] ? __fget_files+0x160/0x3c0 [ 202.221426][ T9192] ? do_writev+0x28c/0x340 [ 202.221439][ T9192] do_writev+0x28c/0x340 [ 202.221454][ T9192] ? __pfx_do_writev+0x10/0x10 [ 202.221470][ T9192] ? rcu_is_watching+0x12/0xc0 [ 202.221483][ T9192] __do_fast_syscall_32+0x7c/0x3a0 [ 202.221500][ T9192] do_fast_syscall_32+0x32/0x80 [ 202.221516][ T9192] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.221530][ T9192] RIP: 0023:0xf710e579 [ 202.221538][ T9192] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 202.221549][ T9192] RSP: 002b:00000000f50fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000092 [ 202.221560][ T9192] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000c80 [ 202.221566][ T9192] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.221573][ T9192] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 202.221578][ T9192] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 202.221584][ T9192] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.221597][ T9192] [ 202.223122][ T9193] vhci_hcd: connection closed [ 202.303931][ T1139] vhci_hcd: stop threads [ 202.311877][ T1139] vhci_hcd: release socket [ 202.314049][ T1139] vhci_hcd: disconnect device [ 202.365884][ T29] vhci_hcd: vhci_device speed not set [ 202.534860][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 202.752983][ T9199] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 202.755417][ T9199] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 202.772994][ T9201] support for cryptoloop has been removed. Use dm-crypt instead. [ 203.044577][ T9214] __nla_validate_parse: 33 callbacks suppressed [ 203.044589][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'. [ 203.052145][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'. [ 203.055715][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'. [ 203.062789][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'. [ 203.067899][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'. [ 203.564977][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 203.773798][ T9218] netlink: 'syz.0.851': attribute type 3 has an invalid length. [ 203.871902][ T9222] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 203.874649][ T9222] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 203.881285][ T9222] vhci_hcd vhci_hcd.0: Device attached [ 203.901062][ T9225] vhci_hcd: connection closed [ 203.901245][ T1057] vhci_hcd: stop threads [ 203.913312][ T1057] vhci_hcd: release socket [ 203.921551][ T1057] vhci_hcd: disconnect device [ 204.028636][ T9230] loop6: detected capacity change from 0 to 524287999 [ 204.039470][ T9230] netlink: 'syz.0.852': attribute type 12 has an invalid length. [ 204.198060][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.856'. [ 204.614800][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 204.954869][ T6182] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 205.111510][ T9235] orangefs_mount: mount request failed with -4 [ 205.117007][ T6182] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.120439][ T6182] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.123422][ T6182] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.127630][ T6182] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.130679][ T6182] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.135974][ T6182] usb 5-1: config 0 descriptor?? [ 205.206659][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.862'. [ 205.209470][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.862'. [ 205.212261][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.862'. [ 205.215498][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.862'. [ 205.339250][ T9252] sctp: [Deprecated]: syz.3.863 (pid 9252) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.339250][ T9252] Use struct sctp_sack_info instead [ 205.346425][ T9252] sctp: [Deprecated]: syz.3.863 (pid 9252) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.346425][ T9252] Use struct sctp_sack_info instead [ 205.436666][ T9257] overlay: Bad value for 'workdir' [ 205.555346][ T9247] netlink: 'syz.0.861': attribute type 10 has an invalid length. [ 205.559128][ T9247] batman_adv: batadv0: Adding interface: wlan0 [ 205.561781][ T9247] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.573865][ T9247] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 205.581479][ T6182] plantronics 0003:047F:FFFF.0005: unbalanced collection at end of report description [ 205.584456][ T6182] plantronics 0003:047F:FFFF.0005: parse failed [ 205.605483][ T6182] plantronics 0003:047F:FFFF.0005: probe with driver plantronics failed with error -22 [ 205.644857][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 205.728874][ T9267] loop6: detected capacity change from 0 to 524287999 [ 205.774707][ T9267] netlink: 'syz.4.869': attribute type 12 has an invalid length. [ 206.684893][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 206.902345][ T9273] orangefs_mount: mount request failed with -4 [ 207.724885][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 207.789251][ T1328] usb 5-1: USB disconnect, device number 6 [ 207.964352][ T9317] loop6: detected capacity change from 0 to 524287999 [ 207.973297][ T9317] netlink: 'syz.3.879': attribute type 12 has an invalid length. [ 208.400340][ T9326] __nla_validate_parse: 7 callbacks suppressed [ 208.400352][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.886'. [ 208.405412][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.886'. [ 208.408370][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.886'. [ 208.774824][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 209.557116][ T9350] Trying to write to read-only block-device nullb0 [ 209.814818][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 209.867230][ T9365] FAULT_INJECTION: forcing a failure. [ 209.867230][ T9365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.871450][ T9365] CPU: 2 UID: 0 PID: 9365 Comm: syz.3.898 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 209.871466][ T9365] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 209.871473][ T9365] Call Trace: [ 209.871478][ T9365] [ 209.871482][ T9365] dump_stack_lvl+0x16c/0x1f0 [ 209.871502][ T9365] should_fail_ex+0x512/0x640 [ 209.871521][ T9365] _copy_from_user+0x2e/0xd0 [ 209.871533][ T9365] kstrtouint_from_user+0xd6/0x1d0 [ 209.871547][ T9365] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 209.871561][ T9365] ? __lock_acquire+0xb8a/0x1c90 [ 209.871583][ T9365] proc_fail_nth_write+0x83/0x250 [ 209.871598][ T9365] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 209.871615][ T9365] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 209.871627][ T9365] vfs_write+0x2a0/0x1150 [ 209.871647][ T9365] ? __pfx_vfs_write+0x10/0x10 [ 209.871661][ T9365] ? find_held_lock+0x2b/0x80 [ 209.871676][ T9365] ? __fget_files+0x20e/0x3c0 [ 209.871696][ T9365] ksys_write+0x12a/0x250 [ 209.871711][ T9365] ? __pfx_ksys_write+0x10/0x10 [ 209.871728][ T9365] ? rcu_is_watching+0x12/0xc0 [ 209.871742][ T9365] __do_fast_syscall_32+0x7c/0x3a0 [ 209.871760][ T9365] do_fast_syscall_32+0x32/0x80 [ 209.871775][ T9365] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 209.871789][ T9365] RIP: 0023:0xf702e579 [ 209.871798][ T9365] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 209.871809][ T9365] RSP: 002b:00000000f501e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 209.871819][ T9365] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f501e620 [ 209.871826][ T9365] RDX: 0000000000000001 RSI: 00000000f7392ff4 RDI: 0000000000000000 [ 209.871832][ T9365] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 209.871838][ T9365] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 209.871844][ T9365] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 209.871858][ T9365] [ 209.936031][ C2] vkms_vblank_simulate: vblank timer overrun [ 210.088932][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.901'. [ 210.092249][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.901'. [ 210.096013][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.901'. [ 210.249985][ T9380] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 210.639195][ T9389] siw: device registration error -23 [ 210.844814][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 211.005882][ T9403] FAULT_INJECTION: forcing a failure. [ 211.005882][ T9403] name failslab, interval 1, probability 0, space 0, times 0 [ 211.010023][ T9403] CPU: 0 UID: 0 PID: 9403 Comm: syz.2.910 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 211.010039][ T9403] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 211.010047][ T9403] Call Trace: [ 211.010052][ T9403] [ 211.010056][ T9403] dump_stack_lvl+0x16c/0x1f0 [ 211.010078][ T9403] should_fail_ex+0x512/0x640 [ 211.010096][ T9403] ? __kvmalloc_node_noprof+0x124/0x620 [ 211.010115][ T9403] should_failslab+0xc2/0x120 [ 211.010133][ T9403] __kvmalloc_node_noprof+0x137/0x620 [ 211.010151][ T9403] ? nf_hook_entries_grow+0x285/0x860 [ 211.010174][ T9403] ? nf_hook_entries_grow+0x285/0x860 [ 211.010190][ T9403] nf_hook_entries_grow+0x285/0x860 [ 211.010206][ T9403] ? nf_defrag_ipv4_enable+0x25/0x120 [ 211.010222][ T9403] __nf_register_net_hook+0x1cd/0x730 [ 211.010242][ T9403] nf_register_net_hook+0x109/0x160 [ 211.010260][ T9403] nf_register_net_hooks+0x5d/0xd0 [ 211.010279][ T9403] nf_defrag_ipv4_enable+0xb8/0x120 [ 211.010290][ T9403] nf_ct_netns_do_get+0x31d/0x620 [ 211.010309][ T9403] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 211.010328][ T9403] ? nft_validate_register_store+0xc0/0x1f0 [ 211.010347][ T9403] nf_ct_netns_get+0x39/0x150 [ 211.010365][ T9403] nft_ct_get_init+0x2ae/0x730 [ 211.010378][ T9403] nf_tables_newrule+0xe9b/0x28e0 [ 211.010394][ T9403] ? __pfx_nft_ct_get_init+0x10/0x10 [ 211.010410][ T9403] ? __pfx_nf_tables_newrule+0x10/0x10 [ 211.010432][ T9403] ? __nla_parse+0x40/0x60 [ 211.010447][ T9403] nfnetlink_rcv_batch+0x18ea/0x2330 [ 211.010469][ T9403] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 211.010486][ T9403] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 211.010503][ T9403] ? kmalloc_reserve+0x18b/0x2c0 [ 211.010514][ T9403] ? __alloc_skb+0x166/0x380 [ 211.010527][ T9403] ? netlink_alloc_large_skb+0x69/0x130 [ 211.010538][ T9403] ? netlink_sendmsg+0x6a1/0xdd0 [ 211.010572][ T9403] ? __nla_parse+0x40/0x60 [ 211.010587][ T9403] nfnetlink_rcv+0x3c1/0x430 [ 211.010600][ T9403] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 211.010615][ T9403] ? is_vmalloc_addr+0x86/0xa0 [ 211.010635][ T9403] netlink_unicast+0x53a/0x7f0 [ 211.010649][ T9403] ? __pfx_netlink_unicast+0x10/0x10 [ 211.010664][ T9403] netlink_sendmsg+0x8d1/0xdd0 [ 211.010679][ T9403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.010691][ T9403] ? __import_iovec+0x1dd/0x650 [ 211.010707][ T9403] ____sys_sendmsg+0xa95/0xc70 [ 211.010721][ T9403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.010732][ T9403] ? get_compat_msghdr+0x11a/0x170 [ 211.010757][ T9403] ___sys_sendmsg+0x134/0x1d0 [ 211.010774][ T9403] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.010799][ T9403] ? find_held_lock+0x2b/0x80 [ 211.010821][ T9403] __sys_sendmsg+0x16d/0x220 [ 211.010838][ T9403] ? __pfx___sys_sendmsg+0x10/0x10 [ 211.010861][ T9403] ? rcu_is_watching+0x12/0xc0 [ 211.010876][ T9403] __do_fast_syscall_32+0x7c/0x3a0 [ 211.010894][ T9403] do_fast_syscall_32+0x32/0x80 [ 211.010911][ T9403] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.010926][ T9403] RIP: 0023:0xf7fd5579 [ 211.010936][ T9403] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 211.010948][ T9403] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 211.010959][ T9403] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 211.010966][ T9403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 211.010972][ T9403] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 211.010979][ T9403] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 211.010985][ T9403] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.010999][ T9403] [ 211.884829][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 212.098594][ T9428] siw: device registration error -23 [ 212.265748][ T9432] netlink: 32 bytes leftover after parsing attributes in process `syz.4.917'. [ 212.271124][ T9432] binder: 9431:9432 ioctl c0306201 80000140 returned -14 [ 212.366571][ T40] audit: type=1326 audit(1749149441.400:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9433 comm="syz.2.918" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7fc00000 [ 212.390267][ T9439] IPv6: NLM_F_CREATE should be specified when creating new route [ 212.924961][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 213.155199][ T40] audit: type=1326 audit(1749149442.170:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9433 comm="syz.2.918" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7fc00000 [ 213.935911][ T40] audit: type=1326 audit(1749149442.970:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9469 comm="syz.0.929" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 213.974790][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 214.043169][ T9444] orangefs_mount: mount request failed with -4 [ 214.057802][ T9472] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 214.123789][ T9451] orangefs_mount: mount request failed with -4 [ 214.754868][ T40] audit: type=1326 audit(1749149443.770:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9469 comm="syz.0.929" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 214.787248][ T9483] bridge0: port 3(dummy0) entered disabled state [ 214.790600][ T9483] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.794590][ T9483] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.004825][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 215.361171][ T9499] loop6: detected capacity change from 0 to 524287999 [ 215.425922][ T9500] netlink: 'syz.2.937': attribute type 12 has an invalid length. [ 215.889548][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.938'. [ 215.892978][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.938'. [ 215.896035][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.938'. [ 215.899393][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.938'. [ 215.902164][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.938'. [ 216.047772][ T9507] ip_vti0: Master is either lo or non-ether device [ 216.054825][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 216.246454][ T40] audit: type=1326 audit(1749149445.280:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.941" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 217.084788][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 217.131464][ T40] audit: type=1326 audit(1749149446.160:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.0.941" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 217.541379][ T9535] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 218.124849][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 218.846555][ T9559] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 218.850078][ T9559] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 218.945445][ T6016] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 219.019412][ T9552] syz.0.950 (9552) used greatest stack depth: 19048 bytes left [ 219.096242][ T6016] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 219.099420][ T6016] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 219.102342][ T6016] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.108177][ T6016] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 219.111269][ T6016] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.114433][ T6016] usb 7-1: Product: syz [ 219.118709][ T6016] usb 7-1: Manufacturer: syz [ 219.120670][ T6016] usb 7-1: SerialNumber: syz [ 219.128382][ T6016] hub 7-1:1.0: bad descriptor, ignoring hub [ 219.130955][ T6016] hub 7-1:1.0: probe with driver hub failed with error -5 [ 219.164828][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 219.175431][ T40] audit: type=1326 audit(1749149448.210:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9560 comm="syz.3.957" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7fc00000 [ 219.325740][ T9567] loop6: detected capacity change from 0 to 524287999 [ 219.387907][ T9568] netlink: 'syz.0.958': attribute type 12 has an invalid length. [ 219.407684][ T6016] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 219.807860][ T9569] block device autoloading is deprecated and will be removed. [ 219.850713][ T9574] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 219.939119][ T6016] usb 7-1: USB disconnect, device number 10 [ 219.945923][ T6016] usblp0: removed [ 219.985322][ T40] audit: type=1326 audit(1749149449.020:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9560 comm="syz.3.957" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7fc00000 [ 220.145229][ T9580] overlayfs: overlapping lowerdir path [ 220.214797][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 220.287760][ T9582] loop6: detected capacity change from 0 to 524287999 [ 220.356891][ T9583] netlink: 'syz.3.961': attribute type 12 has an invalid length. [ 221.028325][ T9594] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 221.031045][ T9594] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 221.034484][ T9594] vhci_hcd vhci_hcd.0: Device attached [ 221.244833][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 221.294589][ T40] audit: type=1326 audit(1749149450.320:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.0.968" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 221.354834][ T6007] usb 46-1: SetAddress Request (2) to port 0 [ 221.872464][ T6007] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 221.875673][ T9595] vhci_hcd: connection closed [ 221.888914][ T1057] vhci_hcd: stop threads [ 221.891975][ T1057] vhci_hcd: release socket [ 221.893459][ T1057] vhci_hcd: disconnect device [ 221.896498][ T6007] usb 46-1: enqueue for inactive port 0 [ 222.086677][ T40] audit: type=1326 audit(1749149451.120:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.2.969" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7fc00000 [ 222.109093][ T40] audit: type=1326 audit(1749149451.140:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9601 comm="syz.0.968" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 222.268392][ T9615] ieee802154 phy0 wpan0: encryption failed: -22 [ 222.294789][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 222.305404][ T6007] usb usb46-port1: attempt power cycle [ 222.760068][ T9615] netlink: 'syz.0.970': attribute type 23 has an invalid length. [ 222.906723][ T6007] usb usb46-port1: unable to enumerate USB device [ 222.956286][ T40] audit: type=1326 audit(1749149451.980:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.2.969" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7fc00000 [ 223.004902][ T6021] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 223.168842][ T6021] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 223.175267][ T6021] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 223.181001][ T6021] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.187568][ T6021] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 223.190440][ T6021] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.192818][ T6021] usb 8-1: Product: syz [ 223.194096][ T6021] usb 8-1: Manufacturer: syz [ 223.195727][ T6021] usb 8-1: SerialNumber: syz [ 223.205966][ T6021] hub 8-1:1.0: bad descriptor, ignoring hub [ 223.208160][ T40] audit: type=1326 audit(1749149452.240:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.2.977" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7fc00000 [ 223.208925][ T6021] hub 8-1:1.0: probe with driver hub failed with error -5 [ 223.324840][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 224.082647][ T40] audit: type=1326 audit(1749149453.110:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.2.977" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7fc00000 [ 224.089857][ T40] audit: type=1326 audit(1749149453.110:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.2.977" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd5579 code=0x7fc00000 [ 224.096988][ T40] audit: type=1326 audit(1749149453.110:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.2.977" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7fc00000 [ 224.140708][ T6021] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 224.175026][ T6021] usb 8-1: USB disconnect, device number 3 [ 224.180493][ T6021] usblp0: removed [ 224.212745][ T9644] ubi0: attaching mtd0 [ 224.218299][ T9644] ubi0: scanning is finished [ 224.220350][ T9644] ubi0: empty MTD device detected [ 224.296695][ T9644] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 224.299293][ T9644] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 224.302003][ T9644] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 224.306259][ T9644] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 224.311686][ T9644] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 224.314412][ T9644] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 224.319792][ T9644] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2408920759 [ 224.323904][ T9644] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 224.333180][ T9649] ubi0: background thread "ubi_bgt0d" started, PID 9649 [ 224.339196][ T9648] ubi0: detaching mtd0 [ 224.344526][ T9648] ubi0: mtd0 is detached [ 224.364861][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 225.119741][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.987'. [ 225.122699][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.987'. [ 225.126453][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.987'. [ 225.129701][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.987'. [ 225.133147][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.987'. [ 225.357899][ T9681] FAULT_INJECTION: forcing a failure. [ 225.357899][ T9681] name failslab, interval 1, probability 0, space 0, times 0 [ 225.362028][ T9681] CPU: 0 UID: 0 PID: 9681 Comm: syz.2.990 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 225.362044][ T9681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 225.362052][ T9681] Call Trace: [ 225.362056][ T9681] [ 225.362061][ T9681] dump_stack_lvl+0x16c/0x1f0 [ 225.362097][ T9681] should_fail_ex+0x512/0x640 [ 225.362120][ T9681] ? lockdep_hardirqs_on+0x7c/0x110 [ 225.362137][ T9681] should_failslab+0xc2/0x120 [ 225.362148][ T9681] __kmalloc_cache_noprof+0x6a/0x3e0 [ 225.362164][ T9681] ? preempt_schedule_common+0x44/0xc0 [ 225.362178][ T9681] ? async_schedule_node_domain+0x54/0x120 [ 225.362193][ T9681] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 225.362213][ T9681] async_schedule_node_domain+0x54/0x120 [ 225.362227][ T9681] dev_cache_fw_image+0x38e/0x490 [ 225.362244][ T9681] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 225.362261][ T9681] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 225.362276][ T9681] dpm_for_each_dev+0x5a/0xb0 [ 225.362291][ T9681] fw_pm_notify+0x81/0x150 [ 225.362304][ T9681] notifier_call_chain+0xbc/0x410 [ 225.362316][ T9681] ? __pfx_fw_pm_notify+0x10/0x10 [ 225.362332][ T9681] blocking_notifier_call_chain_robust+0xc8/0x160 [ 225.362347][ T9681] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 225.362362][ T9681] ? do_raw_spin_unlock+0x172/0x230 [ 225.362382][ T9681] pm_notifier_call_chain_robust+0x27/0x60 [ 225.362398][ T9681] snapshot_open+0x189/0x2b0 [ 225.362411][ T9681] ? __pfx_snapshot_open+0x10/0x10 [ 225.362424][ T9681] misc_open+0x35a/0x420 [ 225.362439][ T9681] ? __pfx_misc_open+0x10/0x10 [ 225.362453][ T9681] chrdev_open+0x234/0x6a0 [ 225.362463][ T9681] ? __pfx_apparmor_file_open+0x10/0x10 [ 225.362478][ T9681] ? __pfx_chrdev_open+0x10/0x10 [ 225.362489][ T9681] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 225.362507][ T9681] do_dentry_open+0x741/0x1c10 [ 225.362524][ T9681] ? __pfx_chrdev_open+0x10/0x10 [ 225.362537][ T9681] vfs_open+0x82/0x3f0 [ 225.362551][ T9681] path_openat+0x1de4/0x2cb0 [ 225.362573][ T9681] ? __pfx_path_openat+0x10/0x10 [ 225.362593][ T9681] do_filp_open+0x20b/0x470 [ 225.362609][ T9681] ? __pfx_do_filp_open+0x10/0x10 [ 225.362636][ T9681] ? _raw_spin_unlock+0x28/0x50 [ 225.362649][ T9681] ? alloc_fd+0x471/0x7d0 [ 225.362668][ T9681] do_sys_openat2+0x11b/0x1d0 [ 225.362681][ T9681] ? __pfx_do_sys_openat2+0x10/0x10 [ 225.362695][ T9681] ? __fget_files+0x20e/0x3c0 [ 225.362708][ T9681] ? handle_mm_fault+0x200/0xd10 [ 225.362726][ T9681] __ia32_compat_sys_openat+0x16d/0x210 [ 225.362740][ T9681] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 225.362753][ T9681] ? ksys_write+0x1ac/0x250 [ 225.362771][ T9681] ? rcu_is_watching+0x12/0xc0 [ 225.362784][ T9681] __do_fast_syscall_32+0x7c/0x3a0 [ 225.362801][ T9681] do_fast_syscall_32+0x32/0x80 [ 225.362817][ T9681] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.362831][ T9681] RIP: 0023:0xf7fd5579 [ 225.362841][ T9681] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 225.362852][ T9681] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 225.362862][ T9681] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800002c0 [ 225.362869][ T9681] RDX: 0000000000007e00 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.362875][ T9681] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 225.362881][ T9681] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 225.362887][ T9681] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.362901][ T9681] [ 225.364114][ T9681] [ 225.454799][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 225.459615][ T9681] ============================================ [ 225.459622][ T9681] WARNING: possible recursive locking detected [ 225.459627][ T9681] 6.15.0-syzkaller-12141-gec7714e49479 #0 Not tainted [ 225.459634][ T9681] -------------------------------------------- [ 225.459637][ T9681] syz.2.990/9681 is trying to acquire lock: [ 225.459643][ T9681] ffffffff8f3166c8 (fw_lock){+.+.}-{4:4}, at: assign_fw+0x4e/0x640 [ 225.459675][ T9681] [ 225.459675][ T9681] but task is already holding lock: [ 225.459679][ T9681] ffffffff8f3166c8 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150 [ 225.459703][ T9681] [ 225.459703][ T9681] other info that might help us debug this: [ 225.459707][ T9681] Possible unsafe locking scenario: [ 225.459707][ T9681] [ 225.459710][ T9681] CPU0 [ 225.459712][ T9681] ---- [ 225.459715][ T9681] lock(fw_lock); [ 225.459722][ T9681] lock(fw_lock); [ 225.459729][ T9681] [ 225.459729][ T9681] *** DEADLOCK *** [ 225.459729][ T9681] [ 225.459731][ T9681] May be due to missing lock nesting notation [ 225.459731][ T9681] [ 225.459734][ T9681] 5 locks held by syz.2.990/9681: [ 225.459740][ T9681] #0: ffffffff8f104528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 225.459769][ T9681] #1: ffffffff8e288028 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x87/0xa0 [ 225.459796][ T9681] #2: ffffffff8e2c87d0 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0xa8/0x160 [ 225.459825][ T9681] #3: ffffffff8f3166c8 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150 [ 225.524652][ T9681] #4: ffffffff8f3110c8 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x2d/0xb0 [ 225.527520][ T9681] [ 225.527520][ T9681] stack backtrace: [ 225.529368][ T9681] CPU: 0 UID: 0 PID: 9681 Comm: syz.2.990 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 225.529382][ T9681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 225.529389][ T9681] Call Trace: [ 225.529394][ T9681] [ 225.529398][ T9681] dump_stack_lvl+0x116/0x1f0 [ 225.529415][ T9681] print_deadlock_bug+0x1e9/0x240 [ 225.529429][ T9681] __lock_acquire+0x1106/0x1c90 [ 225.529443][ T9681] ? __kasan_slab_free+0x51/0x70 [ 225.529461][ T9681] lock_acquire+0x179/0x350 [ 225.529475][ T9681] ? assign_fw+0x4e/0x640 [ 225.529489][ T9681] ? __pfx___might_resched+0x10/0x10 [ 225.529500][ T9681] ? do_sys_openat2+0x11b/0x1d0 [ 225.529511][ T9681] ? __ia32_compat_sys_openat+0x16d/0x210 [ 225.529524][ T9681] ? __do_fast_syscall_32+0x7c/0x3a0 [ 225.529540][ T9681] __mutex_lock+0x199/0xb90 [ 225.529555][ T9681] ? assign_fw+0x4e/0x640 [ 225.529569][ T9681] ? assign_fw+0x4e/0x640 [ 225.529583][ T9681] ? __pfx___mutex_lock+0x10/0x10 [ 225.529599][ T9681] ? kasan_quarantine_put+0x10a/0x240 [ 225.529615][ T9681] ? lockdep_hardirqs_on+0x7c/0x110 [ 225.529629][ T9681] ? assign_fw+0x4e/0x640 [ 225.529642][ T9681] assign_fw+0x4e/0x640 [ 225.529655][ T9681] ? _request_firmware+0x957/0x1470 [ 225.529670][ T9681] _request_firmware+0x988/0x1470 [ 225.529687][ T9681] ? __pfx__request_firmware+0x10/0x10 [ 225.529702][ T9681] ? dump_stack_lvl+0x185/0x1f0 [ 225.529715][ T9681] ? lockdep_hardirqs_on+0x7c/0x110 [ 225.529730][ T9681] __async_dev_cache_fw_image+0xb1/0x340 [ 225.529746][ T9681] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 225.529762][ T9681] ? mark_held_locks+0x49/0x80 [ 225.529775][ T9681] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 225.529788][ T9681] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 225.529804][ T9681] async_schedule_node_domain+0xd4/0x120 [ 225.529817][ T9681] dev_cache_fw_image+0x38e/0x490 [ 225.529831][ T9681] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 225.529846][ T9681] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 225.529860][ T9681] dpm_for_each_dev+0x5a/0xb0 [ 225.529873][ T9681] fw_pm_notify+0x81/0x150 [ 225.529885][ T9681] notifier_call_chain+0xbc/0x410 [ 225.529898][ T9681] ? __pfx_fw_pm_notify+0x10/0x10 [ 225.529911][ T9681] blocking_notifier_call_chain_robust+0xc8/0x160 [ 225.529925][ T9681] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 225.529939][ T9681] ? do_raw_spin_unlock+0x172/0x230 [ 225.529956][ T9681] pm_notifier_call_chain_robust+0x27/0x60 [ 225.529971][ T9681] snapshot_open+0x189/0x2b0 [ 225.529984][ T9681] ? __pfx_snapshot_open+0x10/0x10 [ 225.529996][ T9681] misc_open+0x35a/0x420 [ 225.530010][ T9681] ? __pfx_misc_open+0x10/0x10 [ 225.530023][ T9681] chrdev_open+0x234/0x6a0 [ 225.530036][ T9681] ? __pfx_apparmor_file_open+0x10/0x10 [ 225.530055][ T9681] ? __pfx_chrdev_open+0x10/0x10 [ 225.530068][ T9681] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 225.530089][ T9681] do_dentry_open+0x741/0x1c10 [ 225.530113][ T9681] ? __pfx_chrdev_open+0x10/0x10 [ 225.530129][ T9681] vfs_open+0x82/0x3f0 [ 225.530146][ T9681] path_openat+0x1de4/0x2cb0 [ 225.530173][ T9681] ? __pfx_path_openat+0x10/0x10 [ 225.530199][ T9681] do_filp_open+0x20b/0x470 [ 225.530219][ T9681] ? __pfx_do_filp_open+0x10/0x10 [ 225.530239][ T9681] ? _raw_spin_unlock+0x28/0x50 [ 225.530252][ T9681] ? alloc_fd+0x471/0x7d0 [ 225.530267][ T9681] do_sys_openat2+0x11b/0x1d0 [ 225.530279][ T9681] ? __pfx_do_sys_openat2+0x10/0x10 [ 225.530291][ T9681] ? __fget_files+0x20e/0x3c0 [ 225.530305][ T9681] ? handle_mm_fault+0x200/0xd10 [ 225.530320][ T9681] __ia32_compat_sys_openat+0x16d/0x210 [ 225.530333][ T9681] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 225.530346][ T9681] ? ksys_write+0x1ac/0x250 [ 225.530362][ T9681] ? rcu_is_watching+0x12/0xc0 [ 225.530374][ T9681] __do_fast_syscall_32+0x7c/0x3a0 [ 225.530390][ T9681] do_fast_syscall_32+0x32/0x80 [ 225.530405][ T9681] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.530419][ T9681] RIP: 0023:0xf7fd5579 [ 225.530428][ T9681] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 225.530438][ T9681] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 225.530448][ T9681] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800002c0 [ 225.530455][ T9681] RDX: 0000000000007e00 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.530461][ T9681] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 225.530467][ T9681] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 225.530473][ T9681] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.530482][ T9681] [ 226.524823][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 227.564884][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 228.604833][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 229.644903][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 230.684887][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 231.724795][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 232.764905][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 233.804825][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 234.844865][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available VM DIAGNOSIS: 18:42:49 Registers: info registers vcpu 0 CPU#0 RAX=000000000000000d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8557aa85 RDI=ffffffff9ae69a00 RBP=ffffffff9ae699c0 RSP=ffffc90020be6ce0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=732d302e35312e36 R12=0000000000000000 R13=000000000000000d R14=ffffffff9ae699c0 R15=ffffffff8557aa20 RIP=ffffffff8557aaaf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097765000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f50f5fac CR3=000000006b93a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 868060ebf98fd066 5ea4308b47d6bc74 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cf0490904adcf978 12967fd593ab30f0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 487f9aaff7017c0e bfd914b126dd2e62 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8f018a63fda0f196 7bf0f9119cea7d35 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002300 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008900000089 a0abe694a1920fb2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008900000089 0000003400000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000009f9e0c58 03e9cefa9d741bee ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000170d580fd 000000899b8b2418 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 360d68c4405f3948 99db522debd0afef ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fa06d1076dcf9fe3 5ba397fcef6323b1 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000005939c4 RBX=0000000000000001 RCX=ffffffff8b7b4c69 RDX=ffffed1005666646 RSI=ffffffff8bf559e0 RDI=ffffffff81918691 RBP=ffffed1003b5c488 RSP=ffffc9000046fdf8 R8 =0000000000000000 R9 =ffffed1005666645 R10=ffff88802b33322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801dae2440 R14=ffffffff90881950 R15=0000000000000000 RIP=ffffffff8b7b37cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097865000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fc55c0 CR3=000000006b30d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=000000000000001f Opmask02=00000000ffff7fdf Opmask03=0000000001041000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055af7a749f20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055af7a7418a0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9c2dbf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a1481aa4a28675f0 737326d953f013f3 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737372f2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772f766564752f6e 75722f00646c6f2e 68637461772f7665 64752f6e75722f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d23b69d7d1f50683 000055aa208eccf6 0000000000000071 000000306962752f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001c1 6c2f007365007974 00736576616c7300 306d656d702f6b63 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c44422c43422c42 422c41422c39422c 38422c37422c3242 2c31422c30422c44 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 412c36412c35412c 34412c33412c3141 2c46392c45392c38 392c36392c45382c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 43382c41382c3938 2c38382c37382c36 382c35382c34382c 33382c32382c3138 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000002680cc RBX=0000000000000002 RCX=ffffffff8b7b4c69 RDX=ffffed1005686646 RSI=ffffffff8bf559e0 RDI=ffffffff81918691 RBP=ffffed1003b5c910 RSP=ffffc9000047fdf8 R8 =0000000000000000 R9 =ffffed1005686645 R10=ffff88802b43322b R11=0000000000000001 R12=0000000000000002 R13=ffff88801dae4880 R14=ffffffff90881950 R15=0000000000000000 RIP=ffffffff8b7b37cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097965000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000081000000 CR3=000000005f0d0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000023441c RBX=0000000000000003 RCX=ffffffff8b7b4c69 RDX=ffffed10056a6646 RSI=ffffffff8bf559e0 RDI=ffffffff81918691 RBP=ffffed10037e5000 RSP=ffffc9000048fdf8 R8 =0000000000000000 R9 =ffffed10056a6645 R10=ffff88802b53322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801bf28000 R14=ffffffff90881950 R15=0000000000000000 RIP=ffffffff8b7b37cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097a65000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080acf000 CR3=000000005f0d0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000